last executing test programs: 5m58.901319773s ago: executing program 32 (id=276): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000086000/0x1000)=nil, 0x1000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8004, 0x56, @value=0x4}) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799", 0x6, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) getpid() keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r2, r1}, &(0x7f00000000c0)=""/83, 0x53, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042207aa"], 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chdir(0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 5m55.03171623s ago: executing program 2 (id=312): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async) r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000440)={"0e20da00", 0x0, 0x2, 0x2, 0x2000000, 0x1, "f70000000000000079deffffff00", '\x00\x00\a\x00', 'I\x00', "0001ffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0cdd42000000000000c20d00"]}) (async) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 5m54.97924329s ago: executing program 2 (id=313): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x9, 0x1ff, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) 5m54.976070156s ago: executing program 2 (id=315): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000), 0x34, 0x2090) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1br2}, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32=r3, @ANYBLOB="ed0c00000000000000000000e8ffffffffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000200"/28], 0x50) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)={0x1b, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0x2c, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000009, 0x0, 0x0, 0x0, 0xffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x10a5}, @map_fd={0x18, 0x4297c491b7d8a2ba, 0x1, 0x0, r2}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000030802b08", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r8, r8}, &(0x7f0000000600), &(0x7f0000000640)=r7}, 0x1c) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000000000085010000860000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r10 = socket(0x400000000010, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r12, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x2}, 0x5c) getsockopt$bt_l2cap_L2CAP_OPTIONS(r12, 0x6, 0x1, 0x0, &(0x7f0000000100)) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xb, 0x2}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x6}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) 5m54.567073505s ago: executing program 2 (id=322): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x16}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6003}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x979861b97d40458f) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r1, 0x708, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xf09}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x44) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x104, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000000) write$fb(r0, &(0x7f00000003c0)="236567a7475da681a696fb36ebcc56e7f2e2699a145ba97f701aeac38bcc9895661c384daba8cb33a919a3aea2da6d2dc90528f9e609c9fb2de48f606c4149cef067d641445046da3fd8ec0cb8d3546723ece2c26a25ddd06ef1a5e00a1cdfd056403846ffd7db7402579aa35ec23415e65514f3f1587c20c6dcf58aa1a20306d6b9877c542720b38fb5f46d21ad66e844c2ce07ff86c1aa24294476d86bd4a60ed11ac0e97d0f50eb32f4", 0xab) sendmsg$NFT_BATCH(r0, &(0x7f0000000e00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000dc0)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x104, 0xb, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_USERDATA={0xa, 0xd, 0x1, 0x0, "c25c8f5a7f77"}, @NFTA_SET_USERDATA={0x5f, 0xd, 0x1, 0x0, "9d28c7677bf75179d1483e1f145a321e232b3cfc2302f414b427c8196ab8ec932ef162f9f004628ab795518e80a910b32931498dff4ddd3805488615086ecbaecc1bd78bd2bb6ad659141854bd831cd7ef0d9d85f0e0c647319523"}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x33}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1f}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}, @NFTA_SET_USERDATA={0x5e, 0xd, 0x1, 0x0, "fb82d783eb6dc51e2be0b4bef2aa2e7bd8702e3b87981ac20b431f9a84501a4ce50baba8b267ae4c22a9e03632ff9d68b0e38a43ae9aff80b736e652914a49aba85d5d1249f9ff95e7cef4184fdd785d58e3518b4b996c1f8b45"}]}, @NFT_MSG_DELTABLE={0x1c8, 0x2, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x43, 0x6, "7e52051ec021d3123a6c297c7fbe202c924e8f2471d939864ea7ee4d4f694952356009bd4161853e808e27326908a15bd9c2ab26f94dea80aa71c754faa17e"}, @NFTA_TABLE_USERDATA={0xd7, 0x6, "dbc2365679d659ccf218a11cdddabb1637e68ec655f3e17f4355f6b45569389dff708964f4217710a085e7978bd60964c6f8ef529a1fc8bbd94b00a0c05c6b9b83b7b4fa965534bde1bf9693f2b2241909e1b01fbcc6a720c71b6de907a613cad3ace8670c4edc1eb2dd5c048cc013a8150c1ac769e07bb927547a98193eef9172f0bb760aecaa218338f2669a7cc1ebdc13b6c183f029b5c53d2d6889314695bfaa681ba6771cbc1a176772a0ad5f10e3c2c0cb74a7da73090a2b8bf45e9f193ec014f6339cc421e92ac9c314d426c0a894bc"}, @NFTA_TABLE_USERDATA={0x8c, 0x6, "d2a020aae55a5748d73adae20c89f25342c148807edcdea082929f0ba152e55adba4f97abce939fc0fa3a32a84079556eda1db51b93e935b397f8a4ff540e2a7b5cae34555b267b1b8d70574083cb2627822f0528c3b921324b12c0d8b2ffd34b4d8fa84c70ec750b084a329a071cb8d7431ea4e5bb879bbbdfd80ac5ea2888f8bb16a7e84e084df"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x554, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4e8, 0x3, 0x0, 0x1, [{0x4e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xe4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x71, 0x1, "fbc3769478560ea4b06e5b6d6301c4c6f01674dc0013cf25493af1a02af91b8bb692a518ebac8c48289b2da85c27497d9c124a21508ceb559eff8d62b9a32f7e4611e5c18ce61eb1bc933a418149fa75f314939c4ca8ac2cd863c2958b5ca6fb2606a7401651b53c3dcca0b591"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x7, 0x1, "4f048f"}]}, @NFTA_SET_ELEM_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_DATA={0x164, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x67, 0x1, "1a7fd29f01d87a3e58c9a1910de347337dc095e33e5052a20e4471cbc708e7b879c0866ca899e2d266b83cec16ba33dbccab72584c38b2c8fa313042417230d431e4a960273f036a475a2bbfa10aceb04a45aff2607ab33b9849d6d129d3f339b5ebfd"}, @NFTA_DATA_VALUE={0xa2, 0x1, "9373e0838168705cbcaaf6d1f5db8ee3a5c7fee64a515eb68b3e2ccef4550642f03f898d78ee863cafaddbbde47bb2a4268a1265d7cf1d5e95ad54bec34e72b1d7bdc7e65c1b210d2c5cd0f061390a3f1616f0d5af76d810f0338931dfd1a5d0a80b025d0d92b2fda5415884e9fb87677bf0dabbdc0aae9f1466a25da660756aa42b5648d81a92b42f9c86c91a5bf871f58fafe1d8fd6d7feaac05c15642"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x150, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0x108, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xf8, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x46, 0x3, "7da14231a86ccd4e956e68a4022d6f3760cb93aed2441172294aa0666f7b4a149953534203164814d49ce7411675480cb6cc8189fde670c5a26bc420ba4f44acd673"}, @NFTA_TARGET_NAME={0xb, 0x1, 'TPROXY\x00'}, @NFTA_TARGET_INFO={0x65, 0x3, "951d1b41ae6b1826aa28560e0807a58e751d5d64c8c9d529e859172ca695df87d0efb6e4e4ce7112b3c6260f01e413e42aed7a3574658275cf4bd4ae42f557bdada55230b6f70aaa1b5b5bdb038aa22c1f2f1bcfc8465efa31b5ad4b1baa1b064c"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_NAME={0xd, 0x1, 'CONNMARK\x00'}, @NFTA_TARGET_NAME={0xd, 0x1, 'REDIRECT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x114, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd2, 0x1, "3e58699f9947aefb94467c55e7c113e38be1c6b3a52afd9f80c52605d0021eac11e1f2b27d40f5e81cdf9b774509899e87e787300e72660871470e0ebef51dd4bbb360d3f20ba691c2d0f91a100a9d17d2e8b471aef1705f1927fd40833564ecfca7c625990d459646df05bba82da6863b368540d6aacccc56183f4cda244b25e5f63715b6e81c07ceeac7e605a6ba94444923a4faaf40e0b5b9b5d2f97c9282f73573748d2c322cf0de2428952dec9202b94930c1fd38a9eb1797c45a7118a160f0ae605233153605147741ad76"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x98, 0x14, 0xa, 0xe00, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0x78, 0x8, "47f869204b333cd26354e52e778e28fc3f4ce952cf5e1e4433d39dd12844912ab9e8466573619b04fe62a96d8ab40d6d21a4fc3ff75f8d86fc3f6a439804b9ade1a03fca05de376034f429233bedcb494ac68cf8c9f5bdd6032e269244f6340062644b6891213980bc6a355c4a4cea7464f597bb"}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x900}, 0x1, 0x0, 0x0, 0x400c080}, 0x4008810) preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000000e40)=""/137, 0x89}, {&(0x7f0000000f00)=""/152, 0x98}, {&(0x7f0000000fc0)=""/192, 0xc0}, {&(0x7f0000001080)=""/92, 0x5c}, {&(0x7f0000001100)=""/137, 0x89}, {&(0x7f00000011c0)=""/173, 0xad}, {&(0x7f0000001280)=""/61, 0x3d}], 0x7, 0x4, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000001500)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x801}, 0xc, &(0x7f00000014c0)={&(0x7f0000001400)={0xb8, r2, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x7}, {0xf8, 0x5}, {0x80, 0x5}, {0x6, 0x3}, {0xb, 0x5}, {0x2, 0x1}, {0x9, 0x6}, {0xd, 0x7}, {0x3, 0x1}, {0xd6, 0x3}], "9a72c555d685960d"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x6, 0x6}, {0x0, 0x7}, {0x5, 0x3}, {0x3, 0x1}, {0x8, 0x4}, {0x21, 0x5}], "1685d717d704878b"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x7f}, {0x6, 0x5}, {0x6, 0x6}, {0x0, 0x3}, {0xae}, {0x8f, 0x2}, {0xc, 0x2}, {0x81}, {0x5}], "727decb0a302e630"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0xaf, 0x4}, {0xb, 0x7}, {0x1, 0x1}, {0x1c, 0x2}], "0e9750856cffefef"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x7, 0x4}, {0x6, 0x5}, {0x7, 0x3}, {0x4, 0x5}, {0xfb, 0x4}, {0x3}, {0x80, 0x1}, {0x9, 0x6}, {0xa, 0x1}, {0x6}, {0x81, 0x7}, {0x6, 0x3}, {0x9, 0x4}, {0xe}, {0x5, 0x2}, {0x3, 0x5}, {0xeb, 0x2}, {0x3, 0x5}], "31915991056c9309"}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24040055}, 0x4000080) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000001540)={0x3, 0x1, 0x7, 0xfffffff5, 0xfffffff9, 0x9}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001580)={0x0, @qipcrtr={0x2a, 0x4, 0x3fff}, @vsock={0x28, 0x0, 0xffffffff, @local}, @phonet={0x23, 0x6, 0x80, 0x6}, 0x5c, 0x0, 0x0, 0x0, 0x7, 0x0, 0x100, 0x0, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001600)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$NFT_BATCH(r0, &(0x7f0000001800)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000017c0)={&(0x7f0000001680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x38, 0x2, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x30, 0x0, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x40, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELOBJ={0x4c, 0x14, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0xffff}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x4}}}, 0x11c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x14, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000019c0)=@filter={'filter\x00', 0xe, 0x4, 0x3e8, 0xffffffff, 0x1d0, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, &(0x7f0000001980), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d2], 0xff, 0x80, 0x3}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0x4b, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x22}, @ipv4={'\x00', '\xff\xff', @local}, [0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xff000000, 0xff000000, 0xfffe81], 'ip_vti0\x00', 'bridge0\x00', {}, {}, 0x33, 0x0, 0x0, 0x63}, 0x0, 0x108, 0x148, 0x0, {}, [@common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e21], [0x4e22, 0x4e21], 0x2}}, @common=@frag={{0x30}, {[0x4, 0x10000], 0x80000001, 0x8}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0xb5, 0xa, 0x401, 0x9, 0x3, 0x5, 0x2]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000001e40)={0x2, 0x100, 0xfffffffe, 0x2, 0x5, 0x5}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e80)={'bridge_slave_1\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f00), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x10081899}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x28, r5, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4b}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37}]}, 0x28}, 0x1, 0x0, 0x0, 0x80c4}, 0x8014) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x812000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x74, r2, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x11}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x14}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x8}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x6}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x3c}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x9}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x10}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x85}, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x7c, r7, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x3c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x4}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x2c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004000) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000022c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000002300)={{0x1, 0x1, 0x18, r0, {0xee01, 0x0}}, './file0\x00'}) write$FUSE_ATTR(r0, &(0x7f0000002340)={0x78, 0x0, 0x0, {0x37, 0x2, 0x0, {0x6, 0xfffffffffffffff7, 0x9a50, 0x2, 0x3, 0x2, 0x0, 0x9, 0x0, 0xa000, 0x81, r8, r10, 0x2, 0x81}}}, 0x78) listen(r9, 0x1) 5m54.47598694s ago: executing program 33 (id=322): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x16}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6003}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x979861b97d40458f) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r1, 0x708, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xf09}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x44) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x104, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000000) write$fb(r0, &(0x7f00000003c0)="236567a7475da681a696fb36ebcc56e7f2e2699a145ba97f701aeac38bcc9895661c384daba8cb33a919a3aea2da6d2dc90528f9e609c9fb2de48f606c4149cef067d641445046da3fd8ec0cb8d3546723ece2c26a25ddd06ef1a5e00a1cdfd056403846ffd7db7402579aa35ec23415e65514f3f1587c20c6dcf58aa1a20306d6b9877c542720b38fb5f46d21ad66e844c2ce07ff86c1aa24294476d86bd4a60ed11ac0e97d0f50eb32f4", 0xab) sendmsg$NFT_BATCH(r0, &(0x7f0000000e00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000dc0)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x104, 0xb, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_USERDATA={0xa, 0xd, 0x1, 0x0, "c25c8f5a7f77"}, @NFTA_SET_USERDATA={0x5f, 0xd, 0x1, 0x0, "9d28c7677bf75179d1483e1f145a321e232b3cfc2302f414b427c8196ab8ec932ef162f9f004628ab795518e80a910b32931498dff4ddd3805488615086ecbaecc1bd78bd2bb6ad659141854bd831cd7ef0d9d85f0e0c647319523"}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x33}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1f}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}, @NFTA_SET_USERDATA={0x5e, 0xd, 0x1, 0x0, "fb82d783eb6dc51e2be0b4bef2aa2e7bd8702e3b87981ac20b431f9a84501a4ce50baba8b267ae4c22a9e03632ff9d68b0e38a43ae9aff80b736e652914a49aba85d5d1249f9ff95e7cef4184fdd785d58e3518b4b996c1f8b45"}]}, @NFT_MSG_DELTABLE={0x1c8, 0x2, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x43, 0x6, "7e52051ec021d3123a6c297c7fbe202c924e8f2471d939864ea7ee4d4f694952356009bd4161853e808e27326908a15bd9c2ab26f94dea80aa71c754faa17e"}, @NFTA_TABLE_USERDATA={0xd7, 0x6, "dbc2365679d659ccf218a11cdddabb1637e68ec655f3e17f4355f6b45569389dff708964f4217710a085e7978bd60964c6f8ef529a1fc8bbd94b00a0c05c6b9b83b7b4fa965534bde1bf9693f2b2241909e1b01fbcc6a720c71b6de907a613cad3ace8670c4edc1eb2dd5c048cc013a8150c1ac769e07bb927547a98193eef9172f0bb760aecaa218338f2669a7cc1ebdc13b6c183f029b5c53d2d6889314695bfaa681ba6771cbc1a176772a0ad5f10e3c2c0cb74a7da73090a2b8bf45e9f193ec014f6339cc421e92ac9c314d426c0a894bc"}, @NFTA_TABLE_USERDATA={0x8c, 0x6, "d2a020aae55a5748d73adae20c89f25342c148807edcdea082929f0ba152e55adba4f97abce939fc0fa3a32a84079556eda1db51b93e935b397f8a4ff540e2a7b5cae34555b267b1b8d70574083cb2627822f0528c3b921324b12c0d8b2ffd34b4d8fa84c70ec750b084a329a071cb8d7431ea4e5bb879bbbdfd80ac5ea2888f8bb16a7e84e084df"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x554, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4e8, 0x3, 0x0, 0x1, [{0x4e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xe4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x71, 0x1, "fbc3769478560ea4b06e5b6d6301c4c6f01674dc0013cf25493af1a02af91b8bb692a518ebac8c48289b2da85c27497d9c124a21508ceb559eff8d62b9a32f7e4611e5c18ce61eb1bc933a418149fa75f314939c4ca8ac2cd863c2958b5ca6fb2606a7401651b53c3dcca0b591"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x7, 0x1, "4f048f"}]}, @NFTA_SET_ELEM_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_DATA={0x164, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x67, 0x1, "1a7fd29f01d87a3e58c9a1910de347337dc095e33e5052a20e4471cbc708e7b879c0866ca899e2d266b83cec16ba33dbccab72584c38b2c8fa313042417230d431e4a960273f036a475a2bbfa10aceb04a45aff2607ab33b9849d6d129d3f339b5ebfd"}, @NFTA_DATA_VALUE={0xa2, 0x1, "9373e0838168705cbcaaf6d1f5db8ee3a5c7fee64a515eb68b3e2ccef4550642f03f898d78ee863cafaddbbde47bb2a4268a1265d7cf1d5e95ad54bec34e72b1d7bdc7e65c1b210d2c5cd0f061390a3f1616f0d5af76d810f0338931dfd1a5d0a80b025d0d92b2fda5415884e9fb87677bf0dabbdc0aae9f1466a25da660756aa42b5648d81a92b42f9c86c91a5bf871f58fafe1d8fd6d7feaac05c15642"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x150, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0x108, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xf8, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x46, 0x3, "7da14231a86ccd4e956e68a4022d6f3760cb93aed2441172294aa0666f7b4a149953534203164814d49ce7411675480cb6cc8189fde670c5a26bc420ba4f44acd673"}, @NFTA_TARGET_NAME={0xb, 0x1, 'TPROXY\x00'}, @NFTA_TARGET_INFO={0x65, 0x3, "951d1b41ae6b1826aa28560e0807a58e751d5d64c8c9d529e859172ca695df87d0efb6e4e4ce7112b3c6260f01e413e42aed7a3574658275cf4bd4ae42f557bdada55230b6f70aaa1b5b5bdb038aa22c1f2f1bcfc8465efa31b5ad4b1baa1b064c"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_NAME={0xd, 0x1, 'CONNMARK\x00'}, @NFTA_TARGET_NAME={0xd, 0x1, 'REDIRECT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x114, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd2, 0x1, "3e58699f9947aefb94467c55e7c113e38be1c6b3a52afd9f80c52605d0021eac11e1f2b27d40f5e81cdf9b774509899e87e787300e72660871470e0ebef51dd4bbb360d3f20ba691c2d0f91a100a9d17d2e8b471aef1705f1927fd40833564ecfca7c625990d459646df05bba82da6863b368540d6aacccc56183f4cda244b25e5f63715b6e81c07ceeac7e605a6ba94444923a4faaf40e0b5b9b5d2f97c9282f73573748d2c322cf0de2428952dec9202b94930c1fd38a9eb1797c45a7118a160f0ae605233153605147741ad76"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x98, 0x14, 0xa, 0xe00, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0x78, 0x8, "47f869204b333cd26354e52e778e28fc3f4ce952cf5e1e4433d39dd12844912ab9e8466573619b04fe62a96d8ab40d6d21a4fc3ff75f8d86fc3f6a439804b9ade1a03fca05de376034f429233bedcb494ac68cf8c9f5bdd6032e269244f6340062644b6891213980bc6a355c4a4cea7464f597bb"}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x900}, 0x1, 0x0, 0x0, 0x400c080}, 0x4008810) preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000000e40)=""/137, 0x89}, {&(0x7f0000000f00)=""/152, 0x98}, {&(0x7f0000000fc0)=""/192, 0xc0}, {&(0x7f0000001080)=""/92, 0x5c}, {&(0x7f0000001100)=""/137, 0x89}, {&(0x7f00000011c0)=""/173, 0xad}, {&(0x7f0000001280)=""/61, 0x3d}], 0x7, 0x4, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000001500)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x801}, 0xc, &(0x7f00000014c0)={&(0x7f0000001400)={0xb8, r2, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x7}, {0xf8, 0x5}, {0x80, 0x5}, {0x6, 0x3}, {0xb, 0x5}, {0x2, 0x1}, {0x9, 0x6}, {0xd, 0x7}, {0x3, 0x1}, {0xd6, 0x3}], "9a72c555d685960d"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x6, 0x6}, {0x0, 0x7}, {0x5, 0x3}, {0x3, 0x1}, {0x8, 0x4}, {0x21, 0x5}], "1685d717d704878b"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x7f}, {0x6, 0x5}, {0x6, 0x6}, {0x0, 0x3}, {0xae}, {0x8f, 0x2}, {0xc, 0x2}, {0x81}, {0x5}], "727decb0a302e630"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0xaf, 0x4}, {0xb, 0x7}, {0x1, 0x1}, {0x1c, 0x2}], "0e9750856cffefef"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x7, 0x4}, {0x6, 0x5}, {0x7, 0x3}, {0x4, 0x5}, {0xfb, 0x4}, {0x3}, {0x80, 0x1}, {0x9, 0x6}, {0xa, 0x1}, {0x6}, {0x81, 0x7}, {0x6, 0x3}, {0x9, 0x4}, {0xe}, {0x5, 0x2}, {0x3, 0x5}, {0xeb, 0x2}, {0x3, 0x5}], "31915991056c9309"}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24040055}, 0x4000080) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000001540)={0x3, 0x1, 0x7, 0xfffffff5, 0xfffffff9, 0x9}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001580)={0x0, @qipcrtr={0x2a, 0x4, 0x3fff}, @vsock={0x28, 0x0, 0xffffffff, @local}, @phonet={0x23, 0x6, 0x80, 0x6}, 0x5c, 0x0, 0x0, 0x0, 0x7, 0x0, 0x100, 0x0, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001600)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$NFT_BATCH(r0, &(0x7f0000001800)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000017c0)={&(0x7f0000001680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x38, 0x2, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x30, 0x0, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x40, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELOBJ={0x4c, 0x14, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0xffff}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x4}}}, 0x11c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x14, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000019c0)=@filter={'filter\x00', 0xe, 0x4, 0x3e8, 0xffffffff, 0x1d0, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, &(0x7f0000001980), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d2], 0xff, 0x80, 0x3}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0x4b, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x22}, @ipv4={'\x00', '\xff\xff', @local}, [0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xff000000, 0xff000000, 0xfffe81], 'ip_vti0\x00', 'bridge0\x00', {}, {}, 0x33, 0x0, 0x0, 0x63}, 0x0, 0x108, 0x148, 0x0, {}, [@common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e21], [0x4e22, 0x4e21], 0x2}}, @common=@frag={{0x30}, {[0x4, 0x10000], 0x80000001, 0x8}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0xb5, 0xa, 0x401, 0x9, 0x3, 0x5, 0x2]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000001e40)={0x2, 0x100, 0xfffffffe, 0x2, 0x5, 0x5}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e80)={'bridge_slave_1\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f00), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x10081899}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x28, r5, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4b}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37}]}, 0x28}, 0x1, 0x0, 0x0, 0x80c4}, 0x8014) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x812000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x74, r2, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x11}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x14}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x8}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x6}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x3c}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x9}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x10}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x85}, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x7c, r7, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x3c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x4}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x2c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004000) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000022c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000002300)={{0x1, 0x1, 0x18, r0, {0xee01, 0x0}}, './file0\x00'}) write$FUSE_ATTR(r0, &(0x7f0000002340)={0x78, 0x0, 0x0, {0x37, 0x2, 0x0, {0x6, 0xfffffffffffffff7, 0x9a50, 0x2, 0x3, 0x2, 0x0, 0x9, 0x0, 0xa000, 0x81, r8, r10, 0x2, 0x81}}}, 0x78) listen(r9, 0x1) 5m5.351732566s ago: executing program 1 (id=1052): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = msgget$private(0x0, 0x790) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000340)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x88}, 0x0, 0x0, 0x7, 0x2, 0x2, 0x9, 0x313, 0x4, 0x7a0, 0x1000, 0x0, 0xffffffffffffffff}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000020003b00000008000300", @ANYRES32=r5, @ANYBLOB="2a003300d0000000080211000001080211000000505050505050000003"], 0x48}}, 0x40000) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r1, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0) 5m4.8736153s ago: executing program 1 (id=1057): socket(0x2a, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 5m4.815655322s ago: executing program 1 (id=1060): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="752b306085ce8bebf02e4e91ce78c67b4158000000100001042bbd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a24001280110001006272696467655f736c617665000000000c00058005001c006a000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffdbd, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x50) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, '\x00', @raw_data=[0x8000, 0x81, 0xf92a, 0x3, 0x3, 0xff, 0x5, 0x4, 0x3a, 0x0, 0x6, 0xbda, 0x7fffffff, 0x2, 0x95a, 0x1, 0x7b3c, 0x200, 0x6, 0x5, 0x9, 0x3, 0x4, 0xffffffff, 0x4, 0x9, 0x7, 0x85, 0x5, 0x0, 0x4ae5, 0x5]}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c000000100039042bbd7000e2ffffff000003e4", @ANYRES32=0x0, @ANYBLOB="43020090e51d07001c00126508000100677265006a881000028004001200060003008400"], 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x8804) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb080045019078ac1e0001ac1414aa030490781200183f2500000000000000000100007f0000017f00000100186371ae9b1c030000000000000062"], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) write$sndseq(r9, &(0x7f0000000080)=[{0x10, 0x81, 0xfc, 0xfd, @time={0x2, 0x25}, {0x10, 0x4a}, {0xe}, @raw8={"1f000e0700000100"}}], 0x1c) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r11, @ANYRES16=0x0, @ANYBLOB="010028bd7000fddbdf251200000008000300", @ANYRES32=r12, @ANYBLOB="06003600090000000600b5009b0200000500e400010000000a00060008021100000000000c0081"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4004004) r13 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r13, 0x114, 0x3f, &(0x7f00000003c0), 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="00b53d91", @ANYRES16=r5, @ANYRES16=r5, @ANYRES32=r5, @ANYRESOCT=r5], 0x180}}, 0x4010) 5m4.718146456s ago: executing program 1 (id=1062): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000140)='./file1\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x6005006, 0x0) (async) mount$bind(&(0x7f0000000140)='./file1\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x6005006, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r1, 0x1000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r1, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000200)=0x4) (async) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000040), &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000240)='./bus\x00', 0xc8) madvise(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x9) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) 5m4.566283488s ago: executing program 1 (id=1065): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0xc4c03d12, &(0x7f0000000380)={0xa, 0x10}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, 0x0, 0xfffffffffffffeb4}, 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@getqdisc={0x28, 0x26, 0x2, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0x3}, {0x8, 0x50f033b288f3e350}, {0x4, 0x5}}, [{0x4}]}, 0x28}}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffffffffcfd9, 0xa080) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0x8a881, 0xbb) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffd, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06489f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) socket$inet(0x2, 0x1, 0x100) open_tree(0xffffffffffffffff, 0x0, 0x101) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x107) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r8, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 5m4.256874951s ago: executing program 1 (id=1068): socket(0x2a, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 5m4.173765858s ago: executing program 34 (id=1068): socket(0x2a, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 4m43.638171052s ago: executing program 0 (id=1296): syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000006c000100279d7020f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1a0000009c2800002c00348014003500000000000000000000000000000000001400350076657468305f766c616e000000000000140035006e657464657673696d30"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_delroute={0x24, 0x1a, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x400}, [@RTA_DPORT={0x6, 0x1d, 0x4e22}]}, 0x24}}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1fffffffff, 0x2) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0xf00) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000080)={0x3, 0x2, 0x3, 0x0, 0x1}) (async) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "186856f3"}}) (async) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x2c, 0x3c, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000100)=0xfffffffd, 0x4) (async) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) 4m42.779690122s ago: executing program 0 (id=1313): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000001c0)={0xf, 0x2, 'client0\x00', 0x6, "2f26199f7fdd6188", "a392f7896cf01b60a97b5696d6de30b14a9b127e400445ccf5e8ca146ccdccef", 0x2, 0x9}) sync_file_range(r0, 0x23e0, 0x7, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "110000e6c8000008", "cac9e9877c1600e65e99ffffffffff02", 'LP3F', "f7ffffffff0100"}, 0x28) setsockopt$inet6_tcp_int(r2, 0x11a, 0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x38, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x38}}, 0x88080) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x802) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004880)={0x2918, 0x16, 0x1, 0x0, 0x0, {0x5, 0x0, 0x6e80}, [@nested={0xc7, 0x32, 0x0, 0x1, [@generic="7af0c61826e3c52116cf241f35f8189d8bb1f76c2e03c9b069975f85535dbf18e279b5fd6aac87e5aaf761e41bf6ca94f6f394ce23b91000f76683f4c89acefd43ef7dd76abbbec3736da42a61729707376f53f7fdf80e50575a749fb7e97dd2fae9c4abef26b79e5a8e54a8ea6a1f2b186c5eacbcc4b511b25a9b16a6db12dbc76ca1d8a732e4428ae973ff1adb576f8865f52f35eb645158b05dc62c9fa0818230d72cc3d4d00fad9ee18a3c9ee83ad2755907ad98c4ded223cf4ae37bf2f046cbfc"]}, @nested={0x2553, 0x4c, 0x0, 0x1, [@generic="7899be19c91d15e77adaa710050b3c6e1d05a25a7b1b833cac29f2ccfc77f57d2a9e3f", @nested={0x252c, 0x167, 0x0, 0x1, [@nested={0x4, 0x27}, @nested={0x1409, 0x1e, 0x0, 0x1, [@generic="64188524aa820354a41bd8a2f3b20dfe6ce4108687b5faed5846e77555577d9570546a77ae813d8ebce980fd8743e7b40f27e4ea32b9f24e11aa1bdc3a36498a56c62c84a984aebd9d", @typed={0x14, 0x40, 0x0, 0x0, @ipv6=@private2}, @generic="55524799d0625e2e0d22bcf8a68561b199ea6c78abc657de41aab20b37778e5b433ed6261f26241b026ed47fd865aebdc769463260bd7040a1a7faca87f8dbd598271fd77022083f697b6e35584d013f463dfa07347a31d66057b533ad245799cf4e685bb8b8dee3384f97a3", @nested={0x133b, 0x23, 0x0, 0x1, [@generic="73aa5db40866563da677308405797642aeaaab046f189147ebb6f1e300be62962b8a4ce299c2a59d487e2509f0732d1b74636eebf16f7d1ad899388d513f51b98ca30c270270524dca1bd2913e00a190c8fafa50c48bc854d39f9f45f4ff354b99016640f75c40bc57863d6ff641b99e28aaf3678cb5a223cef988c2f61ece8e3dedfd4d45a220e48cb04b3497a3ff7dc4f5316303a40aff322269749f34d4b499bcfad847fb9de7b0d8101e67301c5258d1cf94a128e2db1890a9b314db65a0f3dedb8a15006f8edc12f3f906db43b01b30e5e45868d9a1327f7dd6b3bdd8c48c85dc2d22b3af3d482d598e8f06d1", @generic="520a001253f412925cfe9dee1e3187af4b0bb967559dd189b183ff981d7ab05644daa491bdea4d5e6fff81031422c07fb789f1bcb16aaaa2cf0b743baab5e13578e99e10a8e362aa97d0bfffcbf37be2f5724f1762292a1645a460076af88993e9a87b83", @nested={0x1e2, 0x120, 0x0, 0x1, [@nested={0x4, 0x14a}, @nested={0x4, 0x10e}, @nested={0x4, 0x59}, @nested={0x4, 0x64}, @nested={0xdd, 0x33, 0x0, 0x1, [@generic="9e6192bbad6f321cda105218feb3566b3f35d87d8b3a9b9b76ccd0cbe2b4dc6def84dcdcbb0b2bb23d596ec074701d51560b35ab96aa25ced4413d0eb84eeeb315d9b8ad4c54d4daef8578b549f46576dff8460838084094200fb6ceca1b80137532b357909a20372850b632e736c3411d3926b5e58d2e4f1f19dec1d7231c5d27d4eeefe3e2638f41ef5c7496690f9034031406d4a00a3a1f30b8cc3545b4675443ec5d2d76634dbd11b0b5589603081aad619322e9e9760f37047a19953bf7475475e39b88a3a54e8be94a3e0448e6f4eaed1035d51d8246"]}, @nested={0x4, 0x13f}, @generic="b12100e18d562381d1e392026d78da372e9307181ff8ee0e5fc1145770b148298880bfe23d80e03a3ec6d04f7664d5a1811d09e022c4bd2be8cc50e035e2cbfb80842b618fd34d9aaac1d81fe56e477b06449bc999", @generic="ca38b18323b9f18c050787b0b9762fbee403ea6ff33f39c4747bdd3db67a29e50a25cf9207c06c8f91f5d8058b3003ef65b2d64a3d4a9b026a14e39c4037dff74cbd6350afa2371a8b1f36967dd1b2660b606e2200aef6dda2e748f20fd1c037e4a24b26f43a0c40b23f7182cb2cf31ed1ec97b56b34b7c26df0bd40f4ea952ee86398bd3da5441b6865a3e1162d0ca6c0", @nested={0x4, 0x46}]}, @generic="a446c380b3e1ed6b113ac1c9cc14172698a537a7b7571862f83ecd137a080f528944271703e221fa94cec11cbd08e8840b763e40851786ce05855d646dea8afa67f375e19a97b3810c842dc4ef4d5140ef14099665b87a5c735d2cbbfe73bae03f5001c09f4cd5d93cf17b366e2173ecc65e885ae56be1919db129050cd1d7fcf14a37ef55f55a5f36a58f1c5c6587fb8350e085f9156e22fab83b6e4c1cbe4165500e9ed566bc1ee3af932bf189a9bc003fcdd3bfcad62bf0fed26e83f0bce36dba1d28a734e6c2ec83ccbc0e9654a1cd2a095dccc06ac9623f7c969ec1a1f80bf116ea98f8e5d95b519dcef8d8803457bc0898c0fd5dd7f2f9795736bd062466d43660de5a34e5d3260c0b70196db86b6ed9ca1420f4a006bd6ddcc480c9c5f8b93c1a4b91fe4aa7ef24375109d5d9cab2eb2c0dbbd2c8aa869ce9643684749ba5b0e670b6b8901ab70c8dcf8250d11c57dd5dd4b5e4627a817ea23cd0f1f8434b325f4886b85ce9c980ad8ce105bd4db82a39ef3354eef835e08a963036cb5c78a7b1e3662ac4ce1d916344d2a126735620d97072fe3b82fb63bb0529b56731651bdc067d41d0b1ce06d5180df4de26d4978aa4190186b73e0625f62a3b2cdfba315ad9c75286e5662d905387da2bd7acf3e29d2212237867adb1c63365e6a98e9799efc2996f5593426bfc5097eb36558d1855addb821a9230941ab63bd0e4f9f42324df33f355c4abe062972b282514cb1403c5a226f4a5e744f0126594ada67b1a7d5391766c32b18caeb1177f302d71ff873b4f3f3f9284521fb5a292166ff70694725fb4dfd89343a9e53c523f03fa7631ae0e5b0cb8b65eda0c28f418dfd7913ec220f59c3c4a4ab654f78a9e7af2e9b660e9b09bb7dcfbb69c338f0275cf2d1c102de9bdba529e937eb541419bb82dc9693430492b82fe4dcecd0919e938bb7023f30bc0afc05308576aa57c3bfc809481dab42dde890448d3ed342e289437d77af23e78337574476a16018b681416c5bb58f0380e6c39612a83cc760f9c48d7f88248c908830a174d2fe8378a1490ae5de5942890018e88ba91fc3b45f4627f12cbbf31adbe221dc3723c10b1cdb4edfa0a24f127332fd01e7a99e2423d7348ea878faac161f5db44b432beb60448dbe71df4b5e8c94f4d4faa2271471709f76c15aa90dc607c2b9feaf94f1e08b703f14a52ae592fc901b00aa3277564d8d06693e28218c4277848c49462f1aaebb1336327b30a180eca8019ef43da943d7bb5ab91a0bfef2e048b75fe42eda1dce9eed9d8705aa3b7d518f250e7f18229e481fa4ee756b952809d9fe960f7460d7054856e8c3e51fc23fa4fadf0ae9a44074cddc47dae8c16e54e903bec5962846a2b69eb7459be0ba57d357379321af87cf080270ec971b00b0350f62296e80cbbd63304442cc38933ccb5604e53661a0def2d97622e651a9c7d99b8d1d2cf987c819983fe37d3b44d59f052f7410ca77c4081ef8a1fb786b6ab4a5245d625da965a0e00f658732729402b5ec1564ff30a74577287f854c59fe43ae078fe606db7d3ee2f3dc1707a336770cef343422d9637e59f16593992612dd82fb8f389689e738d8887695db439dddc713add0b283f43a9cf5a6497c7c0e100491db4da1c79caf4ea2324120fe3a71e8b6e39f3354f48a3b9b1039e4d9c116a3154e168b3d7f2dd06079db5935ea991b8c9388885cf904a22aad68808511a84ed28e29751a5f0fd797c5aa942b219dd92b0bc877e94981526a6c6f851895abf770f3160e361b020c95390c7be7fd80c6adf5b515830afe1f3b3047fcce09d71319c4ad3fa9be8a45b75ec33aeed89b1c8e1660aa6136fbf12b773ac1a1f645a7bba0b57d163d430b9fdf75819b13977c061e21efcd318a3d7097a628a75582962e9d5e6fe51ef097f028887dc8031e176266c61df7f829220ddfbe38e3ea5a38080c1f83027a15bd7c64a8909b0dcc6bb72f566d25226023749e95e38f9ee109b283e26e60f5d375fb824b3e5166a04719135bed1888e7485c683a13daecda06daa76f1f6279a9a5112e1cd9ffda7b592a7b9ba39196ad5601fcbc52ddb233df4a9742439b833b8fe2dc2e552886a0ac8c8bd20130650819d386b88aece27171f7f5198706d6e708680497ecd697caba769915a44655bfe08200de3485c1fc26d612668c2adb61d6e310501a3c72f4a61df368fdb4779ac220a010219fd7dc49e2144ea74d27c5b346b757e529854d7d4aed403d4c2e3fc3f836fa7641c02309a5749eed9d2061ce703cd0495562ab978b54feff4ed7f866cae68a3235a1ae9b349f505dd6019069058b0b031e72ef79ac18c697470a990e6f67ed13fb4fb2e0c9197d0fc2d6026f98fbc108779244dd1f17832305a66d0be580dea53ca514b7d70f1a275a477beb14637fed5a41f9b94b1eca4882e0d39b1ab4c732eccd6d76d85312158aca7f35cc97c80fe0bb89577d2b49c647c61021262c48aa53489b3277da2d999ddfa3ba5c24a7a6b55ecb386597387e8b91027218a1f971adfd4adff89d1453137426206a6d5a042f1edd78ca5e9ab3753f7d9c744b90e52bd4c1c7244778735cc45f2287cb444b533db10755aa9c27f0de8a201fb64c608ad57cce6050eb76585e3ad50d04b2d273d286c10f5a9a21f88b4f9d0ec839ae432c85b55c2894a8bdc92dafc58e11790ad0be2cb19539b184c202bbd0405cacf9542a9b1a6195ecc49a1638edd4f9882792cbb90eeb094a314d0383074f24785e0a38736a6d876831f64e5d347dfea6a84acc771e9d1d022f837989bad2ac63c7a489f1b56a91dcb2989e500fb3455240a93914a62eb03747eafde3d4628b579ed1b54bdb6f89aabc2b4c1bb3616a9a01039fa455c3c7361285280022864882939f65a5efc4b6aaf8254613a0357be95c2946655b8430b5e9c0ca281d16b037c652fe18000ca23636a0bf6068a2a0c96bcc815e52f648a8d864ee22b94056213dd4bfb90c7f31a2fed7d6e234b7931308458ff357760531cc183eccd5db3938947ff96ce365d6b4fd5a6222bd6ed2661137d2a3b8c5264920488b4e5fd5bfa140e72a9040f04c86e95a7549632825763246c165785aaed21b046e0e6fd85b3b584aac713d9dd8a67aa31b83cfe78879eb09a1b3c8696cc6403a6d0943bea0344856e5f1067efaf313bffc8f04c5d5bae6b72e261a8bf1e8d75ba6fdb7fcc730a1f39a022e233e731d5a5a86efa56b02f9d3aec4636e928f512927219c8206a73f25bb66b36ffb218d9e604c63927392c48d58b0b4ba0d398bdbc050d8676868b6b9a01eb86da9cb70690696cfe526a0e35faa7b4359c2ea0c46d1d59ca14d0402070ef928708fd6888c1f3a5760f71b8ff90d154044fdbd340159ff842e294100532588806bc928a5f238a92a2fef585771e8b3bb8e195bf47ae6d67e4e440e4ae30ef6eb2138831d8f7b1309942102def1fe703aed183d55637a950fbf98a05baf0531c663d0f72045d96b0312bacf0def1babdbd7cfc131ba401a4bf985cba660befdec6d122a8f6dda22875537ab04f683979640307fc5266bcccf5172df0f01423897b068b682fd8494c2a174eed37dbc98ed376d7fc010dd61d6041dc90d22571931eac6c485af865baf9b28bee1fb9cda03d0721ab507182b2f1ff63b474e8f1e1b5686cfd21a2bc0141dc9a911efce464d78a4f1b67e4cdaf94b3cb572989b85dacd048f0548628546f74b4e07a1ab54ccffb6a26bb08c31b09fe38aaaf5aefce9f6efe5e28a250a250017756a46b8711cb111b2f9601a45bfea57a5bb4599f8c06db4400ca3db5f791f17bfdacc3151fd33da10e7fba224635fc55ed78eaafaef6c8017153c45bf4c92c2a0f5db925cb7db959d0f6f02af364c5b5f4f074bff11a29cbd2b93dcfd892e5fa703791467b302b642730aac3a08470678922f96d487d2c719ca4a7fdef4e4d7a515d076ca93469273cae10bf46d2deccd397feeea36c5ddd812dba4ad496e8df8d2aee61f82aea106fee2a8ca1a4fcf6115d7fca348fec385caa1861ce0f4cadce26574a99a0d3f6e2b8917e3bcdb5e7b9cbbe1fc698bfbb24c11053c70544e3699216cfef46d4c65b83c79ff074dae7a63c3086ec4b8114430cc0cffd42432a817f3a653b6f7306bc1a2dafd718d68ce3f0a6570eeb68c921bfff6da2ad68b4b0555b0dd529357c096de8967f0b61319b6d9b569c28d0a62ad072609855a7b5557e493fb3fdd29c4286f2bd9ed75d3d2f41b6422c880f43b8f48183cdf1594a2c127cb077d3b0e8128126a4b4bcd3c9a8a127fff98fb95c3c1ee2db5ce2949d57a80afc1b1a0001c7d44df7f8e8d9523542b023d3e643dc2c9944c0f0727fceaac452bbac1f6970f9252f5e096cf3a246981acc28c94c92064d915302f41fad467996f82e3797e98bc367e457e63d3d9ee349e0c5a02c3b25ba01dda9521ca31e94944df23d6fbbbd32972db409e2d5b58e04aaee9bb31d2053e88299a300c807600ad0c3f36c2d64b58f72c1fda6f79f6a701b1aa3db70285ed62ef1b3b368abe0d50a2f993b8330068dae025679c0de390eb9b9a57125d190963c06f3c042abb623e7259892f66133938e6a978e5164af6e17df22fc30c4e4d7950d9f4fb3e19bc9c70d3ea33fdaba98dc81736cb4fe86b208b65318b0b250361d36a537d0766bb647d23731c7dbf7412810593882164257b8f3e31c71548c3042c02513e9b0ef687ba18c4014d31dc33824b52773bf1e8343d6d5eb3c2936f507f1ef6763d9d7df96fd532d73c3b01031d7725ca9d03fe6df755aa9348d32c05633a4608e9aa550f3142ec868ea357948af871ff03a1d8338ba501af1e9777c6cc39ce86f00a3f0fcd4d8ab230c4ae08a26969a1125862a3e60af2cc9d77c165e820daa751df6b409bcee9abe28b9dc11fca79b6c336aff9ba2ee555f44405a55b44739e353f409feff8e6bcca9993086b1e0db667fdc3c0f33a7acd603220390d1adc10fd09e15a9865228b84af194aeaee32c32a488f3d7b37508c5ffd9283b8ae9271c0a5a938731ebcf211e9ae6b62898d6d23e11c1536fa3dd5b974d57da7db80e8d015f810bb6c57f5ff84749cf191d62422a67319403b0d0f90854a091297e0054853bcefa1687bdfdbd4fdba9c4c4b90f0401d7d926b6b06a92a68b6d146c0fb451da3c02fa755c7009db2ab93f0cf795d14ac923da580bf4022ef66aba2f56c9b48dd92f5823c0141719d685d9b73e2f081a7018c6216bb2719d9ee27f4644e08bbc7e5876f799b78c3e606e44bf4b495867d77aaae92ac0782a978564184aba01c8b8f2d912aa1391dc6e0e5e971cef71579ff899b3ab8c20921bc92ab1a9e3c789adff039fd4108b9294c48d77a4617a41ba304d62c3511720208662614cd7127a922271eef939cc8c882b9204a9055619134c2da311a0b2b4d7edaae9db828862f9e7eb029a3f8f2bdcc1710c09723d6f77612db2f54444cfdd566e69d144ddf32e3fd3a7f0aab3a13122049633ffda3843844d2f38704ef46d114efb952f7bbb48aa10577d8b61d3ce9cc64cee25f6a9932fe517e6b1fd391eeade52f5a88439c66aaf1a6dde12c6661b20e2a215e838d0af05435fea4b0c21c875401a1806e8b16d6cf3952e6382cf7654dbef1420719bf4b21f2b27ea4d959313a44ee5efa95aeca8725114f5f272470d830884d785007242f403948a0d4932aa47071c93625373d045d6b7d7001c415fc4c3ce6af1c70daf2f68ac8ca2f016d238edc2572e4b761f"]}]}, @typed={0x8, 0xdb, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x14}}, @typed={0x14, 0x111, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x16, 0x36, 0x0, 0x0, @str='/dev/snd/pcmC#D#c\x00'}, @generic="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", @typed={0x14, 0xd6, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}}, @nested={0x4, 0x15d}, @typed={0x8, 0x72, 0x0, 0x0, @pid=r6}, @generic="2be28c935cdf71511f4a3a54e498a11380d8365a6737f39f306767e3d230e3d1a9694690fef022fa36361c9b5874b0a1d8412d6af7c6e67876e09841e77eadf90ad42e3ab7ab048e29d0499d49e6bae60366f72021cc0a59002cf6a7244d8c6de86ef3dc800ddbecf6cdba6ce454540eb040251d4eadbbfb166403f59738dd3cef82d85a39a9892efc6e1562f0ecedb7b200621708a6775700b2aa069522aabfa4657c19c86e1bc05d4e4832ef845955f8c7012d1e2349e1f57568e385c974ecd42ae165"]}]}, @nested={0x120, 0x12, 0x0, 0x1, [@typed={0x4, 0x14b}, @typed={0x8, 0xcd, 0x0, 0x0, @fd=r4}, @nested={0x3b, 0x51, 0x0, 0x1, [@generic="67553270b8462e0574b389bf3247721e4aab1320cf101d7be6e56bb10e762e656c67eaf1e36509934c167b9b3fdb251af5253226a55756"]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x63}]}, @nested={0xc9, 0x88, 0x0, 0x1, [@generic="5e12d7c340532cc90ef1aef9f908eb1ac942e32edb600e0253d87accb6639fdbd6c7b8e0c368e6c9e2a032014a6f2f7ec6fc2aa24010a9436e466f43d6", @typed={0x8, 0x98, 0x0, 0x0, @u32}, @nested={0x4, 0x12f}, @generic="166a9b132041a6baa9e929437559ccc60a25ae", @nested={0x4, 0x147}, @nested={0x4, 0x11d}, @typed={0x14, 0x70, 0x0, 0x0, @ipv6=@mcast2}, @generic="8451871efd41fdc233a53c972fa0a3f1a94748af46304d87296081c8e816472072259007f2b4760c9ced6ae522214c39dfefc6700a8143dd0b230fab14f01043fc", @typed={0xc, 0x2f, 0x0, 0x0, @u64=0x10000}]}]}, @typed={0x8, 0xe, 0x0, 0x0, @ipv4=@empty}, @generic="47c4d4e5a6db8d19614f89f905307456e9f387050d6cc28b51a804e2c025dfde4c5e18adb6c6dfe59959ae92791ca64a55bfa87ee8f8a9f982af267f5011613df81c91bd0a497ad5309f2fc6eb01ecd28f1248ed989037ed07abcef110f4dbcfeb38a1eb753ab389dd918dfcae06b6d4c7e7ddf1afb67d623d21c80b387d25db27a22943ba3b173752", @typed={0x102, 0x95, 0x0, 0x0, @binary="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"}, @generic="e5f2bfb0c6253d20261683c5ab87f6300cc3da6e01117d45bdab4c91ebe57f8ddc9c75807ba11cb55f5f885ba842dff1b9"]}, 0x2918}, 0x1, 0x0, 0x0, 0x44014}, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x40084149, &(0x7f0000000040)=0x4) 4m42.69797633s ago: executing program 0 (id=1315): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000e00), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}}, 0x40) 4m42.692706854s ago: executing program 0 (id=1317): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}], 0x20}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b7ec) write$binfmt_elf32(r8, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0xc, 0x4, 0x0, 0x100002001, 0x2, 0x6, 0x1, 0xdd, 0x38, 0x345, 0x8, 0x1, 0x20, 0x2, 0x4, 0x9}, [{0x5, 0x25bf6ba8, 0x3, 0xffffffff, 0x9, 0x4, 0xae, 0x1}, {0x3, 0x1, 0x6f52, 0x7, 0xa9, 0xf, 0x1, 0x400}]}, 0x78) close(r8) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00a2f924aabf863d"]) 4m42.406880573s ago: executing program 0 (id=1322): sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x2, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}}, 0x0) (async, rerun: 64) r0 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3", 0x2}, {&(0x7f00000003c0)="e8", 0x1}], 0x2}], 0x1, 0x40800) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv4_delrule={0x40, 0x21, 0x400, 0x70bd26, 0x25dfdbfe, {0x2, 0x14, 0x20, 0x0, 0x5, 0x0, 0x0, 0x8, 0x14}, [@FRA_SRC={0x8, 0x2, @broadcast}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x4}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}]}, 0x40}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 4m42.205318203s ago: executing program 0 (id=1329): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket(0x2, 0x80805, 0x0) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000040)='./file0\x00', 0x311) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60840, 0x8) shutdown(r3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000003680)='./file0\x00', &(0x7f00000036c0), 0x400) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r7 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffe) syz_open_dev$vcsn(&(0x7f0000003640), 0x6, 0x100c0) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r7, r8, 0x0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r6, 0x1}, 0x8) close_range(r0, r0, 0x6) recvmsg(r0, &(0x7f0000003600)={&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000080)=""/171, 0xab}, {&(0x7f0000000140)=""/114, 0x72}, {&(0x7f00000001c0)=""/20, 0x14}, {&(0x7f0000000200)=""/137, 0x89}, {&(0x7f00000002c0)=""/21, 0x15}, {&(0x7f0000000300)=""/94, 0x5e}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/184, 0xb8}, {&(0x7f0000002440)=""/195, 0xc3}], 0xa, &(0x7f0000002600)=""/4096, 0x1000}, 0x2100) 4m42.088742944s ago: executing program 35 (id=1329): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket(0x2, 0x80805, 0x0) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000040)='./file0\x00', 0x311) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60840, 0x8) shutdown(r3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000003680)='./file0\x00', &(0x7f00000036c0), 0x400) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r7 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffe) syz_open_dev$vcsn(&(0x7f0000003640), 0x6, 0x100c0) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r7, r8, 0x0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r6, 0x1}, 0x8) close_range(r0, r0, 0x6) recvmsg(r0, &(0x7f0000003600)={&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000002540)=[{&(0x7f0000000080)=""/171, 0xab}, {&(0x7f0000000140)=""/114, 0x72}, {&(0x7f00000001c0)=""/20, 0x14}, {&(0x7f0000000200)=""/137, 0x89}, {&(0x7f00000002c0)=""/21, 0x15}, {&(0x7f0000000300)=""/94, 0x5e}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/184, 0xb8}, {&(0x7f0000002440)=""/195, 0xc3}], 0xa, &(0x7f0000002600)=""/4096, 0x1000}, 0x2100) 4m5.028103746s ago: executing program 4 (id=1697): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000001700)={{0x2, 0x4e20, @empty}, {0x1}, 0x0, {0x2, 0x4e23, @multicast1}, 'veth0_to_bridge\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x16, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000540)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m4.105310044s ago: executing program 4 (id=1709): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)="05", 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvfrom$unix(r2, &(0x7f0000000580)=""/198, 0xc6, 0x400101a0, 0x0, 0x0) 4m4.006692764s ago: executing program 4 (id=1710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r7, 0x6, 0x8, 0x0, &(0x7f0000001040)) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x3, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x488d8}, 0x20004804) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0xb}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x488d8}, 0x20004804) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_tcp_buf(r7, 0x6, 0x8, 0x0, &(0x7f0000001040)) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x3, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x488d8}, 0x20004804) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0xb}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x488d8}, 0x20004804) (async) 4m3.85755991s ago: executing program 4 (id=1712): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$getregset(0x4204, r1, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/128, 0x80}) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 4m3.795780959s ago: executing program 4 (id=1714): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x100000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x3022d6e144aa3cee}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28a43, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m3.657300469s ago: executing program 4 (id=1719): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r5, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r4], 0x68}}, 0x0) r7 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000149000/0x1000)=nil) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x4c002, 0x0) (async, rerun: 64) shmctl$SHM_STAT(r7, 0xd, &(0x7f0000000080)=""/49) (rerun: 64) 4m3.503480087s ago: executing program 36 (id=1719): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r5, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r4], 0x68}}, 0x0) r7 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000149000/0x1000)=nil) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x4c002, 0x0) (async, rerun: 64) shmctl$SHM_STAT(r7, 0xd, &(0x7f0000000080)=""/49) (rerun: 64) 3m56.341787173s ago: executing program 6 (id=1800): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x101200) write$sndseq(r1, &(0x7f0000000140), 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="a95cee00400000fbffffffffffffff00", 0x10) (async, rerun: 64) io_uring_setup(0x1b7b, 0x0) (rerun: 64) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(ecb(fcrypt-generic))\x00'}, 0x58) (async, rerun: 64) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x10a) (async, rerun: 64) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'hsr0\x00', 0x0}) (async) r7 = socket(0x1, 0xa, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async, rerun: 64) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) setsockopt$bt_hci_HCI_FILTER(r8, 0x0, 0x2, &(0x7f0000000040)={0xc, [0x5, 0xfffff000], 0xe}, 0x10) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r4, 0x0) (async) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000140)={0x1, 0x1, 0x200, 0x9, 0x7, "7883ced0d9ae83c1"}) (async) syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) (async) write$P9_RVERSION(r3, &(0x7f0000000c40)=ANY=[], 0x13) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r10, 0x4) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r9, 0x0, 0x30, 0x0, @void}, 0x40) 3m56.186680942s ago: executing program 6 (id=1801): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0xc4c03d12, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={r0, &(0x7f00000000c0)='\x00e\xc2\xe0\xa8~\xc8W\xa9\x85\xe1\xe3\x84\x8a\xd6Omn\x16L\xc0\x13Y*\x046TK\xd7\x1d\x1c\xda\x89\x16\xffm\xc5yT\xd8\xf2', 0x2680, &(0x7f0000000080)={@align=0x9, {0x0, 0x3, 0x80, 0xffffffffffffffff}}, 0x2, &(0x7f00000001c0), &(0x7f0000000100)=0x1}) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000180)={0x0, 0x8}) 3m56.186335047s ago: executing program 6 (id=1802): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@newsa={0x138, 0x10, 0x713, 0x70bd2d, 0x25dfdbfc, {{@in=@private=0xa010100, @in6=@mcast1, 0x4, 0x0, 0x4e21, 0x1, 0x0, 0x0, 0x0, 0x2e, 0x0, 0xee00}, {@in=@remote, 0x4d6, 0x32}, @in=@initdev={0xac, 0x1e, 0x8, 0x0}, {0x6, 0x0, 0x0, 0x100, 0xffffffff00000001, 0x0, 0x3f, 0x543}, {0x4, 0x7fffffbfffffffff, 0xffffffffffffffff, 0x1000}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x890}, 0x2014) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa001780c4aebfd41de83eaf2ffc9e61372afa07c775b66c038356b136cf99c47c302ced4ffc860869b1b641ac1106023a69", @ANYRESOCT=r1], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x894) 3m56.067098805s ago: executing program 6 (id=1803): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0xd895, 0x3, 0x1, 0x9700}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r4, @ANYRES64=r5, @ANYRESDEC=r5], 0x2d) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r4, r6}, 0xc) 3m55.987873057s ago: executing program 6 (id=1804): r0 = socket(0x3, 0x0, 0x3) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x4, 0x80000000, 0x2}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x800b}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 3m55.67759114s ago: executing program 6 (id=1805): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = signalfd4(r1, &(0x7f0000000080)={[0x80000000]}, 0x8, 0x80000) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x4}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r1, 0x12, 0x1, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r1, 0x5, 0x0, @val=@tcx={@void, @value=r1, @void, @void, r3}}, 0x1c) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r4, 0x4) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d00)={0x34, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040894}, 0x4040094) 3m55.536654555s ago: executing program 37 (id=1805): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = signalfd4(r1, &(0x7f0000000080)={[0x80000000]}, 0x8, 0x80000) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x4}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r1, 0x12, 0x1, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r1, 0x5, 0x0, @val=@tcx={@void, @value=r1, @void, @void, r3}}, 0x1c) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r4, 0x4) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d00)={0x34, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040894}, 0x4040094) 3m41.176771369s ago: executing program 8 (id=1966): prctl$PR_SET_ENDIAN(0x14, 0x2) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000200)='GPL\x00'}, 0x94) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000140)={0xb, @pix_mp={0x8000, 0xb0, 0x3234564e, 0x1, 0xc, [{0x4, 0x15b8}, {0x0, 0x5}, {0x37f0a749, 0x3ba}, {0x7}, {0x0, 0x7f}, {0x2, 0x8}, {0x1ff, 0x7}, {0x2e09, 0x4432}], 0xf, 0xb9, 0x7, 0x4, 0x5}}) (async) r2 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$unix(0x1, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x7fff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x1, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x200000000000011, 0x2, 0x0) (async) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000480)=0x81, 0x4) accept4$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, &(0x7f00000003c0)=0x1c, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r8, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x9, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000200)={0x2, @vbi={0x3ff, 0x58, 0x6df9, 0x3234564e, [0xa, 0x6], [], 0x108}}) (async) r9 = socket(0xa, 0x3, 0x3a) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000300)=@multiplanar_mmap={0x1, 0x1, 0x4, 0x100000, 0x5, {0x0, 0xea60}, {0x4, 0x10, 0x1, 0x5, 0x0, 0x5, "1c2f52c6"}, 0xdab, 0x1, {&(0x7f0000000080)=[{0x0, 0x5, {0x6}, 0x7}, {0x2, 0x6, {0x80000000}, 0x7}]}, 0x0, 0x0, r2}) (async) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0xfffe, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) (async) r10 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) setsockopt$inet_udp_encap(r9, 0x11, 0x64, &(0x7f0000000400)=0x5, 0x4) ioctl$NBD_SET_SIZE_BLOCKS(r10, 0xab07, 0x80000000) 3m41.09714053s ago: executing program 8 (id=1967): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x4) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x3) (async) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)=0xb) (async) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x400203, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f0000000140)={"1897d06852260181097bfe039ad65618ecd8f768126fca7c0c95a1d7fc27", 0x4, 0x2, 0x401, 0x3, 0x80000000, 0x2, 0x8, 0x0, [0x80000001, 0x6, 0x4, 0x3e, 0xc, 0x2, 0x5, 0x5, 0x4, 0x0, 0x9b, 0x80000000, 0x4, 0x5, 0x9, 0x9, 0x8, 0x13da, 0x10000]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) (async) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) (async) r3 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2002d3}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3m40.964551847s ago: executing program 8 (id=1970): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) (async) r2 = socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040), 0x82800) (async) r3 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x400) ioctl$RTC_WKALM_RD(r3, 0x40187013, &(0x7f00000000c0)) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x10220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xff81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 3m40.876997769s ago: executing program 8 (id=1972): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x108343d, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x18f887, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071181300000000009500000000000000cd42bac97f066a0838a05f31974b4ccf7a84cf7ccafae01486fbddaf34ae92597450ffab0d3b63e7da7ee504bb5d8adf723ef209cae3f0e8b3c9c3cfbe171f7ad8b39cffbfc55cac70454661a7c546487e56cfc3233d1ffb934cd0f2933400eab9faf3a64343e5ced36aca9f5bb005fc3fcd3835400e78c34075e9af3ea433e3caf59f2db58c937680dae2e1f8a237d8fc60d5927704f23caec02070cfdf355f7f66cea0f70b5585ba2cec9c785db0f656946e8e0bab9da3bb4e7ca50532ed6152a9eff8a13d6a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x1005848, 0x0) 3m40.76717357s ago: executing program 8 (id=1973): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') (async, rerun: 64) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (rerun: 64) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f00000000c0)={0x3f, &(0x7f0000000100)=[{0x41, '\x00', @data=0x63, 0xd6}, {0x43, '\x00', @buffer={"cb5b2d415569a6e4ad54000100f8ffffffffe6ff00000600", 0x20}, 0x8}]}) ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f0000000000)={0x7fffffff, 0x0, @vsb={0x3}}) write$binfmt_script(r0, 0x0, 0x0) 3m40.517348329s ago: executing program 8 (id=1974): r0 = socket(0x2, 0x80805, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5, &(0x7f0000000000)=0x2, 0x0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0x5fa}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) socket(0xa, 0x2400000001, 0x0) shutdown(r5, 0x1) syz_usb_connect$hid(0x6, 0x0, 0x0, 0xffffffffffffffff) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16, @ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x4004080}, 0x4002) syz_kvm_setup_cpu$x86(r7, r6, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000700)="0f20d86635200000000f22d8b838078ee80f604c8b660f388229f3650f0d630abaa000b000ee0f01df3e0f01cb66b9800000c00f326635004000000f3066b8010000000f23d80f21f86635400000d00f23f8", 0x52}], 0x1, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000040601040000000000000000070000fc05000100070000000900020073797a31000000003525ea28b89a0450573c030de9c10eda2d76c5b2dc0e83e0c067cd6956762518ff034148b04c883774564bbdc264718a66214427fe6600de895be7781ec65ba4e1f80ed2c68eaf553453b7a9404e0cb2a94ee539d11ce8ccad47ac81b4bd82e3755a903353f84e5dd70b6fee56b0df148bf609bb521930ba916f0ccebe48ba1efb9cf4d04ef0b5a8cf490c3ebe2ce132df2fc9fc8436500c002e4e45f20b49a9f92317ea1a2cc3b9c11611e1789b73492cf9f2b9e5250b2649e4a151b136d2"], 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x14000010) sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000080)={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="f1", 0x1}], 0x1}}], 0x1, 0x10048085) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x7, 0x4, 0x3, 0x4, r9}, 0x10) 3m40.388692662s ago: executing program 38 (id=1974): r0 = socket(0x2, 0x80805, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5, &(0x7f0000000000)=0x2, 0x0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0x5fa}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) socket(0xa, 0x2400000001, 0x0) shutdown(r5, 0x1) syz_usb_connect$hid(0x6, 0x0, 0x0, 0xffffffffffffffff) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25090000002c00018008000b007369700008000b0073697000060004004e220000080005000100000008000b0073697000080005006d3f00000c000280060002004e23000008000500ff7f0000180003801400020074756e6c300000000000000000000000080005008000000024000280080087000600000005000d000006000f0088d5000008000600000400002400018014000300ac1414bb0000000000000000000000000c0007000500000039000000f3bfce26bb91c4e1aa02b531de11ba8f6fb52cc90cfc57e1d262c231546837ac73e8a29beaa1242e2e6faff7440d6c01f4334d335f3611ae5d9d44bcb8a9f4c32aa7524aebca81d2f65f0e632e7879e5c7f48db673e4929be054ebe01842da91bd804cf9cbdb199f5da8ab0a7e714ed215528be5"], 0xc4}, 0x1, 0x0, 0x0, 0x4004080}, 0x4002) syz_kvm_setup_cpu$x86(r7, r6, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000700)="0f20d86635200000000f22d8b838078ee80f604c8b660f388229f3650f0d630abaa000b000ee0f01df3e0f01cb66b9800000c00f326635004000000f3066b8010000000f23d80f21f86635400000d00f23f8", 0x52}], 0x1, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000040601040000000000000000070000fc05000100070000000900020073797a31000000003525ea28b89a0450573c030de9c10eda2d76c5b2dc0e83e0c067cd6956762518ff034148b04c883774564bbdc264718a66214427fe6600de895be7781ec65ba4e1f80ed2c68eaf553453b7a9404e0cb2a94ee539d11ce8ccad47ac81b4bd82e3755a903353f84e5dd70b6fee56b0df148bf609bb521930ba916f0ccebe48ba1efb9cf4d04ef0b5a8cf490c3ebe2ce132df2fc9fc8436500c002e4e45f20b49a9f92317ea1a2cc3b9c11611e1789b73492cf9f2b9e5250b2649e4a151b136d2"], 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x14000010) sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000080)={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="f1", 0x1}], 0x1}}], 0x1, 0x10048085) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x7, 0x4, 0x3, 0x4, r9}, 0x10) 4.682518239s ago: executing program 5 (id=4522): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xb8}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="0700000000000000bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6057761ab0f200736ceae852a03caf381f413af6c96075ecb03b216edfcdf6142457f010d6404620000000000", 0x71}, {&(0x7f0000000600)="1a13a7837ea8ca56a91f616de628b8b1b2107d046bccc3025bbe70905237ffee5666e0e28cfda9249a7beaeaab10864089fb7c447ce7416d", 0x38}], 0x3}, 0x41) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000500)=0x2) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x5, 0x12) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x3c, r5, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x3}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async) r7 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$sock_SIOCOUTQ(r7, 0x5411, &(0x7f0000000300)) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_reply}}}}, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4.587501238s ago: executing program 5 (id=4524): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f0000000600)='./file0\x00', 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2003}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0500000000"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142c00fe8000"/36], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20, 0x28079}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="087934e9cff9"}]}, 0x44}}, 0x0) 4.431964933s ago: executing program 5 (id=4526): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f004, 0x2}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x454}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00') fstat(r2, &(0x7f0000004800)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000007919b800000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 3.978473527s ago: executing program 9 (id=4532): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x5c, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x3ffe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x1, 0x16, 0x20000000, 0x4, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x404c451}, 0x8000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e21, @broadcast}}}, &(0x7f0000000680)=0x84) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000004000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005"], 0xfc}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff7, 0x3}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3.882631678s ago: executing program 9 (id=4533): syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000100)={0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}]}) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.421131082s ago: executing program 7 (id=4557): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) request_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000005b00)={'syz', 0x2}, &(0x7f0000005b40)='(\x94\xb7aE)', 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r2, &(0x7f00000010c0)=[{&(0x7f0000000380)=""/245, 0xf5}], 0x1, 0x40000004, 0x6) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0x2, 0xffff}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8805}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000700)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0], 0x0, 0x85, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=@newtaction={0x94, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x80, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r10}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x15, 0x20, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, [@generic={0x4, 0x6, 0x4, 0x2, 0x100}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x2, 0x0, 0x3, 0x3, 0x9, 0xc, 0x10}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @alu={0x7, 0x1, 0x2, 0x1, 0xb, 0x10, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @alu={0x4, 0x1, 0x6, 0x3, 0x3, 0xfffffffffffffff8, 0x8}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfa}]}, &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x1e00, 0x40, '\x00', r4, @fallback=0x1e, r7, 0x8, &(0x7f0000000680)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x401, 0xffffffff, 0x3c}, 0x10, r8, r10, 0x3, &(0x7f0000000a80)=[r0, 0x1, r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000ac0)=[{0x2, 0x3, 0xf, 0x5}, {0x0, 0x3, 0xc, 0x7}, {0x5, 0x2, 0x2, 0x7}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xf6}}, &(0x7f0000000040)='GPL\x00', 0x7, 0xc8, &(0x7f0000000400)=""/200, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) 1.372324902s ago: executing program 3 (id=4559): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3732}}, './file0\x00'}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x2a200) ioctl$MON_IOCX_GETX(r3, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x2, 0xb, 0x8000000000fffc, 0x2, 0x1, 0x386, 0xffffffff, 0x120, 0x2000, 0xa8, r1, r2, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, r1, &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getqdisc={0x34, 0x26, 0x8, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0x3}, {0xf, 0xfff1}, {0x1, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000000}, 0x40044) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET(r4, 0x4b4b, &(0x7f0000000000)={0x4, 0x0, 0x3, 0x1d, 0x100, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c00010006"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) 1.37023286s ago: executing program 5 (id=4560): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback={0x200000000000000}, 0x10}, {0xa, 0x4e1e, 0x800000d, @mcast1}, r1, 0x5}}, 0x48) 1.268374991s ago: executing program 5 (id=4561): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="410402cc559c7b51a62ab618a20085f23836b0565ae4ede0932cb601000000010000003a57f556f7e82155ac4b1e162a97c6"], 0x7) 1.268050633s ago: executing program 7 (id=4562): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, r1, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) 1.182775026s ago: executing program 5 (id=4563): r0 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x4a000200) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c) listen(r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) accept4(r1, 0x0, 0x0, 0x800) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="2800000014001102000000000000000028001100fa"], 0x28}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000300)={0x81, 0x0, r0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000440)=@raw=[@jmp={0x4, 0x0, 0x0, 0x1, 0x7}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x8}], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4}, 0x94) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x80, 0x3, 0x0, 0x717e387b, 0x42, "1ae34e0626b2fb12daba40794233a5bd00", 0x4, 0x2}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r5, 0x404c4701, &(0x7f0000000040)={0x1, 0x1, 0x1, 0x9, 0x5, "3eccd8000000000000000010000000040100"}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r6, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xbf}], 0x1, 0x182, 0xffffffff) write$binfmt_script(r6, &(0x7f0000000200)={'#! ', './file0', [{0x20, '/dev/ptmx\x00'}, {0x20, '\x00'}, {0x20, '-@^^${^)%#*+*\'+$/!:@\xb9!\xa4!$-'}, {0x20, '/dev/ptmx\x00'}, {0x20, '\x00'}, {0x20, '\\#'}, {}, {0x20, '++'}], 0xa, "f8b03bcb1c9f5917aee17c14f3f19f36de921bc9d4b28367edb585b8e9b63ed33c0a2a8a47a194db1862881d00eb02674af69ed5871a9a540c78023462219f9d917dbd487bf7d5e8d07810efca8e30fe2cccce50976656dec71f8fbe"}, 0xa3) 1.182566033s ago: executing program 9 (id=4564): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1c, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240008e4) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') utimes(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x0, 0xea60}, {0x0, 0xea60}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000080000000400000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffc01, 0x0, r1}, 0x48) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) 1.181208344s ago: executing program 7 (id=4565): socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="2cd20000", @ANYRES16=r2, @ANYBLOB="01002dbd700000000000020000000c00990001000000010000000800010001000000"], 0x28}}, 0x8000040) r4 = socket$inet(0x2, 0x3, 0x9) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14eac6ef2df836cdbecd3d0084000000000000000000000007001df04304f1f100000000"], 0x18}, 0x24000800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r6 = getpgrp(0x0) r7 = syz_open_procfs(r6, &(0x7f0000000100)='children\x00') read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r8 = openat$bsg(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$BSG_SET_COMMAND_Q(r8, 0x2271, &(0x7f0000000140)=0x1) (async) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r10, r11, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000440)={0x50, 0x0, r9, {0x7, 0x29, 0x0, 0xffffffff9046dce8, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) (async) ioctl$KVM_SMI(r7, 0xaeb7) (async) r12 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) ioctl$TCSETSF2(r12, 0x402c542d, 0x0) (async) ioctl$FUSE_DEV_IOC_CLONE(r12, 0x8004e500, &(0x7f0000000040)=r12) ioctl$TIOCMSET(r12, 0x5418, &(0x7f0000000080)=0xffff) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @initial, @device_b}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x4}, @device_b, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x78}}, 0x4) (async) r13 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r13, &(0x7f0000000000)={0xa, 0x4e22, 0x2, @mcast1, 0x5}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 1.036157922s ago: executing program 7 (id=4566): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bridge_slave_1\x00'}) r1 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000580)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\xfb\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^\xbb\x06\xc92\x01\xd92\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8v\x10\xe1R \x9a^\xdfqpc\x00\x00\x00\x00\x00\x00&>\x94\x882\x1c_j\x15{ \xf08\xdf\x84\xe64{4\x81\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xa3=\xab\xf1\xf5\r\xb6\f\xfcS9\xae.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/', 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0xffffffffffffff18, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}}, 0x14}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000ac0), 0x40001de, 0x10002, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x68}}, 0x0) 979.533192ms ago: executing program 9 (id=4567): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) syz_open_dev$loop(0x0, 0xffffffff80000001, 0x1680a2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x10, 0x0, 0xfffffea8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) socket$inet6(0xa, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) shutdown(r2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x9, 0x10}, 0xc) r4 = semget$private(0x0, 0x6, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) readv(r6, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) ioctl$SG_SET_KEEP_ORPHAN(r6, 0x2287, &(0x7f0000000180)=0x9) semtimedop(r4, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000b80)=""/4119, 0x1017}], 0x1}}], 0x1, 0x4002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x6000, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f086dd47e0886411000500ff810057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 502.076972ms ago: executing program 3 (id=4568): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x170bd25, 0x25dfdbfc, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40848}, 0x4004810) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @empty, @local, {[], {{0x4e23, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xc, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) 501.133447ms ago: executing program 3 (id=4569): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181403, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000140)={0x9f634221288b0807, 0x0, {[0x6, 0x0, 0x7fffdff5, 0x800000000005, 0xfffffffffffffffd, 0x4, 0xffffffff7fffffff, 0x2]}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 252.901906ms ago: executing program 3 (id=4570): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback={0x700000000000000}, 0x10}, {0xa, 0x4e1e, 0x800000d, @mcast1}, r1, 0x5}}, 0x48) 252.733362ms ago: executing program 3 (id=4571): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="410402cc559c7b51a62ab618a20085f23836b0565ae4ede0932cb601000000010000003a57f556f7e82155ac4b1e162a97c6"], 0x7) 147.487943ms ago: executing program 7 (id=4572): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000002080), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000002180)={0x5, @raw_data="c1a21ddfb318c2836cfd949038aa7bc75a2f9c13072c603a03b4841d8fe98ad10de911e9cbc86b7cb651f219c89725f226b63d564da1bc6f019b2dd0f38a570ef8d4dbff6c5b1a459a39bc672e08bd6c93c5b41fb7a10026422bf146785806e191787aa8254247b7272378b20f575fe93bf88ab80d88c5e2848aa38b11b936d9208e8cf5b431d6b29ef220e38f2324d80b54468ec244f85480ef5291b18ce48c5651e6cd8bbbbca2c748c4eb3cc5645c4ffe944e1465d85aeb8894bf15db71eb4d4eb61996670a84"}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x20203143, 0x0, [0x2], [0x800], [], [0x0, 0x0, 0x6]}) syz_open_dev$loop(&(0x7f00000002c0), 0x3, 0x280a00) close(r0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0x5d22f5f6fd534cd7}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = epoll_create(0x5) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c0012800b0001006970766c616e00000c000280060002000100000008000500", @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) getrandom(&(0x7f0000000900)=""/4096, 0x1000, 0x3) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1, 0x80000001}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f36f0c7eb2700d609bcf41076d88144448ebe7994dd1b33d7c8787734cc315672f62261ceeede940774fd94d2767288cfb3a20882449d601ff878eedd3d57c9eb3a723b62102bd534c8a304a975d752e82cc8d5f969771c94a1d69cfd8694e29b9468fca5df65ece31ed7c209325604001fcd06adc3ac391f60a3523d6d0b4a8a"], 0x310) 61.13097ms ago: executing program 9 (id=4573): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffd54, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006dc4", @ANYRES16=0x0, @ANYBLOB="8b18010000000000240012800b0001006d61637365630000140002800500080000000000050007000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0) 469.498µs ago: executing program 3 (id=4574): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000800083e771f2c89ac62fb251000000800001008510", @ANYRES32, @ANYBLOB="00000000000000003c080100000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 218.995µs ago: executing program 7 (id=4575): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0xf, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8490}, 0x93) (async) recvmsg$can_raw(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000900)=""/110, 0x14}], 0x1}, 0x40000040) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, r4, 0x0, 0x1) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000001c0)={0x0}) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x88, 0x10, 0x44b, 0x0, 0x25dfdbfd, {0x7a, 0x0, 0x0, 0x0, 0x8100}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x58, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_MACADDR_DATA={0x4c, 0x5, 0x0, 0x1, [{0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, {0xa, 0x4, @random="b0c6d33e8ce8"}, {0xa, 0x4, @broadcast}, {0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, {0xa, 0x4, @local}, {0xa, 0x4, @random="62f09b5fc0dc"}]}]}}}]}, 0x88}}, 0x20064041) 0s ago: executing program 9 (id=4576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc8f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x20004000) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x5, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x181200, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000300)={'bond0\x00', @ifru_names='sit0\x00'}) close_range(r3, r3, 0x0) kernel console output (not intermixed with test programs): ass=filesystem permissive=1 [ 353.631783][ T40] audit: type=1400 audit(352.995:41692): avc: denied { mounton } for pid=18406 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 353.699288][T18561] __nla_validate_parse: 2 callbacks suppressed [ 353.699309][T18561] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3510'. [ 353.754505][ T40] audit: type=1400 audit(353.185:41693): avc: denied { sqpoll } for pid=18562 comm="syz.3.3511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 353.822852][ T40] audit: type=1400 audit(353.245:41694): avc: denied { create } for pid=18566 comm="syz.3.3512" name="#80" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 353.840052][ T40] audit: type=1400 audit(353.265:41695): avc: denied { link } for pid=18566 comm="syz.3.3512" name="#80" dev="tmpfs" ino=872 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 353.868251][T18569] netlink: 'syz.7.3513': attribute type 4 has an invalid length. [ 353.952586][T18571] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.3514'. [ 354.117748][T18585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3518'. [ 354.423404][T18597] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 354.479769][T18601] random: crng reseeded on system resumption [ 354.506168][ T5738] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 354.590008][ T5738] Bluetooth: hci0: command tx timeout [ 354.638080][T18611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18611 comm=syz.3.3525 [ 354.651221][T18611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=18611 comm=syz.3.3525 [ 354.743291][T18621] ip6gre1: entered allmulticast mode [ 354.764426][T18621] team0: Device ip6gre1 is of different type [ 355.029630][T18644] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3539'. [ 355.049947][ T5743] usb 14-1: new high-speed USB device number 30 using dummy_hcd [ 355.188599][T18646] FAULT_INJECTION: forcing a failure. [ 355.188599][T18646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.193499][T18646] CPU: 3 UID: 0 PID: 18646 Comm: syz.3.3540 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.193542][T18646] Tainted: [L]=SOFTLOCKUP [ 355.193548][T18646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 355.193576][T18646] Call Trace: [ 355.193601][T18646] [ 355.193608][T18646] dump_stack_lvl+0x100/0x190 [ 355.193664][T18646] should_fail_ex.cold+0x5/0xa [ 355.193686][T18646] _copy_to_user+0x32/0xd0 [ 355.193717][T18646] simple_read_from_buffer+0xcb/0x170 [ 355.193738][T18646] proc_fail_nth_read+0x1af/0x230 [ 355.193754][T18646] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 355.193771][T18646] ? rw_verify_area+0xce/0x6d0 [ 355.193784][T18646] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 355.193800][T18646] vfs_read+0x1e4/0xb30 [ 355.193819][T18646] ? __pfx_vfs_read+0x10/0x10 [ 355.193833][T18646] ? __fget_files+0x215/0x3d0 [ 355.193863][T18646] ? __fget_files+0x21f/0x3d0 [ 355.193892][T18646] ksys_read+0x12a/0x250 [ 355.193911][T18646] ? __pfx_ksys_read+0x10/0x10 [ 355.193931][T18646] ? rcu_is_watching+0x12/0xc0 [ 355.193958][T18646] do_syscall_64+0x10b/0xf80 [ 355.193991][T18646] ? clear_bhb_loop+0x40/0x90 [ 355.194008][T18646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.194023][T18646] RIP: 0033:0x7f400ed5d68e [ 355.194036][T18646] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 355.194049][T18646] RSP: 002b:00007f400fcb8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 355.194086][T18646] RAX: ffffffffffffffda RBX: 00007f400fcb96c0 RCX: 00007f400ed5d68e [ 355.194102][T18646] RDX: 000000000000000f RSI: 00007f400fcb90a0 RDI: 0000000000000005 [ 355.194110][T18646] RBP: 00007f400fcb9090 R08: 0000000000000000 R09: 0000000000000000 [ 355.194118][T18646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 355.194126][T18646] R13: 00007f400f016038 R14: 00007f400f015fa0 R15: 00007ffc53a7dc88 [ 355.194147][T18646] [ 355.267532][ T5743] usb 14-1: Using ep0 maxpacket: 8 [ 355.272795][ T5743] usb 14-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.277162][ T5743] usb 14-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.281551][ T5743] usb 14-1: config 0 interface 0 has no altsetting 0 [ 355.284404][ T5743] usb 14-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 355.288946][ T5743] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.295447][ T5743] usb 14-1: config 0 descriptor?? [ 355.521684][ T5743] usbhid 14-1:0.0: can't add hid device: -71 [ 355.524216][ T5743] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 355.528643][ T5743] usb 14-1: USB disconnect, device number 30 [ 355.541027][T18665] vivid-003: disconnect [ 355.548620][T18664] vivid-003: reconnect [ 355.643429][T18674] ADFS-fs (nbd5): error: unable to read block 3, try 0 [ 355.791303][T18685] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3552'. [ 355.908171][T18698] Invalid source name [ 355.910048][T18698] UBIFS error (pid: 18698): cannot open "ubifs", error -22 [ 355.912693][T18698] overlayfs: upper fs does not support tmpfile. [ 355.929114][T18698] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 355.958097][T18701] Bluetooth: MGMT ver 1.23 [ 355.968311][T18703] ucma_write: process 28 (syz.7.3559) changed security contexts after opening file descriptor, this is not allowed. [ 356.079918][ T5743] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 356.241547][ T5743] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 356.245069][ T5743] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 356.250618][ T5743] usb 10-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice= 0.40 [ 356.253558][ T5743] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.256215][ T5743] usb 10-1: Product: syz [ 356.257690][ T5743] usb 10-1: Manufacturer: 凑蛅ꪯȪᚕ쫈蘋뢥á²ì ¿ç‚ǟì¸ê”¿î¿°çˆ¿á˜„ᵳ෥顟勢枽ë‡楻赋뼬醵쟸ã¸á¨¶æˆ·âµ›ä™ê¼€ç™Š 맚괕å•ëž±ã‹°ç¼¯ë­’êžå®¾ã•™è²šãŽ‡é«‚냘å‘æŽá²¡í™¥ã¯‚딽㞆ｄ探衑娆㤵䙴䒬쟬✇둦懠ç¼à¾”ë¼ä¦ºë¹ì­¾ë¨ â’Œæƒ¾á©ƒç„ªÞƒé±—çŸã‹î”·ïŠ˜à¨‰â – [ 356.266571][ T5743] usb 10-1: SerialNumber: syz [ 356.477485][ T5743] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 356.480175][ T5743] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 356.660027][ T5738] Bluetooth: hci0: command tx timeout [ 356.694884][ T5743] usb 10-1: USB disconnect, device number 45 [ 356.728908][T18718] 9p: Bad value for 'msize' [ 356.820972][T18726] kernel profiling enabled (shift: 63) [ 356.824360][T18726] profiling shift: 63 too large [ 356.831612][T18728] IPv6: sit2: Disabled Multicast RS [ 356.834069][T18728] sit2: entered allmulticast mode [ 357.013115][T18746] tmpfs: Unknown parameter 'žpo;÷È…ýHg[ɶ¡›àoš¶§ÕðB¾“Ÿ^ŽJt%X ±ÆŸ©bªî«®é )g—KñŠ' [ 357.027710][T18732] geneve3: entered promiscuous mode [ 357.030876][T18732] geneve3: entered allmulticast mode [ 357.035221][ T46] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 357.038687][ T46] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 357.041975][ T46] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 357.047736][ T46] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 357.107004][T18756] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 357.139540][T18759] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3576'. [ 357.508656][T18778] overlayfs: failed lookup in lower (newroot/150, name='file0', err=-40): overlapping layers [ 357.575542][T18778] cgroup: subsys name conflicts with all [ 357.880054][ T846] usb 14-1: new high-speed USB device number 31 using dummy_hcd [ 358.034496][ T846] usb 14-1: Using ep0 maxpacket: 8 [ 358.038493][ T846] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 358.042660][ T846] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 358.046032][ T846] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 358.049890][ T846] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 358.053365][ T846] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.057624][ T846] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 358.060996][ T846] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.273047][ T846] usb 14-1: usb_control_msg returned -32 [ 358.273461][T18783] netlink: 'syz.9.3582': attribute type 3 has an invalid length. [ 358.274915][ T846] usbtmc 14-1:16.0: can't read capabilities [ 358.287922][T18794] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3586'. [ 358.326120][T18803] xt_l2tp: wrong L2TP version: 0 [ 358.492351][T18812] overlay: Unknown parameter '/dev/loop#' [ 358.632991][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 358.633006][ T40] audit: type=1400 audit(358.065:41740): avc: denied { nlmsg_write } for pid=18820 comm="syz.5.3594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 358.690516][ T40] audit: type=1400 audit(358.115:41741): avc: denied { create } for pid=18816 comm="syz.7.3592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 358.700941][ T40] audit: type=1400 audit(358.115:41742): avc: denied { ioctl } for pid=18816 comm="syz.7.3592" path="socket:[90317]" dev="sockfs" ino=90317 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 358.714561][ T40] audit: type=1400 audit(358.145:41743): avc: denied { name_connect } for pid=18828 comm="syz.3.3597" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 358.732673][T18831] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3598'. [ 358.741190][ T5738] Bluetooth: hci0: command tx timeout [ 358.797860][ T40] audit: type=1400 audit(358.225:41744): avc: denied { read write } for pid=18832 comm="syz.5.3599" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 358.805782][ T40] audit: type=1400 audit(358.225:41745): avc: denied { open } for pid=18832 comm="syz.5.3599" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 358.816364][ T40] audit: type=1400 audit(358.235:41746): avc: denied { unlink } for pid=18406 comm="syz-executor" name="file0" dev="tmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 358.944684][ T40] audit: type=1400 audit(358.375:41747): avc: denied { read } for pid=18850 comm="syz.5.3605" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 358.957576][ T40] audit: type=1400 audit(358.375:41748): avc: denied { open } for pid=18850 comm="syz.5.3605" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 358.970858][ T40] audit: type=1400 audit(358.385:41749): avc: denied { ioctl } for pid=18850 comm="syz.5.3605" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 ioctlcmd=0x9404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 359.004916][T18855] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3606'. [ 359.015509][T18855] netlink: 'syz.7.3606': attribute type 18 has an invalid length. [ 359.024522][T18855] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3606'. [ 359.037071][ T46] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.037140][T18855] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3606'. [ 359.042243][ T46] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.044318][T18855] netlink: 'syz.7.3606': attribute type 18 has an invalid length. [ 359.047294][ T46] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.049996][T18855] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3606'. [ 359.054884][ T46] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.095183][T18859] orangefs_devreq_write_iter: userspace claims version2090, minimum version required: 20903. [ 359.106067][T18859] team0: entered allmulticast mode [ 359.111216][T18859] team_slave_0: entered allmulticast mode [ 359.117441][T18859] team_slave_1: entered allmulticast mode [ 359.175288][T18859] openvswitch: netlink: Flow actions attr not present in new flow. [ 359.178051][T18868] openvswitch: netlink: Flow actions attr not present in new flow. [ 359.213167][ T59] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 359.951192][T18876] misc userio: Begin command sent, but we're already running [ 360.633130][ T10] usb 14-1: USB disconnect, device number 31 [ 361.011796][ T5738] Bluetooth: hci1: unexpected event for opcode 0x0c58 [ 361.071103][T18897] kvm: pic: single mode not supported [ 361.071125][T18897] kvm: pic: level sensitive irq not supported [ 361.074575][T18897] kvm: pic: single mode not supported [ 361.077286][T18897] kvm: pic: level sensitive irq not supported [ 361.228913][T18902] ipvlan2: entered allmulticast mode [ 361.233381][T18902] batadv_slave_1: entered allmulticast mode [ 361.237809][T18902] batman_adv: batadv0: Adding interface: ipvlan2 [ 361.240538][T18902] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.253665][T18902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.258375][T18902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.262952][T18902] batman_adv: batadv0: Interface activated: ipvlan2 [ 361.321451][T18908] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3620'. [ 361.389329][T18913] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 361.561277][T18917] xt_CT: You must specify a L4 protocol and not use inversions on it [ 361.604094][T18919] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 361.654706][T18922] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3625'. [ 361.658591][T18922] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3625'. [ 361.678305][T18923] syzkaller0: entered promiscuous mode [ 361.680294][T18923] syzkaller0: entered allmulticast mode [ 361.694698][T18923] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3625'. [ 361.818596][T18926] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 361.826288][T18928] overlay: filesystem on ./file0 not supported as upperdir [ 362.094070][T18863] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 362.168852][T18940] xt_hashlimit: size too large, truncated to 1048576 [ 362.230252][T18943] random: crng reseeded on system resumption [ 362.242548][T18943] Restarting kernel threads ... [ 362.251310][T18943] Done restarting kernel threads. [ 362.259604][T18943] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3631'. [ 362.283652][T18945] netlink: 'syz.9.3632': attribute type 5 has an invalid length. [ 362.293508][T18945] geneve3: entered promiscuous mode [ 362.295471][T18945] geneve3: entered allmulticast mode [ 362.298694][ T59] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 362.305317][ T59] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 362.308924][ T59] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 362.315378][ T59] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 362.318193][T18947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=18947 comm=syz.7.3633 [ 362.324797][T18949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=18949 comm=syz.7.3633 [ 362.597195][T18971] syzkaller0: entered promiscuous mode [ 362.599638][T18971] syzkaller0: entered allmulticast mode [ 362.950833][T18992] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 363.024836][T19003] 9pnet_virtio: no channels available for device 127.0.0.1 [ 363.056543][T19000] overlayfs: failed lookup in lower (newroot/137, name='file0', err=-40): overlapping layers [ 363.213785][T19014] netlink: 'syz.3.3650': attribute type 1 has an invalid length. [ 363.433632][T19035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.474144][T19035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.480131][T19037] netlink: 'syz.9.3654': attribute type 1 has an invalid length. [ 363.500846][T19035] bond0 (unregistering): Released all slaves [ 363.667017][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 363.667057][ T40] audit: type=1400 audit(363.095:41769): avc: denied { shutdown } for pid=19041 comm="syz.5.3655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 363.714117][ T40] audit: type=1400 audit(363.145:41770): avc: denied { map } for pid=19041 comm="syz.5.3655" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 363.808744][T19049] binder_alloc: 19046: binder_alloc_buf, no vma [ 363.894306][T19052] __nla_validate_parse: 5 callbacks suppressed [ 363.894327][T19052] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3658'. [ 363.903030][T19052] netlink: 'syz.9.3658': attribute type 7 has an invalid length. [ 363.906337][T19052] netlink: 'syz.9.3658': attribute type 8 has an invalid length. [ 363.909487][T19052] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3658'. [ 363.977548][T19056] lo speed is unknown, defaulting to 1000 [ 364.040951][T19059] ubi31: detaching mtd0 [ 364.064514][T19059] ubi31: mtd0 is detached [ 364.294372][T19072] openvswitch: netlink: Flow key attr not present in new flow. [ 364.379681][T19085] raw_sendmsg: syz.9.3667 forgot to set AF_INET. Fix it! [ 364.472331][T19090] random: crng reseeded on system resumption [ 364.481020][T19090] Unrecognized hibernate image header format! [ 364.488400][T19090] PM: hibernation: Image mismatch: architecture specific data [ 364.520264][ T40] audit: type=1400 audit(363.945:41771): avc: denied { read } for pid=19092 comm="syz.5.3671" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 364.532891][ T40] audit: type=1400 audit(363.955:41772): avc: denied { open } for pid=19092 comm="syz.5.3671" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 364.557268][ T40] audit: type=1400 audit(363.955:41773): avc: denied { ioctl } for pid=19092 comm="syz.5.3671" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x460f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 364.610135][ T10] usb 12-1: new high-speed USB device number 47 using dummy_hcd [ 364.672349][ T40] audit: type=1400 audit(364.105:41774): avc: denied { write } for pid=19106 comm="syz.5.3676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 364.690000][ T40] audit: type=1400 audit(364.115:41775): avc: denied { ioctl } for pid=19106 comm="syz.5.3676" path="socket:[91663]" dev="sockfs" ino=91663 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 364.786350][ T10] usb 12-1: config 124 has an invalid interface number: 218 but max is 2 [ 364.791838][ T10] usb 12-1: config 124 has an invalid interface number: 154 but max is 2 [ 364.799106][ T10] usb 12-1: config 124 has an invalid interface number: 94 but max is 2 [ 364.808107][ T10] usb 12-1: config 124 has no interface number 0 [ 364.815137][ T10] usb 12-1: config 124 has no interface number 1 [ 364.821217][ T10] usb 12-1: config 124 has no interface number 2 [ 364.823375][ T10] usb 12-1: config 124 interface 218 altsetting 253 endpoint 0x8 has invalid wMaxPacketSize 0 [ 364.834123][ T10] usb 12-1: config 124 interface 218 altsetting 253 has a duplicate endpoint with address 0x8, skipping [ 364.840982][ T10] usb 12-1: config 124 interface 218 altsetting 253 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 364.844743][ T10] usb 12-1: config 124 interface 218 altsetting 253 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 364.848594][ T10] usb 12-1: config 124 interface 218 altsetting 253 endpoint 0x3 has invalid maxpacket 10184, setting to 1024 [ 364.854202][ T10] usb 12-1: config 124 interface 218 altsetting 253 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 364.857946][ T10] usb 12-1: config 124 interface 154 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 364.862252][ T10] usb 12-1: config 124 interface 154 altsetting 8 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 364.866053][ T10] usb 12-1: config 124 interface 154 altsetting 8 has an endpoint descriptor with address 0x1A, changing to 0xA [ 364.870213][ T10] usb 12-1: config 124 interface 154 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 364.874018][ T10] usb 12-1: config 124 interface 94 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 364.877458][ T10] usb 12-1: config 124 interface 218 has no altsetting 0 [ 364.888862][ T10] usb 12-1: config 124 interface 154 has no altsetting 0 [ 364.892175][ T10] usb 12-1: config 124 interface 94 has no altsetting 0 [ 364.896316][ T40] audit: type=1400 audit(364.325:41776): avc: denied { read } for pid=19124 comm="syz.3.3680" path="socket:[90638]" dev="sockfs" ino=90638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 364.901279][ T10] usb 12-1: New USB device found, idVendor=0b95, idProduct=7720, bcdDevice=92.db [ 364.908101][ T10] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.910836][ T10] usb 12-1: Product: syz [ 364.912266][ T10] usb 12-1: Manufacturer: 軆葫鵧碋㰣먑峤ឺ냽г䥗䌎此䲧㽌邘꬛ᆱᬃí–䦀禟⣙â¤ï¾»ê„Ø‘ë®­á´î±›ï…ᤇ贗Һ詟굓â•â•ªä­¾â¿—Ê㚀糖椌ẳ㉷뙽楞䨹畑㮽ꜳï è°…ä—ዡ떣ㄆ渉熾岲湕匎슜㯜嬢㩦å°Ï¡ã‘æ«äŽ–䌘Ⴟ뮚ì›è–¡é˜ší™¨î—¸ã‘¾ì‚¯â…Œë­ŠÉ¾ä¤Œã’§ïƒ¬î®„啘竔佩앟볋ગ㰔Êì¡‘ã‚€ì»ç¾†ê¸­â•¡ï£«ì¬â˜­è‘¨æ•ã„š [ 364.920519][T19125] overlayfs: option "workdir=./file2" is useless in a non-upper mount, ignore [ 364.923755][ T10] usb 12-1: SerialNumber: syz [ 364.928162][T19125] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 364.958525][T19084] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 364.962361][T19084] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 364.985775][T19128] overlayfs: option "workdir=./file2" is useless in a non-upper mount, ignore [ 364.993336][T19128] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 365.220218][T19149] lo speed is unknown, defaulting to 1000 [ 365.399983][ T5892] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 365.461953][ T40] audit: type=1400 audit(364.895:41777): avc: denied { write } for pid=19148 comm="syz.9.3685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 365.530014][ T5892] usb 10-1: device descriptor read/64, error -71 [ 365.700710][ T5742] Bluetooth: hci0: command 0x0405 tx timeout [ 365.790173][ T5892] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 365.919968][ T5892] usb 10-1: device descriptor read/64, error -71 [ 366.031493][ T5892] usb usb10-port1: attempt power cycle [ 366.232219][ T40] audit: type=1400 audit(365.665:41778): avc: denied { ioctl } for pid=19157 comm="syz.9.3688" path="socket:[89585]" dev="sockfs" ino=89585 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 366.380139][ T5892] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 366.401438][ T5892] usb 10-1: device descriptor read/8, error -71 [ 366.639987][ T5892] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 366.661003][ T5892] usb 10-1: device descriptor read/8, error -71 [ 366.760115][ T5426] usb 14-1: new high-speed USB device number 32 using dummy_hcd [ 366.770131][ T5892] usb usb10-port1: unable to enumerate USB device [ 366.910060][ T5426] usb 14-1: Using ep0 maxpacket: 32 [ 366.915020][ T5426] usb 14-1: config index 0 descriptor too short (expected 29220, got 36) [ 366.918743][ T5426] usb 14-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 366.922238][ T5426] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 366.926229][ T5426] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 366.930905][ T5426] usb 14-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 366.935000][ T5426] usb 14-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 366.941127][ T5426] usb 14-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 366.944930][ T5426] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.951541][ T5426] usb 14-1: config 0 descriptor?? [ 367.158384][T19163] program syz.9.3689 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 367.167583][ T5426] usblp 14-1:0.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 367.376459][ T846] usb 14-1: USB disconnect, device number 32 [ 367.387133][ T846] usblp0: removed [ 368.007522][T19169] syzkaller1: entered promiscuous mode [ 368.009394][T19169] syzkaller1: entered allmulticast mode [ 368.044621][T19136] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 368.117279][ T10] asix 12-1:124.218: probe with driver asix failed with error -22 [ 368.134281][ T10] asix 12-1:124.154: probe with driver asix failed with error -22 [ 368.164555][ T10] asix 12-1:124.94: probe with driver asix failed with error -22 [ 368.172757][T19175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3692'. [ 368.188199][ T10] usb 12-1: USB disconnect, device number 47 [ 368.759515][T19204] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 368.924869][ T40] kauditd_printk_skb: 133 callbacks suppressed [ 368.924893][ T40] audit: type=1400 audit(368.325:41912): avc: denied { getopt } for pid=19206 comm="syz.5.3702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 369.248341][T19215] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.495299][ T40] audit: type=1400 audit(368.925:41913): avc: denied { bind } for pid=19220 comm="syz.9.3704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 369.707120][T19227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=19227 comm=syz.5.3710 [ 369.707382][T19233] ipvlan2: entered allmulticast mode [ 369.713716][T19233] batadv_slave_1: entered allmulticast mode [ 369.721116][T19233] batman_adv: batadv0: Adding interface: ipvlan2 [ 369.723253][T19233] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.732727][T19233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.735897][T19233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.738774][T19233] batman_adv: batadv0: Interface activated: ipvlan2 [ 369.809231][T19240] syz.9.3714 (19240): attempted to duplicate a private mapping with mremap. This is not supported. [ 370.029938][T19256] random: crng reseeded on system resumption [ 370.167351][T19201] Set syz1 is full, maxelem 65536 reached [ 370.183695][T19203] Set syz1 is full, maxelem 65536 reached [ 370.278484][T19261] devpts: Bad value for 'max' [ 370.278497][ T40] audit: type=1400 audit(369.705:41914): avc: denied { remount } for pid=19260 comm="syz.3.3719" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 370.291391][ T40] audit: type=1400 audit(369.725:41915): avc: denied { unmount } for pid=15674 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 370.328532][T19264] veth0_to_team: entered promiscuous mode [ 370.333066][T19264] veth0_to_team: left promiscuous mode [ 370.376850][T19266] program syz.3.3720 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 370.432744][T19269] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3721'. [ 370.452568][T19259] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3718'. [ 370.456670][T19259] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3718'. [ 370.639793][T19274] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 370.861858][T19289] input: syz1 as /devices/virtual/input/input70 [ 370.864570][T19289] input: failed to attach handler leds to device input70, error: -6 [ 370.929908][T19294] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3728'. [ 371.000788][T19299] xt_SECMARK: invalid mode: 2 [ 371.131528][ T40] audit: type=1400 audit(370.565:41916): avc: denied { connect } for pid=19306 comm="syz.7.3734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 371.246575][ T24] IPVS: starting estimator thread 0... [ 371.360295][T19315] IPVS: using max 44 ests per chain, 105600 per kthread [ 371.384001][T19314] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3735'. [ 371.384478][T19329] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 371.467849][T19339] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3742'. [ 371.482357][T19339] bond2: entered promiscuous mode [ 371.484339][T19339] 8021q: adding VLAN 0 to HW filter on device bond2 [ 371.527791][T19339] 8021q: adding VLAN 0 to HW filter on device bond2 [ 371.531261][T19339] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 371.535375][T19339] bond2: (slave sit1): Error -95 calling set_mac_address [ 371.625775][T19346] ipvlan3: entered allmulticast mode [ 371.630422][T19346] batman_adv: batadv0: Adding interface: ipvlan3 [ 371.633077][T19346] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.644172][T19346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.648165][T19346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.656424][T19346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 371.660934][T19346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.665130][T19346] batman_adv: batadv0: Interface activated: ipvlan3 [ 371.742161][T19351] overlayfs: invalid redirect ((null)) [ 372.115014][ T40] audit: type=1400 audit(371.525:41917): avc: denied { relabelfrom } for pid=19379 comm="syz.7.3756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 372.123702][ T40] audit: type=1400 audit(371.525:41918): avc: denied { relabelto } for pid=19379 comm="syz.7.3756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 372.161621][ T40] audit: type=1400 audit(371.595:41919): avc: denied { attach_queue } for pid=19379 comm="syz.7.3756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 372.170797][ T40] audit: type=1400 audit(371.595:41920): avc: denied { write } for pid=19382 comm="syz.5.3755" path="socket:[90919]" dev="sockfs" ino=90919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 372.352872][T19388] program syz.7.3758 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 372.404465][T19392] program syz.7.3758 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 372.572565][ T40] audit: type=1400 audit(371.975:41921): avc: denied { search } for pid=5443 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.666280][T19401] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 372.666486][T19399] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 372.775735][T19408] netlink: 168 bytes leftover after parsing attributes in process `syz.9.3763'. [ 372.903922][T19425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3764'. [ 372.924680][T19419] netlink: 'syz.7.3765': attribute type 39 has an invalid length. [ 373.345156][T19450] netlink: 'syz.7.3770': attribute type 1 has an invalid length. [ 373.404734][T19450] 8021q: adding VLAN 0 to HW filter on device bond3 [ 373.436224][T19450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41319 sclass=netlink_route_socket pid=19450 comm=syz.7.3770 [ 373.506368][T19456] syzkaller0: entered promiscuous mode [ 373.520498][T19456] syzkaller0: entered allmulticast mode [ 374.361704][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 374.361763][ T40] audit: type=1400 audit(373.785:41949): avc: denied { create } for pid=19487 comm="syz.9.3781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 374.374823][ T40] audit: type=1400 audit(373.805:41950): avc: denied { write } for pid=19487 comm="syz.9.3781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 374.519057][T19492] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3782'. [ 374.675747][ T40] audit: type=1400 audit(374.105:41951): avc: denied { getopt } for pid=19501 comm="syz.9.3785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 375.251123][T19512] openvswitch: netlink: Flow key attribute not present in set flow. [ 378.620953][T19514] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 378.624687][T19514] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 378.633483][ T40] audit: type=1400 audit(378.055:41952): avc: denied { firmware_load } for pid=19513 comm="syz.9.3788" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 378.633998][T19514] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 378.697595][T19524] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 378.731466][ T40] audit: type=1400 audit(378.165:41953): avc: denied { lock } for pid=19522 comm="syz.5.3790" path="/171/file0/cpuset.effective_cpus" dev="9p" ino=72876519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 378.952960][ T40] audit: type=1400 audit(378.385:41954): avc: denied { bind } for pid=19552 comm="syz.9.3797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 379.158864][ T40] audit: type=1400 audit(378.585:41955): avc: denied { execute } for pid=19564 comm="syz.5.3799" path="/dev/vbi0" dev="devtmpfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 379.187112][ T40] audit: type=1400 audit(378.615:41956): avc: denied { create } for pid=19564 comm="syz.5.3799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 379.197109][ T40] audit: type=1400 audit(378.615:41957): avc: denied { sys_admin } for pid=19564 comm="syz.5.3799" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 379.529379][ T40] audit: type=1400 audit(378.955:41958): avc: denied { listen } for pid=19573 comm="syz.5.3802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 379.529553][T19575] misc userio: Invalid payload size [ 379.891427][ T40] audit: type=1400 audit(379.325:41959): avc: denied { listen } for pid=19596 comm="syz.7.3808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 379.950598][T19602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.954898][ T40] audit: type=1400 audit(379.385:41960): avc: denied { bind } for pid=19593 comm="syz.9.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 380.027609][T19605] syzkaller0: entered promiscuous mode [ 380.029658][T19605] syzkaller0: entered allmulticast mode [ 380.133672][T19607] SQUASHFS error: Failed to read block 0x0: -5 [ 380.135780][T19607] unable to read squashfs_super_block [ 380.182498][T19609] qrtr: Invalid version 0 [ 380.233866][T19616] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 380.239469][T19616] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 380.353141][T19625] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3815'. [ 380.396300][ T40] audit: type=1400 audit(379.825:41961): avc: denied { ioctl } for pid=19622 comm="syz.7.3816" path="socket:[93176]" dev="sockfs" ino=93176 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 380.427708][ T40] audit: type=1400 audit(379.855:41962): avc: denied { accept } for pid=19630 comm="syz.5.3817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 380.444595][ T5426] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 380.447860][ T5426] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 380.451332][ T5426] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 380.454147][ T5426] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 380.456634][ T5426] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 380.459099][ T5426] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 380.461821][ T5426] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 380.464806][ T5426] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 380.468227][ T5426] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 380.471488][ T5426] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 380.478801][ T5426] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [Á“ƽZÄæwÇý[baÿ–é|\rnÀ)A¼#6”oÒ¯ô?•ða Iü¸äãs„Ö5hVõ3ñ®(;éò [ 380.478801][ T5426] ãуPÔ$zÉ·‡X$©·à˜w[SÖì–ÀRìÑeÑzx—ÞuñS r»œÏláì[µ5l'˜ZCz2ñ] on [ 380.549523][T19632] fido_id[19632]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 380.714175][T19637] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3819'. [ 381.416600][ T40] audit: type=1400 audit(380.845:41963): avc: denied { mount } for pid=19661 comm="syz.9.3827" name="/" dev="autofs" ino=93666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 381.458043][ T40] audit: type=1400 audit(380.885:41964): avc: denied { append } for pid=19664 comm="syz.5.3828" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 381.541738][ T5738] Bluetooth: hci0: command 0x0405 tx timeout [ 381.649484][T19677] (syz.7.3832,19677,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 381.659295][T19677] (syz.7.3832,19677,3):ocfs2_fill_super:1177 ERROR: status = -22 [ 381.675418][T19681] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 381.675713][ T40] audit: type=1326 audit(381.105:41965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19676 comm="syz.7.3832" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ab079ce59 code=0x0 [ 381.678150][T19681] netlink: 'syz.5.3833': attribute type 11 has an invalid length. [ 381.711498][T19677] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 381.929975][ T5426] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 382.080363][ T5426] usb 10-1: Using ep0 maxpacket: 16 [ 382.084992][ T5426] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.090011][ T5426] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.093638][ T5426] usb 10-1: config 0 interface 0 has no altsetting 0 [ 382.100037][ T5426] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 382.103700][ T5426] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.112792][ T5426] usb 10-1: config 0 descriptor?? [ 382.302942][T19685] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 382.308685][T19685] bond4 (unregistering): Released all slaves [ 382.507099][ T40] audit: type=1400 audit(381.935:41966): avc: denied { read } for pid=19692 comm="syz.9.3837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 382.511357][T19693] Invalid source name [ 382.516169][T19693] UBIFS error (pid: 19693): cannot open "/dev/sg0", error -22 [ 382.648653][T19696] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3838'. [ 382.686313][T19699] netlink: 'syz.9.3840': attribute type 1 has an invalid length. [ 382.699402][ T40] audit: type=1400 audit(382.125:41967): avc: denied { write } for pid=19700 comm="syz.3.3839" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 382.709037][T19699] 8021q: adding VLAN 0 to HW filter on device bond4 [ 382.720885][T19699] vlan2: entered allmulticast mode [ 382.723187][T19699] macsec0: entered allmulticast mode [ 382.725363][T19699] veth1_macvtap: entered allmulticast mode [ 382.728279][T19699] bond4: (slave vlan2): Error -34 calling dev_set_mtu [ 382.777631][T19710] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19710 comm=syz.7.3842 [ 382.825727][T19707] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 382.828434][T19707] cramfs: wrong magic [ 382.933144][T19719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19719 comm=syz.3.3844 [ 382.996165][T19721] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3843'. [ 383.734003][T19744] syzkaller1: entered promiscuous mode [ 383.736006][T19744] syzkaller1: entered allmulticast mode [ 383.963950][T19755] program syz.3.3854 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 384.011166][T19755] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3854'. [ 384.032901][T19755] team0: entered promiscuous mode [ 384.034627][T19755] team_slave_0: entered promiscuous mode [ 384.036888][T19755] team_slave_1: entered promiscuous mode [ 384.192760][T19760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3856'. [ 384.230586][T19763] lo speed is unknown, defaulting to 1000 [ 384.267229][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.661988][ T5426] usbhid 10-1:0.0: can't add hid device: -71 [ 384.664208][ T5426] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 384.681803][ T5426] usb 10-1: USB disconnect, device number 50 [ 384.705523][T19772] loop5: detected capacity change from 0 to 7 [ 384.743525][T19772] Dev loop5: unable to read RDB block 7 [ 384.746503][T19772] loop5: unable to read partition table [ 384.750892][T19772] loop5: partition table beyond EOD, truncated [ 384.753917][T19772] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 384.976873][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 384.976902][ T40] audit: type=1400 audit(384.405:41975): avc: denied { map } for pid=19779 comm="syz.5.3860" path="socket:[95581]" dev="sockfs" ino=95581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 384.979138][ T40] audit: type=1400 audit(384.405:41976): avc: denied { read } for pid=19779 comm="syz.5.3860" path="socket:[95581]" dev="sockfs" ino=95581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 385.047355][T19785] : entered promiscuous mode [ 385.204010][T19798] batadv_slave_1: entered promiscuous mode [ 385.218581][T19797] batadv_slave_1: left promiscuous mode [ 385.272740][T19800] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 385.595075][T19805] netlink: 'syz.5.3867': attribute type 11 has an invalid length. [ 385.644856][T19805] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.693048][T19805] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode [ 385.696154][T19805] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode [ 386.127551][T19823] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 386.377121][T19831] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3877'. [ 386.435910][T19833] syzkaller0: entered promiscuous mode [ 386.437769][T19833] syzkaller0: entered allmulticast mode [ 386.625804][ T40] audit: type=1400 audit(386.055:41977): avc: denied { append } for pid=19842 comm="syz.9.3881" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 386.648348][ T40] audit: type=1400 audit(386.055:41978): avc: denied { map } for pid=19842 comm="syz.9.3881" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 386.668535][ T40] audit: type=1400 audit(386.055:41979): avc: denied { write execute } for pid=19842 comm="syz.9.3881" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 386.817818][T19850] netlink: 'syz.9.3884': attribute type 11 has an invalid length. [ 386.820569][T19850] netlink: 199828 bytes leftover after parsing attributes in process `syz.9.3884'. [ 386.843062][ T40] audit: type=1400 audit(386.275:41980): avc: denied { listen } for pid=19849 comm="syz.9.3884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 386.862056][T19846] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3882'. [ 386.876720][T19846] bond0: entered promiscuous mode [ 386.878743][T19846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.884282][T19846] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3882'. [ 387.735940][T19878] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 387.754566][T19878] qnx6: wrong signature (magic) in superblock #1. [ 387.759018][T19878] qnx6: unable to read the first superblock [ 387.764186][T19882] futex_wake_op: syz.9.3892 tries to shift op by -1; fix this program [ 387.833289][T19887] binder: 19883:19887 ioctl c0306201 200000000040 returned -22 [ 387.885813][T19889] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.3896'. [ 387.893057][T19889] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3896'. [ 387.896700][T19889] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3896'. [ 388.003677][T19897] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3898'. [ 388.007236][T19897] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3898'. [ 388.014147][T19897] netlink: 'syz.9.3898': attribute type 19 has an invalid length. [ 388.034815][ T477] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.039037][ T477] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.044528][ T477] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.048468][ T477] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.173638][ T40] audit: type=1400 audit(387.605:41981): avc: denied { getopt } for pid=19905 comm="syz.9.3901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 388.284597][T19911] macvlan2: entered promiscuous mode [ 388.288186][T19911] bridge0: entered promiscuous mode [ 388.360058][T19915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19915 comm=syz.7.3903 [ 388.366667][T19913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57909 sclass=netlink_route_socket pid=19913 comm=syz.5.3904 [ 389.102888][ T40] audit: type=1400 audit(388.535:41982): avc: denied { write } for pid=19928 comm="syz.5.3908" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 389.113642][ T40] audit: type=1400 audit(388.535:41983): avc: denied { open } for pid=19928 comm="syz.5.3908" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 389.124384][ T40] audit: type=1400 audit(388.535:41984): avc: denied { shutdown } for pid=19928 comm="syz.5.3908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 389.249590][T19946] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3913'. [ 389.304701][T19945] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 389.341093][T19938] iommufd_mock iommufd_mock2: Adding to iommu group 11 [ 389.454195][T19953] xt_nfacct: accounting object `syz0' does not exist [ 389.540279][ T5426] usb 12-1: new high-speed USB device number 48 using dummy_hcd [ 389.680291][ T5426] usb 12-1: device descriptor read/64, error -71 [ 389.930333][ T5426] usb 12-1: new high-speed USB device number 49 using dummy_hcd [ 390.060004][ T5426] usb 12-1: device descriptor read/64, error -71 [ 390.120296][T19989] No control pipe specified [ 390.172654][ T5426] usb usb12-port1: attempt power cycle [ 390.328571][T19996] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 390.328605][T20003] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 390.510082][ T5426] usb 12-1: new high-speed USB device number 50 using dummy_hcd [ 390.530665][ T5426] usb 12-1: device descriptor read/8, error -71 [ 390.770060][ T5426] usb 12-1: new high-speed USB device number 51 using dummy_hcd [ 390.794091][ T5426] usb 12-1: device descriptor read/8, error -71 [ 390.829950][ T5743] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 390.905996][ T5426] usb usb12-port1: unable to enumerate USB device [ 390.983047][ T5743] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.987927][ T5743] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.992801][ T5743] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 390.995907][T20023] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 390.996625][ T5743] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.000084][ T5743] usb 10-1: config 0 descriptor?? [ 391.270791][ T5426] usb 14-1: new high-speed USB device number 33 using dummy_hcd [ 391.338715][T20025] cgroup2: Unknown parameter 'euid' [ 391.403516][T20027] __nla_validate_parse: 1 callbacks suppressed [ 391.403599][T20027] netlink: 1896 bytes leftover after parsing attributes in process `syz.3.3936'. [ 391.420156][ T5426] usb 14-1: Using ep0 maxpacket: 16 [ 391.428070][ T5743] hid_parser_main: 6 callbacks suppressed [ 391.428120][ T5743] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 391.428217][ T5743] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 391.431788][ T5743] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0D8C:0022.000B/input/input71 [ 391.473069][ T5426] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 391.480862][ T5426] usb 14-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 391.485352][ T5426] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.489403][ T5426] usb 14-1: Product: syz [ 391.489424][ T5426] usb 14-1: Manufacturer: syz [ 391.489437][ T5426] usb 14-1: SerialNumber: syz [ 391.512482][ T5426] usb 14-1: config 0 descriptor?? [ 391.512941][ T5743] cm6533_jd 0003:0D8C:0022.000B: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 391.525480][ T5426] em28xx 14-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 391.525513][ T5426] em28xx 14-1:0.0: DVB interface 0 found: bulk [ 391.626108][ T5743] usb 10-1: USB disconnect, device number 51 [ 391.822129][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 391.822170][ T40] audit: type=1400 audit(391.255:41992): avc: denied { accept } for pid=20030 comm="syz.3.3937" lport=47755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 391.840806][ T40] audit: type=1400 audit(391.275:41993): avc: denied { listen } for pid=20030 comm="syz.3.3937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 392.125042][ T5426] em28xx 14-1:0.0: unknown em28xx chip ID (0) [ 392.410172][ T40] audit: type=1400 audit(391.835:41994): avc: denied { ioctl } for pid=20033 comm="syz.7.3938" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xaf30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 392.456067][T20041] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3941'. [ 392.459698][T20041] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3941'. [ 392.475407][ T40] audit: type=1400 audit(391.905:41995): avc: denied { ioctl } for pid=20033 comm="syz.7.3938" path="/99/file0/file0" dev="fuse" ino=66 ioctlcmd=0x4d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 392.516433][T20044] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 392.546584][ T5426] em28xx 14-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 392.561405][ T5426] em28xx 14-1:0.0: board has no eeprom [ 392.603893][ T40] audit: type=1400 audit(392.035:41996): avc: denied { read } for pid=20022 comm="syz.9.3934" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 392.614560][ T40] audit: type=1400 audit(392.045:41997): avc: denied { read } for pid=20022 comm="syz.9.3934" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 392.638607][ T40] audit: type=1400 audit(392.045:41998): avc: denied { open } for pid=20022 comm="syz.9.3934" path="/249/file0" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 392.652008][ T40] audit: type=1400 audit(392.045:41999): avc: denied { read } for pid=20022 comm="syz.9.3934" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 392.659711][ T40] audit: type=1400 audit(392.045:42000): avc: denied { read } for pid=20022 comm="syz.9.3934" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 392.670856][ T40] audit: type=1400 audit(392.065:42001): avc: denied { search } for pid=20022 comm="syz.9.3934" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 393.635732][T20023] em28xx 14-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 393.689893][ T5426] em28xx 14-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 393.693430][ T5426] em28xx 14-1:0.0: dvb set to bulk mode. [ 393.695571][ T5842] em28xx 14-1:0.0: Binding DVB extension [ 393.751488][ T5426] usb 14-1: USB disconnect, device number 33 [ 393.768014][ T5426] em28xx 14-1:0.0: Disconnecting em28xx [ 393.789238][ T5842] em28xx 14-1:0.0: Registering input extension [ 393.798132][ T5426] em28xx 14-1:0.0: Closing input extension [ 393.854912][ T5426] em28xx 14-1:0.0: Freeing device [ 393.874016][T20101] netlink: zone id is out of range [ 393.876139][T20101] netlink: zone id is out of range [ 393.878424][T20101] netlink: set zone limit has 8 unknown bytes [ 394.420081][ T5738] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 394.420117][ T5742] Bluetooth: hci0: command 0x0405 tx timeout [ 394.486254][T20118] netlink: 'syz.9.3959': attribute type 21 has an invalid length. [ 394.497440][T20118] netlink: 156 bytes leftover after parsing attributes in process `syz.9.3959'. [ 394.507948][T20118] netlink: 'syz.9.3959': attribute type 21 has an invalid length. [ 394.511458][T20118] netlink: 156 bytes leftover after parsing attributes in process `syz.9.3959'. [ 394.516273][T20118] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3959'. [ 394.648950][T20127] loop5: detected capacity change from 0 to 2640 [ 394.654502][T20127] buffer_io_error: 130 callbacks suppressed [ 394.654517][T20127] Buffer I/O error on dev loop5, logical block 0, async page read [ 394.662743][T20127] Buffer I/O error on dev loop5, logical block 0, async page read [ 394.665792][T20127] Buffer I/O error on dev loop5, logical block 0, async page read [ 394.668805][T20127] Buffer I/O error on dev loop5, logical block 0, async page read [ 394.673351][T20127] Buffer I/O error on dev loop5, logical block 0, async page read [ 394.676530][T20127] Buffer I/O error on dev loop5, logical block 0, async page read [ 394.680420][T20127] Buffer I/O error on dev loop5, logical block 0, async page read [ 394.683962][T20127] Buffer I/O error on dev loop5, logical block 0, async page read [ 394.685739][T20130] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3960'. [ 394.687192][T20127] ldm_validate_partition_table(): Disk read failed. [ 394.687249][T20127] Buffer I/O error on dev loop5, logical block 0, async page read [ 394.687324][T20127] Buffer I/O error on dev loop5, logical block 0, async page read [ 394.687502][T20127] Dev loop5: unable to read RDB block 0 [ 394.691232][T20130] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3960'. [ 394.698138][T20127] loop5: unable to read partition table [ 394.699494][T20130] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3960'. [ 394.704148][T20127] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 394.705973][T20130] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3960'. [ 394.844876][T20141] fuse: Bad value for 'fd' [ 395.452428][T20119] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 395.756259][T20164] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 395.961781][T20173] tmpfs: Cannot change global quota limit on remount [ 395.985305][T20171] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 396.006980][T20171] kvm: requested 62019 ns i8254 timer period limited to 200000 ns [ 396.019721][T20171] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 396.056793][T20171] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 396.060594][T20171] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 396.064580][T20171] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 396.456941][T20189] lo speed is unknown, defaulting to 1000 [ 397.341608][T20233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.353909][T20233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.358215][T20233] netlink: 'syz.3.3986': attribute type 5 has an invalid length. [ 397.364334][T20237] netlink: 'syz.3.3986': attribute type 5 has an invalid length. [ 397.365380][T20238] netlink: 'syz.5.3988': attribute type 58 has an invalid length. [ 397.384487][T20239] __nla_validate_parse: 2 callbacks suppressed [ 397.384504][T20239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3988'. [ 397.401928][T10632] usb 14-1: new high-speed USB device number 34 using dummy_hcd [ 397.407591][T20233] fuse: Bad value for 'blksize' [ 397.486469][T20247] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3989'. [ 397.530124][T10632] usb 14-1: device descriptor read/64, error -71 [ 397.769971][T10632] usb 14-1: new high-speed USB device number 35 using dummy_hcd [ 397.901095][T10632] usb 14-1: device descriptor read/64, error -71 [ 397.951743][T20262] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3994'. [ 398.023925][T10632] usb usb14-port1: attempt power cycle [ 398.240138][ T5827] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 398.360261][T10632] usb 14-1: new high-speed USB device number 36 using dummy_hcd [ 398.380853][T10632] usb 14-1: device descriptor read/8, error -71 [ 398.392548][ T5827] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 398.396349][ T5827] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.401554][ T5827] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.406290][ T5827] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 398.412179][ T5827] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 398.416052][ T5827] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.434051][ T5827] usb 10-1: config 0 descriptor?? [ 398.630261][T10632] usb 14-1: new high-speed USB device number 37 using dummy_hcd [ 398.650495][T10632] usb 14-1: device descriptor read/8, error -71 [ 398.770281][T10632] usb usb14-port1: unable to enumerate USB device [ 398.860277][ T5827] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 398.862926][ T5827] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 398.865776][ T5827] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 398.868352][ T5827] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 398.871451][ T5827] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 398.874505][ T5827] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 398.877354][ T5827] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 398.880184][ T5827] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 398.882729][ T5827] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 398.885319][ T5827] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 398.901752][ T5827] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 399.227940][ T5827] usb 10-1: USB disconnect, device number 52 [ 400.347105][T20280] bond0: entered promiscuous mode [ 400.349080][T20280] bond_slave_0: entered promiscuous mode [ 400.351265][T20280] bond_slave_1: entered promiscuous mode [ 401.056233][ T40] kauditd_printk_skb: 134 callbacks suppressed [ 401.056266][ T40] audit: type=1400 audit(400.485:42136): avc: denied { map } for pid=20288 comm="syz.9.4003" path="socket:[97369]" dev="sockfs" ino=97369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 401.095658][T20295] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4004'. [ 401.116220][T20289] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 401.116423][T20295] bond2: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 401.121652][T20289] overlayfs: overlapping lowerdir path [ 401.124821][T20295] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4004'. [ 401.130642][T20295] bond2: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 401.134515][T20295] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4004'. [ 401.137616][T20295] bond2: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 401.141884][T20295] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4004'. [ 401.145062][T20295] bond2: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 401.149244][T20295] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4004'. [ 401.152705][T20295] bond2: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 401.299699][T20300] Invalid ELF header type: 0 != 1 [ 401.301883][ T40] audit: type=1400 audit(400.725:42137): avc: denied { module_load } for pid=20299 comm="syz.5.4006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 401.314726][T20308] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 401.442991][T20314] netlink: 460 bytes leftover after parsing attributes in process `syz.9.4010'. [ 401.456146][T20314] syzkaller0: entered promiscuous mode [ 401.459166][T20314] syzkaller0: entered allmulticast mode [ 401.872480][T20334] netlink: 'syz.7.4015': attribute type 2 has an invalid length. [ 401.878542][T20334] tipc: Started in network mode [ 401.881190][T20334] tipc: Node identity 8, cluster identity 4711 [ 401.889132][T20334] tipc: Node number set to 8 [ 401.959507][T20343] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4017'. [ 401.967604][ T40] audit: type=1400 audit(401.395:42138): avc: denied { shutdown } for pid=20342 comm="syz.5.4017" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 402.147761][ T40] audit: type=1326 audit(401.575:42139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20349 comm="syz.9.4020" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde8799ce59 code=0x0 [ 402.247155][T20352] binder: 20349:20352 ioctl ae80 0 returned -22 [ 402.763226][T20361] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 402.845826][T20376] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 402.850815][T20376] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 402.857914][T20376] vhci_hcd vhci_hcd.0: Device attached [ 402.867287][ T40] audit: type=1400 audit(402.295:42140): avc: denied { ioctl } for pid=20375 comm="syz.3.4027" path="socket:[100687]" dev="sockfs" ino=100687 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 402.883758][T20377] vhci_hcd: connection closed [ 402.886298][ T477] vhci_hcd vhci_hcd.3: stop threads [ 402.890936][ T477] vhci_hcd vhci_hcd.3: release socket [ 402.892858][ T477] vhci_hcd vhci_hcd.3: disconnect device [ 402.946434][T20380] syzkaller1: entered promiscuous mode [ 402.948337][T20380] syzkaller1: entered allmulticast mode [ 403.135007][ T40] audit: type=1400 audit(402.565:42141): avc: denied { getopt } for pid=20390 comm="syz.9.4031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 403.249416][ T40] audit: type=1400 audit(402.675:42142): avc: denied { setopt } for pid=20394 comm="syz.9.4033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 403.319504][ T40] audit: type=1400 audit(402.745:42143): avc: denied { remount } for pid=20394 comm="syz.9.4033" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 403.421638][T20407] team0 (unregistering): left allmulticast mode [ 403.425875][ T40] audit: type=1400 audit(402.855:42144): avc: denied { getopt } for pid=20409 comm="syz.3.4038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 403.426592][T20407] team_slave_0: left allmulticast mode [ 403.444055][T20407] team_slave_1: left allmulticast mode [ 403.448169][T20407] team_slave_0: left promiscuous mode [ 403.466191][T20413] Sensor A: ================= START STATUS ================= [ 403.471187][T20407] team0 (unregistering): Port device team_slave_0 removed [ 403.471586][T20413] Sensor A: Test Pattern: [ 403.477515][T20407] team_slave_1: left promiscuous mode [ 403.494972][T20413] 75% Colorbar [ 403.496440][T20413] Sensor A: Show Information: All [ 403.497536][T20407] team0 (unregistering): Port device team_slave_1 removed [ 403.498768][T20413] Sensor A: Vertical Flip: true [ 403.504242][T20413] Sensor A: Horizontal Flip: false [ 403.515989][T20410] cgroup: No subsys list or none specified [ 403.535730][T20413] Sensor A: Brightness: 3 [ 403.541771][T20413] Sensor A: Contrast: 3 [ 403.543575][T20413] Sensor A: Hue: 0 [ 403.562212][T20413] Sensor A: Saturation: 128 [ 403.563970][T20413] Sensor A: Pixel Rate: 160000000 [ 403.565766][T20410] overlay: ./file0 is not a directory [ 403.578345][T20413] Sensor A: Horizontal Blanking: 800 [ 403.580594][T20413] Sensor A: Vertical Blanking: 7 [ 403.590551][T20413] Sensor A: ================== END STATUS ================== [ 403.592607][T20417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 403.762505][T20433] __nla_validate_parse: 1 callbacks suppressed [ 403.762555][T20433] netlink: 112 bytes leftover after parsing attributes in process `syz.7.4046'. [ 403.869210][T20435] batadv0: entered promiscuous mode [ 403.885492][T20435] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 403.899711][T20439] siw: device registration error -23 [ 403.911731][T20435] 8021q: adding VLAN 0 to HW filter on device bond2 [ 403.989065][T20442] loop4: detected capacity change from 0 to 2640 [ 403.997814][T20442] buffer_io_error: 11 callbacks suppressed [ 403.997830][T20442] Buffer I/O error on dev loop4, logical block 0, async page read [ 404.023029][T20443] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 404.026359][T20443] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 404.029727][T20443] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 404.035380][T20443] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 404.038266][T20443] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 404.040806][T20443] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 404.043291][T20443] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 404.046273][T20443] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 404.048018][T20442] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 404.147816][ C0] blk_print_req_error: 131 callbacks suppressed [ 404.147907][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.160531][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.178488][ C0] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.193103][ C0] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.200732][ C0] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.206669][ C0] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.215542][ C0] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.223780][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.226860][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.229719][ C1] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.245554][ T5139] ldm_validate_partition_table(): Disk read failed. [ 404.262236][ T5139] Dev loop6: unable to read RDB block 0 [ 404.275481][ T5139] loop6: unable to read partition table [ 404.277473][ T5139] loop6: partition table beyond EOD, truncated [ 404.300957][T20466] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4052'. [ 404.485664][ T40] audit: type=1400 audit(403.915:42145): avc: denied { append } for pid=20478 comm="syz.3.4061" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 404.598795][T20486] program syz.9.4064 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.602736][T20486] ata1.00: non-matching transfer count (32/0) [ 404.660716][T10632] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 404.810727][T10632] usb 10-1: Using ep0 maxpacket: 8 [ 404.814612][T10632] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 404.818031][T10632] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 404.821672][T10632] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.308016][T20522] netlink: 'syz.9.4073': attribute type 2 has an invalid length. [ 405.392560][T20526] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 405.395903][T20526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.448405][T20530] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.465706][T20530] vxcan0: tx address claim with different name [ 406.316453][T20556] fuse: fd is not a fuse device [ 406.316570][T20557] fuse: fd is not a fuse device [ 406.324793][T20555] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4081'. [ 406.327642][T20555] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4081'. [ 406.352150][T20555] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.362044][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 406.362061][ T40] audit: type=1400 audit(405.795:42155): avc: denied { bind } for pid=20554 comm="syz.7.4081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 406.391444][ T40] audit: type=1400 audit(405.815:42156): avc: denied { mounton } for pid=20554 comm="syz.7.4081" path="/" dev="gadgetfs" ino=7024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 406.415206][ T40] audit: type=1400 audit(405.845:42157): avc: denied { unmount } for pid=18406 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 406.453870][T20560] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 406.473888][T18068] Bluetooth: hci2: Frame reassembly failed (-84) [ 406.476921][T18068] Bluetooth: hci2: Frame reassembly failed (-84) [ 406.948169][T20567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4084'. [ 407.184227][T20569] netlink: zone id is out of range [ 407.184355][ T40] audit: type=1400 audit(406.615:42158): avc: denied { unmount } for pid=15674 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 407.232135][T20572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4085'. [ 407.236127][T20572] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4085'. [ 407.444077][T10632] usb 10-1: USB disconnect, device number 53 [ 407.450713][T20576] netlink: 868 bytes leftover after parsing attributes in process `syz.3.4086'. [ 407.526398][ T40] audit: type=1400 audit(406.955:42159): avc: granted { setsecparam } for pid=20577 comm="syz.5.4087" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 407.551370][T20580] xt_socket: unknown flags 0xc [ 407.555298][T20578] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4087'. [ 407.607528][ T40] audit: type=1400 audit(407.035:42160): avc: denied { ioctl } for pid=20586 comm="syz.3.4090" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 407.629226][T20590] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 407.637267][T20590] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 407.642605][T20590] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 407.903001][ T5841] usb 14-1: new high-speed USB device number 38 using dummy_hcd [ 408.029952][ T5841] usb 14-1: device descriptor read/64, error -71 [ 408.282097][ T5841] usb 14-1: new high-speed USB device number 39 using dummy_hcd [ 408.409928][ T5841] usb 14-1: device descriptor read/64, error -71 [ 408.500182][ T5742] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 408.507601][ T5738] Bluetooth: hci2: command 0x1003 tx timeout [ 408.520276][ T5841] usb usb14-port1: attempt power cycle [ 408.690882][T20632] syzkaller0: entered promiscuous mode [ 408.692980][T20632] syzkaller0: entered allmulticast mode [ 408.864949][ T5841] usb 14-1: new high-speed USB device number 40 using dummy_hcd [ 408.892783][ T5841] usb 14-1: device descriptor read/8, error -71 [ 409.141003][ T5841] usb 14-1: new high-speed USB device number 41 using dummy_hcd [ 409.160909][ T5841] usb 14-1: device descriptor read/8, error -71 [ 409.203887][T20656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4110'. [ 409.281885][ T5841] usb usb14-port1: unable to enumerate USB device [ 409.617263][T20679] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4119'. [ 409.622346][T20681] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4119'. [ 409.675434][T20680] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 409.721115][T20686] nvme_fabrics: unknown parameter or missing value 'ãIRÒ/!ãqPÚoF_ÈÄÜ6”Õ)¢êÖ¢&ò”¤' in ctrl creation request [ 409.752663][ T40] audit: type=1326 audit(409.185:42161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20678 comm="syz.3.4118" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f400ed9ce59 code=0x0 [ 409.783918][ T40] audit: type=1400 audit(409.215:42162): avc: denied { watch_with_perm } for pid=20689 comm="syz.5.4121" path="/270/bus" dev="tmpfs" ino=1458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 409.887604][T20696] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 410.727452][T20717] [U] [ 410.729592][T20717] [U] [ 410.730834][T20717] [U] [ 410.732074][T20717] [U] [ 410.742451][T20717] [U] [ 410.743780][T20717] [U] [ 410.744983][T20717] [U] [ 410.746160][T20717] [U] [ 410.752173][T20717] [U] [ 410.753456][T20717] [U] [ 410.754725][T20717] [U] [ 410.756034][T20717] [U] [ 410.767974][T20717] [U] [ 410.769268][T20717] [U] [ 410.770521][T20717] [U] [ 410.771730][T20717] [U] [ 410.794456][T20716] [U] [ 410.986028][T20741] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.4141'. [ 411.157502][T20755] bond0: (slave tunl0): Error: Device can not be enslaved while up [ 411.169995][ T40] audit: type=1400 audit(410.595:42163): avc: denied { create } for pid=20754 comm="syz.7.4144" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=llc_socket permissive=1 [ 411.337310][T20753] IPv6: Can't replace route, no match found [ 411.719128][T20783] xt_hashlimit: size too large, truncated to 1048576 [ 412.006848][T20793] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4157'. [ 412.010077][ T40] audit: type=1400 audit(411.435:42164): avc: denied { shutdown } for pid=20792 comm="syz.9.4157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 412.250242][ T40] audit: type=1400 audit(411.675:42165): avc: denied { audit_control } for pid=20802 comm="syz.7.4159" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 412.282982][T20801] tipc: Failed to obtain node identity [ 412.284809][T20801] tipc: Enabling of bearer rejected, failed to enable media [ 412.353385][T20801] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4156'. [ 412.604173][T20808] nbd: must specify at least one socket [ 412.703092][T20824] ksmbd: Unknown IPC event: 1, ignore. [ 412.752267][T20830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4166'. [ 412.756320][T20830] netlink: 'syz.5.4166': attribute type 6 has an invalid length. [ 412.764112][T20830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4166'. [ 412.777558][T19540] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.777661][T20830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4166'. [ 412.786854][T20830] netlink: 'syz.5.4166': attribute type 6 has an invalid length. [ 412.790478][T18052] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.790520][T20830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4166'. [ 412.799402][T18052] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.812397][T18052] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.823781][ T40] audit: type=1400 audit(412.255:42166): avc: denied { mounton } for pid=20832 comm="syz.9.4168" path="/293/file0" dev="tmpfs" ino=1597 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 412.847612][ T40] audit: type=1400 audit(412.275:42167): avc: denied { execute } for pid=20829 comm="syz.5.4166" name="file1" dev="ramfs" ino=103458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 412.857814][ T40] audit: type=1400 audit(412.275:42168): avc: denied { execute_no_trans } for pid=20829 comm="syz.5.4166" path="/file1" dev="ramfs" ino=103458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 412.860331][T20835] F2FS-fs (nbd9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 412.876893][T20835] F2FS-fs (nbd9): Can't find valid F2FS filesystem in 1th superblock [ 412.883234][T20835] F2FS-fs (nbd9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 412.888070][T20835] F2FS-fs (nbd9): Can't find valid F2FS filesystem in 2th superblock [ 412.907424][T20834] F2FS-fs (nbd9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 412.915710][T20834] F2FS-fs (nbd9): Can't find valid F2FS filesystem in 1th superblock [ 412.923848][T20834] F2FS-fs (nbd9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 412.939071][T20834] F2FS-fs (nbd9): Can't find valid F2FS filesystem in 2th superblock [ 413.081381][T20853] : entered promiscuous mode [ 413.144725][T20858] netlink: 'syz.5.4173': attribute type 1 has an invalid length. [ 413.421200][T20865] could not allocate digest TFM handle cryptd(blake2b-160) [ 413.446841][T20879] netlink: 'syz.7.4178': attribute type 2 has an invalid length. [ 413.550205][T20892] macvlan0: entered promiscuous mode [ 413.578586][ T40] audit: type=1400 audit(413.005:42169): avc: denied { ioctl } for pid=20893 comm="syz.7.4182" path="socket:[103585]" dev="sockfs" ino=103585 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 413.981858][ T40] audit: type=1400 audit(413.415:42170): avc: denied { read } for pid=20919 comm="syz.7.4188" path="socket:[102195]" dev="sockfs" ino=102195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 414.182135][ T40] audit: type=1400 audit(413.615:42171): avc: denied { write } for pid=20932 comm="syz.3.4192" path="socket:[102918]" dev="sockfs" ino=102918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 414.213326][ T40] audit: type=1400 audit(413.635:42172): avc: denied { accept } for pid=20932 comm="syz.3.4192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 414.218767][T20936] __nla_validate_parse: 2 callbacks suppressed [ 414.218789][T20936] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4191'. [ 414.227189][T20936] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4191'. [ 414.297446][ T40] audit: type=1400 audit(413.725:42173): avc: denied { map } for pid=20937 comm="syz.5.4193" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 414.597753][T20958] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 415.483239][T20970] netlink: 'syz.3.4201': attribute type 4 has an invalid length. [ 415.486821][T20970] netlink: 'syz.3.4201': attribute type 1 has an invalid length. [ 415.490634][T20970] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4201'. [ 415.533233][T20965] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4200'. [ 415.654600][T20973] cgroup: No subsys list or none specified [ 416.788896][T21016] netlink: 'syz.9.4213': attribute type 11 has an invalid length. [ 416.792353][T21016] netlink: 199788 bytes leftover after parsing attributes in process `syz.9.4213'. [ 416.972749][T21018] syzkaller0: entered promiscuous mode [ 416.974606][T21018] syzkaller0: entered allmulticast mode [ 417.021153][T21018] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 417.158897][T21022] EXT4-fs (nbd7): unable to read superblock [ 417.199162][T21022] netlink: 'syz.7.4215': attribute type 10 has an invalid length. [ 417.233859][T21024] netlink: 'syz.9.4216': attribute type 1 has an invalid length. [ 417.238027][T21022] veth0_vlan: left promiscuous mode [ 417.245390][T21022] veth0_vlan: entered promiscuous mode [ 417.251366][T21025] netlink: 'syz.7.4215': attribute type 1 has an invalid length. [ 417.252499][T21022] team0: Device veth0_vlan failed to register rx_handler [ 417.255807][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 417.255818][ T40] audit: type=1400 audit(416.685:42181): avc: denied { map } for pid=21021 comm="syz.7.4215" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 417.270903][ T40] audit: type=1400 audit(416.685:42182): avc: denied { execute } for pid=21021 comm="syz.7.4215" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 417.346969][ T5426] IPVS: starting estimator thread 0... [ 417.410834][T21024] 8021q: adding VLAN 0 to HW filter on device bond5 [ 417.446860][T21026] bond5: entered allmulticast mode [ 417.462657][T21029] IPVS: using max 24 ests per chain, 57600 per kthread [ 417.499923][T21028] bond5: (slave ip6gretap1): making interface the new active one [ 417.503719][T21028] ip6gretap1: entered allmulticast mode [ 417.507769][T21028] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 417.567139][T21035] bond4: entered promiscuous mode [ 417.614618][ T40] audit: type=1400 audit(417.045:42183): avc: denied { map } for pid=21044 comm="syz.7.4221" path="socket:[104492]" dev="sockfs" ino=104492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 418.068902][T21073] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4228'. [ 418.108980][T21075] netlink: 'syz.9.4229': attribute type 2 has an invalid length. [ 418.113619][T21075] netlink: 'syz.9.4229': attribute type 2 has an invalid length. [ 418.176045][T21081] netlink: 232 bytes leftover after parsing attributes in process `syz.7.4230'. [ 418.248835][T21081] syzkaller0: create flow: hash 3650857858 index 1 [ 418.270483][ T5841] syzkaller0: tun_net_xmit 76 [ 418.326602][T21083] syzkaller0: delete flow: hash 3650857858 index 1 [ 418.441714][ T5426] usb 14-1: new high-speed USB device number 42 using dummy_hcd [ 418.601490][ T5426] usb 14-1: Using ep0 maxpacket: 8 [ 418.621511][ T5426] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 418.625375][ T5426] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 418.629558][ T5426] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 418.634743][ T5426] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 418.639320][ T5426] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 418.645301][ T5426] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 418.650033][ T5426] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.697308][T21088] kAFS: unable to lookup cell '1' [ 418.701042][T21088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4233'. [ 418.716004][T21089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=21089 comm=syz.5.4234 [ 418.872761][ T5426] usb 14-1: GET_CAPABILITIES returned 0 [ 418.874719][ T5426] usbtmc 14-1:16.0: can't read capabilities [ 419.074846][T21080] netlink: 'syz.9.4231': attribute type 1 has an invalid length. [ 419.083893][T21080] usb 14-1: usbtmc_ioctl_clear_in_halt returned -32 [ 419.088124][ T5426] usb 14-1: USB disconnect, device number 42 [ 424.317697][T21090] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 424.320687][T21101] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4236'. [ 424.328399][T21101] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4236'. [ 424.368530][T21109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4237'. [ 424.396913][T21111] netlink: 'syz.9.4238': attribute type 1 has an invalid length. [ 424.512557][T21111] 8021q: adding VLAN 0 to HW filter on device bond7 [ 424.517564][T21111] bond6: (slave bond7): making interface the new active one [ 424.522628][T21111] bond6: (slave bond7): Enslaving as an active interface with an up link [ 424.540716][T21120] bond6: (slave gretap1): Enslaving as a backup interface with an up link [ 424.661075][T21131] ªªªªªª: renamed from lo (while UP) [ 424.689112][T21124] lo speed is unknown, defaulting to 1000 [ 425.029723][ T40] audit: type=1400 audit(424.455:42184): avc: denied { setopt } for pid=21144 comm="syz.9.4247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 425.030407][T21145] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4247'. [ 425.089805][ T40] audit: type=1400 audit(424.515:42185): avc: denied { create } for pid=21146 comm="syz.5.4246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 425.149705][ T40] audit: type=1400 audit(424.575:42186): avc: denied { bind } for pid=21146 comm="syz.5.4246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 425.282034][ T40] audit: type=1400 audit(424.705:42187): avc: denied { accept } for pid=21154 comm="syz.5.4249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 425.291197][ T40] audit: type=1400 audit(424.705:42188): avc: denied { read } for pid=21154 comm="syz.5.4249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 425.324351][T21155] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.4249'. [ 425.465708][T21163] vivid-000: disconnect [ 425.505579][T21159] vivid-000: reconnect [ 425.767932][ T40] audit: type=1400 audit(425.195:42189): avc: denied { bind } for pid=21172 comm="syz.5.4255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 425.857732][T21177] lo speed is unknown, defaulting to 1000 [ 426.103466][T21182] fuse: Bad value for 'user_id' [ 426.105227][T21182] fuse: Bad value for 'user_id' [ 426.500366][ T5738] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 426.775018][ T40] audit: type=1400 audit(426.205:42190): avc: denied { bind } for pid=21198 comm="syz.7.4262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 426.783741][ T40] audit: type=1326 audit(426.205:42191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21198 comm="syz.7.4262" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ab079ce59 code=0x0 [ 426.836053][T21200] syz.7.4262(21200): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 426.875913][T21200] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4262'. [ 426.915479][ T40] audit: type=1326 audit(426.345:42192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21198 comm="syz.7.4262" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ab079ce59 code=0x0 [ 426.975304][ T40] audit: type=1400 audit(426.405:42193): avc: denied { remount } for pid=21198 comm="syz.7.4262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 427.540846][T21236] netlink: 'syz.3.4273': attribute type 10 has an invalid length. [ 427.555457][T21236] geneve1: entered promiscuous mode [ 427.568718][T21236] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 427.739915][T21244] netlink: 'syz.7.4275': attribute type 3 has an invalid length. [ 427.774743][T21247] netlink: 'syz.7.4275': attribute type 3 has an invalid length. [ 427.824911][T21234] hpfs: hpfs_map_sector(): read error [ 427.893255][T21234] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 427.930968][T21251] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4276'. [ 428.036897][T21251] bond0: (slave bond_slave_0): Releasing backup interface [ 428.202463][T21251] bond_slave_0: entered promiscuous mode [ 428.207741][T21251] bond_slave_0: entered allmulticast mode [ 428.691895][T21274] ip6gretap0: entered promiscuous mode [ 428.698863][T21274] ip6gretap0: entered allmulticast mode [ 428.836941][T21281] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4283'. [ 428.847383][T21284] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4284'. [ 428.875624][T21281] erspan0: entered promiscuous mode [ 428.882036][T21281] macvlan3: entered allmulticast mode [ 428.884468][T21281] erspan0: entered allmulticast mode [ 428.887040][T21282] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=21282 comm=syz.7.4283 [ 429.054199][T21296] netlink: 108 bytes leftover after parsing attributes in process `syz.7.4287'. [ 429.083188][T21299] CIFS: bad ip= option (.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 429.231313][T21304] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 429.869285][T21338] SELinux: failed to load policy [ 430.527195][T21368] overlayfs: workdir and upperdir must reside under the same mount [ 430.548301][T21364] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 430.557236][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 430.557273][ T40] audit: type=1400 audit(429.985:42202): avc: denied { unmount } for pid=17309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 430.674902][T21385] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4311'. [ 431.324355][T21414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4319'. [ 431.413061][T21417] tipc: Started in network mode [ 431.414673][T21417] tipc: Node identity 4, cluster identity 4711 [ 431.416706][T21417] tipc: Node number set to 4 [ 431.507634][ T40] audit: type=1400 audit(430.935:42203): avc: denied { read } for pid=21424 comm="syz.9.4323" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 431.517051][T21425] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 431.616708][T21429] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4320'. [ 431.625741][T21429] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 431.628849][T21429] ALSA: mixer_oss: invalid index 1374389 [ 431.677944][T21434] x_tables: duplicate underflow at hook 1 [ 431.715040][T21436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=21436 comm=syz.9.4327 [ 431.826961][T21436] syz.9.4327 (21436): drop_caches: 2 [ 431.860791][T21436] syz.9.4327 (21436): drop_caches: 2 [ 432.085098][T21443] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 432.092151][T21443] iommufd_mock iommufd_mock2: Adding to iommu group 11 [ 432.341088][ T5842] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 432.470289][ T5842] usb 10-1: device descriptor read/64, error -71 [ 432.710209][ T5842] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 432.840905][ T5842] usb 10-1: device descriptor read/64, error -71 [ 432.950631][ T5842] usb usb10-port1: attempt power cycle [ 433.123444][ T40] audit: type=1400 audit(432.555:42204): avc: denied { getopt } for pid=21458 comm="syz.7.4335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 433.127814][T21463] sctp: [Deprecated]: syz.9.4338 (pid 21463) Use of int in max_burst socket option deprecated. [ 433.127814][T21463] Use struct sctp_assoc_value instead [ 433.143595][T21463] sctp: [Deprecated]: syz.9.4338 (pid 21463) Use of int in maxseg socket option. [ 433.143595][T21463] Use struct sctp_assoc_value instead [ 433.255307][T21466] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 433.289936][ T5842] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 433.311591][ T5842] usb 10-1: device descriptor read/8, error -71 [ 433.551040][ T5842] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 433.570785][ T5842] usb 10-1: device descriptor read/8, error -71 [ 433.603767][T21477] netlink: 'syz.9.4343': attribute type 10 has an invalid length. [ 433.606917][T21477] netlink: 228 bytes leftover after parsing attributes in process `syz.9.4343'. [ 433.616816][T21477] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 433.628055][T21477] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 433.632629][T21477] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 433.640454][T21477] UDF-fs: Scanning with blocksize 512 failed [ 433.645633][T21477] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 433.649953][T21477] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 433.654409][T21477] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 433.657777][T21477] UDF-fs: Scanning with blocksize 1024 failed [ 433.661288][T21477] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 433.665726][T21477] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 433.669768][T21477] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 433.673437][T21477] UDF-fs: Scanning with blocksize 2048 failed [ 433.687378][ T5842] usb usb10-port1: unable to enumerate USB device [ 433.691851][T21477] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 433.703094][T21477] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 433.708513][T21477] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 433.713789][T21477] UDF-fs: Scanning with blocksize 4096 failed [ 433.717120][T21477] UDF-fs: warning (device loop9): udf_fill_super: No partition found (1) [ 434.150145][T21493] openvswitch: netlink: Multiple metadata blocks provided [ 434.266645][T21495] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4347'. [ 434.276445][T21495] syzkaller0: entered promiscuous mode [ 434.278302][T21495] syzkaller0: entered allmulticast mode [ 434.743769][T21507] bond8: entered promiscuous mode [ 434.797286][T21513] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 434.803743][T21513] SELinux: failed to load policy [ 435.424546][ T40] audit: type=1400 audit(434.855:42205): avc: denied { accept } for pid=21532 comm="syz.5.4357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 435.829723][T21554] syzkaller1: entered allmulticast mode [ 435.841934][T21554] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.4361'. [ 435.917380][T21558] sch_fq: defrate 0 ignored. [ 435.928838][T21559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4363'. [ 436.131612][T21562] tipc: Trying to set illegal importance in message [ 436.227317][T21569] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.300121][ T40] audit: type=1400 audit(435.735:42206): avc: denied { write } for pid=21577 comm="syz.3.4371" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 436.405872][T21584] binder: 21578:21584 ioctl c0306201 200000000640 returned -22 [ 436.533882][T21589] nbd: must specify an index to disconnect [ 436.688534][ T40] audit: type=1326 audit(436.115:42207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21598 comm="syz.5.4380" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f12a639ce59 code=0x7ffc0000 [ 436.696834][ T40] audit: type=1326 audit(436.115:42208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21598 comm="syz.5.4380" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f12a639ce59 code=0x7ffc0000 [ 436.706740][ T40] audit: type=1326 audit(436.115:42209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21598 comm="syz.5.4380" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f12a639ce59 code=0x7ffc0000 [ 436.715647][ T40] audit: type=1326 audit(436.115:42210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21598 comm="syz.5.4380" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f12a639ce59 code=0x7ffc0000 [ 436.723330][T21595] lo speed is unknown, defaulting to 1000 [ 436.953171][ T40] audit: type=1400 audit(436.385:42211): avc: denied { create } for pid=21614 comm="syz.5.4383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 437.498457][T21640] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4390'. [ 437.504280][T21640] syz_tun: entered promiscuous mode [ 437.561300][T21640] netlink: 'syz.9.4390': attribute type 1 has an invalid length. [ 437.578199][T21644] misc userio: Can't change port type on an already running userio instance [ 437.774878][T21657] binder: 21655:21657 ioctl c0306201 0 returned -14 [ 437.778427][T21656] binder: 21655:21656 ioctl 8004480e 2000000001c0 returned -22 [ 437.981247][T10632] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 438.197924][T21670] program syz.7.4398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 438.374828][ T40] audit: type=1400 audit(2000000001.149:42212): avc: denied { connect } for pid=21678 comm="syz.9.4401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 438.771543][T21662] 9pnet_fd: p9_fd_create_tcp (21662): problem connecting socket to 127.0.0.1 [ 439.036057][ T40] audit: type=1400 audit(2000000001.809:42213): avc: denied { lock } for pid=21696 comm="syz.3.4405" path="socket:[108109]" dev="sockfs" ino=108109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 439.050687][T21694] rdma_rxe: rxe_newlink: failed to add lo [ 439.058103][T21694] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4403'. [ 439.185328][T21694] veth0_vlan: left promiscuous mode [ 439.188492][T21694] veth0_vlan: entered promiscuous mode [ 439.211114][T21694] 8021q: adding VLAN 0 to HW filter on device bond1 [ 439.215924][T21694] 8021q: adding VLAN 0 to HW filter on device bond2 [ 439.243082][T21694] 8021q: adding VLAN 0 to HW filter on device bond4 [ 439.262356][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.265610][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.406794][ T40] audit: type=1400 audit(2000000002.179:42214): avc: denied { write } for pid=21705 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.498826][ T40] audit: type=1400 audit(2000000002.269:42215): avc: denied { write } for pid=21713 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.798811][T21733] ipt_rpfilter: unknown options [ 439.804371][T21733] ipt_rpfilter: unknown options [ 439.806315][T21733] ipt_rpfilter: unknown options [ 439.814514][T21733] ipt_rpfilter: unknown options [ 439.816650][T21733] ipt_rpfilter: unknown options [ 439.818438][T21733] ipt_rpfilter: unknown options [ 439.824670][T21733] ipt_rpfilter: unknown options [ 439.826399][T21733] ipt_rpfilter: unknown options [ 439.830810][T21733] ipt_rpfilter: unknown options [ 439.834811][T21733] ipt_rpfilter: unknown options [ 440.007643][T21741] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 440.226706][T21752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4419'. [ 440.437633][T21762] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4423'. [ 440.441341][T21762] netlink: 'syz.7.4423': attribute type 21 has an invalid length. [ 440.671775][T21769] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 440.710095][T21776] FAULT_INJECTION: forcing a failure. [ 440.710095][T21776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.716657][T21776] CPU: 2 UID: 0 PID: 21776 Comm: syz.7.4426 Tainted: G L syzkaller #0 PREEMPT(full) [ 440.716688][T21776] Tainted: [L]=SOFTLOCKUP [ 440.716694][T21776] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 440.716705][T21776] Call Trace: [ 440.716735][T21776] [ 440.716743][T21776] dump_stack_lvl+0x100/0x190 [ 440.716772][T21776] should_fail_ex.cold+0x5/0xa [ 440.716797][T21776] _copy_from_user+0x2e/0xd0 [ 440.716824][T21776] ucma_write+0x128/0x330 [ 440.716848][T21776] ? __pfx_ucma_write+0x10/0x10 [ 440.716869][T21776] ? bpf_lsm_file_permission+0x9/0x10 [ 440.716902][T21776] ? security_file_permission+0x76/0x210 [ 440.716928][T21776] ? rw_verify_area+0xce/0x6d0 [ 440.716948][T21776] vfs_write+0x2aa/0x1070 [ 440.716969][T21776] ? __pfx_ucma_write+0x10/0x10 [ 440.716991][T21776] ? __pfx_vfs_write+0x10/0x10 [ 440.717008][T21776] ? find_held_lock+0x2b/0x80 [ 440.717025][T21776] ? __fget_files+0x215/0x3d0 [ 440.717047][T21776] ? __fget_files+0x215/0x3d0 [ 440.717079][T21776] ? __fget_files+0x21f/0x3d0 [ 440.717107][T21776] ksys_write+0x1f8/0x250 [ 440.717126][T21776] ? __pfx_ksys_write+0x10/0x10 [ 440.717148][T21776] ? rcu_is_watching+0x12/0xc0 [ 440.717178][T21776] do_syscall_64+0x10b/0xf80 [ 440.717210][T21776] ? clear_bhb_loop+0x40/0x90 [ 440.717230][T21776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.717248][T21776] RIP: 0033:0x7f9ab079ce59 [ 440.717265][T21776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.717282][T21776] RSP: 002b:00007f9aae9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 440.717322][T21776] RAX: ffffffffffffffda RBX: 00007f9ab0a15fa0 RCX: 00007f9ab079ce59 [ 440.717334][T21776] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000003 [ 440.717344][T21776] RBP: 00007f9aae9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 440.717354][T21776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.717365][T21776] R13: 00007f9ab0a16038 R14: 00007f9ab0a15fa0 R15: 00007ffefa829258 [ 440.717390][T21776] [ 440.885221][T21780] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4428'. [ 440.892914][T21780] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4428'. [ 440.897405][T21780] netlink: 'syz.7.4428': attribute type 15 has an invalid length. [ 440.901949][T21780] netlink: 'syz.7.4428': attribute type 18 has an invalid length. [ 440.920665][T21780] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4428'. [ 440.928764][T21780] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4428'. [ 441.370396][T21810] nbd7: detected capacity change from 0 to 4294967296 [ 441.403882][T21810] block nbd7: shutting down sockets [ 441.414989][ C3] blk_print_req_error: 131 callbacks suppressed [ 441.415005][ C3] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 441.420574][ C3] buffer_io_error: 462 callbacks suppressed [ 441.420619][ C3] Buffer I/O error on dev nbd7, logical block 0, async page read [ 441.430540][ T5425] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 441.437884][ T5425] Buffer I/O error on dev nbd7, logical block 0, async page read [ 441.447345][T21123] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 441.456075][T21123] Buffer I/O error on dev nbd7, logical block 0, async page read [ 441.461388][T21123] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 441.464277][T21123] Buffer I/O error on dev nbd7, logical block 0, async page read [ 441.466874][T21123] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 441.470311][T21123] Buffer I/O error on dev nbd7, logical block 0, async page read [ 441.477206][T21123] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 441.486514][T21123] Buffer I/O error on dev nbd7, logical block 0, async page read [ 441.489226][T21123] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 441.492717][T21123] Buffer I/O error on dev nbd7, logical block 0, async page read [ 441.495403][T21123] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 441.498729][T21123] Buffer I/O error on dev nbd7, logical block 0, async page read [ 441.501687][T21123] ldm_validate_partition_table(): Disk read failed. [ 441.503990][T21123] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 441.506937][T21123] Buffer I/O error on dev nbd7, logical block 0, async page read [ 441.509989][T21123] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 441.513196][T21123] Buffer I/O error on dev nbd7, logical block 0, async page read [ 441.515908][T21123] Dev nbd7: unable to read RDB block 0 [ 441.518233][T21123] nbd7: unable to read partition table [ 441.523557][T21123] ldm_validate_partition_table(): Disk read failed. [ 441.525994][T21123] Dev nbd7: unable to read RDB block 0 [ 441.528123][T21123] nbd7: unable to read partition table [ 441.621295][T21823] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4442'. [ 441.740222][ T1350] usb 14-1: new high-speed USB device number 43 using dummy_hcd [ 441.796230][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 441.796249][ T40] audit: type=1400 audit(2000000004.569:42221): avc: denied { mounton } for pid=21828 comm="syz.5.4443" path="/syzcgroup/unified/syz5" dev="hugetlbfs" ino=106044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 441.859135][T21843] MINIX-fs: blocksize too small for device [ 441.894697][ T1350] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.899737][ T1350] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.906194][ T1350] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 441.911331][T21843] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 441.914943][ T1350] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 441.926415][ T1350] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.938060][ T1350] usb 14-1: config 0 descriptor?? [ 441.982948][ T40] audit: type=1400 audit(2000000004.759:42222): avc: denied { relabelfrom } for pid=21856 comm="syz.7.4449" name="L2TP/IPv6" dev="sockfs" ino=108960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 441.982952][T21857] SELinux: Context system_u:object_r:dhcpc_exec_t:s0 is not valid (left unmapped). [ 441.993711][ T40] audit: type=1400 audit(2000000004.779:42223): avc: denied { relabelto } for pid=21856 comm="syz.7.4449" name="L2TP/IPv6" dev="sockfs" ino=108960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=rawip_socket permissive=1 trawcon="system_u:object_r:dhcpc_exec_t:s0" [ 442.053123][ T40] audit: type=1400 audit(2000000004.829:42224): avc: denied { create } for pid=21858 comm="syz.5.4451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 442.062255][ T40] audit: type=1400 audit(2000000004.829:42225): avc: denied { bind } for pid=21858 comm="syz.5.4451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 442.104123][T21864] loop2: detected capacity change from 0 to 7 [ 442.126157][T21864] Dev loop2: unable to read RDB block 7 [ 442.129078][T21864] loop2: AHDI p1 p2 p3 [ 442.130919][T21864] loop2: partition table partially beyond EOD, truncated [ 442.132864][T21866] tmpfs: Bad value for 'mpol' [ 442.136858][T21864] loop2: p1 start 1601398130 is beyond EOD, truncated [ 442.139550][T21864] loop2: p2 start 1702059890 is beyond EOD, truncated [ 442.211205][ T40] audit: type=1400 audit(2000000004.989:42226): avc: denied { mount } for pid=21869 comm="syz.7.4454" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 442.312780][T21875] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4455'. [ 442.315557][T21875] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4455'. [ 442.425731][T21877] program syz.7.4456 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 442.470121][ T5841] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 442.475341][T21879] netlink: 'syz.7.4457': attribute type 1 has an invalid length. [ 442.489419][T21879] bond5: entered promiscuous mode [ 442.491500][T21879] bond5: entered allmulticast mode [ 442.493358][T21879] 8021q: adding VLAN 0 to HW filter on device bond5 [ 442.582478][ T40] audit: type=1400 audit(2000000005.359:42227): avc: denied { append } for pid=21878 comm="syz.7.4457" name="file0" dev="fuse" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 442.610017][ T5841] usb 10-1: device descriptor read/64, error -71 [ 442.761357][T21892] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4459'. [ 442.859890][ T5841] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 442.871744][ T1350] usbhid 14-1:0.0: can't add hid device: -71 [ 442.873829][ T1350] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 442.879319][ T1350] usb 14-1: USB disconnect, device number 43 [ 443.000080][ T5841] usb 10-1: device descriptor read/64, error -71 [ 443.120465][ T5841] usb usb10-port1: attempt power cycle [ 443.470007][ T5841] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 443.495558][ T40] audit: type=1400 audit(2000000006.269:42228): avc: denied { ioctl } for pid=21918 comm="syz.9.4468" path="/dev/usbmon3" dev="devtmpfs" ino=746 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 443.500843][ T5841] usb 10-1: device descriptor read/8, error -71 [ 443.741962][ T5841] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 443.770751][ T5841] usb 10-1: device descriptor read/8, error -71 [ 443.881037][ T5841] usb usb10-port1: unable to enumerate USB device [ 444.054138][T21929] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 444.223384][T21942] input input78: cannot allocate more than FF_MAX_EFFECTS effects [ 444.664780][T21959] binder: 21957:21959 ioctl 8004f50c 200000000040 returned -22 [ 444.713485][T21964] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4481'. [ 444.783275][T21964] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4481'. [ 444.824526][ T40] audit: type=1400 audit(2000000007.599:42229): avc: denied { write } for pid=21967 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.904464][ T40] audit: type=1400 audit(2000000007.679:42230): avc: denied { write } for pid=21970 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.066641][T21973] slcan: can't register candev [ 445.632887][T21956] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 445.650007][T21956] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 445.709345][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.732463][T22011] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.856756][T21956] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 445.859212][T21956] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 445.885231][T21956] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 445.887198][T21956] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 446.162116][T22041] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22041 comm=syz.7.4493 [ 446.167048][T22039] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=22039 comm=syz.7.4493 [ 446.221381][T22045] Invalid ELF header type: 3 != 1 [ 446.315291][T22051] __nla_validate_parse: 2 callbacks suppressed [ 446.315419][T22051] netlink: 484 bytes leftover after parsing attributes in process `syz.3.4495'. [ 446.449750][T22056] No source specified [ 446.586747][T22071] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4501'. [ 446.596122][T22069] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4501'. [ 446.624121][T22070] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4261517534 (8523035068 ns) > initial count (7554138186 ns). Using initial count to start timer. [ 446.855578][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 446.855596][ T40] audit: type=1400 audit(2000000009.629:42246): avc: denied { write } for pid=22087 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 446.955203][ T40] audit: type=1400 audit(2000000009.739:42247): avc: denied { write } for pid=22095 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.052635][ T40] audit: type=1400 audit(2000000009.829:42248): avc: denied { write } for pid=22100 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.146363][ T40] audit: type=1400 audit(2000000009.919:42249): avc: denied { bind } for pid=22107 comm="syz.3.4511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 447.169015][ T40] audit: type=1400 audit(2000000009.939:42250): avc: denied { write } for pid=22106 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.251074][T22117] xt_hashlimit: size too large, truncated to 1048576 [ 447.387946][ T40] audit: type=1400 audit(2000000010.159:42251): avc: denied { write } for pid=22123 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.492476][T22133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4518'. [ 447.546703][ T40] audit: type=1400 audit(2000000010.319:42252): avc: denied { write } for pid=22130 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.623889][ T40] audit: type=1400 audit(2000000010.399:42253): avc: denied { getopt } for pid=22140 comm="syz.9.4517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 447.643802][ T40] audit: type=1400 audit(2000000010.419:42254): avc: denied { write } for pid=22141 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.826777][ T40] audit: type=1400 audit(2000000010.599:42255): avc: denied { map } for pid=22160 comm="syz.3.4521" path="socket:[97825]" dev="sockfs" ino=97825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 448.094192][T22172] netlink: 'syz.3.4525': attribute type 3 has an invalid length. [ 448.335138][T22186] netlink: 'syz.3.4530': attribute type 4 has an invalid length. [ 448.339090][T22186] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4530'. [ 448.358282][T22186] .`: renamed from bond0 (while UP) [ 448.561062][T22191] netlink: 'syz.9.4532': attribute type 1 has an invalid length. [ 448.588842][T22191] 8021q: adding VLAN 0 to HW filter on device bond9 [ 448.598854][T22191] vlan2: entered allmulticast mode [ 448.600995][T22191] veth0_to_bond: entered allmulticast mode [ 448.614206][T22191] bond9: (slave vlan2): making interface the new active one [ 448.618180][T22191] bond9: (slave vlan2): Enslaving as an active interface with an up link [ 449.780785][ T5738] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 449.781529][T22195] Bluetooth: hci2: command 0x1003 tx timeout [ 450.402054][T22240] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 450.450596][T22240] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 450.546593][T22246] 9p: Could not find request transport: virtiÔo [ 450.779118][ T5742] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 450.851293][ T846] IPVS: starting estimator thread 0... [ 450.942211][T22267] IPVS: using max 44 ests per chain, 105600 per kthread [ 451.095972][T22271] overlayfs: workdir and upperdir must be separate subtrees [ 451.140725][T22276] xt_time: unknown flags 0xf4 [ 451.324888][T22288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.424538][T22291] lo speed is unknown, defaulting to 1000 [ 451.458347][T22298] vcan1: left allmulticast mode [ 451.464632][T22298] wireguard0: left allmulticast mode [ 451.466887][T22298] erspan1: left allmulticast mode [ 451.468658][T22298] sit2: left allmulticast mode [ 451.486593][T22298] geneve3: left allmulticast mode [ 451.491120][T22298] ipvlan2: left allmulticast mode [ 451.498454][T22298] batadv_slave_1: left allmulticast mode [ 451.507631][T22298] bond5: left allmulticast mode [ 451.509772][T22298] ip6gretap1: left allmulticast mode [ 451.516025][T22298] vlan2: left allmulticast mode [ 451.518157][T22298] veth0_to_bond: left allmulticast mode [ 451.547288][T22304] CIFS: iocharset name too long [ 452.161080][T22321] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 452.481114][T22331] ipvlan2: entered allmulticast mode [ 452.483546][T22331] veth0_to_bridge: entered allmulticast mode [ 452.510859][T22333] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4573'. [ 452.586300][T22336] bond0: (slave sit0): refused to change device type [ 452.619158][ C3] [ 452.620401][ C3] ============================= [ 452.622712][ C3] [ BUG: Invalid wait context ] [ 452.624834][ C3] syzkaller #0 Tainted: G L [ 452.627680][ C3] ----------------------------- [ 452.629948][ C3] syz.5.4563/22290 is trying to lock: [ 452.632563][ C3] ffff88805ea712d0 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x253/0xe80 [ 452.636093][ C3] other info that might help us debug this: [ 452.638098][ C3] context-{2:2} [ 452.639275][ C3] 4 locks held by syz.5.4563/22290: [ 452.641024][ C3] #0: ffff88803eec20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0x154/0x2f0 [ 452.644616][ C3] #1: ffff88803eec60a0 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: tty_ldisc_release+0x182/0x2f0 [ 452.648964][ C3] #2: ffff8880273f40a8 (&gsm->mutex){+.+.}-{4:4}, at: gsm_cleanup_mux+0xc9/0x8a0 [ 452.653148][ C3] #3: ffff88805ea71850 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x245/0xe80 [ 452.657534][ C3] stack backtrace: [ 452.659251][ C3] CPU: 3 UID: 0 PID: 22290 Comm: syz.5.4563 Tainted: G L syzkaller #0 PREEMPT(full) [ 452.659278][ C3] Tainted: [L]=SOFTLOCKUP [ 452.659284][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 452.659295][ C3] Call Trace: [ 452.659303][ C3] [ 452.659310][ C3] dump_stack_lvl+0x100/0x190 [ 452.659333][ C3] __lock_acquire+0xfa4/0x2630 [ 452.659355][ C3] ? __lock_acquire+0x4a5/0x2630 [ 452.659375][ C3] ? xa_load+0x149/0x2c0 [ 452.659390][ C3] ? xa_load+0x149/0x2c0 [ 452.659406][ C3] lock_acquire+0x1b1/0x370 [ 452.659426][ C3] ? kvm_xen_set_evtchn_fast+0x253/0xe80 [ 452.659448][ C3] _raw_read_lock_irqsave+0x46/0x90 [ 452.659470][ C3] ? kvm_xen_set_evtchn_fast+0x253/0xe80 [ 452.659489][ C3] kvm_xen_set_evtchn_fast+0x253/0xe80 [ 452.659507][ C3] ? kvm_xen_set_evtchn_fast+0x245/0xe80 [ 452.659527][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 452.659550][ C3] ? __pfx_kvm_xen_set_evtchn_fast+0x10/0x10 [ 452.659568][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 452.659593][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 452.659615][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 452.659639][ C3] xen_timer_callback+0x1db/0x2a0 [ 452.659657][ C3] ? __pfx_xen_timer_callback+0x10/0x10 [ 452.659675][ C3] ? __hrtimer_run_queues+0x383/0xa00 [ 452.659701][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 452.659838][ C3] ? __pfx_xen_timer_callback+0x10/0x10 [ 452.659857][ C3] __hrtimer_run_queues+0x142/0xa00 [ 452.659886][ C3] hrtimer_interrupt+0x3e5/0x940 [ 452.659906][ C3] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 452.659935][ C3] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 452.659957][ C3] [ 452.659963][ C3] [ 452.659969][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 452.659988][ C3] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 452.660011][ C3] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 46 a2 56 f6 48 89 df e8 1e f2 56 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 a5 bb 46 f6 65 8b 05 1e 3f 7d 08 85 c0 74 16 5b [ 452.660028][ C3] RSP: 0018:ffffc90005d1f7b8 EFLAGS: 00000246 [ 452.660043][ C3] RAX: 0000000000000006 RBX: ffffffff9b3fe4b8 RCX: 0000000000000040 [ 452.660054][ C3] RDX: 0000000000000000 RSI: ffffffff8df22fb5 RDI: ffffffff8c1c4180 [ 452.660065][ C3] RBP: 0000000000000202 R08: 0000000000000001 R09: 0000000000000000 [ 452.660075][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 452.660085][ C3] R13: ffff888049593cd0 R14: dffffc0000000000 R15: 1ffff92000ba3efe [ 452.660103][ C3] debug_object_activate+0x331/0x490 [ 452.660127][ C3] ? __pfx_debug_object_activate+0x10/0x10 [ 452.660152][ C3] ? radix_tree_delete_item+0xef/0x230 [ 452.660173][ C3] ? __pfx_radix_tree_delete_item+0x10/0x10 [ 452.660221][ C3] ? do_raw_spin_lock+0x128/0x260 [ 452.660245][ C3] ? find_held_lock+0x2b/0x80 [ 452.660261][ C3] ? __pfx_kernfs_free_rcu+0x10/0x10 [ 452.660282][ C3] __call_rcu_common.constprop.0+0x35/0x9b0 [ 452.660307][ C3] kernfs_put.part.0+0x22f/0x720 [ 452.660330][ C3] kernfs_put+0x53/0x60 [ 452.660351][ C3] sysfs_remove_group+0xc6/0x1b0 [ 452.660373][ C3] dpm_sysfs_remove+0x9d/0xb0 [ 452.660393][ C3] device_del+0x180/0x9b0 [ 452.660409][ C3] ? __pfx_device_del+0x10/0x10 [ 452.660427][ C3] device_unregister+0x1d/0xe0 [ 452.660443][ C3] device_destroy+0x99/0xe0 [ 452.660458][ C3] ? __pfx_device_destroy+0x10/0x10 [ 452.660475][ C3] ? kobject_put+0xb9/0x640 [ 452.660491][ C3] tty_unregister_device+0x82/0x1c0 [ 452.660513][ C3] gsm_cleanup_mux+0x605/0x8a0 [ 452.660530][ C3] ? __pfx_gsm_cleanup_mux+0x10/0x10 [ 452.660545][ C3] ? irqentry_exit+0x24d/0x7e0 [ 452.660573][ C3] gsmld_close+0x45/0x200 [ 452.660588][ C3] ? __pfx_gsmld_close+0x10/0x10 [ 452.660603][ C3] tty_ldisc_close+0x114/0x1a0 [ 452.660622][ C3] tty_ldisc_kill+0x8e/0x150 [ 452.660641][ C3] tty_ldisc_release+0x107/0x2f0 [ 452.660662][ C3] tty_release_struct+0x23/0xe0 [ 452.660683][ C3] tty_release+0xd7a/0x1300 [ 452.660706][ C3] ? ima_file_free+0xc6/0x340 [ 452.660728][ C3] ? __pfx_tty_release+0x10/0x10 [ 452.660749][ C3] __fput+0x3ff/0xb50 [ 452.660772][ C3] ? _raw_spin_unlock_irq+0x23/0x50 [ 452.660794][ C3] task_work_run+0x150/0x240 [ 452.660815][ C3] ? __pfx_task_work_run+0x10/0x10 [ 452.660842][ C3] ? rcu_is_watching+0x12/0xc0 [ 452.660868][ C3] exit_to_user_mode_loop+0x107/0x4f0 [ 452.660889][ C3] ? rcu_is_watching+0x12/0xc0 [ 452.660914][ C3] do_syscall_64+0x706/0xf80 [ 452.660936][ C3] ? clear_bhb_loop+0x40/0x90 [ 452.660955][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.660972][ C3] RIP: 0033:0x7f12a639ce59 [ 452.660987][ C3] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.661002][ C3] RSP: 002b:00007ffe29fec918 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 452.661019][ C3] RAX: 0000000000000000 RBX: 00007f12a6617da0 RCX: 00007f12a639ce59 [ 452.661030][ C3] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 452.661040][ C3] RBP: 00007f12a6617da0 R08: 0000000000000006 R09: 0000000000000000 [ 452.661051][ C3] R10: 00007f12a6617cb0 R11: 0000000000000246 R12: 000000000006e408 [ 452.661062][ C3] R13: 00007f12a661636c R14: 000000000006e1fe R15: 00007f12a6616360 [ 452.661079][ C3]