last executing test programs: 3m42.88957408s ago: executing program 1 (id=167): socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x10, &(0x7f0000000040)=0xfffffffc, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1b) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x183942, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r7, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000040)) r9 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r9, 0x4112, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x3d, 0x0, 0xfffffffffffffffd}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x1e, 0x0, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) mount$binder(0x0, 0x0, 0x0, 0x28, &(0x7f0000000400)=ANY=[@ANYBLOB='mJx=00000000000000000000,\x00']) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r11, &(0x7f0000bfd000/0x400000)=nil) 3m42.50094672s ago: executing program 1 (id=172): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mmap(&(0x7f0000f50000/0x1000)=nil, 0x1000, 0xb635773f05ebbee6, 0x8031, r0, 0x85494000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x2, '\x00', @p_u32=&(0x7f00000000c0)}}) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4890) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4054006}, 0x24008985) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xfe, 0x0, 0x0, 0xfffffff8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0xff, 0x40, 0x0, 0x0, 0x480000, 0x0, 0x2}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 64) ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f00000002c0)=[0x7, 0xc9, 0x8, 0x7, 0x0, 0x71b2, 0x1, 0xa2]) (async, rerun: 64) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000500)={"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"}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x74081, 0x0) syz_open_pts(r6, 0x408100) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) (async) mbind(&(0x7f0000e51000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000240)=0x4, 0x8, 0x0) (async) ioctl$TCSETS(r6, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) (async) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)=0xf9) (async, rerun: 32) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000001c0)=0xd) (async, rerun: 32) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0x1) (async) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000140)=0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 3m42.359170994s ago: executing program 1 (id=178): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtclass={0x5c, 0x28, 0x4, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0xffff, 0x7}, {0x0, 0xffff}, {0xb, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x5e, 0x7}}, @TCA_RATE={0x6, 0x5, {0x1, 0x7}}, @TCA_RATE={0x6, 0x5, {0x10, 0x7}}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x8a, 0x47}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000040)={0x1}) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') pread64(r3, &(0x7f0000000080)=""/237, 0xed, 0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000080)={{0x2, 0x4e21, @local}, {0x1, @remote}, 0x16, {0x2, 0x4e24, @rand_addr=0x64010101}, 'bridge0\x00'}) (async) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$getregset(0x4204, r4, 0x200, &(0x7f0000000100)={&(0x7f0000000780)=""/4096, 0x1000}) (async) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r6, 0x0, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12812, r7, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r7, 0x58, &(0x7f0000000180)}, 0x10) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x4000004, 0x20000001, 0x4, 0x5}, 0x1, r10}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1}}]}, 0x90}}, 0x0) getdents64(r3, &(0x7f0000000480)=""/220, 0xdc) 3m42.282817595s ago: executing program 1 (id=179): r0 = userfaultfd(0x801) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/2:0:0:0\x00', 0x80, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) readv(r5, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0xf3a, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r7, {0x7}}, './file1\x00'}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r8}, 0x38) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000779000/0x1000)=nil, 0x3000, 0x7, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 3m42.279855095s ago: executing program 1 (id=180): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aa85c3d28caaaaaaaaaaffffffffffff080045000002907800000000e000030004009078000000004542000800000001054b00a77f14350000000000000004000000"], 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aa85c3d28caaaaaaaaaaffffffffffff080045000002907800000000e000030004009078000000004542000800000001054b00a77f14350000000000000004000000"], 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_XSAVE(r5, 0x5000aea5, &(0x7f00000010c0)={[0x6, 0x5, 0x10001, 0x3, 0x593, 0x0, 0x4, 0x1, 0x65, 0xa1, 0x0, 0xe, 0x0, 0xc, 0x2, 0xd, 0x4, 0x400000, 0x926, 0x9, 0x4, 0x0, 0x8, 0x8, 0x6, 0x7, 0x3, 0x81, 0x8ba8, 0xfffffff9, 0xb1, 0x6, 0x4, 0x8001, 0xa5ff, 0x4, 0x8, 0x3, 0x0, 0xf00000, 0x4, 0xfb8, 0x7, 0xd, 0x101, 0x6, 0xc, 0x8, 0x4, 0x7fffffff, 0xbd5, 0x6, 0xfffffffb, 0x1b4, 0x1, 0x8, 0xd77, 0x7f, 0x5, 0xfffff1b7, 0x2, 0x1, 0x5, 0x1, 0x7, 0x80, 0x7, 0x40, 0x6, 0x4, 0x8001, 0xc8d, 0x68, 0x0, 0x53ba419d, 0x19bf, 0x6, 0x7fffffff, 0x100, 0x7, 0x7, 0x7, 0xfff, 0xa, 0x6, 0x1, 0xd596, 0x0, 0xb, 0x25, 0xc0, 0x3, 0x6, 0x6, 0x7, 0x1, 0x5, 0x3c, 0x9, 0xffff, 0xd, 0x2, 0x6, 0x3, 0x1, 0xfffffeff, 0x7, 0xaef3, 0x400006, 0x8, 0xfffffff8, 0x2, 0x7, 0x5, 0x5, 0x8, 0x200, 0x5, 0xc70e, 0xfffffff9, 0x3, 0x2c, 0xfffffffa, 0x8, 0x20, 0x100, 0x1000, 0x7, 0x1, 0x8, 0xd40, 0x3, 0x400, 0x1, 0x5, 0x8001, 0x37305dfb, 0xfffff94f, 0x3, 0x0, 0x6, 0x2, 0x400, 0xfffffffa, 0xa, 0x0, 0x6ee8a5b, 0x1, 0x0, 0x2, 0x7, 0x4daa229d, 0x101, 0x8, 0x4d, 0x16c0000, 0x8, 0x0, 0x7, 0x200, 0x3, 0x3b59, 0x9ce, 0xb, 0x3ff, 0xfffffff7, 0xb4, 0xfff, 0x5, 0x2, 0x8, 0x5, 0x4, 0x4, 0x9f6, 0x3, 0x6, 0x4, 0x4, 0x97db, 0x80000000, 0x7, 0x50, 0x80000001, 0x7f, 0x6, 0x4, 0x1, 0x401, 0x9, 0x0, 0x4, 0x2, 0xff, 0xffff, 0x8, 0x100, 0x8000, 0x2d, 0x4, 0x7, 0x6, 0x1, 0x2, 0x6, 0x9, 0xe05, 0x7fff, 0xffffff80, 0x1, 0x3, 0x8, 0x88, 0x0, 0x80000001, 0x0, 0x2, 0x6, 0xfffff115, 0x8, 0x1, 0x80e, 0x7, 0x1, 0x80000001, 0x2eb, 0x8, 0x38, 0x1255, 0x9, 0x100, 0xc13, 0x6, 0x80f, 0xfed, 0x8, 0x200, 0x2, 0x9, 0xa, 0x1ff0000, 0x702b, 0x0, 0x4, 0x60000, 0x6e3, 0x7, 0xffffffff, 0x2, 0xd, 0xf76, 0xfffffffa, 0x7fffffff, 0x37, 0x1, 0xf, 0x40, 0x402c, 0x2, 0xe, 0x6, 0x1, 0x800, 0x6, 0x6, 0x1, 0x4, 0x7, 0x5, 0x1, 0x1, 0x6, 0xffff72e7, 0xfffffe7a, 0x6, 0x8, 0x8, 0x1, 0x3e6, 0x6, 0x5, 0x8, 0x9, 0xdba, 0x6, 0x9b, 0x0, 0x1, 0x0, 0xfffffff7, 0x2, 0xa, 0x4, 0x7, 0x7, 0x8, 0x10001, 0xf, 0x1, 0x0, 0x7, 0x4, 0x3, 0x3, 0x4ced, 0x8, 0xce55, 0x679, 0xfffffffe, 0x19, 0x6, 0x7, 0x5, 0x5, 0x6, 0x0, 0x4b0, 0x80000000, 0x80000001, 0xfffffff7, 0x7, 0x2, 0x2, 0x0, 0x8, 0x1200, 0x101, 0x2ce, 0x4, 0x422, 0x1, 0x1, 0xfffffffb, 0x4000, 0x7, 0x4, 0xba9, 0x6, 0x7, 0x3, 0x2b, 0x9, 0x0, 0x1, 0x5, 0xfffffffd, 0x5, 0x5, 0x81, 0x2, 0x3, 0x5, 0x1, 0x0, 0x4, 0x3, 0x7, 0x3d, 0x4, 0x3, 0x0, 0xfffff79a, 0x5, 0x7, 0x2, 0x7ff, 0xf9, 0x6, 0x6, 0x49, 0x6, 0x8, 0x2, 0x0, 0x1, 0x2, 0x2, 0x4, 0x44a, 0x3, 0x5, 0x30, 0x1, 0xfffff62a, 0x5, 0x8, 0xb, 0x3, 0x6, 0x7, 0xfffffe00, 0x3, 0x8, 0x23, 0xb, 0x800, 0x3, 0x5, 0x707, 0x200, 0x5, 0x55c4, 0x6, 0xd, 0x2, 0x4, 0x1d0b4e71, 0x3, 0x7, 0x7, 0x5, 0x2, 0x3, 0x1, 0x101, 0x3, 0x5, 0x7, 0x7, 0x60b00, 0x3, 0x2, 0x7, 0x5, 0x630000, 0x7fff, 0x2, 0x8, 0x0, 0x4, 0x7, 0xc, 0x400, 0x5, 0x29ddbb0e, 0x4, 0x401, 0xbb6a, 0xffff8001, 0x8, 0x400, 0x153, 0x7fff, 0x1, 0x2, 0xf, 0x3, 0x9, 0x4, 0xfffffff6, 0x4, 0xffffffff, 0xa, 0x1, 0x6, 0x7ff, 0x5, 0x1c00, 0x401, 0x6, 0x2, 0x3, 0x0, 0x3, 0xfff, 0x18, 0x8, 0x6, 0xff, 0x9, 0xc, 0x2, 0x0, 0x81, 0x5, 0x4, 0x58003b5a, 0x6, 0x60e6, 0x7, 0x7, 0x9, 0x700, 0x8, 0x8, 0x1, 0x5, 0x4, 0x6, 0x3, 0xc00, 0xde, 0x0, 0xc3, 0x0, 0xfcd3, 0x48b795ac, 0xfffffffd, 0x40, 0xe, 0x8, 0x8, 0x6, 0x6, 0xfffffff9, 0x6104, 0x4, 0xfffffffd, 0x7fffffff, 0x0, 0xfffffffb, 0x7fffffff, 0xc6d, 0x7fff, 0x3, 0x999f, 0x8100000, 0x403, 0x6, 0x0, 0xedf, 0x99, 0x8a, 0xf7df, 0x0, 0x0, 0xe, 0x8000, 0x8000, 0x0, 0x3, 0x80, 0xdfa, 0x8, 0xc, 0x5, 0x6, 0x5, 0x1f, 0x0, 0x2, 0x9, 0xedd, 0x5, 0xfffffbff, 0x4d, 0x80000001, 0x7, 0x50000000, 0x8001, 0x7ff, 0x9, 0x4, 0x7, 0x0, 0xe8, 0x6, 0x90, 0x9, 0x3, 0x7, 0x7f, 0x42ff, 0xd9d, 0x4, 0x8, 0xfffffff9, 0x0, 0x4, 0x35, 0x1, 0x8, 0x400, 0x9, 0x9, 0x76e5, 0xf2, 0x7, 0xf, 0x2, 0xffffffff, 0x8630, 0x7, 0x8, 0x5, 0x9, 0x4, 0x9, 0x8, 0x4, 0x0, 0x1ff, 0x2, 0x1, 0x7, 0x0, 0x0, 0x6d, 0x9, 0x4, 0x9, 0xe, 0xa44, 0x7, 0x5, 0x8, 0x8, 0x1, 0x1c13, 0x8, 0x101, 0x7f, 0x7, 0x7, 0xfa, 0xff, 0x400, 0x6, 0x1, 0x40, 0x6, 0x1e96, 0x1, 0x800, 0xfffffffc, 0x7, 0x3, 0x2, 0x1, 0x7fffffff, 0x3, 0x455, 0x67a, 0x2, 0x0, 0xc, 0x5, 0x5, 0xb174, 0x800, 0x7, 0x18840, 0x9, 0x7ff, 0x5, 0x3, 0x7e, 0x81, 0xfffffffe, 0x7f, 0x3, 0x401, 0x1000, 0xff, 0x200, 0x1, 0x3, 0x4, 0x10001, 0x8, 0x7, 0x7, 0x13, 0x9, 0x7, 0xd1b, 0xb9, 0xa, 0x2, 0xc, 0x1, 0x9, 0xc, 0x3ff, 0x7, 0x2, 0x6, 0x384, 0x8, 0x0, 0x9, 0x3, 0x682, 0x0, 0x3ff, 0xa, 0x3, 0xa, 0x6, 0x4, 0x9, 0xffff0001, 0x8, 0x3, 0x5, 0x7fff, 0x9, 0xf, 0x1, 0xfffffffe, 0x8, 0x2, 0x34, 0x7, 0xfff, 0x9, 0x7, 0x5, 0xb, 0x8001, 0x2, 0x5a, 0x2f, 0x6, 0x7f, 0x6, 0x401, 0xa, 0x3, 0xd, 0xe, 0xffff, 0x114a, 0x0, 0x4, 0x0, 0x401, 0x0, 0x0, 0x7cf8c210, 0x3, 0x7, 0xd, 0x5, 0x2, 0x9, 0x5, 0x2f, 0x1, 0x7fff, 0x0, 0x6, 0x8, 0x7, 0x5, 0xffffffff, 0x9, 0x80, 0x10001, 0x2, 0x9, 0xd58d, 0x6, 0x7, 0x2, 0x3, 0x9, 0xf, 0x9, 0x7fff, 0x401, 0x3, 0x92, 0x7, 0x80000000, 0x3ff, 0x7, 0xff, 0x7, 0x8, 0x7, 0x2, 0x0, 0x9, 0x906c, 0x401, 0x200, 0x53, 0x1, 0x0, 0x4, 0x6, 0x4, 0x4, 0x9, 0x6, 0x101, 0x8, 0x6, 0x9a, 0x8, 0x6, 0x6, 0x7fff, 0x1, 0xffffff00, 0x100, 0xffffffff, 0x6, 0x2, 0x3ff, 0x1, 0x8001, 0x6, 0x0, 0xfffffff7, 0x1, 0x4, 0x1, 0x200, 0x80000001, 0x7fffffff, 0x1, 0x80000000, 0x1, 0xeb1, 0x5, 0x400, 0x8, 0xffff66a7, 0x40, 0x0, 0xf, 0x7, 0x4, 0x4, 0x5, 0x1, 0x9, 0x5802, 0x0, 0x545, 0xaed, 0x68ad, 0x1, 0x9, 0xb8, 0x8, 0xce, 0xcd55, 0x4, 0x9, 0x6, 0xffff, 0x1, 0x1000, 0x5, 0x8, 0x10, 0x0, 0x0, 0x1, 0x344, 0x1, 0x9, 0x8, 0x7fffffff, 0x7ff, 0x7, 0xffff, 0xfffffff7, 0x4, 0x8, 0x9, 0x6, 0x1, 0x3, 0x2, 0xfffffffe, 0xc, 0x40, 0x4, 0x3, 0x1000, 0x9, 0x100, 0x1, 0x8, 0xce61, 0x401, 0x2, 0x2, 0x9, 0x3, 0x3419, 0x81, 0x3ff, 0x8, 0x9, 0x10001, 0x2, 0xd8, 0x1ff, 0xace8, 0x7ff, 0x80000000, 0xffff, 0x2, 0xfffff51e, 0x9, 0x6, 0xfffffffc, 0x1, 0x2, 0x7, 0x0, 0x101, 0x10, 0x1, 0x101, 0x40, 0x3, 0x5, 0xfffffff7, 0x8, 0x400, 0x9, 0x60c, 0xc5f4, 0x3, 0x8, 0x7, 0x7f, 0xe, 0x8, 0x32, 0x1, 0x2, 0x7ff, 0x8001, 0x46a, 0x101, 0x8, 0x0, 0x7, 0x800, 0x2, 0x18, 0x6000, 0x0, 0xdb, 0x4, 0x2, 0x158, 0x2, 0x81, 0x80000000, 0x8000, 0x44d, 0x8, 0x8, 0x401, 0x8, 0x6, 0x2, 0x5, 0x2, 0x5, 0x7, 0xaa, 0x4, 0x1, 0x58f, 0x6, 0x3ff, 0xe90e, 0x0, 0x6, 0x58be, 0x3, 0xfffff55a, 0x1862, 0x0, 0x1ff, 0xf, 0xffff, 0x1, 0x8, 0x7, 0x8, 0x101, 0x6874, 0x3ff, 0x100, 0x3, 0x4, 0x1, 0x40000003, 0x0, 0x6, 0x1ff, 0x5af, 0x5, 0x1, 0x0, 0x1, 0x1, 0x40, 0x1, 0x7c89b94e, 0x6c, 0x0, 0x9, 0x25a8, 0x193, 0x1000, 0xd, 0x551, 0x9, 0x7, 0x4, 0x2809, 0x4, 0x1, 0x7, 0x1, 0x265a428c, 0x74, 0x1000, 0x8, 0x7, 0xaa, 0x7ff, 0xfffffffb]}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0x1, 0x3, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xc}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x4ee0, 0x0, 0x5, 0xb367}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) setsockopt$MRT_PIM(r6, 0x0, 0xcf, &(0x7f0000000000)=0x3, 0x4) (async) setsockopt$MRT_PIM(r6, 0x0, 0xcf, &(0x7f0000000000)=0x3, 0x4) 3m41.94858542s ago: executing program 1 (id=182): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="3958d82a1736", @loopback, @multicast, @private=0x1}}}}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xa, 0x7}, {}, {0xc, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x8cc, 0xc, 0xa, 0x882, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x884, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}, {0xa0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x9c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x97, 0x1, "0dcf234119a97452c4fe28edcfc62f679341581603573fc8518728b090b9550f47458c13ecde8adf0286cf42b8807ff52489195268cfff820f93e44f9c127b133dec5b6885c0f227b91d4dca3aef22587d514d3c6aeb904cfc5285918e12a84aa9a97cef1d5b2692cd3fd4b6cb2fd52bc4a8b8212ffa23f05530b8c51333e732a2c06f087220248f91b5da6d532b6370095d44"}]}]}, {0x2c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x5c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "d3da4d299a2bc71a7f8649051f332067429cf8938ee78bed165ffe79ff0730efcae8ca8f878a4a7bdc"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_KEY_END={0x1e4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xdf, 0x1, "7e31bdc283dccc650456610675f51e74966d5d8772bd6a352307335a7857384d5c35cfc0e1b80771bc618540bbd2ba68710322c54cdb1d2c615957b3a2a95ec0bfa8358082ba1565e1ccbe5b102c0b2c41897f867e6683b0ad86e45d270c3697ff6d0bb9542c4cc076292c54da4929f691058959c02488b49667a9606dd3835fd0817c205969f1b32434261a7f472279448b2c6b7f932df58519e17810668a6cd83a69f5a8fbc0d929d49d7c497be7607704cbff54dca682cfd0d60e5c11115a36350960de755a8ff304da8f69c0aba00405b5e3e54946b0ea2f63"}, @NFTA_DATA_VALUE={0xba, 0x1, "e75f5c6432b8e5e64c9d22020b12c307b760e480350331c0f8368a561e74a5bd410439216cd752c34cc6e03c36345d85f38481c0abc99c2b34bdf447ce0b21cbd636ae0e9a6dfbee78167b9f046a252ce714d246b1fabff23b57aac9d524223870853258302ab93edd6d94a0fe12e380b2d0ef9ed0844f5504243cac5d687618d1d67bd804f811c356d08e06a3fc54f325ffd9f928e318f04c54f0fd926b59f0b4f6df8a79ea9ce77d994c20dddcf580f4110ed633d6"}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @osf={{0x8}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x70, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5a, 0x1, "ed6a3ba5fccfd806fe26f9dce9bdbf53dcba02c10f63844e3772ef58002a5aa63adc3fd235ee4cff94f379a01be8b7256f4b99bf1e952067b648c91845e866e119fc8f020dbae8c1f4e71fc10a8f685d671b6449c335"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x4e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x38, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_DATA={0x130, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x79, 0x1, "94c8eb99b8119ee3b45d83f168d3f673203abdf2d4a34006e339d97b4046a12cba5d5ce8f7340a9de1070c82aae67d60ac7b761ed10ca62f45da8186c95d66de18bdcd6e26f5367d049659ec33e32d96d93a68d1c5eb17675c651f6052db84de5f203024c293bb116ae39da8411c10e8babdc07f5f"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x6c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x65, 0x1, "e42963d3d23b08621e4e6ea513644c3beebc36da9012c6fa093aa9724c2432cfb52b74ce0c86362d6e66467a25e34174d94388fa9a747265735edc5cea256512064fa6f25022b67706bd6f74b54c93124eae9967f5c9bda363208501d11b61862d"}]}, @NFTA_SET_ELEM_KEY={0x2f0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb9, 0x1, "ee87a23b030c9a78f5f6fb7e9c470767d525f9657c2eaaeac76bcce22b13b667cb01d582babad2ecfc1d1bd667c252b1156a8b5a1be81c9c4611363ad5d70942c37596c7fed3847391a96b1bbb7edb994ca359592fb6fd8158457312d5cb065f0dfa8ae83600e71ec54d48ae97562c9c016b0d3440c4f8c2f55a9fa7ac949be4736139beade0f3c66402dc0ebb6c6732e91dcea74965e306fd7c6444d79f0b9b0df27a3f4df674e35bb61699775cc3c1707e9ad6e1"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x73, 0x1, "0da97c7f0179a56419a8b4e24b43cb72225ef0c449f2954092f2cf249970fc77f138d68355094eb995582ceb7d3c514633507802667288155ab56963f39a595bb9e5ee572f52ad37cb6696570c23b82b137f43545e87c809e8bb4d32cea5e236d4c6914943b4dfa6a131b9e8895106"}, @NFTA_DATA_VALUE={0x93, 0x1, "138efac9e8c5e17b417622babb546867777183739f0dfc413fcabc09c8425a4e47a1e2d845eac1ad6545e500e9fa9a17f8761d111cf8bf0585fb9344501a384849819af8a3fbd451cf85e2181f2c0c04af95d055c879ba97e709bcbf70267ea42da39ea3cdab92fdf3afdb6c18531ef031dea0846245688adcd4085ac722608b73c46020cde1c96e5ec2619e3d8211"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x914}, 0x1, 0x0, 0x0, 0x4084}, 0x40b1) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="3958d82a1736", @loopback, @multicast, @private=0x1}}}}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xa, 0x7}, {}, {0xc, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x8cc, 0xc, 0xa, 0x882, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x884, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}, {0xa0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x9c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x97, 0x1, "0dcf234119a97452c4fe28edcfc62f679341581603573fc8518728b090b9550f47458c13ecde8adf0286cf42b8807ff52489195268cfff820f93e44f9c127b133dec5b6885c0f227b91d4dca3aef22587d514d3c6aeb904cfc5285918e12a84aa9a97cef1d5b2692cd3fd4b6cb2fd52bc4a8b8212ffa23f05530b8c51333e732a2c06f087220248f91b5da6d532b6370095d44"}]}]}, {0x2c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x5c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "d3da4d299a2bc71a7f8649051f332067429cf8938ee78bed165ffe79ff0730efcae8ca8f878a4a7bdc"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_KEY_END={0x1e4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xdf, 0x1, "7e31bdc283dccc650456610675f51e74966d5d8772bd6a352307335a7857384d5c35cfc0e1b80771bc618540bbd2ba68710322c54cdb1d2c615957b3a2a95ec0bfa8358082ba1565e1ccbe5b102c0b2c41897f867e6683b0ad86e45d270c3697ff6d0bb9542c4cc076292c54da4929f691058959c02488b49667a9606dd3835fd0817c205969f1b32434261a7f472279448b2c6b7f932df58519e17810668a6cd83a69f5a8fbc0d929d49d7c497be7607704cbff54dca682cfd0d60e5c11115a36350960de755a8ff304da8f69c0aba00405b5e3e54946b0ea2f63"}, @NFTA_DATA_VALUE={0xba, 0x1, "e75f5c6432b8e5e64c9d22020b12c307b760e480350331c0f8368a561e74a5bd410439216cd752c34cc6e03c36345d85f38481c0abc99c2b34bdf447ce0b21cbd636ae0e9a6dfbee78167b9f046a252ce714d246b1fabff23b57aac9d524223870853258302ab93edd6d94a0fe12e380b2d0ef9ed0844f5504243cac5d687618d1d67bd804f811c356d08e06a3fc54f325ffd9f928e318f04c54f0fd926b59f0b4f6df8a79ea9ce77d994c20dddcf580f4110ed633d6"}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @osf={{0x8}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x70, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5a, 0x1, "ed6a3ba5fccfd806fe26f9dce9bdbf53dcba02c10f63844e3772ef58002a5aa63adc3fd235ee4cff94f379a01be8b7256f4b99bf1e952067b648c91845e866e119fc8f020dbae8c1f4e71fc10a8f685d671b6449c335"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x4e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x38, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_DATA={0x130, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x79, 0x1, "94c8eb99b8119ee3b45d83f168d3f673203abdf2d4a34006e339d97b4046a12cba5d5ce8f7340a9de1070c82aae67d60ac7b761ed10ca62f45da8186c95d66de18bdcd6e26f5367d049659ec33e32d96d93a68d1c5eb17675c651f6052db84de5f203024c293bb116ae39da8411c10e8babdc07f5f"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x6c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x65, 0x1, "e42963d3d23b08621e4e6ea513644c3beebc36da9012c6fa093aa9724c2432cfb52b74ce0c86362d6e66467a25e34174d94388fa9a747265735edc5cea256512064fa6f25022b67706bd6f74b54c93124eae9967f5c9bda363208501d11b61862d"}]}, @NFTA_SET_ELEM_KEY={0x2f0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb9, 0x1, "ee87a23b030c9a78f5f6fb7e9c470767d525f9657c2eaaeac76bcce22b13b667cb01d582babad2ecfc1d1bd667c252b1156a8b5a1be81c9c4611363ad5d70942c37596c7fed3847391a96b1bbb7edb994ca359592fb6fd8158457312d5cb065f0dfa8ae83600e71ec54d48ae97562c9c016b0d3440c4f8c2f55a9fa7ac949be4736139beade0f3c66402dc0ebb6c6732e91dcea74965e306fd7c6444d79f0b9b0df27a3f4df674e35bb61699775cc3c1707e9ad6e1"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x73, 0x1, "0da97c7f0179a56419a8b4e24b43cb72225ef0c449f2954092f2cf249970fc77f138d68355094eb995582ceb7d3c514633507802667288155ab56963f39a595bb9e5ee572f52ad37cb6696570c23b82b137f43545e87c809e8bb4d32cea5e236d4c6914943b4dfa6a131b9e8895106"}, @NFTA_DATA_VALUE={0x93, 0x1, "138efac9e8c5e17b417622babb546867777183739f0dfc413fcabc09c8425a4e47a1e2d845eac1ad6545e500e9fa9a17f8761d111cf8bf0585fb9344501a384849819af8a3fbd451cf85e2181f2c0c04af95d055c879ba97e709bcbf70267ea42da39ea3cdab92fdf3afdb6c18531ef031dea0846245688adcd4085ac722608b73c46020cde1c96e5ec2619e3d8211"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x914}, 0x1, 0x0, 0x0, 0x4084}, 0x40b1) (async) 3m26.64694814s ago: executing program 32 (id=182): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="3958d82a1736", @loopback, @multicast, @private=0x1}}}}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xa, 0x7}, {}, {0xc, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x8cc, 0xc, 0xa, 0x882, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x884, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}, {0xa0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x9c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x97, 0x1, "0dcf234119a97452c4fe28edcfc62f679341581603573fc8518728b090b9550f47458c13ecde8adf0286cf42b8807ff52489195268cfff820f93e44f9c127b133dec5b6885c0f227b91d4dca3aef22587d514d3c6aeb904cfc5285918e12a84aa9a97cef1d5b2692cd3fd4b6cb2fd52bc4a8b8212ffa23f05530b8c51333e732a2c06f087220248f91b5da6d532b6370095d44"}]}]}, {0x2c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x5c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "d3da4d299a2bc71a7f8649051f332067429cf8938ee78bed165ffe79ff0730efcae8ca8f878a4a7bdc"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_KEY_END={0x1e4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xdf, 0x1, "7e31bdc283dccc650456610675f51e74966d5d8772bd6a352307335a7857384d5c35cfc0e1b80771bc618540bbd2ba68710322c54cdb1d2c615957b3a2a95ec0bfa8358082ba1565e1ccbe5b102c0b2c41897f867e6683b0ad86e45d270c3697ff6d0bb9542c4cc076292c54da4929f691058959c02488b49667a9606dd3835fd0817c205969f1b32434261a7f472279448b2c6b7f932df58519e17810668a6cd83a69f5a8fbc0d929d49d7c497be7607704cbff54dca682cfd0d60e5c11115a36350960de755a8ff304da8f69c0aba00405b5e3e54946b0ea2f63"}, @NFTA_DATA_VALUE={0xba, 0x1, "e75f5c6432b8e5e64c9d22020b12c307b760e480350331c0f8368a561e74a5bd410439216cd752c34cc6e03c36345d85f38481c0abc99c2b34bdf447ce0b21cbd636ae0e9a6dfbee78167b9f046a252ce714d246b1fabff23b57aac9d524223870853258302ab93edd6d94a0fe12e380b2d0ef9ed0844f5504243cac5d687618d1d67bd804f811c356d08e06a3fc54f325ffd9f928e318f04c54f0fd926b59f0b4f6df8a79ea9ce77d994c20dddcf580f4110ed633d6"}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @osf={{0x8}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x70, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5a, 0x1, "ed6a3ba5fccfd806fe26f9dce9bdbf53dcba02c10f63844e3772ef58002a5aa63adc3fd235ee4cff94f379a01be8b7256f4b99bf1e952067b648c91845e866e119fc8f020dbae8c1f4e71fc10a8f685d671b6449c335"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x4e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x38, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_DATA={0x130, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x79, 0x1, "94c8eb99b8119ee3b45d83f168d3f673203abdf2d4a34006e339d97b4046a12cba5d5ce8f7340a9de1070c82aae67d60ac7b761ed10ca62f45da8186c95d66de18bdcd6e26f5367d049659ec33e32d96d93a68d1c5eb17675c651f6052db84de5f203024c293bb116ae39da8411c10e8babdc07f5f"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x6c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x65, 0x1, "e42963d3d23b08621e4e6ea513644c3beebc36da9012c6fa093aa9724c2432cfb52b74ce0c86362d6e66467a25e34174d94388fa9a747265735edc5cea256512064fa6f25022b67706bd6f74b54c93124eae9967f5c9bda363208501d11b61862d"}]}, @NFTA_SET_ELEM_KEY={0x2f0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb9, 0x1, "ee87a23b030c9a78f5f6fb7e9c470767d525f9657c2eaaeac76bcce22b13b667cb01d582babad2ecfc1d1bd667c252b1156a8b5a1be81c9c4611363ad5d70942c37596c7fed3847391a96b1bbb7edb994ca359592fb6fd8158457312d5cb065f0dfa8ae83600e71ec54d48ae97562c9c016b0d3440c4f8c2f55a9fa7ac949be4736139beade0f3c66402dc0ebb6c6732e91dcea74965e306fd7c6444d79f0b9b0df27a3f4df674e35bb61699775cc3c1707e9ad6e1"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x73, 0x1, "0da97c7f0179a56419a8b4e24b43cb72225ef0c449f2954092f2cf249970fc77f138d68355094eb995582ceb7d3c514633507802667288155ab56963f39a595bb9e5ee572f52ad37cb6696570c23b82b137f43545e87c809e8bb4d32cea5e236d4c6914943b4dfa6a131b9e8895106"}, @NFTA_DATA_VALUE={0x93, 0x1, "138efac9e8c5e17b417622babb546867777183739f0dfc413fcabc09c8425a4e47a1e2d845eac1ad6545e500e9fa9a17f8761d111cf8bf0585fb9344501a384849819af8a3fbd451cf85e2181f2c0c04af95d055c879ba97e709bcbf70267ea42da39ea3cdab92fdf3afdb6c18531ef031dea0846245688adcd4085ac722608b73c46020cde1c96e5ec2619e3d8211"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x914}, 0x1, 0x0, 0x0, 0x4084}, 0x40b1) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="3958d82a1736", @loopback, @multicast, @private=0x1}}}}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xa, 0x7}, {}, {0xc, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x8cc, 0xc, 0xa, 0x882, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x884, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}, {0xa0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x9c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x97, 0x1, "0dcf234119a97452c4fe28edcfc62f679341581603573fc8518728b090b9550f47458c13ecde8adf0286cf42b8807ff52489195268cfff820f93e44f9c127b133dec5b6885c0f227b91d4dca3aef22587d514d3c6aeb904cfc5285918e12a84aa9a97cef1d5b2692cd3fd4b6cb2fd52bc4a8b8212ffa23f05530b8c51333e732a2c06f087220248f91b5da6d532b6370095d44"}]}]}, {0x2c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x5c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "d3da4d299a2bc71a7f8649051f332067429cf8938ee78bed165ffe79ff0730efcae8ca8f878a4a7bdc"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_KEY_END={0x1e4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xdf, 0x1, "7e31bdc283dccc650456610675f51e74966d5d8772bd6a352307335a7857384d5c35cfc0e1b80771bc618540bbd2ba68710322c54cdb1d2c615957b3a2a95ec0bfa8358082ba1565e1ccbe5b102c0b2c41897f867e6683b0ad86e45d270c3697ff6d0bb9542c4cc076292c54da4929f691058959c02488b49667a9606dd3835fd0817c205969f1b32434261a7f472279448b2c6b7f932df58519e17810668a6cd83a69f5a8fbc0d929d49d7c497be7607704cbff54dca682cfd0d60e5c11115a36350960de755a8ff304da8f69c0aba00405b5e3e54946b0ea2f63"}, @NFTA_DATA_VALUE={0xba, 0x1, "e75f5c6432b8e5e64c9d22020b12c307b760e480350331c0f8368a561e74a5bd410439216cd752c34cc6e03c36345d85f38481c0abc99c2b34bdf447ce0b21cbd636ae0e9a6dfbee78167b9f046a252ce714d246b1fabff23b57aac9d524223870853258302ab93edd6d94a0fe12e380b2d0ef9ed0844f5504243cac5d687618d1d67bd804f811c356d08e06a3fc54f325ffd9f928e318f04c54f0fd926b59f0b4f6df8a79ea9ce77d994c20dddcf580f4110ed633d6"}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @osf={{0x8}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x70, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5a, 0x1, "ed6a3ba5fccfd806fe26f9dce9bdbf53dcba02c10f63844e3772ef58002a5aa63adc3fd235ee4cff94f379a01be8b7256f4b99bf1e952067b648c91845e866e119fc8f020dbae8c1f4e71fc10a8f685d671b6449c335"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x4e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x38, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_DATA={0x130, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x79, 0x1, "94c8eb99b8119ee3b45d83f168d3f673203abdf2d4a34006e339d97b4046a12cba5d5ce8f7340a9de1070c82aae67d60ac7b761ed10ca62f45da8186c95d66de18bdcd6e26f5367d049659ec33e32d96d93a68d1c5eb17675c651f6052db84de5f203024c293bb116ae39da8411c10e8babdc07f5f"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x6c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x65, 0x1, "e42963d3d23b08621e4e6ea513644c3beebc36da9012c6fa093aa9724c2432cfb52b74ce0c86362d6e66467a25e34174d94388fa9a747265735edc5cea256512064fa6f25022b67706bd6f74b54c93124eae9967f5c9bda363208501d11b61862d"}]}, @NFTA_SET_ELEM_KEY={0x2f0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb9, 0x1, "ee87a23b030c9a78f5f6fb7e9c470767d525f9657c2eaaeac76bcce22b13b667cb01d582babad2ecfc1d1bd667c252b1156a8b5a1be81c9c4611363ad5d70942c37596c7fed3847391a96b1bbb7edb994ca359592fb6fd8158457312d5cb065f0dfa8ae83600e71ec54d48ae97562c9c016b0d3440c4f8c2f55a9fa7ac949be4736139beade0f3c66402dc0ebb6c6732e91dcea74965e306fd7c6444d79f0b9b0df27a3f4df674e35bb61699775cc3c1707e9ad6e1"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x73, 0x1, "0da97c7f0179a56419a8b4e24b43cb72225ef0c449f2954092f2cf249970fc77f138d68355094eb995582ceb7d3c514633507802667288155ab56963f39a595bb9e5ee572f52ad37cb6696570c23b82b137f43545e87c809e8bb4d32cea5e236d4c6914943b4dfa6a131b9e8895106"}, @NFTA_DATA_VALUE={0x93, 0x1, "138efac9e8c5e17b417622babb546867777183739f0dfc413fcabc09c8425a4e47a1e2d845eac1ad6545e500e9fa9a17f8761d111cf8bf0585fb9344501a384849819af8a3fbd451cf85e2181f2c0c04af95d055c879ba97e709bcbf70267ea42da39ea3cdab92fdf3afdb6c18531ef031dea0846245688adcd4085ac722608b73c46020cde1c96e5ec2619e3d8211"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x914}, 0x1, 0x0, 0x0, 0x4084}, 0x40b1) (async) 1m44.652438119s ago: executing program 2 (id=1941): socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x10003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0x0, 0xd, 0x4, "13ea57ffffffdfff018000000000000000000000000000088b0500", 0x39565559}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0x0, 0xd, 0x4, "13ea57ffffffdfff018000000000000000000000000000088b0500", 0x39565559}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00) mount(&(0x7f0000000b40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x220080a, 0x0) 1m44.471151503s ago: executing program 2 (id=1943): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="2e67450fc77eb7b9e60a00000f323e66460f38806fca48b8a1ae00000000000066410f3880200f21f835c00000000f23f8660f3881143126430f01c2440f01cb8080430000c0c03235010000000f3066b8cd008ee0", 0x55}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000001d40)={[0x0, 0x1, 0xef07, 0x1, 0x8001, 0x9, 0x67, 0x225561ec, 0x401, 0x100000000000000, 0x5, 0x4, 0x1000005, 0x5, 0x251, 0x20], 0x6000}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = syz_io_uring_setup(0x2d7b, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x4e22, 0x4000352a, 0x40, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0']) 1m43.999579588s ago: executing program 2 (id=1950): ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000b40)="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", 0x106}) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x90) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa"], 0x0) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77f0", 0x9, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1}}, 0x40) 1m43.290218309s ago: executing program 2 (id=1955): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}}, "341517c1b7df60c7"}}}}}, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(0xffffffffffffffff, r5, r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) syz_clone(0x1fa02000, 0x0, 0xfffffffffffffeab, 0x0, 0x0, 0x0) 1m43.169477422s ago: executing program 2 (id=1958): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000001d80)=0x7, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r3 = syz_io_uring_setup(0x1892, &(0x7f0000000440)={0x0, 0x9690, 0x4000, 0x3, 0x4317}, &(0x7f0000000100)=0x0, &(0x7f0000002500)=0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r6, 0x4b31, &(0x7f0000000580)) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x222}}) r7 = syz_io_uring_complete(r4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="040100001a0001000000000000000000fc010000000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000ff0000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e00fc0200"/188], 0x104}}, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x300) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f00000000c0)={0x9, r9, 0x5, {0x1, 0x81}, 0x8}, 0x1) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="24000000700039022abd7000fbdbdf2507000000", @ANYRES32=r2, @ANYBLOB="0c0001800600020008000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2404c0d0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000180)=0x4) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0xb, 0x200003, 0x801, 0x800004, 0x7}) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) r14 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r14, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000040)={'ip6gretap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x46}}) write$tun(r11, &(0x7f00000026c0)=ANY=[@ANYBLOB="2df1827dfa062833b165653288a81e008100230086dd690014808236813d1b39c6a906801f6c040000002cfffc0200ad1b1716b500000300000000000000000001fe8800000000000000000053b125e801227470257ef03bee48dbd7e3bbabb9f3f729ad98bcbfa69fb700000000000000071fffdd30a15ec97ebcdcd1", @ANYBLOB="944ce9642b87d1f589832bbfc4145fcde74577704e9bf89ff1caad8eb8762e48fc7328fcba4878ac8572685f2c5cc20b3e1559dd644a14f72bd13975ade4bda5edd52d260254f051a05eb2e8c7520b21979b660517ebb23b727eb370a5ff8d89e5797254b647d59c2270890e480465f06485cde6190085de29fc7df14c389cf27d6bfd548e3be42acab22f49ed951673ef5e4ce6d16f858bca97b05d4cb70fa3a2f25b5778445845c2e33aa35da5815689e8f4e623c5deab175b4689c02411844173e30335d721e8957fedc8f2704652830b395b55e5e4cc7f0a3a54d7958df79ecf8a5ebcd1141961d8e379b3b420dbacc49c571b488cd4267322f01a73a39fab8170c947378c490a0ddb4c9676937a2142c1a4", @ANYRES32=r13], 0x75) ioctl$VHOST_SET_VRING_BASE(r10, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r10, 0x4008af24, &(0x7f0000000040)={0x1}) mount$9p_tcp(&(0x7f0000000000), &(0x7f00000024c0)='./file0\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2]) 1m42.300003178s ago: executing program 2 (id=1962): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x346, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='uid']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x0, &(0x7f0000000400)) 1m41.911744268s ago: executing program 33 (id=1962): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x346, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='uid']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x0, &(0x7f0000000400)) 1m16.287893187s ago: executing program 0 (id=2118): request_key(&(0x7f0000005ac0)='pkcs7_test\x00', &(0x7f0000005b00)={'syz', 0x2}, &(0x7f0000005b40)='(\x94%)*^\x00', 0xffffffffffffffff) capset(&(0x7f0000000080)={0x19980330}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) (async) mount$bind(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x21a58d3, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40084146, &(0x7f0000000080)) 1m16.210329374s ago: executing program 0 (id=2121): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="18942aa98b58ff80bb0004000000000000002000000000dd000035c6f1c23bf24d62ba3a844665e5fb2f7763ba946de6d5cc634e75f4bbc66c2c0afe49f3ae6a1f220fd631158b938bc187c2cdf77125ac701ad2b3a7ce9603f912436674ada1e6ea27ae541ab7d710b35df2ebe43ff468149ad60debe9d83feaffc4ecd2dd510c72bc0c7b58a93604648c101018b9937cc27daecbc78f716cb996512679a60200a58591e0b911de65afad4e2220c89d4cff9e2d146913ab5700179ccd239658623f314a5cb89a246e4e64acd2d0723e14098f213f49a3088e5c"], &(0x7f0000000500)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) lsm_get_self_attr(0x2, 0x0, &(0x7f0000001280), 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000e40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cfaff6f68705f69603dac85bcd0e49fdfe8ae2a67bfac07c4110bd8d2ac23b01f8a1b8902000000000000000606f9435ac2746c41598b0e39f6414bcd0953d0d9365475f1f15b53c802300af34fde6946afb2562e45451b0cab758e57bdfb2391fdf0646923537165cd24968f2e4827054ea38f7566444ba653e8e5d6b310dc", @ANYRESDEC=r0, @ANYBLOB=',\x00']) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) (async) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bcba7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="28030000000000000600000000000000000000000000000001000000000000000200000000000000030000000000000002000000130b00000200000000000000463800000000000006000000000000000900000000000000070000000000000004000000000000000100000040000000010001000040000008000000", @ANYRES32=r6, @ANYRES32=r2, @ANYBLOB="9500000004000000000000000600000000000000310000000000000002000000090000006664000000000000030000000000000003000000000000000100000000000000000000000000000001000000040000000600000000000000fffeffffffffffff050000000000000002000000000000000100000000000000090000000000000000000000090000000104000000800000ffffffff", @ANYRES32=r6, @ANYRESHEX, @ANYBLOB="02000000c36b0000000000000300000000000000800000000000000003"], 0x0, 0x0, 0x0}) (async) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r3}, 0x18) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f0000000680), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000700)=""/43, 0x2b}, {&(0x7f00000008c0)=""/174, 0xae}], 0x2}}, {{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000000840), 0x0, &(0x7f00000010c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x108}}], 0x2, 0x10000, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r8, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=r10], 0x20) (async) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r7, @ANYBLOB="370600"/12, @ANYRES32=r11, @ANYBLOB, @ANYRES64=r10], 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e000000ffff0000040000000500000000100000", @ANYRES32=0x1, @ANYBLOB="792dffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000002400000002000000030000000000000000000000000000004669f20d69b55d31d2446db1bbbb4d5d5d3e33a2fd87674ef09cd4475bc452de1e740ce5cbe263bc8f58673171dde9eb32a02128116f7304d16aeee9bba5b9216d5ced8f73787687a9caa54b479626f311b3236498f21bbb809d987824d7f9ebee75760e30c8bcd92eddb5e65a3d"], 0x50) (async) r13 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)=ANY=[@ANYRES32=r12, @ANYRES32=r1, @ANYRES32=r13, @ANYRES32=r1, @ANYRESHEX=r9, @ANYBLOB, @ANYRES64=r10], 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="09000000fdffffff83000000440d000020000000d2a30ef7bf4d9a4f44b308a88500e45af20d09855bc287c1c20add7e5d12e8031366747afe76908c935c0fa069d694451d6dc0194dbe364920ea8eabc03f5a9beb341652ddff822ce4a316a40278a89053fb72430fcf6c46ce1248c236ad6f57fa412ab2bf50c5de1611f3b390556bcf4e19771bae35637d0d3bc89e", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003000000ff0100"/28], 0x50) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r0, 0x0, 0x25, 0x15, @val=@tcx={@void, @value, @void, @void, r10}}, 0x1c) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1m15.995820109s ago: executing program 0 (id=2122): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xb0, 0x400, 0x1, 0x20000}, &(0x7f0000000040), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000002000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x2}, 0x1) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) r2 = fcntl$dupfd(r1, 0x406, r1) sendmmsg$inet6(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)='u', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000c80)="9d797ad7d7ba242c878cb3fc40536c2c40bf76aee03df07fdf434103ac00ec676562e55f8aaf824dfd22453e41234d3a4d76eb5386daec464fd533ae42b94f0d512ce067e7f970034f297f44248101a616cb5669a18fad17b33f1f40937e8ca97c5337760cac38d57e00000100c36e43eaf9f537be7d126e12766e816dac69c39f154331009493ac8211397e98dbe9d40795858ab7cbd567eebb875bdcba0573d2b300000000", 0xa6}, {&(0x7f0000000c00)="ccff7e1e098269106dce69f3373d0db5fd7ec5b6fb968c4ad3dbb4adfa0181", 0x1f}], 0x2}}], 0x2, 0x4004000) sendmmsg$inet(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000d40)="f5faa3a57ea926da2c85b9e43d8396fdbd77101da684d47e8ebb5d4ede43d16e77c3ecd6852001a5ed2f19cff66067f6fb84d487d25eb2b0ae4b09d81105d78995f8cf73be089383ae3611dd4a0252d9827b5222586fade6fa8b72fd1e8378cf1e0937449e9393984c8efb0e359a2d5523867d9ab26da426c451e9638d59a33c051f3fa165604ae25c3673dc34de9b3cd47e3e4210505ac57da8b8246f9d99960ecace1c2d7379f974fc9f25aebf490a2e613d6ed593e41345599ce2c72e13edb655922d67", 0xc5}], 0x1}}], 0x1, 0x80) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x5a476f3fcb0229da}, 0xc045) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r3, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000140)={{}, {0x7}, 0x20, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="f2e37ac7f697beea519d329a0c963261deb87bdfb374947d682b229f2d586260da0b33c00f70047fb68858303321644601206394a69bb1d8e6665bc0281043f44d458500f3c94d998fc36273533bb56f9315f5c8b559de94e683ef52fb5d354dc428634996ac3d7f7fb06b81409d92a43a94f2c0854b9dfd97d39fc8bd41e3c82dc108dfc6d49c7fca7caac30b27ba14d2ea7ac7155ee6b3aa74ee2d748d57794a46", 0xa2, 0x0, &(0x7f0000000840)={0x2, 0x1053, {0x1, 0xc, 0x1000, "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", 0x46, "667800c8d6a387bd7d8c8bef2d2ddc12d40aab138ee33cc6d94d2e3cef2f6926d722d649c7eb3ef8413eb57180404e542e5a0d01167fab8011547a0948c3b90d712e89e89a76"}, 0x38, "9ef502868a87ecd885fbaaff531ee229b27f151f467bc0bac69038ce6e0ef093ea5368cf34d969783ec148900c960c57ff82453536b9720b"}, 0x1097}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_KEEPCAPS(0x8, 0x1) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {0x10, 0xd29}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) 1m15.834739896s ago: executing program 0 (id=2124): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r4 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f0000000180)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') read$FUSE(r2, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r6, r2, 0x0) close(0x3) close_range(r4, r6, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pselect6(0x40, &(0x7f0000000900)={0x6, 0x0, 0x1ff, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x7fff, 0x0, 0xc, 0xf, 0x9, 0x3, 0x9}, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r7, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x20004, r1}) r11 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r11, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r10}) close_range(r0, 0xffffffffffffffff, 0x0) 1m15.405732799s ago: executing program 0 (id=2129): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$unix(0x1, 0x2, 0x0) (async) r5 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x22, &(0x7f0000000080)=0x7, 0x4) sendmmsg$inet6(r4, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x100, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="2bceabeef3439eab45e2863311913a0c5aeda1b2534df64d1b5169e47bae9f56b8f6ca71d19e79824e0ea1c36dc46b91e4b93366428604adde28a6eba973a5c42dc58e8401cdbf086464ff8c6b4e060deb8b084441", 0x55}], 0x1}}], 0x2, 0x8008800) r6 = accept$phonet_pipe(r2, &(0x7f0000000200), &(0x7f00000004c0)=0x10) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000500)={{{@in, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@private}}, &(0x7f0000000600)=0xe8) getgroups(0x8, &(0x7f0000000640)=[0xee01, 0xee01, 0xee01, 0xee00, 0x0, 0xffffffffffffffff, 0x0, 0xee01]) (async) getgroups(0x8, &(0x7f0000000640)=[0xee01, 0xee01, 0xee01, 0xee00, 0x0, 0xffffffffffffffff, 0x0, 0xee01]) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000680), 0x121200, 0x0) (async) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000680), 0x121200, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) (async) ptrace(0x10, r10) ptrace$setregs(0x1a, r10, 0xc, &(0x7f0000000000)) (async) ptrace$setregs(0x1a, r10, 0xc, &(0x7f0000000000)) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getresgid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)) (async) getresgid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)=0x0) sendmsg$unix(r5, &(0x7f0000000940)={&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000340)="4aeaaa5867496792f51cdbf54ab8b68f518e78a8b02655ca1c58480610f88521ca3e6f3e01231cafd154bd7da2ea23cfd9868af6cfd55b86906c3aa6b9aa877a65649357e8f21231d2c4293f9c1503c1c6aef5c41abd4c17dff7b899c7dfd5bc5a38559de75698989e6a1be8700a89232870036f9cf3060d50163e1b433d68393a323faae29b4a5262249b362e909550e52911367682c934df937a0c10283557c4149306185fb56b8d116f2964c790ad4973af8b5934d7bdad35", 0xba}, {&(0x7f0000000400)="244d9cb3f2a7b88412f66c5ba0aee011a979acf0ab2dcc672b3e6eae920b5d86eba3071b049ff0887abd57eea4e06d3cec71b82ee664451936a79aec9ec1b0bd0aa4d4312957ae2f1796faf4776d104b0e2983b07b007f5830b94da73e7ac8d70eec245e6d9ff19bf7a9993f0f3a7df58eb4973721c4103830209c0ac6d50c2ca23d51047fd7252bc026f34e29a71fb490bf1b9440bce0b4ab2a1d777dde7ee58fe1ba769e81d786c5bbc470a38839685d1833bc541599", 0xb7}], 0x2, &(0x7f0000000840)=[@rights={{0x24, 0x1, 0x1, [r6, r2, r2, r2, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r8}}}, @rights={{0x18, 0x1, 0x1, [r0, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}], 0x80, 0x20008800}, 0x8004) write$P9_RREADLINK(r2, &(0x7f0000000980)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) sendto$inet6(r4, &(0x7f00000001c0)="57e216", 0x3, 0x1, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x68, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x68}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 1m13.94174412s ago: executing program 0 (id=2137): getrandom(&(0x7f0000000480)=""/283, 0x11b, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x20000000, 0x0, 0x5}, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000140)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000040)={'full', 0x20, 0x4017e, 0x20, 0x100002}, 0x2f) write$cgroup_pressure(r5, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r6, &(0x7f00000006c0)=[{0x10, 0x0, 0x2, 0xfd, @tick, {}, {0xe}, @quote={{0x8, 0x6}, 0xf}}], 0x1c) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66baf80cb80ab92b89640f01cf66bafc0c66b80098b805000000b9d0c200000f01c166baf80cb824cb5c82ef66bafc0cb85f0000003e2ef30fc7b7d5c8e9ab670f01cfc4c19d61e70f329a05000000bf00b97e0800000fad652400650f0f3500000000ae65263e0f01c4", 0x6a}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_TDX_INIT_MEM_REGION(r1, 0xc008aeba, &(0x7f0000000180)={0x3, 0x1, 0x0}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r8) 1m13.694983322s ago: executing program 34 (id=2137): getrandom(&(0x7f0000000480)=""/283, 0x11b, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x20000000, 0x0, 0x5}, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000140)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000040)={'full', 0x20, 0x4017e, 0x20, 0x100002}, 0x2f) write$cgroup_pressure(r5, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r6, &(0x7f00000006c0)=[{0x10, 0x0, 0x2, 0xfd, @tick, {}, {0xe}, @quote={{0x8, 0x6}, 0xf}}], 0x1c) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66baf80cb80ab92b89640f01cf66bafc0c66b80098b805000000b9d0c200000f01c166baf80cb824cb5c82ef66bafc0cb85f0000003e2ef30fc7b7d5c8e9ab670f01cfc4c19d61e70f329a05000000bf00b97e0800000fad652400650f0f3500000000ae65263e0f01c4", 0x6a}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_TDX_INIT_MEM_REGION(r1, 0xc008aeba, &(0x7f0000000180)={0x3, 0x1, 0x0}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r8) 20.865069108s ago: executing program 5 (id=2493): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x81c, 0x30, 0x871a15abc695fb3d, 0x70bd2a, 0x25dfdbfd, {}, [{0x808, 0x1, [@m_skbedit={0xd8, 0x1d, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0x2}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7ff}]}, {0x92, 0x6, "cc458a5591dfecfd18ff17bc5ac340fcc825cd1f86c17a4bc7012815ca1a028fcc9417082b32720057602c83a756bf648401f62fbcd63d5741dfda4d7306abc889b0477985b90a5af5d30647fc49202b349de3d396e4fc29b4b24849529dc82ba7a840ef6b3664491709c5257e7835ced8824409a85fe0cae3dd93e10518fb2f0b1745c48b4b09f0ab24494eee8e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_skbmod={0xcc, 0x5, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="47c284373e55"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1ff, 0x4, 0x5, 0x1, 0x2}, 0x3}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}]}, {0x37, 0x6, "7d84ad0ec2666eb3b4d433801787de35673ecf19cc35429c22e239d33bcf7cca7eabb7a9eddb1d964872ce2002693e68201a98"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x50a0124b2449a2ca}}}}, @m_xt={0x290, 0x2, 0x0, 0x0, {{0x7}, {0x24c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x4f, 0x6, {0x81, 'nat\x00', 0xb, 0x68, "0b383b507f2a4c2c361923efecc376cbb792b8e3d54ce8a8f0826c6a081cef84bd60ec8b74"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffb}, @TCA_IPT_TARG={0xab, 0x6, {0xfffc, 'raw\x00', 0x4, 0x5, "e9ee04147b9e914ac95e4a5874b36fcb900bd0e1e70dbcce3aa88c8b76b7a67833cac30df74cbaf5b4ca44971c629f99fc5c694075bcc246711df0b8c47439bedfb020afcd4753ff0472dbc2f1f53e67f60b14a421c722891ffb39eaf82a3f0a7b73dc760d62de119439cf491734596aafe62db51a56f6c2080f3a6a0e762900af"}}, @TCA_IPT_TARG={0xc1, 0x6, {0x1, 'filter\x00', 0xc, 0x6, "56184e7776bb2511a08e955f4da4568157b51d0a4c43ceff5cddc5fed06c59e0826f268694149801a1bb679f54461c6284ec031e2d120c524532492f0632870117c08364081e9bd636fd658efd39c9917b62c387fcef288ba182368d294ff64ae2e05c62a1c192f2ea91742811be0aca7fb81473ffd72e3506e918fb731d8bdf2edac3216f9a7c2de690eb75db66ea1cd9403a280d2fb4"}}, @TCA_IPT_TARG={0x5d, 0x6, {0x1, 'nat\x00', 0xc, 0x8, "09d5883841f985c7b6f609251f668b5e1b50795a85d46aa8cf5c52185a4fe935951b827a3891e6bb96e14e23c5bbef6c2aace6"}}]}, {0x20, 0x6, "f69989767fa0ea67e4eb77eab39d54db42f4aeaebd84595a273d5967"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x13c, 0x8, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xf}]}, {0xf9, 0x6, "996337421d75094061ad2610e8ab8385d1fcbd0ca9ad3e24f9a961f79e9c0127516baad425ea188bb163763bcbe41603ba08949d4c04644f2ad805beeae84372e6be996e57426caf52fbf491cbeba87dc6cbafaf8d0c6aae27ef22bd1660c8ef3c008e6b54956c5bd0be30748b309f5d9ce898ed46d3f1a60955907396ee0aa44f32b501440fc1e3eb5ab9167c283e48733972460c99f59bf985b27a22f9a02070680485a441bc9096e6e0c015a72a2b5d95da6c62c91401d45ece6d51a0ad2641cc42a08c366d0b3872ea13dde94a0ed8348b0cab7076fb0cbf22b45a8aa0fd5e03548724eadba1cf5da4182b51266cf14a84ce21"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0xe8, 0xc, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x532f}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}]}, {0x9b, 0x6, "9959df3746eb0003f54bc6b7092e796915e1f82d5b5c670a404ec89ed718adece4b41872b36043a84b9ea150fd477ffed0f8d0ef7e55af58720fe8701c7cdadbbf04c9adff761de46871a14f7d71f551cf6036200099027e839c46a2fbcb1cf4c74a629480d1113552e64853a1d4215d71caf0b5484de923b0254cd07588e97b8d327a1ee6ac268191ea9c9ef2a490bcf46e0705955722"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x100, 0x1f, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x3, 0x2, 0x7, 0x9}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3f}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xfffa}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}]}, {0x92, 0x6, "e32c126eda173bf1e1d9dee23907fe5a724c163da79646abb60fb5889514f673c73a16d2316247349cd394596a6006ad357481cb04b4c4c3b39642e803a201dff992ea20484dc3f2010ca917c84a324bd3ae667943e4ea0878f548c14d35e0519de90e30f21ba23e7be5e7ab850c491392a4672ff3d01ea6100df15175b446ebe0adb4877c17ae84842dd4a09516"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0xac, 0x4, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x55, 0x6, "91d112680ee95eb298df376433c7256758a43f820b3fb41f6f0a21978c832caf5a784a47c63d3883b592604e7da62a8824aa4020f61243ab449a1107584bdc17851550ff351a5632269f1114fc352e25d7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x81c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x200) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000100)) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000200)={r4, 0x0, 0x0, 0x4, 0x80000003, 0x0, 0x0, 0x0, 0x5, 0xe, 0xff, 0x31e}) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000040)=0xb5) setsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f0000000000)=0x101, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 20.662121869s ago: executing program 5 (id=2495): syz_open_procfs(0x0, &(0x7f0000000180)='timerslack_ns\x00') r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x87, @rand_addr=' \x01\x00', 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x1074bd}], 0x1, 0x10102, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000080), 0x1, 0x4041) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0xfffffffffffffff9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800010000000000000000001d0100001500040000000000000000008b893b21c1f3344a0500000008000e00", @ANYRES32=0x0, @ANYBLOB="060005000000df00"], 0x3c}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000540)={0x7, [[0x9, 0x4, 0x1, 0x6, 0x8a56, 0x4, 0x8, 0x7], [0x0, 0x3, 0x7, 0xff, 0x6, 0x5e8d, 0x0, 0x7d9], [0x6, 0x40, 0x15, 0x80, 0x2, 0x0, 0x9]], '\x00', [{0xc, 0xffff, 0x0, 0x0, 0x1}, {0x9, 0xc26d, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x77, 0x0, 0x1}, {0x17b, 0x8d, 0x1, 0x1, 0x1}, {0x3, 0x2, 0x0, 0x1, 0x1}, {0xf, 0x210f, 0x1}, {0x580000, 0x9, 0x0, 0x1, 0x1}, {0x2, 0x56, 0x0, 0x1}, {0x1, 0x8, 0x1, 0x1}, {0xfffffeff, 0x48af80, 0x0, 0x1, 0x1}, {0x1, 0x8, 0x1}, {0x7fffffff, 0x5000000, 0x1, 0x0, 0x0, 0x1}], '\x00', 0x9}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYRES16=r2, @ANYRES8=r7, @ANYBLOB="15870a6fa2e2eb20eb7c07628540253d303ccd61a8dc42104102b40f451f309f3e92ab65bf5e7d89bf46267e469196cd0e490180cb76c1d44e5ae75c006c2eebdd52bfb86dda5911a123e44adf6b766188c041c92c43674acbd77e33f0b2e0b2bbcbf67110c00502e366c9ac8815aebc7a3137f7dce6872a0f129f57501a06817e45b86bf5aa01d69aec4072afef06cc8e2d870b30520e848cab73fd1ecff807e86d9c4575aa492678531a953442b39b5257b81d8609293262a787d7c0f8069eb331cd6e3a273264fa6937326e1522e89382e47911e5ace66cdf4d8c3e5ed2b02a7a9abd76c537bdf327972fc151c59c72308f5a72cc1bb5aedcdf46a93ec2639300"], 0x40}, 0x1, 0x0, 0x0, 0x40488c8}, 0x20040090) r8 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f0000000040)=0x3, 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000002c0)={'#! ', '', [{0x20, '/dev/snd/controlC#\x00'}, {0x20, '%!%^'}]}, 0x1d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x1c}], 0x1}, 0x0) preadv(r9, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 20.047510569s ago: executing program 6 (id=2499): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d160b2d, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x401) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0xfffffdc9, &(0x7f00000000c0)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x70bd26, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_LOCAL={0x8, 0x6, @broadcast}, @IFLA_GRE_ERSPAN_HWID={0x6}, @IFLA_GRE_TTL={0x5}, @IFLA_GRE_OKEY={0x8, 0x5, 0x3}]}}}]}, 0x60}, 0x1, 0x2000000000000000}, 0x0) 19.825665228s ago: executing program 6 (id=2502): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x8002002, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x1, 0x503fa, 0x8100014e}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x44, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x44, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) (async) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x4913, 0x770e, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x4913, 0x770e, 0x0, 0x0, 0x0) 19.60282035s ago: executing program 6 (id=2503): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x4c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x800) ioctl$BLKDISCARDZEROES(r2, 0x127c, &(0x7f0000000240)) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) (async) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x7}, 0x1c) syz_emit_ethernet(0x6c, &(0x7f0000000280)={@random="c5bb36c76521", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x4a, 0x0, @gue={{0x2, 0x1, 0x2, 0x8f, 0x100}, "1540d26f0cb653b68e68fd5db0f6a50807bfb8c5c831150b1eb6db03d28e199fd95b8092770b00b866dd71974b0cd5995f3c9ab3125a2fb6f64b"}}}}}}, 0x0) (async) r5 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x800) setrlimit(0x8, &(0x7f0000000380)) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth1\x00'}) (async) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff2}, &(0x7f00000000c0)={0x4}, 0x0, &(0x7f0000000100)={0x7fffffffffffffff}) (async) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000080)={0x1, 0x1}) 18.732863089s ago: executing program 4 (id=2508): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x80000, 0x0) getsockopt$inet_opts(r1, 0x0, 0x4, 0xfffffffffffffffe, &(0x7f0000000200)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000080)={0x0, 0x300}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d5f5fa31668d6962db78e3efb1ed3c0000001000ffff25bd7000fb836d2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb70400140012800c0001006d61637674617000040002800500100006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r6, &(0x7f0000001e80)=@file={0x1, './file0\x00'}, 0x6e) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="240000623e68cf2365000014060000000007060600000006000800000000002f4c63af35788922efa119bff2f4cba3c4e5a508ba032195b2fde48b"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={0x28, r4, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) connect$bt_l2cap(r9, &(0x7f0000000140)={0x1f, 0x4, @none, 0x0, 0x2}, 0xe) 18.575262766s ago: executing program 3 (id=2509): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000000)={{0x1, 0x0, 0x1}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x113c01, 0x0) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)='\x00\x00\x00\x00\x00', 0x5}], 0x1, &(0x7f0000000100)}, 0x40cc8d4) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000000)={{0x1, 0x0, 0x1}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x113c01, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) (async) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)='\x00\x00\x00\x00\x00', 0x5}], 0x1, &(0x7f0000000100)}, 0x40cc8d4) (async) 18.574962404s ago: executing program 4 (id=2510): socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) stat(&(0x7f0000000240)='./bus\x00', &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000180)='./bus\x00', r0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000000)) socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="da20040f57651cf88575babcfa58f16c1f4f27473e0e6202943d3eacf200a4894a1c12466b4fe3e093f9de3064728b7d4c7ca94e0e5c96c3ad9867caac3f00cd76b48c6a5ffef7f1a6ed2a9f56786d9f49bc1545d07d8522aab6f6ac574fdc348b9bb5a49ef2bc29e8337639fe904f22e6d337babffa53f349", 0x79}, {&(0x7f0000000100)="e08cf1efd0ed94141fdee0f98888334be45ee6641973cf0859bda2", 0x1b}, {&(0x7f0000000140)="851146e10659a197836a05281ddfec404e659bed31a4255a55b10296632ce32948bf164659d4de13b7c41628990820950d32feb359c1ca10be46c918a86545df13af72e6e1f1931378e8f1a17f1225ee", 0x50}], 0x3) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x3}, r4}}, 0x30) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 18.421271672s ago: executing program 6 (id=2511): lstat(&(0x7f0000000480)='./cgroup.cpu/cpuset.cpus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x5fa) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0x2000a54, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1, 0x0, 0xf8}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x4880}) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x40002) r2 = socket$inet_udp(0x2, 0x2, 0x0) personality(0x5400004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') read$FUSE(r4, &(0x7f00000040c0)={0x2020}, 0x2020) openat$cgroup_ro(r4, &(0x7f0000000700)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r3, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f00000003c0)="05", 0x1}], 0x1, 0x23f, 0x7, 0xa) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd4ffaf7f54658b45, 0x3c, 0x0, 0xee01}, {0x1, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x5f501}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40814) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x7, 0x20, 0x1f9, 0x4, {{0x6, 0x4, 0x2, 0x8, 0x18, 0x65, 0x0, 0x0, 0x4, 0x0, @empty, @loopback, {[@ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route_sched(r5, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)=@newtfilter={0x1ac, 0x2c, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xffff, 0xd}, {0x2, 0x5}, {0xa, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0xe1, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x8, 0xb}}, @TCA_CHAIN={0x8, 0xb, 0xe2f9}, @TCA_RATE={0x6, 0x5, {0xa, 0x4}}, @filter_kind_options=@f_u32={{0x8}, {0x110, 0x2, [@TCA_U32_ACT={0xfc, 0x7, [@m_mirred={0xf8, 0x20, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0x0, 0x2bd49ee2dce4d0b9, 0xffffffff, 0x8fc3}, 0x3, r9}}]}, {0xac, 0x6, "6ea570c9e85b4eaf19ddef3370553747c69714341cc947adf196f38729569dbec6415f23b9ead0653a37d0346bc3ec7faafb88e38282157eb783d459648202169d1c7e2e9843b6838b3e43a9e54f7474ad267f83d7b0ae8e38e993dfa24b176b6eeb3445c94a01dcd2c1e4433e7b20f0c51b4f21da0a0409b647c1ca5a632e630629eb9c8eb4a13f5a48c61840fa772622695a6ddcf821b663835b94069f91748bf6ddb8afd143ef"}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_U32_LINK={0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0xdd}]}}, @TCA_RATE={0x6, 0x5, {0x5}}, @filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x4}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5e}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xb}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9d03}]}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000090) 18.420652131s ago: executing program 3 (id=2512): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x400, @loopback, 0x15}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) splice(r1, 0x0, r0, 0x0, 0x800010000008eb8, 0x3) r2 = socket$alg(0x26, 0x5, 0x0) fstat(r2, &(0x7f0000000040)) fsetxattr$system_posix_acl(r2, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {0x1, 0x1}, [{}], {}, [], {0x10, 0x1}, {0x20, 0x6}}, 0x2c, 0x3) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000008300)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="27af093f6a0c107d659327a0c6e1e4ccd76fe556919f0acaf028d41eb699d4e3504a142bda5870fbf3ab4b48ce7e9bb87c03b07a3a35715ef0c4875519e7f4bdf9096dcf9e881ed48f30afdfbec32c1a", 0x50}], 0x1, 0x0, 0x0, 0x20048000}], 0x1, 0x40800) recvmmsg$unix(r6, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000600)=""/73, 0x49}, {&(0x7f0000000700)=""/252, 0xfc}], 0x2}}], 0x1, 0x10000, 0x0) sendmsg$unix(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f00000004c0)='M', 0x1}], 0x2, &(0x7f0000001500)=ANY=[], 0x98, 0x20000000}, 0x40000) r7 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)={0x20000006}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) epoll_pwait(r7, &(0x7f0000000400)=[{}], 0x1, 0x4, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r9 = socket(0x1e, 0x1, 0x0) connect$tipc(r9, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) 18.146839467s ago: executing program 4 (id=2513): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0080, 0x0) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x509100, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000080)={{r1}, "2f327aa05608f049595e90a04337c3941e51b7963bb5f22898f5e0c07754e3de6a32fd898c0d27936d6d2a7b0117759f11c21667e77f86f224001528789619926a9d9dfce9a3465aa02085fae1dc49fb05abb97b6eac29788a9e147abe5c99aff3e8311ecce4aba7fe60393a954fa5d219103e439dd58bffa839ccf1ae9a61635b60d271847b14b58969ac3242b28574eaa143c1127d96b197e2c1c53a17fbca80fd094133c7e7ee2ba4cd1e8ad983d9c14b8bc8c525783ea34091f21a537ce78d1b407b771e1c8c7abcbec7dd5d8f2ce35eabc8acd8ee9dea35acbe780d648f1bf8ef4b4f4d468c73115d56190314fa820aa6b4a4194de3152724920d700af6aa94876cbc5b229bb9ea44db6855692d397cfa883a1b292119d8a752a2263fb9a349fae62e6ad9935946c7705904409e8e9b2429ca410152b90ba1ccf4aef7ad9192ec79cc34e64234db293f35c8789fe8ebaf2595f81e323d730fcaaa146f53f1b35c8ec6d0ef39c75424b3b178083b3fa03300984e0cb1a3b07a0126a2a74de075632551709839993cf15e0e6bb1d823cd4fe2af127f0d7991883ab2c9868b991489213f8f3ff8f230bf990717fdd0e7bba3f4af589731e3fca5fa911bc2294a3f4e52d9faaacc02e058915ba3ee8d7b2e5b6e1605e8fa8ffd29c531bc03c59aab8791938ee6115e44efcc995b0bc6757fc0f92f4d4cd9aec27d99cf8b6681e25a5dcdb1fe472736eb0cb40fc2c8fbea5f064004509f9662ba3da913ef1de85e7b6b0328aff4d955a0e879b981bab5e6b57301e3ba983533628a8e36c51926dd33d97c897f4ddf6391999c40010d23e047c6ecaf3d12706732667ce3d06ba7d2638b052e85427790cd1453016ea98da4a8499743b8f8872fa8159b089457726d3d2ac00ebfe2791fcd2b7b199b42b80ff7dd4ba5d862bd3aae6569f428fd1c76c1ca3886f66c1f2dff8b6a17fcc58c375290f7ce6908c99607ab7df6a1c6f1b919da6fd85bff96911c363b4936eedc3a8982ec2865f95305cfd1062cbd074aee4da0e0ea2aba71633b306c78b731ee66dd6d990e2a3f7df31f0929e395258cc47ec1f4c1173b787e7ce10872536527cd6e2322f3293cea67c7dd26078caa56172bda7e5e21dd195220821a07a21c0047094418db164cde0f015f61861e11d6add500c24f29460c4791b8a4914abf9b3083e77e96d76363078723a70c4af8b8b767b48348d1d8cb5aab0dcfd24dfda424ccebc62157a75b4f3720b67941274cd79f8f78021d4b52cef7186ea04832e50d9266f4020f129b85c199202a1048d44afc71a97f8b1b979863ee9b326dc7e60725e75f31a428a9933dca367f8650b63f94e156c7bda3cf1ebbbb5cf6ffdc0691ed1a72bde50da2470c1e5cddf183ce529dafd45cc09e938ff72ddf72de962b173d3050f269383403ec76e336fe42ca02f0feac284d2232aeb3b91140e1650d476772704c59481e7423767224357caf661cc1fd1c9df63fcbbf5938caf6192585739af183461b6d177ce6b3d70a68b7acce9ad7a6c227ab22fecdf8bc92e486556ece2f0f9c03f5cec42a882ff7cca1f68d51997cddfe9a4e133c3369d546e317bda7b8d4e7673b85985520bfef365b208fd014751531fcfb38b0d93834f70d024aa172329a527fb459854e34b96e1018e70ff0744fee752d1e5dda223733281b11e820e791fb82c9ffe0d16b9d159a4a922a15e5731cb977a790cca42814f45f892c240ec045d2783356c3f14d724a44bcae2832a05f2c6f738837f720a993c52fe854acbf7dd942f56022076ffa0cede175b6465e8966348e578edffb8a7a1d92e7cd163117b9395931b0b207d21f2722d64bcc4cefda3baa5ec0a91211b638e908e96216f0fb0e9cc585f6d14008732553841c3eb87fa847e85f6a08f8cf941967a902e63f1bcb2c28b18de21fa805176290464b148171b0cd9cdb951f99101ab044c3b9c865622b3a44bf132b5e0ef13b05d9b201ba5c07b25cc3dcf07d6564a8ab2ac2f340fd5a9937f8490aa4e2020df09c79a69a106cfe1799f3559f940065a5c7d7b3f6fd51c56a241aefea8fcf9530f1c05d562ed6ceb21e6842396736584b6d8cce6bf0975d090dcb75eb94ee012e415a1214ca90a2f60b243280dcaab1b037443ce4ed0993b24840f4f48f36d968dfc856163d3090928fcf560131d441a75b6f081ca3fec5d6152fb1ca0efee8af8ab9013574f4b627af8f0d640d41949430d9ee36e65a063cb12de16454e8bd65a901a980f23c7c38638cfd5745a37646ee5472bb6c1f2a1e5dadd3fbbf93c690f62518eecf853d6892f3f067107788afe98f6a88a5e823f1d2584586b6d117cde2b9f89325bb64053ad939b0d1a8e3be4cf51f193643bb89672c939c4bff3c4e6d526d163fcb5356cadcd06013b1321d8c9f6f755f3bf52e0f65954c2de599e283c571010a3a852f406bfd06a83788691859fbe3ee83f78ea255c462c9374ace619e88caa3a171963e04d97736356134c894dac66e4fdfd6b07a344b67eb9b250026ba6a034be3b5ea7b6910067857c1fadb4a20151d01fb30a569a0945ce9261a77287fc433ca69ff292410543a23f76fd08c7969cbb7a77522d95220bc69c7348f065eaa6e91fe5d5bc0a7943d3c6a2527daeb75535e83a85e98ea39bb5abca577bba74ac3ad0a19e827f18da660dcc20dde52480035f07065131789e6c354fbd869a53303a8cc03e40f7d6fbfba7ae4d3b50630eb415ad77be1acd6252dfffd0475c7601fa2259260fb28b5b3a83e34ad6d3842677de038e985d57776417968a120e0252cd7d1c32effa566dd295c9b4b2bd32d447e45436bc90cf8e33c611b1a1457eba1e0bb6a92d229c771e3749154df86253dd869e048a9bb7a4425fdae6f2fea336c6778ca0519c84bcc9162fcb41cb7bbc9b608d0da66f8e09ba84981573179f6e4cf206472dfd0d6eca857b2e8e21917213dd8357415b8ff5668655182e5560a0cc2c3cca7a2b6fcd26ca10b7174f4673d21da3f525050de6da51b327c3e181b05e6ee53fe5fcabe7a62b52cad945ea50f99c23acbb335ef7656eb95c3435346fe28e5807ec920581e7bf42eea0f4fff3a405afae54863652c24647b8d53a842ac23a4e6d4d327504c6b1b546fc0e2e68a3effd3665bbabb7b439f634c9c3cbe80cf0fd42950954dff252a08d229c5c9491daa2908b4b6777daa0c1694df508e914ab91f7c1c9bb5dba289573a334a9aa62b48e7fe2e1d2903c051c6fe6b1e527893a246b0a8bd6dad61b29c1de58e26289a76de5f5247aee5ae15286eb526f241f9f673cee10e306804c1a27c3a20fdee73717528d5a80821bb09f53bb386ba89b87bdd0eec4cee608b31f92c4853a6e9e2733d00f309a297f76dc7c5db78404bf30b56a86256c8352e9ff77d9c53351d001693bd9ff326a8a07c2c552d5892707999ec5edc076f126dc5bc213dac1ffea69d0759d0eaddc2e5b0843448b9be91389db6bb8cdca0a2964a8c5679c9fba130cb037fbe0ce2aa0911930f170ba5949558e8fb57e9611c5805ac429fe43df3713f75e740da7c1154210372785cc97116218e3986247531f78fdfcb9b0f3bcfec21340129f3c0e2db9f8ecd02936a3cccbda8e226e4d0d242f4ff3437ae85cf59cc8ccb862033af26ca53bdfe0bbafefa5ea5de04b824d8414a605441e36b70863c623cdad9f26cca20dbb7d425c1dda9dd0447519d1aeb954c5ed5c1d8c493f398c486ca6791135d39a028167cc00d62ac7957c93fd634faf421e47d9641f653c4e6bda142f1717eb0f728f69338053e6489728e76e0ceff53650f6e457acf48ae0e0217db5dd877bf48a17847b8e1c27345a90fccbc4a63f021f828b0f7df6c78f0060b6a4a46bdc8c7ca6e95cee29084ca62497d87445f35be286ebc1a3f57cf239b304760b708edc9f096e5e365d9f1bd3e0899f8f805820b13c278960acc1006d69cec509a96731c3273debc5f74d2f50728793f2cfe2f0f4eafe91ea83c9f24049de2601471a6419b70f62f55df2df5dc61d32059da2f9d7d83c854d8a823665a947b36cfe458de40a4d074b52aa5b97fd78fb594f6215a0e016fccec2590dc33657aa0da3c5c4bc9f31350573639496c433714f2c6fa5786b73da45b83400ccb9f782485492362d70b6fd73aedc692c7cbd1abf633212c3249f382ab76b48d5f1b96989cd7f58e189529cf334b25bcfa4e053be80971eb90f51e309b55007438b3b264b3b72ab6fc7068fbebebc220535dd49f79e6b546631ea3b3cff9244169566f2528c08b8aec80002c93d9432effa3a059ce7dc40f069cb5e48a02e14b8e29e55bdda889b753cd800acfa882cb92b23d8ee7e522ca96fc6f7fed2a7751b4140a24493e913f2659557db300249a7beefeffb81a1ee9e07faee9a095541435b7dee5747adea115da4d396af9365ded7e0aad2d5ec3237950e0a060d75fa6e3729872913484ee5da26cac98aace730217364ce3ce3b90837779e2aa24c205cf8d77e73bbd1ab75691713b9eb9291f1083c35066cfa977a4ba76e05e7750036da1be3e75160ed801580bd12b897bfcdefc35812de835ca4ff059bcc2cb0fac8762df199922aa9a020cb52b9348ce573d7789e65fa8d90f3493b25f4eafd17fc2954e461e29ddde3cf756a8f2348396d0e0373e257b259bf932fbd07542e74546da0079d18dc566874d5497a6fd488b5a5ae52fbececa82df03c55f76489888d7fcfd834cb0acec382cca510f71f4da9b319c4e837efdb9ade37495d48324c0cbc24eb607a6e30e7fc66313c39253931dcfafd6eaf686f1648e7157057a000cfad9cfa444a17bf697570d401533cd66ce5db2c570c143d29d46c114e938ced310e4784abe8910d70179a6cfc1d7199f67a3add0c16b5a983b1ee649e3c22083b48cb99335beaeea1c742f2c0a0330cfdbfd56533496711dda7024f7f7bc65ae62599d0fbe8a34ffbe6341b1f3fb147cf0be77d2e0937a30513fb110afd35499f6b69c0f2f820ab11aa36aec4d1542984b944145793f550f272f79021fa6c2e3b26678d3151a093e3022012e1c9bffe2944c16e9824379565ba67ef0eca671803e0dbf99e7e985c6f248ffb04a3969ebe5ac9c766a01f60f0bdcdf9a4b33b35e310a57c40f0f09e93aae10086e18b123636c1c1c33ccb5eaab34aaed16a4dde1bc032a8d7f74addabee4984100884692bf3768b789676b12f206d7fa6a8d85817bd981fb0302006a2cf3c475150ed34ac10fe43065dc73f057af63476516ec4f564588214b9f0d70728858504319200d01be3ae7f2f9e1283afd14900469a91341736fe887b885cec0461dbca2c53068c698a681defa1bb8773846ebd5b500e40967a6b390fa4bd0c2c37b50cad8f3651cba0602dfd9f9ae6b9184c9649d18af390ad2b65c881857673201a58c9aa2a1e0e8e8a6bc4be5592e8adfc3fa2b4786447465af0c2ddd7c6311d21138bafeaff8c8f31f41c0f8b959a5a84e601cb92b8134f3ba9f47df33076185d1cfceca833f68487c4035aa021c367f854a555ef8fe64e6eeaaf9333d3800cc51eb5e2f383ca132e95b49f68dde83440f8998101e8fbcbbb4673554a43ebd58e76c5e6720b31828057900bbae4da18899f839ce9f0d0fc5ecd748ebf2b6bac327d9b8a9091e051b7218d19171ffe4e05ecb43261ae7d1637e896eef787f473d2ac3d1d07870f339e0a9cb8b2315815b06f47199414d3ee3650beed11c321e0708c2ef546887b637671eea9386efa80c"}) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000001080)={0x74, 0x0, 0x10}) lsetxattr$trusted_overlay_nlink(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140), &(0x7f0000001180)={'U-', 0x9}, 0x16, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x12) writev(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f00000011c0)="e58c54f56594d722a14b71125dc492f563a2b404bfc27a6cfaf55707638164a57891b17deab83b5e974a73db251d649b204937f244144e6931234f8fe3b6f0b8f85ddf6e45fc3b19d2e10fe9d6dd348f48f284f6cb2c3225b65e455f811d58a31a1fbd992b0bdc371483eaf65c5da9f6b1aa5d310b2a2bf8b88c33962761a8d9cb", 0x81}, {&(0x7f0000001280)="0d48929be7c5ab4f559725e0e612d5e5524f88ece6f580e27f5742a7b749524c51f2ee3de2a935b816d9f67114c7bc5a50316f48427edf28cc95656c1eaf3eabad0fd882072b5b050f48f9507732f85d652cbe4134a2b5fe12372bc2f876a8ae671c78e5c0", 0x65}, {&(0x7f0000001300)="39e548cdbe925a0f9da1ffd6a14ba8c2db035b1287bff3b19eeb6fd7408d5721f23764ed59d8f270b06c97b7fb9afadda4e18df6937c52ee0e9278d6f5124cbf396426f0401b329165d25ef7aa7ca4a26604e15fc767d07c67a9c35a960fa0b2a0b5c82872f7", 0x66}, {&(0x7f0000001380)="381b7cdacb9a698e7f2b94ab011e052abee7d16d96914cc007ef2772e5a3fc0174871d6dbf86072cdbe2f44c10a25c96f218d6f1ecca", 0x36}, {&(0x7f00000013c0)}, {&(0x7f0000001400)="fbeed6073f31eee4de5389d399a7af79f73065a10d04ef223a99bf9fd73eae061f6a06647af7683e9e5883599e72efabe366c96a151d46", 0x37}, {&(0x7f0000001440)="95e38fbc3f25c7b95db0c982f054989c5aeaefa6c4939e4de02fc8ab47af241b35455061ef93c9ee19a1a1fd22b14bf5b1e894ec3d3e57d3a74d80060ac57268dbe0e30b1d01dc277a68d6528dc2d31447c9ff9577d8b57fe447ffa75844bfb01d7862705a8a006fff7f6c99c6a39b04", 0x70}, {&(0x7f00000014c0)="5c88e189202d0f5c798fe8f4206112a2d7a06e6f9f1538aeef06e1f53e5cc6c337aeb5c6ec716c0e5bbcc84cdef72d20758e376006dec8a52be1c7c49df4cd24ac67b924628db43cd21f67e19bab249176033e8303e771e45b4af9417bae2287abacf117", 0x64}, {&(0x7f0000001540)="425904d0f4c729670829f0a2fdedfb92d433ba4d67991bdcf87b59cec3b8951141b10ceb2994b4e00395249a081572f4960ed6d3c4c497f78b6888f5bf2dc6a543646ab6ffe8f2f20fd08dd669839f30b7b5913c30069a8c88f71938e616400b90dedfcce7030c8adf060105fab224d8bdc94988a49b3570465029cd4087d58a40585ab91dd9248fc24f0daad113e5100540dcfbfabdc355a32468d032aed71bf85259983f013efa94311a1b3b98bdcf0f331adb91b7fc656db55f6061213d00a7863094391631942bb09186a7379ddd04c557", 0xd3}, {&(0x7f0000001640)="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", 0x1000}], 0xa) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) clock_gettime(0x0, &(0x7f0000002700)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000002740)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000002780)=@fd={0xffffffff, 0x0, 0x4, 0x80, 0x1, {r3, r4/1000+60000}, {0x3, 0x1, 0xc1, 0x3, 0x0, 0x8, "183864ad"}, 0xfffffffb, 0x4, {0xffffffffffffffff}, 0x2, 0x0, r5}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000002800)='./binderfs2/binder-control\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000002840)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000002900)=@multiplanar_fd={0x261fe7e, 0x2, 0x4, 0x0, 0x6, {r8, r9/1000+60000}, {0x1, 0x2, 0xff, 0x0, 0x8, 0x69, "3c703312"}, 0x7fff, 0x4, {&(0x7f0000002880)=[{0x3ff, 0x7, {r6}, 0xfffffffa}, {0x9, 0x3ff, {0xffffffffffffffff}, 0x7f}]}, 0x2, 0x0, r7}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000002980)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000002a00)={0x9e0000, 0xa, 0x3, r12, 0x0, &(0x7f00000029c0)={0x990a60, 0x1, '\x00', @ptr=0x7}}) fstatfs(r12, &(0x7f0000002a40)=""/230) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000002b40)={'ip6gre0', 0x32, 0x30}, 0xa) close(r2) read$FUSE(r2, &(0x7f0000002b80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SG_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000004bc0)={'\x00', 0xb, 0x8, 0x4, 0xbf06, 0x1, r15}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000004c40)={{0x1, 0x1, 0x18, r10, {r13, r14}}, './file0\x00'}) mount$9p_xen(&(0x7f0000004c80), &(0x7f0000004cc0)='./file0\x00', &(0x7f0000004d00), 0x0, &(0x7f0000004d40)={'trans=xen,', {[{@msize={'msize', 0x3d, 0x8}}], [{@smackfsroot={'smackfsroot', 0x3d, '&#'}}, {@uid_lt={'uid<', r13}}, {@obj_type={'obj_type', 0x3d, 'U-'}}, {@fowner_lt={'fowner<', r13}}]}}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000004dc0)={{0xac, 0x1d}, 'port0\x00', 0x1, 0x100042, 0x9, 0xe, 0x800, 0x1, 0x5, 0x0, 0x5, 0xc1}) getsockopt$PNPIPE_IFINDEX(r16, 0x113, 0x2, &(0x7f0000004ec0)=0x0, &(0x7f0000004f00)=0x4) sendmsg$nl_route_sched_retired(r2, &(0x7f0000005180)={&(0x7f0000004e80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000005140)={&(0x7f0000004f40)=@newqdisc={0x1e4, 0x24, 0x4, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r17, {0x8, 0xfff3}, {0x4, 0xffff}, {0xd, 0xf}}, [@q_dsmark={{0xb}, {0x48, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3ff}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x35}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x401}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3ff}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xffff}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xff}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x800}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7ff}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x5}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x10}, 0x8004) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f00000051c0)={'nicvf0\x00', 0x10001, 0x7}) ioctl$BINDER_WRITE_READ(r16, 0xc0306201, &(0x7f00000053c0)={0x40, 0x0, &(0x7f00000052c0)=[@register_looper, @exit_looper, @enter_looper, @increfs, @acquire={0x40046305, 0x1}, @increfs_done={0x40106308, 0x1}, @clear_death={0x400c630f, 0x3}], 0xbe, 0x0, &(0x7f0000005300)="2eeaac155e0b39734074ac576e38cf5b8575e4fe5b7ed95f45dd92eda2e9810b7324ca3fe68feb1cf1c36e2ccaf1d21a6fb370f9e5df48766263797611ece31135218e6bf114288f53a542f408047488cd0bfe0e14b0922ff0ad3d6de4536166e18f5312f11f5ab408abea94b9c45b867e3e2985550c2a9427823a8c54764503576701d0c7952b9b99a36c8c812a98e42ab5191c59f15325613f45ada0098fa240cf85e278e6dbe22242dc9242dc417a73aabdabfdfa9a7e1c2bdf68310f"}) close_range(r1, r11, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r2, 0x3b87, &(0x7f0000005440)={0x18, 0x1, 0x0, 0x0, 0x0, 0x52}) 18.062357083s ago: executing program 4 (id=2514): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x587100, 0x80) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="040e1c00032000"], 0xf) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000580)={0x2, 0x0, [{0x2, 0x10000, 0x80, 0x40, 0xffff}, {0x5cdd2152fac637ba, 0x8, 0x700, 0x2, 0x1}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040014) 18.061982456s ago: executing program 3 (id=2515): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x2c, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 17.924802066s ago: executing program 4 (id=2516): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1d, 0xf, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x31}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = memfd_secret(0x80000) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000810526bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="02200000200000001c0012800b0001006272696467650000000002800600270001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setreuid(0xee01, 0xee01) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22, 0x8000}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080), 0x3) setsockopt$inet6_tcp_TLS_RX(r4, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "0000000000000081", "b0b3696a39802909f3ad495b2aaeffe867ccc5afc1821c9879e7d2a0b9d9a1d0", "d81afafd", "ac6457c9edebd6e9"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "c47f49541ce800", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", "00f97667", '\x00\x00\x00\x00!\x00'}, 0x38) mmap$IORING_OFF_SQ_RING(&(0x7f000079e000/0x3000)=nil, 0x3000, 0x2000002, 0x12, r2, 0x0) 17.80589609s ago: executing program 3 (id=2517): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSW(r1, 0x80404531, 0x0) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)=@known='system.posix_acl_default\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000000)=@random={'os2.', '&\xc6[/(\':.$\x00'}, &(0x7f0000000040)=""/12, 0xc) 17.598099752s ago: executing program 6 (id=2518): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000001ac0)=@ethtool_cmd={0x4a, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, [0x2]}}) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fcdbdf25540000000a00060008021100000100000a000600ffffffffffffdf00000000000000295654e1e982e000060008021100000100000a000608021100000000000a00060008021100000105000a000600ffffffffffff00000a0006000802110000010000"], 0x74}, 0x1, 0x0, 0x0, 0x4000001}, 0xc1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, &(0x7f0000000000)) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f00000001c0)=0x6, 0x4) bind$can_raw(r6, &(0x7f00000002c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000001400)=0x8, 0x4) close_range(r5, 0xffffffffffffffff, 0x0) r7 = socket(0x1d, 0x2, 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000fddbdf214400000008000300", @ANYRES32=r10, @ANYBLOB="0a001800030303030369000004000801"], 0x2c}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010029bd7000fcdbdf251200000008000300", @ANYRES32=r12, @ANYBLOB="0a00060008021100000100000600b5004f"], 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 17.446356484s ago: executing program 6 (id=2519): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000180)="dabab37edd50ba649574eb5eaecb23087724af033effa9c1bc8669a24fe80eb10de309c9c7794cebe09aa191755f7b2308cdfce4a8476eb3af4b6b53ef087f47980279", 0x43}], 0x1, &(0x7f0000000280)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x100}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x48}}], 0x1, 0x40001) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0x36) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000340)='squashfs\x00', 0x809d9, 0x0) 17.271417777s ago: executing program 5 (id=2520): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r1, 0x541b, 0x0) ioctl(r1, 0x5451, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x8, 0x4, 0x8000005, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x28, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbf8, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) 17.057837422s ago: executing program 5 (id=2521): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) (async) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) (async) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x5008, 0x0) (async) ppoll(&(0x7f0000000100)=[{r1, 0x9082}], 0x1, 0x0, 0x0, 0x0) r4 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28012, r4, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-avx2\x00'}, 0x58) 16.906045528s ago: executing program 4 (id=2522): r0 = openat$kvm(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe80900", 0x40}], 0x1) rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40015}, 0x44080) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x1, &(0x7f0000000180)=[{0x1, 0x4, 0xd0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000002c0)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000048ffca945f64009400ff0325010ebc000000000000277900f0fffeffe80900", 0x40}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16.90474921s ago: executing program 5 (id=2523): r0 = syz_io_uring_setup(0x8f7, &(0x7f0000000000)={0x0, 0x835, 0x400, 0x0, 0x25d}, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x301282, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[r2, r3], 0x2) write$cgroup_pid(r3, &(0x7f00000001c0)=0xffffffffffffffff, 0x12) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x1, 0x9, 0xfff, 0x4100, r3, 0x1, '\x00', 0x0, r3, 0x4, 0x2, 0x5}, 0x50) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x4, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x2e, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ldst={0x1, 0x0, 0x2, 0xa, 0x9, 0xfffffffffffffff8, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @call={0x85, 0x0, 0x0, 0xb2}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x6, 0x9c, &(0x7f00000003c0)=""/156, 0x41000, 0x50, '\x00', 0x0, @fallback=0x32, r3, 0x8, &(0x7f0000000480)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0xa, 0x8, 0x80000000}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f00000005c0)=[r4, r5], 0x0, 0x10, 0x2}, 0x94) ioctl$F2FS_IOC_DECOMPRESS_FILE(r5, 0xf517, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fee000/0x11000)=nil, 0x11000, 0x3000003, 0x2010, r0, 0x8000000) syz_io_uring_submit(r7, r1, &(0x7f0000000740)=@IORING_OP_MKDIRAT={0x25, 0x6, 0x0, r3, 0x0, &(0x7f0000000700)='./file0\x00', 0x84, 0x0, 0x1}) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000780)={{r2}, "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"}) io_uring_enter(r3, 0x27d2, 0x3586, 0x8, &(0x7f0000001780), 0x8) connect$inet(r3, &(0x7f00000017c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000001800), 0x42, 0x0) ioctl$VT_GETSTATE(r8, 0x5603, &(0x7f0000001840)={0x53bf, 0x2, 0xa0e}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000018c0), r3) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001ac0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001900)={0x174, r9, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd5c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x90}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xab, 0x3, "fc7e91d0d4e796ea8003ee9e9d5668218ec3da81ca761ad010694c0cd935ec6eb244003ed292be2e452c44b4a2cc08c1f9e256558b90bb56d43a017748278b8ef00d42fd3c1c0ec0af2edbb459d6bb05bc23764f1feb44f49ce2d1f7859fa485291f9a248b947b37f53918d1b54dcf25016f5b3db3a9181b75d4d9163a103bbc9c82834a28493e0647676417a5806064c227fc273a1209e3cb4cec1338775274d036ab43dc75c1"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "b2d5b2964921b3ea2ce9d96f346f13daa9b0e5b7d885ef3f00804f7b9c6299"}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4080}, 0x20000004) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001b00)={0x1, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000001d80)={'wg0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001f00)={0x6, 0x22, &(0x7f0000001b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_fd={0x18, 0x5, 0x1, 0x0, r10}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001c80)='GPL\x00', 0x5, 0x9e, &(0x7f0000001cc0)=""/158, 0x41000, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001dc0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001e00)={0x1, 0x5, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001e40)=[r5], &(0x7f0000001e80)=[{0x5, 0x3, 0x3, 0xb}, {0x3, 0x4, 0xb, 0xb}, {0x2, 0x3, 0x10, 0xfca7be9691110120}, {0x1, 0x1, 0xd, 0x8}, {0x0, 0x4, 0xb, 0x1}]}, 0x94) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000002100)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000020c0)={&(0x7f0000002000)={0x98, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf375}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x14}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) write$cgroup_int(r3, &(0x7f0000002140)=0x8822, 0x12) socket$nl_generic(0x10, 0x3, 0x10) fgetxattr(r0, &(0x7f0000002180)=@known='trusted.overlay.redirect\x00', &(0x7f00000021c0)=""/48, 0x30) getresuid(&(0x7f0000002200), &(0x7f0000002240)=0x0, &(0x7f0000002280)) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000022c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, 0x4e20, 0x2, 0x4e22, 0xffff, 0x2, 0x20, 0x80, 0x2b, r11, r12}, {0xfffffffffffffffe, 0x2, 0x4, 0x400, 0xc15d, 0x5, 0x8000, 0x5}, {0x7, 0x8, 0x4, 0xfffffffffffff000}, 0xfe7c, 0x6e6bb7, 0x1, 0x0, 0x2, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d6, 0x50}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x3, 0x8, 0x9a37, 0x4, 0x7fffffff}}, 0xe8) r13 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x6) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000025c0)={0x70, 0x0, &(0x7f0000002480)=[@increfs, @request_death={0x400c630e, 0x1}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000023c0)={@flat=@weak_handle={0x77682a85, 0x110b, 0x3}, @fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x0, 0x1, 0x6}}, &(0x7f0000002440)={0x0, 0x18, 0x30}}, 0x40}, @free_buffer={0x40086303, r13}], 0x85, 0x0, &(0x7f0000002500)="0d3bd2ad2af665ec6c6c248626bab5ea0d2420632a002ff79618cf5ae23f1d01eb9b307312b2542ef34eb080efcfc45987d4f7f1320b07b9108e1aab03546352bcde08a816c043fb93b503874be4c8da27da20bcc527c0ed3e7f16119bb772f786485dbc8c9e48ba48dfc4dcb362e46c51996ab762389d0743470631818c23878a145d9312"}) 16.679092127s ago: executing program 3 (id=2524): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x587100, 0x80) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="040e1c00032000"], 0xf) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000580)={0x2, 0x0, [{0x2, 0x10000, 0x80, 0x40, 0xffff}, {0x5cdd2152fac637ba, 0x8, 0x700, 0x2, 0x1}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040014) 16.56345165s ago: executing program 5 (id=2525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0xffffffffffffffff, 0x6, 0x8007, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x800000003, 0xfffffffffffff801, 0x3, 0x2000000000000001, 0x3e, 0xfdfffffffffffffc, 0x3, 0x2, 0xa, 0x5], 0xeeef0000, 0x841d968b90f2c3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ocfs2\x00', 0x204001, 0x0) statfs(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000180)=""/205) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r4}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0x16132, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) sendmsg$can_raw(r3, &(0x7f0000000400)={&(0x7f0000000300), 0x10, &(0x7f0000000380)={&(0x7f0000000340)=@can={{0x0, 0x1, 0x0, 0x1}, 0x4, 0x1, 0x0, 0x0, "ae8082fb93214fe3"}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x40) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0xba5a83, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) brk(0x55555ede6001) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)={0x2c000, 0x15}, 0x18) 16.241553494s ago: executing program 3 (id=2526): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x52}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000180)="883260501a3bba556c5a567bd01e5b905c56bbdde34ff602fbc832248f7ee68ae34af21a8b26079854b25eb6f03cbe2ea262", 0x32}], 0x1}, 0x240480c3) r2 = dup(r1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff6, @empty, 0x7f}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x6}, 0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff6, @empty, 0x7f}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x6}, 0x9c) r3 = accept$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom}, [@rose, @bcast, @netrom, @rose, @null, @remote, @rose, @null]}, &(0x7f0000000100)=0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1102}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1102}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000140)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b14032a9e6dcd01564ea909f178a2bbfb276442e2f7a282a5babc7bb83bbc486ed670e6310b7bcc303c", 0x3b}], 0x1) (async) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000140)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b14032a9e6dcd01564ea909f178a2bbfb276442e2f7a282a5babc7bb83bbc486ed670e6310b7bcc303c", 0x3b}], 0x1) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f0000000300)) (async) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f0000000300)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000019240)=ANY=[@ANYBLOB="180200004f0000009500000000000000a935e50ead4f05cde9a5c091aa80b22f6511b98e9cfe30953b"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000019240)=ANY=[@ANYBLOB="180200004f0000009500000000000000a935e50ead4f05cde9a5c091aa80b22f6511b98e9cfe30953b"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x40080000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x40080000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r9, 0x0) 1.220899822s ago: executing program 35 (id=2519): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000180)="dabab37edd50ba649574eb5eaecb23087724af033effa9c1bc8669a24fe80eb10de309c9c7794cebe09aa191755f7b2308cdfce4a8476eb3af4b6b53ef087f47980279", 0x43}], 0x1, &(0x7f0000000280)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x100}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x48}}], 0x1, 0x40001) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0x36) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000340)='squashfs\x00', 0x809d9, 0x0) 101.990074ms ago: executing program 36 (id=2522): r0 = openat$kvm(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe80900", 0x40}], 0x1) rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40015}, 0x44080) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x1, &(0x7f0000000180)=[{0x1, 0x4, 0xd0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000002c0)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000048ffca945f64009400ff0325010ebc000000000000277900f0fffeffe80900", 0x40}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 74.273579ms ago: executing program 37 (id=2525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0xffffffffffffffff, 0x6, 0x8007, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x800000003, 0xfffffffffffff801, 0x3, 0x2000000000000001, 0x3e, 0xfdfffffffffffffc, 0x3, 0x2, 0xa, 0x5], 0xeeef0000, 0x841d968b90f2c3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ocfs2\x00', 0x204001, 0x0) statfs(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000180)=""/205) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r4}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0x16132, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) sendmsg$can_raw(r3, &(0x7f0000000400)={&(0x7f0000000300), 0x10, &(0x7f0000000380)={&(0x7f0000000340)=@can={{0x0, 0x1, 0x0, 0x1}, 0x4, 0x1, 0x0, 0x0, "ae8082fb93214fe3"}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x40) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0xba5a83, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) brk(0x55555ede6001) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)={0x2c000, 0x15}, 0x18) 0s ago: executing program 38 (id=2526): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x52}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000180)="883260501a3bba556c5a567bd01e5b905c56bbdde34ff602fbc832248f7ee68ae34af21a8b26079854b25eb6f03cbe2ea262", 0x32}], 0x1}, 0x240480c3) r2 = dup(r1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff6, @empty, 0x7f}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x6}, 0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff6, @empty, 0x7f}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x6}, 0x9c) r3 = accept$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom}, [@rose, @bcast, @netrom, @rose, @null, @remote, @rose, @null]}, &(0x7f0000000100)=0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1102}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1102}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000140)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b14032a9e6dcd01564ea909f178a2bbfb276442e2f7a282a5babc7bb83bbc486ed670e6310b7bcc303c", 0x3b}], 0x1) (async) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000140)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b14032a9e6dcd01564ea909f178a2bbfb276442e2f7a282a5babc7bb83bbc486ed670e6310b7bcc303c", 0x3b}], 0x1) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f0000000300)) (async) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f0000000300)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000019240)=ANY=[@ANYBLOB="180200004f0000009500000000000000a935e50ead4f05cde9a5c091aa80b22f6511b98e9cfe30953b"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000019240)=ANY=[@ANYBLOB="180200004f0000009500000000000000a935e50ead4f05cde9a5c091aa80b22f6511b98e9cfe30953b"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x40080000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x40080000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r9, 0x0) kernel console output (not intermixed with test programs): 1770486493.337:671): avc: denied { connect } for pid=13700 comm="syz.0.1599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 153.936755][T13704] netlink: 'syz.4.1600': attribute type 1 has an invalid length. [ 153.965782][T13704] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.978482][T13704] bond2: (slave ip6gretap0): making interface the new active one [ 153.982216][T13704] bond2: (slave ip6gretap0): Enslaving as an active interface with an up link [ 154.021625][T13741] netlink: 'syz.4.1601': attribute type 10 has an invalid length. [ 154.025540][T13741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.029673][T13741] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 154.034006][T13741] netlink: 'syz.4.1601': attribute type 10 has an invalid length. [ 154.037078][T13741] batadv0: entered promiscuous mode [ 154.038820][T13741] batadv0: entered allmulticast mode [ 154.041728][T13741] bond0: (slave batadv0): Releasing backup interface [ 154.048593][T13741] bridge0: port 3(batadv0) entered blocking state [ 154.051642][T13741] bridge0: port 3(batadv0) entered disabled state [ 154.187467][T13746] loop1: detected capacity change from 0 to 7 [ 154.188861][T13748] kAFS: unable to lookup cell '(,c¾ûL' [ 154.190597][ T5939] Dev loop1: unable to read RDB block 7 [ 154.192209][T13749] kAFS: unable to lookup cell '(,c¾ûL' [ 154.193793][ T5939] loop1: AHDI p1 [ 154.193825][ T5939] loop1: partition table partially beyond EOD, truncated [ 154.208563][T13746] Dev loop1: unable to read RDB block 7 [ 154.211090][T13746] loop1: AHDI p1 [ 154.212682][T13746] loop1: partition table partially beyond EOD, truncated [ 154.236464][T13756] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 154.243117][T13756] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 154.246853][T13756] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 154.250499][T13756] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 154.254497][T13756] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 154.257695][T13756] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 154.264106][T13756] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 154.267787][T13756] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 154.272359][T13756] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 154.275563][T13756] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 154.275780][T13761] lo speed is unknown, defaulting to 1000 [ 154.279211][T13756] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 154.285053][T13756] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 154.288415][T13756] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 154.290019][T13755] trusted_key: encrypted_key: keylen parameter is missing [ 154.291908][T13756] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 154.299153][T13756] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 154.302592][T13756] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 154.307010][T13756] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 154.310314][T13756] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 154.314514][T13755] lo speed is unknown, defaulting to 1000 [ 154.316667][T13756] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 154.320389][T13756] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 154.324865][T13756] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 154.328094][T13756] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 154.332045][T13756] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 154.336549][T13756] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 154.339864][T13756] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 154.343808][T13756] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 154.347399][T13756] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 154.350880][T13756] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 154.497051][ T62] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 154.500516][ T62] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 154.568473][T13833] kvm: pic: non byte read [ 154.572597][T13833] kvm: pic: level sensitive irq not supported [ 154.572927][T13833] kvm: pic: non byte read [ 154.579062][T13833] kvm: pic: non byte read [ 154.583274][T13833] kvm: pic: non byte read [ 154.586290][T13833] kvm: pic: non byte read [ 154.589813][T13833] kvm: pic: non byte read [ 154.594122][T13833] kvm: pic: non byte read [ 154.597626][T13833] kvm: pic: non byte read [ 154.601086][T13833] kvm: pic: non byte read [ 154.655984][ T5941] Bluetooth: hci2: command tx timeout [ 154.767769][ T40] audit: type=1400 audit(1770486494.160:672): avc: denied { bind } for pid=13846 comm="syz.4.1608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 154.812920][T13853] fuse: Unknown parameter 'grou00000000000000000000' [ 154.945603][ T40] audit: type=1400 audit(1770486494.329:673): avc: denied { ioctl } for pid=13871 comm="syz.2.1615" path="socket:[40110]" dev="sockfs" ino=40110 ioctlcmd=0x5380 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 155.149592][T13888] Invalid source name [ 155.151285][T13888] UBIFS error (pid: 13888): cannot open "./file0", error -22 [ 155.336720][T13911] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 155.361744][T13908] xt_cgroup: path and classid specified [ 155.374391][T13908] chnl_net:caif_netlink_parms(): no params data found [ 155.844215][T13952] virtio-fs: tag not found [ 155.944762][T13966] netlink: 'syz.0.1637': attribute type 1 has an invalid length. [ 156.001465][T14002] gfs2: error -5 reading superblock [ 156.058963][T14013] No control pipe specified [ 156.107265][T14013] lo speed is unknown, defaulting to 1000 [ 156.107557][T14023] fuse: Unknown parameter 'grou00000000000000000000' [ 156.581851][T14078] overlayfs: statfs failed on './file0' [ 156.658476][T14084] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 156.662208][T14084] block device autoloading is deprecated and will be removed. [ 156.722156][T14089] fuse: Unknown parameter 'group_i00000000000000000000' [ 157.028796][T14106] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 157.033292][T14106] block device autoloading is deprecated and will be removed. [ 157.036462][T14099] md: md2 stopped. [ 157.102311][ T1236] IPVS: stop unused estimator thread 0... [ 157.237865][T14136] fuse: Unknown parameter 'group_i00000000000000000000' [ 157.264360][T14138] netlink: 'syz.4.1662': attribute type 1 has an invalid length. [ 157.296015][T14138] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.308623][T14138] bond3: (slave gretap1): making interface the new active one [ 157.310250][T14138] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 157.369452][T14177] binder: 14137:14177 ioctl c0306201 200000000640 returned -22 [ 158.165582][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 158.165598][ T40] audit: type=1326 audit(1770486497.340:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14195 comm="syz.4.1668" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93c759aeb9 code=0x0 [ 158.562479][T14200] bridge_slave_0: left allmulticast mode [ 158.564941][T14200] bridge_slave_0: left promiscuous mode [ 158.567454][T14200] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.574798][T14200] bridge_slave_1: left allmulticast mode [ 158.576891][T14200] bridge_slave_1: left promiscuous mode [ 158.578717][T14200] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.588831][T14200] bond0: (slave bond_slave_0): Releasing backup interface [ 158.595125][T14200] bond0: (slave bond_slave_1): Releasing backup interface [ 158.603242][T14200] team0: Port device team_slave_0 removed [ 158.607781][T14200] team0: Port device team_slave_1 removed [ 158.610042][T14200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.613660][T14200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.617860][T14200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.620277][T14200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.623901][T14200] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 158.680998][T14200] __nla_validate_parse: 65 callbacks suppressed [ 158.681017][T14200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1669'. [ 158.687261][T14200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1669'. [ 158.714357][T14200] ip6gre1: entered allmulticast mode [ 158.719364][T14200] team0: Port device ip6gre1 added [ 158.888976][T14211] XFS (nullb0): Invalid superblock magic number [ 158.952101][T14219] fuse: Unknown parameter 'group_i00000000000000000000' [ 159.815058][T14239] netlink: 'syz.3.1679': attribute type 12 has an invalid length. [ 159.818372][T14239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1679'. [ 159.821555][T14239] netlink: 'syz.3.1679': attribute type 12 has an invalid length. [ 159.824828][T14239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1679'. [ 159.939524][T14247] fuse: Unknown parameter 'group_id00000000000000000000' [ 159.959203][ T5941] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 159.963742][ T5941] Bluetooth: hci2: Injecting HCI hardware error event [ 159.967702][ T5929] Bluetooth: hci2: hardware error 0x00 [ 160.047583][ T40] audit: type=1400 audit(1770486499.098:680): avc: denied { read } for pid=14255 comm="syz.3.1684" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 160.258246][T14260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1685'. [ 160.267938][ T40] audit: type=1400 audit(1770486499.304:681): avc: denied { getopt } for pid=14259 comm="syz.3.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 160.767504][T14278] netlink: 'syz.2.1688': attribute type 8 has an invalid length. [ 160.769944][T14278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1688'. [ 160.776371][T14278] bond0: entered promiscuous mode [ 160.779142][T14278] gretap0: entered promiscuous mode [ 160.788957][T14278] bond0: left promiscuous mode [ 160.791322][T14278] gretap0: left promiscuous mode [ 160.823161][T14283] netlink: 'syz.2.1688': attribute type 8 has an invalid length. [ 160.825797][T14283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1688'. [ 160.831355][T14283] bond0: entered promiscuous mode [ 160.833726][T14283] gretap0: entered promiscuous mode [ 160.836619][T14283] bond0: left promiscuous mode [ 160.838975][T14283] gretap0: left promiscuous mode [ 160.985640][T14291] fuse: Unknown parameter 'group_id00000000000000000000' [ 161.087446][ T40] audit: type=1400 audit(1770486500.071:682): avc: denied { map } for pid=14298 comm="syz.2.1693" path="socket:[41009]" dev="sockfs" ino=41009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 161.168629][T14296] fuse: Unknown parameter 'rostmode' [ 161.198000][T14312] Cannot find add_set index 65532 as target [ 161.550251][T14327] fuse: Unknown parameter 'group_id00000000000000000000' [ 161.647458][T14333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1702'. [ 161.983951][ T40] audit: type=1400 audit(1770486500.913:683): avc: denied { mount } for pid=14354 comm="syz.0.1708" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 161.991669][ T40] audit: type=1400 audit(1770486500.922:684): avc: denied { mounton } for pid=14354 comm="syz.0.1708" path="/393/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 161.999315][ T40] audit: type=1400 audit(1770486500.922:685): avc: denied { remount } for pid=14354 comm="syz.0.1708" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 162.052702][ T40] audit: type=1400 audit(1770486500.969:686): avc: denied { unmount } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 162.183268][ T5929] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 162.397369][ T40] audit: type=1400 audit(1770486501.296:687): avc: denied { nlmsg_write } for pid=14370 comm="syz.4.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 162.403825][ T40] audit: type=1107 audit(1770486501.296:688): pid=14370 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 162.487330][T14381] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1714'. [ 162.581136][T14381] kvm: Disabled LAPIC found during irq injection [ 162.720654][T14395] syzkaller0: entered promiscuous mode [ 162.722454][T14395] syzkaller0: entered allmulticast mode [ 162.774212][T14399] loop6: detected capacity change from 0 to 2640 [ 163.030093][T14409] netlink: 'syz.4.1719': attribute type 8 has an invalid length. [ 163.032677][T14409] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1719'. [ 163.036442][T14409] block nbd0: not configured, cannot reconfigure [ 163.563670][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 163.563682][ T40] audit: type=1400 audit(1770486502.390:693): avc: denied { map } for pid=14419 comm="syz.2.1721" path="socket:[41156]" dev="sockfs" ino=41156 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 163.577055][ T40] audit: type=1400 audit(1770486502.390:694): avc: denied { map } for pid=14419 comm="syz.2.1721" path="socket:[41156]" dev="sockfs" ino=41156 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 164.152663][ T12] wlan1: Trigger new scan to find an IBSS to join [ 164.262900][T14442] __nla_validate_parse: 1 callbacks suppressed [ 164.262912][T14442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1724'. [ 164.271228][ T40] audit: type=1400 audit(1770486503.054:695): avc: denied { node_bind } for pid=14443 comm="syz.2.1726" saddr=172.30.1.3 src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 164.298796][T14442] macvlan2: entered promiscuous mode [ 164.300798][T14442] macvlan2: entered allmulticast mode [ 164.302979][T14442] bond_slave_0: entered promiscuous mode [ 164.305585][T14442] bond_slave_1: entered promiscuous mode [ 164.311264][T14442] bond0: entered allmulticast mode [ 164.313079][T14442] bond_slave_0: entered allmulticast mode [ 164.314899][T14442] bond_slave_1: entered allmulticast mode [ 164.316986][T14442] bridge_slave_1: entered allmulticast mode [ 164.318792][T14442] bond0: entered promiscuous mode [ 164.320599][T14442] bridge_slave_1: entered promiscuous mode [ 164.324336][T14442] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 164.328736][T14442] bond12: (slave macvlan2): Enslaving as an active interface with an up link [ 164.361806][T14490] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1729'. [ 164.363263][T14488] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 164.363258][ T40] audit: type=1400 audit(1770486503.129:696): avc: denied { mounton } for pid=14487 comm="syz.0.1730" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 164.629665][ T40] audit: type=1400 audit(1770486503.382:697): avc: denied { mount } for pid=14507 comm="syz.0.1733" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 164.644072][T14510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.651786][T14510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.715120][ T40] audit: type=1400 audit(1770486503.457:698): avc: denied { write } for pid=14513 comm="syz.0.1735" name="/" dev="9p" ino=72614011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.767486][T14514] lo speed is unknown, defaulting to 1000 [ 165.144748][T14542] CUSE: unknown device info "ý<±5æç—‘ë\áïð«ºzöŒ0z,~XY©+A}sÎ…F'%ÓËó:„Ij!ó@Q…åmß‘RÞúGQãò––q 6*³5p)ÙxÙ?," [ 165.161244][T14542] CUSE: unknown device info "ÿŽ&b¬í%Z‰ñWú«)«×3\my­ åû" [ 165.164108][T14542] CUSE: unknown device info "Ò­Sû‡¨‚¨«€ýmMÀiÊ_¿Ä0˱°Ý¯;qÈ]Â{ìi¹ë79ñ©{Ò0Ôµßt•º~ø±>V¤ûÞÂZÀ\.9êÁOC‡«®U™&†qÿ…±Ïmsfûkž½cêð±"" [ 165.169872][T14542] CUSE: DEVNAME unspecified [ 165.204033][T14547] netlink: 'syz.0.1737': attribute type 7 has an invalid length. [ 165.206568][T14547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1737'. [ 165.213229][T14547] netlink: 'syz.0.1737': attribute type 7 has an invalid length. [ 165.216433][T14547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1737'. [ 165.339037][T14561] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 165.342022][T14561] block device autoloading is deprecated and will be removed. [ 165.355905][T14572] fuse: Unknown parameter '' [ 165.378258][T14577] fuse: Bad value for 'fd' [ 165.404199][T14586] overlayfs: missing 'lowerdir' [ 165.429386][T14586] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.435133][ T40] audit: type=1400 audit(1770486504.139:699): avc: denied { remove_name } for pid=14580 comm="syz.4.1746" name="cpuacct.usage_sys" dev="9p" ino=72614243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.436509][T14586] overlayfs: missing 'lowerdir' [ 165.444447][ T40] audit: type=1400 audit(1770486504.139:700): avc: denied { unlink } for pid=14580 comm="syz.4.1746" name="cpuacct.usage_sys" dev="9p" ino=72614243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 165.466882][T14582] netfs: Couldn't get user pages (rc=-14) [ 165.480366][T14624] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.538906][ T40] audit: type=1400 audit(1770486504.233:701): avc: denied { map } for pid=14665 comm="syz.3.1751" path="/dev/comedi0" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 165.591091][T14680] lo speed is unknown, defaulting to 1000 [ 165.651252][ T40] audit: type=1400 audit(1770486504.345:702): avc: denied { setopt } for pid=14712 comm="syz.4.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 165.698994][T14718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1755'. [ 165.710415][T14721] fuse: Bad value for 'fd' [ 165.847365][T14735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1762'. [ 166.183660][T14776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1765'. [ 166.521843][T14785] fuse: Bad value for 'fd' [ 166.550762][T14787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1768'. [ 166.551351][T14788] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1768'. [ 166.860828][T14856] sp0: Synchronizing with TNC [ 166.864513][T14855] [U] è [ 166.999181][T14872] netlink: 'syz.0.1772': attribute type 10 has an invalid length. [ 167.002451][T14872] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1772'. [ 167.011870][T14874] erspan0: entered promiscuous mode [ 167.293758][ T5929] Bluetooth: hci0: unexpected event for opcode 0x080b [ 167.294211][T14906] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 167.304524][T14906] netlink: 'syz.0.1779': attribute type 64 has an invalid length. [ 167.307616][T14906] netlink: 'syz.0.1779': attribute type 4 has an invalid length. [ 167.311187][T14908] siw: device registration error -23 [ 167.385236][T14918] tmpfs: Bad value for 'huge' [ 167.396515][ T5929] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 167.440495][T14787] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 167.446265][T14924] syzkaller0: entered promiscuous mode [ 167.448094][T14924] syzkaller0: entered allmulticast mode [ 167.522588][T14934] comedi comedi2: pcl812: I/O port conflict (0x4f27,16) [ 167.552891][T14940] fuse: Invalid rootmode [ 167.595124][T14943] use of bytesused == 0 is deprecated and will be removed in the future, [ 167.598156][T14943] use the actual size instead. [ 167.719993][T14966] (syz.4.1795,14966,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 167.723445][T14966] (syz.4.1795,14966,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 167.946906][ T5975] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 168.086480][ T5975] usb 7-1: device descriptor read/64, error -71 [ 168.277397][T14984] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 168.354105][ T5975] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 168.502443][ T5975] usb 7-1: device descriptor read/64, error -71 [ 168.620390][ T5975] usb usb7-port1: attempt power cycle [ 168.662085][T14998] fuse: Bad value for 'rootmode' [ 168.799210][T15014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.803279][T15014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.973039][ T5994] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 168.983930][ T5975] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 169.005592][ T5975] usb 7-1: device descriptor read/8, error -71 [ 169.111997][ T5994] usb 5-1: device descriptor read/64, error -71 [ 169.272263][ T5975] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 169.304852][ T5975] usb 7-1: device descriptor read/8, error -71 [ 169.379253][ T5994] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 169.422284][ T5975] usb usb7-port1: unable to enumerate USB device [ 169.501705][T15026] overlayfs: failed to resolve './file0': -2 [ 169.528868][ T5994] usb 5-1: device descriptor read/64, error -71 [ 169.646831][ T5994] usb usb5-port1: attempt power cycle [ 169.769001][T15035] netlink: 'syz.3.1812': attribute type 1 has an invalid length. [ 169.805942][T15040] fuse: Bad value for 'rootmode' [ 169.918647][T15048] misc userio: The device must be registered before sending interrupts [ 169.922473][T15051] misc userio: The device must be registered before sending interrupts [ 169.938250][T15048] input: syz0 as /devices/virtual/input/input11 [ 170.011311][ T5994] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 170.044882][ T5994] usb 5-1: device descriptor read/8, error -71 [ 170.298787][ T5994] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 170.331233][ T5994] usb 5-1: device descriptor read/8, error -71 [ 170.384401][T15083] IPv6: syztnl0: Disabled Multicast RS [ 170.460353][ T5994] usb usb5-port1: unable to enumerate USB device [ 170.980631][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 170.980642][ T40] audit: type=1400 audit(1770486509.321:713): avc: denied { append } for pid=15092 comm="syz.2.1819" name="ptmx" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:usbtty_device_t:s0" [ 170.991241][ T40] audit: type=1400 audit(1770486509.330:714): avc: denied { read write } for pid=15095 comm="syz.3.1820" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 171.000828][ T40] audit: type=1400 audit(1770486509.330:715): avc: denied { open } for pid=15095 comm="syz.3.1820" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 171.031823][T15101] gfs2: not a GFS2 filesystem [ 171.133688][T15112] fuse: Bad value for 'rootmode' [ 171.212474][T15115] __nla_validate_parse: 9 callbacks suppressed [ 171.212493][T15115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1824'. [ 171.270818][ T40] audit: type=1400 audit(1770486509.592:716): avc: denied { map } for pid=15113 comm="syz.3.1825" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 171.279858][ T40] audit: type=1400 audit(1770486509.592:717): avc: denied { execute } for pid=15113 comm="syz.3.1825" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 171.315848][T15116] netlink: 'syz.3.1825': attribute type 4 has an invalid length. [ 171.318382][T15116] netlink: 'syz.3.1825': attribute type 1 has an invalid length. [ 171.320940][T15116] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1825'. [ 171.567816][ T40] audit: type=1400 audit(1770486509.872:718): avc: denied { watch_mount } for pid=15128 comm="syz.3.1829" path="/383" dev="tmpfs" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 171.581624][T15129] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 171.585422][T15129] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 171.588224][T15129] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 171.590673][T15129] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 171.701216][T15136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1831'. [ 171.811939][T15143] netlink: 'syz.3.1832': attribute type 33 has an invalid length. [ 171.815010][T15143] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1832'. [ 171.952398][T15147] fuse: Unknown parameter 'use00000000000000000000' [ 172.079290][T15159] netlink: 'syz.0.1837': attribute type 10 has an invalid length. [ 172.079310][T15161] netlink: 'syz.0.1837': attribute type 10 has an invalid length. [ 172.086781][T15159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.090053][T15159] batadv0: entered promiscuous mode [ 172.094504][T15161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.103121][T15159] netlink: 'syz.0.1837': attribute type 10 has an invalid length. [ 172.106599][T15159] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1837'. [ 172.109515][T15159] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 172.303694][T15176] program syz.2.1839 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.559354][T15192] fuse: Unknown parameter 'use00000000000000000000' [ 172.708394][T15198] loop6: detected capacity change from 0 to 524288000 [ 173.143235][ T6005] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 173.164537][T15213] netem: change failed [ 173.326108][ T6005] usb 5-1: Using ep0 maxpacket: 16 [ 173.331035][ T6005] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.334932][ T6005] usb 5-1: config 0 has no interfaces? [ 173.337673][ T6005] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 173.354498][ T6005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.368358][ T6005] usb 5-1: config 0 descriptor?? [ 173.422881][T15223] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.1847'. [ 173.426935][T15223] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 173.918751][T15240] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15240 comm=syz.4.1852 [ 173.925506][T15240] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15240 comm=syz.4.1852 [ 173.948258][T15240] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15240 comm=syz.4.1852 [ 173.964030][T15240] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15240 comm=syz.4.1852 [ 173.972687][T15240] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15240 comm=syz.4.1852 [ 173.978018][T15240] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15240 comm=syz.4.1852 [ 173.984854][T15240] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15240 comm=syz.4.1852 [ 174.009165][T15240] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15240 comm=syz.4.1852 [ 174.014239][T15240] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15240 comm=syz.4.1852 [ 174.019998][T15240] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15240 comm=syz.4.1852 [ 174.973871][T15262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.134690][T15269] fuse: Unknown parameter 'user_i00000000000000000000' [ 175.942170][ T831] usb 5-1: USB disconnect, device number 23 [ 176.162026][T15302] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1867'. [ 176.460061][T15310] mkiss: ax0: crc mode is auto. [ 176.700276][T15323] random: crng reseeded on system resumption [ 176.735642][ T40] audit: type=1400 audit(1770486514.670:719): avc: denied { append } for pid=15322 comm="syz.3.1870" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 177.148815][T15347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1874'. [ 177.395039][T15359] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1878'. [ 177.492173][T15369] siw: device registration error -23 [ 177.628410][T15365] Cannot find del_set index 4 as target [ 177.709389][T15378] siw: device registration error -23 [ 177.789933][ T40] audit: type=1400 audit(1770486515.690:720): avc: denied { map } for pid=15382 comm="syz.2.1884" path="/86" dev="tmpfs" ino=469 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 177.820588][ T40] audit: type=1400 audit(1770486515.718:721): avc: denied { execute } for pid=15382 comm="syz.2.1884" path="/86" dev="tmpfs" ino=469 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 177.820686][T15386] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 177.895153][T15386] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1885'. [ 178.050404][T15404] netlink: 'syz.3.1891': attribute type 1 has an invalid length. [ 178.053954][T15404] netlink: 'syz.3.1891': attribute type 1 has an invalid length. [ 178.098847][T15410] fuse: Unknown parameter 'user_id00000000000000000000' [ 178.284416][T15419] lo speed is unknown, defaulting to 1000 [ 178.577996][T15459] lo speed is unknown, defaulting to 1000 [ 178.669805][T15458] ip6erspan0: entered allmulticast mode [ 178.792724][T15485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1900'. [ 178.919041][ T40] audit: type=1400 audit(1770486516.737:722): avc: denied { ioctl } for pid=15505 comm="syz.0.1902" path="socket:[44719]" dev="sockfs" ino=44719 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 179.026487][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 179.199533][ T40] audit: type=1400 audit(1770486516.989:723): avc: denied { ioctl } for pid=15505 comm="syz.0.1902" path="socket:[44722]" dev="sockfs" ino=44722 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 179.231946][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 179.247644][ T24] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 179.269891][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.278536][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 179.291102][ T24] pvrusb2: ********** [ 179.293471][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 179.300661][ T24] pvrusb2: Important functionality might not be entirely working. [ 179.312459][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 179.346023][ T24] pvrusb2: ********** [ 179.471523][T15517] fuse: Unknown parameter 'user_id00000000000000000000' [ 179.584746][ T2490] pvrusb2: Invalid write control endpoint [ 179.748078][ T6023] usb 7-1: USB disconnect, device number 7 [ 179.750882][ T2490] pvrusb2: Invalid write control endpoint [ 179.762997][ T2490] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 179.777236][ T2490] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 179.784489][ T2490] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 179.794701][ T2490] pvrusb2: Device being rendered inoperable [ 179.809081][ T2490] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 179.816209][ T2490] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 179.913446][ T2490] pvrusb2: Attached sub-driver cx25840 [ 179.924030][ T2490] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 179.953316][ T2490] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 179.970286][T15540] random: crng reseeded on system resumption [ 180.042823][ T40] audit: type=1400 audit(1770486517.803:724): avc: denied { transfer } for pid=15539 comm="syz.0.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 180.048083][T15542] binder_alloc: 15539: binder_alloc_buf, no vma [ 180.378468][T15560] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.1909'. [ 180.405976][ T5929] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 180.480611][T15566] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1911'. [ 180.529054][T15566] selinux_netlink_send: 24 callbacks suppressed [ 180.529072][T15566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15566 comm=syz.2.1911 [ 180.779760][T15578] fuse: Unknown parameter 'user_id00000000000000000000' [ 181.185459][T15591] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1917'. [ 181.497621][T15597] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 181.517398][T15597] qnx6: wrong signature (magic) in superblock #1. [ 181.535627][T15597] qnx6: unable to read the first superblock [ 181.553997][T15601] openvswitch: netlink: Multiple metadata blocks provided [ 181.562029][T15602] input: syz1 as /devices/virtual/input/input12 [ 181.639531][ T40] audit: type=1400 audit(1770486519.290:725): avc: denied { getopt } for pid=15607 comm="syz.4.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 181.643827][T15608] tmpfs: Invalid gid '0x00000000ffffffff' [ 181.688595][T15608] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 181.709368][T15608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1922'. [ 181.714598][T15608] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 181.720490][T15608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.731701][T15613] fuse: Bad value for 'fd' [ 181.893884][T15622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.917690][T15622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.028446][ T40] audit: type=1400 audit(1770486519.655:726): avc: denied { mount } for pid=15632 comm="syz.3.1927" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 182.051727][ T5929] block nbd2: Receive control failed (result -32) [ 182.067020][T15595] block nbd2: shutting down sockets [ 182.607886][T15648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1931'. [ 182.778329][T15656] netlink: 'syz.4.1932': attribute type 1 has an invalid length. [ 182.869965][T15656] 8021q: adding VLAN 0 to HW filter on device bond4 [ 182.883626][T15657] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 182.940865][T15694] netlink: 'syz.2.1933': attribute type 11 has an invalid length. [ 183.056512][ T40] audit: type=1400 audit(1770486520.609:727): avc: denied { ioctl } for pid=15695 comm="syz.4.1934" path="socket:[42920]" dev="sockfs" ino=42920 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 183.108650][ T40] audit: type=1400 audit(1770486520.618:728): avc: denied { unmount } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 183.240626][ T40] audit: type=1400 audit(1770486520.768:729): avc: denied { map } for pid=15706 comm="syz.2.1936" path="socket:[45638]" dev="sockfs" ino=45638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 183.275837][ T40] audit: type=1400 audit(1770486520.768:730): avc: denied { read accept } for pid=15706 comm="syz.2.1936" path="socket:[45638]" dev="sockfs" ino=45638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 183.342285][T15707] gfs2: error -5 reading superblock [ 183.429247][T15707] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1936'. [ 183.625354][T15723] Cannot find del_set index 2 as target [ 183.638611][T15726] FAT-fs (loop2): unable to read boot sector [ 183.646606][ T40] audit: type=1400 audit(1770486521.161:731): avc: denied { mounton } for pid=15722 comm="syz.2.1941" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 183.840254][ T40] audit: type=1400 audit(1770486521.348:732): avc: denied { connect } for pid=15733 comm="syz.4.1945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 184.167971][T15749] fuse: Unknown parameter '0x0000000000000003' [ 184.487511][ T40] audit: type=1400 audit(1770486521.946:733): avc: denied { remount } for pid=15712 comm="syz.3.1939" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 184.954596][T15772] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1954'. [ 184.964608][T15776] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 185.035943][T15778] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1954'. [ 185.051180][T15778] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1954'. [ 185.073218][T15778] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1954'. [ 185.081504][T15778] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1954'. [ 185.081922][T15780] fuse: Unknown parameter '0x0000000000000003' [ 185.096101][T15778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1954'. [ 186.373645][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.425481][T15812] fuse: Unknown parameter '0x0000000000000003' [ 186.456536][T15810] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1965'. [ 186.507378][T15810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1965'. [ 186.599460][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 186.628742][ T5941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 186.647389][ T5941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 186.738811][T15825] netlink: 'syz.3.1969': attribute type 2 has an invalid length. [ 186.771867][ T5941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 186.819149][T15828] netlink: 'syz.3.1969': attribute type 2 has an invalid length. [ 186.824574][ T5941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.924653][ T5929] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 186.939672][T15849] netlink: 'syz.3.1969': attribute type 10 has an invalid length. [ 186.942002][ T5929] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 186.954357][ T5929] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 186.966888][ T5929] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 187.000592][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.005007][ T5929] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 187.089654][T15825] !: entered promiscuous mode [ 187.098632][T15849] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.098764][T15849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.102273][T15849] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.102389][T15849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.108564][T15849] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 187.117584][T15828] !: left promiscuous mode [ 187.316697][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.369348][T15819] lo speed is unknown, defaulting to 1000 [ 187.478887][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.838338][ T40] audit: type=1400 audit(1770486525.089:734): avc: denied { attach_queue } for pid=15872 comm="syz.0.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 187.962298][T15930] fuse: Unknown parameter '0x0000000000000003' [ 188.388469][T15956] program syz.3.1977 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.394817][T15956] ata1.00: invalid transfer count 0 [ 188.441006][T15958] program syz.3.1977 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.444969][T15958] ata1.00: non-matching transfer count (6656/0) [ 188.784547][ T62] team0: Port device ip6gre1 removed [ 189.214594][ T5929] Bluetooth: hci1: command tx timeout [ 189.768676][ T62] bond0 (unregistering): Released all slaves [ 190.281933][ T62] bond1 (unregistering): Released all slaves [ 190.462427][ T40] audit: type=1400 audit(1770486527.539:735): avc: denied { write } for pid=15999 comm="syz.3.1985" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 190.674698][ T62] bond2 (unregistering): Released all slaves [ 190.768995][T15819] chnl_net:caif_netlink_parms(): no params data found [ 190.914196][T15978] batadv_slave_1: entered promiscuous mode [ 190.917023][T15978] batadv_slave_1: left promiscuous mode [ 191.141396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 191.161158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 191.448614][ T5929] Bluetooth: hci1: command tx timeout [ 192.152204][T15819] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.157378][T15819] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.160662][T15819] bridge_slave_0: entered allmulticast mode [ 192.164923][T15819] bridge_slave_0: entered promiscuous mode [ 192.171793][T15819] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.177432][T15819] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.182209][T15819] bridge_slave_1: entered allmulticast mode [ 192.200482][T15819] bridge_slave_1: entered promiscuous mode [ 192.404051][T15819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.425216][T15819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.503116][ T62] hsr_slave_0: left promiscuous mode [ 192.529734][ T62] hsr_slave_1: left promiscuous mode [ 192.544309][ T62] veth1_macvtap: left promiscuous mode [ 192.575638][ T62] veth0_macvtap: left promiscuous mode [ 192.578219][ T62] veth1_vlan: left promiscuous mode [ 192.580531][ T62] veth0_vlan: left promiscuous mode [ 192.890879][ T40] audit: type=1400 audit(1770486529.821:736): avc: denied { lock } for pid=16155 comm="syz.4.1996" path="socket:[46304]" dev="sockfs" ino=46304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 193.680461][ T5929] Bluetooth: hci1: command tx timeout [ 195.688932][T15819] team0: Port device team_slave_0 added [ 195.730813][T15819] team0: Port device team_slave_1 added [ 195.830256][T15819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.845871][T15819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.860793][T15819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.883767][T15819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.888081][T15819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.907798][ T5929] Bluetooth: hci1: command tx timeout [ 195.926849][T15819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.982631][T16205] "syz.4.1999" (16205) uses obsolete ecb(arc4) skcipher [ 195.986675][T16205] netlink: 700 bytes leftover after parsing attributes in process `syz.4.1999'. [ 196.100803][T15819] hsr_slave_0: entered promiscuous mode [ 196.131103][T15819] hsr_slave_1: entered promiscuous mode [ 196.632653][T16303] xt_check_table_hooks: 55 callbacks suppressed [ 196.632671][T16303] x_tables: duplicate underflow at hook 3 [ 196.641431][ T40] audit: type=1400 audit(1770486533.319:737): avc: denied { read } for pid=16302 comm="syz.3.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 196.812637][T16336] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 196.882371][T16347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2006'. [ 197.043558][T16345] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2005'. [ 197.071673][T16345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2005'. [ 197.094126][T16345] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2005'. [ 197.097256][T16345] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2005'. [ 197.137718][T15819] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 197.251876][T15819] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 197.308817][T15819] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 197.340499][T15819] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 197.787966][T15819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.794787][T16402] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2012'. [ 197.887630][T15819] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.972931][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.976183][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.009769][ T1236] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.012521][ T1236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.527620][T16433] xt_CT: No such helper "syz0" [ 198.552828][T15819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.818401][ T40] audit: type=1800 audit(1770486535.358:738): pid=16412 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2014" name="/" dev="fuse" ino=4 res=0 errno=0 [ 199.008891][T16459] comedi comedi3: comedi_config --init_data is deprecated [ 199.075040][T15819] veth0_vlan: entered promiscuous mode [ 199.098972][T15819] veth1_vlan: entered promiscuous mode [ 199.202592][T15819] veth0_macvtap: entered promiscuous mode [ 199.208766][T15819] veth1_macvtap: entered promiscuous mode [ 199.281330][T16467] 8021q: adding VLAN 0 to HW filter on device bond5 [ 199.454465][T15819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.518307][T15819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.518698][T16510] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2027'. [ 199.586261][ T46] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.589969][ T46] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.593976][ T46] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.675727][ T46] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.725051][T16510] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2027'. [ 199.871535][ T40] audit: type=1400 audit(1770486536.340:739): avc: denied { execute_no_trans } for pid=16520 comm="syz.0.2030" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F522C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=49340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 200.017621][ T40] audit: type=1400 audit(1770486536.480:740): avc: denied { mounton } for pid=16520 comm="syz.0.2030" path="/proc/1477/cgroup" dev="proc" ino=48462 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 200.094413][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.115822][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.226155][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.242430][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.630036][T16574] SELinux: Context system_u:object_r:var_lock_t:s0 is not valid (left unmapped). [ 200.651540][ T40] audit: type=1400 audit(1770486537.069:741): avc: denied { relabelto } for pid=16572 comm="syz.4.2037" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:var_lock_t:s0" [ 200.653035][T16574] 9p: Bad value for 'rfdno' [ 200.667060][ T40] audit: type=1400 audit(1770486537.069:742): avc: denied { associate } for pid=16572 comm="syz.4.2037" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:var_lock_t:s0" [ 201.103993][ T5975] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 201.158885][T16598] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2043'. [ 201.295645][T16604] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 201.312370][T16604] Cannot find set identified by id 0 to match [ 201.413938][ T5975] usb 5-1: Using ep0 maxpacket: 32 [ 201.426470][ T5975] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 201.431286][ T5975] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 201.445112][ T5975] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 201.459325][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.463390][ T5975] usb 5-1: Product: 餮á‚榢캮谑ᚬ躶稡鈤㚿鷴㼾ã¥åŽ¤ê’˜ã€©á±ŽåŸšã§–跛ೡ뗆蕪輦æ›æ¢å¶¨ä½¤é‰­âŸ¸ë¿˜ë„‘噶ï⤗㰌銾ം쪰㭊➻똨滎雲Ä庵ìŠï³·íŽ¢é°—ᯚ졷é‘￀㞇깿Ⴆï‹ë½³ç—¯ì©›ê—늹芨싕 [ 201.490724][ T5975] usb 5-1: Manufacturer: 宠苈ᦓî–襲⢫èµè‰Œâµ¯â‚”ިຯꮆ薸騮푣ᗢ撖ᴩ牰쬼俛㌾ᑾ쪤㗋ꅤꙃä‹ç—¾í•»î˜…饷ꚅ先ᚘ뻌ȫ졅甾 [ 201.522133][ T5975] usb 5-1: SerialNumber: syz [ 201.847823][ T5975] usb 5-1: 0:2 : does not exist [ 201.944141][ T5975] usb 5-1: USB disconnect, device number 24 [ 202.231518][T16643] Invalid source name [ 202.234566][T16643] UBIFS error (pid: 16643): cannot open "ubifs", error -22 [ 202.554542][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2053'. [ 202.571416][T16658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16658 comm=syz.0.2053 [ 202.588038][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2053'. [ 202.595025][T16660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16660 comm=syz.0.2053 [ 203.482370][T16694] can: request_module (can-proto-0) failed. [ 204.309050][T16733] lo speed is unknown, defaulting to 1000 [ 204.341836][T16729] lo speed is unknown, defaulting to 1000 [ 205.333993][T16833] overlayfs: missing 'lowerdir' [ 205.479609][T16843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.522073][T16843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.810129][T16859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2079'. [ 205.848167][T16859] openvswitch: netlink: Flow actions attr not present in new flow. [ 206.035956][T16873] FAULT_INJECTION: forcing a failure. [ 206.035956][T16873] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 206.069841][T16873] CPU: 3 UID: 0 PID: 16873 Comm: syz.0.2084 Tainted: G L syzkaller #0 PREEMPT(full) [ 206.069869][T16873] Tainted: [L]=SOFTLOCKUP [ 206.069875][T16873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 206.069885][T16873] Call Trace: [ 206.069894][T16873] [ 206.069902][T16873] dump_stack_lvl+0x100/0x190 [ 206.069930][T16873] should_fail_ex.cold+0x5/0xa [ 206.069950][T16873] strncpy_from_user+0x3b/0x2d0 [ 206.069968][T16873] ? find_held_lock+0x2b/0x80 [ 206.069992][T16873] path_getxattrat+0x102/0x420 [ 206.070017][T16873] ? __pfx_path_getxattrat+0x10/0x10 [ 206.070038][T16873] ? ksys_write+0x190/0x250 [ 206.070062][T16873] ? __mutex_unlock_slowpath+0x15c/0x790 [ 206.070098][T16873] ? __pfx_ksys_write+0x10/0x10 [ 206.070124][T16873] do_syscall_64+0xc9/0xf80 [ 206.070146][T16873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.070165][T16873] RIP: 0033:0x7f56c619aeb9 [ 206.070179][T16873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.070196][T16873] RSP: 002b:00007f56c710f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 206.070215][T16873] RAX: ffffffffffffffda RBX: 00007f56c6415fa0 RCX: 00007f56c619aeb9 [ 206.070225][T16873] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000200000000180 [ 206.070236][T16873] RBP: 00007f56c710f090 R08: 0000000000000000 R09: 0000000000000000 [ 206.070245][T16873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.070255][T16873] R13: 00007f56c6416038 R14: 00007f56c6415fa0 R15: 00007ffc6d709e38 [ 206.070279][T16873] [ 206.424580][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.428675][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.568900][T16883] binder: 16882:16883 unknown command 0 [ 206.571385][T16883] binder: 16882:16883 ioctl c0306201 200000000080 returned -22 [ 206.587391][T16885] xt_hashlimit: max too large, truncated to 1048576 [ 206.591421][T16885] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 206.690942][ T5929] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 206.724820][ T5929] Bluetooth: hci1: Injecting HCI hardware error event [ 206.767293][ T5941] Bluetooth: hci1: hardware error 0x00 [ 206.815635][T16888] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2087'. [ 206.821092][T16889] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2087'. [ 207.244669][ T2302] hid (null): unknown global tag 0xd [ 207.269401][ T40] audit: type=1400 audit(1770486543.260:743): avc: denied { ioctl } for pid=16895 comm="syz.5.2088" path="/dev/uhid" dev="devtmpfs" ino=1296 ioctlcmd=0x941a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 207.273369][ T2302] hid (null): invalid report_size 876471980 [ 207.347596][ T2302] hid (null): unknown global tag 0xc [ 207.351043][ T2302] hid (null): invalid report_size 28860 [ 207.352564][T16899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2089'. [ 207.408679][ T2302] hid-generic 00B3:0D91:0009.0003: unknown global tag 0xd [ 207.415751][ T2302] hid-generic 00B3:0D91:0009.0003: item 0 4 1 13 parsing failed [ 207.425291][ T2302] hid-generic 00B3:0D91:0009.0003: probe with driver hid-generic failed with error -22 [ 207.452484][T16899] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2089'. [ 207.472537][T16899] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2089'. [ 207.477653][T16899] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2089'. [ 207.481046][T16899] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2089'. [ 207.948329][T16928] FAULT_INJECTION: forcing a failure. [ 207.948329][T16928] name failslab, interval 1, probability 0, space 0, times 1 [ 207.985524][T16928] CPU: 3 UID: 0 PID: 16928 Comm: syz.3.2095 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.985551][T16928] Tainted: [L]=SOFTLOCKUP [ 207.985555][T16928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.985564][T16928] Call Trace: [ 207.985570][T16928] [ 207.985577][T16928] dump_stack_lvl+0x100/0x190 [ 207.985601][T16928] should_fail_ex.cold+0x5/0xa [ 207.985618][T16928] should_failslab+0xc2/0x120 [ 207.985638][T16928] kmem_cache_alloc_noprof+0x83/0x780 [ 207.985655][T16928] ? __might_fault+0xc5/0x140 [ 207.985671][T16928] ? getname_flags.part.0+0x4c/0x540 [ 207.985696][T16928] ? getname_flags.part.0+0x4c/0x540 [ 207.985716][T16928] getname_flags.part.0+0x4c/0x540 [ 207.985741][T16928] getname_flags+0x93/0xf0 [ 207.985756][T16928] path_getxattrat+0x397/0x420 [ 207.985778][T16928] ? __pfx_path_getxattrat+0x10/0x10 [ 207.985797][T16928] ? ksys_write+0x190/0x250 [ 207.985816][T16928] ? __mutex_unlock_slowpath+0x15c/0x790 [ 207.985849][T16928] ? __pfx_ksys_write+0x10/0x10 [ 207.985871][T16928] do_syscall_64+0xc9/0xf80 [ 207.985889][T16928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.985904][T16928] RIP: 0033:0x7f88fcd9aeb9 [ 207.985916][T16928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.985930][T16928] RSP: 002b:00007f88fdc6a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 207.985946][T16928] RAX: ffffffffffffffda RBX: 00007f88fd015fa0 RCX: 00007f88fcd9aeb9 [ 207.985956][T16928] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000200000000180 [ 207.985965][T16928] RBP: 00007f88fdc6a090 R08: 0000000000000000 R09: 0000000000000000 [ 207.985974][T16928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.985982][T16928] R13: 00007f88fd016038 R14: 00007f88fd015fa0 R15: 00007fff4078c258 [ 207.986003][T16928] [ 208.386387][T16943] sctp: [Deprecated]: syz.3.2100 (pid 16943) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.386387][T16943] Use struct sctp_sack_info instead [ 208.405230][T16942] sctp: [Deprecated]: syz.3.2100 (pid 16942) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.405230][T16942] Use struct sctp_sack_info instead [ 208.729118][ T6023] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 208.908283][ T6023] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 208.918373][ T6023] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.952157][ T6023] usb 10-1: Product: syz [ 208.954390][ T6023] usb 10-1: Manufacturer: syz [ 208.956433][ T6023] usb 10-1: SerialNumber: syz [ 209.052985][T16970] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2103'. [ 209.220672][ T6023] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 209.242640][ T6023] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 209.283384][ T6023] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 209.315743][ T5941] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 209.372223][ T6023] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 209.443447][ T6023] usb 10-1: USB disconnect, device number 2 [ 209.663775][T16992] FAULT_INJECTION: forcing a failure. [ 209.663775][T16992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.710297][T16992] CPU: 0 UID: 0 PID: 16992 Comm: syz.4.2106 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.710324][T16992] Tainted: [L]=SOFTLOCKUP [ 209.710329][T16992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.710339][T16992] Call Trace: [ 209.710344][T16992] [ 209.710351][T16992] dump_stack_lvl+0x100/0x190 [ 209.710377][T16992] should_fail_ex.cold+0x5/0xa [ 209.710395][T16992] strncpy_from_user+0x3b/0x2d0 [ 209.710415][T16992] getname_flags.part.0+0x8f/0x540 [ 209.710440][T16992] getname_flags+0x93/0xf0 [ 209.710458][T16992] path_getxattrat+0x397/0x420 [ 209.710479][T16992] ? __pfx_path_getxattrat+0x10/0x10 [ 209.710497][T16992] ? ksys_write+0x190/0x250 [ 209.710534][T16992] ? __mutex_unlock_slowpath+0x15c/0x790 [ 209.710571][T16992] ? __pfx_ksys_write+0x10/0x10 [ 209.710597][T16992] do_syscall_64+0xc9/0xf80 [ 209.710619][T16992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.710636][T16992] RIP: 0033:0x7f93c759aeb9 [ 209.710651][T16992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.710667][T16992] RSP: 002b:00007f93c83f8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 209.710687][T16992] RAX: ffffffffffffffda RBX: 00007f93c7815fa0 RCX: 00007f93c759aeb9 [ 209.710698][T16992] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000200000000180 [ 209.710708][T16992] RBP: 00007f93c83f8090 R08: 0000000000000000 R09: 0000000000000000 [ 209.710718][T16992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.710728][T16992] R13: 00007f93c7816038 R14: 00007f93c7815fa0 R15: 00007fff7d4b67b8 [ 209.710752][T16992] [ 209.713239][T16994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2105'. [ 209.737373][T16987] bond0: (slave bridge_slave_1): Releasing backup interface [ 209.891730][T16996] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2105'. [ 209.969306][T16998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2105'. [ 210.017921][ T40] audit: type=1400 audit(1770486545.823:744): avc: denied { write } for pid=16999 comm="syz.3.2109" name="usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 210.045234][T16987] bridge_slave_1: left promiscuous mode [ 210.067485][ T40] audit: type=1400 audit(1770486545.823:745): avc: denied { append } for pid=16999 comm="syz.3.2109" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 210.073579][T16987] bridge_slave_1: left allmulticast mode [ 210.114192][ T40] audit: type=1400 audit(1770486545.823:746): avc: denied { ioctl } for pid=16999 comm="syz.3.2109" path="/dev/usbmon7" dev="devtmpfs" ino=759 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 210.155082][T16987] bond9: (slave veth0_to_bond): Releasing active interface [ 210.265901][T17017] new mount options do not match the existing superblock, will be ignored [ 210.276492][T17018] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 210.293606][T17018] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 210.297624][T17018] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 210.301835][T17018] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 210.306002][T17018] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 210.311320][T17018] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 210.314890][T17018] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 210.323741][T17018] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 210.332027][T16987] bond0: (slave bond_slave_0): Releasing backup interface [ 210.351278][T17018] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 210.429300][T16987] bond_slave_0: left allmulticast mode [ 210.431862][T16987] bond_slave_0: left promiscuous mode [ 210.509315][T16987] bond0: (slave bond_slave_1): Releasing backup interface [ 210.624534][T16987] bond_slave_1: left allmulticast mode [ 210.628335][T16987] bond_slave_1: left promiscuous mode [ 210.646979][T16987] team0: Port device team_slave_0 removed [ 210.661310][T16987] team0: Port device team_slave_1 removed [ 210.667752][T16987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.672383][T16987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.698875][T16987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.702147][T16987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.717368][T16987] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 210.746800][T16991] team0: Mode changed to "loadbalance" [ 210.921794][T17033] overlay: ./file0 is not a directory [ 210.957546][ T40] audit: type=1400 audit(1770486546.711:747): avc: denied { rename } for pid=17032 comm="syz.5.2113" name="file0" dev="9p" ino=72614269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.413304][T17054] FAULT_INJECTION: forcing a failure. [ 211.413304][T17054] name failslab, interval 1, probability 0, space 0, times 0 [ 211.443529][T17054] CPU: 1 UID: 0 PID: 17054 Comm: syz.0.2115 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.443559][T17054] Tainted: [L]=SOFTLOCKUP [ 211.443564][T17054] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.443573][T17054] Call Trace: [ 211.443581][T17054] [ 211.443588][T17054] dump_stack_lvl+0x100/0x190 [ 211.443615][T17054] should_fail_ex.cold+0x5/0xa [ 211.443634][T17054] should_failslab+0xc2/0x120 [ 211.443654][T17054] __kmalloc_cache_noprof+0x80/0x810 [ 211.443671][T17054] ? __fuse_get_acl.part.0+0x94/0x240 [ 211.443692][T17054] ? __fuse_get_acl.part.0+0x94/0x240 [ 211.443708][T17054] __fuse_get_acl.part.0+0x94/0x240 [ 211.443727][T17054] fuse_get_acl+0x1e9/0x260 [ 211.443743][T17054] __get_acl+0x1ed/0x490 [ 211.443758][T17054] ? __pfx_fuse_get_acl+0x10/0x10 [ 211.443773][T17054] ? __pfx___get_acl+0x10/0x10 [ 211.443796][T17054] vfs_get_acl+0x170/0x1f0 [ 211.443814][T17054] do_get_acl+0x39/0x580 [ 211.443830][T17054] ? __might_fault+0xc5/0x140 [ 211.443847][T17054] ? __might_fault+0xc5/0x140 [ 211.443865][T17054] do_getxattr+0x1f3/0x3c0 [ 211.443888][T17054] filename_getxattr+0xee/0x1a0 [ 211.443909][T17054] ? __pfx_filename_getxattr+0x10/0x10 [ 211.443929][T17054] ? getname_flags.part.0+0x1c5/0x540 [ 211.443958][T17054] path_getxattrat+0x20d/0x420 [ 211.443981][T17054] ? __pfx_path_getxattrat+0x10/0x10 [ 211.444000][T17054] ? ksys_write+0x190/0x250 [ 211.444022][T17054] ? __mutex_unlock_slowpath+0x15c/0x790 [ 211.444067][T17054] ? __pfx_ksys_write+0x10/0x10 [ 211.444090][T17054] do_syscall_64+0xc9/0xf80 [ 211.444109][T17054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.444126][T17054] RIP: 0033:0x7f56c619aeb9 [ 211.444141][T17054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.444156][T17054] RSP: 002b:00007f56c710f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 211.444172][T17054] RAX: ffffffffffffffda RBX: 00007f56c6415fa0 RCX: 00007f56c619aeb9 [ 211.444188][T17054] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000200000000180 [ 211.444198][T17054] RBP: 00007f56c710f090 R08: 0000000000000000 R09: 0000000000000000 [ 211.444207][T17054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.444217][T17054] R13: 00007f56c6416038 R14: 00007f56c6415fa0 R15: 00007ffc6d709e38 [ 211.444239][T17054] [ 211.797506][T17066] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 212.080338][T17083] fuse: Unknown parameter 'úÿohp_i`' [ 212.133003][T17083] siw: device registration error -23 [ 212.199079][T17091] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2119'. [ 212.225724][T17091] bridge0: entered promiscuous mode [ 212.243125][T17091] macsec1: entered allmulticast mode [ 212.250694][T17091] bridge0: entered allmulticast mode [ 212.281066][T17091] bridge0: port 3(macsec1) entered blocking state [ 212.285447][T17091] bridge0: port 3(macsec1) entered disabled state [ 212.417658][T17091] bridge0: left allmulticast mode [ 212.432671][T17091] bridge0: left promiscuous mode [ 213.580528][T17131] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 213.583056][T17131] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 213.604971][T17132] gfs2: error -5 reading superblock [ 213.612587][T17131] vhci_hcd vhci_hcd.0: Device attached [ 213.726899][T17135] vhci_hcd vhci_hcd.0: port 0 already used [ 213.767665][T17133] vhci_hcd: connection closed [ 213.778679][ T1236] vhci_hcd vhci_hcd.5: stop threads [ 213.797302][ T1236] vhci_hcd vhci_hcd.5: release socket [ 213.800108][ T1236] vhci_hcd vhci_hcd.5: disconnect device [ 214.281512][T17165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2136'. [ 214.858294][ T5929] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.878459][ T5929] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.899863][ T5929] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.954681][ T5929] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.962812][T17226] netlink: 'syz.3.2144': attribute type 21 has an invalid length. [ 214.988566][T17226] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2144'. [ 215.004792][T17226] netlink: 'syz.3.2144': attribute type 4 has an invalid length. [ 215.005850][ T5929] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.016309][T17226] netlink: 'syz.3.2144': attribute type 5 has an invalid length. [ 215.045343][T17226] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2144'. [ 215.151595][T17183] lo speed is unknown, defaulting to 1000 [ 215.238668][T17261] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2145'. [ 215.397288][T17183] chnl_net:caif_netlink_parms(): no params data found [ 215.591080][ T40] audit: type=1400 audit(1770486551.041:748): avc: denied { setopt } for pid=17323 comm="syz.4.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 215.694798][T17183] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.713304][T17183] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.716753][T17183] bridge_slave_0: entered allmulticast mode [ 215.728703][T17183] bridge_slave_0: entered promiscuous mode [ 215.739356][T17183] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.762831][T17183] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.778953][T17183] bridge_slave_1: entered allmulticast mode [ 215.804723][T17183] bridge_slave_1: entered promiscuous mode [ 215.925757][T17183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.964026][T17183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.029421][T17183] team0: Port device team_slave_0 added [ 216.046755][T17183] team0: Port device team_slave_1 added [ 216.051508][T17394] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2149'. [ 216.117941][T17183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.134158][T17183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.174966][T17183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.213431][T17183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.216622][T17183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.250504][T17183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.377923][T17183] hsr_slave_0: entered promiscuous mode [ 216.389909][T17183] hsr_slave_1: entered promiscuous mode [ 216.399029][T17183] debugfs: 'hsr0' already exists in 'hsr' [ 216.402725][T17183] Cannot create hsr debugfs directory [ 217.271745][ T5941] Bluetooth: hci0: command tx timeout [ 219.247195][T17394] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 219.262658][T17183] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 219.381313][T17183] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 219.533048][ T5941] Bluetooth: hci0: command tx timeout [ 219.581069][T17549] tmpfs: Bad value for 'mpol' [ 219.583682][T17549] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2155'. [ 219.601958][ T40] audit: type=1400 audit(1770486554.773:749): avc: denied { setopt } for pid=17546 comm="syz.5.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 219.643803][T17183] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 219.696727][T17183] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 219.726819][T17545] lo speed is unknown, defaulting to 1000 [ 220.164294][T17595] program syz.5.2160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.376477][T17183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.406031][T17183] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.611497][T17612] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 220.691231][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.694000][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.733920][T17624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=17624 comm=syz.3.2164 [ 220.737962][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.749164][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.797461][T17613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17613 comm=syz.4.2162 [ 220.846615][T17611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17611 comm=syz.4.2162 [ 221.234033][T17183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.377249][ T6023] page_pool_release_retry() stalled pool shutdown: id 64, 50 inflight 60 sec [ 221.602442][T17640] Cannot find add_set index 65532 as target [ 221.605485][T17640] Cannot find add_set index 65532 as target [ 221.609961][T17640] Cannot find add_set index 65532 as target [ 221.614565][T17640] Cannot find add_set index 65532 as target [ 221.618399][T17640] Cannot find add_set index 65532 as target [ 221.625183][T17640] Cannot find add_set index 65532 as target [ 221.661305][T17640] Cannot find add_set index 65532 as target [ 221.664384][T17640] Cannot find add_set index 65532 as target [ 221.672703][T17640] Cannot find add_set index 65532 as target [ 221.695808][T17645] EXT4-fs (nbd3): unable to read superblock [ 221.720848][ T5941] Bluetooth: hci0: command tx timeout [ 221.721839][T17640] Cannot find add_set index 65532 as target [ 221.778499][T17183] veth0_vlan: entered promiscuous mode [ 221.811787][T17183] veth1_vlan: entered promiscuous mode [ 221.824550][T17651] Bluetooth: MGMT ver 1.23 [ 221.906285][T17183] veth0_macvtap: entered promiscuous mode [ 221.935523][T17183] veth1_macvtap: entered promiscuous mode [ 221.967915][T17183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.003762][T17183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.045724][ T1144] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.060288][ T1144] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.069066][ T1144] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.076589][ T1144] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.356388][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.359777][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.440790][T17680] fuse: Unknown parameter '' [ 222.501781][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.501803][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.504406][ T40] audit: type=1400 audit(1770486557.457:750): avc: denied { remount } for pid=17666 comm="syz.3.2171" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 222.504463][ T40] audit: type=1400 audit(1770486557.466:751): avc: denied { ioctl } for pid=17665 comm="syz.4.2172" path="socket:[50997]" dev="sockfs" ino=50997 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 222.615380][T17700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17700 comm=syz.3.2171 [ 222.616373][T17700] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2171'. [ 222.749479][T17702] SELinux: failed to load policy [ 222.959572][T17715] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 222.962361][T17715] syzkaller1: Linktype set failed because interface is up [ 222.975627][T17719] virtio-fs: tag not found [ 223.408856][T17733] trusted_key: encrypted_key: hex blob is missing [ 223.711202][T17740] block nbd5: shutting down sockets [ 223.898462][T17750] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2182'. [ 223.966038][ T5941] Bluetooth: hci0: command tx timeout [ 224.073922][T17752] netlink: 'syz.3.2185': attribute type 2 has an invalid length. [ 224.419152][T17759] IPVS: lc: FWM 3 0x00000003 - no destination available [ 224.436127][ T6023] IPVS: starting estimator thread 0... [ 224.447261][T17759] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 224.458873][T17759] program syz.3.2186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.553102][T17760] IPVS: using max 27 ests per chain, 64800 per kthread [ 224.814840][ T40] audit: type=1400 audit(1770486559.674:752): avc: denied { write } for pid=17786 comm="syz.5.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 224.900197][T17795] netlink: 'syz.5.2190': attribute type 1 has an invalid length. [ 224.939105][T17795] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2190'. [ 225.033895][T17833] bond10: invalid ARP target 0.0.0.0 specified for addition [ 225.033925][T17833] bond10: option arp_ip_target: invalid value (0) [ 225.062949][T17869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2193'. [ 225.068974][T17833] bond10 (unregistering): Released all slaves [ 225.139122][T17869] : entered promiscuous mode [ 225.578758][T17916] openvswitch: netlink: IP tunnel dst address not specified [ 226.755313][ T40] audit: type=1400 audit(1770486561.488:753): avc: denied { create } for pid=17961 comm="syz.4.2203" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 226.828154][ T40] audit: type=1400 audit(1770486561.488:754): avc: denied { write } for pid=17961 comm="syz.4.2203" name="file0" dev="tmpfs" ino=2105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 226.868333][ T40] audit: type=1400 audit(1770486561.488:755): avc: denied { open } for pid=17961 comm="syz.4.2203" path="/393/file0" dev="tmpfs" ino=2105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 226.881745][ T40] audit: type=1400 audit(1770486561.488:756): avc: denied { ioctl } for pid=17961 comm="syz.4.2203" path="/393/file0" dev="tmpfs" ino=2105 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 226.997001][T17973] input: syz0 as /devices/virtual/input/input14 [ 227.470564][T17980] lo speed is unknown, defaulting to 1000 [ 227.624357][T18021] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2207'. [ 228.412669][ T40] audit: type=1400 audit(1770486563.031:757): avc: denied { unlink } for pid=7364 comm="syz-executor" name="file0" dev="tmpfs" ino=2105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 228.455265][T18034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.465796][T18034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.514906][ T40] audit: type=1400 audit(1770486563.040:758): avc: denied { create } for pid=18033 comm="syz.4.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 229.119555][T18044] input: syz1 as /devices/virtual/input/input15 [ 229.156706][ T40] audit: type=1400 audit(1770486563.732:759): avc: denied { create } for pid=18047 comm="syz.6.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 229.206508][ T40] audit: type=1400 audit(1770486563.779:760): avc: denied { bind } for pid=18047 comm="syz.6.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 229.232288][T18052] binder: 18051:18052 ioctl c0385720 200000000440 returned -22 [ 229.247223][T18052] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 229.275743][ T40] audit: type=1400 audit(1770486563.845:761): avc: denied { module_load } for pid=18047 comm="syz.6.2213" path="/sys/kernel/hardlockup_count" dev="sysfs" ino=70929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 229.338896][ T40] audit: type=1400 audit(1770486563.845:762): avc: denied { getopt } for pid=18047 comm="syz.6.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 229.989113][T18077] netlink: 'syz.5.2216': attribute type 1 has an invalid length. [ 230.016535][ T40] audit: type=1400 audit(1770486564.509:763): avc: denied { read write } for pid=18076 comm="syz.5.2216" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 230.017711][T18081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2217'. [ 230.027397][ T40] audit: type=1400 audit(1770486564.509:764): avc: denied { open } for pid=18076 comm="syz.5.2216" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 230.034425][T18081] ip6_vti0: Master is either lo or non-ether device [ 230.069075][T18081] fuse: Unknown parameter 'roo?xÍî ¢¹K$ô+SËàÈ‚Äj0000' [ 230.724063][T18112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.728440][T18112] batadv_slave_0: entered promiscuous mode [ 231.197898][T18148] xt_hashlimit: size too large, truncated to 1048576 [ 231.250824][T18153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18153 comm=syz.5.2230 [ 231.278729][T18153] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2230'. [ 231.311358][T18153] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2230'. [ 231.315622][T18153] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2230'. [ 231.329196][T18153] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2230'. [ 231.738028][ T40] audit: type=1400 audit(1770486566.145:765): avc: denied { write } for pid=18186 comm="syz.5.2238" path="socket:[53011]" dev="sockfs" ino=53011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 231.812948][T18185] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2237'. [ 231.979720][T18194] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2239'. [ 232.187266][ T40] audit: type=1400 audit(1770486566.557:766): avc: denied { setcheckreqprot } for pid=18215 comm="syz.4.2244" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 232.187315][T18216] SELinux: syz.4.2244 (18216) set checkreqprot to 1. This is no longer supported. [ 232.263701][T18216] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 232.269377][T18216] overlayfs: fs on './file1' does not support file handles, falling back to index=off,nfs_export=off. [ 232.278307][T18216] overlayfs: conflicting lowerdir path [ 232.907995][T18242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2252'. [ 233.137254][T18263] affs: No valid root block on device nullb0 [ 233.186276][T18263] vivid-003: disconnect [ 233.209258][T18262] vivid-003: reconnect [ 233.324355][T18268] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2258'. [ 233.328085][T18268] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2258'. [ 233.496845][T18270] netlink: 'syz.4.2259': attribute type 1 has an invalid length. [ 233.524806][T18270] netlink: 'syz.4.2259': attribute type 1 has an invalid length. [ 233.730055][T18283] x_tables: duplicate underflow at hook 1 [ 234.251418][T18298] team_slave_0: entered promiscuous mode [ 234.844756][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 234.844776][ T40] audit: type=1400 audit(1770486569.045:770): avc: denied { accept } for pid=18320 comm="syz.4.2272" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 234.860128][ T40] audit: type=1400 audit(1770486569.045:771): avc: denied { write } for pid=18320 comm="syz.4.2272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 234.936922][T18331] hpfs: Bad magic ... probably not HPFS [ 235.259367][T18324] hsr_slave_1 (unregistering): left promiscuous mode [ 235.973369][T18386] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20000 [ 236.178158][T18394] __nla_validate_parse: 4 callbacks suppressed [ 236.178179][T18394] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2284'. [ 236.360775][T18400] netlink: 'syz.5.2286': attribute type 4 has an invalid length. [ 236.496669][ T40] audit: type=1400 audit(1770486570.597:772): avc: denied { setopt } for pid=18406 comm="syz.5.2288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 236.689894][T18421] netlink: 'syz.4.2293': attribute type 10 has an invalid length. [ 236.693659][T18421] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2293'. [ 236.699214][ T40] audit: type=1400 audit(1770486570.784:773): avc: denied { mount } for pid=18419 comm="syz.4.2293" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 236.756566][T18421] batman_adv: batadv0: Removing interface: dummy0 [ 236.767800][ T40] audit: type=1400 audit(1770486570.840:774): avc: denied { connect } for pid=18427 comm="syz.6.2294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 236.837293][T18420] hpfs: hpfs_map_sector(): read error [ 237.003837][ T40] audit: type=1400 audit(1770486571.074:775): avc: denied { unmount } for pid=7364 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 237.122082][T18445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2297'. [ 237.131369][T18445] netlink: 'syz.4.2297': attribute type 22 has an invalid length. [ 237.150645][T18445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2297'. [ 237.165999][T18445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2297'. [ 237.169606][T18445] netlink: 'syz.4.2297': attribute type 22 has an invalid length. [ 237.169784][ T62] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.178449][T18445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2297'. [ 237.183243][ T62] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.187101][ T62] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.207423][ T62] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.272299][T18454] netlink: 'syz.4.2299': attribute type 2 has an invalid length. [ 237.300737][T18454] !: entered promiscuous mode [ 237.311737][T18454] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 237.372562][ T5941] Bluetooth: hci0: Malformed LE Event: 0x0d [ 237.501507][T18470] dlm: non-version read from control device 0 [ 237.584443][T18480] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2302'. [ 237.588871][T18479] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2302'. [ 237.658119][T18486] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 237.675730][ T40] audit: type=1400 audit(1770486571.701:776): avc: denied { relabelto } for pid=18484 comm="syz.3.2307" name="cpu.stat" dev="tmpfs" ino=2685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 237.714351][ T40] audit: type=1400 audit(1770486571.719:777): avc: denied { associate } for pid=18484 comm="syz.3.2307" name="cpu.stat" dev="tmpfs" ino=2685 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 237.773303][ T40] audit: type=1400 audit(1770486571.794:778): avc: denied { unlink } for pid=5936 comm="syz-executor" name="cpu.stat" dev="tmpfs" ino=2685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 237.799283][T18495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2306'. [ 237.851909][T18492] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 237.851909][T18492] program syz.6.2308 not setting count and/or reply_len properly [ 238.099346][T18503] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2310'. [ 238.250140][T18510] af_packet: tpacket_rcv: packet too big, clamped from 132 to 4294967272. macoff=96 [ 238.420815][ T40] audit: type=1400 audit(1770486572.393:779): avc: denied { setopt } for pid=18512 comm="syz.3.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 239.001947][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.005311][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.029734][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.033588][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.037188][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.085427][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.090006][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.093729][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.105265][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.108270][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.110891][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.151153][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.154292][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.157093][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.207403][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.212285][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.219839][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.235162][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.239253][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.242309][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.270795][T18549] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 239.274496][T18549] overlayfs: failed to set xattr on upper [ 239.300850][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.319097][T18549] overlayfs: ...falling back to redirect_dir=nofollow. [ 239.320367][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.321924][T18549] overlayfs: ...falling back to index=off. [ 239.346890][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.347082][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.347222][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.347370][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.347650][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.347801][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.347941][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.348074][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.348206][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.348357][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.348498][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.348641][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.348777][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.348917][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.349055][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.349193][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.349341][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.349494][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.349641][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.349790][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.349944][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.350093][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.350296][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.350454][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.350609][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.350752][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.353308][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.353507][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.353638][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.353765][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.353888][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.371512][T18549] overlayfs: ...falling back to uuid=null. [ 239.421267][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.424428][T18556] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 239.447993][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.448151][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.448302][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.448450][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.448602][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.448750][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.448899][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.449047][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.449195][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.449345][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 239.449493][T18536] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 240.075014][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.097383][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.365402][T18579] x_tables: duplicate underflow at hook 2 [ 240.521705][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.541097][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.568864][T18586] dummy0: entered allmulticast mode [ 240.857490][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.865952][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.901216][T18602] sctp: [Deprecated]: syz.6.2339 (pid 18602) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.901216][T18602] Use struct sctp_sack_info instead [ 241.164588][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.172281][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.183303][T18611] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=18611 comm=syz.6.2343 [ 241.361034][T18606] batman_adv: batadv0: Adding interface: gretap3 [ 241.372474][T18606] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.387880][T18606] batman_adv: batadv0: Interface activated: gretap3 [ 241.567379][T18632] tipc: Started in network mode [ 241.569615][T18632] tipc: Node identity 4, cluster identity 4711 [ 241.580404][T18632] tipc: Node number set to 4 [ 241.812258][T18645] __nla_validate_parse: 2 callbacks suppressed [ 241.812277][T18645] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2350'. [ 241.831241][T18645] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2350'. [ 241.835957][T18645] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2350'. [ 241.847645][T18645] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2350'. [ 242.024394][T18664] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2354'. [ 242.039412][T18664] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2354'. [ 242.092842][T18664] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2354'. [ 242.099465][T18668] No source specified [ 242.129144][T18664] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2354'. [ 242.324064][T18680] xt_nat: multiple ranges no longer supported [ 242.612400][ T34] SELinux: failure in sel_netif_sid_slow(), invalid network interface (743) [ 242.667447][ T34] SELinux: failure in sel_netif_sid_slow(), invalid network interface (98) [ 242.786741][ T13] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 243.280033][T18704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2359'. [ 243.623908][ T5941] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 243.629024][ T5941] Bluetooth: hci0: Injecting HCI hardware error event [ 243.636778][ T5929] Bluetooth: hci0: hardware error 0x00 [ 243.647509][T18720] FAT-fs (nbd6): unable to read boot sector [ 243.715418][ T34] SELinux: failure in sel_netif_sid_slow(), invalid network interface (743) [ 243.718559][T18721] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2362'. [ 243.820300][ T13] bond5 (unregistering): (slave bridge2): Releasing backup interface [ 243.824908][ T13] bridge2 (unregistering): left promiscuous mode [ 244.416110][ T13] bond0 (unregistering): left allmulticast mode [ 244.422010][ T13] bond0 (unregistering): left promiscuous mode [ 244.453716][ T13] bond12 (unregistering): (slave macvlan2): Releasing backup interface [ 244.522377][ T13] bond0 (unregistering): Released all slaves [ 244.542792][ T13] bond1 (unregistering): Released all slaves [ 244.580795][ T13] bond2 (unregistering): Released all slaves [ 244.605369][ T13] bond3 (unregistering): Released all slaves [ 244.975012][ T13] bond4 (unregistering): Released all slaves [ 245.271097][ T13] bond5 (unregistering): Released all slaves [ 245.598446][ T13] bond6 (unregistering): Released all slaves [ 245.609807][ T13] bond7 (unregistering): Released all slaves [ 245.622024][ T13] bond8 (unregistering): Released all slaves [ 245.884628][ T13] bond9 (unregistering): Released all slaves [ 246.026719][ T5929] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 246.363877][ T13] bond10 (unregistering): (slave veth5): Releasing active interface [ 246.410496][ T13] bond10 (unregistering): Released all slaves [ 246.423683][ T13] bond11 (unregistering): Released all slaves [ 246.439727][ T13] bond12 (unregistering): Released all slaves [ 246.819104][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 246.819119][ T40] audit: type=1400 audit(1770486580.239:783): avc: denied { ioctl } for pid=18727 comm="syz.5.2363" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 247.355875][ T13] tipc: Left network mode [ 248.550017][T18783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2371'. [ 248.570124][T18783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2371'. [ 248.574706][T18783] netlink: 'syz.3.2371': attribute type 15 has an invalid length. [ 248.578191][T18783] netlink: 'syz.3.2371': attribute type 13 has an invalid length. [ 248.804785][T18794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.847326][T18794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.865732][T18794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.871763][T18794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.164607][ T13] hsr_slave_0: left promiscuous mode [ 249.167605][ T13] hsr_slave_1: left promiscuous mode [ 249.188516][T18814] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 249.196408][ T13] veth1_macvtap: left allmulticast mode [ 249.209772][ T13] veth1_macvtap: left promiscuous mode [ 249.212066][ T13] veth0_macvtap: left allmulticast mode [ 249.214231][ T13] veth0_macvtap: left promiscuous mode [ 249.217302][ T13] veth1_vlan: left promiscuous mode [ 249.221646][ T13] veth0_vlan: left promiscuous mode [ 249.697893][ T13] pim6reg (unregistering): left allmulticast mode [ 250.710944][T18826] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2378'. [ 251.943562][T18833] 9pnet_fd: Insufficient options for proto=fd [ 252.456536][T18818] bridge_slave_0: left allmulticast mode [ 252.460777][T18818] bridge_slave_0: left promiscuous mode [ 252.468707][T18818] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.564075][T18818] bridge_slave_1: left allmulticast mode [ 252.577698][T18818] bridge_slave_1: left promiscuous mode [ 252.590791][T18818] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.694285][T18818] bond0: (slave bond_slave_0): Releasing backup interface [ 252.809447][T18845] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2382'. [ 252.822260][T18847] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20002 [ 252.861399][T18818] bond0: (slave bond_slave_1): Releasing backup interface [ 253.074171][T18818] team0: Port device team_slave_0 removed [ 253.127057][T18818] team0: Port device team_slave_1 removed [ 253.143755][T18818] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 253.179048][T18845] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.183903][T18845] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.258016][T18863] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in; [ 253.258016][T18863] program syz.4.2383 not setting count and/or reply_len properly [ 253.307529][T18864] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 253.392190][T18864] Error validating options; rc = [-22] [ 253.395020][T18864] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 253.440437][T18864] Error validating options; rc = [-22] [ 253.501371][T18872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2384'. [ 253.506290][T18872] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 253.692474][T18872] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2384'. [ 253.711766][T18872] openvswitch: netlink: Flow actions attr not present in new flow. [ 254.088417][T18891] 8021q: VLANs not supported on ip6_vti0 [ 254.137570][T18895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2391'. [ 254.212903][ T13] IPVS: stop unused estimator thread 0... [ 255.108263][T18922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2396'. [ 255.420866][T18990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49514 sclass=netlink_route_socket pid=18990 comm=syz.6.2400 [ 255.630833][T18996] netlink: 'syz.5.2401': attribute type 10 has an invalid length. [ 255.806881][ T40] audit: type=1326 audit(1770486588.638:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19000 comm="syz.5.2404" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4922f9aeb9 code=0x0 [ 255.907940][ T40] audit: type=1400 audit(1770486588.740:785): avc: denied { shutdown } for pid=19000 comm="syz.5.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 255.979985][ T40] audit: type=1400 audit(1770486588.806:786): avc: denied { read } for pid=19000 comm="syz.5.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 256.076665][ T40] audit: type=1400 audit(1770486588.909:787): avc: denied { map } for pid=18999 comm="syz.4.2402" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 256.244090][T18988] 9pnet_fd: p9_fd_create_tcp (18988): problem connecting socket to 127.0.0.1 [ 256.593593][T19030] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2407'. [ 256.789275][T19039] kvm: pic: non byte read [ 256.797009][T19039] kvm: pic: non byte read [ 256.819616][T19039] kvm: pic: non byte read [ 256.822161][T19039] kvm: pic: non byte read [ 256.841400][T19033] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2408'. [ 256.911288][T19040] comedi comedi0: pcl812: I/O port conflict (0x7ffe,16) [ 257.531067][ T53] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 257.713933][ T53] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 257.718464][ T53] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.729840][ T53] usb 10-1: Product: syz [ 257.733558][ T53] usb 10-1: Manufacturer: syz [ 257.760621][ T53] usb 10-1: SerialNumber: syz [ 257.784352][ T53] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 257.840349][T19110] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 257.887200][ T40] audit: type=1400 audit(1770486590.592:788): avc: denied { firmware_load } for pid=24 comm="kworker/2:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 257.888367][ T24] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 258.156927][T19126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.173818][T19126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.394857][ T6023] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 258.591859][T19064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.602275][ T6023] usb 11-1: Using ep0 maxpacket: 8 [ 258.632220][ T6023] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 258.635423][ T6023] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 258.639119][ T6023] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 258.640813][T19064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.646315][ T6023] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 258.646347][ T6023] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.646382][ T6023] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 258.646401][ T6023] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.807621][T19064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.812792][T19064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.883579][ T6023] usb 11-1: GET_CAPABILITIES returned 0 [ 258.908144][ T6023] usbtmc 11-1:16.0: can't read capabilities [ 258.987815][T19166] 9pnet_virtio: no channels available for device syz [ 259.051286][ T24] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 259.052131][ T24] ath9k_htc: Failed to initialize the device [ 259.117254][ T6023] usb 10-1: USB disconnect, device number 3 [ 259.152338][ T6023] usb 10-1: ath9k_htc: USB layer deinitialized [ 259.286774][ T9348] usb 11-1: USB disconnect, device number 2 [ 259.381098][ T40] audit: type=1400 audit(1770486591.995:789): avc: denied { map } for pid=19176 comm="syz.4.2429" path="pipe:[16760]" dev="pipefs" ino=16760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 259.818033][T19205] program syz.4.2434 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.829885][T19205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.839325][T19205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.860975][T19205] random: crng reseeded on system resumption [ 259.933486][T19218] dummy0: left allmulticast mode [ 260.268393][T19222] syzkaller0: entered promiscuous mode [ 260.277488][T19222] syzkaller0: entered allmulticast mode [ 260.287812][T19222] TC_ACT_REPEAT abuse ? [ 260.491327][T19260] tmpfs: Bad value for 'mpol' [ 260.597179][ T40] audit: type=1400 audit(1770486593.127:790): avc: denied { read } for pid=19263 comm="syz.5.2446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 260.613485][ T40] audit: type=1800 audit(1770486593.155:791): pid=19265 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2446" name="file0" dev="tmpfs" ino=600 res=0 errno=0 [ 260.699562][T19265] netlink: 'syz.5.2446': attribute type 14 has an invalid length. [ 260.704656][T19265] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2446'. [ 260.735226][T19275] netlink: 'syz.3.2448': attribute type 3 has an invalid length. [ 260.752644][T19265] netlink: 'syz.5.2446': attribute type 14 has an invalid length. [ 260.761561][ T74] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.761835][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.761878][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.761902][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.763260][T19275] netlink: 'syz.3.2448': attribute type 1 has an invalid length. [ 260.763280][T19275] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2448'. [ 260.817385][ T40] audit: type=1804 audit(1770486593.342:792): pid=19279 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.2446" name="/newroot/111/file0" dev="tmpfs" ino=600 res=1 errno=0 [ 260.890176][ T40] audit: type=1400 audit(1770486593.407:793): avc: denied { setattr } for pid=19274 comm="syz.3.2448" name="NETLINK" dev="sockfs" ino=55848 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 260.899657][T19265] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2446'. [ 261.066668][T19297] befs: (loop5): No write support. Marking filesystem read-only [ 261.070442][T19297] befs: (loop5): unable to read superblock [ 261.859712][T19334] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 261.998665][T19341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2461'. [ 262.012492][T19341] netlink: 'syz.3.2461': attribute type 7 has an invalid length. [ 262.103051][ T40] audit: type=1400 audit(1770486594.530:794): avc: denied { rmdir } for pid=19343 comm="syz.6.2463" name="file2" dev="9p" ino=72614167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 262.270070][ T40] audit: type=1400 audit(1770486594.679:795): avc: denied { lock } for pid=19357 comm="syz.4.2464" path="socket:[55061]" dev="sockfs" ino=55061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 263.147660][T19379] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2469'. [ 263.287651][T19383] tmpfs: Bad value for 'mpol' [ 263.594248][ T40] audit: type=1400 audit(1770486595.942:796): avc: denied { getopt } for pid=19393 comm="syz.5.2472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 263.607564][T19398] overlayfs: failed to resolve 'sóž%³P¶çjá°&': -2 [ 263.772999][ T24] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 263.890763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 263.927356][ T24] usb 11-1: device descriptor read/64, error -71 [ 264.163167][ T40] audit: type=1326 audit(1770486596.437:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19400 comm="syz.3.2473" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88fcd9aeb9 code=0x0 [ 264.190338][ T24] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 264.347037][ T24] usb 11-1: device descriptor read/64, error -71 [ 264.426205][T19407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2474'. [ 264.479771][ T24] usb usb11-port1: attempt power cycle [ 264.916244][ T24] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 264.976674][ T24] usb 11-1: device descriptor read/8, error -71 [ 265.291495][ T24] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 265.420619][ T24] usb 11-1: device descriptor read/8, error -71 [ 265.584074][ T24] usb usb11-port1: unable to enumerate USB device [ 266.205398][T19442] usb usb8: usbfs: process 19442 (syz.3.2481) did not claim interface 0 before use [ 266.495386][T19464] veth0: entered promiscuous mode [ 266.534215][T19464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2485'. [ 266.605361][T19469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2486'. [ 266.745639][T19484] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2486'. [ 266.790480][T19468] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 266.795141][T19468] SELinux: failed to load policy [ 266.831237][ T40] audit: type=1400 audit(1770486598.963:798): avc: denied { ioctl } for pid=19491 comm="syz.6.2488" path="socket:[55185]" dev="sockfs" ino=55185 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 267.189109][T19506] fuse: Bad value for 'fd' [ 267.234841][ C0] vcan0: j1939_tp_rxtimer: 0xffff888022efa800: rx timeout, send abort [ 267.242131][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888022efa800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 267.317325][ T40] audit: type=1400 audit(1770486599.402:799): avc: denied { read } for pid=5320 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 267.364174][ T40] audit: type=1400 audit(1770486599.402:800): avc: denied { search } for pid=5320 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.377200][ T40] audit: type=1400 audit(1770486599.402:801): avc: denied { search } for pid=5320 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.431149][ T40] audit: type=1400 audit(1770486599.402:802): avc: denied { add_name } for pid=5320 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.486120][ T40] audit: type=1400 audit(1770486599.402:803): avc: denied { create } for pid=5320 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 267.504879][ T40] audit: type=1400 audit(1770486599.402:804): avc: denied { append open } for pid=5320 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 267.548935][ T40] audit: type=1400 audit(1770486599.402:805): avc: denied { getattr } for pid=5320 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 267.777557][ T40] audit: type=1400 audit(1770486599.851:806): avc: denied { name_bind } for pid=19523 comm="syz.5.2495" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 268.024485][T19538] netlink: 'syz.6.2497': attribute type 3 has an invalid length. [ 268.060773][T19538] netlink: 'syz.6.2497': attribute type 1 has an invalid length. [ 268.064875][T19538] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2497'. [ 268.072101][T19538] NCSI netlink: No device for ifindex 0 [ 268.246816][T19554] tmpfs: Too small a size for current use [ 268.927013][ T2302] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 269.108659][ T2302] usb 11-1: Using ep0 maxpacket: 8 [ 269.112386][ T2302] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.116427][ T2302] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 269.128109][ T2302] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 269.135767][ T2302] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.175673][ T2302] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 269.179804][ T2302] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.443164][ T2302] usb 11-1: GET_CAPABILITIES returned 0 [ 269.449300][ T2302] usbtmc 11-1:16.0: can't read capabilities [ 269.473983][ T40] audit: type=1400 audit(1770486601.432:807): avc: denied { getopt } for pid=19588 comm="syz.3.2507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 269.579054][T19598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2508'. [ 269.647861][T19600] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2509'. [ 269.701591][ T1467] usb 11-1: USB disconnect, device number 7 [ 269.887223][ T40] audit: type=1400 audit(1770486601.824:808): avc: denied { setattr } for pid=19618 comm="syz.3.2512" name="ALG" dev="sockfs" ino=57269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 270.180205][T19628] netlink: 'syz.3.2515': attribute type 1 has an invalid length. [ 270.180322][ T40] audit: type=1400 audit(1770486602.105:809): avc: denied { write } for pid=19626 comm="syz.3.2515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 270.211023][T19628] erspan2: entered allmulticast mode [ 270.291880][T19635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2516'. [ 270.447092][T19613] geneve2: entered promiscuous mode [ 270.996192][ T40] audit: type=1400 audit(1770486602.862:810): avc: denied { read write } for pid=19656 comm="syz.5.2520" name="file0" dev="tmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 271.019397][ T40] audit: type=1400 audit(1770486602.862:811): avc: denied { open } for pid=19656 comm="syz.5.2520" path="/121/file0" dev="tmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 271.032566][ T40] audit: type=1400 audit(1770486602.881:812): avc: denied { ioctl } for pid=19656 comm="syz.5.2520" path="/121/file0" dev="tmpfs" ino=656 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 271.908231][T19681] (syz.5.2525,19681,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 271.919090][T19681] (syz.5.2525,19681,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 272.124353][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 272.129338][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 285.618698][ T6746] page_pool_release_retry() stalled pool shutdown: id 64, 50 inflight 120 sec [ 288.362819][ T1467] usb 9-1: USB disconnect, device number 10 [ 288.394153][ T1419] ================================================================== [ 288.404648][ T1419] BUG: KASAN: slab-use-after-free in handle_tx+0x5c2/0x620 [ 288.421816][ T1419] Read of size 1 at addr ffff888039c12490 by task aoe_tx0/1419 [ 288.454200][ T1419] [ 288.475782][ T1419] CPU: 2 UID: 0 PID: 1419 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.475817][ T1419] Tainted: [L]=SOFTLOCKUP [ 288.475823][ T1419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 288.475833][ T1419] Call Trace: [ 288.475840][ T1419] [ 288.475847][ T1419] dump_stack_lvl+0x100/0x190 [ 288.475873][ T1419] print_report+0x156/0x4c9 [ 288.475896][ T1419] ? __virt_addr_valid+0x81/0x620 [ 288.475912][ T1419] ? __phys_addr+0xe8/0x180 [ 288.475929][ T1419] ? handle_tx+0x5c2/0x620 [ 288.475951][ T1419] kasan_report+0xdf/0x1a0 [ 288.475972][ T1419] ? handle_tx+0x5c2/0x620 [ 288.475996][ T1419] handle_tx+0x5c2/0x620 [ 288.476020][ T1419] dev_hard_start_xmit+0x127/0x6c0 [ 288.476055][ T1419] __dev_queue_xmit+0x6dd/0x46f0 [ 288.476075][ T1419] ? finish_task_switch.isra.0+0x204/0xb70 [ 288.476100][ T1419] ? __pfx___dev_queue_xmit+0x10/0x10 [ 288.476120][ T1419] ? __lock_acquire+0x4a5/0x2630 [ 288.476137][ T1419] ? ref_tracker_free+0x37e/0x6c0 [ 288.476160][ T1419] ? do_raw_spin_lock+0x128/0x260 [ 288.476181][ T1419] ? tx+0xa4/0x130 [ 288.476196][ T1419] ? rcu_is_watching+0x12/0xc0 [ 288.476235][ T1419] ? __pfx_tx+0x10/0x10 [ 288.476249][ T1419] tx+0xc4/0x130 [ 288.476263][ T1419] kthread+0x1d8/0x3c0 [ 288.476286][ T1419] ? __kthread_parkme+0xbb/0x230 [ 288.476309][ T1419] ? __pfx_kthread+0x10/0x10 [ 288.476331][ T1419] ? rcu_is_watching+0x12/0xc0 [ 288.476351][ T1419] ? __pfx_default_wake_function+0x10/0x10 [ 288.476374][ T1419] ? __kthread_parkme+0x18c/0x230 [ 288.476399][ T1419] ? __pfx_kthread+0x10/0x10 [ 288.476420][ T1419] kthread+0x3b3/0x730 [ 288.476436][ T1419] ? __pfx_kthread+0x10/0x10 [ 288.476452][ T1419] ? ret_from_fork+0x79/0xaf0 [ 288.476469][ T1419] ? ret_from_fork+0x79/0xaf0 [ 288.476487][ T1419] ? rcu_is_watching+0x12/0xc0 [ 288.476507][ T1419] ? __pfx_kthread+0x10/0x10 [ 288.476524][ T1419] ret_from_fork+0x754/0xaf0 [ 288.476541][ T1419] ? __pfx_ret_from_fork+0x10/0x10 [ 288.476560][ T1419] ? __switch_to+0x7b9/0x10c0 [ 288.476582][ T1419] ? __pfx_kthread+0x10/0x10 [ 288.476599][ T1419] ret_from_fork_asm+0x1a/0x30 [ 288.476619][ T1419] [ 288.476624][ T1419] [ 288.531918][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 288.531935][ T40] audit: type=1400 audit(1770486619.266:816): avc: denied { write } for pid=5867 comm="syz-executor" path="pipe:[6677]" dev="pipefs" ino=6677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 288.539891][ T1419] Allocated by task 12219: [ 288.539908][ T1419] kasan_save_stack+0x30/0x50 [ 288.539933][ T1419] kasan_save_track+0x14/0x30 [ 288.539950][ T1419] __kasan_kmalloc+0xaa/0xb0 [ 288.539965][ T1419] alloc_tty_struct+0x96/0x8c0 [ 288.539987][ T1419] tty_init_dev.part.0+0x20/0x470 [ 288.540008][ T1419] tty_open+0xa63/0xfa0 [ 288.540028][ T1419] chrdev_open+0x234/0x6a0 [ 288.540046][ T1419] do_dentry_open+0x73e/0x1570 [ 288.540064][ T1419] vfs_open+0x82/0x3f0 [ 288.540083][ T1419] path_openat+0x21dc/0x3120 [ 288.540101][ T1419] do_filp_open+0x1f7/0x420 [ 288.540119][ T1419] do_sys_openat2+0x12e/0x220 [ 288.540139][ T1419] __x64_sys_openat+0x12d/0x210 [ 288.540159][ T1419] do_syscall_64+0xc9/0xf80 [ 288.540176][ T1419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.540191][ T1419] [ 288.540195][ T1419] Freed by task 5994: [ 288.540202][ T1419] kasan_save_stack+0x30/0x50 [ 288.540219][ T1419] kasan_save_track+0x14/0x30 [ 288.540235][ T1419] kasan_save_free_info+0x3b/0x70 [ 288.540248][ T1419] __kasan_slab_free+0x5f/0x80 [ 288.540265][ T1419] kfree+0x1c7/0x690 [ 288.540278][ T1419] process_one_work+0x9c2/0x1840 [ 288.540295][ T1419] worker_thread+0x5da/0xe40 [ 288.540311][ T1419] kthread+0x3b3/0x730 [ 288.540326][ T1419] ret_from_fork+0x754/0xaf0 [ 288.540343][ T1419] ret_from_fork_asm+0x1a/0x30 [ 288.540357][ T1419] [ 288.540362][ T1419] Last potentially related work creation: [ 288.540369][ T1419] kasan_save_stack+0x30/0x50 [ 288.540385][ T1419] kasan_record_aux_stack+0xa7/0xc0 [ 288.540398][ T1419] insert_work+0x36/0x230 [ 288.540413][ T1419] __queue_work+0x96f/0x10f0 [ 288.540430][ T1419] queue_work_on+0x180/0x1e0 [ 288.540446][ T1419] release_tty+0x4f3/0x5f0 [ 288.540464][ T1419] tty_release_struct+0xb7/0xe0 [ 288.540482][ T1419] tty_release+0xd7a/0x1300 [ 288.540500][ T1419] __fput+0x3ff/0xb40 [ 288.540518][ T1419] task_work_run+0x150/0x240 [ 288.540534][ T1419] do_exit+0x829/0x2a30 [ 288.540547][ T1419] do_group_exit+0xd5/0x2a0 [ 288.540561][ T1419] get_signal+0x1ec7/0x21e0 [ 288.540581][ T1419] arch_do_signal_or_restart+0x91/0x7a0 [ 288.540603][ T1419] exit_to_user_mode_loop+0x86/0x4b0 [ 288.540620][ T1419] do_syscall_64+0x4fe/0xf80 [ 288.540635][ T1419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.540649][ T1419] [ 288.540653][ T1419] The buggy address belongs to the object at ffff888039c12000 [ 288.540653][ T1419] which belongs to the cache kmalloc-cg-2k of size 2048 [ 288.540666][ T1419] The buggy address is located 1168 bytes inside of [ 288.540666][ T1419] freed 2048-byte region [ffff888039c12000, ffff888039c12800) [ 288.540682][ T1419] [ 288.540686][ T1419] The buggy address belongs to the physical page: [ 288.540694][ T1419] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888039c14000 pfn:0x39c10 [ 288.540709][ T1419] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 288.540722][ T1419] memcg:ffff888034bd7701 [ 288.540729][ T1419] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 288.540746][ T1419] page_type: f5(slab) [ 288.540761][ T1419] raw: 00fff00000000240 ffff88801b84c140 ffffea0000df4e10 ffffea00008bdc10 [ 288.540776][ T1419] raw: ffff888039c14000 0000000000080007 00000000f5000000 ffff888034bd7701 [ 288.540797][ T1419] head: 00fff00000000240 ffff88801b84c140 ffffea0000df4e10 ffffea00008bdc10 [ 288.540811][ T1419] head: ffff888039c14000 0000000000080007 00000000f5000000 ffff888034bd7701 [ 288.540827][ T1419] head: 00fff00000000003 ffffea0000e70401 00000000ffffffff 00000000ffffffff [ 288.540841][ T1419] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 288.540849][ T1419] page dumped because: kasan: bad access detected [ 288.540857][ T1419] page_owner tracks the page as allocated [ 288.540863][ T1419] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5936, tgid 5936 (syz-executor), ts 53398469438, free_ts 51313649838 [ 288.540891][ T1419] post_alloc_hook+0x1e1/0x250 [ 288.540906][ T1419] get_page_from_freelist+0xe3d/0x2e10 [ 288.540923][ T1419] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 288.540940][ T1419] alloc_pages_mpol+0x1fb/0x550 [ 288.540959][ T1419] new_slab+0x2c4/0x440 [ 288.540971][ T1419] ___slab_alloc+0xda3/0x1ca0 [ 288.540984][ T1419] __slab_alloc.isra.0+0x63/0x110 [ 288.540997][ T1419] __kmalloc_node_track_caller_noprof+0x629/0x9d0 [ 288.541015][ T1419] kmemdup_noprof+0x29/0x60 [ 288.541034][ T1419] neigh_sysctl_register+0xb4/0x660 [ 288.541054][ T1419] addrconf_sysctl_register+0xb9/0x200 [ 288.541075][ T1419] ipv6_add_dev+0xaf2/0x1520 [ 288.541093][ T1419] addrconf_notify+0x563/0x19c0 [ 288.541107][ T1419] notifier_call_chain+0x99/0x3b0 [ 288.541123][ T1419] call_netdevice_notifiers_info+0xbe/0x110 [ 288.541147][ T1419] register_netdevice+0x16b9/0x21d0 [ 288.541167][ T1419] page last free pid 5864 tgid 5864 stack trace: [ 288.541177][ T1419] __free_frozen_pages+0x822/0x1130 [ 288.541200][ T1419] __folio_put+0x3b4/0x540 [ 288.541217][ T1419] put_netmem+0x294/0x320 [ 288.541233][ T1419] skb_release_data+0x4b2/0x700 [ 288.541252][ T1419] napi_consume_skb+0x1f6/0x320 [ 288.541267][ T1419] skb_defer_free_flush+0x1f1/0x290 [ 288.541287][ T1419] net_rx_action+0x3ca/0xf20 [ 288.541303][ T1419] handle_softirqs+0x1ea/0x910 [ 288.541323][ T1419] do_softirq+0xac/0xe0 [ 288.541343][ T1419] __local_bh_enable_ip+0xf8/0x120 [ 288.541364][ T1419] __dev_queue_xmit+0x7f1/0x46f0 [ 288.541379][ T1419] ip_finish_output2+0xf34/0x24b0 [ 288.541400][ T1419] __ip_finish_output.part.0+0x444/0x6f0 [ 288.541422][ T1419] ip_output+0x39b/0xec0 [ 288.541440][ T1419] __ip_queue_xmit+0x1b73/0x22b0 [ 288.541461][ T1419] __tcp_transmit_skb+0x2c62/0x43c0 [ 288.541478][ T1419] [ 288.541481][ T1419] Memory state around the buggy address: [ 288.541490][ T1419] ffff888039c12380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 288.541502][ T1419] ffff888039c12400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 288.541512][ T1419] >ffff888039c12480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 288.541521][ T1419] ^ [ 288.541530][ T1419] ffff888039c12500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 288.541540][ T1419] ffff888039c12580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 288.541549][ T1419] ================================================================== [ 288.543534][ T1419] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 288.543554][ T1419] CPU: 2 UID: 0 PID: 1419 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.543578][ T1419] Tainted: [L]=SOFTLOCKUP [ 288.543584][ T1419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 288.543594][ T1419] Call Trace: [ 288.543601][ T1419] [ 288.543608][ T1419] dump_stack_lvl+0x100/0x190 [ 288.543633][ T1419] vpanic+0x20d/0x630 [ 288.543650][ T1419] panic+0xd1/0xd1 [ 288.543664][ T1419] ? __pfx_panic+0x10/0x10 [ 288.543682][ T1419] ? check_panic_on_warn+0x1f/0x90 [ 288.543702][ T1419] check_panic_on_warn.cold+0x19/0x34 [ 288.543718][ T1419] end_report.part.0+0x3a/0x90 [ 288.543739][ T1419] kasan_report.cold+0xe/0x18 [ 288.543761][ T1419] ? handle_tx+0x5c2/0x620 [ 288.543793][ T1419] handle_tx+0x5c2/0x620 [ 288.543818][ T1419] dev_hard_start_xmit+0x127/0x6c0 [ 288.543838][ T1419] __dev_queue_xmit+0x6dd/0x46f0 [ 288.543858][ T1419] ? finish_task_switch.isra.0+0x204/0xb70 [ 288.543882][ T1419] ? __pfx___dev_queue_xmit+0x10/0x10 [ 288.543902][ T1419] ? __lock_acquire+0x4a5/0x2630 [ 288.543919][ T1419] ? ref_tracker_free+0x37e/0x6c0 [ 288.543943][ T1419] ? do_raw_spin_lock+0x128/0x260 [ 288.543964][ T1419] ? tx+0xa4/0x130 [ 288.543979][ T1419] ? rcu_is_watching+0x12/0xc0 [ 288.544001][ T1419] ? __pfx_tx+0x10/0x10 [ 288.544015][ T1419] tx+0xc4/0x130 [ 288.544030][ T1419] kthread+0x1d8/0x3c0 [ 288.544053][ T1419] ? __kthread_parkme+0xbb/0x230 [ 288.544077][ T1419] ? __pfx_kthread+0x10/0x10 [ 288.544099][ T1419] ? rcu_is_watching+0x12/0xc0 [ 288.544118][ T1419] ? __pfx_default_wake_function+0x10/0x10 [ 288.544142][ T1419] ? __kthread_parkme+0x18c/0x230 [ 288.544167][ T1419] ? __pfx_kthread+0x10/0x10 [ 288.544188][ T1419] kthread+0x3b3/0x730 [ 288.544205][ T1419] ? __pfx_kthread+0x10/0x10 [ 288.544220][ T1419] ? ret_from_fork+0x79/0xaf0 [ 288.544238][ T1419] ? ret_from_fork+0x79/0xaf0 [ 288.544256][ T1419] ? rcu_is_watching+0x12/0xc0 [ 288.544275][ T1419] ? __pfx_kthread+0x10/0x10 [ 288.544292][ T1419] ret_from_fork+0x754/0xaf0 [ 288.544310][ T1419] ? __pfx_ret_from_fork+0x10/0x10 [ 288.544328][ T1419] ? __switch_to+0x7b9/0x10c0 [ 288.544350][ T1419] ? __pfx_kthread+0x10/0x10 [ 288.544368][ T1419] ret_from_fork_asm+0x1a/0x30 [ 288.544389][ T1419] [ 288.551408][ T1419] Kernel Offset: disabled VM DIAGNOSIS: 16:12:23 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=0000000000000000 RCX=1ffff92000b7efae RDX=ffff88803530ff98 RSI=00007f34963f3000 RDI=ffff88802f6fc980 RBP=8000000058308867 RSP=ffffc90005bf7b38 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000002 R13=ffffea000160c200 R14=ffffea000117b640 R15=ffffc90005bf7d58 RIP=ffffffff8255bcff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f3496a96880 ffffffff 00c00000 GS =0000 ffff8880d65d9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f34963f3480 CR3=000000002c6e0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefe0000 Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000001041000 Opmask04=00000000ffffffbf Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3496a96b60 00007f3496a96b60 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563d8a67b040 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563db4fb7b60 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563db4f96fa0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373254ec78bb483 7373254ba47d7759 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 651d820acefe9051 7373737610a83ce4 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00342e6364755f79 6d6d75642f636475 2f342e6364755f79 6d6d75642f6d726f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563db4f93a30 00007f34963f1b40 0000000000000031 0000302e36313a31 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000301 0000000000000033 3170306d656d7000 306d656d702f6b63 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 166ea74409741e92 ffffa9c728dc51db 00007f34962bfd9b 00007ffc1da4acf8 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 776eef6ffbff3fff fffffbefaffff1fb 3c757f3dff6bffbb ffcffffedfffeffe ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c46392c45392c38 392c36392c45382c 43382c41382c3938 2c38382c37382c36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 00004e3d53411252 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000010 RCX=ffffffff84f08824 RDX=ffff88803295a4c0 RSI=ffffffff84f08be8 RDI=ffff88803295a4c0 RBP=ffffc90003a5f2e0 RSP=ffffc90003a5f158 R8 =0000000000000001 R9 =0000000000000020 R10=0000000000000012 R11=0000000000000000 R12=0000000000000012 R13=ffffc90003a5f2c0 R14=ffff888128042652 R15=000000000000004e RIP=ffffffff84f08be8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb2afa12300 ffffffff 00c00000 GS =0000 ffff8880d66d9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005606bc17f000 CR3=0000000035cce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000009e6 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 034c800407900308 08000788031a0800 0780031400000603 ffffffff00000001 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 004cb20302aa0200 4cb0030008004ca8 0302f004004ca403 0240a08082004ca2 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 031240808082004c a2030630a8808200 4ca0030620988082 004ca00302308080 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 82004ca003000800 4c98030004004c94 030002004c920300 02004c9003000800 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c88030004004c84 030040a08082004c 8203004080808200 4c82033002004c80 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300000000000006 0007000800060300 0000000600050006 0006030000000016 ZMM25=a49de5aaa49de5aa a49de5aaa49de5aa a49de5aaa49de5aa a49de5aaa49de5aa a49de5aaa49de5aa a49de5aaa49de5aa a49de5aaa49de5aa a49de5aaa49de5aa ZMM26=b8c67200b8c67200 b8c67200b8c67200 b8c67200b8c67200 b8c67200b8c67200 b8c67200b8c67200 b8c67200b8c67200 b8c67200b8c67200 b8c67200b8c67200 ZMM27=d0ca907dd0ca907d d0ca907dd0ca907d d0ca907dd0ca907d d0ca907dd0ca907d d0ca907dd0ca907d d0ca907dd0ca907d d0ca907dd0ca907d d0ca907dd0ca907d ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=ab0f0000ab0f0000 ab0f0000ab0f0000 ab0f0000ab0f0000 ab0f0000ab0f0000 ab0f0000ab0f0000 ab0f0000ab0f0000 ab0f0000ab0f0000 ab0f0000ab0f0000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8569b0f5 RDI=ffffffff9b209c00 RBP=ffffffff9b209bc0 RSP=ffffc900071cf3a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=0000000000000010 R15=ffffffff8569b090 RIP=ffffffff8569b11f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67d9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055b61b20f078 CR3=0000000036178000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000018000000 Opmask01=0000000000000000 Opmask02=000000003f3f3dff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c62616c696176 612073726574756f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1600000000000000 00000000000002ff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f126ba80b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1600000000000000 00000000000002ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a732500656c62 616c696176612073 726574756f522036 765049206f6e203a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 051f560000404947 44494c4453440556 574051504a520513 535049054a4b051f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 39773b3a3633211c 1a0f0c060379010e 3701013563538263 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff 0101910101740050 23672c1d0666e936 1231010001001ca0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4bb6ff133dd00502 39773b3a3633211c 1a0f0c060379010e 3701013563538263 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 61655f20610a2020 64202c6570200a43 48202065685f2041 20230a00202c206d ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=0000000000000000 RCX=ffffffff825d4fb0 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000000 RBP=ffffea0001047b80 RSP=ffffc90003d3fad0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000001 R13=ffff888032a09900 R14=0000000000000000 R15=ffffea0001047b98 RIP=ffffffff8206f64e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 000fffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 000fffff 00000000 FS =0000 00007f3496a96880 000fffff 00000000 GS =0000 ffff8880d68d9000 000fffff 00000000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000563db4fa45d8 CR3=0000000024b96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fec0c0c0 Opmask01=000000000000007f Opmask02=00000000ffffdfff Opmask03=0000000001041000 Opmask04=00000000ffffffbf Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34963f1b20 00007f34963f1b20 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4040404040404040 4040404040404040 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f34963f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373254ec78bb483 7373254ba47d7759 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 651d820acefe9051 7373737610a83ce4 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00302e7465676461 672d7761722f7372 65766972642f7465 676461672f737562 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e746567646167 2d7761722f737265 766972642f746567 6461672f7375622f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563db4f93a30 00007f34963f1b40 0000000000000031 0000302e36313a31 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000301 0000000000000033 3170306d656d7000 306d656d702f6b63 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 166ea74409741e92 ffffa9c728dc51db 00007f34962bfd9b 00007ffc1da4acf8 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 776eef6ffbff3fff fffffbefaffff1fb 3c757f3dff6bffbb ffcffffedfffeffe ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c46392c45392c38 392c36392c45382c 43382c41382c3938 2c38382c37382c36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 00004e3d53411252 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000