last executing test programs: 3.537248837s ago: executing program 0 (id=105): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x28, r4, 0x200, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r7 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x4a0000) syz_open_dev$usbfs(&(0x7f0000000280), 0x8, 0x1830c1) ioctl$MON_IOCQ_URB_LEN(r7, 0x9201) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r8, 0x8008976) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f00000001c0)={0x6, 0xcc, 0x2, 0x0, 0x0, [{{}, 0x100000004}, {{r8}, 0x559}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000240)) dup(r1) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000000c0)={r10, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000180)={r10, @in={{0x2, 0x4e24, @empty}}, 0x9, 0x81, 0x1, 0x6940000, 0x80, 0x9, 0x77}, &(0x7f0000000940)=0x9c) 3.306417195s ago: executing program 0 (id=106): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x11) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x33, 0x2, @tid=0xffffffffffffffff}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x40, 0x23, 0xc6, {0xc6, 0x23, "72ea75a7435a4d24c483937656ebfde7c77c0ca2d04aa81b8f7892a481879a35dfcc755764ca0e51bd349c1822ad1131d59df71087d5319b22971ef9078e1877328d70cfa7b1accf31c30480a67e835635cab2977e1592f152cadc68e446757867318c26ec72a440e42a7b6da06470d8a605b874ee122c205526fb962067fb75060bd1265f91ea528b11dad929c95f0148ac428858188cee72a4e8e125b2db95994f9f0a3efbabd637a4162051eaa3aef0f080b491f77b7731a021f2bfffa0af3a13844c"}}, &(0x7f0000000240)={0x0, 0x3, 0x6f, @string={0x6f, 0x3, "8e19827c9fc688d63aabfc83cb0cfcb570ed9038ecaf70ab888d50c04cb3b6083915f107765445531d98287b6a8c890b31bc8d43faa23a362c04b5f7861dacfd3a4f235f42c59438078629c789e2da87664ddd8485d9dc4ac516733266f4aaacb145897f4d28e54a3144a66b23"}}, &(0x7f00000002c0)={0x0, 0xf, 0x25, {0x5, 0xf, 0x25, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x90, 0x0, 0x1, 0x1, 0x4a}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x4, 0x9}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x3, 0x5, 0x4, 0x5}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x73, 0x80, 0x8, 0x1b, "7744eefa", "cc4bfabd"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x67, 0x80, 0x2, 0x0, 0x1, 0x2, 0x1d65}}}, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x80, "88822753b28fe558d15894d7da12522f5abb2814149f6d4f218e7e16996621cf5465cbf1429f842ee0a1c258da2812209a9ea30410847bb91615f7c8dc81f0596e1a9816f4ed793eda74053f6de4aba629f9b2420d67b5b86a9db5de00744035bcd1f3226d227ba507a90a755754b51f22197e53aae85aa884b84bd56bc07f56"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x800, 0x90, [0xff0f]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000640)={0x40, 0xb, 0x2, "8cd6"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000740)={0x40, 0x19, 0x2, "19ce"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x80}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x60}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'wlan0\x00'}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'wg0\x00', {0x2, 0x4e22, @broadcast}}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101, 0x418}}, 0x20}}, 0x0) 2.110181643s ago: executing program 1 (id=126): timer_create(0x0, &(0x7f0000000040)={0x0, 0x1b, 0x4, @thr={0x0, &(0x7f0000000280)="e0bb"}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x2, 0x5, 0x25cd, 0x1, 0xa4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x401, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7d, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x4, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x401, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x3, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x7, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0xa, 0x55, 0x40, 0xff, 0x5, 0x1, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x1, 0x2, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1fe, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26b, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0xc, 0x4b, 0x0, 0x0, 0x2e}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x2, 0x14, 0xf0, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x100000000000003, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x10000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) (async) mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r8 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r7, 0x0, r8, 0x0, 0x10000000000016, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f00000000c0)={'s526\x00', [0x8081, 0x6, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x7, 0x0, 0x7, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x2, 0x4000002, 0xf27, 0xffff, 0x7, 0x8, 0x5, 0x8, 0x4, 0x10000, 0xfffffff8]}) (async) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000017000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0xfffffffffffffd56}], 0x1, 0x60, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 1.765824232s ago: executing program 1 (id=134): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000b40)=ANY=[@ANYBLOB="6802000001050500000000000000000002000005540201"], 0x268}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1410, 0x100, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x48090) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000880)={'syztnl2\x00', 0x0, 0x29, 0x80, 0x5, 0x80000400, 0x7b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x3c20, 0x700, 0x401, 0x8}}) 1.689295088s ago: executing program 3 (id=135): r0 = socket(0x21, 0x2, 0x10000000000002) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r3 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r3, 0x80079a0) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000000)={@rand_addr=0x64010101, @multicast1, 0x0, "49794c5a661471da0b120ee937f6ce7b4af7d44542d7680848d928f9dcb3c22a", 0x3, 0xff, 0x7, 0x80000000}, 0x3c) io_uring_setup(0x3f91, &(0x7f0000000080)={0x0, 0xb6de, 0x2, 0x1, 0x125}) (async) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x4) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004) (async) pwritev(r6, &(0x7f0000000180)=[{&(0x7f0000000400)="00214717a7079f1000000100030600710a5e31163ceb", 0x16}], 0x1, 0x3, 0x7) r7 = fanotify_init(0x200, 0x0) (async) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000240)=@userptr={0x8000, 0x7, 0x4, 0x70000, 0x24, {r8, r9/1000+10000}, {0x1, 0x1, 0x8, 0x5, 0x3, 0xb, "ed350980"}, 0x6, 0x2, {&(0x7f0000000140)}, 0x8}) (async) fanotify_mark(r7, 0x1, 0x40001051, r4, 0x0) (async) splice(r3, 0x0, r2, 0x0, 0x200, 0x9) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r10, 0x4e, 0x0) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1.688983616s ago: executing program 1 (id=136): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x3, 0x103, @empty, 0x20010}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f0000000440)) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000010c0)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000001880)={@local, @broadcast, @val={@val={0x88a8, 0x1, 0x0, 0x4}, {0x8100, 0x3, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x200, 0x1, 0x11, 0x0, @empty, @private=0xa010102}, {0x4e20, 0x4e20, 0x8}}}}}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000070000000060a010400000000000000000100000008000b400000000048000480440001800b000100657874686472000034000280080001400000000c080003400000000008000440000000220500020007000000080006400000000308000540000000000900010073797a30"], 0x248}}, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001600)={r2, 0x801, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f0000000040)) r5 = syz_io_uring_setup(0x6219, &(0x7f00000003c0)={0x0, 0x3594, 0x10, 0x3, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x7d, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f00000001c0)={0x1, r5, 0x35, {0x4, 0x9}, 0x1}, 0x1) socket$packet(0x11, 0x3, 0x300) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x3, 0x103, @empty, 0x20010}, 0x1c) (async) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f0000000440)) (async) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000010c0)=0x1, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async) syz_emit_ethernet(0x32, &(0x7f0000001880)={@local, @broadcast, @val={@val={0x88a8, 0x1, 0x0, 0x4}, {0x8100, 0x3, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x200, 0x1, 0x11, 0x0, @empty, @private=0xa010102}, {0x4e20, 0x4e20, 0x8}}}}}, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000070000000060a010400000000000000000100000008000b400000000048000480440001800b000100657874686472000034000280080001400000000c080003400000000008000440000000220500020007000000080006400000000308000540000000000900010073797a30"], 0x248}}, 0x0) (async) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) (async) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001600)={r2, 0x801, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) (async) ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f0000000040)) (async) syz_io_uring_setup(0x6219, &(0x7f00000003c0)={0x0, 0x3594, 0x10, 0x3, 0x21e}, &(0x7f0000000240), &(0x7f0000000340)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) (async) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x7d, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r5, 0x6efc, 0x3900, 0xb, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f00000001c0)={0x1, r5, 0x35, {0x4, 0x9}, 0x1}, 0x1) (async) 1.517472823s ago: executing program 3 (id=138): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) syz_emit_vhci(0x0, 0x7) bind$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000200)={0xbc, 0x0, 0x5}) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 1.366900561s ago: executing program 2 (id=139): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000e61200010afcffffff000000000a000000edb772d3704ece7e0016a0bfbbf6bcb5849d06db38cdc9edd217ea734515df3e24721c3f"], 0x14}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="391dfb0b0902000360000008001b0000000000080004005c0b00006c3edd0b48e8b67a6a68e4e191b0a9ab37c0465f7f9693d9acab6d7273fc06"], 0x30}, 0x1, 0x0, 0x0, 0x44811}, 0x4000000) (rerun: 32) 1.366349194s ago: executing program 3 (id=140): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0xd, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0xd, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x5411, &(0x7f0000000000)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000280)={0xfffffffffffffffd, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="100027bd7000fddbdf2501000000080002000600000008000300080000000800040072f40000"], 0x2c}, 0x1, 0x0, 0x0, 0x8090}, 0x24000040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYBLOB="8b800000000000002000128008000100677265001400028008000600ac14143a08000700e000030a"], 0x40}}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) close(r4) 1.227668655s ago: executing program 3 (id=141): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0x6f14cf9ac61f9c9b, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, 0x0, {0xfffa}, {0xb}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000000) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012920000905"], 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd29, 0x25dfdc00, {0x7, 0x0, 0x0, r1, 0x80, 0x7f, 0xa}, [@NDA_FLAGS_EXT={0x8}, @NDA_LLADDR={0xa, 0x2, @random="f5cd1533841a"}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c001}, 0x4040004) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0x6f14cf9ac61f9c9b, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, 0x0, {0xfffa}, {0xb}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000000) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012920000905"], 0x0) (async) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd29, 0x25dfdc00, {0x7, 0x0, 0x0, r1, 0x80, 0x7f, 0xa}, [@NDA_FLAGS_EXT={0x8}, @NDA_LLADDR={0xa, 0x2, @random="f5cd1533841a"}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c001}, 0x4040004) (async) 1.227395555s ago: executing program 2 (id=142): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x30, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bind$bt_sco(r0, &(0x7f0000000040), 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r3, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) 1.107640346s ago: executing program 2 (id=143): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) mq_open(&(0x7f0000000980)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05|\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7jo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x02\x00\bL\xfb\xa2\x1e\xd8\xdfJ\xcc\xd7\x9b\xfa\xf0\x0f\x05\xf1\xc4 \xde@\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\f\x00\x00\x00\x00\x00\x00\x00\xc1_\x7f\x1a\x00\x00\x1b\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xff\a$\xfb(\x9b5\xcbF4?O\x1d\xd7\x01*\xc9\xd6L\x86 \x1b\xab9\x1b\x12k\x01\xec\xd7\x16E\x11-\xfd\x10\x89\x8d\xccGP\x14\x89w\xef\x90\x1d\xc9\x02\xeb\x01V\xfbm\x86\x8a\xc1.m\xd0\xa2\xa4\xc9\a;(\n\xc0\"\x1f\xe4\x1d\x85\xb3\x95\xec\xbb\x9b\x01\x85\xffx\xf2\a\f=\xd1\xcf\xec\xb8!\v\x958\xbf\x15b-\x92\xd6\xb5\xbf\xe2\x92\xc2\xa3}\xd0;\xd1\x96\x86\x8a\x1b\xe1w\xf9\xb0\xd2\xab\xc9\x8a\x19\n\xc5o\x1e\x13/\xe4\x91\x7f\xa5\xf1\xddW\xdb\x98\xcd\x94\xfc\x90\xa0\x05*', 0x883, 0x1aa, 0x0) landlock_restrict_self(r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 1.035172702s ago: executing program 2 (id=144): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000252d010034001280090001007866726d0000000024000280080001000000000008000200030000e40800010001000000080001000100000008000300", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) (async) socket(0x10, 0x3, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800009c", @ANYRES16=0x0, @ANYBLOB="080026bd7000fddbdf254100000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000100010055000000"], 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000340), 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 902.630647ms ago: executing program 2 (id=145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000540)=@routing={0x11, 0x8, 0x2, 0x6, 0x0, [@mcast2, @mcast1, @local, @local]}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x39, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xe5, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a3100b5ea6be17afbc907ae010100000000000000000a0000070900010073797a31000000000900030073797a32c1708c8d8a00006b452ca200001100012ba6a8cc40296789effa5d15c86d0998aa080dba18fe385d2c46ed0cc53983a6e8ed2952445d7c0c00"/171], 0x7c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='nilfs2\x00', 0x8080, &(0x7f0000000100)='discard') sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) (async) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000540)=@routing={0x11, 0x8, 0x2, 0x6, 0x0, [@mcast2, @mcast1, @local, @local]}, 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x39, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xe5, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a3100b5ea6be17afbc907ae010100000000000000000a0000070900010073797a31000000000900030073797a32c1708c8d8a00006b452ca200001100012ba6a8cc40296789effa5d15c86d0998aa080dba18fe385d2c46ed0cc53983a6e8ed2952445d7c0c00"/171], 0x7c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='nilfs2\x00', 0x8080, &(0x7f0000000100)='discard') (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async) 786.573411ms ago: executing program 2 (id=146): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "d1546197deb53ddf", "b3d231449ef9d69bbc16d13a1ca02d4c", "6c1fda80", "72b3166eddc7622e"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000002900)={0x1, @sliced={0x1, [0x5, 0x2, 0x1000, 0x0, 0x931, 0x6, 0x5, 0xb44, 0x0, 0x4, 0x0, 0x2a2d, 0x3, 0xc2, 0x7, 0x1, 0x24bb, 0x75e1, 0x9, 0x5a, 0x400, 0x0, 0x1, 0xdc, 0x5, 0x2, 0x2, 0x5, 0xb, 0x3, 0xe8, 0x7, 0x168d, 0x8, 0xfff, 0x8001, 0x0, 0x4, 0x1, 0x401, 0x7, 0x6, 0x2, 0x0, 0x5, 0x7ff, 0x4], 0x5}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r3, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000013c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0xc008aeba, 0x0) syz_emit_ethernet(0x41a, &(0x7f0000000440)={@empty, @broadcast, @val={@val={0x88a8, 0x2, 0x0, 0x4}, {0x8100, 0x2}}, {@ipv6={0x86dd, @dccp_packet={0xa, 0x6, "b4e09a", 0x3dc, 0x21, 0x1, @mcast1, @local, {[@dstopts={0x2b, 0x4, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0xf8}, @hao={0xc9, 0x10, @local}]}, @hopopts={0x2e, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0xfff, [0x10000000000, 0x43e7, 0x4, 0xffff, 0x2db22612, 0x5, 0x1]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0x2b, 0x26, '\x00', [@generic={0x9, 0x77, "a3a6c8ff3c4a792e33bcc7336823168785ac2de72a43f83f7da6b99ee393f367954fc0a22e9fb60b429b593d22301c4d499f9fc84ac8416d40a07750cc33ac4772bd1d9b7fd8dc20e1a45c454e10e89b2f59c7fc6019c7dd20210f79370040bc2b9f754e507c6e6a02a40f070d8cfa851d77187fdba95d"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @generic={0x1, 0xa8, "ed8e9632204061bb3a7cce0dc4f7a63cba5b04347d168833be3c8c8625d7719a139c8c758c2c980a915f39545a9200a2c078db15d8fce143792a77188fa229f018481ac512ea43ff21a0a96adc4fe859ee193d1cc4f865bf59040c49953bd2e74f67d339c2da351c8e98ad61a8ae2750bd19bd4ad463baed580b743e70bcfec98c863793f16f3e5356ad96d9cc2f8e498b28ec21de649ab20e2c1e0bcc82b328b078b2c13301cf8d"}]}, @dstopts={0x11, 0x1e, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x80, 0xe9, "469c4c1db28bb32dfeea86b46d6888eadfdc0e3b890123bfff709fa06d6ae98679b7444c2a6662fcbd81294b9dd1b6636c0c8e27ad0f47208ac35dbb954a854b8c3f96ae092e0f34ad32597be7f4a69e12fbc8e1e0c5c685f1a9f1ffba06165589ebfbb04f5f2729ddcacea941b0c0ad20e5a1d66e0cafa32f36342f2bf24836117e165153c765bbaef03dc60c48f2802d015c199f239aafbfad4e2b958a296b7a3fca042c64ecb8420de65529cc110e561548eeb4cfefd967c79ea31e73ab00cd557918788e67d5717441f2e7fdb799538d88f8b6a78d5b91dc4dbd98f4f4b327581bbb42825b7dc3"}, @enc_lim={0x4, 0x1, 0xf6}]}, @fragment={0x33, 0x0, 0x5, 0x1, 0x0, 0x4, 0x68}, @routing={0x87, 0x2, 0x0, 0xb, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2f}]}, @routing={0x2c, 0x10, 0x2, 0x7, 0x0, [@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @empty, @private1={0xfc, 0x1, '\x00', 0x6}]}], {{0x4e24, 0x4e24, 0x4, 0x1, 0x4, 0x0, 0x0, 0x9, 0x2, "f66e1e", 0xb, "193b9e"}, "ab48aacef2933fd275ca03b80a7ec021566ff9d689b24d42bed4d99f69bd83a4f5674fe62e9ff8565337eaa1783e67e558ef3d699e83e341e1f8462f282ec2599f45dfeb8616a5525b5cf2b9deed00166ae2ff45"}}}}}}, &(0x7f0000000140)={0x1, 0x3, [0xa3e, 0x7ca, 0xf65, 0x1d4]}) 317.498939ms ago: executing program 3 (id=147): open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 237.364561ms ago: executing program 0 (id=148): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1310c1, 0x40) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$notify(r1, 0x402, 0x8) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00', 0x6}, 0x3b) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v4') 166.976539ms ago: executing program 0 (id=149): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x2, 0x2, 0x0, {0x6, 0xc, 0x1, 0x5}}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) 166.344066ms ago: executing program 1 (id=150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000400000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a3b0000000014000380100000800c00018006000100d1460000140000001100010000000000000000000100000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 117.389228ms ago: executing program 0 (id=151): r0 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640000000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r2 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff6000/0x4000)=nil) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x15, 0xa, 0x2, "b75cbb184400000002000100040000000700", 0x30314742}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='rtc_alarm_irq_enable\x00', r4}, 0x18) r5 = shmget(0x2, 0x3000, 0x800, &(0x7f0000ff3000/0x3000)=nil) shmctl$IPC_RMID(r5, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_OFF(r6, 0x7002) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000080)=""/113) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f0000ff6000/0x1000)=nil) 57.474679ms ago: executing program 1 (id=152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd29, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40048c0}, 0x44000) 3.259443ms ago: executing program 1 (id=153): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0x231, &(0x7f0000000240)={0x0, 0x15d6, 0x30101}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}) io_uring_enter(r4, 0x7a98, 0x0, 0x4, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockname(r7, 0x0, &(0x7f0000000080)) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000bb80)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x172ed}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "c0adf9730c497f2f7b0a755258cb90e5f42576cc0386f975710600ef795aaa53", "39161cfd481d4fc5b8e54eca21107ba28fa5ddad802edfc40d887da4200f32df", "b99d94bc132ed02bcfb97ff25677c672d0292a76ea9ae71082d5b12ae9e66036", "d98364d0de265a7dd90ad758220a2a74039fbea229a67a57b0f83a37a9f94a12", "2d2a6f06f54fea82a6845dbadd71ee9beedd10bbd1f4c21592674a056eed5839", "8d5739ad9197de8e51c057bb", 0x0, 0x7ff, 0x5, 0x9, 0x2}}) r13 = socket$unix(0x1, 0x1, 0x0) inotify_init1(0x0) r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r14, &(0x7f0000004100)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000006140)=@newtfilter={0x1f18, 0x2c, 0x400, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_fw={{0x7}, {0x1ed4, 0x2, [@TCA_FW_ACT={0x1ed0, 0x4, [@m_bpf={0x9c, 0xf, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x5d, 0x6, "88603ae43c4b85f6f95c88ccaf5c27f826eae5e7a3f7b5a57dabbf57e40367a8d160f1e0e7130ca3278c2580416757e6511caa4b56a49c700be80195f731d5ea3de5a621593de55a32bbc3635848957d1898d3d064593d55fb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x3c, 0x17, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0x1df4, 0x5, 0x0, 0x0, {{0xa}, {0x1d54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x6, 0xfffffffd, 0x4, 0x3, 0x9}, 0x7, 0x3, [{0x10000, 0x4, 0x5, 0x4, 0xd, 0x79}, {0x1, 0x2f79870a, 0x401, 0xfffffffe, 0xfffffff7, 0x3}, {0x200, 0x3, 0x8, 0x0, 0x4, 0x9}, {0x80000001, 0x0, 0x6, 0x0, 0x7, 0xa9e8}, {0x10001, 0x40, 0x8, 0x8, 0x10001, 0x57a}]}, [{0x9, 0x10001, 0x8, 0xc69, 0x3, 0xffff}, {0x2, 0x4, 0x9, 0x1, 0x8000000, 0x5}, {0x10, 0x2010, 0x1, 0xff, 0xa931, 0x1}, {0xe2d6, 0x6, 0x3ff, 0xd, 0x2, 0x8}, {0xf, 0x7, 0x200, 0x100, 0x247dc8a8, 0xe6}, {0x141, 0x2b0adb48, 0x8, 0xfffffffd, 0x200, 0xd7}, {0x3, 0x400, 0x8b66, 0x3, 0xfffffff7, 0x6be}, {0x9, 0x30b, 0x60, 0x3, 0x4, 0xfffffff9}, {0x81, 0xffff, 0x6, 0x0, 0x8, 0x7}, {0x5, 0xf0, 0x6, 0x800, 0xe386, 0x3}, {0xe8, 0x3, 0x0, 0x40, 0x2, 0x3}, {0x1, 0x7, 0x2, 0x8, 0x13ea, 0x9}, {0x3, 0x800, 0x8001, 0x10001, 0x6, 0x14e}, {0x62c, 0x400, 0x6, 0xfffffe01, 0x1, 0x1}, {0x5, 0x1, 0x5, 0x7, 0x40, 0x6}, {0x9, 0x3, 0x42d, 0x66, 0x6, 0xd3}, {0x100, 0x9, 0x3, 0x6, 0x0, 0x926f}, {0x483, 0x0, 0x8, 0x0, 0x9, 0x8}, {0xfffffff4, 0x7, 0x217, 0x5, 0x9, 0x1}, {0x7fffffff, 0x3, 0x1, 0x8001, 0x6, 0x8}, {0x96f1, 0x2, 0x6, 0xb889, 0xda8, 0x1}, {0xde50, 0x0, 0x2e, 0x3, 0x3, 0x5}, {0x4, 0xffffffff, 0x4, 0x7, 0x8, 0x3}, {0x8, 0x60bb, 0x4, 0xfffffff9, 0x5, 0x4}, {0x3, 0x5, 0x557, 0x8, 0x3, 0x7}, {0x5, 0x3e6d, 0x1, 0x100, 0x9, 0x1}, {0x9, 0x5, 0x7, 0x2, 0x7, 0x9}, {0x2, 0xffff, 0xa, 0x6, 0x7e8c8823, 0xfffffffd}, {0x2, 0x800, 0x1, 0x6, 0x7, 0x2}, {0x2, 0x1, 0x1ff, 0x6, 0x2}, {0x3, 0xffffff09, 0x9, 0x50000, 0x859, 0x7215}, {0x7f, 0xe5, 0x7, 0x8, 0x81, 0x698f}, {0x6, 0x9, 0x8001, 0x4, 0x3, 0x7f}, {0x1000, 0x8, 0x8, 0x0, 0x4, 0x200000}, {0x10, 0x4, 0x10000, 0x0, 0x2, 0xfffffffe}, {0x8, 0x9, 0x0, 0x3, 0x10, 0x6}, {0x5c, 0x200, 0x7, 0x2, 0x7, 0x9}, {0x1, 0x6, 0x1, 0x9, 0x4, 0x3}, {0x8, 0x7, 0x0, 0x2, 0x80000000}, {0xb146, 0x0, 0x4, 0x5d, 0xe2c, 0x2}, {0x2000000, 0x3, 0x5, 0x5, 0x13c, 0x5}, {0x8, 0x2, 0x0, 0x6, 0x800, 0x400}, {0x1000, 0x8001, 0x2, 0x40, 0xfff, 0x7ff}, {0x4, 0x7e68, 0xf, 0x2, 0x1, 0x8}, {0xffffff7f, 0x3ae4, 0x80000001, 0x2, 0x4, 0x800}, {0x5, 0x0, 0xffffffff, 0x9, 0x6}, {0xf2, 0x5414, 0x1000, 0x5, 0x6, 0xa75}, {0x1df, 0xe, 0x1, 0xffffffff, 0x2, 0x1}, {0xcd, 0x0, 0x9, 0xfab9, 0x9594, 0x7}, {0x2, 0x4ec, 0x1, 0x1ff, 0x9f, 0x7}, {0xfffffffb, 0x3, 0x10001, 0x2, 0x4b, 0x4}, {0x2, 0x1000, 0xffff, 0xfffffffa, 0xc5cc, 0x7}, {0x7ff, 0x3, 0x39, 0x6, 0x62, 0x7d4}, {0x7, 0x3ff, 0x903a, 0x200, 0x9, 0x7fff}, {0x7fff, 0x8000, 0x1, 0x8, 0xe3, 0x6}, {0x7, 0x4ef0adae, 0x1000, 0x9, 0x1, 0x2}, {0x13, 0x0, 0x2, 0x400, 0x0, 0x8}, {0x800, 0x667c, 0x7fff, 0x3, 0x8, 0x6}, {0x6, 0x800, 0x5, 0x2992, 0xfffff800}, {0x5, 0x1, 0x3, 0x10, 0x100000, 0xffff}, {0x5, 0x80000000, 0x5, 0x5, 0x9}, {0x6, 0xff, 0x3, 0x6, 0x5ea, 0x6}, {0x7, 0x2, 0x0, 0xf915, 0x1, 0x2}, {0x28, 0xfffffff8, 0x5, 0xfffffffd, 0x7f, 0x62}, {0xb86, 0x40, 0xdd, 0x80000001, 0xfffffffb, 0x8}, {0x3, 0x3, 0x9, 0x0, 0xb46c, 0x7}, {0x7, 0x8, 0x40, 0x9, 0xfffffff8}, {0x7, 0xffffffff, 0x4, 0x4, 0x3d5a, 0x1}, {0x4, 0x0, 0x8, 0xfffffffc, 0x8, 0x6}, {0xffffffff, 0xfffffffe, 0x7f, 0x10001, 0x6, 0xfffffffc}, {0x7ff, 0x10, 0x9, 0xd, 0x6, 0x80000000}, {0xc, 0x4, 0x1, 0x4, 0xde32}, {0x0, 0x0, 0x0, 0x400, 0x3, 0x7}, {0xfffff1f4, 0x1, 0x8, 0x18, 0x0, 0x7ff}, {0xfffffff9, 0x0, 0x200, 0x4, 0xffff, 0x3}, {0x6, 0xc794, 0xfffffff8, 0x2, 0x5, 0x9}, {0x1, 0x7000000, 0x6, 0xe, 0xed, 0x4}, {0xa, 0x2, 0x4, 0x7, 0x511, 0x6}, {0x812, 0x7fff, 0x2, 0x5, 0x7ff, 0x7ff}, {0x3, 0x4, 0x7, 0x81, 0x7, 0x7126b0df}, {0x0, 0xffffffff, 0xfffffffd, 0x3009, 0xfffffff7, 0x8}, {0x6, 0x6, 0x3ff, 0x40, 0x1, 0x4}, {0x8, 0x4, 0xeaf8, 0x7, 0x4, 0x8}, {0x7, 0xe, 0x7f, 0x5, 0x0, 0x6b8}, {0xa05c, 0x7f, 0x5, 0xfffffff8, 0x7, 0x6}, {0x71da, 0x7, 0x7, 0x2, 0x8, 0xdc2}, {0xe, 0x1, 0x1, 0xfffffffe, 0x101, 0xa4c}, {0x1, 0x97b, 0x7f, 0x1, 0x4, 0x7}, {0x9c20, 0xcdf, 0x9, 0x6, 0x3a2}, {0x23d, 0x800, 0x9, 0x10, 0x6, 0x5d53046a}, {0x3, 0x4, 0x4, 0x9, 0x0, 0x3ff}, {0x8c, 0xe4f, 0x3, 0x5, 0x84, 0x7ff}, {0x4, 0x1000, 0xffffffff, 0x2, 0xd5, 0xffffffff}, {0x368, 0x3, 0x52fb, 0xd0af, 0x1, 0x6f7e}, {0x2, 0x7fff, 0x0, 0x0, 0x8, 0x5}, {0x6eb3, 0x7, 0x5, 0x40, 0x8e4, 0x9}, {0x5, 0x5, 0x1, 0x8e7, 0x8, 0xfc9}, {0x2, 0x8, 0x1000, 0x9, 0xfffff001}, {0x1, 0x10001, 0x0, 0x3, 0xffff7fff, 0x925}, {0xff9, 0x8000, 0x6, 0x3, 0x7fff, 0x7fff}, {0x5, 0x101, 0x9a1b, 0xfffffff9, 0x8, 0x8}, {0xb, 0xd58, 0x8, 0x9, 0x7, 0x8000}, {0x1, 0x41, 0x0, 0x4, 0x8d10, 0x101}, {0x1, 0x4dc5, 0x8, 0x6, 0x2, 0x4}, {0x10, 0x0, 0xbd, 0x4, 0x6, 0x9}, {0x40, 0x9b7d, 0xf54, 0x4, 0x10001, 0xf}, {0x2973, 0x101, 0x566e, 0x7, 0x3, 0x80000001}, {0x1, 0x7, 0x80000000, 0x4, 0x5, 0x441}, {0x1, 0x0, 0x8, 0x18, 0x2}, {0x10000, 0x6, 0x1, 0x7, 0x2, 0x719}, {0x81, 0x9, 0x100, 0x8, 0x9b03, 0x9}, {0x1, 0x5, 0x8, 0x1, 0x5, 0x9}, {0x4, 0x5, 0xffff8000, 0x2, 0x1, 0x1}, {0x2, 0x8000, 0xfffffff9, 0x3c5, 0xb6, 0x7}, {0x800, 0x3737, 0x42, 0x100, 0xfffffffd, 0xfbe}, {0xfffffffa, 0x6, 0x7, 0x4, 0x9}, {0x202, 0x77f3, 0x4, 0x1, 0x400, 0x80}, {0x7, 0xfffeffff, 0x2, 0x7, 0xd, 0x100}, {0x4, 0x1, 0x9, 0x0, 0xab56, 0x8}, {0x40, 0x2, 0x3, 0x6, 0x4, 0x80}, {0x3, 0x0, 0x8000, 0x8, 0x7}, {0x7b, 0x7c, 0x8, 0x6, 0xe, 0x7}, {0x28, 0x8d, 0x7f, 0x6, 0x3, 0x800}, {0x7ff, 0x4, 0x200, 0x1, 0x7, 0x8}, {0x5, 0x2de, 0x318, 0x8001, 0x0, 0x800}, {0x2, 0x2, 0x722, 0xf, 0x569, 0x5adb}, {0x7fffffff, 0x4c94, 0x2, 0xffffff00, 0x8, 0x1}, {0x0, 0x4, 0x6, 0x5, 0x1, 0xfffffff9}], [{0x3, 0x1}, {}, {0x3, 0x3}, {0x3}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x7321838c8a80dd52}, {0x5, 0x1}, {0x3}, {0x7, 0x1}, {0x1}, {0x3}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x2}, {0x1}, {0x5}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x7}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x2}, {}, {0x3}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x3}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x979efc536cc273d4}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x818d5ef6884fa1c6, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x4}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x1}]}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x8, 0xed, 0xffffffffffffffff, 0xc78, 0x1}, 0x8, 0x80, [{0x922, 0x52a, 0xb, 0x101, 0x3b64, 0x5}, {0x46, 0x85b, 0xc89, 0x4, 0x5, 0xf6a}]}, [{0x82d5c12, 0x7fff, 0xffffffff, 0x2, 0x200, 0x1000}, {0xe2d, 0x3ff, 0x69a, 0x5, 0x9, 0xfffffffd}, {0x8, 0x4, 0x81, 0x2, 0x80, 0x3}, {0x9, 0xa8, 0x7fff, 0x10000, 0x7fffffff, 0x2}, {0xff, 0x200000, 0x7, 0x1, 0x6, 0x2}, {0x984, 0xfffffff7, 0x4, 0xbd, 0x3, 0x9}, {0x8, 0x3, 0x6427a5c8, 0x2, 0x3ff}, {0x5, 0x97, 0xd, 0x7, 0x1, 0x200}, {0x6, 0x9, 0x9, 0x6, 0xd39e, 0x1}, {0x4, 0x0, 0x6, 0x7ff, 0x9, 0x3}, {0xfffffffa, 0xc1, 0x2, 0x72c3, 0x6, 0x2}, {0xab46, 0x1, 0x31, 0xffffffff, 0x7, 0x7}, {0x7, 0xd9aa, 0x0, 0x6, 0x6, 0xfff}, {0xffff03f2, 0x5, 0x9, 0x8, 0x5472b9fc, 0x7}, {0xc12, 0x9, 0x80000001, 0x5, 0x5, 0x1ff}, {0xffff, 0x72, 0x290, 0xfffffffe, 0x3, 0x2}, {0x5, 0xeb31, 0x6, 0x2, 0x3, 0x7}, {0x8, 0x3, 0x0, 0x10, 0x9, 0xe866bb6}, {0x1, 0x7, 0x1, 0x2, 0x10000, 0x1}, {0x2, 0x7fff, 0x2, 0x8, 0x200, 0x6}, {0x7, 0xffffff01, 0x2, 0x1000, 0x3ff, 0x3}, {0x9, 0xfff, 0x9, 0x7f632d44, 0x8, 0x10}, {0xcb8f, 0x2, 0x2, 0xdd3, 0x4, 0x6}, {0xc17d, 0x9, 0x40, 0x7fffffff, 0xfff, 0x80000000}, {0xfffffff7, 0x1, 0xfffffffb, 0xd9, 0x9, 0x100}, {0x911, 0x5, 0x7, 0x4, 0x1, 0x400}, {0x6, 0x7, 0x4, 0xffff20f4, 0x34fe9a8, 0x6}, {0x1, 0x6, 0x5, 0x9, 0x40000, 0x3}, {0x3000, 0x81, 0x0, 0xf, 0x5, 0x3}, {0xf, 0x5094, 0x7, 0x2, 0xe22e, 0x1ff}, {0x2, 0x8, 0x77e, 0x9, 0xffffff29, 0x6e}, {0x80000000, 0x5, 0xc0, 0x9, 0x5, 0x7}, {0x2, 0x4, 0xbb4f, 0xfffffffc, 0x4, 0x81}, {0xc, 0xb, 0x4, 0xc6fe, 0x7fffffff}, {0x7fffffff, 0x401, 0x9, 0x2, 0x0, 0x2}, {0x9, 0x5, 0x101, 0x6, 0x6, 0x1}, {0x3, 0x81, 0xffffffff, 0xb, 0x1, 0x8}, {0x9c, 0x3, 0x8, 0x2, 0x1}, {0x1, 0x7, 0xfffffffb, 0x6, 0x10001, 0x8}, {0x1b6, 0x0, 0x3ff, 0x3, 0x28000000, 0x1000}, {0xa, 0x7, 0x7fffffff, 0x9, 0x9, 0x9}, {0x6, 0x2, 0x1, 0x10001, 0xdeb, 0x2}, {0x1, 0x63, 0x33, 0x4, 0xc14, 0x6}, {0xffff6adf, 0x3, 0x80, 0x1, 0x4, 0x87}, {0x9, 0xfff, 0x7b8, 0x2, 0x9, 0x1}, {0x8, 0x7fffffff, 0x4, 0xff, 0x8, 0x6}, {0x9, 0x5, 0x1, 0x8000, 0x2, 0x8}, {0x800, 0x5, 0x4, 0x7, 0x4, 0x4}, {0x3, 0x8ec0, 0x81, 0x6, 0xc}, {0xc0, 0x0, 0x86bf, 0xd, 0xa2, 0x5}, {0x0, 0x7, 0x8000, 0x3, 0x3800, 0x6}, {0x81, 0x7f, 0x5, 0x4, 0x2f3, 0x10001}, {0xe1b, 0x9, 0x7, 0x4aa, 0x8, 0xa}, {0x7ff, 0x7, 0x20, 0x2, 0xa8d0, 0x7}, {0x8, 0x80000001, 0x613, 0x8, 0xd866, 0x7}, {0x1, 0x7, 0x6, 0x0, 0x7, 0x6}, {0x8b0, 0x3, 0x200, 0x3, 0x200, 0x4}, {0x800, 0x0, 0x2fa, 0x5, 0x3, 0x800000}, {0x6, 0x4d0d, 0x2, 0x7, 0x5, 0x2}, {0x12c, 0x4, 0x1, 0xfffffffa, 0x4ab, 0xe094}, {0x3, 0x14e, 0xec, 0x1, 0xfffffbff, 0x8}, {0x80000000, 0x8000, 0x1, 0x45298c55, 0x0, 0x1}, {0x1, 0x800, 0xd196, 0x9, 0x7f, 0x5}, {0x5, 0x5, 0x1000, 0x0, 0x99a, 0x4}, {0x7fff, 0x7, 0x103d, 0x5, 0xfffffff9, 0x6ce0}, {0x25, 0xfffffffd, 0x3, 0xfffffffa, 0xbf, 0x7}, {0x2, 0xe3, 0x0, 0x3, 0x7cc2ae70, 0x6}, {0xb560, 0x14, 0x5, 0x7e, 0x8bf0, 0x4}, {0x3, 0x0, 0xaf, 0x300, 0x7db, 0x2}, {0x0, 0x2, 0x6, 0x4, 0x8, 0x9}, {0x200, 0x8, 0x7, 0x6, 0xf9c5, 0x8}, {0x6, 0x401, 0x1, 0x3, 0x82, 0x6}, {0x552, 0x8, 0x4, 0x401, 0x4, 0xdb}, {0x6, 0xa, 0x0, 0x8, 0x6, 0x101}, {0x5, 0x0, 0x5, 0x6, 0x4, 0x3}, {0x2519, 0x0, 0x80000001, 0xf, 0x32}, {0x4, 0x164, 0x3, 0x81, 0x47c9, 0x6}, {0x5, 0x10, 0x2, 0x4, 0x1, 0x80}, {0x7, 0x8, 0x1, 0x10, 0x1, 0x9}, {0xfffffffd, 0x0, 0x6, 0x7, 0x401, 0x7}, {0x6, 0x10, 0x3, 0x7ad, 0x6, 0xff}, {0x663f, 0x9, 0x8, 0x401, 0x3, 0x9}, {0x8, 0x4, 0x2, 0xfc8, 0x9, 0x9}, {0xd, 0x2, 0xfff, 0x7fff, 0x9, 0x1000}, {0x3, 0x8, 0xc00, 0x1, 0x0, 0x5}, {0x8, 0x1, 0xbcee, 0x3, 0x0, 0x8}, {0x6, 0x2, 0xfff, 0x7, 0x8b, 0x8}, {0x8, 0x7, 0x7ff, 0x0, 0xdf3, 0x80000001}, {0xffffffff, 0x1, 0x8000, 0x0, 0x7fff, 0x4}, {0x1, 0x5661812a, 0x8, 0x8, 0x3, 0x9}, {0x5, 0x2aa, 0x6, 0xcae8, 0x7, 0x8}, {0x7, 0x800, 0xfffffffc, 0x800, 0x5, 0x4}, {0x10000, 0x6f6, 0x9, 0x5, 0x5, 0x5}, {0x8, 0x8, 0xaa, 0x8, 0x9, 0x80}, {0x4, 0x723e, 0xd69e, 0x9, 0x1, 0x7}, {0x8001, 0xffff, 0xff, 0x1, 0x9, 0x9}, {0x8000, 0xe832de0, 0x1, 0x527, 0x200, 0x9}, {0x0, 0x3, 0x2, 0x3, 0x20, 0x2}, {0xffff, 0x2c7, 0x7, 0x1, 0xf6, 0x8}, {0x7ff, 0x3, 0x4, 0x7fffffff, 0x2, 0x5}, {0x6, 0x15787094, 0x80000001, 0x9, 0x5, 0x8be}, {0xd, 0x7ff, 0x110, 0x3, 0x7, 0x4}, {0x8, 0x6, 0x1, 0x3, 0x0, 0x101}, {0x2, 0x1, 0x4, 0x80000001, 0x939, 0x6}, {0xffff0000, 0x80000001, 0xf, 0x100, 0xf, 0x1}, {0x6, 0x9e, 0x400, 0xf31, 0x7, 0x2}, {0x3, 0x6, 0x6, 0x6, 0x7, 0x401}, {0x7fe000, 0xfffffffe, 0x10, 0x1000, 0x10a1a159, 0x9}, {0x7, 0xe, 0xffffcbd0, 0x6, 0x8001, 0x5}, {0x0, 0x3b, 0x2, 0x4, 0x598e, 0xffff}, {0x0, 0x6, 0x1, 0x9, 0x5, 0xfffffff3}, {0x80000000, 0x8001, 0x3, 0xfffff996, 0x9, 0x400}, {0x401, 0x7, 0x3, 0x5, 0x6, 0x55b}, {0x6, 0x0, 0x9, 0xba07, 0xfff, 0x1}, {0x812, 0x8, 0x9, 0x8, 0x3}, {0x3, 0x1, 0x7, 0x5, 0x5, 0xfffffffa}, {0x1000, 0x7fffffff, 0x4, 0x3, 0x9, 0x9}, {0x7f, 0x8, 0x2, 0x40, 0x7, 0x5}, {0xe, 0xfffffff7, 0x4, 0xa16c, 0x5, 0x9}, {0xfffffffd, 0x8, 0x1, 0x2, 0x6, 0x1}, {0x95de, 0x101, 0x7f, 0x4, 0x205e, 0x4}, {0x5, 0x2, 0x40, 0x3, 0x400, 0x74a}, {0x1222, 0xfffffffd, 0x4, 0x1, 0x4, 0x6}, {0x80000000, 0x9, 0x80000000, 0x4, 0x1, 0x8000000}, {0x1, 0x0, 0x9, 0x10000, 0x185, 0x10000}, {0x7, 0x8a, 0x80, 0x81, 0x5}, {0x9a6a5c65, 0x89e, 0x6, 0x6, 0x21bb, 0x6}, {0x8934, 0x4, 0x0, 0x2, 0x3, 0x400}], [{0x5}, {0x5}, {0x3}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x2}, {0x5}, {0x2}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x3}, {0x3}, {}, {0x2, 0x1}, {0x4}, {0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x5}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x3, 0x1}]}}]}, {0x77, 0x6, "2aba22bcabeb5d4aa74334a636ef25b480f1aa24d5c88116a06ac76790d0a8babae07d1a1df6ef015b26921325abc471ebc9496ef2ac0c71d9a97282795bd94df8a802f3d5049ba30c238ed8c23ee6ac750a4c451510d487a63f55cffe3cd0785a5af9d2b85ec855d9ec45c557bd115987c00c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x1f18}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) r15 = syz_open_dev$midi(&(0x7f0000000040), 0xb6, 0x48801) ppoll(&(0x7f0000000000)=[{r15, 0x1100}, {r15, 0xc169}], 0x2, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 485.438µs ago: executing program 0 (id=154): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000002c0)={0x79, 0x0, 0x756}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}], 0x18}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x4) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000240)=0x6) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000340)={{0x3, 0x8}, 0x100, './file0\x00'}) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000040)) 0s ago: executing program 3 (id=155): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)="180c4552", 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@dev, 0x4e22, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2e}, {}, {0x0, 0x3e3}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0x4}}, 0xe8) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) (async) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)={0x14, 0x0, 0x3, 0x401, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8004) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) (async) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000180)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x4}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000440)=@ethtool_coalesce={0xe, 0x21, 0x2, 0x3, 0x4, 0x400, 0xfffffff7, 0x3, 0xb8b, 0x10001, 0x2002, 0x6, 0x5, 0x8000, 0x2, 0x7f, 0x92, 0x2, 0x101, 0x65110f79, 0x9, 0x8, 0x6}}) setrlimit(0x0, &(0x7f0000000980)={0x0, 0x62}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r7, &(0x7f0000000580), 0x1000000000000297) (async) writev(r7, &(0x7f0000000580), 0x1000000000000297) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000680)={0x0, @bt={0x6, 0xb, 0x1, 0x3, 0x800, 0x0, 0x8001, 0xa, 0xffffffff, 0xfffffff8, 0x6, 0x8, 0x3, 0x4, 0x4, 0x1e, {0x4f, 0x5}, 0x8, 0xf0}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) (async) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) kernel console output (not intermixed with test programs): [ 58.557511][ T40] audit: type=1400 audit(1765014962.047:60): avc: denied { rlimitinh } for pid=5872 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 58.566857][ T40] audit: type=1400 audit(1765014962.047:61): avc: denied { siginh } for pid=5872 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:4130' (ED25519) to the list of known hosts. [ 61.463746][ T40] audit: type=1400 audit(1765014964.977:62): avc: denied { name_bind } for pid=5924 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 61.509518][ T40] audit: type=1400 audit(1765014965.027:63): avc: denied { execute } for pid=5925 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 61.522876][ T40] audit: type=1400 audit(1765014965.027:64): avc: denied { execute_no_trans } for pid=5925 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 64.033724][ T40] audit: type=1400 audit(1765014967.547:65): avc: denied { mounton } for pid=5925 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 64.044913][ T40] audit: type=1400 audit(1765014967.567:66): avc: denied { mount } for pid=5925 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.052369][ T5925] cgroup: Unknown subsys name 'net' [ 64.060209][ T40] audit: type=1400 audit(1765014967.577:67): avc: denied { unmount } for pid=5925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.172373][ T5925] cgroup: Unknown subsys name 'cpuset' [ 64.179974][ T5925] cgroup: Unknown subsys name 'rlimit' [ 64.341298][ T40] audit: type=1400 audit(1765014967.857:68): avc: denied { setattr } for pid=5925 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.352572][ T40] audit: type=1400 audit(1765014967.877:69): avc: denied { create } for pid=5925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.360436][ T40] audit: type=1400 audit(1765014967.877:70): avc: denied { write } for pid=5925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.368564][ T40] audit: type=1400 audit(1765014967.877:71): avc: denied { read } for pid=5925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.376342][ T40] audit: type=1400 audit(1765014967.877:72): avc: denied { mounton } for pid=5925 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 64.385683][ T40] audit: type=1400 audit(1765014967.877:73): avc: denied { mount } for pid=5925 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 64.395182][ T40] audit: type=1400 audit(1765014967.887:74): avc: denied { read } for pid=5648 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 64.432289][ T5932] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 65.507456][ T5925] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.607944][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 70.607960][ T40] audit: type=1400 audit(1765014974.097:82): avc: denied { execmem } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 70.950232][ T40] audit: type=1400 audit(1765014974.467:83): avc: denied { create } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.967877][ T40] audit: type=1400 audit(1765014974.467:84): avc: denied { read write } for pid=5942 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 70.977414][ T40] audit: type=1400 audit(1765014974.467:85): avc: denied { open } for pid=5942 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 70.987934][ T40] audit: type=1400 audit(1765014974.467:86): avc: denied { ioctl } for pid=5942 comm="syz-executor" path="socket:[6338]" dev="sockfs" ino=6338 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.021595][ T5951] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.027134][ T5951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.038183][ T5951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.042028][ T5951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.046317][ T5951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.050501][ T5951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.056025][ T5951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.056948][ T5957] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.059844][ T5951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.063401][ T5957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.063852][ T5296] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.064652][ T5296] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.065061][ T5296] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.065878][ T5296] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.067435][ T5951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.079388][ T40] audit: type=1400 audit(1765014974.597:87): avc: denied { read } for pid=5942 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.082333][ T5296] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.084198][ T40] audit: type=1400 audit(1765014974.597:88): avc: denied { open } for pid=5946 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.106074][ T5296] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.106167][ T40] audit: type=1400 audit(1765014974.597:89): avc: denied { mounton } for pid=5946 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 71.117411][ T5296] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.122882][ T5296] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.126433][ T5296] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.468067][ T40] audit: type=1400 audit(1765014974.977:90): avc: denied { module_request } for pid=5942 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 71.573979][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 71.582672][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 71.613396][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 71.703422][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 71.882937][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.887070][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.890562][ T5944] bridge_slave_0: entered allmulticast mode [ 71.894586][ T5944] bridge_slave_0: entered promiscuous mode [ 71.919922][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.923099][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.926101][ T5942] bridge_slave_0: entered allmulticast mode [ 71.931017][ T5942] bridge_slave_0: entered promiscuous mode [ 71.935553][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.939425][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.942784][ T5944] bridge_slave_1: entered allmulticast mode [ 71.946726][ T5944] bridge_slave_1: entered promiscuous mode [ 71.952257][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.955753][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.959082][ T5946] bridge_slave_0: entered allmulticast mode [ 71.963068][ T5946] bridge_slave_0: entered promiscuous mode [ 71.988592][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.991833][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.995502][ T5942] bridge_slave_1: entered allmulticast mode [ 72.000761][ T5942] bridge_slave_1: entered promiscuous mode [ 72.015398][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.018662][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.022181][ T5946] bridge_slave_1: entered allmulticast mode [ 72.027507][ T5946] bridge_slave_1: entered promiscuous mode [ 72.042178][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.045454][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.049130][ T5952] bridge_slave_0: entered allmulticast mode [ 72.053169][ T5952] bridge_slave_0: entered promiscuous mode [ 72.094147][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.097602][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.101799][ T5952] bridge_slave_1: entered allmulticast mode [ 72.105869][ T5952] bridge_slave_1: entered promiscuous mode [ 72.112919][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.119151][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.126685][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.144054][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.151538][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.158139][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.220553][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.225780][ T5942] team0: Port device team_slave_0 added [ 72.230890][ T5942] team0: Port device team_slave_1 added [ 72.245858][ T5946] team0: Port device team_slave_0 added [ 72.251527][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.269343][ T5944] team0: Port device team_slave_0 added [ 72.273837][ T5946] team0: Port device team_slave_1 added [ 72.316162][ T5944] team0: Port device team_slave_1 added [ 72.338423][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.340968][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.351524][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.357929][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.361344][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.372308][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.380446][ T5952] team0: Port device team_slave_0 added [ 72.391737][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.394760][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.407055][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.412792][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.415710][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.426654][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.433964][ T5952] team0: Port device team_slave_1 added [ 72.437051][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.440195][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.453100][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.466970][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.470146][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.482660][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.539035][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.542167][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.555552][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.562158][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.565097][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.576107][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.652564][ T5942] hsr_slave_0: entered promiscuous mode [ 72.656048][ T5942] hsr_slave_1: entered promiscuous mode [ 72.665905][ T5946] hsr_slave_0: entered promiscuous mode [ 72.669148][ T5946] hsr_slave_1: entered promiscuous mode [ 72.671834][ T5946] debugfs: 'hsr0' already exists in 'hsr' [ 72.674110][ T5946] Cannot create hsr debugfs directory [ 72.682086][ T5944] hsr_slave_0: entered promiscuous mode [ 72.685606][ T5944] hsr_slave_1: entered promiscuous mode [ 72.688183][ T5944] debugfs: 'hsr0' already exists in 'hsr' [ 72.690225][ T5944] Cannot create hsr debugfs directory [ 72.749328][ T5952] hsr_slave_0: entered promiscuous mode [ 72.753211][ T5952] hsr_slave_1: entered promiscuous mode [ 72.756291][ T5952] debugfs: 'hsr0' already exists in 'hsr' [ 72.759046][ T5952] Cannot create hsr debugfs directory [ 73.128691][ T5955] Bluetooth: hci0: command tx timeout [ 73.128728][ T5296] Bluetooth: hci1: command tx timeout [ 73.128783][ T5945] Bluetooth: hci2: command tx timeout [ 73.157251][ T5942] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.175650][ T5942] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.184534][ T5942] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.197620][ T5942] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.208030][ T5296] Bluetooth: hci3: command tx timeout [ 73.240135][ T5946] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.247263][ T5946] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.255028][ T5946] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.263597][ T5946] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.353561][ T5952] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.369047][ T5952] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.382611][ T5952] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.389695][ T5952] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.469019][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.474716][ T5944] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.490916][ T5944] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.498749][ T5944] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.506722][ T5944] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.537446][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.565629][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.569536][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.580308][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.599141][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.602367][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.659573][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.677019][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.679499][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.712223][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.715356][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.758599][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.761413][ T40] audit: type=1400 audit(1765014977.277:91): avc: denied { sys_module } for pid=5942 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.796843][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.812331][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.839644][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.847325][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.850720][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.856340][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.859411][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.875292][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.878427][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.893512][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.896520][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.949551][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.029339][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.074298][ T5942] veth0_vlan: entered promiscuous mode [ 74.085388][ T5942] veth1_vlan: entered promiscuous mode [ 74.133594][ T5946] veth0_vlan: entered promiscuous mode [ 74.155845][ T5942] veth0_macvtap: entered promiscuous mode [ 74.172805][ T5942] veth1_macvtap: entered promiscuous mode [ 74.178168][ T5946] veth1_vlan: entered promiscuous mode [ 74.203893][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.210826][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.215241][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.227482][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.244035][ T4143] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.250232][ T4143] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.258894][ T4143] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.265037][ T4143] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.286363][ T5946] veth0_macvtap: entered promiscuous mode [ 74.304990][ T5946] veth1_macvtap: entered promiscuous mode [ 74.346349][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.360142][ T5952] veth0_vlan: entered promiscuous mode [ 74.373798][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.380957][ T5944] veth0_vlan: entered promiscuous mode [ 74.407424][ T4143] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.412247][ T4143] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.417402][ T5944] veth1_vlan: entered promiscuous mode [ 74.417423][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.423686][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.424863][ T5952] veth1_vlan: entered promiscuous mode [ 74.430583][ T4143] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.434130][ T4143] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.471790][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.475572][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.539757][ T5952] veth0_macvtap: entered promiscuous mode [ 74.552007][ T5942] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.557011][ T5944] veth0_macvtap: entered promiscuous mode [ 74.561133][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.565162][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.571122][ T5952] veth1_macvtap: entered promiscuous mode [ 74.590739][ T5944] veth1_macvtap: entered promiscuous mode [ 74.618739][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.623580][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.623848][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.638081][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.661949][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.675417][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.679833][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.685229][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.703059][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.717975][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.719492][ T6037] Zero length message leads to an empty skb [ 74.744792][ T4143] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.758379][ T4143] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.762575][ T4143] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.782819][ T4143] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.807945][ T6040] syz.0.5 uses obsolete (PF_INET,SOCK_PACKET) [ 74.817164][ T4143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.827949][ T4143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.870192][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.875946][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.909181][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.912872][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.933849][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.936720][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.174000][ T6061] hugetlbfs: syz.3.10 (6061): Using mlock ulimits for SHM_HUGETLB is obsolete [ 75.184047][ T6064] netlink: 'syz.0.11': attribute type 29 has an invalid length. [ 75.208327][ T5296] Bluetooth: hci0: command tx timeout [ 75.209030][ T6064] netlink: 'syz.0.11': attribute type 3 has an invalid length. [ 75.211075][ T5296] Bluetooth: hci2: command tx timeout [ 75.213958][ T6064] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11'. [ 75.216436][ T5296] Bluetooth: hci1: command tx timeout [ 75.224660][ T6066] netlink: 'syz.3.13': attribute type 29 has an invalid length. [ 75.233414][ T6068] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13'. [ 75.297962][ T5296] Bluetooth: hci3: command tx timeout [ 75.299019][ T6071] vivid-007: ================= START STATUS ================= [ 75.303314][ T6071] vivid-007: Generate PTS: true [ 75.305345][ T6071] vivid-007: Generate SCR: true [ 75.307235][ T6071] tpg source WxH: 320x240 (Y'CbCr) [ 75.309341][ T6071] tpg field: 1 [ 75.310887][ T6071] tpg crop: (0,0)/320x240 [ 75.312890][ T6071] tpg compose: (0,0)/320x240 [ 75.315077][ T6071] tpg colorspace: 8 [ 75.316871][ T6071] tpg transfer function: 0/0 [ 75.321461][ T6071] tpg Y'CbCr encoding: 0/0 [ 75.327867][ T6071] tpg quantization: 0/0 [ 75.329687][ T6071] tpg RGB range: 0/2 [ 75.331494][ T6071] vivid-007: ================== END STATUS ================== [ 75.387723][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 75.391640][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'. [ 75.407392][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 75.408078][ T1152] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.411667][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'. [ 75.421396][ T1152] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.425160][ T1152] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.466961][ T1152] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.477685][ T6094] input: syz1 as /devices/virtual/input/input5 [ 75.513975][ T1025] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 75.621061][ T40] kauditd_printk_skb: 70 callbacks suppressed [ 75.621073][ T40] audit: type=1400 audit(1765014979.137:162): avc: denied { sys_module } for pid=6101 comm="syz.3.22" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 75.651522][ T1025] usb 5-1: device descriptor read/64, error -71 [ 75.652869][ T40] audit: type=1400 audit(1765014979.167:163): avc: denied { create } for pid=6109 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.664354][ T40] audit: type=1400 audit(1765014979.177:164): avc: denied { nlmsg_write } for pid=6109 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.664360][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24'. [ 75.707372][ T40] audit: type=1400 audit(1765014979.217:165): avc: denied { ioctl } for pid=6111 comm="syz.3.25" path="socket:[9042]" dev="sockfs" ino=9042 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.724962][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25'. [ 75.729641][ T6112] ksmbd: Daemon and kernel module version mismatch. ksmbd: 231, kernel module: 1. User-space ksmbd should terminate. [ 75.743575][ T40] audit: type=1400 audit(1765014979.257:166): avc: denied { create } for pid=6113 comm="syz.1.27" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 75.744351][ T6114] : Can't lookup blockdev [ 75.757329][ T40] audit: type=1400 audit(1765014979.257:167): avc: denied { mounton } for pid=6113 comm="syz.1.27" path="/5/file0" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 75.770640][ T40] audit: type=1400 audit(1765014979.277:168): avc: denied { write } for pid=6115 comm="syz.2.26" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.782880][ T40] audit: type=1400 audit(1765014979.297:169): avc: denied { unlink } for pid=5944 comm="syz-executor" name="file0" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 75.808892][ T40] audit: type=1400 audit(1765014979.327:170): avc: denied { write } for pid=6118 comm="syz.1.29" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 75.822867][ T40] audit: type=1400 audit(1765014979.327:171): avc: denied { read write } for pid=6118 comm="syz.1.29" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 75.824710][ T6119] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 75.839109][ T6122] netlink: 'syz.2.30': attribute type 1 has an invalid length. [ 75.867330][ T6123] program syz.1.29 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.878491][ T6123] ata1.00: invalid transfer count 0 [ 75.891682][ T6125] netlink: 204 bytes leftover after parsing attributes in process `syz.3.31'. [ 75.896235][ T6125] IPv6: NLM_F_CREATE should be specified when creating new route [ 75.918205][ T1025] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 75.960779][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33'. [ 76.009904][ T6136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 76.047960][ T1025] usb 5-1: device descriptor read/64, error -71 [ 76.169564][ T1025] usb usb5-port1: attempt power cycle [ 76.517984][ T1025] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 76.538953][ T1025] usb 5-1: device descriptor read/8, error -71 [ 76.644287][ T6120] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 76.653515][ T6120] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 76.660325][ T6120] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 76.664666][ T6120] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 76.667356][ T6120] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 76.674513][ T6120] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 76.682021][ T6120] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 76.684775][ T6120] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 76.689435][ T6120] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 76.693178][ T6120] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 76.695905][ T6120] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 76.701752][ T6120] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 76.787919][ T1025] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 76.829136][ T1025] usb 5-1: device descriptor read/8, error -71 [ 76.938210][ T1025] usb usb5-port1: unable to enumerate USB device [ 77.048093][ T6030] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 77.200356][ T6030] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 77.204045][ T6030] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 77.209929][ T6030] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 77.214792][ T6030] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 77.220012][ T6030] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 77.225726][ T6030] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 77.228910][ T6030] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 77.233281][ T6030] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 77.238798][ T6030] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 77.243656][ T6030] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 77.249553][ T6030] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 77.252760][ T6030] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 77.257377][ T6030] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 77.262633][ T6030] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 77.267478][ T6030] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 77.274970][ T6030] usb 8-1: string descriptor 0 read error: -22 [ 77.277900][ T6030] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 77.281754][ T6030] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.302380][ T6030] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 77.555905][ T6148] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 77.559546][ T6148] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 77.563390][ T6148] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 77.751445][ T6173] Bluetooth: MGMT ver 1.23 [ 77.924426][ T6182] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6182 comm=syz.1.47 [ 77.937724][ T6182] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 77.940006][ T5945] Bluetooth: hci0: command 0x0419 tx timeout [ 77.941108][ T6182] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 77.944105][ T5955] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 77.948572][ T6182] vhci_hcd vhci_hcd.0: Device attached [ 77.954234][ T6184] vhci_hcd: connection closed [ 77.959115][ T1166] vhci_hcd: stop threads [ 77.963630][ T1166] vhci_hcd: release socket [ 77.965578][ T1166] vhci_hcd: disconnect device [ 78.050617][ T6191] netdevsim netdevsim2: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 78.097159][ T6193] ./cgroup: Can't lookup blockdev [ 78.260990][ T6205] ======================================================= [ 78.260990][ T6205] WARNING: The mand mount option has been deprecated and [ 78.260990][ T6205] and is ignored by this kernel. Remove the mand [ 78.260990][ T6205] option from the mount to silence this warning. [ 78.260990][ T6205] ======================================================= [ 78.295494][ T6205] 9pnet_fd: Insufficient options for proto=fd [ 78.540490][ T6223] openvswitch: netlink: Flow actions attr not present in new flow. [ 78.566380][ T6223] kvm: apic: phys broadcast and lowest prio [ 78.730679][ T5955] Bluetooth: hci3: command 0x0419 tx timeout [ 78.730753][ T5945] Bluetooth: hci2: command 0x0419 tx timeout [ 78.733924][ T5949] Bluetooth: hci1: command 0x0419 tx timeout [ 78.782560][ T6239] sctp: [Deprecated]: syz.2.64 (pid 6239) Use of struct sctp_assoc_value in delayed_ack socket option. [ 78.782560][ T6239] Use struct sctp_sack_info instead [ 78.884268][ T6247] capability: warning: `syz.1.68' uses deprecated v2 capabilities in a way that may be insecure [ 78.940535][ T6249] loop6: detected capacity change from 0 to 2640 [ 78.946522][ T6249] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.950442][ T6249] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.954293][ T6249] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.960698][ T6249] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.970318][ T6249] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.973109][ T6249] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.975650][ T6249] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.978891][ T6249] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.981805][ T6249] ldm_validate_partition_table(): Disk read failed. [ 78.984655][ T6249] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.987709][ T6249] Buffer I/O error on dev loop6, logical block 0, async page read [ 78.992605][ T6249] Dev loop6: unable to read RDB block 0 [ 78.995556][ T6249] loop6: unable to read partition table [ 78.997587][ T6249] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 79.151207][ T6259] efs: cannot read volume header [ 79.158952][ T6258] FAT-fs (nullb0): bogus number of reserved sectors [ 79.161916][ T6258] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 79.172688][ T6259] SELinux: unknown common  [ 79.176147][ T6259] SELinux: failed to load policy [ 79.199463][ T6259] tmpfs: Unknown parameter 'usrquotaetfocus' [ 79.270577][ T6263] netlink: 'syz.0.75': attribute type 2 has an invalid length. [ 79.281196][ T6265] 9pnet_fd: Insufficient options for proto=fd [ 79.519877][ T6282] overlay: ./file1 is not a directory [ 79.672426][ T6295] netlink: 'syz.0.85': attribute type 30 has an invalid length. [ 79.679974][ T5949] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 80.008268][ T5949] Bluetooth: hci0: command 0x0419 tx timeout [ 80.479013][ T6306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6306 comm=syz.1.88 [ 80.488937][ T6306] bond0: entered promiscuous mode [ 80.490723][ T6306] bond_slave_0: entered promiscuous mode [ 80.492701][ T6306] bond_slave_1: entered promiscuous mode [ 80.495912][ T6306] batadv0: entered promiscuous mode [ 80.500888][ T6306] hsr1: entered promiscuous mode [ 80.503048][ T6306] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 80.564084][ T6308] kAFS: unable to lookup cell 'syz0' [ 80.775979][ T6321] kvm: kvm [6320]: vcpu5, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x1 [ 80.791876][ T40] kauditd_printk_skb: 101 callbacks suppressed [ 80.791892][ T40] audit: type=1400 audit(1765014984.307:273): avc: denied { mount } for pid=6320 comm="syz.1.94" name="/" dev="overlay" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 80.794545][ T6321] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 80.807176][ T6321] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 80.810993][ T5949] Bluetooth: hci2: command 0x0419 tx timeout [ 80.815032][ T6321] vhci_hcd vhci_hcd.0: Device attached [ 80.817947][ T5949] Bluetooth: hci3: command 0x0419 tx timeout [ 80.818785][ T5296] Bluetooth: hci1: Malformed LE Event: 0x0b [ 80.829320][ T6321] overlayfs: failed to get inode (-116) [ 80.832896][ T6321] overlayfs: failed to get inode (-116) [ 80.836850][ T6322] vhci_hcd: connection closed [ 80.840495][ T1145] vhci_hcd: stop threads [ 80.844588][ T1145] vhci_hcd: release socket [ 80.846569][ T1145] vhci_hcd: disconnect device [ 80.948070][ T830] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 81.117934][ T830] usb 5-1: Using ep0 maxpacket: 8 [ 81.122034][ T830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 81.126687][ T830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 81.132587][ T830] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 81.136667][ T830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.142519][ T830] usb 5-1: config 0 descriptor?? [ 81.353696][ T830] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 81.917106][ T6329] comedi comedi3: dt2817: I/O port conflict (0x9,5) [ 81.924481][ T6329] comedi comedi3: dt2817: I/O port conflict (0x9,5) [ 82.016931][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 82.020019][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.029773][ T40] audit: type=1400 audit(1765014985.547:274): avc: denied { map } for pid=6333 comm="syz.1.97" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 82.088219][ T5296] Bluetooth: hci0: command 0x0419 tx timeout [ 82.094894][ T6334] __nla_validate_parse: 10 callbacks suppressed [ 82.094915][ T6334] netlink: 24 bytes leftover after parsing attributes in process `syz.1.97'. [ 82.103083][ T6334] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 82.244344][ T40] audit: type=1400 audit(1765014985.757:275): avc: denied { unmount } for pid=5944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 82.439430][ T40] audit: type=1400 audit(1765014985.957:276): avc: denied { create } for pid=6336 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.583353][ T830] usb 8-1: USB disconnect, device number 2 [ 82.597913][ T55] usb 5-1: USB disconnect, device number 6 [ 82.693983][ T1166] nci: nci_rx_work: unknown MT 0x1 [ 82.696999][ T40] audit: type=1400 audit(1765014986.207:277): avc: denied { getopt } for pid=6341 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.749084][ T40] audit: type=1400 audit(1765014986.267:278): avc: denied { write } for pid=6341 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.750471][ T6351] SELinux: policydb magic number 0xdb1aff8c does not match expected magic number 0xf97cff8c [ 82.761033][ T6351] SELinux: failed to load policy [ 82.888019][ T5296] Bluetooth: hci3: command 0x0419 tx timeout [ 82.888028][ T5949] Bluetooth: hci2: command 0x0419 tx timeout [ 82.995011][ T6353] netlink: 'syz.1.101': attribute type 10 has an invalid length. [ 83.006015][ T6353] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.010640][ T6353] team0: entered promiscuous mode [ 83.012751][ T6353] team_slave_0: entered promiscuous mode [ 83.015411][ T6353] team_slave_1: entered promiscuous mode [ 83.022679][ T6353] bond0: (slave team0): Enslaving as an active interface with an up link [ 83.029847][ T6353] netlink: 'syz.1.101': attribute type 10 has an invalid length. [ 83.041126][ T6353] syz_tun: entered promiscuous mode [ 83.043791][ T6353] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 83.049027][ T40] audit: type=1400 audit(1765014986.567:279): avc: denied { create } for pid=6352 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 83.148786][ T40] audit: type=1400 audit(1765014986.667:280): avc: denied { write } for pid=6354 comm="syz.0.102" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.225820][ T6360] netlink: 92 bytes leftover after parsing attributes in process `syz.0.104'. [ 83.340982][ T40] audit: type=1400 audit(1765014986.857:281): avc: denied { setopt } for pid=6364 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.366511][ T6368] evm: overlay not supported [ 83.371154][ T40] audit: type=1400 audit(1765014986.887:282): avc: denied { ioctl } for pid=6364 comm="syz.0.105" path="socket:[11069]" dev="sockfs" ino=11069 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.605924][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'. [ 83.619785][ T6380] xt_TPROXY: Can be used only with -p tcp or -p udp [ 83.757942][ T830] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 83.923605][ T830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.927607][ T830] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 83.957894][ T830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.972466][ T830] usb 5-1: config 0 descriptor?? [ 84.156210][ T6395] netlink: 'syz.3.115': attribute type 7 has an invalid length. [ 84.167942][ T5296] Bluetooth: hci0: command 0x0419 tx timeout [ 84.184375][ T830] usbhid 5-1:0.0: can't add hid device: -71 [ 84.187566][ T830] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 84.200612][ T830] usb 5-1: USB disconnect, device number 7 [ 84.207828][ T6358] comedi comedi0: reset error (fatal) [ 84.242737][ T6398] process 'syz.3.116' launched '/dev/fd/3' with NULL argv: empty string added [ 84.362778][ T6404] netlink: 'syz.3.119': attribute type 2 has an invalid length. [ 84.369721][ T5296] Bluetooth: hci3: unexpected event for opcode 0x0428 [ 84.379336][ T6404] tun0: tun_chr_ioctl cmd 1074025675 [ 84.380814][ T6406] hpfs: Bad magic ... probably not HPFS [ 84.381953][ T6404] tun0: persist enabled [ 84.394161][ T6404] tun0: tun_chr_ioctl cmd 1074025675 [ 84.398358][ T6404] tun0: persist disabled [ 84.484491][ T6410] netlink: 'syz.1.120': attribute type 10 has an invalid length. [ 84.487142][ T6410] netlink: 40 bytes leftover after parsing attributes in process `syz.1.120'. [ 84.501770][ T6410] geneve0: entered promiscuous mode [ 84.507147][ T6410] team0: Port device geneve0 added [ 84.708592][ T830] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 84.860411][ T830] usb 5-1: Using ep0 maxpacket: 32 [ 84.869142][ T830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.875247][ T830] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 84.881510][ T830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.886799][ T830] usb 5-1: config 0 descriptor?? [ 84.892680][ T830] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 84.900554][ T830] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 84.978646][ T5296] Bluetooth: hci2: command 0x0419 tx timeout [ 85.070081][ T6456] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.126960][ T6460] Invalid logical block size (2049) [ 85.155916][ T6454] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 85.190101][ T6466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.203078][ T6466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.494765][ T6484] netlink: 16 bytes leftover after parsing attributes in process `syz.2.139'. [ 85.503160][ T6484] netlink: 16 bytes leftover after parsing attributes in process `syz.2.139'. [ 85.507653][ T6484] netlink: 16 bytes leftover after parsing attributes in process `syz.2.139'. [ 85.528388][ T6484] netlink: 16 bytes leftover after parsing attributes in process `syz.2.139'. [ 85.532841][ T6484] netlink: 16 bytes leftover after parsing attributes in process `syz.2.139'. [ 85.537621][ T6484] netlink: 16 bytes leftover after parsing attributes in process `syz.2.139'. [ 85.646239][ T6489] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 85.808417][ T830] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 85.935860][ T6498] xt_ipcomp: unknown flags 1D [ 85.951332][ T6498] NILFS (nbd2): device size too small [ 85.980998][ T830] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64 [ 85.992724][ T830] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 85.996934][ T830] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.037943][ T830] usb 8-1: Product: syz [ 86.039863][ T830] usb 8-1: Manufacturer: syz [ 86.042216][ T830] usb 8-1: SerialNumber: syz [ 86.050158][ T830] usb 8-1: config 0 descriptor?? [ 86.257904][ T5296] Bluetooth: hci0: command 0x0419 tx timeout [ 86.289915][ T6487] bridge_slave_0: invalid flags given to default FDB implementation [ 86.311106][ T6507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.318807][ T6507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.459506][ T2297] usb 8-1: USB disconnect, device number 3 [ 86.541401][ T11] usb 5-1: USB disconnect, device number 8 [ 86.549842][ T11] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 86.818278][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 86.818293][ T40] audit: type=1400 audit(1765014990.337:321): avc: denied { allowed } for pid=6521 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 86.838999][ T6523] warning: `syz.1.153' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.857644][ T6527] loop3: detected capacity change from 0 to 7 [ 86.866164][ T6527] Dev loop3: unable to read RDB block 7 [ 86.878131][ T6527] loop3: unable to read partition table [ 86.880926][ T6527] loop3: partition table beyond EOD, truncated [ 86.884225][ T6527] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 86.884835][ T6524] ------------[ cut here ]------------ [ 86.890861][ T6524] WARNING: arch/x86/kvm/lapic.c:3483 at kvm_apic_accept_events+0x444/0x4c0, CPU#1: syz.0.154/6524 [ 86.895422][ T6524] Modules linked in: [ 86.898028][ T6524] CPU: 1 UID: 0 PID: 6524 Comm: syz.0.154 Not tainted syzkaller #0 PREEMPT(full) [ 86.901838][ T6524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.907062][ T6524] RIP: 0010:kvm_apic_accept_events+0x444/0x4c0 [ 86.911261][ T6524] Code: 34 03 00 00 02 00 00 00 e9 ae fd ff ff 4c 89 ef e8 d1 11 e0 00 e9 33 fc ff ff e8 97 11 e0 00 e9 17 fd ff ff e8 7d e1 76 00 90 <0f> 0b 90 e9 24 fd ff ff e8 af 11 e0 00 e9 de fb ff ff e8 75 11 e0 [ 86.920574][ T6524] RSP: 0018:ffffc9000634fc38 EFLAGS: 00010283 [ 86.923107][ T6524] RAX: 0000000000000708 RBX: 0000000000000002 RCX: ffffc900072c1000 [ 86.926828][ T6524] RDX: 0000000000080000 RSI: ffffffff814744c3 RDI: 0000000000000005 [ 86.930613][ T6524] RBP: ffff888047d21e00 R08: 0000000000000005 R09: 0000000000000002 [ 86.934267][ T6524] R10: 0000000000000002 R11: 00000000e207cf91 R12: 0000000000000001 [ 86.938462][ T6524] R13: ffff888047d21ee0 R14: ffff88805758a970 R15: 0000000000000001 [ 86.941898][ T6524] FS: 00007f670dadb6c0(0000) GS:ffff8880d6a60000(0000) knlGS:0000000000000000 [ 86.945919][ T6524] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.949831][ T6524] CR2: 0000000000000000 CR3: 0000000053662000 CR4: 0000000000352ef0 [ 86.954038][ T6524] Call Trace: [ 86.955906][ T6524] [ 86.957252][ T6524] kvm_arch_vcpu_ioctl_get_mpstate+0x103/0x3f0 [ 86.960064][ T6524] kvm_vcpu_ioctl+0x7b8/0x1660 [ 86.962151][ T6524] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 86.964632][ T6524] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 86.967157][ T6524] ? do_vfs_ioctl+0x128/0x14f0 [ 86.969582][ T6524] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 86.971809][ T6524] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 86.974993][ T6524] ? hook_file_ioctl_common+0x144/0x410 [ 86.977721][ T6524] ? selinux_file_ioctl+0x180/0x270 [ 86.980013][ T6524] ? selinux_file_ioctl+0xb4/0x270 [ 86.982136][ T6524] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 86.984692][ T6524] __x64_sys_ioctl+0x18e/0x210 [ 86.986703][ T6524] do_syscall_64+0xcd/0xf80 [ 86.988775][ T6524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.991459][ T6524] RIP: 0033:0x7f670cb8f7c9 [ 86.993031][ T6524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.001089][ T6524] RSP: 002b:00007f670dadb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.004077][ T6524] RAX: ffffffffffffffda RBX: 00007f670cde5fa0 RCX: 00007f670cb8f7c9 [ 87.006776][ T6524] RDX: 0000200000000040 RSI: 000000008004ae98 RDI: 0000000000000005 [ 87.009511][ T6524] RBP: 00007f670cc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 87.012128][ T6524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.015634][ T6524] R13: 00007f670cde6038 R14: 00007f670cde5fa0 R15: 00007ffc6a2aa6c8 [ 87.019592][ T6524] [ 87.020969][ T6524] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.024315][ T6524] CPU: 1 UID: 0 PID: 6524 Comm: syz.0.154 Not tainted syzkaller #0 PREEMPT(full) [ 87.027907][ T6524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.031686][ T6524] Call Trace: [ 87.033387][ T6524] [ 87.034660][ T6524] dump_stack_lvl+0x3d/0x1f0 [ 87.036512][ T6524] vpanic+0x640/0x6f0 [ 87.038139][ T6524] ? kvm_apic_accept_events+0x444/0x4c0 [ 87.040368][ T6524] panic+0xca/0xd0 [ 87.041682][ T6524] ? __pfx_panic+0x10/0x10 [ 87.043493][ T6524] check_panic_on_warn+0xab/0xb0 [ 87.045477][ T6524] __warn+0x108/0x3c0 [ 87.047162][ T6524] __report_bug+0x2a0/0x520 [ 87.048989][ T6524] ? kvm_apic_accept_events+0x444/0x4c0 [ 87.051327][ T6524] ? __pfx___report_bug+0x10/0x10 [ 87.053416][ T6524] ? __pfx___might_resched+0x10/0x10 [ 87.055629][ T6524] ? kvm_apic_accept_events+0x444/0x4c0 [ 87.057708][ T6524] report_bug+0xb2/0x220 [ 87.059443][ T6524] ? kvm_apic_accept_events+0x444/0x4c0 [ 87.061955][ T6524] handle_bug+0x127/0x260 [ 87.064218][ T6524] exc_invalid_op+0x17/0x50 [ 87.066214][ T6524] asm_exc_invalid_op+0x1a/0x20 [ 87.068043][ T6524] RIP: 0010:kvm_apic_accept_events+0x444/0x4c0 [ 87.070562][ T6524] Code: 34 03 00 00 02 00 00 00 e9 ae fd ff ff 4c 89 ef e8 d1 11 e0 00 e9 33 fc ff ff e8 97 11 e0 00 e9 17 fd ff ff e8 7d e1 76 00 90 <0f> 0b 90 e9 24 fd ff ff e8 af 11 e0 00 e9 de fb ff ff e8 75 11 e0 [ 87.078713][ T6524] RSP: 0018:ffffc9000634fc38 EFLAGS: 00010283 [ 87.080934][ T6524] RAX: 0000000000000708 RBX: 0000000000000002 RCX: ffffc900072c1000 [ 87.083582][ T6524] RDX: 0000000000080000 RSI: ffffffff814744c3 RDI: 0000000000000005 [ 87.086740][ T6524] RBP: ffff888047d21e00 R08: 0000000000000005 R09: 0000000000000002 [ 87.089486][ T6524] R10: 0000000000000002 R11: 00000000e207cf91 R12: 0000000000000001 [ 87.092277][ T6524] R13: ffff888047d21ee0 R14: ffff88805758a970 R15: 0000000000000001 [ 87.095202][ T6524] ? kvm_apic_accept_events+0x443/0x4c0 [ 87.097507][ T6524] ? kvm_apic_accept_events+0x443/0x4c0 [ 87.099762][ T6524] kvm_arch_vcpu_ioctl_get_mpstate+0x103/0x3f0 [ 87.102287][ T6524] kvm_vcpu_ioctl+0x7b8/0x1660 [ 87.104308][ T6524] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 87.106528][ T6524] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 87.109204][ T6524] ? do_vfs_ioctl+0x128/0x14f0 [ 87.111569][ T6524] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 87.113401][ T6524] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 87.116110][ T6524] ? hook_file_ioctl_common+0x144/0x410 [ 87.118443][ T6524] ? selinux_file_ioctl+0x180/0x270 [ 87.120604][ T6524] ? selinux_file_ioctl+0xb4/0x270 [ 87.123045][ T6524] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 87.125496][ T6524] __x64_sys_ioctl+0x18e/0x210 [ 87.127812][ T6524] do_syscall_64+0xcd/0xf80 [ 87.129952][ T6524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.132805][ T6524] RIP: 0033:0x7f670cb8f7c9 [ 87.134695][ T6524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.142420][ T6524] RSP: 002b:00007f670dadb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.147079][ T6524] RAX: ffffffffffffffda RBX: 00007f670cde5fa0 RCX: 00007f670cb8f7c9 [ 87.150692][ T6524] RDX: 0000200000000040 RSI: 000000008004ae98 RDI: 0000000000000005 [ 87.153715][ T6524] RBP: 00007f670cc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 87.156394][ T6524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.159000][ T6524] R13: 00007f670cde6038 R14: 00007f670cde5fa0 R15: 00007ffc6a2aa6c8 [ 87.161998][ T6524] [ 87.164277][ T6524] Kernel Offset: disabled [ 87.166394][ T6524] Rebooting in 86400 seconds..