last executing test programs: 1m6.776300426s ago: executing program 3 (id=169): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000004400010029e15a5e9c43f779288215bd70000000ebff6f1166196670040d8475f6fc230000000000", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000200)=[@nested_create_vm={0x12d, 0x18, 0x3}, @nested_load_syzos={0x136, 0x78, {0x3, 0x7ff, [@nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @guest32=0x4810, 0x9, 0x1, 0x461}}, @set_irq_handler={0xc8, 0x20, {0x66, 0x1}}]}}], 0x90}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)={@local, @empty, 0x1, 0x6, [@rand_addr=0x64010101, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0xd}, @loopback, @local]}, 0x28) (async) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x400, 0xfffffffffffffeff, 0x1, 0xa9, 0xffffffffffffffc0, 0xe, 0x9, 0x80000000, 0x7fffffff, 0x2, 0x9, 0xb, 0x316, 0x0, 0x3, 0x7f], 0x0, 0x80005}) ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04040a"], 0xd) 1m6.723640757s ago: executing program 3 (id=170): r0 = syz_clone(0x4040000, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r0, 0x0, &(0x7f0000000400)) 1m6.67858019s ago: executing program 3 (id=171): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x1, 0xffffffff, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x97d}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0xffd}]}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 1m6.445373866s ago: executing program 3 (id=175): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x800008, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') lsetxattr$system_posix_acl(&(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_mnt/kernel/mm/transparent_hugepage/enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='always', 0x6) get_mempolicy(&(0x7f0000000100), 0x0, 0x7, &(0x7f00007d3000/0x4000)=nil, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) syz_emit_ethernet(0x62, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600000000000000000000000000000aafe8000000000000000000000000000aa000004000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9000000090780000fe05f989901e030dfe06e2d4c3d90100"], 0x0) 1m6.336314454s ago: executing program 3 (id=176): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0xa, 0xfffffffe) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000540700000000000000000000000000001c3ed87e611f2b240466ef33f1fc2728ce1bf9bf325dcd16cbc700"/65, @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="80000000ff"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001600200000000000e6ff2e35aa170e10595d000008000a0000000000"], 0x20}}, 0x0) timer_delete(r6) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4, 0x0, 0x0, 0x7fc00100}]}) syz_usb_connect(0x3, 0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000000705e34ed8"], 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0xc4000) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000980)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000002780)) 1m6.176689079s ago: executing program 3 (id=179): r0 = syz_clone(0x4040000, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r0, 0x0, &(0x7f0000000400)) 1m6.082295124s ago: executing program 32 (id=179): r0 = syz_clone(0x4040000, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r0, 0x0, &(0x7f0000000400)) 44.563954721s ago: executing program 1 (id=468): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x200880, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r0, r1}, 0xc) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f00000001c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x4b564d05, 0x0, 0x1}]}) write$binfmt_register(r0, &(0x7f0000000240)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x1000, 0x3a, '\\[#\'\x03', 0x3a, '!', 0x3a, './sys/devices/system/memory/memory2/state', 0x3a, [0x5, 0x43, 0x50, 0x50, 0x50]}, 0x54) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x120) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) getsockname$packet(r6, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r7, 0x108c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c000}, 0x4) sendmmsg$inet(r5, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/memory/memory2/state\x00', 0x1, 0x0) write(r8, &(0x7f0000000200)='offline', 0x7) 44.436705794s ago: executing program 1 (id=469): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000d06000)=0x1, 0x4) (async) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) 44.436436193s ago: executing program 1 (id=470): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x4040004) 44.375874901s ago: executing program 1 (id=471): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e1140000000000000040000000000000000000000003000000000000"], 0x50) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) open$dir(&(0x7f0000000080)='./file1\x00', 0x10800, 0x84) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x31, 0x4, 0xffffffffffffffff, 0x6, 0x8e335, 0x9}) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x16f) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r5, &(0x7f0000000100)='measure func=FILE_CHECK obj_type=u', 0x22) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2000}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x200480d5}, 0x84) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000600000004000000ffffff0f01000000", @ANYRES32=r0], 0x50) 44.373363086s ago: executing program 1 (id=472): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs\x00', 0x0) mount(0x0, &(0x7f0000000440)='./my_debugfs\x00', &(0x7f0000000480)='debugfs\x00', 0x0, 0x0) chdir(&(0x7f00000004c0)='./my_debugfs\x00') chdir(&(0x7f0000000500)='./usb\x00') chdir(&(0x7f0000000540)='./uhci\x00') r0 = open(&(0x7f0000000000)='0000:00:1d.0\x00', 0x200, 0x50) read$FUSE(r0, 0x0, 0x0) r1 = syz_clone(0x4040000, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) get_robust_list(r1, 0x0, 0x0) 44.285356105s ago: executing program 1 (id=473): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000006170f330677c4"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000040)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000002c0)={{0x32, @empty, 0x4e20, 0x2, 'wlc\x00', 0x10, 0x3, 0x5e}, {@multicast1, 0x445, 0x0, 0x2, 0x54f, 0x1ff}}, 0x44) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) 28.864239817s ago: executing program 33 (id=473): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000006170f330677c4"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000040)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000002c0)={{0x32, @empty, 0x4e20, 0x2, 'wlc\x00', 0x10, 0x3, 0x5e}, {@multicast1, 0x445, 0x0, 0x2, 0x54f, 0x1ff}}, 0x44) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) 8.508105672s ago: executing program 4 (id=879): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)="034ea1aa", 0x4) (async) syz_open_dev$dvb_demux(&(0x7f0000000280), 0x200008, 0x800) 8.427871461s ago: executing program 4 (id=881): openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000002010300000000000000000200001008000a44c22c5217e7c93641d60c58be198004000280"], 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0xfffffffd, 0x0, 0x6, 0x7fff, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0xeb90, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1009, 0x10000001, 0x7, 0x21, 0x89, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x9, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r11 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r11, 0x4802, 0xa) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4801000010000100feffffff002a0c281287d09706000000000000000000000120010000000000000000000000000000000907144e2300050000f7ff39000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$CDROMSUBCHNL(r0, 0x530b, 0x0) 6.495371753s ago: executing program 4 (id=922): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, 0x0, &(0x7f0000000540)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f00000003c0)={{0x7, 0x0, 0x3, 0x1, 'syz0\x00', 0x9}, 0x3, 0x30, 0x1, 0x0, 0x0, 0x7fff, 'syz0\x00', 0x0}) syz_usb_connect(0x6, 0x3c5, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x42, 0x9b, 0xfb, 0xff, 0x16d8, 0x700a, 0x9a4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b3, 0x2, 0xff, 0x8, 0xe0, 0x1, "", [{{0x9, 0x4, 0xea, 0x3, 0x4, 0x2a, 0xe1, 0x45, 0x6, [], [{{0x9, 0x5, 0x7, 0x1, 0x3ff, 0x8, 0x8, 0x57, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x5}]}}, {{0x9, 0x5, 0x5, 0x8, 0x8, 0x0, 0x81, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x7f}, @generic={0xd, 0x30, "5de8f04c14cb52ed2b2456"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x2, 0x5, 0x3, [@generic={0x9e, 0x2a, "0e65bf3ccedb13b6acba59899efefdd07393335a0f0cc75d15eaffa0ab579f483e2ba7e2b434ed2ec51b2b35ae0a7ecfed946c784824baa3f94bb8751ba019cea026b2dbee12bf2f74f4d5a23daf02b65ee8c2fa3431345ebfb8f784a7a9583be5fd3a01d9593c5719ce54a49ceb6afd2dd3aadf36f61f54c7e964f388f84a8c6f129e5d2365afe6bf1bd500431f17bba7dff37e953e2438ac6fe906"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0xfc, 0xf}}]}}, {{0x9, 0x4, 0x8, 0x0, 0x10, 0x27, 0xad, 0xcf, 0x2, [], [{{0x9, 0x5, 0x1, 0x4, 0x40, 0x3, 0x5, 0x7, [@generic={0x18, 0x11, "11b04cfe0cb091bc50ff9f32f6cdc234d6dacb219175"}, @generic={0xc8, 0x5, "4670a6826c916f98984d6a19daba2d81998eb227a85bb58f00d511445c6cdcae7f277b2792ce7c3cd6eb179d9c6e33105fdbe5052eda54eb80aa4f4d93a49cf89c1bee094b55c554a9f4d789902cac7bbb9613755070dcf65f4012090c6d19d0e0b816aab6c744e251951abd84b57b5420343e62cfbdbfa10b7efbc762c875117fd581db3ab685dfac133ddb75c4624c9f969f3d5eed358b4606ddf57cfdd043754bce9e106dfb32788b5583b17ed371c25c3a175f7849bb008562db84ea892a70c9a4202742"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x3, 0x6, 0x5}}, {{0x9, 0x5, 0x7, 0x4, 0x7bf, 0x5b, 0x6c, 0x5}}, {{0x9, 0x5, 0x8, 0x3, 0x400, 0x4, 0x2, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0xd}, @generic={0x10, 0x7, "379c43359024f41ee47bc1885bb9"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0xf4, 0x2, 0x10, [@generic={0x37, 0x21, "6bc91fda6b8f34db1199cc22cecc94afd126f87bb3648d50b3740ccf0b9312002ae58dfc64c5b777320278d30a87959515a48ab471"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x210, 0x7, 0x2, 0x2}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x8, 0x2, 0x57}}, {{0x9, 0x5, 0x4, 0x8, 0x400, 0x0, 0x77, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf8, 0xb422}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xcd, 0x5}]}}, {{0x9, 0x5, 0xa, 0xc, 0x20, 0x6, 0x2b, 0x5, [@generic={0x7a, 0x23, "d2fdc74e3a78ca05ddf7764d94174299eb2884680faf057310131914fd4e136660cf25934987993770b49777c88b28542734e2f1eb746f28fe33d0d3aeb5ba2c192259037b1ad00543903acb6f0b20445b04eff68925a0067033d14812bb8e7dc14ed9776639a471f60939077861eb7c45c52ba51fb321c5"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x37, 0xffa8}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x2, 0x6, 0x8, [@generic={0x12, 0x23, "98d6be089de5e0ef4a3fc5dcfd4047df"}, @generic={0x17, 0x2, "51f0ccebcbf2865f5d8bf768aa0208877908db8701"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x7, 0x10, 0x9, [@generic={0x45, 0x21, "9ba54c9c6fd04f55dc461a7aef235e2a87bfaae93357552cf277179cae39b4d5addd268cd555f77562cc39d2e3eea2cc822aa04753b31888eb5f7e7693267cc2c4985c"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x5, 0x60, 0x2}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x2, 0x3, 0x5}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x9, 0x7, 0x7}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0xaa, 0xb, 0x7}}, {{0x9, 0x5, 0x6, 0x1, 0x6004ab4b74d8cc44, 0x2, 0x4, 0x2}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x200, 0xd7, 0x9, 0x7, 0x10, 0x3}, 0x17, &(0x7f0000000800)={0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0xc0, 0xff, 0x82, 0x2, 0x75}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x6, 0x9}]}, 0x6, [{0xa3, &(0x7f0000000840)=@string={0xa3, 0x3, "4c1efefd2e6dfb04c45e1fd99d7a3916989d2279ee2cea5a5cecaf46f3b7e95e4cab0cfc93387f9e6dd53c74711c817aed3b1d6934221de4cac4be49fcf03eba8e7d924ac2f803f9ce906d5829e2349224e265b4c14e4df5a591432a6270a68f897016c86359a686025ed9cebfbb53a554b2d0ce28b3127346b4bf165d44229694544e754583c6c21b97caf9dc67d6011403fced23caa107e5faca058132c04961"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0xacf5}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x46, &(0x7f0000000b00)=@string={0x46, 0x3, "dc675d7528bc3ac94d2e2267cd1cd66c0a0bf243c12c2c3cba3b198281a769dbb2b910d09d1cc8c29ded19f0123e62f17d0f8447af111fddd911b0477ec60603cf8fde28"}}]}) 5.878932914s ago: executing program 4 (id=932): syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb08004507002000000000002f907800000000ffffffff000022ebcfa5078d80867abbe8bed698000c9078e17f0001"], 0x0) r0 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000240)="c12a3565451f2b74e86bf25f137f5df59a8b0859b467b30acc9c0d8371ee5f1142e70bca9a2a2414ca49788cac9b9d8a24a855b1c144e8a30e521decd0012e808bac4c82f36fb5a75065619360ee37dca1b59b1c35cad5f04e3ae4fa9f6a98a78afb64f7f5ac0abe399b3dc42ebde0fac595e489a4e652a750ab73ac3f9d9bec5c44af9cacbb291a6d39fe420669f105bc8f4735", 0x94, 0x0) keyctl$setperm(0x5, r0, 0x0) r1 = socket(0xa, 0x3, 0x3a) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x1, 0x100010, r4, 0x0) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$binfmt_format(r5, &(0x7f0000000a00)='1\x00', 0x2) syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x1000, 0x7a}, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$describe(0x6, r0, &(0x7f0000000380)=""/118, 0x76) 5.487130248s ago: executing program 4 (id=938): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000600)='./file0\x00', 0x102) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) openat2$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000300)={0x181000, 0x5b4, 0x5d}, 0x18) mount$9p_virtio(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="74cf26113772616e733d76697274696f2c00"]) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x48081) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r3, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x63a4, 0x4, 0x4, 0x4, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000004c0)={{r1, &(0x7f0000000340)='upperdir', 0x4400, &(0x7f0000000380)={@_ha_fsid={[0x1, 0x4]}, {0x6, 0x4, 0x3, 0x9}}, 0xffffffff, &(0x7f0000000680)={@_ha_fsid}, &(0x7f0000000400)=0xe}, {[0x1, 0xd, 0x7, 0x8000]}, 0x9, 0x57, &(0x7f0000000440)=""/87}) setsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f0000000540)=0x8, 0x4) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20, &(0x7f0000000240)={[{@volatile}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}], [{@permit_directio}, {@obj_user={'obj_user', 0x3d, 'trans=virtio,'}}, {@fsmagic={'fsmagic', 0x3d, 0x75}}, {@measure}, {@smackfshat={'smackfshat', 0x3d, '.\'\'\\'}}]}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f00000003c0)={@hyper, 0x2}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x30, 0x0) landlock_restrict_self(r5, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) ftruncate(r6, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x2, 0x0, 'queue1\x00', 0x800009}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x7, 0x0, 0x80000}, 0x100}) chdir(&(0x7f0000000580)='./file0/file0\x00') 5.008188021s ago: executing program 4 (id=942): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xdb) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1.168928304s ago: executing program 0 (id=975): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x1}, 0x94) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x80) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000001e00)={'veth0_macvtap\x00'}) syz_emit_vhci(&(0x7f0000001f40)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc8, 0x6}}}, 0x7) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000002040), &(0x7f0000002080)=0xc) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002680), 0x2, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, 0x0, 0x0, r2) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000000)='./file0\x00', r4}, 0x18) 905.519851ms ago: executing program 0 (id=978): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000300)={0x0, &(0x7f00000000c0)=[@nested_vmlaunch={0x12f, 0x18}, @wr_crn={0x67, 0x20, {0x2, 0x5}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @guest_nat=0x6806, 0xffff, 0x5, 0xff}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @wr_crn={0x67, 0x20, {0x3, 0x1cefb9d0}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @guest32=0x4802, 0x80, 0x8, 0xffff}}], 0x110}) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000340)=[0x0], 0x1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs\x00', 0x0) mount(0x0, &(0x7f0000000440)='./my_debugfs\x00', &(0x7f0000000480)='debugfs\x00', 0x0, 0x0) chdir(&(0x7f00000004c0)='./my_debugfs\x00') chdir(&(0x7f0000000500)='./usb\x00') chdir(&(0x7f0000000540)='./uhci\x00') open(&(0x7f0000000000)='0000:00:1d.0\x00', 0x200, 0x50) close_range(r6, 0xffffffffffffffff, 0x0) r7 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="eb8d8dbdc83c73213c99ccaa9732cb246faf957a1f187255d53b576a4a50134d31cd88d150c61a4e2e069bfcbd5948524e132e61cd1b8b7b34c0f84839de4ee3a2b3b06a", 0x44}, {&(0x7f0000000400)="843f0740c9a6510ec4d75747e7f6551476d1d21942a1df50e5ba135b583f9f54500148ff5cce473faceb483b334ffcc85303ec37efd611c158d438f1", 0x3c}], 0x2, &(0x7f00000004c0)=[@iv={0x90, 0x117, 0x2, 0x75, "ccaae3f818e2f42cba18caeeebb1fbc46bea7f0f56b81f10f56174515eedbfc9555f76be1dc3e91df6f1ed67a9d50e6115c3d2125edb7b09229bf67a9fe6329707f0ca8c16cf87953c3b513e5a0a8b247e3a64515c8bcc710b8a7b82a7e67abfe1a48ac6d692220cbf152c19b4efe88a38d757fc29"}], 0x90}, {0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000800)="be4f6bdc9e09b9a170516c4fc9426ff599fbfcb99283692b55e6722ff0b57c3dc93d71caf468a51fbbe02c21d71069ac2aff88a4663ec278475128dae9467989792749611a61a49b3ec89891f3d6061e53497802fbb80014723c8adae8f116aa5cb02a82808bda8479857d98ee633861ad52e5870636f8b279ae9aced48f2f8174ccde05c0f931785a9297cb551f46174f2f08f9b4a4cac05b0ce28c1bb3c9f1e6cb19c3d347063a8a69caaf28ebafe980089a8639a74381d538e6f58c4d39e20a62744421f819e038fc2f330463c3ac1177796f11ad33a480b2675724db3431c45ca28bfa9e3ec29670285c2881af04c30462c6b13b4e8498b8482d3f97ee374e6cf23924ecd66021a6ae10d9a973ecbc2fad6b3c71abc7988763be00560fd7598c0ae44d21d20a89148579f240efe00d2f1bba1988568b7bfbd52e937847b04d676eb6f37a62276c7013dc45273a26dffe052bd99311a6df2956264fbc13793f90e245ac93eacb39e2ec2055070a880031eb82edcadbeed1ab5205693e2952b0dc598084c38f4005c8c1c82fa2aabbfca98dd74dfad77f5bfd464835b839839b8e3649c25bf6d885336429731108dd68b89d33057526561f457d2608688a033a81509ae307ee832dc0812129db4901360e4fab34f709da380c35210ec34aa270864423520ac61699ad6d802213c7e62c89c88d0a0af4f6e2a66589d07ae09cc38d5ac13d7058116eb6af3a1aa740c446b081b50c364ab1db2ac94a0754495a1f54369d35c9887a4f2ec49e0f3fb11a627e0a45489f7e5dd7fa2010f474e8d55acd10bf45df5ee9ae87baea5aad2d3699d8a0460defa480630c451815f295f8754adaa335923582f84b781f69bfb2ac753c4975c816be40b1ab11dcd6d245d3c671fcdfeb92e997cefecd2a16d3eb54523880bfbf463bd7922ea3aa0fa92c23e3460aa738f2951548f48f391e3cd68ccc14903201c3706914100d4c1b89bc658d923a1dbee0faa0db9cdd6b8940c938561f0956d0dbba6831c88e56b0595dbece151310a46570646cd0d88a4055db99d27980f9c81cca21237c3a8833eb05adb1454c9cd511447f60ac568e75806360a45e13936881f12e4a54ac3b87538a4b27baf5a2ae251683ad0b5ecdadca015ad198c3484b696d092db786e87a44707677040904e3866114ceff564991a379abdabd93c2fb9364f7a1f7b4f98148e57ba28b12c432e350c527121d1fc289df522722b61715e059ce095b09797679960b38802097969a2047553725041dc5b25202e12c1667411d6592a32c61a35d8339bcc0ef7439226ea847a50be8d249cf0b22e872e33b4a98743f9e1bdff631b6161caf593dc5eb8ea94b003063542512bc97791528e79acecc4b2ea247aab3937914af9f8d1a601cc030f391bef85b145a675cec610b7ce5cc62b2180e427ad9772709c34354bef54f5487a5ad9a3cc96d654e795112fb6763c4ddd35ef600849de2f5f9f79b57041feecb75d517d155c05a7665299ab7ff4f8fe22c6d91f76d72e116bb1652118007b79a37a8fc412a9cff3f92140ed87d43bb338927c371403c39347ed13353a5d2ae5031cea0c20d2b2c24411efb7d952bf0f05c24730be3fea65ec0ece09d5ba9fccefa19b82893f98942c5683614f8f74275471a79059a0d1f13a171f5c62bcced4c8e860ed0931c125c06fc63dea2d1b58dbe21db67414456fd8ca77570cc91bfb7be849ea8dd2b5266242154832b40555ddd063599f9d82e945800bad1319cca1959b81a9608e5b2956f5fd45638aeeed39ea068247ff8a072032553a0922ec0f1ec374a1806a58bb83bc406c528096062d4c13756a157ffa06b37310c9b4300a2495d9fc039dabceb4cc9d256bf36e87d21262f749024d56d870a8f0b1c6c1f676c6dc36d913feb610f83331d32a383f1236b9401eedbe24bdc67255258ddf011c2ffa826d2e49b4dc7e7532581f0265a8cb9222a0e34e522c7f044120042374ebe09ef7466b59669a70b564ea6886083b7745d289f0bfe9346a9ef9829c6f799bed8bef2b174cbb3d69c055abdcdc3a14610cff34c36a8242139e0b4a3c9e4d2ac81aabbb969670d14a188cf3ed5edc93035fd35b415ab72fdbabc75cb81777a61facbe8ecfcba5aaac042d836c340f77afc169ecfc5a5a109a98142fe8054f9bc70ea372fa1e013563f6fec15d1ccdbd0e268012e2355e5f600af956e740990c628e74a1339d014c853d1ffd9e772a2e9f311323a4d895c79662aef16f0297a3c198244cef780c2cf938774d77e1e3876afe79ce4b949aea56442286d872b299fbda75e6e542a5b9dee638cb61cbbc470b9ff2cc4b5d99444623e584470bb9c30a38b78eb68ab4b4b62a84461902564bb50015ce747cb527ff91cd6565e22972cb3b687c59e4b90a755826cdce4fa81c1814afe2feaa8498509f0ab2c6b1ef570e7d3dc1e785bea431db776df93ba40f7208c8eb95fc727f9f53fe3783ba4e7e3e95e912e3e5871db34cfb46c0df6be94db0066f60b105bcca0866da42310cf7e88ccaabbe221ac9e6d872314b40d121a98d72b7c859e6dbbcbaf3b7dd5898b606f8b462c818979074a84dbd5c3d1e796fbc2e02242cd29158224029ca400cc5b04891917ede3f9bc4dbc639d04c4c71aa53e013c6f6984e8223319a2986f0b70c0c7ee4170728473ab296b31cdeaffebd61449b56ef59693cefbfed0b7be04220f7a380681a1255e17b8fe8e2deeddc35f171b9cc1d63256db6dc4b081f892d27ebd939cd2a9dbd6b3174f7ada4f4502c1b4a463a8ea27f8cca7da4accf6bc8069a81de3ca386f31d82e729b53c6aaaf9312e110049a23db882fb7b917e2784ae694f24450c96e335044e66bd8bf5b5c4011fd9c2cd19f1bcbcdf97a64a6b49752cdb1dac1bee6f7d1fa443a68c556df4e7c18e0640743e57f212aedf986b993c5539195e493b30e439bee116a9eb9c15da43f5cd8f48734c3c04f5c4d3e33e162e4aedddd9d77e9575b5bc6dd9b7ac871a259dfbd8feca23d90bbe3f1fe803805dd6da31d82bfc3580e49eb6f7440edd9c1f61197556885234198df3b5eb028d22028828683bde964ced4e6435aa8f73342b48690de1a8c8906ceeeb8a72bf745a3e5131c83a5c6dd4f4542cfba6e41ba1aa14ce5814f4018db85d7a503ee03aa1f23f98d0387165b595ef70591667680966cd2bc5f7cd2703073e357f0f74d3a0bfd4abb50e68583cc9048de7c9ec84c427c3a0fa2496850279a448d70eb0e12c8d79ce8bd78f49e37a9dd75e56735e250fc9b820b44efe87c27b0585d363db22b9b913c4f4a609cf601bea7397dd920540df15c0c8ca94d261329b65282a31feed37eb44acfbb04772c5c530cd20ee2c8dbbaed39691770c5ff7ed6ac1a03951b5e3c01692e5a2961a56ff0041919103159f3428a3d8b72948c1e74fbd4af791fee779b105db309ff165bb022f5acebb3436b4faf98400e676b78e70fb5ac814d59a269899a6849eca4d3b380c2d03547df557ca06cc7f9f7f2ddb2db2a2f09a85c12be6af5fa69830c52c1a5efc517f3d591ee23965511592915b60ab376f0b99dee73e2be948b6ebea0d134b3566556a7be20eea6c2f3477d1240714e1c86dfdf4fe4eb78fc809fa17493d372acc3b72c7f860fb5459b788276d33166d1de0034c7d4f23d1c1e5a177b76030cc94f943b9f2c5f2ad29054af19a02084636e13985ebacb3fdded3391ece811afc3b41d8b004f53659b88fdf2910307a425db93a39c78d3303b12b4ff67442c8c687faefcc343444fad7b534e9ff6aa98df6ca1c63e86f598802760a6f6bc2ebc3154b97bc76c22452073585b639ae304579199902108c799f09b6a2d491462d7274fdb2c1731562bd8f905cf96d234b8c7ada3eafdd73c63c4d643e26251f3c903f1ffbaf46827ef183b016347b171cec1e540765b15ac0dfb24e6406c6f5e02e7b8a53f2ecc8e6f479a5a5d7747fd2bf9fa4b69c442c5b48411388a4dcdafb20837282bc5d0332b91d70577477881d61dcce7b1ba830e26109efa7088073aa8e6674bd3f12750c5ad4c913d6f6b6e5047d54ddef7ef13e5ad9f219d8d953ee8d0a6ea4ea70004348f0487771f5cd420c18b8cb973bec84703d232da67766b3d8676d82f26a8bdc319b7396558c57a6a3f931a3f39128ea5eca47d11f6d87384b9337a92234a139fe6a73a8a5c493fd1dc20273730113bde4998a0b5af706cf1e6206c537d5a72df0ab59be904f52e656c42ad172d815fb155399f74c09aeb4dc8f807972c8715c8d6596261565d25a34223e0775604c5daf817525d136aa61eb97429abc50badec1c628f5f277b250b83341247a9b867f7b9333e2d10f70ace6140daa0e664af8dae7b04153d28f7dfbcb1943aea30c52e9415e45838ed6747ee10a1789fdd1a64386ac80f2792bbb1989f053947d3e5e4501b0b310fa31fc4b59e7d0bffe696d5d8f51c33deffe45b6faf863932937901b42fa6fc0bf2cf80e479b80b4083730ee37c55a8ae99dc3c1b87aa9f0318e5d9e173cfb5dc5bd244bad3cfba6c983d6136415396b2165dd7f3cccbd84dee8af08c1a3827736ef80286faac28878477d667478b31b8b71492cd79c309cc518badf1bfb4032d318296e51a3f705a72d10d2da8883e6b6b33caba69be461d222096ef37ff591e851a57f7fb9fa7e3784ae64e5173b6f7f76ffdaf53054ab48da59d888690d9738a534c5a5f612a7800e33ff0be03d4ff44afd17c042bd77823c87464f15d666730f1fbd1bc6c88a2111fde6a96782c09aabc292c2e86fc8d4beb15881eab357f8694a2693ede3306d5432d7faa7982790ccf18bf0008414ec49b1ae7118069018db1ed9397db4c0a66be0bd8baa6ee748dc8ec4dcb2a728f4eaa84acddedddb0e941c3a4675a9bc654de922572b03e204aab1a1a07b2c7aa7f7eeb0057dee12cf1ff2d7ede1a73d951231af514915884478eba8e12b420e650cc7aa99a22f2a823f49b08a5a9e9b28915a4652b240dc9a89bc12a005a7883e818bdb1aaba7e17deefecfd34fce29031c2063d2ac15ca35d56f6781f32cfb81f57937eef06222664e8551d1ba682a4276caf52246f94cfa2efc08f08768eabd7b139788f33c46feb9177ca839b585e8deb9fcdc653b4c48dd4331eb133c28d68eb18f5bdf48c96afc8759e56da4c083b380778187dd3b0a49118d67c8588eb6dccfc61bdd8897983db315999a1eea6fd524a95ec26bd92f86d6e9e28d1c57cd0945320bd12dfdbdcd4b7fdee44c950a9b3e2ef75ed146f6b9ada62a9a0a16fac392eae31a4c0e23f0e61b89713b1ad405556e01d8bbde0104c6edc04174d065352d74a9b109d4a54c87333461ef4a45a5eaff7ff42d08c85601022b245ac029762f61735e000689bec5695f9bac611c1494eff04416c9574b6e2b8c90d49d01b224e20765134ca9b5fddf12547ba532ff6bfda0920bed93af6b6cfe02573d42fd45e6e07279cc65139d5dbce79d1017ce5dfe101ce9e2fa2b54ce189c9b97a7e24dad6cd207139dee4cb2fbd58173bd84e3a696873ec8306ad78c9a3a18ed9add9c08e08f1f15d04f1ec7738a6fd89cfadbdba6492d8ce29555735847019126f71b63cf3528eee83f43e2a0bb174d69baeffea99e91c89970501e584ebd2153bbe3b009aaa6c9a040d041841dca777b3d9b8d927b31eccb258cd62c0d96176495a3c6761878c4a92fde005b85022b3c55e2b91f089852a1340153f5eb8ae434ede0b8de5dcf2b9ce4804777c4e0b00e0", 0x1000}, {&(0x7f0000001800)="c874014a14b5075d47c064468fac4aa5dee56d5e95a134c0d33ce69bf3351863b2ced67c5955edefa5462e0a1faaa059fcfcc9e1ced5ff5b78cad7fde9d43a899214f044611363d53547fdba193a96899c7fe57c1e8fb380dd6b5aeb3d8561059829c3ce90d55deb62", 0x69}], 0x2, &(0x7f00000018c0)=[@assoc={0x18, 0x117, 0x4, 0x3}], 0x18, 0x4008090}], 0x2, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f00000002c0)={0x28, 0x2, r5, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000200)}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r4, 0x0, &(0x7f00002ce000/0x4000)=nil, 0x4000, 0x1020800}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000300)={0x18, r9}) 828.053945ms ago: executing program 0 (id=979): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x290, 0x20a, 0x278, 0x290, 0x278, 0x3, 0x0, {[{{@ipv6={@private0, @empty, [0x0, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x8d, 0x0, 0x20}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0xcd, 0x5, 0x2, 0x1}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb00557dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa, 0x0, {0x400000000000000}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000080900010073797a31000000005800048054000180090001006d6e74610000000044000280080001400000000c080003400000000008000340000000170800014000000003080002400000002308000140000000120800024000000018080002"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x44000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = socket(0x8, 0x5, 0x5) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x42000004, 0x0, 0x5c) sendmsg$nl_route_sched(r1, &(0x7f0000000940)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000b00)=@deltaction={0x14c, 0x31, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x56c}}, {0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x93c}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffe7d}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0xff, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x27}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000c0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x4}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc601}) syz_emit_ethernet(0x78, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbc862ee7daaaaaa86dd60f4adf700422cff20010000000000000000000000000001ff020000000000000000000000000001050000000000000068cd85b50007840020010000000000000000002400000002fe8000000000000000000000000000bbaad25a7f0900000000000000cf95e1e48f10"], 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4000040) fallocate(0xffffffffffffffff, 0x22, 0x100, 0x2) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000780)={[{0xffffffff, 0x1, 0x9, 0x7, 0xa8, 0x8, 0x1, 0x7, 0x6, 0x1d, 0x3, 0xe0, 0xa539}, {0x5, 0x2d97, 0x6, 0x6, 0x2, 0x3b, 0x6, 0x6, 0x0, 0x1, 0x81, 0xd, 0x5}, {0xb790, 0x2ef, 0x4, 0xd, 0xdb, 0x6c, 0x3, 0x5, 0x6, 0x8, 0x3, 0xe, 0x7fffffffffffffff}], 0xe1}) memfd_create(0x0, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd090328000500300003006000fa3af905"], 0xfdef) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f80)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x8000) close(0x3) 678.608724ms ago: executing program 5 (id=981): r0 = socket$nl_route(0x10, 0x3, 0x0) lsm_set_self_attr(0x66, 0x0, 0x22, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10010, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r5, 0x1, 0x48, &(0x7f00000002c0)=""/174, &(0x7f0000000100)=0xae) write$char_usb(r2, &(0x7f0000000440)="64e99d", 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) lsm_set_self_attr(0x66, 0x0, 0x22, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10010, r3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt(r5, 0x1, 0x48, &(0x7f00000002c0)=""/174, &(0x7f0000000100)=0xae) (async) write$char_usb(r2, &(0x7f0000000440)="64e99d", 0x3) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) 676.06932ms ago: executing program 0 (id=982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x6c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1538}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @TCA_RATE={0x6, 0x5, {0x8, 0xb}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x80) (fail_nth: 3) 559.348762ms ago: executing program 5 (id=983): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000cff128009000100766c066e000000000c00028006000100020000000800a400d66e2f2f57d7657953914ceab9a10d4a57a9c030412d96c5fd88dfe45a5275e7faac260719ad492dd6b6b7d67cca7e787558f6e8e4ee063ac26265754c601df8386ca9ea45bb1a26b49f66c88b8b0dc2e26850cc627664ca58dc5dfa076f9ab1398cfc0bb0b2da18424d3467301d7a7b37344f5b6589f8a967bef24acedcc01e77ba7878b16ad704cb248b74661428097990937d0d41d2c7e00a1be18b5ac340e2f20816edde25bc7e8bcd562101af3f6bea235b2052471e124f1cbc31705352ae5d751005674e2039650c31", @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400074100000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 476.914369ms ago: executing program 2 (id=984): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x900, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000180)={0x0, 0x5, [@local, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @multicast]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x9fffffff}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2653c, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)=[{0x1, 0x4, 0xc, 0x8}], 0x10, 0x3}, 0x94) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f00000000c0)=[r0, r0], 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x1, 0x8, 0x87d, 0x8040, {{0x1d, 0x4, 0x1, 0x1c, 0x74, 0x65, 0x0, 0xe, 0x2f, 0x0, @local, @multicast2, {[@rr={0x7, 0x17, 0x78, [@private=0xa010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x39}, @local]}, @timestamp_prespec={0x44, 0x14, 0x47, 0x3, 0x8, [{@rand_addr=0x64010102, 0x1}, {@local, 0x5}]}, @rr={0x7, 0x7, 0xa6, [@multicast2]}, @lsrr={0x83, 0xb, 0x5a, [@private=0xa010101, @local]}, @cipso={0x86, 0x1f, 0x2, [{0x6, 0xa, "9570ef563b45034c"}, {0x7, 0x7, "24a47929c2"}, {0x2, 0x8, "c35022b3e339"}]}, @noop]}}}}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000002f00090027bd700000000000040000000c00168008"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x84) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r7, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 473.472512ms ago: executing program 0 (id=985): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) rt_sigprocmask(0x0, &(0x7f0000000040)={[0x456]}, &(0x7f0000000080), 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x150, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x1000, 0x10, 0x80, 0x8, 0x8, 0x8}}, @TCA_RED_STAB={0x104}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1}]}}]}, 0x150}}, 0x0) pselect6(0x40, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0xfc1, 0x8, 0x9dc, 0x100, 0x3, 0xf61}, &(0x7f00000003c0)={0x683, 0x5, 0x9, 0xffffffffffffffff, 0x200, 0x1, 0x1d, 0x8}, &(0x7f0000000400)={0xfffffffffffffffa, 0x0, 0x9, 0x9, 0x4, 0x6, 0x800, 0x80}, &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x7]}, 0x8}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000500)=[@in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e22, @multicast2}], 0x20) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x8927, &(0x7f0000000000)={0xfffffffffffffffb, 0xd93a, 0x0, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f0000001440)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = epoll_create1(0x0) r6 = socket$unix(0x1, 0x2, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000002c0)={0xa002a014}) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f00001ce000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000140)="bad004edbaf80c66b87e1be58b66efbafc0cec0fc731d9cfba2000b000ee0fc75d1c2ef30fc7b3060066b9ee0a000066b8f974000066ba000000000f30660fc776000f019ff29f", 0x47}], 0x1, 0x0, &(0x7f0000000380), 0x0) 397.755375ms ago: executing program 5 (id=986): r0 = socket$key(0xf, 0x3, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) (async) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r1, &(0x7f00000000c0)='./file1\x00', 0x0) (async) unlink(&(0x7f0000000180)='./file1\x00') (async) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4043, 0x6f) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000640)={0x1, 0x2, 0x1}) (async) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) (async, rerun: 32) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/rcu_normal', 0x80401, 0x120) (async, rerun: 32) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(r3, 0x3b80, &(0x7f00000004c0)={0x8, r4}) (async) sendmsg$key(r0, &(0x7f0000000180)={0x400000080ffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000540)="acf80e9d3bdf28404a4acafb8f7bbf55b241398cb16978b2bf080d6741e9c4dd5062278f12733cf90fb42f4ae2f393a4993a516f3cfed249cc77344d739f6ca80a188112c22e220ed49b06f9fbd7847baa364be9132970ae37a2df4f12c7cfe47deef99afcf0fedfc8c199d13b0e31cb2003cc3cc8e88d76567580edd18611441fe4fa7cfd87a8d6dd4a1a9c8e483ddd661871fcb6781d9dac1d834723ef6e252b6372aae5c984ef082bfea46205797ea486c0ed") (rerun: 64) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}, 0x1, 0x0, 0x0, 0x83}, 0x0) (async, rerun: 32) cachestat(r5, &(0x7f0000000000)={0x9, 0x7ff}, &(0x7f0000000040), 0x0) (async, rerun: 32) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001e40)={0xffffffffffffffff, 0xe0, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001b80)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000001bc0)=[0x0], &(0x7f0000001c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9b, &(0x7f0000001c40)=[{}], 0x8, 0x10, &(0x7f0000001c80), &(0x7f0000001cc0), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000001d00)}}, 0x10) (rerun: 64) sendmmsg$inet(r6, &(0x7f0000001f80)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000007b40)="fb9f", 0x2}], 0x1}}, {{&(0x7f0000000800)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001b40)=[{&(0x7f0000000100)="22ddd9a67e1c14cebced49ff8c332c1e0b92ce43a0ae89a5d33bb9316eeefc69fc679b5d293d9748f556dce4260723421884e6cc0fb9d420a5ba2184fb0a4b74f770af55747349848445852ac2c4c11c64c597ee6f23372e2fece348be0473e3213e4861f910db9337dec360652d020fd8cf0b927a5a2c20262b7fa9caf058086bd25ee6d35f1b8ea1ba723fa68c457470a6b8a0aa649801de4e6cb8e39c1b42d4af35e7a555e6fa5e6b5bcc1c6696dd0bc4b5cadcd53aeb2b00ffe01b79460f8c6a0b723beb9e6e07cb3950a9b9548525379853fc2146", 0xd7}, {&(0x7f0000000200)="9d3200fc72adbc23deb836179ff91a64bc6fe493439fd53cad9c6aeb038a57666bb75cb9a2990ef1e12ff8cf5ca7d876883e5d62f8d1860e0b007378fbc662658a04263487e751576bdc7fbe609a5ac6dd6de5c252cb4cb49897b3105314a8529746e74eb5d5191ba99085d19d8cc58c44dfb8923d", 0x75}, {&(0x7f0000000300)="e497fcca5f23bfbfb87abc4532055f7e402c2c99187b6063884776450dda355d936e27ed04b59f4fc3b1c2de7d22c04c2ac2fda24d419b3c00c8a5f7ed4b2769c5931796fc48013f70", 0x49}, {&(0x7f0000000b40)="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", 0x1000}], 0x4, &(0x7f0000001e80)=ANY=[@ANYBLOB="6000000000000000000000000700000083082f9959dd0214831b71ffffffffe0000001ac1414aae00000017f000001e000000244248c910a01010080000000ac1414aa00000003e000004200000008ac141420000000070189071764010100001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="640101016401010200000000600000000000000000000000070000008313397f0000017f00000164010102ac1e0101440c3703640101010000a1ba4414b791ac14142c000000d90a0101010000000383075ce00000024414f400000000031000000200000101000000080000"], 0xe0}}], 0x3, 0x4044004) (async) connect$inet(r6, &(0x7f0000000280)={0x2, 0x4e22, @multicast1}, 0x10) (async) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000007900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000078c0)={&(0x7f0000007b80)={0x5854, 0xd, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5834, 0x3, 0x0, 0x1, [{0x3474, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xaa, 0x6, 0x1, 0x0, "7dc28aba31d26308dedad1af82527e749d056afaa21ed8030cae30e5624f257415d27995d2ab5a2eca7508327edb944bf0e3a3551c60da8273034e59b9d1d063fe637151ebc2df56904857f72da1532811ebe4ea3d1c1fea6a5a8b50b53c535f485bea63981e919d1d2da2b6a5fc8bce58937bd2d6b5361ba94eed82627bc6c3c26a8f126c4be44eff601901399c155a95f45c5b0d12919df570cb894fccbe9b89b6fa922728"}, @NFTA_SET_ELEM_KEY_END={0x1230, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x57, 0x1, "782513f13d9e91ea06be7ca367d498e6c0f241db7d582a780af946124850a30a682776a87a8448c4433a6fac7b5cdac03405ac9e90b9d7c8e2b53fdbfba384d14ef5a5e701ef77f5acacad3b3ff92a3a5044c8"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x32, 0x1, "6f72e8f5cc9cfaccf472fb7b3c64dc4d29461195f6aa22d3ccdf6c6dfe4f551422f6be5a2fa0b98144c851a26c84"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xbf, 0x1, "b2d7354ca2f8f95e04e67ab7d9c8dda8d49ca247ecfbbe4be714abb302da777e06f96c08cbdabe4a83332a45ed05d4570d0b6328553147a52bdb1a65b0424612080a80ce6dfaca3c0cb653726543949744b3f61f1e1368574970840acf1d759436cbfc1126ad8f604f293afce40879dcac290b2f9c3e9db138a66b921b5b5ed98a8d1e6cc42114dbc589f87b8847f685705b9b3ab33d4abc19989c0a7bc8a426813ef521b8b3aaec7aeb092d016474173a1c967fa5279ee11480b4"}]}, @NFTA_SET_ELEM_KEY_END={0xb8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x33, 0x1, "058c04acda791ff3ab8278211961942be7c1ab8531771993d0d990329a97091817dff8c8fdc1aaea52f4b517b09a84"}]}, @NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, @NFTA_SET_ELEM_KEY={0x20b0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5f, 0x1, "548813dad1e6a14b5835e2d48454ec2226b7803ad3644e833dc0bc34fbd08ebbe6b38db7ab0ed60986600c8d87d845759d161eaa6293cf37a180cf89812ae2d4f948c65151578dca9853825d2729454b8cf0f70563e8645069e6e1"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "f821b04432e6fe7bc94933c83b3836f06f2e3ce6295e4b72247cfb481308ed6f21b1f82d15c1f10631db59375cb2f3763a5a413cd4c9b62e149fb9a34857da2fce8a63615767d444f4c76885e47fc5c740adcd2dc98049c0739c846e01e99a5277cc7fad37b909112374e25e4459f0c149035b136d5c9394a93ee06b8865ec3646e99781ba6a6a7759f178b7da8630413fcbee034f1c7f8ac8d1bb6569d68a478a6be0bf524a3f2adaffd16de8d9273a1b9c8540ad84d6e4be1678a2a55edc7ad8b0713bd0fc4b93401626ae0d827f7de2d72da82240f72b836acca57ad1365116d2dbf62751ff38c43ca09d1844c70cf2d1d2c40e9803150a7577c61de4cdae981f640657cd26689b531aa2ba68dd14e98be3f55b09cac610e5ba3b1700600afceb4938eadfc755fe73b77503f0b7bb6c03a95573df71155281b668feea7c5381c7a1abfd0b2eb33a6b2e697614cdb818c11bdddb802c7e80a684b0ca6479bf5c7eddd2bace2c233992902ff0790bb4b40bf7666fe23e3a883d07b238d48b8a58531c72f3662590555428335f3d7c9cd0cb982ab95c1745e3208a1168f612dc34f5176853a3875033788721cc910869c1624b8cbdff455fdcf09dff828fbd7a53e9f7dac8c15fa7cb5f62d0d7883360cec5d397f251371ef88e9a636ecab77b4e7193135bb0f7a23a59735205875fbd295c47780c46fb61cb9474411de7ce4837d4a5cc0cd5ea556c9740101a9f41f4d7dd6af0f64fd2895000a383899c403979ec87a3ae916a7bde0b7311865ee931807efb5f1b8c245ecefdaae8bb5bc7337edbe01cf01d866f62e5e2276d6f9b197f6bc155150d97a8d23d801948e998c6dac8064dc3dafbf6c7b46fc0e90055e9ee98640731054151a035dba437dde92c66ad380d2860e86f15e17464652b4bc6e59a90f03ba995392f0ff7718a3a6d4b27342def918ea00b0c4ba66f902dbe52890223e1e89d64faedb7e7890b67e4803640108245c61068d4bf4ee2597250077eaefd65365b5509e6accaea36c4bf7a4a66468d025dc99110714674e99f0bf6463c75e330da3ac073f5bfdc2990ceea280a1c99c24c71d5619d015d1a4522e9e4bd145350e3baa86be439e66ef61a1aa549193bec42e213a077aeb005081a2311a794aae4a6bdeee6aab0eee3bcb0ff035c7423b11bc4e99b6e9ac22d8267b904519fefb5f33390e5d9ac000c3b1d3338e37118223b7533fbece03b8125fd8251bebe62568da10bdb82ef86c0490a52d437d14ee6f85b40c457abdf94ee99562f1002abed99763bf1cb49724fe27ecc8e86458dfc6a5dcfa55e786e8558f2850d42110970be0c21b191fc70d30aed1ad167d5ddaf15c09d8d7ee6d802161c998c2ea77f64840199a5db7187b6e4fda85a9b20f0cc5becab5d0edf2928b2608f45e390ffe919a2acb19a82ae6bfc7b3feb5ea4c987b72b6d39fb178c6d32f98f4d7397d99907ab4dc6ff9d83ecd8c075d2dc97dd15af8a8507ceb5116ea257e9df78e00c8d2461dba13ada1d7bbd846894a5bbf05adc49f74759fdb675427ada5c4bd48169ac7c907d10afb8aafbcb9f8daa1dacc49f489f2825e9c6a04e2ff511a3d36767f5c4c6339f706ad8c15f776ed9616cf3c1097f174f9375e4a97b8bd0cf97edda0b57293d6e3f673a5b221731102cf2c97408d921d3f3b7e2eafcfe374fdb5b9a93122f0d2677c1571e1ecd4e1390d5e46cb4d4d52151e57028f3dbb3366f07e3f16660d369221db6ec428346c53ccfe04df4167b1a40d7b201abe242ea8b5c9a61951cbb55806a6495fd87c473d2218d8a24aef8580912db2a4f05420f3f8d66ebb21825208522f451b230cf5df6dda0aa707f0c15e1f6f63ce03f23d042ce396bb97031d2b8ebd52d1ca14f2505e36956b5714ce8afc4bd86b3caa50a88ebca959cbded07362647442da2e479e497cddb82de2e7f6ecafecce4b05ca2fe6e8f7f47b484620b58bcbb68d53e2adec0a94a08653de2507572f2e4701e03844512b0afef2ac83e763295a97ee745f248089ff4f397d8316ceaa2152769d1ffe1e6fd05edb3cdd3fff2ff1e35e2a867fe960fc60d1cee61f9e654a0708b0c75e76285789056c5a7112f7b7ac713858456003e312bb87e48b60c4f427293497129685689e5e2c58c8fba31ce3969887887c7f7313b7a34c306c2571b0acad67c43e09aacd63ff5c9dd1dc944206d17edefa3278940960cf9883910eb3e5e77dc5b61a143155b7e9c97dbf3e53bda44c00f2a2517167f11fce19e36bd6285e025effc0b03670bcf961bc039c69f2849d30fa3f503d6b90493a35840d37a167c527e9f792848ddcc025aa3be41b78cf380141e1a054f823a747afa13a4484d1f376ce50a26aa9f1700cb33f65b7915daf3df215ca8f749277fb3b8ac6f05c9bbc65cf5853072044791db67b541a3d2867ec4812e9c2d139d93744e22f530d8b510cff35bd6faad8c5839ba46cb0f4aed7969a86c048fe0e93b8cbaaa064b97aa725f6157686f9af7e583122e677482c03c3a9e712faab9d57c6e7ab62f058845e3121bda273f61f2f51a25e1246a1e5aab60af946e82f791da3a0510a4f756dd1ed0e009875ca9b82aaf747c9331039a46bca856b7be2f9b564e9986d6282666a15a70c041d26b007b60769bbe82d55702b37a20bafcc015e272450f3f08ae67d739fb550e28f73e2787f50b70a3d70c5af3280ff9355ebec2f89783fe6587cfc2b97fd78b37213b264aa817b5f46e5302a0c29a7c72924fdbbd51e6c100839ec6be74be1995fe7f4ec6f8e64f547fae53943778635ef172118fa74c659d45d0f40e43c9e221901ef5502fb7f8335bb776ba19fcc013dcfd02cb2c9fb6ea13ce338c1a585c2f581e5f6d216329ed908af37bff564bff48cb64d0252856d04581a22237a35fe2778cd56f6e99eb11aef0447a22e1e8442dc2ebdc6ec651b07694410de62725c4479ea20ab580d8b77ddb331e0f123540dbf26f36ffb6ee277a74c4af13323b9a83bc2b107f67c040b09eee6852a2fbbc062e063eb791a68858529ae24d26f7faf189f2ff3b8930ad1f9b567a608495a434f0c66098e049cf1bb467bc946c2555b4fa569eec7cbfd8a948deecdf97ee0a481d1cc48066793ad59442feabc5028842296a9cf71785ea4a57ad69b37794d2999223a607cc6065d0d12df20e60c1412af4cdb44ee804f291c5e512284818645c0498f064d4ff455292235cc53fa7602bdcc835c28719ccc406ad55e8c24fa556d7d2181a9069f3a956e6e90130c85046d9a6cc8566cb2857c3462350d4d1727f0b01239263c9c3c7bebf38d5f8db95d185fca6223ad59c9df0feea7aeab705ad822b5db4bbcb6f62f03b94767782cf38c1758265672a71e7b6af622142dcf46f002ba5c6af6d498594b109427ae15caffb492b1fdcfbc5e303b34a77bba8ee8bccc4f810e081878a3e6c3784e8e03f5d5ea03adc2b124d69627110124c2a55f00a49f025c2a4e53e4ba24fac2169590ac47e92603fe84e92d747bc1f66c2c29d249bb0ac361f34522190a8bec19f8c10c11918b1787038722ac5550107961f00edec64384c4e8cc1537f65eab37f3a9f824e41071ac96d985532e5f641b239af069a1a1c84879c6a8ac5221301584e25a59dcafe69e4e8a1fceb1e61658ebac258694d19ea0411f94cd189ed32f66190755b30da8a97257a3e78d934960cb892d4512945d924e86ad07c1942d6190f230df04cc1dea95bfa566b3beac277ca9a9c919baabb3770f389d9e706802554814570993fb1c01b39c90ed4eb2abe0e1f9bd8b8f2718c725a241199729c80f08d2ed67a79e898ff63bd5d7b49b928bc31cc959ff1cb538cc22e1184424de6ae111c1ac957e50255842cb3f5f1a7dd70881102352407c840a12db995e31660b34c9024d739dce33fd0a99cf12d5466d47cd621b1f9fb478becdae659c1275c4a19568bd9e1f724f7d4a0405efcd8bec858bb46cfa781559e02db53deabf9c9f5631aa39231a26ed2f418f37999a8d3f1e0484ca4965fcfb5bacfeff97e23a6b9ae8f0db7361ddc95d7de5efad2069752662966c004dad0eab79d9a3e19dbf637945b0a13b05fa5e9ef182564db927c70e6f6260adc2bd152b2e0406d6bb312bea44169170176e48f3439ad29bcd7f2a560826903fd097587d9f901e4cdc6bf8f941c41faf2c70d2962590e8b8429a22e72b88c8b354458fbef9f51d4f3cc89607ea64ffb061c3c3b43719132c61f4256ae3dc1e178c52e88e93536f66fd2048d6cd23d211120ccab44547830518b05ec7f108935b8bb646d7e3de120d90e93c3331c11fddd0b48b1ed5deaf9a6ec7c4d546346b09c86dc634277efed7f6632c98cd74ea60e8fd0e775499773446dbb671affca4fc851d7c1f384c1b23b3934e4b2fa61fe1c079741e07f24f1011442a6a79bf4450385aa9ee9564349ae524036d5b56b6edacd48693fe983917fcb15a63e2f75269738fc1073b43b396633e1a11584c02474c114734f9effa2d2fa6dd5160d8f82010688dddb06c29a5cb239831bbcb3438e942ef0c552d2367ad97f5263e54587d317b078fadf7251629e38c63c63044d69dfa052525bda3c966a9624fd0f42fab63e8c2fc41c5897b3ec74c39b1fd6019338e06852f80921212de12328448a2f929e9327cf55eeeacdd17b931a568a021d50bac72bdbb82bda02cac490c8bc03c931980be0ffe12d468d9a8e6a6f2c9e969edb6190f66de0955dd6bada8e0c73add6d071152fdf7a8aa42108f83ed6042cac91a76b9076ee06a10eb1bbd4ab5af96492841bc7d9e6185e5f5cfd3274d53c287c7e3e2ab53f216c1a99f21b8412ef2f6c4a4493c82f8a49c178c1e1c1a7c8060af029672ed4e23a25c1e9622857834376cf423e977ec579b41b6423c4c6a0de9b5fbb3a0095a0f305a0ad817cb81e5e7ee58e6090eb12711014ad6df9f6e67900a09020434ee3de0f1fbc626ee1793a31533392c846efa9283b66662643709acdc0697246146fa691d4460422d40a09c0ba6154dcd6e8e1bd763f693f7cf7a0c7f680dee072136f00ee4ba6e1c047764ca9677dafacf76463486bdfc3c21f056cdb7c7132a84c88e349cb2b51a463c427c596c7eddcb399ea438d17b01e937a8214c68d6030069091a01882738fc0901a0fe54cb14ffc996541ceccd28966421580e106c080d294abb4c044e3105c198cbff62d1735a65335a77040c293a2bf16e194dc060c9c45b1db788c308af89fc7fe75eb1a690e171ed8bb4b60455e1b85564f662f989208205bb75968c84b4a7d85b6fe83aee7e12ada5518f0568566c7bdcf11f110b727184f432394912ee28a7355cb5aa982c47f24a37c87e3a28dad80f132349b405d7e3e48f5e82849f978a8c62b0da2c7a929ac90f948b06838f9860d338a57b06733215c84f11293a718c2d5f32f42114c363c5250f44b9fe7c89e0542b946168d886058adda7a01ab3530f8d509e594c14c7f68a22ce4dd442c7abea0e80e0a95bc1287174742bd27a2516ab5772d028223abf7a38591e07a5845eb9d778b52c75ef50a8ad09bbafe4df57fc333060d6d231623ece279af377a1cb6630ead937c0e10367db3706a73312c10735691b1bd4ea91a4f915c378a47328febda200b1dc9d9ad67a559aaf19fa11d284d47f6f2651d8e2b2ea5f1c8c9bbb06c3ea41b027b1cf6da2bdf85f2b10c5097417b5978a0d93005ca5d9739d2b4db83a03de4a8866986ccd40b26185cefbe88b0fa14f478e3620dbb8807e55833"}, @NFTA_DATA_VALUE={0x1004, 0x1, "4ad72e0cb2670fe71d87e69e1f9dc8c17be18e557bd78c9448a8e318411221206bf29ec0326d85d13bfb31cd88a9ef3ec8eec67ef14b15ce6c9ea33eea788b269693848b7637ed9dfe8ece9a77d1efc70bfc7cc6943ee2841d22304b278b9d02706f52d964cc072c24bfc39b4a6eefb50fcad5cd4defa126daca67b16c808ff1b7ee427590463ed7fd11e3a340c1467dbf9b28e69c47ebec88f7ba71a35d21425e662c8ede51ed529a2c7f403bd7ba705e97a67ff10c9cbf7281a7dda920dca2a62562723c8abe7e88bfe9c8a2e5f851a9eb5db86dce9f9cd345e857a3dec10a5318666190c3fc5f38479ff5ecaf54028041b4e7113326ac6eab56ee21430234502f3ccbd607d3846b0f326676a88fc0a7a0ef1f6338cdd7a4ec99d7aed7c5e010bf0523e6a9ba17079d743dc2c3d7a0450e6f25a4d4fa33512c2e6668c9066e7d11e4afa73b448d7733cab0e1b222b5d3268ccd3cde6fe7230cc159f1273823e868816dd928e6fa47f2165f8e39d7d33ec3bf462404b4d0cb29017ce260fc78156877af484e9bd657d2a070970041dc701f906f596d8b6b51bbb1ccb24a56039047b27029596e8d3ef2ac329fa6df44ee560ab11fbecc459886caf6cb8d9e19666921761bab0aeab5f244dbe4b68d00b8ca1145ebebc2399b3e23f77535610662df691029d841d0c8e4b83fe8559c0fb46d67f7bdc74d4492c7327a16f7cc1ddc2ea95a40bb25c54d8cd4a43618356852de5b6b70c7cf9c401b7b710a91aa0add9d7a1bffe82a7fe3f584db53084f65ba40c5cf807ee38dcbe321147aa66b5d0accda4331caed572310b5de607dbd7f51e01ea038ae219cc15afa8b5e777e6c8c02333e344bc68c6e0aaae1f6b9e8b40577befc4466bc2fa32a0b5771af5942c6dd83f1b3a9d5efccfdf78a26d19fc567dce769fb5d1d0875fb118ae92227d76ff5ab07a6470b8af92056299da21162000c0e47ae0cde8bb06e3dd4bd3ca850b3402f6f7d27ebf1055b211464bb42aee33b376e66bcd2e5b41da3b15c73a745eefa3fa28b2ac3c04a7fe263b9bbb321a28ac5055814c4c9c882555c9c0997fa76e0fb4648ab1ae87111076e51d1682bb582ad9a66dd7b9746f5697dc413badb8db45098f62f46575b29e31d5603e353f63a56e8e99e84fdc4cb4d28b91512a37e20a255937ddd1cd46bd90ec4cfa9ec9fbeb3ec7757775b0279ffd72163b20daf8dabf5a70b338cacf3c17033ee37260c7c21967602236b7908e259b8bc9af9740b9ba5a6ff7dc4cc1768ce1b49509e51350327c6aedd271cfa6360532d3f1dd64b8c8ea43feb953b3fabf23c0bd7fafefcc2e7e6152e2e96bb7a4750d6c6faca817ae86f9507257ec6cdcb0d9410e7137386537331f7b71a07d80475613458165beb7fbd019329b7548d3bb29d5018657f69990f1695147bfb4b95ad0fbf446955faee5ec6a103bc75b4f4027c4e855181911b0514f0b26e3c07d3fbf0ebce94d7f9c84671c731898bd04d34521373a59ef93c83b868e1967e215952b80945335f4a7fc02a6f4de27d0a367d5524c711e617601de1c16fe407e5f00590ed851a4919f4a89c1dc5e8d71d35ef57cb04ec0bf81cbd77a773a82764cc02ddf915c38797207fa1810660fde336610821543a39db1b238a8c48a7ed2ce37486a65a6a2b7934f2b3050038d2d8c4dd11ac91fdf5ecc43dc5dcacf035ca0a69bb7864fc323bf733aca29d39409c7101398bcc72887dbf4e2bc4aa50891d3f7b67d7d6c597653afd4921c3b41291fed615269b35fdc5e6ddda090824c8df765dd975bf0d10870fe01aa18f35d125e937bf72bf51789ca9fa3d525171fa4a7231abcc01c680f00f42f005f60d90516c8f3e9ecf0acb465f8518567b4e2d3c2cc1db97026ee44085664779b26079e2da1406daacd0f865a39385f437d038d9a73f15509ba70d2d5f0b37c93381ec7536c16ebca207c8e37fd1243364ba5155e249aa3259b93ca3ef4b03ce039c8c45bbcfe530ef4f1a7080bf049e46d2ae259c4b74aba075dc8f6e9801a661b381fbf0b21e7346191e18f08c6a0f087a38a9fa278f1f5c1ea9ea93cf7052889fb1a6fef9a1e185e01dc9b2fa56171ca61b99552d9b33ffd70d2d24becbef91c2b9573888cb05290cc8bf2be9da713dbd1772e52c1532fce7c18c6925c86f4548d0bb1b8235d374bcd0f76d250f49374aaf1976bffeba3c40cb600b3f0163d0183fc658074292df754dd464413aa820fde594c6cec397b52af54b036018410ed0dc68eeca11f4fc82d77d509cfc5cf5aeab0e8fead44a4301cbe7c4693588b1ad852ddc238e9aa11c39283274fbea376f89bf7126ac3c517a019129f19855bdef8b9f89345c1dd8f8b27827a8b3e46582bde59873d92b634f9a9931ab2e5280c3dde4a3f2703bbc878c3cad4f5a708a6998710181a0a38e8f3212c08ca92ff7e0976d9852f3940b6717c5a70a77e3faaf047da8dbf2b6a50d773e49537c5d781a8a51fb5d4ff06d39b22951ae4a13977eef9cccbf2f25705585fdb2deefdaaa1096db50f6d8a730f1d385c92f01755f7a13db24d7fb9ad0a7f7c82a19c7ad8378e6201baf4aca2cc5be8aae3703acb459357e41bfdf195776da88d1ae62fe5c328fe46adbf45fccb3f0dc28de6a2066d7af53c6c840d1020c09e75e6b3d8b91c6d394464f5c939bbb9d75e201bb87f9abf7f75e87f09061220d486b2379f2f7c7c0f64fafc57c461dc06016424714a4ea2cb86065cb5e8bbc3838df6e216644de6498fa9e4d85fc5cb43d2db6a06622b99d8524b8420be3cab4ec47e5188df276decf32703e42ab5673b1e3e4bf0de948357ab742844c4d470a0610aad97a8087f4c04c8e0ce205c07df8fd4df2c22f2640279d6f08ef6549c821c15254abc7187ae04eea32753e8e6d75891ceef854e2b99103df1635c6d9dc67553a818915112111d4c6b9817aee70aac28130e3539f113b4db7e34aa23af3e3487926956f6db16e070cc5082520360571ac1fa0bc74a57510800ef0478e3f5902f14daf693692cbd6fc9bb58ed204760c6db574d540e04954440999d4661ba8b4e4648b9f39714fffa11acf05aef67189a6cb9aefdd5b87c413477ba73c69c3c12e8356e481531b837259c8e0633a89d4dcca1615f0ecf482cee89186c74478a6623f5113a8e67aa8b253e3281df2e76043cf50fd7b3650f6dfac90bcace79ca37c3a7cfd75e7beae13605d4400c032aec48f3ffd3e6c8d3325ba7031a059aea42b9f72860d0be3190dabc577f28675701cc3df1460897c62ee8ec10570a12d01334be5d8ec5052e3f773219ddd9f8372cd1d7c39198ecaedc67d5f8ef22cb9fd3fdea8fdddf10c999ca7508355634491928dbe145e097d2e3732365dab1ee8e46187c9b0524ff56be9273fe21b1409890466ad2a7c12b7a2d1966b5c859b2f90d41a38edbc61fbf99f0f365e93f1c9e0b89018e5d5b7b30edeba7246df36c820eca427cd7fc2c663b872132e971891a12b4fea2d94d419e3c3445cd5ea4b99f512675bdde8843343de62844c243c267962ea38fd0aa044029942b40536655e0ada35c718be718500bb5cf3ad7d0cfedeea90df672a2d48247a72ec1a7d38a0a0d02bd31d61d6672b81abb6cde5dd87654591c22c23922f9b5b198e8f2cdecd5a89a9b555f32fbceca031391778228412c141352e0d6707956844c169a8e4b02e4c479e042ed9da59f9a8831f0ceb2907ef020ecf3d058e7ca18c0d9a4b762597e63e55d68e3e586861ad70c4ca21a704d259dbac6ae453d5811fed18bf8269430b8e7bbe4c8ee67d5c531059cd2f5eb1c1b76ed8fef8afb2dceab17052763943064dff869644bfbfd4e6e0937de5a8743f8c609b72f4d24672a9b9a16ef11b83efdbb821bf5faa167f79d22eda605707ab873d9cbd32d9774c7836eb68cdf10bdeee89726f599fe61c694863fca8ef05d57525a5744535984737032f1640cd2c62407560ba46b0bb7e43534f54070d7c6be640c30a5558361412317d115e84eaa496a56a129d3be2ef3f42ac82133f102adaa7318c43259c9931eee6ff15c5004c3e3eab16cc151af5c589c12ada9374bd8b44dc71bb0d00136ada2379bb8f55a662881bdb211e9b276604ff20c1e6415ac552b5600ba047f622b2e165f822db50b731c8fcbcc84b49a3bccbb843f4376188c7954d167badfbbbe10386872d9d8f6ab54cc90b914b5a2d6d06d49608ccd1c5615e8f1472f6f10a448bb165ca09fb093db3eb6860bc6eb18cd4b6787a1fea9d05353376027cacebd558ca09f12c22e474fafeb92c798683d7cadc32ada99cf7d45f2a22687ea08fb0289ac4c8dcaafd42a4673aa9ee0b5a669a48a8e2f97c4c6d0934d42974ffda183d9aeefd1fe3c6c329483d993798995f55ba38d7e6d4dd94b00a569fd425a3447811e11d1a46f1f265a21144e1f88cde6cf2fef4b0912ba569d85ef1908de1df07faca7a649f91a9a6b2d8e78eabca37c0000020d4e7698eabae0bbc7ab5b6f630deed1c70eb101b46e51df741792f3a2a04ea0be41c86e53e2f0452308f0a0c64b06871417fff8cf66f286f75567edaeeeeaf8e1c9f9e39f351578833d867c7b97cf92eef0b269cf09ce87cd3a462cf0ead596a9c62d7b6a8983f3ee2db5bca4b5720bb86ad665c51c319f45ed0bd45a38828bab2e390bc73f3ad6b086338f329401676b4f69b7d6ba3e9e13c6581232d0d423808690a99b5993a801b97c5fcd48b632cd2d4346d2d68dfeaa9eed209f29ef2f5a8a72163815b22b5e6afcf84c723ab43b6d45e4f030aaa3cbc3d6e06402001e6f38f6b9666abd8aa8b18fbbcf5acc02b56f1068c60af891a6fd3e031340f0746e54ae054b3fc0b0efca0dd48491e84eac56b8cd3a049e9edabb9f76278431efe464a9241a78a0ab9917268153a40caeb58235b31fc0b451f47f619cc373e44dd2fccc4dbfdb17d2883df30a154a97e05357f27ba141470f3af9adc67e77a633a88b45edcfcfb3d2f72f556443407cf34ba5493a0b264608a88869827828e4c571c0e75fca9683ec6ef19b2c1cb2ab5c64a1c99dd857f85f9c635d13fc8c049e2477958fa0d7f16e0d346a90dd492d74c3411a6be841efaf6efcc2399b34d0682166fda6aa1a46a5c9794c42ad3fc8f1e178c1b1c613a879b3b69879960fad054dfada9be79257228dd4ced96a005e9dd90f0d210fea054c6b5e67e96049e8fbaa7a35f0fc034d9fe1a49ec1dcb220c272aac0d099df19543a795ff330281f56bbfa2ff3cdef7e9be134ffe6f7459613844383cf8e4b9ceecb21d51d40838347a7c84c8c40a5afcd6ac29d620c601b9a87dc1756a8ed6990bd44d17f0a254ca53ec9e0ed3681fd1eaa865900d46d497d42698d0a4c119f37fa9a22f81481f12b450413ad2d0b7b6911a9292fcd7ea008dd61c9b6b6bd1d8b31c6ef4a0af7bb9d265e8568c2edd07b8d12efc8abbc1ee38ed6d154996f5fce9843615b8ba2efc74ae0bc74e56c45cddd24a966ff1d3088c307dcc2c2dba98c92c55da67b2fcb74102a8488e0f0fa590ff745db0da7670844b7b2a14616307af8d5f6f1aa3e33df1469b8a87aa3821705e7ae3532168ca618edc118c78a01f82ecec53debbbe18b4ce4c108e64bfa67bf37619c756adc5ac401df102468934a5fb81563f90753f55c8afcea2a4bc635905aeda4781c9638a6b8210297493756ca98c5b0b30ce489ff25d1629679ae595acb196600e273f8fbe7972ae1d520d7da4a0c8085165d3dd1eb8da782eccd384f111b869c1"}]}]}, {0xc0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x60, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x29, 0x1, "702359b7fda47537937743daf6376c44ad7b2f7202ed590fa5a42f103d811496a028eae1d1"}]}, @NFTA_SET_ELEM_DATA={0x30, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2b, 0x1, "db4bdc2f41ea6872c9ec5be2e57a107ac12602a559e9db6b28b9b112f1e917f7447953cf469ac0"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x4f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @match={{0xa}, @void}}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @dynset={{0xb}, @void}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @reject={{0xb}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY={0xd4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcf, 0x1, "f5c445f1d004876fb6f4cea9aa3db29d14816d8c60610b8a728a791ce2bbdcb89cf3220fbdf00b2b3853ce110f5dc36ad23fb4f902157c316a486977f6674a04fecb00423610e5476c1f9df6d77fc6214a3a28eab428b4ab154dda9ac35a6fe65f5c472512ed0c2d8f61c8110cef2672aaefde7dca3cb0d30281015bd4f00569a9b41b5e9d95736dcaac2a0cf117ca23928cdfd88a7877816f7d5a56422aeaf031aa4e2184fd3dce2f683f716104bbdb826a9a6bd0226a056469e19223d86647b07212e73f570b717dd07e"}]}, @NFTA_SET_ELEM_DATA={0x200, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x98, 0x1, "b7a207f96c21554ca0803f0a4bdadca440e7ff0e7e5d98ef2e1ae5eb0d418c7a12dbea361ed7ffbd45e0ca791fd5743e165f6c39f3920869d19dd6c0a266cc2e259a3acf2dcd41c8b2ea0620c9f5a2398cb68d1ec9537ccc9f8830a7608ee3d649936f2432e052ff40a48c56afb1d561b8202945ef6822e7e56cceedee4393cf50c0d71329dfee528f082397a932e695eb7b5d58"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xa9, 0x1, "b1370af46d88c5dfc70f3475a663a6b9798e3291447b2ef288ee6f34e82e933050b1c27633ae27cf58b8cea35d4a13be3562494d0abcf88fe9b68bed9df5ba1b251a06714e0088b1424ffead9642795b6f780d10afc39cd02731a295fd2bb9aa98c1ea86e1b709ba1468ffe1774c65d8ed506ddbd6fe9d50b5846eb9bdd02a214cc0dfa3906e8ca8681b90866088c68b1b1563fb2db7d0e9cace7e8b922ff2fc8b972b111f"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x1d8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x12, 0x1, "bae0a3e92016da1b6b6604185b27"}, @NFTA_DATA_VALUE={0xb7, 0x1, "ca9136d17b54ac2222434defe211a25f529b9940da465d54e33ea14ebd279f51c73528f9a075fdaf660d976e8eba365d181fcb5efefa76f6a785a0dc1e22f2b7a7b8e040b91ae0a21feb20f8ef1ba742a402211106a01f90dfb3ae453e47d52dd5e1cfe4bbc0a11e950140f8fabf9a2a90307a5ce0b1cbd4edc8456b756ce223fd724ebbdc132d1520965c042c81b4fad115139a159a76f19e2ce2b327ef0be394316290b16773939a83b6f7c5fb96f6412c0c"}, @NFTA_DATA_VALUE={0xf0, 0x1, "7794e0d03da2514f287901dbc8212535c007e9c7f428377fc38229369b757ebe1a342f4b56fe8a9c5eb176508752df5c2df8c40dbd6d658068f9eda6aee50731d1b4257dde13843b1f577fa7c215b5edbddf099b7db4ded5b276a29f6843efb6f1930dc7f53a814da52aa26471ef8f3a78291cac15aeacdba279530307110cfa50b58a054b4beb70227e423ca3abae019cf329a1feea02eb1c5f44e773936fd4b12f9c26e1a496b1d8ea4fa537f0d05255e65d6d0e9f8dfc783f1af77af50368e20bfdf089a850b67dcd7017fcd7e6da5e1646f327ae3122ab0890343783a523314520a0fda8e69d66123f53"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x1554, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x264, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xb6, 0x1, "1b33260da9cf3a2acf0d96e34dacd00e9d094530556cf3e5dca667aa4375517c32b30ee28a36b7bba9f82e7eb85c30a681f68398a677189a3e41f40e8f62115175b75a2ffe4b021add8450d180d9ef912a4e2be4fc48f8c8c0bd194a053f1880d97d550c768c5e706ba8346c024b3ee9a840bb07d5ea0e2bed17b1b59321eeda989496b6b321a112adc941f7314a19c495028bd30ef4a4a3850c5f67c32472df90f52a5c11ff519ab827e7c16f81dccb6a8d"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x92, 0x1, "06c4a8da74fc7d6f509ca33130906516f47c04cde4341a3f6eaa900cc9a46b4c9224c53a8c836219dbf02b14af3c8275119ddfb30c64b9e0729da8d750851fe98401fb5a1e1787f94b497ea7325d0b6fa21cb859ad61df8f677973d2118c47eceb36184a327a4e70dc0eed2f324f3f197c2e8711f50d05852e2399b3ff2cbe2ebe8587dd2ab1dc4f7e2c708c59ca"}, @NFTA_DATA_VALUE={0xc9, 0x1, "b4f3a9a8a2f5876709c48d43dc834ca8462f6807e84a8f9c5ced7e368592c54c371150b933b83a0a3c7876e7a10124acc68a56e5031257e4edc4186f163bf31b5fa4dc3354e8ca724a47d3353f84af54c0e05016e0def126d30d1d4fd143a467d2e7d85b811f0c5295cc53df649a11ccd03f5fdd1d80f6be184f6ec666ec9e07f1baefa51e82be4e39c0c59d999a9f361204d518e85547f71e09f82c7ecbffeb48263f441d4fd2a1bc5f320ccad59e550dc1f9cf908c02a3c02dc010a496308b622185ff9f"}]}, @NFTA_SET_ELEM_KEY_END={0x3c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x9, 0x1, "dae9acedd9"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffa}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x1b4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe1, 0x1, "4f32eb9db084e9785b39449e0b8298ab610dec58b9cb688bee17cd61698e0e44ffd20ed37ebe7923bd51f43cad78b10b37f6ff1a7015a222d76c592b1e10dd298b92f4e5097cec6025df67cbf537d1f5d28e1957d70f3c3f97a320dba551980c756ce4bae9e231c5755c4809c0ac111e6af886c5dfef789ae4bafbb9e6591a422624d684746dc13afc6cdb773c2be36047401d58353e056f37e96b7d90b689559508d155f6a584fd20cec9b5b49ae0c36135290fd1d7e1fa8bbcc6d44c70a488e091d69c423b5be4954b19ee58a6891e62ab8a3ade6bf922930f3a9fd9"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xbf, 0x1, "5b4a95b0b7952465e27339fc2ed51cdfa61efca3172bc86feef9e7b04a83bdde9a6410839575c048257bb756b412f9d2e9fb46e9feb8cb0894fbe87b841b498501326d31bda6e1ec1079c48ba362e886742b8afc6e6d08832b50d5e3c5d1d33434e96c7086b0ee69bbeb189d7e005dda7664e6736c29bdce28b2a0f188aa5c2fa09df4f41fa93b5cfe4a2e6d739b7550fc991cc3dd3cb254d137ad01b8be1f5a78be4ee7b8080d31ab5f2791ecc3b15d20fb4a5b11138d87bbae21"}]}, @NFTA_SET_ELEM_DATA={0x1048, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}]}}}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x6b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_DATA={0x3c0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x9b, 0x1, "5612a320aaadf431f652a3b548fd0b24ee180b323e575fdab21b5dbca281f37b4db80f0e5717e02ca55c471a0df384dee6550cc017a00b4153e6d9c348316c06e6f42d82bc544a38c1ef71264ee08d963268fef1702f4f76d5c6cb81c911da17c2d1484b7bc6429aa66bd0fd06fd3f64960d9c1bfb649c0c2c3ebc99f7a0943984ae8e494cf6a5904c8221d3bf4263d42fd20eec397427"}, @NFTA_DATA_VALUE={0x92, 0x1, "493eca89a9fab89492c4ba97f22a3d111830deb450fe6133c43a9cf332630f44cb4e62a9a06d71b1bae614341d4517ee6802af245a6971188706f2ad565e4793341c59357c8c272ad1788f606878f0e1d16d26c1c2dc3f68ae450b01f1ceedc96a348b7190464e3c600c836daefa110ea6b3106341bc78038c0739072df44c3497af0898f0be5515ac2e468d6505"}, @NFTA_DATA_VALUE={0x99, 0x1, "393cbeb6ba458b007273b2e5e210c57c7b046e734dd950d2cbdbcb989d0488db6020e4bfc01780320f92cb0bd643c1d9d0dca6cd6e835a6e85cc3b5ef1b7f4025fccd1169333db27af5d40de0aee2e087c9ba07de5b4284f0874ff43acbe66a14ca55b30cc62b8ea91da9b1418fcbf8d42c3523eded6cec06e58d480241da808ee52b74ef2c21ae3504e639d9c6181b9efe09be50a"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xc9, 0x1, "03e8e2411c82f3456eb3d59083e42c647868acc264dece1c8d013e81c0809f6a38c8f396b2a7c821bdf0c309601ca8951eb04d83928a6419ffa0af8d379e7f8a19ba8c8f652ec0c557a209345b9b7e80cb91b4f10dd3d5c4dac816fa31dae5021bfe2d493676cc426fbd526c05ac126d24e8f7c0d8376fc96a3462e9d584153cb3408927070e29cbbc31b0b3a45bcece61af7b0423a85cb7287ca2af2f288c3334818e55ab948bf021e55b3be0795139cd7e908c6985b34e5561dd01f78e560adbff8117f7"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x5a, 0x1, "b5ec6aa1f17ebbc2f19c812767261e160c32907485e877becef7753ac70b34d6b585b5de4d9e7cff6e9f6fba3c16b0c21e98b63d0cc795094182f61a20b9028f5de9ca22f8e8fecdf65984845952e369d43afec7e4ce"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80}, @NFTA_SET_ELEM_KEY={0x1ec, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2b, 0x1, "c2febf6488ff043301a205e8c33160c74f129d4f3e3f46225061b16bb418e3f42d5f500c09742a"}, @NFTA_DATA_VALUE={0x6a, 0x1, "ffadf716966b41c1b724535cd5b04a163a621a4be058e6999e9d6176ea935a17f419280e23c5658d00d315c2e0f62c2e2b45da73e9b737a659828c64c58eecd8ba19746d05fddc9c7330dcd5121ad354d842e0ce6b03bd8601b0960372f52234472b9a956a4a"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xb7, 0x1, "50a952758de8b6aabae491f05a9685a98edafec300d05e301afcccc758562338f3389f338cd1030b5ddf1ba0bd39c93e1464beaad507817162c00c2565aac25ed97cc6e4dba13e3c907f07b99841976d8e91d40d8547434313d4cf0cf715efd9f9f03e6e021f312eec3c5f9074cf84a17fa3fc50ac6a0a47228aa324e24d298f4825901eb1de3612e8bcb98fcb6a28c649109d8f868503d8dad3f273f28a96ed8f870e26d2d1e3043f3fefa2e43b0d695fa5df"}, @NFTA_DATA_VALUE={0x71, 0x1, "5fb2e27a9b3c50ebafc6fc645e8ce5dd8525d08e02214826695b949f392b673ec35bd20e0a3bf5765f96953abc5490c97be288d4294153ef5c7858e685e22771273d4565a3b5f3fdaf4fcd6666b9909adc13c3c27dba1be5e11dd75e04a684a1301f58fc8e6d3b2f44b84b627c"}]}, @NFTA_SET_ELEM_KEY_END={0xd8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd4, 0x1, "aa75abfa22db448d54fa3b59bfc82728de86b792d3d577cae645657748149798d843abb3a31b064b8d93308b6b3fee87252d2d04099fdc310c10982df18767f88c12d8a81ae75fa2c3d8da69f0db884380e2e521d04938c9e2d54f4691996eb7ae7619a261df51ebe28fa3842fc35e00d715194214a8cad411062d9bb589565218861359d373e9ed0371506a334eabb99de526008a0345bf217895d7a7fa8c5df424f0f2ed1f40904385d3c8a5988d8ae8207fe8fc0edbb154fdbdec5aea94dc10fe33f6b0a6e8ebe06ffcb0e34d06b9"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x401}]}, {0xfc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0xec, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5d, 0x1, "ca2c487d73972d382f82b8f882544eb43317c158f5086238cafa70f8b54568e265efc6ef04d1e2a374726238cb1c0c590f48288a5be3509a98d00dd505c631ae31d130632782a30a87fb6540eb4ed093694dd6ebdc7eedc611"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xd038131d5762a5aa}]}, @NFTA_DATA_VALUE={0x37, 0x1, "8b025f254d93e620efd5cd4eb5ee91910bd225cf63455ae2003743b1ed12d5cf29ff08fc49d3513df16ce29d2877a605ecd4e9"}]}]}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7ff}]}, {0xd4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffff8}, @NFTA_SET_ELEM_USERDATA={0x7e, 0x6, 0x1, 0x0, "b4c8166c74c070d08f4b7f2436f5b942d28da60be5c761beb02403923b37b950c7a148f34f8ccdbc25d22d9868c26c0d77eb4420c4a3e1475dc3acd53aeeef060a357a7c344c431281d14babce3009448f06b2700793fa261543bac185efb29939f9bd55dd5a57cf73babd8bc21a0b923e3c80830e9f884c2e28"}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}]}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}, 0x5854}}, 0x80) ioctl$MEMISLOCKED(r3, 0x80084d17, &(0x7f0000000500)={0x4, 0x4}) 397.348509ms ago: executing program 5 (id=987): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) setns(0xc9, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x2000c198) r7 = socket$unix(0x1, 0x1, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94ce3377526beb5ab2c7b9ca5fa07558139ed03dc06270ee042", 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r10, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r11, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) ioctl$IOMMU_HWPT_ALLOC$TEST(r10, 0x3b89, &(0x7f0000000200)={0x28, 0x3, r12, r11, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, &(0x7f0000000440)={0x28, 0x0, r12, 0xf7, &(0x7f0000000340)=""/247}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x1b4, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xb, 0xfff3}, {}, {0xfff1, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1538}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @TCA_RATE={0x6, 0x5, {0x8, 0xb}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_cgroup={{0xb}, {0x144, 0x2, [@TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_EMATCHES={0x13c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x128, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x2b3, 0x2, 0x2}, {0x7, 0x8, 0x1, "791bba5066269a57"}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x4, 0x2, 0x43}, {0x8, 0x3, 0x2, '\\{?'}}}, @TCF_EM_META={0x48, 0x2, 0x0, 0x0, {{0x3, 0x4, 0xa39}, [@TCA_EM_META_LVALUE={0x2e, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="94bff2ac84ff4d97", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="c5b52404a32c4d7ec563", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x3, 0x3}, {0x800, 0x3c, 0x2}}}]}}, @TCF_EM_IPT={0x38, 0x3, 0x0, 0x0, {{0xb6, 0x9, 0x7}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xde}]}}, @TCF_EM_CONTAINER={0x78, 0x3, 0x0, 0x0, {{0x9, 0x0, 0x7ff}, "f1c802fe513d9108f38b427181934d38c22dfb9a9f43b14590d0c57294d3f7756eeb8a296e2115f6f8068721a4d054be66164e3eeda5343287f4381a8db2fcd16038507fb244ab03dad5a675d681fa3c171bf4fdc170c5dd7d4f1aeecad9f9dfc48629c2674b8f015f653b"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe}}]}]}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x10}, 0x80) 319.51659ms ago: executing program 2 (id=988): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000f40), 0xa42, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000001000)={0x20, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r2, @ANYRES8=r2], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x20004841) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write(r3, &(0x7f00000000c0)="b50159cde75e49ada216c9708e3a56f718ba837a6f650b6659e293d18ac133c8d7d50c32e9b9a4b8ca36611d1b80b7cf505e8f8185b36ea2ea093bf1bb26e42f32fd7ae875f934b27d5ae77b9de501829ed7b1ad348f22e0e8c87531329371ecc5130321d55c7ee5e9c09203612203ab11f4526d9b08d45337de2810629aeb85349cbaddaf1e9547d5ecba0351ea7d1296f0fe28dffc60ccc901a1b7f24a9ce0ad8e99d219cccb7d6c004c5b08beb831654ce1d2f96d82092cfcc630edaca9e4afb0dd3768c7450b87fdc30de282fa257e059a3075b4eda502e97d0d26d636bfe2a6862a0682af4548b3323ee0c80822a87a", 0xf2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x90) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/acpi/parameters/ec_event_clearing\x00', 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000200)={0x6, 0x226, 0x4, 0x4, 0x6}) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0) 269.365424ms ago: executing program 2 (id=989): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) fcntl$setflags(r0, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0xb1f, 0x6, 0x8, 0x0, 0xe5]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4040) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1_to_batadv\x00', 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000200)='GPL\x00'}, 0x94) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000041000100fcff07000400000001000000040048800c0001800800038004001080080002"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 269.026606ms ago: executing program 2 (id=990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x23, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1538}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @TCA_RATE={0x6, 0x5, {0x8, 0xb}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x80) 179.776782ms ago: executing program 5 (id=991): creat(&(0x7f0000000100)='./file0\x00', 0x100) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r0, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000001300)={{}, {0x1, 0x1}, [{0x2, 0x5}], {}, [], {0x10, 0x4}}, 0x2c, 0x2) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) 178.783519ms ago: executing program 0 (id=992): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'pimreg\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x1, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x7, 0x7, 0xfa, 0xad, 0x2}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x4, 0x7}, {0xc, 0xb}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x10, 0x6, 0x8, 0x4fbee}, 0xd7, 0x1, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x128001, 0x0, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031614d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendto$packet(r1, &(0x7f00000002c0)="05031614d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$rtc(0xffffff9c, &(0x7f0000000040), 0x2a000, 0x0) (async) r6 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x2a000, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000a, 0x80010, r1, 0xc61c2000) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0x7005, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0x7005, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000680)={0x0, &(0x7f0000000740)=[@nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest64=0x2805, 0x8000000000000001, 0xfffffffff976a750, 0x8}}, @nested_load_syzos={0x136, 0x120, {0x3, 0x8, [@enable_nested={0x12c, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_load_syzos={0x136, 0x20, {0x2, 0x1}}, @rdmsr={0x66, 0x18, {0x33b}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xda, 0x4, 0x3, 0x2}}, @nested_amd_stgi={0x17e, 0x10}, @uexit={0x0, 0x18, 0xfff}, @wr_crn={0x67, 0x20, {0x8, 0x9}}, @nested_amd_vmload={0x182, 0x18, 0x1}]}}, @wrmsr={0x65, 0x20, {0x804, 0x50000000}}, @code={0xa, 0x4a, {"36420f06c48135e4790064f3adc4e22d9074660066bad004ed66baa000edf30f303e67430fc79c6200500000c4c1bfd0fbf00fc10d00700000"}}, @cpuid={0x64, 0x18, {0x5, 0x9}}, @rdmsr={0x66, 0x18, {0xba9}}, @rdmsr={0x66, 0x18, {0xa8d}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0xb4, 0x8, 0x40, 0xaf}}, @in_dx={0x69, 0x20, {0x3606, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x1, 0x1}}, @enable_nested={0x12c, 0x18}, @nested_load_code={0x12e, 0x72, {0x1, "f30fa7c0b995000040b8d7c79db7ba000000000f3048b8658c85f02e58b20c0f23d80f21f835000000100f23f8b9800000c00f3235000100000f30430f01df66b848008ec8672e0fc76d000f01f865e264c4417a169d00980000"}}, @nested_amd_clgi={0x17f, 0x10}, @wrmsr={0x65, 0x20, {0x899, 0x3}}, @rdmsr={0x66, 0x18, {0x949}}, @nested_load_syzos={0x136, 0x108, {0x3, 0x7, [@nested_load_syzos={0x136, 0x20, {0x3, 0x9}}, @enable_nested={0x12c, 0x18}, @cpuid={0x64, 0x18, {0x80, 0x2}}, @nested_create_vm={0x12d, 0x18, 0x3}, @enable_nested={0x12c, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @ro_nat=0x6406, 0x6, 0x0, 0xeebf}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @enable_nested={0x12c, 0x18}]}}, @nested_amd_clgi={0x17f, 0x10}, @nested_load_code={0x12e, 0x78, {0x0, "f3460f0fe91c48b8a42d0000000000000f23c80f21f8350800a0000f23f82e0f01cf66bad004ed66b8e8000f00d0360f7836c74424008f000000c744240200800000ff2c24c7442400c9000000c744240200100000ff2c24660f2808f20f7ced"}}, @nested_amd_clgi={0x17f, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control32=0x400e, 0x7, 0x7, 0x72c4}}, @rdmsr={0x66, 0x18, {0x81c}}, @out_dx={0x6a, 0x28, {0xdb9d, 0x1, 0x2}}], 0x59c}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) socket$alg(0x26, 0x5, 0x0) 98.968879ms ago: executing program 5 (id=993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x6c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1538}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @TCA_RATE={0x6, 0x5, {0x8, 0xb}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x80) (fail_nth: 4) 98.070191ms ago: executing program 2 (id=994): sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x420, 0x3f4, 0x10, 0x70bd2b, 0x25dfdbfd, {0x5, 0x0, 0x28, [0xffff, 0x8, 0x0, 0xe, 0x5, 0x401, 0xf7fc, 0xc7, 0xac, 0x3, 0xd, 0x1, 0x39, 0x2, 0x9, 0x7fffffff, 0x55ea, 0x7, 0x401, 0xf2, 0x4, 0x3, 0x7, 0xd, 0x0, 0x1, 0x3, 0x3, 0x9, 0x2, 0x5, 0x1, 0x0, 0x4, 0x7f, 0x0, 0x400, 0x1, 0x1, 0x7fff, 0x7, 0x3, 0x1, 0x1, 0xb, 0x0, 0x8, 0x5, 0x8, 0x401, 0xd, 0x800, 0x1, 0x3, 0x101, 0x0, 0x3, 0x7, 0x0, 0x8, 0xca5, 0x6d0, 0x0, 0x2], [0x9, 0x5, 0x8, 0x9, 0x8000, 0x6, 0xc6, 0x8, 0x2, 0xe, 0x7fff, 0xb6d5, 0x23af, 0x20, 0x7, 0x58, 0x5, 0xffffffff, 0x4, 0x100, 0x7f, 0x6, 0x8, 0x3, 0xc17, 0x0, 0x2, 0x3, 0x5, 0x7ff, 0x8, 0x9, 0x85b4, 0x8, 0xffff, 0x6, 0x2, 0x1000, 0x6, 0x0, 0x3, 0x6a3, 0x2, 0x8000, 0x6, 0x5, 0xbb, 0x1, 0x2, 0x1, 0x10000, 0x2008000, 0x1, 0x6, 0x1000, 0x5, 0x7, 0x2, 0xf, 0x4, 0x4, 0x8, 0x7f, 0x80], [0x1, 0x2, 0x1, 0x7, 0x2, 0x1, 0xfffffffd, 0xfffffffe, 0x3, 0x101, 0x1, 0xfffffffa, 0x3, 0x3, 0xfffffffd, 0x800, 0x2, 0xc, 0x8, 0x0, 0x2244fb8d, 0xaba00000, 0x8, 0x9, 0x401, 0x4, 0x8, 0x0, 0x0, 0x80000001, 0x5, 0x80000000, 0x100, 0x5, 0x7ff, 0x0, 0x827, 0x3, 0xc7, 0x4, 0xa8bc00, 0x81, 0x8001, 0x674, 0x1, 0x1, 0x8001, 0x6, 0x5, 0xfff, 0x0, 0xae9f, 0x6f, 0x0, 0x80, 0x1ff, 0x9, 0x2, 0xfffffffc, 0x7fff, 0x7, 0x0, 0xf, 0x9], [0x5, 0x4, 0x802, 0xfffff800, 0x7f, 0xedb, 0x0, 0x1, 0xfffffffa, 0x40000, 0x7, 0x9, 0x14d98, 0x0, 0x4, 0x4, 0xffffff01, 0x8000, 0x2, 0x7, 0xfffffc01, 0x400, 0x1, 0x1, 0x9, 0x9, 0xed62, 0xa8, 0x6, 0x2, 0x6b2, 0x0, 0x8001, 0x6, 0x6, 0x81, 0xb6e, 0x6e506360, 0x5, 0x2, 0xed, 0x1b, 0xfffffe01, 0x401, 0x3, 0xa61, 0x7fffffff, 0x4, 0x5, 0x5, 0x80, 0x2, 0x4, 0xffff0000, 0x2, 0x1e2, 0x0, 0x30d, 0xfff, 0xfffffffb, 0x7ff, 0x9, 0x6, 0x3]}}, 0x420}}, 0x4000) r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x20000000000000, 0x40001) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000000)={0x0, 0x2, 0x4, '\x00', &(0x7f0000000080)=0x4}) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x2, 0xc8, 0x5}}}, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4c0000001a001100000000000000000002000000000000000000000005001b0006000000080001007f000001"], 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000004010000000000001c0001000600060086dd0000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 0s ago: executing program 2 (id=995): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000000)={0x2e, &(0x7f0000000140)=[{0x29, '\x00', @data=0x2, 0x8}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x11, 0x4, 0x2, 0x0, r0, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x8000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r4}, &(0x7f0000000c00), &(0x7f0000000c40)=r2}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={0x0, 0x0, 0x4000}, 0x18) kernel console output (not intermixed with test programs): [ T10] dvb-usb: bulk message failed: -22 (3/0) [ 95.838122][ T5800] dw2102: command 0x51 transfer failed. [ 95.839578][ T10] dw2102: command 0x0e transfer failed. [ 95.842417][ T7106] dvb-usb: bulk message failed: -22 (38/0) [ 95.843131][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 95.847327][ T7106] dw2102: i2c transfer failed. [ 95.847357][ T7106] i2c i2c-2: Invalid block size returned: 34 [ 95.855552][ T10] dw2102: command 0x0e transfer failed. [ 95.860575][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 95.862972][ T10] dw2102: command 0x51 transfer failed. [ 95.866520][ T5800] DVB: Unable to find symbol ds3000_attach() [ 95.868547][ T5800] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 95.890037][ T10] DVB: Unable to find symbol ds3000_attach() [ 95.895988][ T10] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 95.925922][ T5800] rc_core: IR keymap rc-su3000 not found [ 95.927789][ T5800] Registered IR keymap rc-empty [ 95.930330][ T5800] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 95.934542][ T5800] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input9 [ 95.946247][ T10] rc_core: IR keymap rc-su3000 not found [ 95.947138][ T5800] dvb-usb: schedule remote query interval to 150 msecs. [ 95.948663][ T10] Registered IR keymap rc-empty [ 95.950959][ T5800] dw2102: su3000_power_ctrl: 0, initialized 1 [ 95.954075][ T10] rc rc1: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc1 [ 95.955399][ T5800] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 95.958718][ T5800] usb 6-1: USB disconnect, device number 5 [ 95.967898][ T10] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc1/input10 [ 96.006500][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 96.009560][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 96.012007][ T10] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 96.026726][ T10] usb 5-1: USB disconnect, device number 12 [ 96.070442][ T7204] __nla_validate_parse: 1 callbacks suppressed [ 96.070457][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.322'. [ 96.106818][ T5800] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 96.109277][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 96.129634][ T10] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 96.418542][ T7226] Cache volume key already in use (9p,syz,) [ 96.423830][ T7224] Bluetooth: MGMT ver 1.23 [ 96.573890][ T7230] netlink: 20 bytes leftover after parsing attributes in process `syz.0.330'. [ 96.623185][ T7232] gfs2: error -5 reading superblock [ 96.738259][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.336'. [ 96.752208][ T7247] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 96.816000][ T5593] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.819009][ T5593] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.822122][ T5593] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.843163][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.925650][ T7264] syz.1.343 uses obsolete (PF_INET,SOCK_PACKET) [ 96.929486][ T7263] netlink: 24 bytes leftover after parsing attributes in process `syz.2.342'. [ 96.941326][ T7264] i2c i2c-1: dtv_property_process_set: SET cmd 0x65722029 undefined [ 96.949466][ T7264] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11 [ 97.005567][ T7263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'. [ 97.039378][ T7275] netlink: 20 bytes leftover after parsing attributes in process `syz.4.345'. [ 97.044281][ T7275] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 97.053416][ T7275] CIFS: Unable to determine destination address [ 97.101720][ T7275] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1017 sclass=netlink_tcpdiag_socket pid=7275 comm=syz.4.345 [ 97.214800][ T7281] syz.1.348 (7281) used greatest stack depth: 19304 bytes left [ 97.361602][ T7293] kvm: emulating exchange as write [ 97.519251][ T7311] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 97.521928][ T7311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.765912][ T2319] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 97.842756][ T42] kauditd_printk_skb: 44 callbacks suppressed [ 97.842778][ T42] audit: type=1326 audit(1787313045.822:32591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7273 comm="syz.4.345" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cbd9e0d9 code=0x7fc00000 [ 97.893868][ T7327] syzkaller0: entered promiscuous mode [ 97.895750][ T7327] syzkaller0: entered allmulticast mode [ 97.915973][ T2319] usb 6-1: Using ep0 maxpacket: 16 [ 97.920370][ T2319] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 97.927458][ T2319] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 97.936492][ T2319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.939192][ T2319] usb 6-1: Product: syz [ 97.940612][ T2319] usb 6-1: Manufacturer: syz [ 97.942155][ T2319] usb 6-1: SerialNumber: syz [ 97.946154][ T2319] usb 6-1: config 0 descriptor?? [ 97.961383][ T2319] hub 6-1:0.0: bad descriptor, ignoring hub [ 97.963846][ T2319] hub 6-1:0.0: probe with driver hub failed with error -5 [ 97.967471][ T2319] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 97.969966][ T7330] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 98.175936][ T50] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 98.203173][ T10] usb 6-1: USB disconnect, device number 6 [ 98.326433][ T50] usb 9-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 98.330272][ T50] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 98.333419][ T50] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 98.339097][ T50] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.341700][ T50] usb 9-1: Product: syz [ 98.343088][ T50] usb 9-1: Manufacturer: syz [ 98.344677][ T50] usb 9-1: SerialNumber: syz [ 98.557243][ T50] usblp 9-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 98.755596][ T7343] dlm: no locking on control device [ 98.810839][ T42] audit: type=1400 audit(1787313046.792:32592): avc: denied { write } for pid=7346 comm="syz.1.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 98.855358][ T7356] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 98.859996][ T7356] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 98.863903][ T7356] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 98.866461][ T7356] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 98.875740][ T7356] i2c i2c-0: new_device: Invalid device name [ 98.964206][ T1345] usb 9-1: USB disconnect, device number 3 [ 98.975020][ T1345] usblp0: removed [ 98.985926][ T42] audit: type=1400 audit(1787313046.962:32593): avc: denied { read write } for pid=7367 comm="syz.0.374" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 98.986241][ T7368] MTRR 1 not used [ 98.993944][ T42] audit: type=1400 audit(1787313046.962:32594): avc: denied { open } for pid=7367 comm="syz.0.374" path="/73/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 98.993975][ T42] audit: type=1400 audit(1787313046.972:32595): avc: denied { ioctl } for pid=7367 comm="syz.0.374" path="/73/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 99.017103][ T42] audit: type=1400 audit(1787313047.002:32596): avc: denied { read } for pid=7367 comm="syz.0.374" dev="nsfs" ino=4026533287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 99.017772][ T7368] binder: BINDER_SET_CONTEXT_MGR already set [ 99.025680][ T42] audit: type=1400 audit(1787313047.002:32597): avc: denied { open } for pid=7367 comm="syz.0.374" path="net:[4026533287]" dev="nsfs" ino=4026533287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 99.027636][ T7368] binder: 7367:7368 ioctl 4018620d 200000004a80 returned -16 [ 99.241737][ T42] audit: type=1400 audit(1787313047.222:32598): avc: denied { connect } for pid=7375 comm="syz.0.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.248572][ T42] audit: type=1400 audit(1787313047.222:32599): avc: denied { ioctl } for pid=7375 comm="syz.0.377" path="socket:[20614]" dev="sockfs" ino=20614 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.281146][ T7379] aoe: unknown AoE command type 0xbc [ 99.287299][ T7379] netlink: 256 bytes leftover after parsing attributes in process `syz.0.378'. [ 99.290606][ T7379] netlink: 56 bytes leftover after parsing attributes in process `syz.0.378'. [ 99.306107][ T50] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 99.391632][ T42] audit: type=1400 audit(1787313047.372:32600): avc: denied { write } for pid=7382 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.455958][ T50] usb 7-1: Using ep0 maxpacket: 16 [ 99.458034][ T50] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 99.461947][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 99.468005][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.480999][ T50] usb 7-1: Product: syz [ 99.482799][ T50] usb 7-1: Manufacturer: syz [ 99.487804][ T50] usb 7-1: SerialNumber: syz [ 99.497302][ T50] usb 7-1: config 0 descriptor?? [ 99.510427][ T50] hub 7-1:0.0: bad descriptor, ignoring hub [ 99.515912][ T50] hub 7-1:0.0: probe with driver hub failed with error -5 [ 99.538786][ T50] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 99.576854][ T7406] jffs2: notice: (7406) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 99.625262][ T7406] bond0: entered promiscuous mode [ 99.630092][ T7406] bond_slave_0: entered promiscuous mode [ 99.632033][ T7406] bond_slave_1: entered promiscuous mode [ 99.638569][ T7406] batadv0: entered promiscuous mode [ 99.643227][ T7406] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 99.647210][ T7406] bond0: left promiscuous mode [ 99.648785][ T7406] bond_slave_0: left promiscuous mode [ 99.650695][ T7406] bond_slave_1: left promiscuous mode [ 99.653120][ T7406] batadv0: left promiscuous mode [ 99.759718][ T1361] usb 7-1: USB disconnect, device number 8 [ 99.831776][ T7429] netlink: NAT attribute has 4 unknown bytes [ 99.834285][ T7429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.853655][ T849] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 99.858306][ T849] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 99.860992][ T849] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 99.863361][ T849] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 99.865665][ T849] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 99.868910][ T849] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 99.871323][ T849] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 99.873641][ T849] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 99.876256][ T849] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 99.878659][ T849] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 99.884720][ T849] hid-generic 0000:0000:0004.0003: hidraw1: HID v3.ff Device [syz1] on syz0 [ 99.931768][ T7435] fido_id[7435]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 99.960639][ T7443] netlink: 'syz.0.393': attribute type 3 has an invalid length. [ 99.963464][ T7443] netlink: 'syz.0.393': attribute type 3 has an invalid length. [ 99.966160][ T7443] netlink: 'syz.0.393': attribute type 3 has an invalid length. [ 99.969464][ T7443] netlink: 'syz.0.393': attribute type 3 has an invalid length. [ 99.972358][ T7443] netlink: 'syz.0.393': attribute type 3 has an invalid length. [ 99.975380][ T7443] netlink: 'syz.0.393': attribute type 3 has an invalid length. [ 99.979925][ T7443] netlink: 'syz.0.393': attribute type 3 has an invalid length. [ 99.982439][ T7443] netlink: 'syz.0.393': attribute type 3 has an invalid length. [ 99.984865][ T7443] netlink: 'syz.0.393': attribute type 3 has an invalid length. [ 99.987801][ T7443] netlink: 'syz.0.393': attribute type 3 has an invalid length. [ 100.000747][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.394'. [ 100.013054][ T7445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.360450][ T7463] binder: 7462:7463 ioctl c0109414 200000000680 returned -22 [ 100.435214][ T7467] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 100.502022][ T7474] geneve2: entered promiscuous mode [ 101.487685][ T7543] program syz.1.424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.519690][ T7547] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 773 [ 101.907627][ T7567] usb usb9: usbfs: process 7567 (syz.0.431) did not claim interface 0 before use [ 102.059986][ T7587] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.079423][ T7584] ieee802154 phy1 wpan1: encryption failed: -22 [ 102.088360][ T7582] sctp: [Deprecated]: syz.0.435 (pid 7582) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.088360][ T7582] Use struct sctp_sack_info instead [ 102.350180][ T7608] syzkaller0: entered promiscuous mode [ 102.352033][ T7608] syzkaller0: entered allmulticast mode [ 102.396798][ T7612] __nla_validate_parse: 3 callbacks suppressed [ 102.396815][ T7612] netlink: 32 bytes leftover after parsing attributes in process `syz.4.444'. [ 102.671102][ T7625] gfs2: error -5 reading superblock [ 102.716033][ T849] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 102.747521][ T50] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 102.865980][ T849] usb 9-1: Using ep0 maxpacket: 8 [ 102.869565][ T849] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 102.874152][ T849] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 102.877604][ T849] usb 9-1: config 0 has no interface number 0 [ 102.880002][ T849] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 102.884019][ T849] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 102.888766][ T849] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 102.893181][ T849] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 102.895949][ T50] usb 5-1: Using ep0 maxpacket: 16 [ 102.898471][ T849] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.900571][ T50] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 102.905463][ T849] usb 9-1: config 0 descriptor?? [ 102.907285][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 102.913482][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.916266][ T50] usb 5-1: Product: syz [ 102.917702][ T50] usb 5-1: Manufacturer: syz [ 102.919278][ T50] usb 5-1: SerialNumber: syz [ 102.919293][ T849] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 102.925442][ T50] usb 5-1: config 0 descriptor?? [ 102.930427][ T50] hub 5-1:0.0: bad descriptor, ignoring hub [ 102.932414][ T50] hub 5-1:0.0: probe with driver hub failed with error -5 [ 102.936111][ T50] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.084260][ T7630] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 103.161588][ T849] usb 9-1: USB disconnect, device number 4 [ 103.175754][ T849] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 103.185963][ T2319] usb 5-1: USB disconnect, device number 13 [ 103.227411][ T7636] openvswitch: netlink: IP tunnel dst address not specified [ 103.304723][ T7643] netlink: 20 bytes leftover after parsing attributes in process `syz.1.454'. [ 103.499206][ T7656] overlay: Unknown parameter './bus' [ 103.543147][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 103.543162][ T42] audit: type=1400 audit(1787313051.522:32624): avc: denied { ioctl } for pid=7658 comm="syz.1.458" path="socket:[22783]" dev="sockfs" ino=22783 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 103.611215][ T50] wiimote 0005:057E:0306.0004: hidraw1: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 103.616534][ T50] wiimote 0005:057E:0306.0004: New device registered [ 103.682649][ T7673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7673 comm=syz.2.461 [ 103.706244][ T7663] wiimote 0005:057E:0306.0004: Device removed [ 103.826445][ T42] audit: type=1400 audit(1787313051.812:32625): avc: denied { setopt } for pid=7678 comm="syz.2.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.875338][ T42] audit: type=1400 audit(1787313051.852:32626): avc: denied { create } for pid=7682 comm="syz.2.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 103.918097][ T42] audit: type=1400 audit(1787313051.902:32627): avc: denied { write } for pid=7687 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.973918][ T42] audit: type=1400 audit(1787313051.952:32628): avc: denied { write } for pid=7692 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.279047][ T7696] jffs2: notice: (7696) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 104.289867][ T42] audit: type=1400 audit(1787313052.272:32629): avc: denied { write } for pid=7695 comm="syz.1.465" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.299259][ T42] audit: type=1400 audit(1787313052.272:32630): avc: denied { create } for pid=7695 comm="syz.1.465" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 104.346313][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.466'. [ 104.389437][ T7701] Unsupported ieee802154 address type: 0 [ 104.392370][ T7702] Unsupported ieee802154 address type: 0 [ 104.624916][ T7710] process 'syz.1.471' launched './file1' with NULL argv: empty string added [ 104.632317][ T42] audit: type=1400 audit(1787313052.612:32631): avc: denied { execute_no_trans } for pid=7709 comm="syz.1.471" path="/129/file1" dev="tmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.717903][ T29] wiimote 0005:057E:0306.0004: detected device: Nintendo Wii Remote (Gen 1) [ 104.761550][ T29] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input13 [ 104.780004][ T29] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input14 [ 104.809017][ T29] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input12 [ 104.831516][ T42] audit: type=1400 audit(1787313052.812:32632): avc: denied { write } for pid=7714 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.879259][ T42] audit: type=1400 audit(1787313052.862:32633): avc: denied { write } for pid=7717 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.611133][ T7721] netlink: 276 bytes leftover after parsing attributes in process `syz.0.474'. [ 105.795936][ T7726] loop4: detected capacity change from 0 to 2640 [ 105.803368][ T7726] buffer_io_error: 477 callbacks suppressed [ 105.803389][ T7726] Buffer I/O error on dev loop4, logical block 0, async page read [ 105.811332][ T7726] Buffer I/O error on dev loop4, logical block 0, async page read [ 105.814844][ T7726] Buffer I/O error on dev loop4, logical block 0, async page read [ 105.819535][ T7726] Buffer I/O error on dev loop4, logical block 0, async page read [ 105.823013][ T7726] Buffer I/O error on dev loop4, logical block 0, async page read [ 105.830283][ T7726] Buffer I/O error on dev loop4, logical block 0, async page read [ 105.834298][ T7726] Buffer I/O error on dev loop4, logical block 0, async page read [ 105.839123][ T7726] Buffer I/O error on dev loop4, logical block 0, async page read [ 105.842494][ T7726] ldm_validate_partition_table(): Disk read failed. [ 105.845457][ T7726] Buffer I/O error on dev loop4, logical block 0, async page read [ 105.848942][ T7726] Buffer I/O error on dev loop4, logical block 0, async page read [ 105.852071][ T7726] Dev loop4: unable to read RDB block 0 [ 105.854803][ T7726] loop4: unable to read partition table [ 105.857884][ T7726] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 106.128980][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.481'. [ 106.158231][ T7737] xt_hashlimit: size too large, truncated to 1048576 [ 106.581278][ T7760] xt_hashlimit: size too large, truncated to 1048576 [ 106.941227][ T7783] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 107.294168][ T7821] mmap: syz.0.503 (7821) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.328614][ T7824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.504'. [ 107.486735][ T5799] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 107.515186][ T7830] nvmet_rdma: malformed ip/port passed: 127.0.1.1: [ 107.583672][ T7835] Driver unsupported XDP return value 0 on prog (id 48) dev N/A, expect packet loss! [ 107.591876][ T7835] netlink: 36 bytes leftover after parsing attributes in process `syz.0.507'. [ 107.637523][ T5799] usb 7-1: Using ep0 maxpacket: 32 [ 107.642375][ T5799] usb 7-1: unable to get BOS descriptor or descriptor too short [ 107.645753][ T5799] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 107.652598][ T5799] usb 7-1: string descriptor 0 read error: -22 [ 107.654571][ T5799] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.662973][ T5799] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 107.665556][ T5799] dw2102: su3000_power_ctrl: 1, initialized 0 [ 107.668358][ T5799] dvb-usb: bulk message failed: -22 (2/0) [ 107.673892][ T5799] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 107.677387][ T5799] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 107.681410][ T5799] usb 7-1: media controller created [ 107.683060][ T5799] dvb-usb: bulk message failed: -22 (6/0) [ 107.684849][ T5799] dw2102: i2c transfer failed. [ 107.687413][ T5799] dvb-usb: bulk message failed: -22 (6/0) [ 107.689264][ T5799] dw2102: i2c transfer failed. [ 107.690849][ T5799] dvb-usb: bulk message failed: -22 (6/0) [ 107.692629][ T5799] dw2102: i2c transfer failed. [ 107.694149][ T5799] dvb-usb: bulk message failed: -22 (6/0) [ 107.696014][ T5799] dw2102: i2c transfer failed. [ 107.697516][ T5799] dvb-usb: bulk message failed: -22 (6/0) [ 107.699318][ T5799] dw2102: i2c transfer failed. [ 107.700896][ T5799] dvb-usb: bulk message failed: -22 (6/0) [ 107.702697][ T5799] dw2102: i2c transfer failed. [ 107.704241][ T5799] dvb-usb: MAC address: 02:02:02:02:02:02 [ 107.711077][ T5799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.721037][ T5799] dvb-usb: bulk message failed: -22 (3/0) [ 107.722883][ T5799] dw2102: command 0x0e transfer failed. [ 107.724659][ T5799] dvb-usb: bulk message failed: -22 (3/0) [ 107.726607][ T5799] dw2102: command 0x0e transfer failed. [ 107.886457][ T2319] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 108.035934][ T5799] dvb-usb: bulk message failed: -22 (3/0) [ 108.038122][ T5799] dw2102: command 0x0e transfer failed. [ 108.040089][ T5799] dvb-usb: bulk message failed: -22 (3/0) [ 108.042301][ T5799] dw2102: command 0x0e transfer failed. [ 108.044150][ T5799] dvb-usb: bulk message failed: -22 (1/0) [ 108.046773][ T5799] dw2102: command 0x51 transfer failed. [ 108.050663][ T2319] usb 5-1: unable to get BOS descriptor or descriptor too short [ 108.055873][ T2319] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 108.059497][ T2319] usb 5-1: config 100 has an invalid interface number: 173 but max is 0 [ 108.062122][ T2319] usb 5-1: config 100 has no interface number 0 [ 108.064170][ T2319] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 108.068651][ T2319] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 108.070375][ T5799] DVB: Unable to find symbol ds3000_attach() [ 108.072268][ T2319] usb 5-1: config 100 interface 173 has no altsetting 0 [ 108.076865][ T5799] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 108.082413][ T2319] usb 5-1: string descriptor 0 read error: -22 [ 108.086190][ T2319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.092782][ T7837] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 108.100801][ T2319] metro_usb 5-1:100.173: required endpoints missing [ 108.125915][ T5799] rc_core: IR keymap rc-su3000 not found [ 108.127869][ T5799] Registered IR keymap rc-empty [ 108.130904][ T5799] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 108.137557][ T5799] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input15 [ 108.143476][ T5799] dvb-usb: schedule remote query interval to 150 msecs. [ 108.145763][ T5799] dw2102: su3000_power_ctrl: 0, initialized 1 [ 108.148137][ T5799] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 108.152945][ T5799] usb 7-1: USB disconnect, device number 9 [ 108.172820][ T5799] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 108.302442][ T1345] usb 5-1: USB disconnect, device number 14 [ 108.943341][ T7853] program syz.2.512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.950041][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 108.950061][ T42] audit: type=1400 audit(1787313056.932:32659): avc: denied { setopt } for pid=7857 comm="syz.0.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.958632][ T7860] validate_nla: 47 callbacks suppressed [ 108.958648][ T7860] netlink: 'syz.0.513': attribute type 11 has an invalid length. [ 108.964434][ T42] audit: type=1400 audit(1787313056.942:32660): avc: denied { read } for pid=7857 comm="syz.0.513" lport=37491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.063718][ T42] audit: type=1400 audit(1787313057.042:32661): avc: denied { associate } for pid=7868 comm="syz.2.516" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 109.174615][ T7875] nfs: Deprecated parameter 'nointr' [ 109.369418][ T7882] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 109.414994][ T7884] syz.2.520: attempt to access beyond end of device [ 109.414994][ T7884] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 109.420592][ T7884] gfs2: error -5 reading superblock [ 109.435688][ T7884] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 109.492384][ T7887] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 109.710753][ T42] audit: type=1400 audit(1787313057.692:32662): avc: denied { mount } for pid=7890 comm="syz.2.523" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 109.734126][ T42] audit: type=1400 audit(1787313057.712:32663): avc: denied { unmount } for pid=5722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 109.847515][ T42] audit: type=1400 audit(1787313057.832:32664): avc: denied { write } for pid=7906 comm="syz.0.528" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 109.847843][ T7907] random: crng reseeded on system resumption [ 109.857007][ T42] audit: type=1400 audit(1787313057.832:32665): avc: denied { open } for pid=7906 comm="syz.0.528" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 109.888370][ T42] audit: type=1400 audit(1787313057.872:32666): avc: denied { ioctl } for pid=7906 comm="syz.0.528" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 109.907823][ T7907] macvlan2: entered promiscuous mode [ 110.085236][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.529'. [ 110.252529][ T7921] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 110.259851][ T61] Bluetooth: hci4: Frame reassembly failed (-84) [ 110.268087][ T61] Bluetooth: hci4: Frame reassembly failed (-84) [ 110.829195][ T42] audit: type=1400 audit(1787313058.812:32667): avc: denied { read } for pid=7930 comm="syz.0.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.385316][ T42] audit: type=1400 audit(1787313059.362:32668): avc: denied { create } for pid=7941 comm="syz.4.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 112.168207][ T7978] netlink: 'syz.0.549': attribute type 1 has an invalid length. [ 112.188688][ T7978] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.206291][ T7978] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.209383][ T7978] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 112.213183][ T7978] bond2: (slave gre1): Error -95 calling set_mac_address [ 112.236006][ T3386] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 112.251627][ T7980] gretap1: entered promiscuous mode [ 112.259219][ T7980] bond2: (slave gretap1): making interface the new active one [ 112.262100][ T7980] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 112.309962][ T5734] Bluetooth: hci4: command 0x1003 tx timeout [ 112.310222][ T5725] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 112.396610][ T3386] usb 9-1: Using ep0 maxpacket: 32 [ 112.398081][ T7991] /dev/sg0: Can't lookup blockdev [ 112.401798][ T3386] usb 9-1: New USB device found, idVendor=0763, idProduct=200d, bcdDevice= 0.40 [ 112.409223][ T3386] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 112.413596][ T3386] usb 9-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 112.418060][ T3386] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1527, setting to 64 [ 112.424372][ T3386] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.429936][ T3386] usb 9-1: Product: አ[ 112.431673][ T3386] usb 9-1: Manufacturer: 稖䌉躅㘤æ§à¡ŒäŸ–ä´ç™³ÓµèŒ¹çœ¦â·©âƒ˜åŸ‚䙪â´ã’¦ê¥Žè±ƒæµŠä˜šì‹ŽÎ›â¬í”„걄ì•í€¤ì™ì² ëš’쭋瑙≛ç°å¡¼á—¹ÍŒè³™èœ¨å——錯✊椄èºâ „æ愰斘툯ᢑî¼ï©¨î­žå«¾á«ªã‚§ï€¾êŒ¤î‡µá’é‡í–„îºå±—︆ï¢äŠ˜ê ±ã¡šã¼‰é¯ ë§·ï™á·œî‡©å›æ±ê¥•à¡´ë‹á®£í…¶ã…¬å¿êˆè˜Žæ¯œïµ½ïŸ‘×´ç­¼á¹çƒºîšï‰ƒí“¥ã£¿è‰åŒšâ«’ᨋçªí›—玊á±é­å¥¸à¼­Û·ê”·é›â範횬 [ 112.446083][ T3386] usb 9-1: SerialNumber: ë½á¯“콞ä·ì’Žê¬‡ëš¢áŽ¬î£—䊖ì‰â‰¼è™©â˜Œêºï¯¬ïº®îŽ’ﶙâ°ï®ží€¤å€¶éƒ­æšè¸é‚ⲯ쌸傽門꒓븋Ⴎ趼붣┙ãŽà´½ïµˆæ†£î¹â„©á€Œã’µè兄è•è¯à¾›Ø®ç“®ë£—è˜Îˆã­€ë§¶ê†Œæ…²ï«ˆë´Šì¨½åŽ¢ïƒì‘Š [ 112.679261][ T3386] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 112.750114][ T3386] usb 9-1: USB disconnect, device number 5 [ 112.780293][ T8004] can0: slcan on ttyS3. [ 112.791788][ T6227] udevd[6227]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.219180][ T8002] can0 (unregistered): slcan off ttyS3. [ 113.439903][ T8058] program syz.2.565 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.145419][ T8089] netlink: Unknown conntrack attr (0) [ 114.150468][ T8089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.163162][ T2319] libceph: connect (1)[c::]:6789 error -101 [ 114.168851][ T2319] libceph: mon0 (1)[c::]:6789 connect error [ 114.180264][ T8077] syz.4.570 (8077): drop_caches: 2 [ 114.202600][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 114.202632][ T42] audit: type=1400 audit(1787313062.182:32693): avc: denied { unmount } for pid=6585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 114.247294][ T1361] libceph: connect (1)[c::]:6789 error -101 [ 114.251484][ T1361] libceph: mon0 (1)[c::]:6789 connect error [ 114.447927][ T2319] libceph: connect (1)[c::]:6789 error -101 [ 114.450731][ T2319] libceph: mon0 (1)[c::]:6789 connect error [ 114.506478][ T1361] libceph: connect (1)[c::]:6789 error -101 [ 114.514877][ T1361] libceph: mon0 (1)[c::]:6789 connect error [ 114.784619][ T42] audit: type=1400 audit(1787313062.762:32694): avc: denied { append } for pid=8102 comm="syz.0.575" name="pfkey" dev="proc" ino=4026533393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 114.879124][ T42] audit: type=1400 audit(1787313062.862:32695): avc: denied { execmem } for pid=8104 comm="syz.0.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 114.886967][ T42] audit: type=1400 audit(1787313062.862:32696): avc: denied { write } for pid=8104 comm="syz.0.576" name="file0" dev="tmpfs" ino=888 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 114.897559][ T42] audit: type=1400 audit(1787313062.862:32697): avc: denied { open } for pid=8104 comm="syz.0.576" path="/154/file0" dev="tmpfs" ino=888 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 114.909055][ T42] audit: type=1400 audit(1787313062.862:32698): avc: denied { getopt } for pid=8104 comm="syz.0.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.917335][ T42] audit: type=1400 audit(1787313062.882:32699): avc: denied { unlink } for pid=5730 comm="syz-executor" name="file0" dev="tmpfs" ino=888 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 114.953998][ T42] audit: type=1400 audit(1787313062.932:32700): avc: denied { create } for pid=8108 comm="syz.0.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.959119][ T8109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.578'. [ 114.962533][ T42] audit: type=1400 audit(1787313062.942:32701): avc: denied { write } for pid=8108 comm="syz.0.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.966231][ T2319] libceph: connect (1)[c::]:6789 error -101 [ 114.974140][ T42] audit: type=1400 audit(1787313062.952:32702): avc: denied { read } for pid=8108 comm="syz.0.578" dev="nsfs" ino=4026533287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 114.978449][ T2319] libceph: mon0 (1)[c::]:6789 connect error [ 114.991787][ T8089] ceph: No mds server is up or the cluster is laggy [ 114.993025][ T8092] ceph: No mds server is up or the cluster is laggy [ 115.020384][ T8111] tmpfs: Bad value for 'huge' [ 115.054673][ T8113] batman_adv: batadv0: Adding interface: veth0 [ 115.056833][ T8113] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.064581][ T8113] batman_adv: batadv0: Interface activated: veth0 [ 115.915637][ T8116] libceph: Failed to parse secret: -22 [ 115.988332][ T8123] netlink: 165 bytes leftover after parsing attributes in process `syz.0.584'. [ 116.266040][ T2319] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 116.269378][ T8132] overlayfs: failed to resolve './file2': -2 [ 116.427577][ T2319] usb 5-1: unable to get BOS descriptor or descriptor too short [ 116.430516][ T2319] usb 5-1: not running at top speed; connect to a high speed hub [ 116.433282][ T2319] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 116.438139][ T2319] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 116.440856][ T2319] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 116.443516][ T2319] usb 5-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 116.447034][ T2319] usb 5-1: config 14 has no interface number 0 [ 116.449196][ T2319] usb 5-1: config 14 has no interface number 1 [ 116.451169][ T2319] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 116.454388][ T2319] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 116.458253][ T2319] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.462332][ T2319] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 116.466582][ T2319] usb 5-1: config 14 interface 57 has no altsetting 0 [ 116.469331][ T2319] usb 5-1: config 14 interface 228 has no altsetting 0 [ 116.473257][ T2319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.476630][ T2319] usb 5-1: Product: syz [ 116.478076][ T2319] usb 5-1: Manufacturer: syz [ 116.479687][ T2319] usb 5-1: SerialNumber: syz [ 116.581818][ T8144] netlink: 'syz.2.590': attribute type 14 has an invalid length. [ 116.638908][ T8147] FAULT_INJECTION: forcing a failure. [ 116.638908][ T8147] name fail_futex, interval 1, probability 0, space 0, times 1 [ 116.644426][ T8147] CPU: 2 UID: 0 PID: 8147 Comm: syz.2.591 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.644475][ T8147] Tainted: [L]=SOFTLOCKUP [ 116.644483][ T8147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.644507][ T8147] Call Trace: [ 116.644516][ T8147] [ 116.644524][ T8147] dump_stack_lvl+0x100/0x190 [ 116.644744][ T8147] should_fail_ex.cold+0x5/0xa [ 116.644787][ T8147] get_futex_key+0x1d0/0x14f0 [ 116.644830][ T8147] ? __pfx_get_futex_key+0x10/0x10 [ 116.644845][ T8147] ? ttwu_queue_wakelist+0x2fd/0x450 [ 116.644873][ T8147] ? __smp_call_single_queue+0x17e/0x450 [ 116.644897][ T8147] ? __pfx___smp_call_single_queue+0x10/0x10 [ 116.644923][ T8147] futex_wait_setup+0x91/0x540 [ 116.644949][ T8147] __futex_wait+0x19f/0x300 [ 116.644970][ T8147] ? __pfx___futex_wait+0x10/0x10 [ 116.644988][ T8147] ? __pfx_try_to_wake_up+0x10/0x10 [ 116.645002][ T8147] ? futex_hash+0x311/0x400 [ 116.645018][ T8147] ? __pfx_futex_wake_mark+0x10/0x10 [ 116.645042][ T8147] ? find_held_lock+0x2b/0x80 [ 116.645059][ T8147] ? futex_wake+0x4ea/0x5e0 [ 116.645083][ T8147] futex_wait+0xe6/0x370 [ 116.645103][ T8147] ? __pfx_futex_wait+0x10/0x10 [ 116.645128][ T8147] ? rcu_read_lock_any_held+0x6a/0x90 [ 116.645147][ T8147] ? find_held_lock+0x2b/0x80 [ 116.645165][ T8147] ? ksys_write+0x190/0x250 [ 116.645214][ T8147] ? ksys_write+0x190/0x250 [ 116.645236][ T8147] do_futex+0x265/0x440 [ 116.645254][ T8147] ? __pfx_do_futex+0x10/0x10 [ 116.645271][ T8147] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 116.645332][ T8147] __x64_sys_futex+0x34f/0x4d0 [ 116.645351][ T8147] ? fput+0x7c/0x100 [ 116.645374][ T8147] ? __pfx___x64_sys_futex+0x10/0x10 [ 116.645390][ T8147] ? ksys_write+0x1ac/0x250 [ 116.645408][ T8147] ? __pfx_ksys_write+0x10/0x10 [ 116.645433][ T8147] do_syscall_64+0x123/0x790 [ 116.645452][ T8147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.645473][ T8147] RIP: 0033:0x7fb67cd9e0d9 [ 116.645492][ T8147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.645510][ T8147] RSP: 002b:00007fb67dc9a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 116.645530][ T8147] RAX: ffffffffffffffda RBX: 00007fb67d025fa8 RCX: 00007fb67cd9e0d9 [ 116.645543][ T8147] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb67d025fa8 [ 116.645555][ T8147] RBP: 00007fb67d025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 116.645567][ T8147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.645576][ T8147] R13: 00007fb67d026038 R14: 00007ffc94812bb0 R15: 00007ffc94812c98 [ 116.645595][ T8147] [ 116.969151][ T2319] legousbtower 5-1:14.57: interrupt endpoints not found [ 117.208769][ T8159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=8159 comm=syz.2.595 [ 117.240889][ T8161] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 117.371571][ T2319] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 117.381369][ T2319] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 117.615948][ T849] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 117.766032][ T849] usb 9-1: Using ep0 maxpacket: 8 [ 117.769041][ T849] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 117.773955][ T849] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.778727][ T849] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.782888][ T849] usb 9-1: config 0 interface 0 has no altsetting 0 [ 117.785458][ T849] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.791857][ T849] usb 9-1: config 0 descriptor?? [ 117.944190][ T2319] usb 5-1: USB disconnect, device number 15 [ 117.960339][ T2319] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 118.211759][ T849] hid_parser_main: 91 callbacks suppressed [ 118.211787][ T849] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 118.216691][ T849] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 118.218920][ T849] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 118.220982][ T849] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 118.223203][ T849] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 118.227315][ T849] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 118.324833][ T8176] netlink: 28 bytes leftover after parsing attributes in process `syz.2.601'. [ 118.337542][ T8176] erspan1: entered allmulticast mode [ 118.685615][ T8189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.604'. [ 118.692195][ T8189] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 118.745951][ T50] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 118.878184][ T50] usb 7-1: device descriptor read/64, error -71 [ 119.125966][ T50] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 119.195935][ T41] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 119.256791][ T50] usb 7-1: device descriptor read/64, error -71 [ 119.346701][ T41] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 119.352117][ T41] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 119.357614][ T41] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 16960, setting to 64 [ 119.362496][ T41] usb 5-1: config 0 interface 0 has no altsetting 0 [ 119.367729][ T41] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 119.368248][ T50] usb usb7-port1: attempt power cycle [ 119.371400][ T41] usb 5-1: Product: syz [ 119.375202][ T41] usb 5-1: Manufacturer: syz [ 119.378181][ T41] usb 5-1: SerialNumber: syz [ 119.383694][ T41] usb 5-1: config 0 descriptor?? [ 119.400204][ T849] usb 9-1: reset high-speed USB device number 6 using dummy_hcd [ 119.406500][ T41] usb 5-1: selecting invalid altsetting 0 [ 119.594812][ T41] usb 5-1: USB disconnect, device number 16 [ 119.728025][ T50] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 119.747473][ T50] usb 7-1: device descriptor read/8, error -71 [ 119.985883][ T50] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 120.006623][ T50] usb 7-1: device descriptor read/8, error -71 [ 120.126903][ T42] kauditd_printk_skb: 106 callbacks suppressed [ 120.126919][ T42] audit: type=1400 audit(1787313324.118:32809): avc: denied { execute } for pid=8198 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 120.128524][ T50] usb usb7-port1: unable to enumerate USB device [ 120.129156][ T42] audit: type=1400 audit(1787313324.118:32810): avc: denied { execute_no_trans } for pid=8198 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 120.207519][ T8200] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 120.222491][ T42] audit: type=1400 audit(1787313324.208:32811): avc: denied { ioctl } for pid=8201 comm="syz-executor" path="socket:[23962]" dev="sockfs" ino=23962 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.232739][ T5734] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 120.244092][ T5734] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 120.257691][ T5734] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 120.262465][ T5734] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 120.265222][ T5734] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 120.275813][ T42] audit: type=1400 audit(1787313324.258:32812): avc: denied { mounton } for pid=8201 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 120.286107][ T42] audit: type=1400 audit(1787313324.268:32813): avc: denied { module_request } for pid=8201 comm="syz-executor" kmod="netdev-nr5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 120.340457][ T42] audit: type=1400 audit(1787313324.328:32814): avc: denied { sys_module } for pid=8201 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 120.621165][ T8201] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.623544][ T8201] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.628114][ T8201] bridge_slave_0: entered allmulticast mode [ 120.631618][ T8201] bridge_slave_0: entered promiscuous mode [ 120.635093][ T8201] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.637509][ T8201] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.639822][ T8201] bridge_slave_1: entered allmulticast mode [ 120.642442][ T8201] bridge_slave_1: entered promiscuous mode [ 120.657893][ T8201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.663047][ T8201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.689398][ T8201] team0: Port device team_slave_0 added [ 120.696709][ T8201] team0: Port device team_slave_1 added [ 120.709654][ T8201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.711874][ T8201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.720271][ T8201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.724527][ T8201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.726966][ T8201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.735139][ T8201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.757536][ T8201] hsr_slave_0: entered promiscuous mode [ 120.760170][ T8201] hsr_slave_1: entered promiscuous mode [ 120.762605][ T8201] debugfs: 'hsr0' already exists in 'hsr' [ 120.764586][ T8201] Cannot create hsr debugfs directory [ 120.863019][ T8201] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 120.867758][ T8201] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 120.871301][ T8201] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 120.877025][ T8201] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 120.880453][ T8201] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 120.886835][ T8201] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 120.890251][ T8201] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 120.895394][ T8201] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.926049][ T8201] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.929018][ T8201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.931662][ T8201] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.934359][ T8201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.966539][ T8201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.974475][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.978709][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.989099][ T8201] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.995001][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.997459][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.007039][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.009428][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.106033][ T42] audit: type=1400 audit(1787313325.088:32815): avc: denied { read write } for pid=8231 comm="syz.0.611" name="rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 121.116778][ T42] audit: type=1400 audit(1787313325.098:32816): avc: denied { open } for pid=8231 comm="syz.0.611" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 121.126082][ T2319] usb 9-1: USB disconnect, device number 6 [ 121.127626][ T42] audit: type=1400 audit(1787313325.098:32817): avc: denied { open } for pid=8231 comm="syz.0.611" path="/dev/ttyq4" dev="devtmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 121.139594][ T42] audit: type=1400 audit(1787313325.098:32818): avc: denied { create } for pid=8231 comm="syz.0.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.261269][ T8247] SELinux: security_context_str_to_sid (4m§sevS„:"-”„½ôXòF@) failed with errno=-22 [ 121.277736][ T8201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.332034][ T8254] input: syz0 as /devices/virtual/input/input16 [ 121.471426][ T8201] veth0_vlan: entered promiscuous mode [ 121.481506][ T8201] veth1_vlan: entered promiscuous mode [ 121.514472][ T8201] veth0_macvtap: entered promiscuous mode [ 121.521804][ T8201] veth1_macvtap: entered promiscuous mode [ 121.538779][ T8201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.554161][ T8201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.554616][ T8263] netlink: 32 bytes leftover after parsing attributes in process `syz.4.616'. [ 121.559029][ T8265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.617'. [ 121.613480][ T8265] netlink: 176 bytes leftover after parsing attributes in process `syz.2.617'. [ 121.670697][ T8263] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x7f7d119fc pfn:0x48000 [ 121.675777][ T8263] flags: 0xfff18000000210(dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 121.678597][ T8263] raw: 00fff18000000210 0000000000000000 dead000000000122 0000000000000000 [ 121.681575][ T8263] raw: 00000007f7d119fc 0000000000000000 0000000400000002 0000000000000000 [ 121.684287][ T8263] page dumped because: unmovable page [ 121.685735][ T8265] fuse: Unknown parameter '' [ 121.686559][ T8263] page_owner tracks the page as allocated [ 121.688106][ T103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.688125][ T103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.693852][ T8263] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 5716, tgid 5716 (syz-executor), ts 53501588643 [ 121.701033][ T8263] post_alloc_hook+0xfd/0x120 [ 121.703473][ T8263] get_page_from_freelist+0x110d/0x35b0 [ 121.705281][ T8263] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 121.705660][ T5828] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.708270][ T8263] alloc_pages_mpol+0x201/0x550 [ 121.712099][ T5828] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.713845][ T8263] alloc_pages_noprof+0x1a/0x160 [ 121.717862][ T8263] __vmalloc_node_range_noprof+0xdcc/0x1460 [ 121.719773][ T8263] vmalloc_user_noprof+0x9e/0xe0 [ 121.721363][ T8263] kcov_ioctl+0x4d/0x760 [ 121.722706][ T8263] __x64_sys_ioctl+0x18e/0x210 [ 121.724322][ T8263] do_syscall_64+0x123/0x790 [ 121.725951][ T8263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.728279][ T8263] page last free pid 5709 tgid 5709 ts 49948098589 stack trace: [ 121.731076][ T8263] free_unref_folios+0xa4a/0x1790 [ 121.732677][ T8263] folios_put_refs+0x585/0xaa0 [ 121.734178][ T8263] free_pages_and_swap_cache+0x22d/0x3b0 [ 121.738534][ T8263] __tlb_batch_free_encoded_pages+0xe9/0x280 [ 121.740472][ T8263] tlb_finish_mmu+0x1b0/0x810 [ 121.741954][ T8263] unmap_region+0x2d9/0x3b0 [ 121.743396][ T8263] vms_complete_munmap_vmas+0xa4b/0xdd0 [ 121.745119][ T8263] do_vmi_align_munmap+0x44f/0x5f0 [ 121.748245][ T8263] do_vmi_munmap+0x1f8/0x3e0 [ 121.749830][ T8263] __vm_munmap+0x196/0x390 [ 121.751311][ T8263] __x64_sys_munmap+0x59/0x80 [ 121.752861][ T8263] do_syscall_64+0x123/0x790 [ 121.754364][ T8263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.761471][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.764070][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.787099][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.793815][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.822660][ T8272] jffs2: notice: (8272) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 121.930508][ T8278] ovs-system: entered promiscuous mode [ 121.957786][ T8280] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 122.040864][ T8291] jffs2: notice: (8291) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 122.140009][ T8300] netlink: 872 bytes leftover after parsing attributes in process `syz.4.627'. [ 122.164573][ T8300] netlink: 872 bytes leftover after parsing attributes in process `syz.4.627'. [ 122.180336][ T8300] 9pnet_virtio: no channels available for device syz [ 122.192623][ T8305] sctp: [Deprecated]: syz.5.629 (pid 8305) Use of int in max_burst socket option. [ 122.192623][ T8305] Use struct sctp_assoc_value instead [ 122.259877][ T8314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.632'. [ 122.276217][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.632'. [ 122.379134][ T8329] openvswitch: netlink: Actions may not be safe on all matching packets [ 122.396175][ T5725] Bluetooth: hci4: command tx timeout [ 122.580535][ T8337] netlink: 'syz.5.640': attribute type 1 has an invalid length. [ 122.599731][ T8337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8337 comm=syz.5.640 [ 122.604266][ T8337] : renamed from dummy0 (while UP) [ 122.763799][ T8355] Cannot find set identified by id 0 to match [ 122.928062][ T8359] veth1_macvtap: left promiscuous mode [ 122.930418][ T8359] macsec0: entered allmulticast mode [ 122.937587][ T8359] veth1_macvtap: entered promiscuous mode [ 122.940081][ T8359] veth1_macvtap: entered allmulticast mode [ 122.942530][ T8359] macsec0: left allmulticast mode [ 122.944791][ T8359] veth1_macvtap: left allmulticast mode [ 123.256090][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.650'. [ 123.266588][ T8383] gfs2: path_lookup on c::: returned error -2 [ 123.270448][ T8382] netlink: 20 bytes leftover after parsing attributes in process `syz.0.652'. [ 123.320752][ T8382] netlink: 28 bytes leftover after parsing attributes in process `syz.0.652'. [ 123.463056][ T8397] netlink: 'syz.2.657': attribute type 1 has an invalid length. [ 123.467493][ T8397] netlink: 'syz.2.657': attribute type 1 has an invalid length. [ 123.472314][ T8397] netlink: 'syz.2.657': attribute type 1 has an invalid length. [ 123.476407][ T8397] netlink: 'syz.2.657': attribute type 1 has an invalid length. [ 123.479967][ T8397] netlink: 'syz.2.657': attribute type 1 has an invalid length. [ 123.483400][ T8397] netlink: 'syz.2.657': attribute type 1 has an invalid length. [ 123.490143][ T8397] netlink: 'syz.2.657': attribute type 1 has an invalid length. [ 123.496051][ T8397] netlink: 'syz.2.657': attribute type 1 has an invalid length. [ 123.499809][ T8397] netlink: 'syz.2.657': attribute type 1 has an invalid length. [ 123.505800][ T62] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 123.635941][ T62] usb 10-1: device descriptor read/64, error -71 [ 123.653731][ T8411] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 123.665499][ T2319] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 123.825993][ T2319] usb 9-1: Using ep0 maxpacket: 32 [ 123.885634][ T62] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 124.031648][ T8424] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.035345][ T62] usb 10-1: device descriptor read/64, error -71 [ 124.054964][ T8424] bond2: (slave gretap1): making interface the new active one [ 124.065969][ T8424] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 124.147377][ T62] usb usb10-port1: attempt power cycle [ 124.475413][ T5725] Bluetooth: hci4: command tx timeout [ 124.515252][ T62] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 124.546090][ T62] usb 10-1: device descriptor read/8, error -71 [ 124.796358][ T62] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 124.826344][ T62] usb 10-1: device descriptor read/8, error -71 [ 124.936042][ T62] usb usb10-port1: unable to enumerate USB device [ 125.013489][ T8447] overlayfs: failed to resolve './file0': -2 [ 125.147646][ T42] kauditd_printk_skb: 4543 callbacks suppressed [ 125.147670][ T42] audit: type=1400 audit(1787313329.139:37362): avc: denied { ioctl } for pid=8449 comm="syz.2.670" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=27177 ioctlcmd=0x563c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 125.149890][ T8450] FAULT_INJECTION: forcing a failure. [ 125.149890][ T8450] name failslab, interval 1, probability 0, space 0, times 1 [ 125.165401][ T8450] CPU: 0 UID: 0 PID: 8450 Comm: syz.2.670 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.165438][ T8450] Tainted: [L]=SOFTLOCKUP [ 125.165447][ T8450] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.165469][ T8450] Call Trace: [ 125.165477][ T8450] [ 125.165484][ T8450] dump_stack_lvl+0x100/0x190 [ 125.165631][ T8450] should_fail_ex.cold+0x5/0xa [ 125.165679][ T8450] should_failslab+0xc2/0x120 [ 125.165742][ T8450] __kmalloc_noprof+0xfc/0x820 [ 125.165780][ T8450] ? rcu_is_watching+0x13/0xc0 [ 125.165815][ T8450] ? tomoyo_realpath_from_path+0xb6/0x690 [ 125.165896][ T8450] tomoyo_realpath_from_path+0xb6/0x690 [ 125.165935][ T8450] tomoyo_path_number_perm+0x23c/0x580 [ 125.165957][ T8450] ? tomoyo_path_number_perm+0x22e/0x580 [ 125.165982][ T8450] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 125.166028][ T8450] ? find_held_lock+0x2b/0x80 [ 125.166048][ T8450] ? hook_file_ioctl_common+0x140/0x440 [ 125.166073][ T8450] ? __fget_files+0x21f/0x3d0 [ 125.166114][ T8450] security_file_ioctl+0xd3/0x230 [ 125.166165][ T8450] __x64_sys_ioctl+0xb7/0x210 [ 125.166199][ T8450] do_syscall_64+0x123/0x790 [ 125.166260][ T8450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.166282][ T8450] RIP: 0033:0x7fb67cd9e0d9 [ 125.166300][ T8450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.166317][ T8450] RSP: 002b:00007fb67dc9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.166337][ T8450] RAX: ffffffffffffffda RBX: 00007fb67d025fa0 RCX: 00007fb67cd9e0d9 [ 125.166349][ T8450] RDX: 0000000000000000 RSI: 00000000401c5820 RDI: 0000000000000005 [ 125.166362][ T8450] RBP: 00007fb67ce35024 R08: 0000000000000000 R09: 0000000000000000 [ 125.166373][ T8450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.166386][ T8450] R13: 00007fb67d026038 R14: 00007fb67d025fa0 R15: 00007ffc94812c98 [ 125.166410][ T8450] [ 125.166419][ T8450] ERROR: Out of memory at tomoyo_realpath_from_path. [ 125.298954][ T42] audit: type=1400 audit(1787313329.289:37363): avc: denied { connect } for pid=8452 comm="syz.2.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.950250][ T42] audit: type=1400 audit(1787313329.939:37364): avc: denied { setopt } for pid=8482 comm="syz.2.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.961529][ T42] audit: type=1400 audit(1787313329.949:37365): avc: denied { shutdown } for pid=8482 comm="syz.2.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.968523][ T42] audit: type=1400 audit(1787313329.959:37366): avc: denied { read } for pid=8482 comm="syz.2.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.014867][ T42] audit: type=1400 audit(1787313329.999:37367): avc: denied { bind } for pid=8486 comm="syz.2.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.023263][ T42] audit: type=1400 audit(1787313330.009:37368): avc: denied { read } for pid=8486 comm="syz.2.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.265512][ T41] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 126.272957][ T42] audit: type=1400 audit(1787313330.259:37369): avc: denied { write } for pid=8490 comm="syz.5.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.414413][ T2319] usb 9-1: unable to get BOS descriptor or descriptor too short [ 126.415992][ T41] usb 7-1: Using ep0 maxpacket: 32 [ 126.417347][ T2319] usb 9-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 126.422059][ T2319] usb 9-1: too many configurations: 80, using maximum allowed: 8 [ 126.422799][ T41] usb 7-1: unable to get BOS descriptor or descriptor too short [ 126.425781][ T2319] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 126.427852][ T41] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.430367][ T2319] usb 9-1: can't read configurations, error -71 [ 126.436984][ T41] usb 7-1: config 1 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 175, changing to 11 [ 126.440549][ T41] usb 7-1: config 1 interface 0 altsetting 128 bulk endpoint 0x82 has invalid maxpacket 16 [ 126.443712][ T41] usb 7-1: config 1 interface 0 altsetting 128 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 126.448052][ T41] usb 7-1: config 1 interface 0 has no altsetting 0 [ 126.451830][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.454352][ T41] usb 7-1: Product: syz [ 126.457585][ T41] usb 7-1: Manufacturer: syz [ 126.459104][ T41] usb 7-1: SerialNumber: syz [ 126.463230][ T8487] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 126.466121][ T8487] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 126.670999][ C3] raw-gadget.2 gadget.2: ignoring, device is not running [ 126.676490][ T41] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 126.690819][ T41] usb 7-1: USB disconnect, device number 14 [ 126.723612][ T8502] 9pnet_virtio: no channels available for device syz [ 127.016406][ T42] audit: type=1400 audit(1787313331.009:37370): avc: denied { read append } for pid=8510 comm="syz.4.688" name="addr_trtype" dev="configfs" ino=28677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 127.018624][ T8511] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 127.023959][ T42] audit: type=1400 audit(1787313331.009:37371): avc: denied { open } for pid=8510 comm="syz.4.688" path="/111/config/nvmet/ports/1/addr_trtype" dev="configfs" ino=28677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 127.040397][ T8511] nvmet_rdma: malformed ip/port passed: 127.0.1.1: [ 127.158859][ T8518] CIFS: Invalid mount helper version specified [ 127.469196][ T8540] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 127.495342][ T2319] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 127.510392][ T8544] __nla_validate_parse: 134 callbacks suppressed [ 127.510424][ T8544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.699'. [ 127.516764][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.5.699'. [ 127.546305][ T5593] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.550692][ T5593] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.553542][ T5593] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.556916][ T5593] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.679144][ T2319] usb 9-1: not running at top speed; connect to a high speed hub [ 127.681672][ T2319] usb 9-1: New USB device found, idVendor=0c45, idProduct=600d, bcdDevice=51.96 [ 127.685594][ T2319] usb 9-1: config 6 has an invalid interface number: 167 but max is 3 [ 127.688198][ T2319] usb 9-1: config 6 has an invalid interface number: 100 but max is 3 [ 127.690806][ T2319] usb 9-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 127.693562][ T2319] usb 9-1: config 6 has an invalid interface number: 229 but max is 3 [ 127.697404][ T2319] usb 9-1: config 6 has an invalid interface number: 83 but max is 3 [ 127.700030][ T2319] usb 9-1: config 6 has an invalid interface number: 232 but max is 3 [ 127.702467][ T2319] usb 9-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 127.705391][ T2319] usb 9-1: config 6 has an invalid interface number: 27 but max is 3 [ 127.707940][ T2319] usb 9-1: config 6 has 6 interfaces, different from the descriptor's value: 4 [ 127.710803][ T2319] usb 9-1: config 6 has no interface number 0 [ 127.712735][ T2319] usb 9-1: config 6 has no interface number 1 [ 127.717289][ T2319] usb 9-1: config 6 has no interface number 2 [ 127.719305][ T2319] usb 9-1: config 6 has no interface number 3 [ 127.721256][ T2319] usb 9-1: config 6 has no interface number 4 [ 127.723176][ T2319] usb 9-1: config 6 has no interface number 5 [ 127.725383][ T2319] usb 9-1: config 6 interface 167 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 127.728780][ T2319] usb 9-1: config 6 interface 167 altsetting 8 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 127.732137][ T2319] usb 9-1: config 6 interface 100 altsetting 64 has a duplicate endpoint with address 0x8, skipping [ 127.735971][ T2319] usb 9-1: config 6 interface 100 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 127.739479][ T2319] usb 9-1: config 6 interface 100 altsetting 64 has a duplicate endpoint with address 0x8, skipping [ 127.742788][ T2319] usb 9-1: config 6 interface 100 altsetting 64 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 127.746385][ T2319] usb 9-1: config 6 interface 100 altsetting 64 has a duplicate endpoint with address 0x8, skipping [ 127.749780][ T2319] usb 9-1: config 6 interface 100 altsetting 64 has a duplicate endpoint with address 0xA, skipping [ 127.753139][ T2319] usb 9-1: config 6 interface 229 altsetting 7 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 127.757305][ T2319] usb 9-1: config 6 interface 229 altsetting 7 has an endpoint descriptor with address 0x94, changing to 0x84 [ 127.760991][ T2319] usb 9-1: config 6 interface 229 altsetting 7 has a duplicate endpoint with address 0x84, skipping [ 127.764339][ T2319] usb 9-1: config 6 interface 229 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 127.768210][ T2319] usb 9-1: config 6 interface 229 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 127.771565][ T2319] usb 9-1: config 6 interface 229 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 127.774988][ T2319] usb 9-1: config 6 interface 229 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 127.778205][ T2319] usb 9-1: config 6 interface 229 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 127.781532][ T2319] usb 9-1: config 6 interface 83 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 127.784949][ T2319] usb 9-1: config 6 interface 83 altsetting 6 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 127.788285][ T2319] usb 9-1: config 6 interface 83 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 127.792366][ T2319] usb 9-1: too many endpoints for config 6 interface 232 altsetting 97: 120, using maximum allowed: 30 [ 127.795821][ T2319] usb 9-1: config 6 interface 232 altsetting 97 has a duplicate endpoint with address 0x6, skipping [ 127.799456][ T2319] usb 9-1: config 6 interface 232 altsetting 97 has a duplicate endpoint with address 0x7, skipping [ 127.802580][ T2319] usb 9-1: config 6 interface 232 altsetting 97 has an invalid descriptor for endpoint zero, skipping [ 127.806289][ T2319] usb 9-1: config 6 interface 232 altsetting 97 has a duplicate endpoint with address 0xC, skipping [ 127.810434][ T2319] usb 9-1: config 6 interface 232 altsetting 97 has a duplicate endpoint with address 0x8, skipping [ 127.814286][ T2319] usb 9-1: config 6 interface 232 altsetting 97 has 5 endpoint descriptors, different from the interface descriptor's value: 120 [ 127.818631][ T2319] usb 9-1: too many endpoints for config 6 interface 27 altsetting 20: 203, using maximum allowed: 30 [ 127.822125][ T2319] usb 9-1: config 6 interface 27 altsetting 20 has 0 endpoint descriptors, different from the interface descriptor's value: 203 [ 127.826837][ T2319] usb 9-1: config 6 interface 167 has no altsetting 0 [ 127.829082][ T2319] usb 9-1: config 6 interface 100 has no altsetting 0 [ 127.831577][ T2319] usb 9-1: config 6 interface 229 has no altsetting 0 [ 127.833888][ T2319] usb 9-1: config 6 interface 83 has no altsetting 0 [ 127.836288][ T2319] usb 9-1: config 6 interface 232 has no altsetting 0 [ 127.838556][ T2319] usb 9-1: config 6 interface 27 has no altsetting 0 [ 127.843628][ T2319] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.846536][ T2319] usb 9-1: Product: syz [ 127.847914][ T2319] usb 9-1: Manufacturer: syz [ 127.849530][ T2319] usb 9-1: SerialNumber: syz [ 127.868653][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.707'. [ 128.032719][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'. [ 128.037764][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'. [ 128.111615][ T8578] [U]  [ 128.149210][ T2319] usb 9-1: USB disconnect, device number 8 [ 128.178530][ T8596] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 128.184334][ T8596] SELinux: failed to load policy [ 128.266907][ T8606] bond2: entered promiscuous mode [ 128.269501][ T8606] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.387777][ T8619] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 128.400987][ T8619] bridge0: port 3(syz_tun) entered blocking state [ 128.403166][ T8619] bridge0: port 3(syz_tun) entered disabled state [ 128.405583][ T8619] syz_tun: entered allmulticast mode [ 128.408760][ T8619] syz_tun: entered promiscuous mode [ 128.410910][ T8619] bridge0: port 3(syz_tun) entered blocking state [ 128.413038][ T8619] bridge0: port 3(syz_tun) entered listening state [ 128.485519][ T3386] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 128.532953][ T8626] jffs2: notice: (8626) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 128.589177][ T8630] xt_policy: neither incoming nor outgoing policy selected [ 128.634837][ T3386] usb 7-1: Using ep0 maxpacket: 16 [ 128.638613][ T3386] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 128.645560][ T3386] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 128.656799][ T3386] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.660452][ T3386] usb 7-1: Product: syz [ 128.662311][ T3386] usb 7-1: Manufacturer: syz [ 128.664392][ T3386] usb 7-1: SerialNumber: syz [ 128.673485][ T3386] usb 7-1: config 0 descriptor?? [ 128.680427][ T3386] hub 7-1:0.0: bad descriptor, ignoring hub [ 128.683109][ T3386] hub 7-1:0.0: probe with driver hub failed with error -5 [ 128.689215][ T3386] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 128.689327][ T50] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 128.798474][ T225] bridge0: port 3(syz_tun) entered disabled state [ 128.847345][ T50] usb 5-1: unable to get BOS descriptor or descriptor too short [ 128.850003][ T50] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.853737][ T50] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 128.858517][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.861185][ T50] usb 5-1: Product: syz [ 128.862534][ T50] usb 5-1: Manufacturer: syz [ 128.864002][ T50] usb 5-1: SerialNumber: syz [ 128.934189][ T5799] usb 7-1: USB disconnect, device number 15 [ 128.939028][ T8645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.715'. [ 128.948251][ T8646] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 129.082403][ T50] cdc_ncm 5-1:1.0: bind() failure [ 129.088188][ T50] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 129.090978][ T50] cdc_ncm 5-1:1.1: bind() failure [ 129.104848][ T50] usb 5-1: USB disconnect, device number 17 [ 129.211111][ T8653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8653 comm=syz.4.728 [ 129.484658][ T5872] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 129.654826][ T5872] usb 10-1: Using ep0 maxpacket: 16 [ 129.658360][ T5872] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 129.662752][ T5872] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.666882][ T5872] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 129.669823][ T5872] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.673950][ T5872] usb 10-1: config 0 descriptor?? [ 129.892306][ T5872] hid-generic 0000:046D:0A07.0006: hidraw1: HID v0.00 Device [syz0] on syz1 [ 130.800872][ T42] kauditd_printk_skb: 47 callbacks suppressed [ 130.800887][ T42] audit: type=1400 audit(1787313334.779:37419): avc: denied { unmount } for pid=8686 comm="syz.0.736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 130.812589][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.736'. [ 130.818671][ T8687] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 130.861816][ T42] audit: type=1400 audit(1787313334.839:37420): avc: denied { shutdown } for pid=8693 comm="syz.0.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 130.868171][ T42] audit: type=1400 audit(1787313334.839:37421): avc: denied { name_connect } for pid=8693 comm="syz.0.738" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 131.134488][ T29] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 131.270612][ T29] usb 5-1: device descriptor read/64, error -71 [ 131.294541][ T50] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 131.444433][ T50] usb 9-1: Using ep0 maxpacket: 8 [ 131.448511][ T50] usb 9-1: New USB device found, idVendor=056a, idProduct=0013, bcdDevice= 0.40 [ 131.453234][ T50] usb 9-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 72, changing to 10 [ 131.456926][ T50] usb 9-1: config 1 interface 0 has no altsetting 0 [ 131.462008][ T50] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.464894][ T50] usb 9-1: Product: syz [ 131.466289][ T50] usb 9-1: Manufacturer: 䡀꾃겳畺è¡à´¿ã¸é·•å¸¾î¼»æ‘œç®„ã¨ì¸ŽèªœÆ–㑥퀢༇뮡履틾ﷶ힀ꃬ徳ః犖纘翎﫜ìšì¡”쇃䂔裶ጫæ·ï«šç¥£åµ„ʱ蜀씕話㵫䀌Ṁꆦ䅑ᔻ䬔쭚⪈ﲈ殔㊩ጘ⡔僽궻ﲫ塰ݙä¥è½¨í‘½ì†œé¹¥å¥¿â·ˆèµˆæ¿«ç©ºåµ¶ï‰©á¼ºí¬éªƒî—”㺯镇ኒ [ 131.476639][ T50] usb 9-1: SerialNumber: syz [ 131.504996][ T29] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 131.634391][ T29] usb 5-1: device descriptor read/64, error -71 [ 131.687946][ T8704] tmpfs: Unknown parameter 'usrquotazuMˆ?>Õ>^;ï\d„{(4ÎœŠ–e4"С»e\þÒöý€×ì ³_ –r˜~ÎÜú./file1' [ 131.694895][ T42] audit: type=1400 audit(1787313335.680:37422): avc: denied { create } for pid=8703 comm="syz.4.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 131.699276][ T8704] geneve3: entered promiscuous mode [ 131.725220][ T50] usbhid 9-1:1.0: can't add hid device: -71 [ 131.727185][ T50] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 131.731196][ T50] usb 9-1: USB disconnect, device number 9 [ 131.745898][ T29] usb usb5-port1: attempt power cycle [ 132.084610][ T29] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 132.104749][ T29] usb 5-1: device descriptor read/8, error -71 [ 132.192531][ T41] usb 10-1: USB disconnect, device number 6 [ 132.243920][ T42] audit: type=1400 audit(1787313336.220:37423): avc: denied { create } for pid=8710 comm="syz.4.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 132.272091][ T8713] validate_nla: 59 callbacks suppressed [ 132.272106][ T8713] netlink: 'syz.4.744': attribute type 1 has an invalid length. [ 132.281197][ T42] audit: type=1400 audit(1787313336.250:37424): avc: denied { write } for pid=8710 comm="syz.4.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 132.314564][ T42] audit: type=1400 audit(1787313336.290:37425): avc: denied { map } for pid=8708 comm="syz.5.743" path="/dev/video0" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 132.324662][ T8713] netlink: 24 bytes leftover after parsing attributes in process `syz.4.744'. [ 132.354288][ T29] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 132.375725][ T29] usb 5-1: device descriptor read/8, error -71 [ 132.487990][ T29] usb usb5-port1: unable to enumerate USB device [ 132.539746][ T8719] UBIFS error (pid: 8719): cannot open "ubi0_0", error -19 [ 132.595345][ T42] audit: type=1400 audit(1787313336.580:37426): avc: denied { execute } for pid=8720 comm="syz.4.747" dev="hugetlbfs" ino=28229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 132.595380][ T42] audit: type=1400 audit(1787313336.580:37427): avc: denied { execute_no_trans } for pid=8720 comm="syz.4.747" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F522C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=28229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 132.705928][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.739869][ T42] audit: type=1400 audit(1787313336.720:37428): avc: denied { ioctl } for pid=8726 comm="syz.5.750" path="socket:[30768]" dev="sockfs" ino=30768 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.877371][ T8740] afs: Unknown parameter 'dont_hash' [ 132.953427][ T24] hid-generic 0022:046D:B012.0007: hidraw1: HID v0.00 Device [syz0] on syz1 [ 133.001393][ T8748] fido_id[8748]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 133.431648][ T728] IPVS: starting estimator thread 0... [ 133.483674][ T8775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8775 comm=syz.4.764 [ 133.491682][ T8775] netlink: 16 bytes leftover after parsing attributes in process `syz.4.764'. [ 133.500214][ T8775] netlink: 'syz.4.764': attribute type 1 has an invalid length. [ 133.525432][ T8768] IPVS: using max 44 ests per chain, 105600 per kthread [ 133.540983][ T8777] netlink: 'syz.2.765': attribute type 4 has an invalid length. [ 133.593841][ T8780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.766'. [ 133.656543][ T8787] jffs2: notice: (8787) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 133.689744][ T5725] Bluetooth: hci1: link tx timeout [ 133.691733][ T5725] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.714989][ T5734] Bluetooth: hci1: link tx timeout [ 133.717912][ T5734] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.251460][ T8812] can: request_module (can-proto-0) failed. [ 134.324094][ T5799] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 134.484168][ T5799] usb 5-1: Using ep0 maxpacket: 8 [ 134.488052][ T5799] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 134.493347][ T5799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.498259][ T5799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.508066][ T5799] usb 5-1: config 0 descriptor?? [ 134.704311][ T5734] Bluetooth: hci1: link tx timeout [ 134.706158][ T5734] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.717474][ T8826] ip6gretap1: entered promiscuous mode [ 134.719348][ T8826] ip6gretap1: entered allmulticast mode [ 134.732401][ T5799] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 134.754423][ T8830] CUSE: unknown device info "" [ 134.756533][ T8830] CUSE: unknown device info "" [ 134.758697][ T8830] CUSE: unknown device info "" [ 134.761367][ T8830] CUSE: unknown device info "" [ 134.763532][ T8830] CUSE: DEVNAME unspecified [ 134.856436][ T8846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.783'. [ 134.877807][ T8845] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 134.888552][ T8848] netlink: 'syz.5.785': attribute type 1 has an invalid length. [ 134.896195][ T8845] loop3: detected capacity change from 0 to 7 [ 134.911426][ T8845] loop3: p1 p4 [ 134.912892][ T8845] loop3: partition table partially beyond EOD, truncated [ 135.005133][ T6154] udevd[6154]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 135.005545][ T6226] udevd[6226]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 135.028759][ T8855] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 135.035876][ T8850] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 135.068319][ T8855] block device autoloading is deprecated and will be removed. [ 135.071450][ T8866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=8866 comm=syz.5.787 [ 135.076645][ T8866] netlink: 148 bytes leftover after parsing attributes in process `syz.5.787'. [ 135.121687][ T8871] fuse: Unknown parameter 'q' [ 135.161520][ T5734] Bluetooth: hci1: unexpected event for opcode 0x0c12 [ 135.343064][ T8889] WARNING! power/level is deprecated; use power/control instead [ 135.350356][ T8889] netlink: 40 bytes leftover after parsing attributes in process `syz.5.794'. [ 135.373178][ T8891] omfs: Unknown parameter 'ufstype' [ 135.388108][ T8891] x_tables: duplicate underflow at hook 3 [ 135.391372][ T8894] netlink: 'syz.5.797': attribute type 10 has an invalid length. [ 135.393508][ T8895] netlink: 'syz.2.796': attribute type 5 has an invalid length. [ 135.400487][ T8894] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 135.561223][ T8903] netlink: 'syz.2.801': attribute type 4 has an invalid length. [ 135.720602][ T8911] bridge0: port 3(syz_tun) entered blocking state [ 135.727871][ T8911] bridge0: port 3(syz_tun) entered disabled state [ 135.731647][ T8911] syz_tun: entered allmulticast mode [ 135.739711][ T8911] syz_tun: entered promiscuous mode [ 135.743022][ T8911] bridge0: port 3(syz_tun) entered blocking state [ 135.746406][ T8911] bridge0: port 3(syz_tun) entered forwarding state [ 135.772123][ T8914] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 136.000912][ T1361] usb 5-1: USB disconnect, device number 22 [ 136.049247][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 136.049268][ T42] audit: type=1400 audit(1787313340.030:37455): avc: denied { getopt } for pid=8926 comm="syz.4.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.157023][ T8931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.807'. [ 136.202313][ T42] audit: type=1400 audit(1787313340.180:37456): avc: denied { read write } for pid=8922 comm="syz.5.804" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 136.213820][ T42] audit: type=1400 audit(1787313340.180:37457): avc: denied { open } for pid=8922 comm="syz.5.804" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 136.339248][ T8945] syzkaller0: entered promiscuous mode [ 136.341061][ T8945] syzkaller0: entered allmulticast mode [ 136.366443][ T42] audit: type=1400 audit(1787313340.350:37458): avc: denied { watch } for pid=8950 comm="syz.5.813" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 136.375625][ T42] audit: type=1400 audit(1787313340.350:37459): avc: denied { watch_sb watch_reads } for pid=8950 comm="syz.5.813" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 136.415391][ T8956] x_tables: duplicate underflow at hook 3 [ 136.724017][ T8987] netlink: 108 bytes leftover after parsing attributes in process `syz.2.820'. [ 136.730524][ T8987] netlink: 108 bytes leftover after parsing attributes in process `syz.2.820'. [ 136.737090][ T8987] netlink: 84 bytes leftover after parsing attributes in process `syz.2.820'. [ 136.748938][ T42] audit: type=1400 audit(1787313340.730:37460): avc: denied { read append } for pid=8986 comm="syz.2.820" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 136.762112][ T42] audit: type=1400 audit(1787313340.730:37461): avc: denied { open } for pid=8986 comm="syz.2.820" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 136.829091][ T42] audit: type=1400 audit(1787313340.810:37462): avc: denied { ioctl } for pid=8977 comm="syz.4.818" path="socket:[29572]" dev="sockfs" ino=29572 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 136.838863][ T42] audit: type=1400 audit(1787313340.810:37463): avc: denied { connect } for pid=8977 comm="syz.4.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 136.847050][ T8987] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 136.852193][ T8987] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 136.887106][ T8987] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 136.899582][ T8987] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 136.904755][ T8987] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 136.960991][ T42] audit: type=1400 audit(1787313340.940:37464): avc: denied { search } for pid=8998 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.999489][ T8987] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 137.002132][ T8987] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 137.011954][ T8987] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 137.126791][ T9007] netlink: 4480 bytes leftover after parsing attributes in process `syz.2.823'. [ 137.503858][ T24] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 137.653728][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 137.659125][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 137.670424][ T24] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 137.683175][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.689062][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.692156][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 137.704064][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.709194][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.769698][ T3386] libceph: connect (1)[c::]:6789 error -101 [ 137.772801][ T3386] libceph: mon0 (1)[c::]:6789 connect error [ 137.822541][ T3386] libceph: connect (1)[c::]:6789 error -101 [ 137.826989][ T3386] libceph: mon0 (1)[c::]:6789 connect error [ 137.855961][ T9087] device-mapper: ioctl: Unable to rename non-existent device, to j [ 137.919778][ T24] usb 7-1: usb_control_msg returned -32 [ 137.921643][ T24] usbtmc 7-1:16.0: can't read capabilities [ 138.046436][ T3386] libceph: connect (1)[c::]:6789 error -101 [ 138.052438][ T3386] libceph: mon0 (1)[c::]:6789 connect error [ 138.092978][ T3386] libceph: connect (1)[c::]:6789 error -101 [ 138.095217][ T3386] libceph: mon0 (1)[c::]:6789 connect error [ 138.361144][ T24] usb 7-1: USB disconnect, device number 16 [ 138.516051][ T9070] ceph: No mds server is up or the cluster is laggy [ 138.518377][ T9078] ceph: No mds server is up or the cluster is laggy [ 138.676595][ T9125] kvm: user requested TSC rate below hardware speed [ 138.684705][ T9125] FAULT_INJECTION: forcing a failure. [ 138.684705][ T9125] name fail_futex, interval 1, probability 0, space 0, times 0 [ 138.689181][ T9125] CPU: 1 UID: 0 PID: 9125 Comm: syz.2.845 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.689210][ T9125] Tainted: [L]=SOFTLOCKUP [ 138.689217][ T9125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.689239][ T9125] Call Trace: [ 138.689263][ T9125] [ 138.689269][ T9125] dump_stack_lvl+0x100/0x190 [ 138.689382][ T9125] should_fail_ex.cold+0x5/0xa [ 138.689418][ T9125] get_futex_key+0x1d0/0x14f0 [ 138.689449][ T9125] ? __pfx_get_futex_key+0x10/0x10 [ 138.689461][ T9125] ? ttwu_queue_wakelist+0x2fd/0x450 [ 138.689484][ T9125] ? __smp_call_single_queue+0x17e/0x450 [ 138.689504][ T9125] ? __pfx___smp_call_single_queue+0x10/0x10 [ 138.689525][ T9125] futex_wait_setup+0x91/0x540 [ 138.689546][ T9125] __futex_wait+0x19f/0x300 [ 138.689563][ T9125] ? __pfx___futex_wait+0x10/0x10 [ 138.689579][ T9125] ? __pfx_try_to_wake_up+0x10/0x10 [ 138.689590][ T9125] ? futex_hash+0x311/0x400 [ 138.689601][ T9125] ? __pfx_futex_wake_mark+0x10/0x10 [ 138.689618][ T9125] ? find_held_lock+0x2b/0x80 [ 138.689631][ T9125] ? futex_wake+0x4ea/0x5e0 [ 138.689652][ T9125] futex_wait+0xe6/0x370 [ 138.689667][ T9125] ? __pfx_futex_wait+0x10/0x10 [ 138.689686][ T9125] ? rcu_read_lock_any_held+0x6a/0x90 [ 138.689701][ T9125] ? find_held_lock+0x2b/0x80 [ 138.689714][ T9125] ? ksys_write+0x190/0x250 [ 138.689750][ T9125] ? ksys_write+0x190/0x250 [ 138.689767][ T9125] do_futex+0x265/0x440 [ 138.689780][ T9125] ? __pfx_do_futex+0x10/0x10 [ 138.689794][ T9125] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 138.689836][ T9125] __x64_sys_futex+0x34f/0x4d0 [ 138.689851][ T9125] ? fput+0x7c/0x100 [ 138.689869][ T9125] ? __pfx___x64_sys_futex+0x10/0x10 [ 138.689883][ T9125] ? ksys_write+0x1ac/0x250 [ 138.689898][ T9125] ? __pfx_ksys_write+0x10/0x10 [ 138.689918][ T9125] do_syscall_64+0x123/0x790 [ 138.689934][ T9125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.689948][ T9125] RIP: 0033:0x7fb67cd9e0d9 [ 138.689960][ T9125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.689970][ T9125] RSP: 002b:00007fb67dc9a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 138.689983][ T9125] RAX: ffffffffffffffda RBX: 00007fb67d025fa8 RCX: 00007fb67cd9e0d9 [ 138.689989][ T9125] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb67d025fa8 [ 138.689996][ T9125] RBP: 00007fb67d025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 138.690002][ T9125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.690009][ T9125] R13: 00007fb67d026038 R14: 00007ffc94812bb0 R15: 00007ffc94812c98 [ 138.690022][ T9125] [ 138.804170][ T9128] vim2m vim2m.0: vidioc_s_fmt queue busy [ 138.863585][ T5734] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.944076][ T5734] Bluetooth: hci1: command 0x0406 tx timeout [ 138.947991][ T9130] syz_tun: left allmulticast mode [ 138.950294][ T9130] syz_tun: left promiscuous mode [ 138.952614][ T9130] bridge0: port 3(syz_tun) entered disabled state [ 138.975505][ T9130] batman_adv: batadv0: Interface deactivated: veth0 [ 138.978251][ T9130] batman_adv: batadv0: Removing interface: veth0 [ 138.983950][ T9130] bridge_slave_0: left allmulticast mode [ 138.986387][ T9130] bridge_slave_0: left promiscuous mode [ 138.988897][ T9130] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.008889][ T9130] bridge_slave_1: left allmulticast mode [ 139.014021][ T9130] bridge_slave_1: left promiscuous mode [ 139.016640][ T9130] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.024381][ T5734] Bluetooth: hci4: command 0x0419 tx timeout [ 139.037946][ T9130] bond0: (slave bond_slave_0): Releasing backup interface [ 139.053171][ T9130] bond0: (slave bond_slave_1): Releasing backup interface [ 139.069105][ T9130] team0: Port device team_slave_0 removed [ 139.076968][ T9130] team0: Port device team_slave_1 removed [ 139.080110][ T9130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.083120][ T9130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.088293][ T9130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.091359][ T9130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.096681][ T9130] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 139.178299][ T9113] overlayfs: statfs failed on './file0' [ 139.538353][ T9162] capability: warning: `syz.0.852' uses 32-bit capabilities (legacy support in use) [ 139.631963][ T9164] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 139.635394][ T9164] overlayfs: overlapping lowerdir path [ 139.639699][ T9164] device-mapper: ioctl: Invalid data size in the ioctl structure: 1920233071 [ 139.771460][ T9174] BIDI support in bsg has been removed. [ 140.021321][ T9203] exFAT-fs (nullb0): invalid boot record signature [ 140.025961][ T9203] exFAT-fs (nullb0): failed to read boot sector [ 140.026355][ T9204] netlink: 28 bytes leftover after parsing attributes in process `syz.2.866'. [ 140.029811][ T9203] exFAT-fs (nullb0): failed to recognize exfat type [ 140.091868][ T9211] 9pnet_fd: p9_fd_create_unix (9211): problem connecting socket: ./file0: -111 [ 140.131742][ T9217] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 140.136230][ T9217] SELinux: failed to load policy [ 140.192989][ T9221] netlink: 'syz.5.871': attribute type 11 has an invalid length. [ 140.219812][ T9221] netlink: 27 bytes leftover after parsing attributes in process `syz.5.871'. [ 140.708305][ T9266] netlink: 18 bytes leftover after parsing attributes in process `syz.2.883'. [ 140.744622][ T9270] netlink: 'syz.2.884': attribute type 21 has an invalid length. [ 140.747924][ T9270] netlink: 128 bytes leftover after parsing attributes in process `syz.2.884'. [ 140.751770][ T9270] netlink: 'syz.2.884': attribute type 5 has an invalid length. [ 140.755729][ T9270] netlink: 'syz.2.884': attribute type 6 has an invalid length. [ 140.759055][ T9270] netlink: 3 bytes leftover after parsing attributes in process `syz.2.884'. [ 140.764035][ T9270] netlink: 'syz.2.884': attribute type 21 has an invalid length. [ 140.767351][ T9270] netlink: 128 bytes leftover after parsing attributes in process `syz.2.884'. [ 140.771059][ T9270] netlink: 'syz.2.884': attribute type 5 has an invalid length. [ 140.775645][ T9270] netlink: 'syz.2.884': attribute type 6 has an invalid length. [ 140.779132][ T9270] netlink: 3 bytes leftover after parsing attributes in process `syz.2.884'. [ 140.783779][ T9270] netlink: 24 bytes leftover after parsing attributes in process `syz.2.884'. [ 140.787522][ T9270] openvswitch: netlink: Flow key attr not present in new flow. [ 140.886569][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'. [ 140.889459][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.887'. [ 140.892345][ T9280] netlink: 'syz.2.887': attribute type 7 has an invalid length. [ 140.894897][ T9280] netlink: 'syz.2.887': attribute type 13 has an invalid length. [ 140.914295][ T5799] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 140.949155][ T9283] No buffer was provided with the request [ 140.953719][ T5734] Bluetooth: hci3: command 0x0c1a tx timeout [ 141.027551][ T5734] Bluetooth: hci1: command 0x0406 tx timeout [ 141.065981][ T5799] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 141.071164][ T5799] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 141.076355][ T5799] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.081305][ T5799] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.085991][ T5799] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 141.092732][ T5799] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 141.097054][ T5799] usb 9-1: Manufacturer: syz [ 141.103281][ T5734] Bluetooth: hci4: command 0x0419 tx timeout [ 141.109050][ T5799] usb 9-1: config 0 descriptor?? [ 141.252965][ T42] kauditd_printk_skb: 61 callbacks suppressed [ 141.252989][ T42] audit: type=1400 audit(1787313345.231:37526): avc: denied { execute } for pid=9308 comm="syz.0.896" path="/sys/kernel/debug/binder/failed_transaction_log" dev="debugfs" ino=2635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1 [ 141.353770][ T42] audit: type=1400 audit(1787313345.341:37527): avc: denied { write } for pid=9314 comm="syz.0.898" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 141.354606][ T9253] ceph: No mds server is up or the cluster is laggy [ 141.357571][ T9315] binder: 9314:9315 ioctl c040583c 200000000000 returned -22 [ 141.360884][ T42] audit: type=1400 audit(1787313345.341:37528): avc: denied { write } for pid=9314 comm="syz.0.898" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 141.521844][ T9325] (syz.0.901,9325,0):ocfs2_get_sector:1713 ERROR: status = -5 [ 141.526839][ T9325] (syz.0.901,9325,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 141.529185][ T5799] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 141.529252][ T9325] (syz.0.901,9325,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 141.534452][ T9325] (syz.0.901,9325,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 141.569800][ T5799] appleir 0003:05AC:8243.0008: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 141.739067][ T9345] netlink: 'syz.0.907': attribute type 2 has an invalid length. [ 141.761667][ T9348] netlink: 'syz.5.908': attribute type 2 has an invalid length. [ 141.801411][ T5799] usb 9-1: USB disconnect, device number 10 [ 141.970271][ T42] audit: type=1400 audit(1787313345.951:37529): avc: denied { map } for pid=9354 comm="syz.5.910" path="socket:[33895]" dev="sockfs" ino=33895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 142.045151][ T9359] comedi comedi4: comedi_config --init_data is deprecated [ 142.056431][ T5734] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 142.263073][ T9369] program syz.0.915 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.349791][ T42] audit: type=1400 audit(1787313346.331:37530): avc: denied { mounton } for pid=9379 comm="syz.0.918" path="/223/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 142.577915][ T9394] bond3: entered promiscuous mode [ 142.580404][ T9394] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.591764][ T42] audit: type=1400 audit(1787313346.571:37531): avc: denied { setopt } for pid=9390 comm="syz.0.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 142.592555][ T9391] bond3: entered allmulticast mode [ 142.609144][ T9391] bond3: (slave bridge1): making interface the new active one [ 142.611666][ T9391] bridge1: entered promiscuous mode [ 142.613630][ T9391] bridge1: entered allmulticast mode [ 142.617853][ T9391] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 142.750117][ T9405] syzkaller1: entered promiscuous mode [ 142.751935][ T9405] syzkaller1: entered allmulticast mode [ 142.989202][ T42] audit: type=1400 audit(1787313346.971:37532): avc: denied { read } for pid=9418 comm="syz.5.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 143.023142][ T5734] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.068547][ T9421] bond4: entered promiscuous mode [ 143.071453][ T9421] 8021q: adding VLAN 0 to HW filter on device bond4 [ 143.101609][ T9421] bond4: (slave bridge1): making interface the new active one [ 143.108993][ T9421] bridge1: entered promiscuous mode [ 143.112935][ T9421] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 143.184846][ T5734] Bluetooth: hci4: command 0x0419 tx timeout [ 143.223605][ T9318] /dev/sg0: Can't lookup blockdev [ 143.225456][ T9429] pim6reg: entered allmulticast mode [ 143.236355][ T42] audit: type=1400 audit(1787313347.221:37533): avc: denied { sqpoll } for pid=9428 comm="syz.4.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 143.236437][ T9429] cgroup: fork rejected by pids controller in /syz4 [ 143.325940][ T9428] pim6reg: left allmulticast mode [ 143.389391][ T42] audit: type=1400 audit(1787313347.371:37534): avc: denied { unmount } for pid=5722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 143.449265][ T9441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=9441 comm=syz.2.936 [ 143.471527][ T42] audit: type=1400 audit(1787313347.451:37535): avc: denied { bind } for pid=9442 comm="syz.0.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.189190][ T5798] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.253456][ T5725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.260769][ T5725] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.264678][ T5725] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.270664][ T5725] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.284289][ T5725] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.367351][ T5798] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.430895][ T9464] team0: Port device veth0 added [ 144.518821][ T5798] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.540062][ T9471] geneve2: entered promiscuous mode [ 144.542228][ T9471] geneve2: entered allmulticast mode [ 144.602382][ T5798] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.948387][ T5798] bridge_slave_1: left allmulticast mode [ 144.950137][ T5798] bridge_slave_1: left promiscuous mode [ 144.955423][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.970955][ T5798] bridge_slave_0: left allmulticast mode [ 144.975311][ T5798] bridge_slave_0: left promiscuous mode [ 144.977929][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.052959][ T2319] SELinux: failure in sel_netif_sid_slow(), invalid network interface (75) [ 145.151859][ T5798] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 145.155173][ T5798] bridge2 (unregistering): left promiscuous mode [ 145.179160][ T5798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.186532][ T5798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.192557][ T5798] bond0 (unregistering): Released all slaves [ 145.197822][ T5798] bond1 (unregistering): Released all slaves [ 145.217667][ T9457] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.222725][ T9457] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.229088][ T9457] bridge_slave_0: entered allmulticast mode [ 145.234599][ T9457] bridge_slave_0: entered promiscuous mode [ 145.262816][ T5734] Bluetooth: hci4: command 0x0419 tx timeout [ 145.293027][ T5435] 8021q: adding VLAN 0 to HW filter on device eth6 [ 145.297416][ T9457] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.301309][ T9457] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.307146][ T9457] bridge_slave_1: entered allmulticast mode [ 145.311376][ T9457] bridge_slave_1: entered promiscuous mode [ 145.316288][ T9507] openvswitch: netlink: Unknown key attributes 1 [ 145.356306][ T9516] syzkaller0: entered promiscuous mode [ 145.358529][ T9516] syzkaller0: entered allmulticast mode [ 146.383155][ T5734] Bluetooth: hci0: command tx timeout [ 146.917646][ T9457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.920710][ T5798] ovs-system: left promiscuous mode [ 146.952153][ T9457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.973102][ T9457] team0: Port device team_slave_0 added [ 146.976258][ T9457] team0: Port device team_slave_1 added [ 146.996097][ T9457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.998760][ T9457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.008660][ T9457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.013927][ T9457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.016191][ T9457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.024108][ T9457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.032267][ T9541] FAULT_INJECTION: forcing a failure. [ 147.032267][ T9541] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 147.046969][ T9541] CPU: 1 UID: 0 PID: 9541 Comm: syz.5.956 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.047001][ T9541] Tainted: [L]=SOFTLOCKUP [ 147.047006][ T9541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.047026][ T9541] Call Trace: [ 147.047034][ T9541] [ 147.047042][ T9541] dump_stack_lvl+0x100/0x190 [ 147.047245][ T9541] should_fail_ex.cold+0x5/0xa [ 147.047285][ T9541] _copy_from_user+0x2e/0xd0 [ 147.047355][ T9541] copy_msghdr_from_user+0x9f/0x4c0 [ 147.047404][ T9541] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 147.047440][ T9541] ___sys_sendmsg+0x106/0x1e0 [ 147.047465][ T9541] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.047489][ T9541] ? get_pid_task+0x106/0x250 [ 147.047541][ T9541] ? find_held_lock+0x2b/0x80 [ 147.047581][ T9541] __sys_sendmsg+0x160/0x210 [ 147.047600][ T9541] ? __pfx___sys_sendmsg+0x10/0x10 [ 147.047631][ T9541] do_syscall_64+0x123/0x790 [ 147.047688][ T9541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.047708][ T9541] RIP: 0033:0x7f0a2b59e0d9 [ 147.047725][ T9541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.047742][ T9541] RSP: 002b:00007f0a2c427028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.047762][ T9541] RAX: ffffffffffffffda RBX: 00007f0a2b826090 RCX: 00007f0a2b59e0d9 [ 147.047775][ T9541] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000004 [ 147.047786][ T9541] RBP: 00007f0a2c427090 R08: 0000000000000000 R09: 0000000000000000 [ 147.047797][ T9541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.047807][ T9541] R13: 00007f0a2b826128 R14: 00007f0a2b826090 R15: 00007ffd5a7fea08 [ 147.047831][ T9541] [ 147.049351][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 147.049361][ T42] audit: type=1400 audit(1787313351.031:37546): avc: denied { write } for pid=9535 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.064351][ T9457] hsr_slave_0: entered promiscuous mode [ 147.107172][ T9549] __nla_validate_parse: 9 callbacks suppressed [ 147.107191][ T9549] netlink: 60 bytes leftover after parsing attributes in process `syz.5.960'. [ 147.109494][ T9457] hsr_slave_1: entered promiscuous mode [ 147.118539][ T42] audit: type=1400 audit(1787313351.101:37547): avc: denied { ioctl } for pid=9550 comm="syz.0.961" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 147.127071][ T9457] debugfs: 'hsr0' already exists in 'hsr' [ 147.132527][ T42] audit: type=1400 audit(1787313351.101:37548): avc: denied { write } for pid=9546 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.135262][ T9457] Cannot create hsr debugfs directory [ 147.142612][ T42] audit: type=1400 audit(1787313351.121:37549): avc: denied { setattr } for pid=9550 comm="syz.0.961" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 147.159734][ T9542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.958'. [ 147.165678][ T9542] openvswitch: netlink: Flow key attr not present in new flow. [ 147.180599][ T9549] bridge0: port 3(syz_tun) entered disabled state [ 147.196087][ T9549] syz_tun (unregistering): left allmulticast mode [ 147.202501][ T9549] syz_tun (unregistering): left promiscuous mode [ 147.205949][ T9549] bridge0: port 3(syz_tun) entered disabled state [ 147.207503][ T9554] netlink: 60 bytes leftover after parsing attributes in process `syz.5.960'. [ 147.230501][ T5435] 8021q: adding VLAN 0 to HW filter on device eth7 [ 147.316698][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.964'. [ 147.321446][ T42] audit: type=1400 audit(1787313351.301:37550): avc: denied { write } for pid=9565 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.331014][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.964'. [ 147.343937][ T5734] Bluetooth: hci4: command 0x0419 tx timeout [ 147.361424][ T42] audit: type=1400 audit(1787313351.341:37551): avc: denied { setattr } for pid=9573 comm="syz.2.965" name="local" dev="configfs" ino=33573 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 147.406576][ T42] audit: type=1400 audit(1787313351.391:37552): avc: denied { write } for pid=9583 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.454000][ T5435] 8021q: adding VLAN 0 to HW filter on device eth8 [ 147.497338][ T5798] hsr_slave_0: left promiscuous mode [ 147.504302][ T5798] hsr_slave_1: left promiscuous mode [ 147.507027][ T5798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.509947][ T5798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.513744][ T5798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.516282][ T5798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.545233][ T5798] veth1_macvtap: left promiscuous mode [ 147.547066][ T5798] veth0_macvtap: left promiscuous mode [ 147.549013][ T5798] veth1_vlan: left promiscuous mode [ 147.550769][ T5798] veth0_vlan: left promiscuous mode [ 147.649955][ T42] audit: type=1400 audit(1787313351.632:37553): avc: denied { ioctl } for pid=9607 comm="syz.2.973" path="socket:[34259]" dev="sockfs" ino=34259 ioctlcmd=0x743f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 147.695860][ T42] audit: type=1326 audit(1787313351.672:37554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9607 comm="syz.2.973" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb67cd9e0d9 code=0x0 [ 147.708357][ T5798] team0 (unregistering): Port device team_slave_1 removed [ 147.723412][ T5798] team0 (unregistering): Port device team_slave_0 removed [ 147.797613][ T9597] validate_nla: 5 callbacks suppressed [ 147.797643][ T9597] netlink: 'syz.0.968': attribute type 3 has an invalid length. [ 147.947286][ T9620] overlayfs: failed to resolve './file0': -2 [ 147.956843][ T42] audit: type=1400 audit(1787313351.942:37555): avc: denied { write } for pid=9616 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.097384][ T9632] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 148.326635][ T9457] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 148.330999][ T9457] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 148.335214][ T9457] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 148.340322][ T9457] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 148.344374][ T9457] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 148.367828][ T9457] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 148.375726][ T9457] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 148.384002][ T9457] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 148.409389][ T9650] FAULT_INJECTION: forcing a failure. [ 148.409389][ T9650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.417774][ T9650] CPU: 1 UID: 0 PID: 9650 Comm: syz.0.982 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.417807][ T9650] Tainted: [L]=SOFTLOCKUP [ 148.417814][ T9650] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.417836][ T9650] Call Trace: [ 148.417845][ T9650] [ 148.417853][ T9650] dump_stack_lvl+0x100/0x190 [ 148.417954][ T9650] should_fail_ex.cold+0x5/0xa [ 148.417986][ T9650] _copy_from_iter+0x1f4/0x1690 [ 148.418040][ T9650] ? __asan_memset+0x23/0x50 [ 148.418117][ T9650] ? __pfx__copy_from_iter+0x10/0x10 [ 148.418134][ T9650] ? __pfx___alloc_skb+0x10/0x10 [ 148.418177][ T9650] netlink_sendmsg+0x808/0xda0 [ 148.418208][ T9650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.418235][ T9650] ? selinux_socket_sendmsg+0x198/0x2f0 [ 148.418272][ T9650] ____sys_sendmsg+0xa4d/0xbe0 [ 148.418294][ T9650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.418321][ T9650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.418355][ T9650] ___sys_sendmsg+0x190/0x1e0 [ 148.418381][ T9650] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.418405][ T9650] ? get_pid_task+0x106/0x250 [ 148.418444][ T9650] ? find_held_lock+0x2b/0x80 [ 148.418480][ T9650] __sys_sendmsg+0x160/0x210 [ 148.418499][ T9650] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.418528][ T9650] do_syscall_64+0x123/0x790 [ 148.418562][ T9650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.418582][ T9650] RIP: 0033:0x7f744839e0d9 [ 148.418600][ T9650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.418618][ T9650] RSP: 002b:00007f7449343028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.418643][ T9650] RAX: ffffffffffffffda RBX: 00007f7448625fa0 RCX: 00007f744839e0d9 [ 148.418655][ T9650] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000004 [ 148.418665][ T9650] RBP: 00007f7449343090 R08: 0000000000000000 R09: 0000000000000000 [ 148.418676][ T9650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.418686][ T9650] R13: 00007f7448626038 R14: 00007f7448625fa0 R15: 00007ffdb9781498 [ 148.418709][ T9650] [ 148.462412][ T5734] Bluetooth: hci0: command tx timeout [ 148.463611][ T9664] netlink: 'syz.5.983': attribute type 1 has an invalid length. [ 148.463698][ T9666] netlink: 36 bytes leftover after parsing attributes in process `syz.5.983'. [ 148.532069][ T9664] 8021q: adding VLAN 0 to HW filter on device bond5 [ 148.556599][ T9670] bond5: (slave geneve2): making interface the new active one [ 148.560928][ T9670] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 148.580627][ T9669] netlink: 'syz.2.984': attribute type 11 has an invalid length. [ 148.669715][ T9457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.682730][ T9457] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.690489][ T728] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.693654][ T728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.721904][ T728] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.724962][ T728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.745774][ T9687] openvswitch: netlink: Port -2146435068 exceeds max allowable 65535 [ 148.783839][ T9457] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.909898][ T9706] netlink: 32 bytes leftover after parsing attributes in process `syz.2.994'. [ 148.913385][ T9706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.994'. [ 148.916454][ T9706] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 148.946905][ T9700] syzkaller0: entered promiscuous mode [ 148.949057][ T9700] syzkaller0: entered allmulticast mode [ 148.970085][ T9708] FAULT_INJECTION: forcing a failure. [ 148.970085][ T9708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.977805][ T9708] CPU: 3 UID: 0 PID: 9708 Comm: syz.5.993 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.977831][ T9708] Tainted: [L]=SOFTLOCKUP [ 148.977836][ T9708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.977845][ T9708] Call Trace: [ 148.977851][ T9708] [ 148.977857][ T9708] dump_stack_lvl+0x100/0x190 [ 148.977887][ T9708] should_fail_ex.cold+0x5/0xa [ 148.977908][ T9708] _copy_from_iter+0x1f4/0x1690 [ 148.977926][ T9708] ? __asan_memset+0x23/0x50 [ 148.977946][ T9708] ? __pfx__copy_from_iter+0x10/0x10 [ 148.977960][ T9708] ? __pfx___alloc_skb+0x10/0x10 [ 148.977991][ T9708] netlink_sendmsg+0x808/0xda0 [ 148.978017][ T9708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.978039][ T9708] ? selinux_socket_sendmsg+0x198/0x2f0 [ 148.978065][ T9708] ____sys_sendmsg+0xa4d/0xbe0 [ 148.978082][ T9708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.978104][ T9708] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.978131][ T9708] ___sys_sendmsg+0x190/0x1e0 [ 148.978152][ T9708] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.978170][ T9708] ? get_pid_task+0x106/0x250 [ 148.978196][ T9708] ? find_held_lock+0x2b/0x80 [ 148.978226][ T9708] __sys_sendmsg+0x160/0x210 [ 148.978241][ T9708] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.978266][ T9708] do_syscall_64+0x123/0x790 [ 148.978285][ T9708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.978300][ T9708] RIP: 0033:0x7f0a2b59e0d9 [ 148.978314][ T9708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.978328][ T9708] RSP: 002b:00007f0a2c448028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.978344][ T9708] RAX: ffffffffffffffda RBX: 00007f0a2b825fa0 RCX: 00007f0a2b59e0d9 [ 148.978354][ T9708] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000004 [ 148.978362][ T9708] RBP: 00007f0a2c448090 R08: 0000000000000000 R09: 0000000000000000 [ 148.978371][ T9708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.978380][ T9708] R13: 00007f0a2b826038 R14: 00007f0a2b825fa0 R15: 00007ffd5a7fea08 [ 148.978399][ T9708] [ 148.983527][ T9699] ima: policy update failed [ 148.987583][ T9715] ================================================================== [ 149.062786][ T9721] openvswitch: netlink: Missing valid actions attribute. [ 149.063937][ T9715] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 149.065498][ T9721] openvswitch: netlink: Actions may not be safe on all matching packets [ 149.068697][ T9715] Read of size 8 at addr ffff88802cdf2018 by task syz.2.995/9715 [ 149.068733][ T9715] [ 149.068749][ T9715] CPU: 1 UID: 0 PID: 9715 Comm: syz.2.995 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.068782][ T9715] Tainted: [L]=SOFTLOCKUP [ 149.068789][ T9715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.068803][ T9715] Call Trace: [ 149.068811][ T9715] [ 149.068818][ T9715] dump_stack_lvl+0x100/0x190 [ 149.068849][ T9715] print_report+0x13d/0x4b0 [ 149.068880][ T9715] ? __virt_addr_valid+0x239/0x430 [ 149.068911][ T9715] ? dvb_device_open+0x33f/0x3b0 [ 149.068938][ T9715] kasan_report+0xdf/0x1c0 [ 149.068974][ T9715] ? dvb_device_open+0x33f/0x3b0 [ 149.069006][ T9715] ? __pfx_dvb_device_open+0x10/0x10 [ 149.069034][ T9715] dvb_device_open+0x33f/0x3b0 [ 149.069068][ T9715] ? __pfx_dvb_device_open+0x10/0x10 [ 149.069092][ T9715] chrdev_open+0x234/0x6a0 [ 149.069136][ T9715] ? __pfx_chrdev_open+0x10/0x10 [ 149.069167][ T9715] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 149.069202][ T9715] do_dentry_open+0x6ab/0x14d0 [ 149.069229][ T9715] ? __pfx_chrdev_open+0x10/0x10 [ 149.069260][ T9715] vfs_open+0x82/0x3f0 [ 149.069282][ T9715] path_openat+0x19fa/0x2440 [ 149.069312][ T9715] ? __pfx_path_openat+0x10/0x10 [ 149.069342][ T9715] do_file_open+0x20e/0x430 [ 149.069371][ T9715] ? __pfx_do_file_open+0x10/0x10 [ 149.069404][ T9715] ? _raw_spin_unlock+0x28/0x50 [ 149.069433][ T9715] ? alloc_fd+0x471/0x7a0 [ 149.069463][ T9715] do_sys_openat2+0x10f/0x1e0 [ 149.069480][ T9715] ? __pfx_do_sys_openat2+0x10/0x10 [ 149.069494][ T9715] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 149.069535][ T9715] __x64_sys_openat+0x12d/0x210 [ 149.069557][ T9715] ? __pfx___x64_sys_openat+0x10/0x10 [ 149.069580][ T9715] do_syscall_64+0x123/0x790 [ 149.069603][ T9715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.069625][ T9715] RIP: 0033:0x7fb67cd5e90e [ 149.069644][ T9715] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 149.069662][ T9715] RSP: 002b:00007fb67dc99b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 149.069684][ T9715] RAX: ffffffffffffffda RBX: 00007fb67dc9a6c0 RCX: 00007fb67cd5e90e [ 149.069699][ T9715] RDX: 0000000000000002 RSI: 00007fb67dc99c00 RDI: ffffffffffffff9c [ 149.069714][ T9715] RBP: 00007fb67dc99c00 R08: 0000000000000000 R09: 0000000000000000 [ 149.069728][ T9715] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 149.069742][ T9715] R13: 00007fb67d026038 R14: 00007fb67d025fa0 R15: 00007ffc94812c98 [ 149.069759][ T9715] [ 149.069768][ T9715] [ 149.178759][ T9715] Allocated by task 5133: [ 149.180481][ T9715] kasan_save_stack+0x30/0x50 [ 149.182340][ T9715] kasan_save_track+0x14/0x30 [ 149.184216][ T9715] __kasan_kmalloc+0xaa/0xb0 [ 149.186038][ T9715] __kmalloc_noprof+0x324/0x820 [ 149.187953][ T9715] security_inode_init_security+0x113/0x370 [ 149.190360][ T9715] shmem_mknod+0x2ce/0x480 [ 149.191841][ T9715] lookup_open+0x1255/0x1990 [ 149.193307][ T9715] path_openat+0xa2c/0x2440 [ 149.194744][ T9715] do_file_open+0x20e/0x430 [ 149.196182][ T9715] do_sys_openat2+0x10f/0x1e0 [ 149.197655][ T9715] __x64_sys_openat+0x12d/0x210 [ 149.199190][ T9715] do_syscall_64+0x123/0x790 [ 149.200663][ T9715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.202503][ T9715] [ 149.203274][ T9715] Freed by task 5133: [ 149.204521][ T9715] kasan_save_stack+0x30/0x50 [ 149.206344][ T9715] kasan_save_track+0x14/0x30 [ 149.208203][ T9715] kasan_save_free_info+0x3b/0x70 [ 149.210202][ T9715] __kasan_slab_free+0x5f/0x80 [ 149.212121][ T9715] kfree+0x22b/0x6c0 [ 149.213679][ T9715] security_inode_init_security+0x2bf/0x370 [ 149.216052][ T9715] shmem_mknod+0x2ce/0x480 [ 149.217823][ T9715] lookup_open+0x1255/0x1990 [ 149.219667][ T9715] path_openat+0xa2c/0x2440 [ 149.222277][ T9715] do_file_open+0x20e/0x430 [ 149.224078][ T9715] do_sys_openat2+0x10f/0x1e0 [ 149.225924][ T9715] __x64_sys_openat+0x12d/0x210 [ 149.227838][ T9715] do_syscall_64+0x123/0x790 [ 149.229665][ T9715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.231987][ T9715] [ 149.232938][ T9715] The buggy address belongs to the object at ffff88802cdf2000 [ 149.232938][ T9715] which belongs to the cache kmalloc-256 of size 256 [ 149.238234][ T9715] The buggy address is located 24 bytes inside of [ 149.238234][ T9715] freed 256-byte region [ffff88802cdf2000, ffff88802cdf2100) [ 149.243345][ T9715] [ 149.244294][ T9715] The buggy address belongs to the physical page: [ 149.246756][ T9715] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cdf2 [ 149.250201][ T9715] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 149.253448][ T9715] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 149.256358][ T9715] page_type: f5(slab) [ 149.257934][ T9715] raw: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 149.261243][ T9715] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 149.264564][ T9715] head: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 149.267889][ T9715] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 149.271272][ T9715] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 149.274609][ T9715] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 149.277950][ T9715] page dumped because: kasan: bad access detected [ 149.280459][ T9715] page_owner tracks the page as allocated [ 149.282678][ T9715] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 12150455217 [ 149.289201][ T9715] post_alloc_hook+0xfd/0x120 [ 149.291065][ T9715] get_page_from_freelist+0x110d/0x35b0 [ 149.293238][ T9715] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 149.295560][ T9715] new_slab+0xa5/0x640 [ 149.297173][ T9715] refill_objects+0xe3/0x410 [ 149.299004][ T9715] __pcs_replace_empty_main+0x372/0x680 [ 149.301169][ T9715] __kmalloc_cache_noprof+0x47b/0x6b0 [ 149.303270][ T9715] usb_string+0x10f/0x570 [ 149.304989][ T9715] usb_cache_string+0x7c/0x100 [ 149.306885][ T9715] usb_new_device.part.0+0x2b5/0x1686 [ 149.309022][ T9715] register_root_hub+0x4e6/0x639 [ 149.310994][ T9715] usb_add_hcd.cold+0xccd/0x1158 [ 149.312933][ T9715] vhci_hcd_probe+0x14b/0x4e0 [ 149.314780][ T9715] platform_probe+0x106/0x1d0 [ 149.316684][ T9715] really_probe+0x241/0xa60 [ 149.318473][ T9715] __driver_probe_device+0x210/0x460 [ 149.320549][ T9715] page_owner free stack trace missing [ 149.322642][ T9715] [ 149.323603][ T9715] Memory state around the buggy address: [ 149.325791][ T9715] ffff88802cdf1f00: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 149.328823][ T9715] ffff88802cdf1f80: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 149.331930][ T9715] >ffff88802cdf2000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 149.335027][ T9715] ^ [ 149.336902][ T9715] ffff88802cdf2080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 149.340029][ T9715] ffff88802cdf2100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 149.343136][ T9715] ================================================================== [ 149.357822][ T9715] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 149.360743][ T9715] CPU: 3 UID: 0 PID: 9715 Comm: syz.2.995 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.364532][ T9715] Tainted: [L]=SOFTLOCKUP [ 149.365895][ T9715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.369047][ T9715] Call Trace: [ 149.370143][ T9715] [ 149.371077][ T9715] dump_stack_lvl+0x100/0x190 [ 149.372519][ T9715] vpanic+0x553/0x970 [ 149.373761][ T9715] ? __pfx_vpanic+0x10/0x10 [ 149.375184][ T9715] ? mark_held_locks+0x40/0x70 [ 149.376717][ T9715] ? dvb_device_open+0x33f/0x3b0 [ 149.378285][ T9715] panic+0xd1/0xe0 [ 149.379456][ T9715] ? __pfx_panic+0x10/0x10 [ 149.380808][ T9715] ? dvb_device_open+0x33f/0x3b0 [ 149.382335][ T9715] ? preempt_schedule_common+0x3c/0xb0 [ 149.383997][ T9715] check_panic_on_warn.cold+0x19/0x34 [ 149.385626][ T9715] end_report.part.0+0x3a/0x90 [ 149.387090][ T9715] kasan_report.cold+0xe/0x18 [ 149.388553][ T9715] ? dvb_device_open+0x33f/0x3b0 [ 149.390148][ T9715] ? __pfx_dvb_device_open+0x10/0x10 [ 149.391721][ T9715] dvb_device_open+0x33f/0x3b0 [ 149.393176][ T9715] ? __pfx_dvb_device_open+0x10/0x10 [ 149.394751][ T9715] chrdev_open+0x234/0x6a0 [ 149.396118][ T9715] ? __pfx_chrdev_open+0x10/0x10 [ 149.397655][ T9715] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 149.399601][ T9715] do_dentry_open+0x6ab/0x14d0 [ 149.401067][ T9715] ? __pfx_chrdev_open+0x10/0x10 [ 149.402572][ T9715] vfs_open+0x82/0x3f0 [ 149.403872][ T9715] path_openat+0x19fa/0x2440 [ 149.405274][ T9715] ? __pfx_path_openat+0x10/0x10 [ 149.406755][ T9715] do_file_open+0x20e/0x430 [ 149.408166][ T9715] ? __pfx_do_file_open+0x10/0x10 [ 149.409706][ T9715] ? _raw_spin_unlock+0x28/0x50 [ 149.411171][ T9715] ? alloc_fd+0x471/0x7a0 [ 149.412521][ T9715] do_sys_openat2+0x10f/0x1e0 [ 149.413964][ T9715] ? __pfx_do_sys_openat2+0x10/0x10 [ 149.415526][ T9715] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 149.417443][ T9715] __x64_sys_openat+0x12d/0x210 [ 149.418922][ T9715] ? __pfx___x64_sys_openat+0x10/0x10 [ 149.420573][ T9715] do_syscall_64+0x123/0x790 [ 149.421974][ T9715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.423825][ T9715] RIP: 0033:0x7fb67cd5e90e [ 149.425188][ T9715] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 149.430856][ T9715] RSP: 002b:00007fb67dc99b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 149.433326][ T9715] RAX: ffffffffffffffda RBX: 00007fb67dc9a6c0 RCX: 00007fb67cd5e90e [ 149.435669][ T9715] RDX: 0000000000000002 RSI: 00007fb67dc99c00 RDI: ffffffffffffff9c [ 149.438065][ T9715] RBP: 00007fb67dc99c00 R08: 0000000000000000 R09: 0000000000000000 [ 149.440454][ T9715] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 149.442810][ T9715] R13: 00007fb67d026038 R14: 00007fb67d025fa0 R15: 00007ffc94812c98 [ 149.445218][ T9715] [ 149.446845][ T9715] Kernel Offset: disabled [ 149.448197][ T9715] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:51:37 Registers: info registers vcpu 0 CPU#0 RAX=1ffffd40008b8bd9 RBX=ffff88801c0d6600 RCX=0000000000000001 RDX=ffff88803473cb00 RSI=ffffffff826146e5 RDI=ffffea00045c5ec8 RBP=0000000000000086 RSP=ffffc90003aaf530 R8 =0000000000000006 R9 =000000000011de00 R10=0000000000117000 R11=0000000000000000 R12=00007f0a2b17a000 R13=800000011717b027 R14=dffffc0000000000 R15=0000000000000086 RIP=ffffffff826146fa RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ba2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c37e6c5 CR3=000000000eb94000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a2c35d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5a7feef6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5a7feef6 00007ffd5a7feefc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a2b635607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a2b635647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a2b6357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a2b635639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1700088002000c00 003b840006000680 01000c80c2000400 007c040000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a2b7f25f8 00007f0a2b7f25c8 00007f0a2b7f2600 00007f0a2b7f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85aa2cb5 RDI=ffffffff9bc21640 RBP=ffffffff9bc21600 RSP=ffffc90003b8f358 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000031373954 R12=0000000000000000 R13=0000000000000036 R14=ffffffff9b9131e8 R15=ffffffff85aa2c50 RIP=ffffffff85aa2cdf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb67dc9a6c0 ffffffff 00c00000 GS =0000 ffff8880d5ca2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb67cd87700 CR3=000000002d020000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=0000000000000000 Opmask02=00000000fce00000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc94813186 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc94813186 00007ffc9481318c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb67ce35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb67ce35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb67ce357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb67ce35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb67cff25f8 00007fb67cff25c8 00007fb67cff2600 00007fb67cff25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff888026f82580 RSI=ffffffff81fe47fe RDI=ffff888026f82580 RBP=ffff88806a543560 RSP=ffffc900042af8a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed1004df0762 R13=0000000000000003 R14=ffffed100d4a86ad R15=0000000000000001 RIP=ffffffff81fe4800 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5da2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0a2c35da08 CR3=000000002d82e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000400 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7269645f73666563 6172742f31362f2e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5a7feef6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5a7feef6 00007ffd5a7feefc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a2b635607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a2b635647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a2b6357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0a2b635639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000038 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000002 RDX=ffff88801f298000 RSI=ffffffff81fe728e RDI=ffff88801f298000 RBP=ffffc90000157cd8 RSP=ffffc90000157bc0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88806a633c60 R12=ffff88806a73cc40 R13=ffffed100d4e7989 R14=ffff88806a73cc48 R15=0000000000000001 RIP=ffffffff81fe7295 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ea2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc9481303c CR3=0000000030ff8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000430 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000201 Opmask01=0000000000000000 Opmask02=0000000033006000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd863121fb 00007ffd863121fb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd86312700 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd86312700 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 373954205b5d3431 333837392e383431 20205b3e343c0039 6430653935623200 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3733542051573431 3332373324323431 2020513434360033 6430653335623200 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d 3d3d3d3d3d3d3d3d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3834203130203938 2034362038642037 6620666620666620 6666203865203163 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2037632038342033 6320313020333720 6666206666203066 203130206433203e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38343c2035302066 3020383020343220 6334206238206334 2038632039382064 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3420326320393820 6434206163203938 2038342036642039 3820383420376620 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38313d6f6e692022 7366706d74223d76 6564202265746174 732d6b6f6f68223d ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000