last executing test programs: 2m6.713978183s ago: executing program 3 (id=421): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x500, 0x100) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r1) fcntl$notify(r0, 0x402, 0x34) ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r3 = fanotify_init(0x200, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x1}, 0x21, 0x0) landlock_restrict_self(r7, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r5, &(0x7f0000000640)=@file={0x1}, 0x6e) fanotify_mark(r3, 0x1, 0x8000026, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x105a42, 0x0) sendfile(r2, r3, 0x0, 0x528) 2m3.653150894s ago: executing program 3 (id=449): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(0xffffffffffffffff, 0xc004ae0a, &(0x7f0000000000)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file1', [{0x20, '@('}, {0x20, 'nfs4\x00'}, {}], 0xa, "8f133089adcbddaee37c0b275acd09533f0e0b6db4b254e94c86e6786e035f6abb0475de9186ba0bb1b17c1c55819e99ead1407d1cb4f9cf8c796ceab55c9bb9c808602fee5f481fda0f4af62ae35f89646e2196db5ddd4394acf814e819a5552a265cf05a5fc0c7b411d112c96d3a6e0ef5f75cf0c8700fd65b7ee6ca6ab4f493a198dc61a5c8f6864945eb5669df2723cf16d9859441a647add73f22059b4a06cafbf16e8e1da9016a2c673350f2227e7239e63a4e508ce06b6862205da632bc91f293b23c057ab07e09eac110d7958080fce00ed8ab1772429edf3899b15e1231fd5b08bffe00a5a427282401900a05ffb40cf8701ec8debf580298a952841e84490860eaa7096422160b49071ebc0b5a2ab2146b41688e586cc91bbe73d464caa76ad470b0d1b4ccc4fe1122ae23dd64ba5ef248d7382aa5a89087ba349d1cfbacfd17f0fac0e1475f839a6bfa145d0dea58523d848855f1025507ea4a71695ce4d67d30294aadc6fab7af01632da3e0c6bd77ce65df1801ed041915e7bd96e2be23b45d12105860c61dc57ad52347d01c655be2a7156be0101e9e7cafd67b56256ebfd4323c52e2a8d4aead81286246566389671e7c296a584fbca3b4165efc0172e7574572a20bcd490ea8b21450dbce96cb869a03b9623cc32e60edcfd1ee7ad6401191a700505bc035a69dc11fb6aa49e5ccb4ed63b1a6c29ed4e3a727d2e8a38d0a67ecb251199e46b2efe4c4917a0112bab46950b6c7624f3c5f21998a77fc0abd41ecb75bcefa0c85f73fb0455a96ffc6c12949556989d6b358602a5b7f00dceafdca88394b0518c5dc5e5d49d72787458c97e6febec239d95489288d96972430ec680460185c22103e898074c99989d21976d0933f68ba0f6b1f3118be574432d91791941e4386b7aed28ed65fdad7ae2d9f8ac54b7c7a60349d2ca8ff0ac5a3028224b6d73a02fd0613449dec00cb9d17c6e94af691ee5303ab4ebe36b1c2492ed28efa7d21bcf612c30b5659f23a57671bcd21f297b4c39c45b6e8b8303c937d204cff4e932d0d87109fe8c8ff6a81b7d954d8907dc5d1f1a38c1ba818d80376b6578f18d91391f6621a61b922f1de9648581ab43afbece5ab76b7252d3e183465e759a0887227d1e0a2956b86d5b5d4b42e563b0693bee30970ada16355fdc666cd707e8d8a67bd5d60df687871fbb2db89e13be3ae6a4afae3a75138122e4ff0b9fc0908ca579660e45240ab0366987ac0712a331b96e4a25327df9e093aa3cd429591508a69324983eb76b0a01b6b04bc3925a5feba55cbcd3bd377cbd26e0fe6e948e5e7747591ab16015248492b5873260cde244c6f6f6f29746a30f5e7c48de302a6925280a68b157cae7f282947d37cfe9636a3b4a8a5ca790e504c68bf7c943fb71189e7e316d34e1312e4a9e9015c1eec10dce40367c45788d39dbe0abcfdac3e2a46f953e9e37e317ff67f9f20afded47cc7a7545f1bd3a17a375039542564c2e3ae013586444ef0b4d81beec8241dcee860f7a3ce1c6bac97665cd5058a1770ad308002c01bf7872f0aea291873321c616e0ee5304982f682d8e8652da37f81969e4f0f8c5da964f2c7989fa6815f584529792fea5c4f4a68445250d68e6b36b912d595e8adbdde64cb63ec23ab1e6803e3ca5ca503eb539a9de6f43d073e3d6bda19b314a5635bbd5769540da5ac82bf3cfe9d1f41ae258334b130b98b832eee62d6efe439c3fd3c4a6bb758cc4cbdb5fe71b2be4a6dc1e1593fbadcf1bf844de575437f04a551bc7decf284c711b9184627138c16dd13b71566cd9fd89720ea16ef29a153c52325eb64a855b28e9b912df248122095417baec90e999dd19bcb8f8ab3aab80e0ef8e1521e5b46bd19857ff4b81e3f748b8431f868ee16b84adc7070968c971cd62e4f40b1ad9507dc419ed40c1d6833d08aa5c042b9304d45ad58d12847ea6c74d41821417fe2de7b6e7b4ac5c6b28be77c272c7ff94709d28017091bc556e224ff3df881a71195fff49c1c46428a1013dc2a31305ca139a9cfc1412a3b0d7b5c4e4d7970d578eaeda8b5d5fc5a65dd75890d48235116ad76da559ce2ef5fedb18c1cae72a1e3bf9fc5d3052a17c3d7cc37df17ae4dea1cd626e747f59d34fb0ddd4c5dfbf30197be3fa3b1437e537c70232a8cd2dbcdadf92d8dd7d32a8d69265de26ddaf4abb6bb6d59855f5215bdf6180cb0f18b575820ed12d37e5d8fcf1569a5f59c8a9834083f8038307d24c75e5b61a1cfb39afecfa36d630a8b6d52876f2d1af9c50c02c826c174d75be31ff073ed5afcae5ad332233af1bdf09c9ab3c70a44e1f29805ca0d54ad30441b8be6ab24527567e4a4c1296fb1d10a15a33fbf9816f4a41716f23277bad8383102798b5c12fd0bbe824230749fdc613a11401dc75449a48fbe9b18dea77174be04fd3537b2a71455fa808bf7c4625a03cad03c22acefa5b06ff3a05384873e3ea956f6de6d85000c1978b19b68edd8d5a23b979acc3a5a6b5320baf043ecf8898896abc3409b02323f02995956c5e8e2af39c88d7f9a78874f6c352c2af615d8b3ec5a0f12266578daa51e434969981513fa4084c408bed8150d1f5fc492c9cb50b06ea95fd18e491d82edb4c3b735227583dc47532696c4531615cb80ef206981099cd6fbbad15c2decde16ea162b200644dbd895afaf3cf66560158204de85de16619018de7ec333d159980757e9532984c8fe43aebb24fd2a411d27d0107ea02771b800050a5c61f363a30d476f540731c9cb0dc092139bc3e00481bd45950a9ce5de0a0d7af1d46bf3e907ee5ce032d81656783289f2d068fbd5bd8b14e5eb46f869a1a636af82ef0aaa6e49dd2062a993ee601596960c0e15cde1ab78e9e97f66c9cb29dc931523e1fb1b7ffa74e5d6e425341514ed1fe7b86f55b12bc657384611b1d1b026fe2ac1d20e1a55028a3f090982b40a25179f78236d612d70e24ada583311f3daaf3bf5665462c7c4d92dfccca453d326085c259ff8420bb19399ae691a2ff443bd81a4ec9eab7c898fdfec0ab0f06588189b4663753d2ce9171f508bc92107075de3773494e093ad9a48bb572da376b3cc735191c8857cb1b184e56acdf648baf4a097a428b33d62060f558bb1c6120d2488b4d77b692a8e447b1e23c8bc1a6645befed2c2715adf48d1a72abffda67fbbe2c0a01a4c09e7c7defd69cbdf162eb4fad8ada6c7a0b725aadf0e5d46bd4da1b467c582a77ae09aee05a6ec6cd319d83d83b4aa43e589290646ba126fb89a2f2d01886d8f3dfe711b0e97cc486b0f6dabdf7cd1afb5f696945bf30056821f199e7d455a4d58fe58801e768f83c1239ec93ae1114536cfac79e5a6928d7d46fb692c39534deb4f5a84f13d67a7851328a1b57b65e124baeb5c262e0392b743aff3aecfe3b3842f76eaeeff311668402d36de90cd0e523fe357a4149487f91c157d433cc65dabe45e09f11b29bbed9335ba271448fea8f1348dcc399064bb9cd1096b1893481cbe6ba3e5504583233ffa039f9eeda68a31d32053b3d277f910cba5d481d6a1f738f6aa61c0083ec1d950147ac8f8039f326b90dc411787041459f518ff7db74640df9663e01468a21f400457740cf2fb821164b913667f7f6fddb8410572efd8f0260fe551c88d618d0622170977c97070d7887187c9553b3c7769819c07e695a03c8efdfc9a3705040f2448ec8f376ebba7ec6f7f8b2519cd32b3971c8d892f1f4e1243b1d06f219269dc6447b84ec1d1263fa925527c94a5fbe0100b2c91a77cf3326dd800b3b8b56e71c6bce938b60e6f7ff471b33b3b80e0a65a4cf1fa7f358abdafd7268762a8580ae3989e8d2184115ad5966efde1f5f05a59205754af3b8ae3f7e66884a7791e75f60ac410d2ac9d57ad9540ab0b3cda406615db1990a15024ab1dd4da7f56f442da68626a4f9280b2018e637ff18d4ca1a5434e74b451b751faaa375f41f8b5f19a40b2ba194c4f342215a62676c7a8f4dcd2de378140fe2f8782cf81e5c52edb8a0477cccf21c1ce39a54e6e0c1d6fc7c3315680b0384ed5f13d67e084f0364f162863a89dbb4b1b9d5b435884a7b976e9cb930a1809a9ad925ceb5f3ef10ab668415f7313582695cc5621880a50c06b65d2d7f54c33ec34d6766ebe8b0151da5de2bbe1873e104e256e2f82d3d253ebb7200942370e8f8df683f4745fda4a1a886b9228c92baf70644265a3ce5d11854337e689dd7c0903983d3df4100a97a6d6be017b0e9b98b112fa7920c8576dcc44d9bd484049968c56dfaba9ec3972b9d033232e5973f9f43840a5cdf794d3387ea0c60e4ead9b72cd2b4a5013274774b6ee41f666e9df848a8a0ef3fc1302210a2d89cf7985ef35856798ca6570ca4893ca796868546052e35af9c892b16b025d61a56e04c5cb238e42e30f475d31ea90bb35f5b31cc82a1608c56bf5dde54f4f94dfa9e87d51aefbb1c3e677c5ac11ebf6bd8f8d2a6d63c0f9db6bcf1baa4cbcda3138633a680ce695e382161073d775dc9b476624bb5ebba0cba9fa036bd27665c85082c4cd0e4bbfa63587e3f69cd8465878fddefbfe0c82a90d41928de13715f5c148183df22134b28636383a76ccfb85a75a03bcb328ebbad1990beba7b2034fa8f802cd068913ae32d536c833892e127357afc88bfd0a1ae729ccdfcd06c22da263e331a8cb5fc80776509eb7d01d2ee893600871083b282c460482a0950d43f132f0cdd66bf30fb56c1a88f92bce3e5b7b17dd9dcbc513a40640b1315d6fe30909b8780c6fb734781f86f4456bbfcbf5018577cdb2f2c2d59d94ffd72dde30e9476a6dc2d44e670764aacf7f8f024ff9f638b273c3a2d839ad20b988e4c92d3fcf8b5af4e58f7ac131fdf7355133a601592508a2b13503f09f86d83608cb5c4c7fb4f9ac9b23815099315282fbda0d660ccddf6a698e182bdc415adf676b517181a78c8d5af8e1e8ff4c48f5239688081a6ead0a4842bdbcd7f6a4a048a4f1d2db4637922997a945d3ebe649896de5d6e60951f274b995820429227f5493704982e63dbe0ff27e7ac173e7683998eaf7ce125396eb3102966588d5e2efb6a60b659c63a0ae45303837ddab585f9689528ccaa2e0d1e413d80dd9e7cdd3e9167ea412a4347d766effde79f98265819d3c7d02acb14d14852c0cf2be73e632cd1aa29cf745f8fd43d6fce409b5c66fd596d326eff74de341641a67cbd9ad18d1c97ee66d37db5c6c3daa78684c525e32959330dd3d4edf570c729c005596f7a2abc6254997e495454b4dd17068f23dc1106948df0fb4608f762e7f80a217da84f6e35d7cdb1c2d748ff0895245d625fade9bee0a4c873663b004a99804d054ceec42827b949f2bc4d3cc4bce197ce4ec57f696a4f332f540a4483fbd5dae51be689ab3179cb21bee1d66fac6fac6ac0b6e287ee54940b8ffbf0c4f551e7d2e5a330f0b0474cb9db739cf9ffea2de755e000e214f8c8b6917ca4423855d5cae3f815459d02cf37f17e90ed60d70fce55d6e2e6d9da23e975e98ccbd46004493240120afab7810151cfb7cabaa8f90141a607aaa0dff8121298ada7e859ec309600787a1fd5aeb5d99ae7ea361f7a7eb744ce05b8338fcef00737e5baac6bc36673c4d0c3d4df58257769366e26b1562eca3303ef3fc89a76ae2e04ca99e472327087ad60ab35e1c68f321fdff10a466d37a2e95d13f7ef46722b0aa11370f0364ca69f5e2f0db02f795aefcdfe938765528124a242ccaa21c6459a582d6e4d9316c"}, 0x1015) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x955a, 0x0) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f00000001c0)={0x0, 0x2, 0x3, '\x00', &(0x7f0000000140)=0xf0}) mount$nfs4(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6673633d8f"]) 2m3.651160804s ago: executing program 3 (id=451): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x84}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x30000004}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x2) epoll_pwait(r2, &(0x7f0000000600)=[{}], 0x1, 0x7c0e, 0x0, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2m2.740155068s ago: executing program 3 (id=463): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x161200, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r3, 0x100000000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='minix\x00', 0x210000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000008021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2094) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000008021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d432000000000000000000000000000000000000000000000000000000040000000000000001000000000000000100000000000080fffffffffeffffff1000000000000000018000000000000043050000000000000400000000000000ffffffffffffff7f0b00000000000000fdffffffffffffff090000000e000000000000002cbd7000003500000a000000980000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000004000000066d38547aa140d000000000000000086cae9fb4f1c0017"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2094) splice(r2, &(0x7f0000000100)=0xfff, r2, &(0x7f0000000180)=0x1, 0x5, 0x9) (async) splice(r2, &(0x7f0000000100)=0xfff, r2, &(0x7f0000000180)=0x1, 0x5, 0x9) 2m2.642920638s ago: executing program 3 (id=464): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x2}}, './file1\x00'}) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r3) 2m2.642056427s ago: executing program 3 (id=466): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2008000000000015000500511b48033d03010000000000950000d300000000bc26080000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2m1.61293466s ago: executing program 2 (id=484): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000040000100fcff070004000000010000000400488014000180100010800c000b80080091002d2e2600080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c811}, 0x4008094) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x12}}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) sched_getscheduler(r5) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000280)={0x0, 0xe549, 0x4f, &(0x7f0000000200)=""/79}) fchdir(r4) mount$fuse(0x0, &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x80, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x82000, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x70bd27, 0xffffffff, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x2, 0xc8, 0xa, 0x100}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x11, 0x0, 0x4000800}, 0x800) 2m1.515946932s ago: executing program 2 (id=488): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0xfffffffe) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1ff, 0x1000) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000001c0)={0x4, 0x1, 0x8ad9, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980903, 0x4, '\x00', @ptr=0xe}}) 2m1.433790096s ago: executing program 2 (id=490): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000000002010400000000000000000200000524000280140001800800010000000000080002"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002500090122bd7008f9ffffff0200000008003e00ffffffff0800030047"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) (async) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) (async) socket$netlink(0x10, 0x3, 0x4) (async) open(0x0, 0x143bc2, 0x1c0) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) (async) listen(r3, 0x9) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r4, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) (async) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284"], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) (async) unshare(0x2000000) (async) semget$private(0x0, 0x4000, 0x555) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r5, 0x40106e8c, &(0x7f0000000040)=[0x1ff, 0x7ff]) (async) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x1000, 0x1800}], 0x1, 0x0) (async) unshare(0x2c040000) 2m1.383327167s ago: executing program 2 (id=491): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f74120764653d3030303030303030b030303030303030153031303030302c757365725f69643d0728fe5c25d8176a6a26b681ad685dd5fc7db17d61b2f8e2bcab659b632073def37a5cf0b4719353bee4eb98cfb4d7a199598b8030a1043eaa3a136bab63ca320b018e382259e5eb64c5a10ac96b913e01f3c87618c8b16b47fab70743d4a42c964c64ac27242141e8b5b371aea107f8cd479bfc75657cf493b24394d1b4ca51011bc6e2ea37ad4ba8", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) creat(&(0x7f00000000c0)='./file0\x00', 0xf4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f00000003c0)=0xe8) r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0x8, 0x40400) ioctl$HIDIOCGDEVINFO(r2, 0x801c4803, &(0x7f0000000180)=""/127) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}}) 2m1.318248527s ago: executing program 2 (id=493): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x37}, 0x24}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=&(0x7f0000000040)}}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') fchdir(r2) creat(&(0x7f00000024c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1be) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x225d4e1, 0x0) open$dir(&(0x7f0000000200)='./file1\x00', 0x80, 0x100) r3 = io_uring_setup(0x22f, &(0x7f0000000180)={0x0, 0xfa14, 0x20, 0x0, 0x14f, 0x0, r0}) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7, 0x0, r3}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000000)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="dbfe490af4aa001d00000000009500"/28], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m1.310701179s ago: executing program 2 (id=495): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, 0x1c) r2 = socket(0x10, 0x3, 0x800) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x4048010) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000003c0)={0xc, 0x17, '\x00', [@generic={0x5, 0xb7, "43a956e01a441800c656faf703bd7544ddce29f95a7d899c2603b899d9796341e4c041a478a7acfd722c3a74cf6905c40ec8d07587e112924158887e9071d9aba75c83d7e02b15e3cfeb957eaa2ed2b326d3c07044695d53211515d5d5881a06f5c56c88df20015c67ca38e97733eb1373f036b22e89a5c1869417e9376fd5c939527254a48bb546234be68aa322935155d0467a34a0ec6b329856b7189f8f1854b41e0e3b7effebd32ea647d6cd6715e5ac8201f6123d"}]}, 0xc8) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000340), r0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000008021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d432000000000000000000000000000000000000000000000000000000040000000000000001000000000000000100000000000080fffffffffeffffff1000000000000000018000000000000043050000000000000400000000000000ffffffffffffff7f0b00000000000000fdffffffffffffff090000000e000000000000002cbd7000003500000a000000980000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000004000000066d38547aa140d000000000000000086cae9fb4f1c0017"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0xa010) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) r9 = dup2(r6, r6) ioctl$DRM_IOCTL_ADD_BUFS(r9, 0xc0206416, &(0x7f0000000300)={0x0, 0x7, 0x5, 0x7, 0x2, 0x81}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="40007bb62100040026bd7000fedbdf2502142000030000081400000008000200ac14141216fe0d000400000005001300000000000c000c400000000020000b84"], 0x40}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r11 = socket(0x10, 0x803, 0x0) (async) getsockname$packet(r9, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'macvlan1\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYRESHEX=r3, @ANYRESHEX=r7, @ANYBLOB="08000a00f64f654002e2ef", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x10) 1m47.583801085s ago: executing program 32 (id=466): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1m46.145589389s ago: executing program 33 (id=495): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, 0x1c) r2 = socket(0x10, 0x3, 0x800) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x4048010) (async) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000003c0)={0xc, 0x17, '\x00', [@generic={0x5, 0xb7, "43a956e01a441800c656faf703bd7544ddce29f95a7d899c2603b899d9796341e4c041a478a7acfd722c3a74cf6905c40ec8d07587e112924158887e9071d9aba75c83d7e02b15e3cfeb957eaa2ed2b326d3c07044695d53211515d5d5881a06f5c56c88df20015c67ca38e97733eb1373f036b22e89a5c1869417e9376fd5c939527254a48bb546234be68aa322935155d0467a34a0ec6b329856b7189f8f1854b41e0e3b7effebd32ea647d6cd6715e5ac8201f6123d"}]}, 0xc8) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000340), r0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000008021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d432000000000000000000000000000000000000000000000000000000040000000000000001000000000000000100000000000080fffffffffeffffff1000000000000000018000000000000043050000000000000400000000000000ffffffffffffff7f0b00000000000000fdffffffffffffff090000000e000000000000002cbd7000003500000a000000980000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000004000000066d38547aa140d000000000000000086cae9fb4f1c0017"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0xa010) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) r9 = dup2(r6, r6) ioctl$DRM_IOCTL_ADD_BUFS(r9, 0xc0206416, &(0x7f0000000300)={0x0, 0x7, 0x5, 0x7, 0x2, 0x81}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="40007bb62100040026bd7000fedbdf2502142000030000081400000008000200ac14141216fe0d000400000005001300000000000c000c400000000020000b84"], 0x40}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r11 = socket(0x10, 0x803, 0x0) (async) getsockname$packet(r9, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'macvlan1\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYRESHEX=r3, @ANYRESHEX=r7, @ANYBLOB="08000a00f64f654002e2ef", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x10) 2.243619501s ago: executing program 1 (id=2343): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x10, 0x8001) ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x7, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8084}, 0x800) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000140)={"08e74f172eb28e3470eed2177562969c", 0x0, 0x0, {0x4, 0x4ce}, {0x7e, 0x40}, 0x75, [0x8000000000000000, 0x5, 0x3, 0x7, 0xc, 0x2, 0x786dca9d, 0x1ea, 0x6, 0x25a6, 0xb, 0x10001, 0x1800000000000, 0x1, 0x5ae, 0xfffffffffffffffe]}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000240)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"60e381ee0c461d3b85b77505777a8dc4", r2, r3, {0x9, 0xfffffff7}, {0xffffffffffffffff, 0x8000}, 0x5, [0x7fff, 0x5, 0x4, 0x5, 0x8f61, 0x5, 0x8000000000000000, 0x5280, 0x3, 0x0, 0x7, 0x7fff, 0xfffffffffffffffe, 0x10001, 0x0, 0x5]}) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000380)={@dev, 0x0}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000400)={'syztnl2\x00', r5, 0x80, 0x40, 0x5, 0xfabc, {{0x1b, 0x4, 0x1, 0x1, 0x6c, 0x65, 0x0, 0x4, 0x4, 0x0, @multicast2, @loopback, {[@lsrr={0x83, 0xb, 0xc7, [@dev={0xac, 0x14, 0x14, 0x27}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @timestamp_prespec={0x44, 0x14, 0x58, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x3}, {@empty, 0x1}]}, @generic={0x86, 0xa, "ce4222f635a1d157"}, @timestamp={0x44, 0x2c, 0x93, 0x0, 0x4, [0x8, 0x600000, 0xfffff3af, 0xc00, 0x5, 0xc6cf, 0x0, 0x200, 0x4, 0x9]}]}}}}}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000500)={0x1, 0x6, @status={[0x1ff, 0x981, 0x9, 0x8001, 0x9, 0x1]}, [0xffffffffe0000000, 0xfff, 0x4, 0x6, 0x8, 0x7, 0x100000001, 0x7d, 0x5826, 0x60d69e, 0x5, 0x7, 0x1, 0x800, 0x0, 0x10000, 0x1000, 0x7, 0xb857, 0x82c5, 0xb, 0x9, 0xc28, 0x800, 0x7, 0x1000000000, 0xfff, 0x3, 0x7, 0xc, 0x8, 0xfffffffffffffffb, 0x400, 0x7, 0x6, 0x4, 0x5, 0x8001, 0x6, 0x3, 0x61eb, 0x5df6, 0x7ff, 0x7, 0x7, 0x5, 0x5, 0x400, 0x8001, 0x9, 0x2, 0x2, 0x9, 0x9, 0x7, 0x2, 0x6c1, 0xa886, 0xffffffffffffffff, 0x6, 0x8, 0x10, 0x9, 0xc]}) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000f40)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000f80)=0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r6, 0x3, 0x5003) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000fc0)={0xffffffffffffffff}) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000001040)=0x800) ptrace$poke(0x1, r6, &(0x7f0000001080), 0x4) close(r0) r8 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000010c0), 0x840, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r7, 0xc040564b, &(0x7f0000001100)={0xc474, 0x0, 0x200d, 0x4bab4800, 0xfffff1d6, {0x401, 0xc000000}}) ptrace$ARCH_SET_GS(0x1e, r6, &(0x7f0000001140), 0x1001) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000001e80)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001e40)={&(0x7f00000011c0)={0xc78, 0xd, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x690, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x67c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0xa4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x64, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8001}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x80000001}, @NFTA_QUOTA_CONSUMED={0xc}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_SET_ELEM_KEY={0x150, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x8d, 0x1, "ce776765078b9431e1a2e7d461843e0335d1141731618ea4efbc9812eac5a66ac135a874e715cc4a181330548f859149f04c2f046946dbd92c9711a6cd723431442d795b10e1a01867237c91942818e276af2e8c2fff557651e7eb6e5e33b150bfabb819dea6d0d3c22ce7b9963f6ce829eb1f3bd293558da280e9dcc1fa13326a552c37ad82b1239e"}, @NFTA_DATA_VALUE={0x36, 0x1, "f80d52e364cb62cd6167882dd9ededd388d039040d469935c1c3c4fe6b511bbfd0688f39ad8f31319e12e1d776ad1ae1ae34"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_USERDATA={0xb4, 0x6, 0x1, 0x0, "6a2c98a3dce51d1dc7dce69f7280d7724e6be44a184393dd359e9dbbd72905148a7bf463bdeeb5a35c7000765cc7b719c1bd536094c632864b58982a06eba6aab4923e7bd588d759b1cd03f34705835e2e71b9bf15424910650c4e12a3a8b96697538fde204615af77ce7bc5ea6582385863d3ea91457042f374d3439422f2bf7043f28922d6f7037bb095912949ced5a35bf80875790e896a2bf64e829fdd04efa241bc488268ba63a49db9506b7f43"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe74}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x3a4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbb, 0x1, "b3730f457d477fe207d71ab683f4ee3dd1a672bccaa092c1cfac8459bcb5b9580a559880bde672e7368af15f78eeb612d696166dab1952ebc25ae7fc1b145a2d8c5662fcf4e9e6f64415ef34a7a5be879c451a306f4845922a95273988c88b64fc48a14cf5218e03c72cfaf39aa11b3ea2d2006e526ef5fb4d54c8f000aff8ba4afc437fe9dd36db6b1afc3f845d81bf9681f6dda42e49eac8e05d5dbd18dd168d75a9ed7caca8bae9d69f9ac4e6eb8a5b9364059362cc"}, @NFTA_DATA_VALUE={0xd0, 0x1, "342c44a377b3d67966360af1d1d29778de6f09ee4157ff525ef242bcb827432088aa6218efbd403fcecfe26d357d1be9e0930e88d5d9cffd7de5da54e28c666d736be0c0e5ca00fe147c0e9804a3a9ffefbef015e625600528ff99c1aea7ee79afdca8d310125be5b6c0ce93620212fc3c9f951a0469cbeb1313a995b83c14fecf11f4aaa1c90f7afdfdb6b724284963a442341a792aebcc2eedf43cde4ab1f86ba329d8b705ea99ff81f3225bc7c54c69a00112162a50811f8b06b973d0a08080df4028279d77cdb452261b"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x840a49b462b7eeff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x6b, 0x1, "35fd149d61fe900add049ac43480b63d3e27cd1eabddb55e5493295e23f1d3ec518b8dc580f6f33aa1aa784eaad3fda3f4b9b61d68883846d3ca5f95fbc3baaf70d51f4a9464f7023ab7beb9376b571495e3be8c034efbcfa5c92a2d5cfc670104ead2301ce55b"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xae, 0x1, "d2498f3793b6d63e95499020a01581033a4deb940e569617207ceeef2b2eb6f738657ee32a178eb5ae90b2a30eca2d7de6b23e2cb5f15b567726a3a585885f2fd1d4fea4b92c1afbca5d30c246c8e26e84453bc3b90674e0bb8c96f8fb7c059870d205a10fcea2cdced8cc4ec1850011d436556281268418557d0d91b21d3dd497d9844d88eb9e420a2e260169f621362c9953d82159d60769a3c55afbc5be232205a4f000e17bf8aacb"}, @NFTA_DATA_VALUE={0x20, 0x1, "fcd7a612ea5135910b9e63caa528e5eef0082b287280d81387bc371c"}, @NFTA_DATA_VALUE={0x2f, 0x1, "006f2ebbb56fca2941d90a0006a794d220dbd571dccc8ac4cf32e5d2a373450e7d818f7d85e2a659864bfa"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5bc, 0x3, 0x0, 0x1, [{0x424, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x2f0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf6, 0x1, "2ec829cfc002edabdbe3680c00a831d1220d03ce94a0479034963025f443321cdf2dc80886a6f8452fac3efb30d05255dde4e154b872981183e961061545be2606036e2afde5c4c1809a0280c37195757feaab4cc3372c546de617322b8875874b753651b59a6cffcec4e8fb773220530f958347a803d779a28f0f8a66c3f7980e50bd9579c12bc4d64598f60bca4256dc11d7d3af97afa16bbdc930d35a82423f215ab937f2f3979832db25fa8c5207bb334f8472d8bb3ced5a84d3c341f508b6ce834fdeceed1a15c55b8b946d15c91315761b541b3597cdd5da8b5990ae97b6c76347e578a11d41fb6a29d3ec4e15b71d"}, @NFTA_DATA_VALUE={0xf2, 0x1, "525e327f395ac21f1470d00682ccab0cad8fdc420dda68834d2370538f673439bcd0aec0a1ce4d187a97dd4e42642b73508536d7db77bf38df8985729f6eddeb4df13ee8ce795f89e894ba20e90103b8b2986b6441633152345c99854a7ad3b3edae50f9b929f0799f977860fa54eacf6237139518dec7a13d3cd08cc8db3d1185562317cc4b31c40c3caf7f12053499c06b727e0fabfebb5114c59e51055724bf524b3166decfe365aab4a5a28864fe62f0bedb050aafe4c366a6730eb5ff844ab66fafbdd3109f90a6d1918ea1ffbda6e47cbb005d94ce290fa58bb982934716db847fad9a1105caf5916fc61f"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "40d0ab0e8417ad9684d7dffa4458be003dde5337671e8f732206b04ccfa8f71dc0f59beb77"}, @NFTA_DATA_VALUE={0x90, 0x1, "37dad3bc3846e8226a2788e96d0ca79f9200b425ec5a6ef948919009d315b1df555f1b5e2c59873725ae9655bb51a2ebfa1386a3650c0141e41e66925d07d94afba6ce05445633c0216cbec35254e81ea10fa9ed9068f2aa17b783227287c4cdd104bec03fc38315c6d7bfc2d30fa3fb534fcd11f778ddceddd1e57923e9637a91fa5af9b75b0d7ab4ce4932"}, @NFTA_DATA_VALUE={0x24, 0x1, "3413ee7a95661aa14cb66fe27ef8f5a21fe7a51e4ce546698daed19049f0f0ed"}]}, @NFTA_SET_ELEM_USERDATA={0xd1, 0x6, 0x1, 0x0, "b805500b7376e2dcc134e7461b749e9d8fdbe56ce4d3aad8bc68c2d7659f23b9d21896bf6e1000d220040ebec6244a73392af1eca90d59cfda555913ea043cf91bcdb2b44702960b3f033897b92c72d7ce0dc5e0a2eef8a951a5c09410bd86bb69a7666abfa770852c6e261905f6216c4ce0ef1a62a2838bb1bbc1bc71e27f45155d20ef0474aa64f2a8712cb435a49c6a387f9882da2f5478e3c410ac6e5efcac21ce47a889a3630e7a6af563c950ee86b3eaf51f066157458a3d56c8b3860fbc8c389374f2e64672f1ccc79e"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0x46, 0x6, 0x1, 0x0, "7e3213a3325ce4920080caffda0dbf347e8d7db347b7e485f623a40a06bcd8df376e19d35698cb476aca6a7423254c52bd0f00f036dd8850cfe9e7cb652a0d4d4dae"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x150, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x80, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x228}, @NFTA_SET_ELEM_DATA={0xbc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb6, 0x1, "87f3d2230338923f553b648eb1cdc262055e0942615e7832a6fb964c527333b1e604d26601e786c2d1ead37b81b94058b74afd77c1329cd3234c20ed4c84aa978183fc8046f94b5f827107f6a8090cea7cc9c98fe78233c169a0678f432439a73b5a9c4935b638a0fb4a3095e35d4a9eb51497dcf4302bd5153f8767f6ffb12463e2c2f382f3cb6bccac80c5c4aabece0c938bd15e3bd6b5f00814cb2c45163557730f447240af726057a6cbc8e7d8a188a1"}]}]}, {0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @ct={{0x7}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}, 0xc78}, 0x1, 0x0, 0x0, 0x8050}, 0x4051) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r8, 0x5386, &(0x7f0000001ec0)) ioctl$CDROMRESET(r7, 0x5312) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001f00)='./binderfs/binder1\x00', 0x802, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f0000001f40)={'filter\x00', 0x4}, 0x68) r9 = socket$rds(0x15, 0x5, 0x0) quotactl_fd$Q_SYNC(r9, 0xffffffff80000101, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 2.151291566s ago: executing program 1 (id=2344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x2000018c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x58000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r4) r5 = socket$tipc(0x1e, 0x5, 0x0) listen(r5, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r7, 0x1c, 0x0, @in6={0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, 0x90) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.805221788s ago: executing program 5 (id=2348): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000000140)="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", 0xfe}, {&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}, {&(0x7f00000000c0)="69ec03397cf0ed32bbe95e7e45d7918307939da4b8f86f5733217ac61385d95befada2439a", 0x25}, {&(0x7f0000000680)="08e88d4de4594308ad8ecf5db5f83d72be47105ab5fd2fb7298dc4036dd6d448812651ac61b66c2362979a6bf8e64cf2d7ed9c81089a2c391ca57a6582731c1c81aadfe31838e48a832be9ecc9a94a1b68d17a00d091f39fd10d876e038437ae53cfd6f023194d61033b11dd600001c065ab80a76db7e1d9a26ae5e786a12e2ea88e5fa63bf276dd866724da678fb33f55f971554d9c4c51cdd9661d3db3a5d28823d3f977a45daccca53ab53e53719fd4b8c1b0b205c88caeffbe7ab7c6e2c6bdbab5b50f471f4e7aeae8a78270c29aaae19d351f6f", 0xd6}, {&(0x7f0000000980)="f1ed9f18c3e6655229989e1b55a4ed9be38fcaa1400b280d1d8e65b89e1051719ac4b6d2653a55945fd17ea51772b08749bb488ff980b5", 0x37}], 0x5, &(0x7f0000000640)=ANY=[], 0x3, 0x880}], 0x1, 0x80001) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES16, @ANYBLOB='\x00\x00\x00\x00\b'], 0x30}, 0x1, 0x0, 0x0, 0x6}, 0x0) (async) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x44402, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f00000063c0)={0x50, 0x0, r4, {0x7, 0x2d, 0x2, 0x8900, 0x101, 0x7, 0x7, 0x200, 0x0, 0x0, 0x4, 0x9}}, 0x50) (async) recvmmsg(r1, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d80)=""/35, 0x23}], 0x1}, 0xeffffffc}], 0x1, 0x10020, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/111, 0x6f, 0x6c38) ioctl$GIO_CMAP(r5, 0x4b70, &(0x7f00000000c0)) (async, rerun: 64) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000001480)={0x1, "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"}) (async, rerun: 64) socket$nl_sock_diag(0x10, 0x3, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) (async, rerun: 32) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r6, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) (async) syz_fuse_handle_req(r6, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0xfffffffffffffffe, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) write$FUSE_NOTIFY_STORE(r8, 0x0, 0x1001) (async) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x7fff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r9, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x3e8}}) (async, rerun: 64) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xab402) (rerun: 64) socket$vsock_stream(0x28, 0x1, 0x0) 1.703842422s ago: executing program 5 (id=2349): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xfd) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200}) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000340), 0x580, 0x0) ioctl$CDROMREADMODE2(r1, 0x530c, &(0x7f0000000d00)={0x8, 0x2, 0x3, 0x7f, 0x6, 0x6}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xa) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) 1.703366685s ago: executing program 5 (id=2350): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [], 0xa, "be007a53ade8c2c13cbf4f4b0100fb3bfcdc7ad85e12ff7f0977f31578d5cf90e446aaeba18f431d23"}, 0x34) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$9p_virtio(&(0x7f0000000280), &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x80880, 0x0) rmdir(&(0x7f0000000040)='./file0/file2\x00') r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) finit_module(r2, &(0x7f00000000c0)='\xbd&-(\x00', 0x1) r3 = eventfd(0x70) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file2\x00', 0x420442, 0xf5) write$P9_RLERRORu(r4, 0x0, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='bridge_slave_1\x00'}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0xa, 0x40, 0xac5, 0x40, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00', 0xc0, 0x8000, 0xc3, 0x621}}) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder0\x00', 0x1, 0x0) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x4b5a9da54893e123, 0x3, 0x5, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0}) write$P9_RGETLOCK(r6, &(0x7f0000000000)=ANY=[], 0x200002e6) 1.463605463s ago: executing program 4 (id=2355): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4f, 0xa017, 0x9, 0x3, 0x4, 0x3, 0x7f, 0x24, 0xb, 0x7b, 0xe, 0x7, 0x3, 0x1, 0x1, 0x306eced0, [0x9]}}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000ffff28bd5d00f8dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b000100697036746e6c00002000028014000200200100000000000000000000000000020500090004000000080004"], 0x58}, 0x1, 0x0, 0x0, 0x24004845}, 0x40014) 1.360310551s ago: executing program 4 (id=2357): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x89, 0x0, @dev, @local, {[@noop, @generic={0x86, 0xd, "c045d45768dc37efa0fc58"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @ssrr={0x89, 0xf, 0x0, [@empty, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{}, {@private}, {}, {@local, 0x4}, {@loopback}, {@private}, {@multicast2, 0x3}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}}, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) 1.359284493s ago: executing program 0 (id=2358): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="42000000030000000000000000000000000000000000000021"], 0x42) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001380)={[&(0x7f0000000080)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m', &(0x7f00000003c0)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, &(0x7f0000001200)={[&(0x7f0000000540)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) 1.354896098s ago: executing program 4 (id=2359): unshare(0x6a040000) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x2, 0x43d, 0x400, 0xa030, 0x1, 0x2, '\x00', 0x0, r0, 0x0, 0x0, 0x4, 0x3, @value=r0}, 0x50) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@remote, @loopback}, &(0x7f0000000280)=0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r1, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000340), 0x80400, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1d, 0xfffffff9, 0xffffffff, 0xdb72, 0x2148, r2, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000180), &(0x7f0000000000)=@udp, 0x2}, 0x20) unshare(0x20000) unshare(0x20100) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006119a400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0x70bd29, 0x0, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ppoll(&(0x7f0000000000)=[{r5, 0x210}], 0x1, &(0x7f0000000080)={r6, r7+60000000}, &(0x7f00000000c0)={[0x100]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_procfs(0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r10, r9, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) 1.284631625s ago: executing program 0 (id=2360): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000300)={0x58, r1, 0x1, 0x70bd25, 0x35dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x58}}, 0x24088094) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x100, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xec, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x3, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x100}}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 1.284086851s ago: executing program 0 (id=2361): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6tnl0\x00', r1, 0x2f, 0xf1, 0x6, 0x3, 0x1c, @rand_addr=' \x01\x00', @private2, 0x40, 0x8000, 0x5, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r1, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) 1.199071236s ago: executing program 0 (id=2362): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000010c0)={&(0x7f0000000000), 0xc, &(0x7f0000001080)={&(0x7f0000000040)={0x1018, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0x28, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "ae29e5f5fc55ea677f503ae01f249014a200b52bbf0ad035f350a128378db11fe615a17bc3c5d6179dab71b006c1cf25384c5b9ef0daf37731413928079700068259ac0e4949e123a0d244ad50dc5f5998922fa4a1f2663a665bd5450c7296dc47dcf909b68db7db80c3e0588c36b165b562fdeb3e44b356d576a910dedbaa7b76063f9fa3585175c7a013d23a683601d17665304ed2ad17302c1c1e980aa70abc8577b77ca58d7f2f04cbf881690c41d154dea283d7227186579b541e1f8ff30c3a7ce66efc5b2622faf7646a3d3a0d2268f3c728ca5b0c37093301991e9e37d13edc0eb981277253843729d775a5742fbe5a66aac35d6e85f28b12fe11496d435069e1f017ae9bb390fe4ec3122170414e63208bf0f73fd0c7d45ae3bf28a6dd0232b4078ca900fb4e6e5bad3b8f6d145890d991d6509257a3ba0eff37ae072df77950e00f308dcb21f519d921f4cb81b5d3f58997f370a6897dfc98280b1c59fb40004f9563e1b6c283c89622c4ee9ce34b16296b5e26ede24f61b85006b42ab566d9710ce0246fd64f537bc6a8456a46695cba3fcf6f730918d0f47f6b9c08c34057fafb0a18230455ad24640aea27ea4308d76f53f4da3baaab5ab9a4ecd82b151fa4c8383ebb7bc7fd63beb50d244aab4b3782df65148b96c173235c5912b21f389d8c43393dd228932cfc35a00263a59a81c7ab026ff3b80350324cf76a9a9cde73775123f67da3fb23a3f671dc43c8d7f541bea1643c1f940805e02206067b7d7d8bb9acd259aa29c5e2575dca2f582cca13008acba405ad6227b3c17b0d43f228b5f25bae47facbe08b2edbebd31add5e59966b868df79fc2f44aa2f467abd04a74ff73c0e06a9c20283cad1d0e27000a20cb563257ebbb564741ab043d5f0edc0082fbd15f92562287753f01855456b364831266a8ff56ea7ccd2b9e1655b3a59b627042b7b668ac54d8032e3868e24a60357073f949611fbb4051c620f3fa968e4bd3b8ba9336e20c1f5a4fd5165364571e0db5648ca5d90e392c1464ea4fa389f7a605275ed02aaa242dcf78e36d0b4aa4746559f1c09ed406f1267a1b22400f46db073aec3a6d5d741e4c493c1fb595e8d77b92d1c11ab39703ac582a36d45067e19b5ca189d14213028af9cda448d898f0b5055a44476419299ba73e11aef285540f03cedd23079ce27fd674eeb68523774e3a59f9dc2af8712c54b50bf40df54afb85dcbab2e3658bf1588737c142b3cf3a943b4d5b49cf1ab04fc22e8cb420c7a5a0b398f7e6b455039417f0e52c92d99e8c6d918dd08fa3367ad53565e4f14f345bc2d877de474fe1720bde4b990b09fabfb44f91b77031fe6f38b777ad41eb32f6c2e083e4aadc3512361d65f4b538b5081c4c87e9c0490fb5ae8760457c8ee404b7086c8153a3727ec0a48e73f96baf1ef7534f95472df010cfdd681562c779bb071625a8be2ddc6983f39194042016b1e646f311494c496169e1e7edd4a353428f3580d0c0bc4d58a462b9b3b57c6d321e14ac2d9b26b5a9326b308b11d6c3de9887407d051c8d4141c0d959f5f547c8061f1070ff077c1cb4e76508a919f4f1357d9dd39cd4b5f52caa4cb3ae5a861b19e4c092056b916dd504c37aef8529e5be0030b3a6994a087c8d428d3feb6cab4e16c0aaa7306347873fa5d788412199584e1cbbac7b775157348efc4f78dd2cfb84ccc1813cb68c4256524a0dcce9645cd577ce658e40267043d7430473431db21928c490ae1a9421131de8f08797485e3ed4fd28c1ce640b62ebe457e237e35aa28439adf2bac731663ff1e43b236686a4a72898756558f21a3e9d85d5c0c31c26d165fa854ecf631981dc67bcdbaae8c952126c98225fb5ce3806fb8908dfe86943bafcd42037a747ebb159baa3cb0248bfd05a6b9e99173db5d4007730b49e375c476f2b97a86382cf1f35fc303302737c848e4b51b93b697c4ee025abc6b3503035d6492ddf2b00fbb4954ab627a4ea26d39590655f111ddd5b6ba58b8329066549dc4140881a2a80c8e14fef3a89711d5d8d2706d7353dc5c84fd67b7b923578152cd9d02c5c4c4284474bfeb9e7ad68314d72943ec30499061a476125b1b71e46e815dd0355fdf8f70aaa14f7b6aaffdd1a93433185063fb0c18f1304daeb0f64a05f3ca4997146dd348c3ef9bbd281cc888e65c6a67cff4bfadefbd7b5185c185a97e59e0f69c87f89b8cc83a3a00b7b42309885edc90e37151dc4f7f76fb2135c7c4dd0e71613b494df8dbfe854ea975e6f53e0db35bae51c09d89b1f52dd06fd4a7b6e777f53189c793337cac3df1b754b951a9cf416d4404bae177af685c6d1d8adba9a235751f233673bfc3420f1f124a1d141e5b3b030027cd43c5118c2f94b3998ca41a9ee322e83240b6a836a666a838248f38475bd2917f55a99e21d640a43babe9a466fe243c8b1f82f0815eae2cefcd7a900f0decd66189ea7406e9ddfe06a42867e888c432d1f25e26bc4e0321e5a91978a37e37656620d7654a70d7ddaca712adec7f2e3286b53f7a7bcdf18b094d9286d965611b8397d879403083e1aa81df9c70c18e44357ac2de6c1a69abd55e1e7adccf3ccd67f9ccb659b2a5cc4b9980bb1febeac652236cb6cdbd42ae05933d3fa6b97cbc2e7626d8e978a193784471b269f2040705f40c67b757c63a36d88b51dd9ee5d3c4f5d9c29daa1c31bf9341ed17e901bf597e0cd09f15ff3386388d32953dafa1350a43fee1dc6115b49192d960d6bd4ce7f1dfc22722d98e450d58016a96662e3225b67b1f396fd13e6051813b972ed5d1a69d61d7069b5c37f243be926948d0a7c022864df5e17c1fafcd25d963a94f50b03c47bd6fe023ff18820e2ea2d17c756258b2b480620bb3885115f6c86d2b1dfd42bd3e2cf1355100836f32d9e6e5ebaa0cc0cd495b0440de11bacb4e154cb9fe7e5b8e1769d7dddacb6ffe1547909f50fca73cfd7849d1253d9dfb77708c38c299ca87f2f6d8e49c0d7bb738dd1b1400e45300d3b11cf7aca7ab02ff7d5c47ebae3391726efdfdd014667217d1b1726789cded50d6201b3d75035a691bbe0e0f069186b0a394808c24255e69b5513ed0693e0656dadc41f799c88be3367bafba58fd74d8d19f2377ed412b3174470edd2fa0220bda9065bd02898b3239a9aade63b82273f2b18afdb1bec53052005d710ef9dee4916705ea27c8cdb59fcc906b02319560300e903dfb0828e99b769315c1b877521389a0933310e1418b13bd2c1a9f692b28aa3042b0a861c969ec80b78b64838ec12ce13aa4ea6d571671f56eaa9e1f6b664ac1cb6e20b8a82486d6946285355c15607bf642a3f8b2581992fd77a8f5402f5de2eaade11c32ecd6ad1037e43b6fd0a38ff749e9fad56b53d0437b5011026eca6a8a238100740af0f42054ee742564098fcd6c8537f05c173c4535e5e856fcab8e39a841d2872673a7cab550442c8cff3e11373401393017849b9736fb5904e06f7f274071f8af64f1c6833276266c49d3953a57333f388a4b0b44d707f8360168e11ed0287105feaf8490f1523ea5a244ccdad997d6ffbb7e5a419e1fce28179f932ccd067d66d4c6d469f40e0685e49023176beee626737862d7f8eb50d0689708a4adb7577fbd39739739d8c8fc571a81c3ec3f80af3b832e29527b1eeb091f34f94753a637be3217f4e88400e775fa9ee1478461f7754702ec2fe5258004790df46156ca3edd8bfbb02c29674bd2e643f094a9895dfac3ffcd66112c9521a403668cc3e1cb470ded1448997c06afa87c34eecf25b0c4ef628be2f5de0d31e44b2d6aaa8f90eb6828fc72d36090ddd0bbd7a3c953036f4641854d533af5619b3b9cfe7cee54441868ee981abc65fc8d071a3a3fef54e740900a24b4d5245a29f80bac6f14f0bae1c4d92227de18514eddf46939342f03fda61627b205c3363e68f239335d282e8be79857f4ea9a6a1f395bb8a03cf9069f1fc1deccef95b96c8d6432ad632d2550981309f4b5e1361599922fdfe0f11a9b9d2bc9adcb7a8744cc40992c9190fcbc8217f8470c85e0e3470dc70cf372c81934499a58b40f77b3f5a71a211fe89a9b18bb5371f8af30a7bc1ee5b2d1edfbf9a69b195742018c1596ec626e0365eeb24f5450f4d259866c58fdc3e3da53b0b5a87b23a40fc6c87b069cfd96f3ac875951f7c14f1b3e893826ff262d02a923e8dfc1e1b2f2be83b87e9ce3d6b629b07f7e35c0ad33de8568d52587d3d842349793c90f9a7976c076a0882aae4ae04917a57e7e5a18dea427967d43accb2c2cf017aab1891489a68ae72fd6f06fb7d6deb3065a444ef5014775acf3626364bcca132e93a0f9db09e93679dda14fa1eadd225247f52929695e96d4a771e5ed6830956f1b023ac74a273479ba90d5ef909f3c9e8df8537dbf441f95d8601c4d1f570e2027b66f1415841004043463c839ac73285790dea89faacb5185f0579350fd730196b4425136394c59d64d329f176f90d063e243992c1de9832bf31d4ee90cdba1cf7fdfdb78bb6590417a1b8895d8aa910f249b75b1675c5e215f9e78f39a4571dce6df2fb7873c9845f05bd0252f990bfb590ed594c7b913466d34a0fda03ce446ed42658288cf61e9799f2f4011abdc528ba1291f4cbb9f57406f0fcfbba398745c575ab2ef54f127c34db69445ec8a8e2219e26a52528ae92a03cefe285400699549b0803cd46419e1c6b78d15a8bb494016f65800f370b9bd0636f28ae747171d198353515a4343bc6290cf3d09c786f92a8c06281b9db2fecfe9ed46b5544093cb99ac283648d935984ac906ff56151250c9234eefc8b4412d7a57596e51e5372688051d0f0e0ef92d8cf3e9108cf65c957876cfdb7c29c74e5d3ab49b6a8e3f5ccaede85e82afbd9409fb7b24d3e8dbf5c0cebfb92c9d34ece3a1ca2234e9b3240339a70e768f414829140c45a8e3d5960fd763a6225b27de47c9cbbaa2533d6a8afb3bb42b7149c313633d049de92946c8d1db869345c3dd5fd4f88cdf806242799425e9b9265afcf66921a364e79f8ae082e9ee7b2e2a6c719f7417de4d80d0adaad8ff46619f53c43e7c5e24ad9d63cf1965626c37f2240b5f10deb855c2c6e76cf8991e1ef4ad4f5e980965a12ffbcdaae9deadf01ee88f90e6e7cb40ab72c116fd57f29e12a696b8a04d0fa88f88dce121d539bb4c9a4504ec2582f71eed5ab269c8bd7a03e3185779bbb6571e609fd6abf1b67fe4d695bd89582b8f2123ef9fab49861d0fa6eefc77432952d1ad1c1f0d8e36e2cbfaa360f9ab5c8a57e01b54dec3cd61010d268024f289d5c86bc3adf5088476d6e49926870dec5d2626cc4923bd7c7f8dc6f5b76aac1e84a6d68698e4ced01e8e88bc204eeec40db8f4bf84376bc81d615c63288f999c041bd803d0f0841b18b4c3e080ae93705bb6bf3267bf72246b79fa9191287003374c66757563fc35a3964041647b60a511f002e657e8c74be5c721741d0aed3133f6fbd6242897f06e8e046cfaf2308db1f88abebcffeaf6613dc57cc58d7165ed6a9ddd237988311c91d1a4cf1ca0a694e2301909c585ff1b81f4176abd977ec31e05456ba5da727a704ad5a34ec0c2c37091b3f130ff4562d285a5c2b750df14a9bd2a17bb48fc74ece99425a1cb93bd2e7b59445556576c8b06c3aa505fb07eeb21135a3497880e9e8b648ffe76e7c0fc4070e0bcf3077da463d87237140438e2aead9c14afd733bddaf1aa42c52a5de171c47ef7677e8da29884375512c79ff389b37"}]}, 0x1018}, 0x1, 0x0, 0x0, 0x800}, 0x8080) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x12407104}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)=@getroute={0x14, 0x1a, 0x300, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x8003) r2 = openat2(0xffffffffffffffff, &(0x7f0000001200)='./file0\x00', &(0x7f0000001240)={0x440840, 0x10, 0x8}, 0x18) ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f0000001280)={0x0, {0x0, 0x0, @qam}}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000012c0), 0x880, 0x0) r4 = accept4(r0, 0x0, &(0x7f0000001300), 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001440)={'erspan0\x00', &(0x7f0000001380)={'gretap0\x00', 0x0, 0x8, 0x1, 0x8, 0x7, {{0x1f, 0x4, 0x1, 0x2b, 0x7c, 0x65, 0x0, 0x81, 0x2f, 0x0, @broadcast, @local, {[@timestamp={0x44, 0x2c, 0x6c, 0x0, 0x4, [0x6, 0x1, 0x0, 0x0, 0xffff, 0xb9, 0x3, 0x1, 0x3, 0x3]}, @timestamp_addr={0x44, 0x24, 0x1a, 0x1, 0x8, [{@private=0xa010101, 0x5}, {@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@remote}]}, @end, @ssrr={0x89, 0x7, 0x29, [@loopback]}, @ssrr={0x89, 0xf, 0xb7, [@loopback, @multicast2, @local]}]}}}}}) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000001580)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001540)={&(0x7f0000001480)={0x8c, 0x12, 0x400, 0x70bd27, 0x25dfdbfd, {0xb, 0x4, 0x7, 0x1, {0x4e21, 0x4e22, [0x1, 0x17, 0x101, 0xfffff3e4], [0x8, 0x6, 0x2, 0xc8d1], r5, [0x3, 0x2]}, 0x28, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "57eb0c39a17a5869c2bdc8a09cae1924e096c3b830eeb975c2a4a145a2abe0f3604d9cbf433b850fbeba767adee8740948c6a3f0534dd0a8c7"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001600)=@generic={&(0x7f00000015c0)='./file1\x00', 0x0, 0x10}, 0x18) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001680), r4) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000001840)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x22000}, 0xc, &(0x7f0000001800)={&(0x7f00000016c0)={0x108, r6, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x200}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2536ebc}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x24}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x810}, 0x51) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001880)={'wlan0\x00'}) readv(r1, &(0x7f0000001d80)=[{&(0x7f00000018c0)=""/220, 0xdc}, {&(0x7f00000019c0)}, {&(0x7f0000001a00)}, {&(0x7f0000001a40)=""/62, 0x3e}, {&(0x7f0000001a80)=""/184, 0xb8}, {&(0x7f0000001b40)=""/126, 0x7e}, {&(0x7f0000001bc0)=""/191, 0xbf}, {&(0x7f0000001c80)=""/199, 0xc7}], 0x8) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001e00)={'bridge_slave_0\x00', 0x20}) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000001e40)) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000001e80)=0x41, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000001ec0), 0x440000, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001fc0)={'ip_vti0\x00', &(0x7f0000001f40)={'syztnl0\x00', r5, 0x10, 0x80, 0x3, 0x5, {{0x15, 0x4, 0x3, 0x25, 0x54, 0x6, 0x0, 0xa, 0x4, 0x0, @broadcast, @multicast1, {[@ssrr={0x89, 0xb, 0xfb, [@local, @multicast1]}, @timestamp={0x44, 0x24, 0x50, 0x0, 0xb, [0x3, 0x7f, 0x401, 0xd9a0000, 0x95aa, 0x6, 0x5, 0x8]}, @end, @generic={0x89, 0xd, "41c61eee964dd8e1711f76"}]}}}}}) sendmsg$nl_route(r4, &(0x7f0000002080)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)=@ipv4_getnexthop={0x3c, 0x6a, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NHA_OIF={0x8, 0x5, r5}, @NHA_OIF={0x8, 0x5, r7}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_ID={0x8}, @NHA_FDB={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004010) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "c488e852fc"}]}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "1a940ab6c47c13e66c4237e16aaefa"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "ddd463aa"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000804) io_setup(0x0, &(0x7f0000002200)=0x0) io_submit(r8, 0x1, &(0x7f0000003280)=[&(0x7f0000003240)={0x0, 0x0, 0x0, 0x3, 0x7, r1, &(0x7f0000002240)="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", 0x1000, 0xa, 0x0, 0x2, r3}]) read$FUSE(r3, &(0x7f0000003340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000005380)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000005480)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000054c0)={{{@in6=@ipv4={""/10, ""/2, @private}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6}}, &(0x7f00000055c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000005600)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000005700)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000005740)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000005840)=0xe8) setxattr$system_posix_acl(&(0x7f00000032c0)='./file1\x00', &(0x7f0000003300)='system.posix_acl_default\x00', &(0x7f0000005b40)={{}, {0x1, 0x5}, [{0x2, 0x7, r9}, {0x2, 0x3, r10}, {0x2, 0x4, r11}, {0x2, 0x4, r12}, {0x2, 0x5, r13}, {0x2, 0x9}, {0x2, 0x3}, {0x2, 0x4}, {0x2, 0x5, 0xee01}], {}, [{0x8, 0x6}, {0x8, 0x7}], {0x10, 0x2}, {0x20, 0x5}}, 0x7c, 0x1) 1.198201293s ago: executing program 1 (id=2363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x26c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x1d0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'macvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'batadv0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x4c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}]}]}], {0x14}}, 0x294}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.19790974s ago: executing program 1 (id=2364): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f00000023c0)={0x2020}, 0xfffffe29) connect$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x2}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x810, r3, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x5) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x600c80, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r4, 0x5016, 0x0) write$dsp(r0, &(0x7f0000000380)="8f02b1145e6308d98e553f07835f9de2b8389279a5becfcec34a3d806185be01", 0x20) 752.780706ms ago: executing program 5 (id=2365): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000309000000000000004000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x40088c0}, 0x40) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r4, 0xb1d, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) (async, rerun: 64) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x9}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\r\x00'}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (rerun: 64) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$inet_mreqsrc(r7, 0x0, 0x26, &(0x7f00000001c0)={@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x14}}, 0xc) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000002c0)={{0x0, 0x7f, 0x2, 0x0, 0x1, 0x1ff, 0x7, 0x9, 0xfffffffe, 0xff, 0x7f, 0x9, 0x3, 0x7fffffff, 0x3cb}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000480)={{r9, 0xb4cb, 0x4, 0x7ff, 0x3, 0x800, 0x7, 0x7, 0x1000, 0x4c, 0xb768, 0x9, 0x8000, 0x4, 0xf}, 0x8, [0x0]}) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r7, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000080)="64420fc778000f20e035800000000f22e0b9ce0800000f32b805000000b98af400000f01d9c4e17e10be0c0000002ef2440f2d1265660f09460f01cab9030800000f32b97a0200000f32", 0x4a}], 0x1, 0x1, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x20}}, 0x8000) (async, rerun: 32) ioctl$KVM_TDX_CAPABILITIES(r1, 0xc008aeba, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x1, 0x0, [{}]}}}) (rerun: 32) ioctl$KVM_RUN(r10, 0xae80, 0x0) 751.808987ms ago: executing program 5 (id=2366): r0 = socket(0x10, 0x3, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x3554000) fadvise64(r2, 0x85f5, 0x4000000005, 0x4) (async, rerun: 64) r3 = syz_io_uring_setup(0x704c, &(0x7f0000000100)={0x0, 0x9d74, 0x1000, 0x0, 0x42}, &(0x7f00000002c0), &(0x7f0000011000), &(0x7f0000000240)) (rerun: 64) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) (async, rerun: 32) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/49, 0x31}], &(0x7f0000000180)=[0xfffffffffffffff9], 0x1}, 0x20) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x1, @rand_addr, 0x2}, 0x1c) listen(r5, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f00000001c0)={@random="91eec554343f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x1, 0x0, 0x0, 0x0, {[@generic={0x2, 0x12, "25a31641bba628b7daf641a6958cd749"}, @exp_fastopen={0xfe, 0x13, 0xf989, "e895eefe1935234b314d142257be74"}, @exp_fastopen={0xfe, 0x6, 0xf989, "c20d"}, @md5sig={0x13, 0x12, "15a7d9fa6b6f80fffa3afbf87ff8e812"}]}}}}}}}}, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) fallocate(r4, 0x0, 0x800657, 0x200) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x28079}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="087934e9cff9"}]}, 0x44}}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00005fc000/0x3000)=nil, 0x3000, 0x3) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r8, 0x8b24, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r9 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x1a9541) ioctl$CEC_ADAP_G_LOG_ADDRS(r9, 0x805c6103, &(0x7f0000000340)) 656.025822ms ago: executing program 5 (id=2367): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1870820d7e3cb520008cc112a434450100000701000000"], 0x18}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 290.787155ms ago: executing program 4 (id=2369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="250100e4bfffff005b9e09000000"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="21032fbd7000fcdbdf2503000000b296461606000000004cd5f539ca"], 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x4008080) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) statfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=""/94) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0xa}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x78, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xe, 0xf}, {}, {0x10, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x10, 0x9, 0xc8c6}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) 290.261379ms ago: executing program 0 (id=2370): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x8042) ppoll(&(0x7f0000000000)=[{r3, 0x2}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000180)={r2}) pwrite64(r3, &(0x7f0000000280)="a0675b5bd83e791e1d4868cd32c0af1cd3cc1bb6ff530cde68ca28bfa6199df8914e8edcf3d2e6e53e459bef1162c0587c0117ab792b93f62e5e7643db9b79339554444e59b9d8d265869804e5e9ac28357cdcc5a6d1fb214626925bd3fab28a7c7a5af3410f756e377b3d451d07ede85d4d7bad8db1428feb96b0541e1216a8c5bded4a4af2200311c894da3261b04711b53061414844", 0x97, 0x9b) semget$private(0x0, 0x4, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r1, 0x4008af75, &(0x7f0000000100)={0x0, 0x1}) openat$cgroup_ro(r3, &(0x7f00000000c0)='memory.numa_stat\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) 170.000684ms ago: executing program 1 (id=2371): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001080)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a0012000200142603600e12080005000000000001000000e00002400500fa7c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee50150305870ca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd64fa1dba9bfe4edef3d93452a92954b43", 0xd8}], 0x1}, 0x24048800) socket$kcm(0x29, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1bd940, 0x0) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x4) 169.594792ms ago: executing program 0 (id=2372): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bff000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[@code={0xa, 0x65, {"b9030100c00f32b904000000c461b9dd0764660f3882820058000066450ff7ecf044093966baf80cb86ab0d68d66bafc0c66edc421845ef366bad00466baf80cb8665abb89ef66bafc0c66ed430f01f86644def0"}}], 0x65}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r5, r5, 0x2f}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r8, r6, 0x3e, r6}, 0x5) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000180)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 90.064415ms ago: executing program 4 (id=2373): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006000806"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0xf0, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x23}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9138}, @NL80211_ATTR_VENDOR_DATA={0xad, 0xc5, "20decd99a61f5fb4053b5f2e710a7b2a7ec7240c7bbec93a9dc8b824fdb99ae1f9d4950051d074fc67ce32cfa2d06420a6e583386afefe57c4d353eda183232ce54a80ccf8c2133f517f4b0f91c5b235197452bfece7ac6c7cdb86376e318df15be739bc69c8647edef3ea4ab27768bb88e3d5dc2c5d9b5579d7253839bbc9de4335b686812d6b8b357b814d808f41878c096cff4b8e469c4f92f8bece0c7bd36521b942ba1163f76c"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x800}, 0x8800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x100, 0x70bd28, 0x69cb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3e}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x40080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x2b, 0xbe, "02737c2255cdbaed2ce8b63fcd91e6dcc704fa6ed7211e7a1e26f773697bcf0009877befc0d7a7"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x408c0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006000806"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0xf0, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x23}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9138}, @NL80211_ATTR_VENDOR_DATA={0xad, 0xc5, "20decd99a61f5fb4053b5f2e710a7b2a7ec7240c7bbec93a9dc8b824fdb99ae1f9d4950051d074fc67ce32cfa2d06420a6e583386afefe57c4d353eda183232ce54a80ccf8c2133f517f4b0f91c5b235197452bfece7ac6c7cdb86376e318df15be739bc69c8647edef3ea4ab27768bb88e3d5dc2c5d9b5579d7253839bbc9de4335b686812d6b8b357b814d808f41878c096cff4b8e469c4f92f8bece0c7bd36521b942ba1163f76c"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x800}, 0x8800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x100, 0x70bd28, 0x69cb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3e}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x40080) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x2b, 0xbe, "02737c2255cdbaed2ce8b63fcd91e6dcc704fa6ed7211e7a1e26f773697bcf0009877befc0d7a7"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x408c0) (async) 4.153568ms ago: executing program 4 (id=2374): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x3e, 0x9) r1 = syz_open_dev$dvb_dvr(&(0x7f0000000040), 0x4, 0x1) ioctl$DVB_DVR_DMX_QUERYBUF(r1, 0xc0186f3d, &(0x7f0000000080)={0x6b, 0x9, 0x81, 0x3ff, 0x4, 0x3}) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f0000000100)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_VDPA_SET_GROUP_ASID(r4, 0x4008af7c, &(0x7f0000000180)={0x3, 0x7}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xa0}, 0x40d4) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000300), 0xae000, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x80000001, 0x40) ppoll(&(0x7f0000000380)=[{r4, 0x2}, {r2, 0x20}, {r2, 0x44}, {r0, 0x2}, {r8, 0x4}, {r2, 0x90}, {r7, 0x412}], 0x7, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)={[0x75b8]}, 0x8) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000440)={0x0, 0xc, [0x9, 0x3, 0x7f]}) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0x101100, 0x0) ioctl$SOUND_PCM_READ_RATE(r9, 0x80045002, &(0x7f00000004c0)) r10 = socket$inet(0x2, 0x1, 0xffffffff) ioctl$LOOP_SET_FD(r3, 0x4c00, r10) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000500)=0x3, 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000540)={'security\x00', 0x2, [{}, {}]}, 0x48) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f00000005c0)) ioctl$SNDRV_PCM_IOCTL_INFO(r3, 0x81204101, &(0x7f0000000600)) r11 = syz_open_dev$usbfs(&(0x7f0000000740), 0x0, 0x8000) fdatasync(r11) fchmodat(r4, &(0x7f0000000780)='./file0\x00', 0x8) ioctl$CDROM_NEXT_WRITABLE(r3, 0x5394, &(0x7f00000007c0)) move_mount(r3, &(0x7f0000000800)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000840)='./file0\x00', 0x2) ioctl$sock_SIOCDELRT(r8, 0x890c, &(0x7f00000008c0)={0x0, @nl=@unspec, @qipcrtr={0x2a, 0xffffffffffffffff, 0x1}, @generic={0xb, "1a0e2a5fab0eebf7f01cf53826d7"}, 0x1000, 0x0, 0x0, 0x0, 0xfffc, &(0x7f0000000880)='pimreg0\x00', 0x5, 0x1ff, 0xbac}) ioctl$XFS_IOC_AG_GEOMETRY(r10, 0xc080583d, &(0x7f0000000940)={0x8, 0x0, 0xc4, 0x7fffffff, 0xfffff228, 0x8e7, 0x8, 0xa}) 0s ago: executing program 1 (id=2375): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @multicast2}}) r1 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) poll(&(0x7f0000000380)=[{r1, 0x200d}], 0x1, 0x200) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r4, 0x928, 0x200000000005) write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040)={'vlan0', 0x32, 0x35}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r5, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x1200, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0xfdef) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x40, r2, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) kernel console output (not intermixed with test programs): tion failed [ 141.198366][ T40] audit: type=1400 audit(1779512782.140:881): avc: denied { listen } for pid=9957 comm="syz.0.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 141.210991][ T40] audit: type=1400 audit(1779512782.150:882): avc: denied { accept } for pid=9957 comm="syz.0.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 141.260073][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1138'. [ 141.273304][ T9963] fuse: fd is not a fuse device [ 141.446973][ T9946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1133'. [ 141.626605][ T9981] ip6t_srh: unknown srh invflags 4000 [ 141.723883][ T9991] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 142.257500][ T9998] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 142.264437][ T9997] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 142.267644][ T9998] overlayfs: overlapping lowerdir path [ 142.281182][ T9997] overlayfs: overlapping lowerdir path [ 142.668369][T10013] overlayfs: failed to resolve './bus': -2 [ 142.704752][T10013] netlink: 'syz.5.1149': attribute type 4 has an invalid length. [ 142.711418][T10015] ip6t_rpfilter: unknown options [ 142.886947][T10025] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.895465][T10025] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.012463][T10025] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.017055][T10025] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.126273][T10025] team0: Port device netdevsim1 removed [ 143.132807][T10025] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.138418][T10025] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.195779][ T40] audit: type=1400 audit(1779512784.140:883): avc: denied { write } for pid=10039 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.256257][T10025] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.261144][T10025] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.265889][ T40] audit: type=1400 audit(1779512784.210:884): avc: denied { write } for pid=10042 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.358884][ T40] audit: type=1400 audit(1779512784.300:885): avc: denied { write } for pid=10049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.417127][ T7789] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.417644][ T40] audit: type=1400 audit(1779512784.360:886): avc: denied { write } for pid=10055 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.429603][ T7789] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.482832][ T7781] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.486745][ T7781] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.502807][ T7781] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.507020][ T7781] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.517057][ T40] audit: type=1400 audit(1779512784.460:887): avc: denied { write } for pid=10060 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.527176][ T7781] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.529853][ T7781] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.564727][T10067] netlink: 'syz.1.1162': attribute type 2 has an invalid length. [ 143.587112][T10067] !: entered promiscuous mode [ 143.587868][ T40] audit: type=1400 audit(1779512784.530:888): avc: denied { write } for pid=10069 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.593390][T10067] netlink: 488 bytes leftover after parsing attributes in process `syz.1.1162'. [ 143.603218][T10067] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1162'. [ 143.689885][ T5145] pmem0: [POWERTEC] [ 143.746139][T10084] netlink: 'syz.0.1166': attribute type 1 has an invalid length. [ 143.786372][T10089] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1167'. [ 143.909554][T10104] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1172'. [ 143.917965][T10107] 9pnet_virtio: no channels available for device syz [ 143.925723][T10108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1174'. [ 144.174655][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1185'. [ 144.236391][T10139] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 144.439804][T10165] netlink: 'syz.1.1192': attribute type 1 has an invalid length. [ 144.450500][T10166] bond6 (unregistering): Released all slaves [ 144.490377][ T1039] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 144.604318][T10173] tipc: Enabling of bearer rejected, failed to enable media [ 144.652810][ T1039] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 144.657694][ T1039] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 144.663316][ T1039] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 144.670062][ T1039] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 144.674444][ T1039] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.677887][ T1039] usb 9-1: Product: syz [ 144.679706][ T1039] usb 9-1: Manufacturer: syz [ 144.684930][ T1039] usb 9-1: SerialNumber: syz [ 144.693947][ T1039] usb 9-1: config 0 descriptor?? [ 144.697000][T10142] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 144.751144][ T1039] rc_core: IR keymap rc-streamzap not found [ 144.753719][ T1039] Registered IR keymap rc-empty [ 144.759665][ T1039] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 144.766095][ T1039] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input14 [ 144.926711][T10142] bond2: option xmit_hash_policy: invalid value (6) [ 144.931348][T10142] bond2 (unregistering): Released all slaves [ 145.016477][ T844] usb 9-1: USB disconnect, device number 3 [ 145.102024][T10196] xt_hashlimit: size too large, truncated to 1048576 [ 145.125287][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1199'. [ 145.261891][T10212] ntfs3(nbd0): try to read out of volume at offset 0x0 [ 145.485097][T10236] fuse: fd is not a fuse device [ 145.488279][T10236] fuse: fd is not a fuse device [ 145.491738][T10236] fuse: fd is not a fuse device [ 145.494831][T10236] fuse: fd is not a fuse device [ 145.497254][T10236] fuse: fd is not a fuse device [ 145.499656][T10236] fuse: fd is not a fuse device [ 145.505636][T10236] fuse: fd is not a fuse device [ 145.508143][T10236] fuse: fd is not a fuse device [ 145.511201][T10236] fuse: fd is not a fuse device [ 145.513702][T10236] fuse: fd is not a fuse device [ 145.516137][T10236] fuse: fd is not a fuse device [ 145.518397][T10236] fuse: fd is not a fuse device [ 145.523194][T10236] fuse: fd is not a fuse device [ 145.525796][T10236] fuse: fd is not a fuse device [ 145.528356][T10236] fuse: fd is not a fuse device [ 145.531286][T10236] fuse: fd is not a fuse device [ 145.533809][T10236] fuse: fd is not a fuse device [ 145.536338][T10236] fuse: fd is not a fuse device [ 145.538871][T10236] fuse: fd is not a fuse device [ 145.542043][T10236] fuse: fd is not a fuse device [ 145.544561][T10236] fuse: fd is not a fuse device [ 145.547204][T10236] fuse: fd is not a fuse device [ 145.549921][T10236] fuse: fd is not a fuse device [ 145.553097][T10236] fuse: fd is not a fuse device [ 145.555558][T10236] fuse: fd is not a fuse device [ 145.558056][T10236] fuse: fd is not a fuse device [ 145.560837][T10236] fuse: fd is not a fuse device [ 145.563413][T10236] fuse: fd is not a fuse device [ 145.566536][T10236] fuse: fd is not a fuse device [ 145.569059][T10236] fuse: fd is not a fuse device [ 145.572406][T10236] fuse: fd is not a fuse device [ 145.574849][T10236] fuse: fd is not a fuse device [ 145.577295][T10236] fuse: fd is not a fuse device [ 145.580126][T10236] fuse: fd is not a fuse device [ 145.582947][T10236] fuse: fd is not a fuse device [ 145.585399][T10236] fuse: fd is not a fuse device [ 145.587866][T10236] fuse: fd is not a fuse device [ 145.590858][T10236] fuse: fd is not a fuse device [ 145.593336][T10236] fuse: fd is not a fuse device [ 145.595987][T10236] fuse: fd is not a fuse device [ 145.598423][T10236] fuse: fd is not a fuse device [ 145.601984][T10236] fuse: fd is not a fuse device [ 145.604401][T10236] fuse: fd is not a fuse device [ 145.606883][T10236] fuse: fd is not a fuse device [ 145.609354][T10236] fuse: fd is not a fuse device [ 145.612750][T10236] fuse: fd is not a fuse device [ 145.615103][T10236] fuse: fd is not a fuse device [ 145.617434][T10236] fuse: fd is not a fuse device [ 145.622500][T10236] fuse: fd is not a fuse device [ 145.627169][T10236] fuse: fd is not a fuse device [ 145.629665][T10236] fuse: fd is not a fuse device [ 145.635427][T10236] fuse: fd is not a fuse device [ 145.639209][T10236] fuse: fd is not a fuse device [ 145.642233][T10236] fuse: fd is not a fuse device [ 145.644124][T10236] fuse: fd is not a fuse device [ 145.646177][T10236] fuse: fd is not a fuse device [ 145.648584][T10236] fuse: fd is not a fuse device [ 145.650909][T10236] fuse: fd is not a fuse device [ 145.652694][T10236] fuse: fd is not a fuse device [ 145.654525][T10236] fuse: fd is not a fuse device [ 145.656375][T10236] fuse: fd is not a fuse device [ 145.658521][T10236] fuse: fd is not a fuse device [ 145.661215][T10236] fuse: fd is not a fuse device [ 145.663792][T10236] fuse: fd is not a fuse device [ 145.665535][T10236] fuse: fd is not a fuse device [ 145.767091][T10264] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 145.774937][T10264] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 145.777856][T10264] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 145.780912][T10264] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 145.856047][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 145.856065][ T40] audit: type=1400 audit(1779512786.800:902): avc: denied { read } for pid=10263 comm="syz.1.1213" name="/" dev="configfs" ino=2138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 145.869090][ T40] audit: type=1400 audit(1779512786.800:903): avc: denied { read open } for pid=10263 comm="syz.1.1213" path="/" dev="configfs" ino=2138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 146.300251][ T9] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 146.453220][T10305] netlink: 'syz.5.1224': attribute type 1 has an invalid length. [ 146.473388][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.475711][T10305] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.481976][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 146.487665][ T9] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 146.495806][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.509725][ T9] usb 5-1: config 0 descriptor?? [ 146.519458][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 146.522845][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 146.530603][T10305] bond1: (slave geneve4): making interface the new active one [ 146.538114][T10305] bond1: (slave geneve4): Enslaving as an active interface with an up link [ 146.570894][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 146.574750][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 146.577564][ T9] usb 5-1: media controller created [ 146.582916][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.608943][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 146.612131][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 146.618524][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input15 [ 146.627926][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 146.630887][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 146.686846][T10319] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1229'. [ 146.770747][ T40] audit: type=1326 audit(1779512787.710:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10326 comm="syz.1.1231" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f73b9ce59 code=0x0 [ 146.806665][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 146.814457][ T9] dvb-usb: error while querying for an remote control event. [ 146.817495][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1216'. [ 146.841148][ T1039] usb 5-1: USB disconnect, device number 10 [ 146.855405][T10337] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1233'. [ 146.899232][T10342] loop4: detected capacity change from 0 to 2640 [ 146.932282][T10342] buffer_io_error: 354 callbacks suppressed [ 146.932302][T10342] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 146.946670][T10342] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 146.950631][T10342] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 146.953493][ T1039] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 146.953962][T10342] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 146.962021][T10342] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 146.965170][T10342] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 146.981662][T10342] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 146.985741][T10342] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 146.988398][T10342] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 146.991785][T10342] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 147.126349][T10359] netlink: 'syz.4.1240': attribute type 8 has an invalid length. [ 147.136960][ T40] audit: type=1400 audit(1779512788.080:905): avc: denied { accept } for pid=10358 comm="syz.4.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 147.219841][T10365] syzkaller0: entered promiscuous mode [ 147.223486][T10365] syzkaller0: entered allmulticast mode [ 147.470765][T10383] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 147.529502][T10391] ptrace attach of "/syz-executor exec"[10393] was attempted by "/syz-executor exec"[10391] [ 147.536771][ T40] audit: type=1400 audit(1779512788.480:906): avc: denied { relabelfrom } for pid=10389 comm="syz.4.1251" name="" dev="pipefs" ino=35328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 147.638176][T10406] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1254'. [ 147.687963][ T40] audit: type=1400 audit(1779512788.630:907): avc: denied { watch watch_reads } for pid=10397 comm="syz.0.1252" path="/333/file0" dev="rpc_pipefs" ino=34339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 147.708048][T10414] overlayfs: failed to clone lowerpath [ 147.838122][T10419] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1256'. [ 149.986164][T10436] gtp0: entered allmulticast mode [ 149.992727][ T40] audit: type=1400 audit(1779512790.940:908): avc: denied { create } for pid=10435 comm="syz.4.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 149.998667][ T40] audit: type=1400 audit(1779512790.940:909): avc: denied { bind } for pid=10435 comm="syz.4.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 150.005675][ T40] audit: type=1400 audit(1779512790.940:910): avc: denied { setopt } for pid=10435 comm="syz.4.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 150.012923][ T40] audit: type=1400 audit(1779512790.960:911): avc: denied { ioctl } for pid=10435 comm="syz.4.1263" path="socket:[36220]" dev="sockfs" ino=36220 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 150.588688][T10401] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 150.703471][T10443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1266'. [ 150.707258][T10443] netlink: 'syz.0.1266': attribute type 14 has an invalid length. [ 150.711051][T10443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1266'. [ 150.715588][T10443] netlink: 'syz.0.1266': attribute type 14 has an invalid length. [ 150.785378][T10448] syzkaller0: left promiscuous mode [ 150.787853][T10448] syzkaller0: left allmulticast mode [ 150.886587][T10464] netlink: 'syz.0.1274': attribute type 3 has an invalid length. [ 150.891867][T10461] bond7 (unregistering): Released all slaves [ 150.977274][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1265'. [ 150.980924][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1265'. [ 150.999450][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 150.999468][ T40] audit: type=1400 audit(1779512791.940:913): avc: denied { read write } for pid=10478 comm="syz.0.1278" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 151.011598][ T40] audit: type=1400 audit(1779512791.940:914): avc: denied { open } for pid=10478 comm="syz.0.1278" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 151.079932][ T40] audit: type=1400 audit(1779512792.020:915): avc: denied { map } for pid=10491 comm="syz.4.1282" path="socket:[36952]" dev="sockfs" ino=36952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 151.089369][ T40] audit: type=1400 audit(1779512792.030:916): avc: denied { ioctl } for pid=10491 comm="syz.4.1282" path="/dev/usbmon3" dev="devtmpfs" ino=746 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 151.122481][ T5740] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 151.130323][ T5740] Bluetooth: hci4: Injecting HCI hardware error event [ 151.137431][ T5747] Bluetooth: hci4: hardware error 0x00 [ 151.345863][T10519] tmpfs: Bad value for 'mpol' [ 151.365217][T10521] input: syz1 as /devices/virtual/input/input16 [ 151.417604][ T40] audit: type=1400 audit(1779512792.360:917): avc: denied { setattr } for pid=10520 comm="syz.4.1290" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 151.437463][ T40] audit: type=1400 audit(1779512792.380:918): avc: denied { accept } for pid=10524 comm="syz.5.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 151.500100][ T40] audit: type=1400 audit(1779512792.440:919): avc: denied { write } for pid=10534 comm="syz.5.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 151.507673][ T40] audit: type=1400 audit(1779512792.450:920): avc: denied { read } for pid=10534 comm="syz.5.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 151.570455][ T1039] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 151.624657][T10553] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1298'. [ 151.636845][T10553] netlink: 'syz.0.1298': attribute type 1 has an invalid length. [ 151.639275][T10553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1298'. [ 151.744235][ T1039] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 151.749897][ T1039] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.754126][ T1039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 151.757179][ T1039] usb 6-1: SerialNumber: syz [ 152.413946][ T1039] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 152.526226][ T5145] pmem0: [POWERTEC] [ 152.535307][ T40] audit: type=1400 audit(1779512793.480:921): avc: denied { write } for pid=10570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.600461][ T40] audit: type=1400 audit(1779512793.550:922): avc: denied { write } for pid=10573 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.660968][ T1043] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 152.781759][T10593] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1311'. [ 152.814969][ T1043] usb 9-1: not running at top speed; connect to a high speed hub [ 152.821388][ T1043] usb 9-1: config 1 interface 0 altsetting 19 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.825834][ T1043] usb 9-1: config 1 interface 0 has no altsetting 0 [ 152.829518][ T1043] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.833036][ T1043] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.835588][ T1043] usb 9-1: Product: syz [ 152.837051][ T1043] usb 9-1: Manufacturer: syz [ 152.839009][ T1043] usb 9-1: SerialNumber: syz [ 152.926396][ T9] usb 6-1: USB disconnect, device number 6 [ 152.934376][ T9] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 152.996730][T10616] overlayfs: failed lookup in lower (newroot/333, name='file0', err=-40): overlapping layers [ 153.105093][T10626] geneve2: entered promiscuous mode [ 153.106968][ T1043] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 153.116526][ T7791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.121061][ T1043] usb 9-1: USB disconnect, device number 4 [ 153.123861][ T7791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.130276][ T7791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.130300][ T7791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.177467][T10636] netlink: 'syz.0.1324': attribute type 21 has an invalid length. [ 153.178005][T10637] netlink: 'syz.0.1324': attribute type 21 has an invalid length. [ 153.185593][T10637] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.188681][T10637] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.192235][T10637] IPv6: NLM_F_CREATE should be set when creating new route [ 153.195083][T10637] IPv6: NLM_F_CREATE should be set when creating new route [ 153.197933][T10637] IPv6: NLM_F_CREATE should be set when creating new route [ 153.200659][T10636] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.203942][ T5747] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 153.225058][T10642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10642 comm=syz.1.1322 [ 153.231397][T10642] netlink: 'syz.1.1322': attribute type 2 has an invalid length. [ 153.296143][T10652] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 153.296145][T10649] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 153.296350][T10649] overlayfs: overlapping lowerdir path [ 153.301802][T10651] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1327'. [ 153.301989][T10652] overlayfs: overlapping lowerdir path [ 153.376869][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1329'. [ 153.379799][T10662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1329'. [ 153.384964][T10661] netlink: 'syz.1.1329': attribute type 20 has an invalid length. [ 153.387481][T10662] netlink: 'syz.1.1329': attribute type 20 has an invalid length. [ 153.393728][T10662] netlink: 'syz.1.1329': attribute type 20 has an invalid length. [ 155.590094][T10791] overlayfs: failed to clone upperpath [ 155.594458][T10792] overlayfs: failed to clone upperpath [ 155.608468][T10791] overlayfs: failed to clone lowerpath [ 155.622609][T10791] overlayfs: failed to clone lowerpath [ 155.658281][ T7796] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.664628][ T7796] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.667818][ T7796] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.670784][ T7796] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.857005][T10811] __nla_validate_parse: 13 callbacks suppressed [ 155.857024][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1372'. [ 155.862568][T10811] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1372'. [ 155.865888][T10811] validate_nla: 2 callbacks suppressed [ 155.865903][T10811] netlink: 'syz.5.1372': attribute type 19 has an invalid length. [ 156.244384][T10824] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 156.367612][T10832] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1379'. [ 156.618296][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 156.618308][ T40] audit: type=1400 audit(1779512797.560:942): avc: denied { bind } for pid=10849 comm="syz.5.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 156.665212][T10852] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1382'. [ 156.778319][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1387'. [ 156.787827][T10859] erspan0: entered promiscuous mode [ 156.793713][T10859] macvlan0: entered allmulticast mode [ 156.795680][T10859] erspan0: entered allmulticast mode [ 157.454779][T10887] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1395'. [ 157.751748][T10900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2073 sclass=netlink_route_socket pid=10900 comm=syz.1.1400 [ 158.422541][T10928] program syz.0.1410 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.461347][T10931] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1409'. [ 158.520044][ T40] audit: type=1400 audit(1779512799.460:943): avc: denied { read } for pid=10936 comm="syz.1.1414" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 158.539220][T10942] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 158.564002][T10950] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 158.575417][T10950] CIFS mount error: No usable UNC path provided in device string! [ 158.575417][T10950] [ 158.580032][T10950] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 158.586621][T10950] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1417'. [ 158.786651][T10964] overlayfs: workdir and upperdir must reside under the same mount [ 158.909776][T10968] tipc: Enabled bearer , priority 0 [ 158.949573][T10988] netlink: 'syz.5.1429': attribute type 2 has an invalid length. [ 158.952783][T10988] netlink: 'syz.5.1429': attribute type 2 has an invalid length. [ 158.983191][T10990] netlink: 'syz.0.1430': attribute type 2 has an invalid length. [ 159.055836][T10993] overlayfs: failed to clone upperpath [ 159.218019][T11003] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1433'. [ 159.228611][T11006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1435'. [ 159.266596][T11008] FAT-fs (loop0): unable to read boot sector [ 159.334694][T11006] could not allocate digest TFM handle sm3 [ 159.339738][ T40] audit: type=1400 audit(1779512800.280:944): avc: denied { call } for pid=11013 comm="syz.0.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 159.340918][T11014] binder: 11013:11014 ioctl 89e5 200000000240 returned -22 [ 159.553540][T11014] syz.0.1438 (11014): drop_caches: 2 [ 159.558935][T11014] syz.0.1438 (11014): drop_caches: 2 [ 159.865834][T11036] xt_hashlimit: size too large, truncated to 1048576 [ 160.098954][T11046] netlink: 'syz.5.1447': attribute type 7 has an invalid length. [ 160.499778][T11071] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 160.542146][T11073] can0: slcan on ttyS3. [ 160.640816][T11073] can0 (unregistered): slcan off ttyS3. [ 160.749860][T11106] overlayfs: failed to clone upperpath [ 160.769122][ T40] audit: type=1400 audit(1779512801.710:945): avc: denied { setopt } for pid=11107 comm="syz.0.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 160.781200][ T40] audit: type=1400 audit(1779512801.730:946): avc: denied { getopt } for pid=11107 comm="syz.0.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 160.827896][ T40] audit: type=1400 audit(1779512801.770:947): avc: denied { ioctl } for pid=11099 comm="syz.1.1463" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 161.008247][T11127] hugetlbfs: syz.5.1470 (11127): Using mlock ulimits for SHM_HUGETLB is obsolete [ 161.118285][ T40] audit: type=1400 audit(1779512802.060:948): avc: denied { watch watch_reads } for pid=11129 comm="syz.0.1472" path="pipe:[36834]" dev="pipefs" ino=36834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 161.731798][T11160] tmpfs: Cannot disable swap on remount [ 161.826995][T11171] netlink: 'syz.5.1487': attribute type 39 has an invalid length. [ 161.906927][T11166] xt_hashlimit: size too large, truncated to 1048576 [ 161.907294][T11174] xt_hashlimit: size too large, truncated to 1048576 [ 162.123819][ T40] audit: type=1400 audit(1779512803.070:949): avc: denied { map } for pid=11182 comm="syz.4.1490" path="socket:[38423]" dev="sockfs" ino=38423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 162.267064][ T40] audit: type=1400 audit(1779512803.210:950): avc: denied { map } for pid=11180 comm="syz.1.1488" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 162.280405][ T40] audit: type=1400 audit(1779512803.210:951): avc: denied { execute } for pid=11180 comm="syz.1.1488" path="/dev/tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 162.339538][T11202] __nla_validate_parse: 3 callbacks suppressed [ 162.339556][T11202] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1496'. [ 162.350851][T11202] IPVS: stopping backup sync thread 8943 ... [ 162.351697][T11190] loop2: detected capacity change from 0 to 1 [ 162.361597][T11190] Dev loop2: unable to read RDB block 1 [ 162.363862][T11190] loop2: AHDI p1 p2 p3 [ 162.365322][T11190] loop2: partition table partially beyond EOD, truncated [ 162.368636][T11190] loop2: p1 start 1818582900 is beyond EOD, truncated [ 162.371284][T11190] loop2: p3 start 335544320 is beyond EOD, truncated [ 162.685176][ T40] audit: type=1400 audit(1779512803.630:952): avc: denied { create } for pid=11232 comm="syz.5.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 162.703388][T11233] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1504'. [ 162.765073][T11236] fuse: Bad value for 'fd' [ 162.765204][T11239] trusted_key: encrypted_key: hex blob is missing [ 162.858778][T11245] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=14 sclass=netlink_xfrm_socket pid=11245 comm=syz.5.1508 [ 162.922764][T11247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11247 comm=syz.5.1509 [ 162.983029][T11249] Invalid ELF header type: 3 != 1 [ 162.983029][ T40] audit: type=1400 audit(1779512803.930:953): avc: denied { module_load } for pid=11248 comm="syz.5.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 162.993740][T11250] Invalid ELF header type: 3 != 1 [ 162.996618][T11249] Invalid ELF header type: 2 != 1 [ 163.026410][T11250] Invalid ELF header type: 2 != 1 [ 163.026436][T11258] Invalid ELF header type: 2 != 1 [ 163.065015][T11249] Invalid ELF header type: 2 != 1 [ 163.068433][T11250] Invalid ELF header type: 2 != 1 [ 163.218029][T11286] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1519'. [ 163.236662][T11286] tipc: Resetting bearer [ 163.239054][T11286] team0: entered promiscuous mode [ 163.242243][T11286] team_slave_0: entered promiscuous mode [ 163.244872][T11286] team_slave_1: entered promiscuous mode [ 163.248805][T11291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11291 comm=syz.1.1521 [ 163.261226][T11286] xt_hashlimit: max too large, truncated to 1048576 [ 163.265898][T11286] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 163.275927][T11286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1519'. [ 163.280809][ T40] audit: type=1400 audit(1779512804.230:954): avc: denied { name_bind } for pid=11285 comm="syz.0.1519" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 163.377602][T11302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1524'. [ 163.540331][ T5978] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 163.704557][ T5978] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.710096][ T5978] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.711549][T11312] veth1_macvtap: left promiscuous mode [ 163.716677][ T5978] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 163.721650][ T5978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.815049][ T40] audit: type=1400 audit(1779512804.760:955): avc: denied { create } for pid=11311 comm="syz.0.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 163.817078][T11312] all: renamed from bridge_slave_1 (while UP) [ 163.844525][ T40] audit: type=1400 audit(1779512804.760:956): avc: denied { ioctl } for pid=11311 comm="syz.0.1528" path="socket:[40241]" dev="sockfs" ino=40241 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 163.941523][ T5978] usb 6-1: usb_control_msg returned -32 [ 163.944378][ T5978] usbtmc 6-1:16.0: can't read capabilities [ 163.960669][ T40] audit: type=1400 audit(1779512804.910:957): avc: denied { write } for pid=11320 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.023990][ T5978] usb 6-1: USB disconnect, device number 7 [ 164.074870][ T40] audit: type=1400 audit(1779512805.020:958): avc: denied { write } for pid=11325 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.165552][ T5447] veth1_macvtap: entered promiscuous mode [ 164.672366][T11365] netlink: 'syz.5.1539': attribute type 4 has an invalid length. [ 164.676602][T11365] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1539'. [ 164.726326][T11372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.730527][T11372] batadv_slave_0: entered promiscuous mode [ 164.732511][T11372] batadv_slave_0: entered allmulticast mode [ 164.849928][T11382] /dev/sg0: Can't lookup blockdev [ 164.853017][T11382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.944974][T11392] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1548'. [ 165.167212][T11417] Sensor A: ================= START STATUS ================= [ 165.169801][T11417] Sensor A: Test Pattern: 75% Colorbar [ 165.175942][T11417] Sensor A: Show Information: All [ 165.177773][T11417] Sensor A: Vertical Flip: false [ 165.180048][T11417] Sensor A: Horizontal Flip: false [ 165.182853][T11417] Sensor A: Brightness: 0 [ 165.184297][T11417] Sensor A: Contrast: 128 [ 165.185796][T11417] Sensor A: Hue: 0 [ 165.192085][T11417] Sensor A: Saturation: 255 [ 165.193918][T11417] Sensor A: Pixel Rate: 160000000 [ 165.197376][T11417] Sensor A: Horizontal Blanking: 800 [ 165.199277][T11417] Sensor A: Vertical Blanking: 3223 [ 165.202902][T11417] Sensor A: ================== END STATUS ================== [ 165.230506][T11423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1556'. [ 165.285838][T11429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=11429 comm=syz.1.1556 [ 165.291463][T11429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=11429 comm=syz.1.1556 [ 165.418393][T11436] syzkaller0: entered promiscuous mode [ 165.421731][T11436] syzkaller0: entered allmulticast mode [ 165.491111][T11451] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1558'. [ 165.587467][T11458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.591332][T11458] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.601621][T11463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56080 sclass=netlink_route_socket pid=11463 comm=syz.1.1565 [ 165.602582][T11458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.637085][T11458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.643634][T11458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.650655][T11458] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 165.654310][T11458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.665736][T11458] veth1_vlan: left promiscuous mode [ 165.669292][T11458] veth0_vlan: left promiscuous mode [ 165.672633][T11458] veth0_vlan: entered promiscuous mode [ 165.679394][T11458] veth1_vlan: entered promiscuous mode [ 165.687275][T11458] veth1_macvtap: left promiscuous mode [ 165.691757][T11458] veth0_macvtap: left promiscuous mode [ 165.696080][T11458] veth0_macvtap: entered promiscuous mode [ 165.701313][T11458] veth1_macvtap: entered promiscuous mode [ 165.709798][T11458] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 165.720078][T11458] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 165.725814][T11458] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 165.730672][T11458] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 165.752155][T11458] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.759745][T11458] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.764039][T11458] 8021q: adding VLAN 0 to HW filter on device bond3 [ 165.768702][T11458] 8021q: adding VLAN 0 to HW filter on device bond4 [ 165.775918][T11458] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 165.788107][T11458] 8021q: adding VLAN 0 to HW filter on device bond6 [ 165.797083][T11460] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1566'. [ 165.800988][ T7784] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.804765][ T7784] bridge0: port 1(bridge_slave_0) entered listening state [ 165.820035][ T7784] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.823215][ T7784] bridge0: port 2(bridge_slave_1) entered listening state [ 165.859574][ T7796] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.864657][ T7784] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.870786][ T7784] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.874091][ T7784] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.930943][T11473] netlink: 'syz.1.1569': attribute type 2 has an invalid length. [ 166.189502][T11491] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 166.210397][ T34] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 166.370429][ T34] usb 9-1: Using ep0 maxpacket: 32 [ 166.379368][ T34] usb 9-1: unable to get BOS descriptor or descriptor too short [ 166.387434][ T34] usb 9-1: config 8 has an invalid interface number: 188 but max is 0 [ 166.391755][ T34] usb 9-1: config 8 has no interface number 0 [ 166.394500][ T34] usb 9-1: config 8 interface 188 has no altsetting 0 [ 166.404282][ T34] usb 9-1: string descriptor 0 read error: -22 [ 166.407546][ T34] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 166.414525][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.440377][ T34] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 166.444275][ T34] dw2102: su3000_power_ctrl: 1, initialized 0 [ 166.447359][ T34] dvb-usb: bulk message failed: -22 (2/0) [ 166.466373][ T34] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 166.473254][ T34] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 166.477158][ T34] usb 9-1: media controller created [ 166.479502][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 166.482971][ T34] dw2102: i2c transfer failed. [ 166.485656][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 166.491891][ T34] dw2102: i2c transfer failed. [ 166.494981][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 166.497504][ T34] dw2102: i2c transfer failed. [ 166.499522][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 166.502019][ T34] dw2102: i2c transfer failed. [ 166.504013][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 166.506338][ T34] dw2102: i2c transfer failed. [ 166.508345][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 166.511689][ T34] dw2102: i2c transfer failed. [ 166.513838][ T34] dvb-usb: MAC address: 02:02:02:02:02:02 [ 166.525960][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.553231][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 166.557148][ T34] dw2102: command 0x0e transfer failed. [ 166.560002][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 166.562909][ T34] dw2102: command 0x0e transfer failed. [ 166.751329][T11512] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 166.753452][T11512] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 166.756726][T11512] vhci_hcd vhci_hcd.0: Device attached [ 166.759616][T11514] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 166.765473][ T7804] vhci_hcd vhci_hcd.1: stop threads [ 166.768167][ T7804] vhci_hcd vhci_hcd.1: release socket [ 166.771822][ T7804] vhci_hcd vhci_hcd.1: disconnect device [ 166.839584][T11524] netlink: 'syz.0.1585': attribute type 19 has an invalid length. [ 166.870720][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 166.873246][ T34] dw2102: command 0x0e transfer failed. [ 166.876048][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 166.880396][ T34] dw2102: command 0x0e transfer failed. [ 166.883140][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 166.885605][ T34] dw2102: command 0x51 transfer failed. [ 166.907263][ T34] DVB: Unable to find symbol ds3000_attach() [ 166.910228][ T34] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 166.970336][ T34] rc_core: IR keymap rc-su3000 not found [ 166.972881][ T34] Registered IR keymap rc-empty [ 166.976709][ T34] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 166.984343][ T34] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input18 [ 166.991306][ T34] dvb-usb: schedule remote query interval to 150 msecs. [ 166.994714][ T34] dw2102: su3000_power_ctrl: 0, initialized 1 [ 166.997594][ T34] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 167.003924][ T34] usb 9-1: USB disconnect, device number 5 [ 167.031669][T11531] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 167.062649][ T34] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 167.401959][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 167.401978][ T40] audit: type=1326 audit(1779512808.350:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11542 comm="syz.4.1592" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f367c99ce59 code=0x0 [ 167.630823][ T1043] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 167.782169][ T1043] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 167.787365][ T1043] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 167.791805][ T1043] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 167.795614][ T1043] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.805206][T11540] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 167.818399][ T1043] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 168.016148][ T5978] usb 6-1: USB disconnect, device number 8 [ 168.771978][T11554] netlink: 'syz.4.1595': attribute type 23 has an invalid length. [ 168.859129][T11561] tmpfs: Bad value for 'mpol' [ 168.907713][ T40] audit: type=1326 audit(1779512809.850:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11564 comm="syz.1.1599" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f73b9ce59 code=0x0 [ 169.105489][T11577] batadv_slave_0: entered promiscuous mode [ 169.111054][T11577] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1 sclass=netlink_tcpdiag_socket pid=11577 comm=syz.1.1601 [ 169.118081][T11576] batadv_slave_0: left promiscuous mode [ 169.121232][ T1043] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 169.206353][T11586] netlink: 'syz.1.1604': attribute type 1 has an invalid length. [ 169.242800][T11586] 8021q: adding VLAN 0 to HW filter on device bond7 [ 169.254520][T11586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8976 sclass=netlink_route_socket pid=11586 comm=syz.1.1604 [ 169.270894][ T1043] usb 9-1: Using ep0 maxpacket: 8 [ 169.279232][ T1043] usb 9-1: config 0 has no interfaces? [ 169.282001][ T1043] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 169.285768][ T1043] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.291850][ T1043] usb 9-1: config 0 descriptor?? [ 169.325421][T11608] ±ÿ: renamed from lo (while UP) [ 169.392064][T11613] comedi comedi0: bad chanlist[0]=0x00000002 chan=2 range length=6 [ 169.457872][T11618] netlink: 'syz.5.1613': attribute type 2 has an invalid length. [ 169.461294][T11618] __nla_validate_parse: 6 callbacks suppressed [ 169.461307][T11618] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1613'. [ 169.536223][T11561] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 169.553103][ T7796] Bluetooth: hci0: Frame reassembly failed (-84) [ 169.606867][T11636] set match dimension is over the limit! [ 169.673455][T11642] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 169.725701][ T40] audit: type=1326 audit(1779512810.670:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11654 comm="syz.0.1625" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bf919ce59 code=0x0 [ 169.956517][T11676] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1630'. [ 170.014647][T11679] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 170.025299][ T40] audit: type=1400 audit(1779512810.970:968): avc: denied { setattr } for pid=11678 comm="syz.5.1631" path="socket:[42192]" dev="sockfs" ino=42192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.033356][ T40] audit: type=1400 audit(1779512810.970:969): avc: denied { accept } for pid=11678 comm="syz.5.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.164684][T11686] Cannot find add_set index 0 as target [ 170.217526][T11686] bridge0: port 3(macsec1) entered blocking state [ 170.220015][T11686] bridge0: port 3(macsec1) entered disabled state [ 170.222276][T11686] macsec1: entered allmulticast mode [ 170.223989][T11686] bridge0: entered allmulticast mode [ 170.226568][T11686] bridge0: entered promiscuous mode [ 170.230108][T11686] macsec1: left allmulticast mode [ 170.232655][T11686] bridge0: left allmulticast mode [ 170.252276][T11687] bridge0: port 3(macsec1) entered blocking state [ 170.254493][T11687] bridge0: port 3(macsec1) entered disabled state [ 170.256908][T11687] macsec1: entered allmulticast mode [ 170.258558][T11687] bridge0: entered allmulticast mode [ 170.263938][T11687] macsec1: left allmulticast mode [ 170.265775][T11687] bridge0: left allmulticast mode [ 170.275097][ T5978] bridge0: left promiscuous mode [ 170.445920][T11704] netlink: 'syz.1.1638': attribute type 1 has an invalid length. [ 170.449149][T11704] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.452313][T11704] IPv6: NLM_F_CREATE should be set when creating new route [ 170.460353][T11704] netlink: 'syz.1.1638': attribute type 1 has an invalid length. [ 170.464268][T11704] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.653427][T11711] bond8: (slave bond_slave_1): Device is not our slave [ 170.656317][T11711] bond8: option active_slave: invalid value (bond_slave_1) [ 170.661152][T11711] bond8 (unregistering): Released all slaves [ 170.766562][T11724] No such timeout policy "syz1" [ 170.816375][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1647'. [ 170.829276][T11730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1648'. [ 170.895269][T11735] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1650'. [ 170.899107][T11735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1650'. [ 171.077039][T11746] netlink: 'syz.1.1653': attribute type 1 has an invalid length. [ 171.098730][T11746] bond8: entered promiscuous mode [ 171.102385][T11746] bond8: entered allmulticast mode [ 171.105995][T11746] 8021q: adding VLAN 0 to HW filter on device bond8 [ 171.168094][T11749] syz.1.1654(11749): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 171.236078][ T40] audit: type=1400 audit(1779512812.180:970): avc: denied { read } for pid=11756 comm="syz.1.1655" lport=48416 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 171.292016][ T40] audit: type=1400 audit(1779512812.240:971): avc: denied { ioctl } for pid=11756 comm="syz.1.1655" path="socket:[42308]" dev="sockfs" ino=42308 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 171.367731][T11769] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1659'. [ 171.438019][ T40] audit: type=1400 audit(1779512812.380:972): avc: denied { bind } for pid=11778 comm="syz.5.1662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 171.488605][ T40] audit: type=1800 audit(1779512812.430:973): pid=11784 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1664" name="file0" dev="tmpfs" ino=2167 res=0 errno=0 [ 171.600498][ T5747] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 171.605482][ T5740] Bluetooth: hci0: command 0x1003 tx timeout [ 171.629631][ T29] usb 9-1: USB disconnect, device number 6 [ 171.730331][T11800] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 171.816226][T11807] vivid-001: kernel_thread() failed [ 171.995657][ T40] audit: type=1400 audit(1779512812.940:974): avc: denied { create } for pid=11817 comm="syz.1.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 172.063085][T11831] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 172.114932][T11835] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.1678'. [ 172.266957][T11854] uprobe: syz.5.1683:11854 failed to unregister, leaking uprobe [ 172.273873][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1683'. [ 172.378613][T11862] netlink: 'syz.0.1687': attribute type 12 has an invalid length. [ 172.934424][T11923] pimreg: entered allmulticast mode [ 173.033528][T11931] can0: slcan on ttynull. [ 173.035411][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 173.035421][ T40] audit: type=1400 audit(1779512813.980:986): avc: denied { create } for pid=11928 comm="syz.5.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 173.054045][ T40] audit: type=1400 audit(1779512813.980:987): avc: denied { setopt } for pid=11928 comm="syz.5.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 173.060593][ T40] audit: type=1400 audit(1779512813.980:988): avc: denied { watch watch_reads } for pid=11928 comm="syz.5.1703" path="/" dev="ramfs" ino=41466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 173.142344][T11929] can0 (unregistered): slcan off ttynull. [ 173.175812][T11937] xt_TPROXY: Can be used only with -p tcp or -p udp [ 173.178082][ T40] audit: type=1400 audit(1779512814.120:989): avc: denied { write } for pid=11934 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.198976][ T40] audit: type=1400 audit(1779512814.140:990): avc: denied { accept } for pid=11936 comm="syz.0.1705" laddr=fe80::16 lport=52259 faddr=fe80::42 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 173.232292][T11943] overlayfs: failed lookup in lower (newroot/174, name='file0', err=-40): overlapping layers [ 173.251264][T11943] overlayfs: failed lookup in lower (newroot/174, name='file0', err=-40): overlapping layers [ 173.268684][ T40] audit: type=1400 audit(1779512814.210:991): avc: denied { write } for pid=11944 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.326981][ T40] audit: type=1400 audit(1779512814.270:992): avc: denied { read write } for pid=11949 comm="syz.0.1709" name="uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 173.344379][ T40] audit: type=1400 audit(1779512814.270:993): avc: denied { open } for pid=11949 comm="syz.0.1709" path="/dev/uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 173.356703][ T5829] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 173.359705][ T5829] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 173.364199][ T5829] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 173.368287][ T5829] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 173.371780][ T5829] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 173.374601][ T5829] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 173.377608][ T5829] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 173.381110][ T5829] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 173.384440][ T5829] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 173.387303][ T5829] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 173.390388][ T40] audit: type=1400 audit(1779512814.330:994): avc: denied { write } for pid=11951 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.399265][ T40] audit: type=1400 audit(1779512814.340:995): avc: denied { ioctl } for pid=11949 comm="syz.0.1709" path="/dev/uhid" dev="devtmpfs" ino=1295 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 173.403085][ T5829] hid-generic 0006:0004:0009.0003: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 173.481843][T11960] /dev/nullb0: Can't open blockdev [ 173.485458][T11958] fido_id[11958]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 173.627590][T11976] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1715'. [ 173.679366][T11981] /dev/nullb0: Can't open blockdev [ 173.700018][T11979] o2cb: This node has not been configured. [ 173.703465][T11979] o2cb: Cluster check failed. Fix errors before retrying. [ 173.707077][T11979] (syz.4.1716,11979,3):user_dlm_register:674 ERROR: status = -22 [ 173.709688][T11979] (syz.4.1716,11979,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 173.830412][ T7818] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 173.991364][ T7818] usb 6-1: not running at top speed; connect to a high speed hub [ 173.995129][ T7818] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 174.002425][ T7818] usb 6-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 174.005407][ T7818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.007851][ T7818] usb 6-1: Product: Ð¥ [ 174.009193][ T7818] usb 6-1: Manufacturer: ⦻壹狤諓뎉Ƣ쵲嘩䇙㶚㦹忸瞞⌖敢⩦熭⓬ؙ뵄㰽㞋濆✽䴖僺ìœê¶‰ã„„쯔ᓳ꯾⤾ᰬׯ꙰눨èŒê¥†ç¡ºâ•žîŒ¢ï‡µãµ¨ÚŠè¯¡é¾’ᮚ鞚ꕬ棖⥾⛗î¶è¤âš©ä²¥âƒ´é°µâ¼µè°ƒæŽ˜á¸ÜŸîš˜æŠ£îˆæ¶‰ì›ë¾˜ãƒ‚僥Ꙋ璟暄ᦻ뤫衰컇瑩龢툹á¸å´„愅ⶀ韤둆뉦ᖠ뎴ᱮĸ⽢䅘甀ӫ옲熼賂᫬˕줣㻠èºê©¬ç³šë…Š [ 174.029158][ T7818] usb 6-1: SerialNumber: à°Œ [ 174.248139][T11971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.254707][T11971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.326027][T12035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.333060][T12037] x_tables: duplicate underflow at hook 2 [ 174.335456][T12035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.397824][ T7818] usb 6-1: 1:1 : unknown format tag 0x1 is detected. processed as MPEG. [ 174.403968][ T7818] usb 6-1: found format II with max.bitrate = 15, frame size=9 [ 174.404003][ T7818] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 174.407372][ T7818] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 174.428654][T12045] fuse: fd is not a fuse device [ 174.467012][ T7818] usb 6-1: USB disconnect, device number 9 [ 174.500609][T12048] trusted_key: encrypted_key: keyword 'w' not recognized [ 174.501374][T12040] veth0_to_bond: entered allmulticast mode [ 174.510660][T12048] trusted_key: encrypted_key: keylen parameter is missing [ 175.022270][T12079] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.305588][T12097] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio0-cursor) [ 175.318976][T12093] netlink: 'syz.5.1750': attribute type 89 has an invalid length. [ 175.321198][T12097] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 175.323602][T12093] __nla_validate_parse: 2 callbacks suppressed [ 175.323615][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1750'. [ 175.383101][T12103] trusted_key: encrypted_key: insufficient parameters specified [ 175.429700][T12110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1751'. [ 175.576641][T12119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.753354][T12122] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 175.824592][T12124] netlink: 'syz.1.1757': attribute type 3 has an invalid length. [ 175.827878][T12124] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1757'. [ 175.937734][ T7791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.941991][ T7791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.007438][T12137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.212555][T12143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=12143 comm=syz.4.1763 [ 176.212559][T12144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=12144 comm=syz.4.1763 [ 176.471001][T12157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=12157 comm=syz.5.1768 [ 176.761412][T12169] SELinux: policydb string length -1235202310 does not match expected length 8 [ 176.765409][T12169] SELinux: failed to load policy [ 177.419767][T12196] netlink: 'syz.0.1782': attribute type 9 has an invalid length. [ 177.422755][T12196] netlink: 212396 bytes leftover after parsing attributes in process `syz.0.1782'. [ 177.593893][T12215] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 177.975038][T12227] syzkaller0: entered promiscuous mode [ 177.977085][T12227] syzkaller0: entered allmulticast mode [ 178.423934][T12215] 9pnet_fd: p9_fd_create_tcp (12215): problem connecting socket to 127.0.0.1 [ 178.756532][T12245] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 178.816821][T12253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12253 comm=syz.5.1799 [ 178.821768][T12253] sit0: entered promiscuous mode [ 178.831937][T12253] netlink: 'syz.5.1799': attribute type 1 has an invalid length. [ 178.835861][T12253] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1799'. [ 178.978242][T12269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1800'. [ 179.016320][T12272] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1804'. [ 179.059501][T12276] overlayfs: failed to clone upperpath [ 179.107879][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 179.107896][ T40] audit: type=1400 audit(1779512820.050:1011): avc: denied { getopt } for pid=12285 comm="syz.0.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 179.162462][ T40] audit: type=1400 audit(1779512820.110:1012): avc: denied { mounton } for pid=12285 comm="syz.0.1810" path="/477/file0" dev="tmpfs" ino=2569 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 179.216553][ T40] audit: type=1400 audit(1779512820.167:1013): avc: denied { read } for pid=12285 comm="syz.0.1810" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 179.343517][T12287] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 179.349538][T12287] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 179.367159][T12287] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 179.381919][ T40] audit: type=1400 audit(1779512820.317:1014): avc: denied { write } for pid=12309 comm="syz.1.1815" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 179.447574][T12316] netlink: 'syz.5.1817': attribute type 1 has an invalid length. [ 179.466399][T12316] bond2: entered promiscuous mode [ 179.469038][T12316] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.471177][T12319] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1818'. [ 179.477490][T12319] tipc: Invalid UDP bearer configuration [ 179.477522][T12319] tipc: Enabling of bearer rejected, failed to enable media [ 179.502662][T12316] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.505201][T12316] bond2: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 179.508762][T12316] bond2: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 179.514872][T12316] bond2: (slave ip6gre2): making interface the new active one [ 179.517291][T12316] ip6gre2: entered promiscuous mode [ 179.519810][T12316] bond2: (slave ip6gre2): Enslaving as an active interface with an up link [ 179.595512][T12332] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1821'. [ 179.700552][T12338] tipc: Enabling of bearer rejected, failed to enable media [ 179.725292][T12340] overlayfs: missing 'lowerdir' [ 179.742365][T12340] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1824'. [ 179.809164][T12344] netlink: 'syz.5.1825': attribute type 1 has an invalid length. [ 179.864516][T12344] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.039673][T12353] syzkaller0: entered promiscuous mode [ 180.042454][T12353] syzkaller0: entered allmulticast mode [ 180.914223][T12369] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 180.918458][T12369] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 180.922385][T12369] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 180.927901][ T40] audit: type=1400 audit(1779512821.758:1015): avc: denied { read } for pid=12366 comm="syz.4.1833" name="file0" dev="tmpfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 180.938910][ T40] audit: type=1400 audit(1779512821.758:1016): avc: denied { open } for pid=12366 comm="syz.4.1833" path="/202/file0" dev="tmpfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 180.949350][ T40] audit: type=1400 audit(1779512821.758:1017): avc: denied { ioctl } for pid=12366 comm="syz.4.1833" path="/202/file0" dev="tmpfs" ino=1113 ioctlcmd=0x1285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 180.982604][ T40] audit: type=1400 audit(1779512821.814:1018): avc: denied { setopt } for pid=12372 comm="syz.4.1837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 181.063025][T12389] comedi comedi3: comedi_config --init_data is deprecated [ 181.093121][T12393] __nla_validate_parse: 3 callbacks suppressed [ 181.093133][T12393] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1840'. [ 181.369032][T12429] dlm: no local IP address has been set [ 181.375666][T12429] dlm: cannot start dlm midcomms -107 [ 181.453397][T12433] netlink: 'syz.1.1851': attribute type 10 has an invalid length. [ 181.456599][T12433] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1851'. [ 181.511095][ T5747] Bluetooth: hci5: command 0x0c1a tx timeout [ 181.514214][ T40] audit: type=1400 audit(1779512822.310:1019): avc: denied { write } for pid=12434 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.565471][ T40] audit: type=1400 audit(1779512822.366:1020): avc: denied { write } for pid=12437 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.021968][T12450] netlink: 'syz.0.1854': attribute type 10 has an invalid length. [ 182.039793][T12450] bond0: entered promiscuous mode [ 182.042104][T12450] bond_slave_0: entered promiscuous mode [ 182.044711][T12450] bond_slave_1: entered promiscuous mode [ 182.052005][T12450] team0: Port device bond0 added [ 182.085414][T12453] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1855'. [ 182.293258][T12466] netlink: 'syz.4.1859': attribute type 4 has an invalid length. [ 182.299134][T12466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12466 comm=syz.4.1859 [ 182.361482][T12473] netlink: zone id is out of range [ 182.385132][T12475] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1863'. [ 182.391431][T12475] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 182.457305][T12482] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 182.501256][T12484] xt_hashlimit: size too large, truncated to 1048576 [ 182.620562][T12491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1868'. [ 182.966511][T12502] netlink: zone id is out of range [ 183.324689][T12516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1877'. [ 183.415196][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1878'. [ 183.425096][T12518] xt_hashlimit: size too large, truncated to 1048576 [ 183.740584][ T5747] Bluetooth: hci5: command 0x0c1a tx timeout [ 184.026936][T12556] random: crng reseeded on system resumption [ 184.040379][T12561] bridge2: entered promiscuous mode [ 184.042131][T12561] bridge2: entered allmulticast mode [ 184.068564][T12565] overlayfs: failed to resolve './file0': -2 [ 184.075216][T12567] overlayfs: missing 'workdir' [ 184.272213][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1898'. [ 184.322365][T12589] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1899'. [ 184.379295][T12592] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1900'. [ 184.593496][T12598] bond9: entered promiscuous mode [ 184.598585][T12598] 8021q: adding VLAN 0 to HW filter on device bond9 [ 184.711862][T12606] netlink: 'syz.1.1904': attribute type 8 has an invalid length. [ 184.720823][T12606] bond0: entered promiscuous mode [ 184.723029][T12606] bond_slave_0: entered promiscuous mode [ 184.726160][T12606] bond_slave_1: entered promiscuous mode [ 184.736777][T12606] batadv0: entered promiscuous mode [ 184.742613][T12606] team0: entered promiscuous mode [ 184.745740][T12606] team_slave_0: entered promiscuous mode [ 184.749455][T12606] team_slave_1: entered promiscuous mode [ 184.751973][T12606] ip6erspan0: entered promiscuous mode [ 184.761297][T12606] hsr1: entered promiscuous mode [ 184.763955][T12606] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 185.078187][T12618] netlink: 'syz.4.1908': attribute type 1 has an invalid length. [ 185.103425][T12618] bond2: entered promiscuous mode [ 185.106137][T12618] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.176753][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 185.176770][ T40] audit: type=1400 audit(1779512825.744:1027): avc: denied { ioctl } for pid=12620 comm="syz.1.1909" path="socket:[44957]" dev="sockfs" ino=44957 ioctlcmd=0x6e85 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 185.188895][T12628] Invalid logical block size (-1) [ 185.241982][ T40] audit: type=1400 audit(1779512825.800:1028): avc: denied { validate_trans } for pid=12626 comm="syz.4.1911" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 185.393669][T12644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.450060][T12649] program syz.4.1918 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.619517][ T40] audit: type=1400 audit(1779512826.156:1029): avc: denied { accept } for pid=12661 comm="syz.0.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 185.619993][T12662] CIFS mount error: No usable UNC path provided in device string! [ 185.619993][T12662] [ 185.631115][T12662] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 185.657052][ T40] audit: type=1400 audit(1779512826.184:1030): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 185.667111][T12663] xt_cgroup: path and classid specified [ 185.795673][ T40] audit: type=1400 audit(1779512826.315:1031): avc: denied { create } for pid=12669 comm="syz.0.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 185.930212][ T40] audit: type=1400 audit(1779512826.446:1032): avc: denied { remount } for pid=12682 comm="syz.0.1929" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 185.967160][ T5747] Bluetooth: hci5: command 0x0c1a tx timeout [ 186.191028][T12712] netlink: 'syz.1.1938': attribute type 1 has an invalid length. [ 186.215469][T12712] bond10: entered promiscuous mode [ 186.217233][T12712] bond10: entered allmulticast mode [ 186.219066][T12712] 8021q: adding VLAN 0 to HW filter on device bond10 [ 186.224109][T12714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12714 comm=syz.1.1938 [ 186.259988][ T40] audit: type=1400 audit(1779512826.755:1033): avc: denied { map } for pid=12722 comm="syz.5.1939" path="socket:[45528]" dev="sockfs" ino=45528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 186.261550][T12721] veth0_to_bond: left allmulticast mode [ 186.271228][ T40] audit: type=1400 audit(1779512826.755:1034): avc: denied { read } for pid=12722 comm="syz.5.1939" path="socket:[45528]" dev="sockfs" ino=45528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 186.283909][ T40] audit: type=1400 audit(1779512826.764:1035): avc: denied { transfer } for pid=12715 comm="syz.4.1937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 186.745720][T12778] netlink: 'syz.5.1956': attribute type 1 has an invalid length. [ 186.764795][T12778] 8021q: adding VLAN 0 to HW filter on device bond4 [ 186.779081][T12778] bond4: (slave veth0_to_bond): making interface the new active one [ 186.783727][T12778] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 186.817954][T12778] netlink: 'syz.5.1956': attribute type 1 has an invalid length. [ 187.050872][T12795] gre1: entered promiscuous mode [ 187.127516][T12801] __nla_validate_parse: 10 callbacks suppressed [ 187.127529][T12801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1962'. [ 187.136615][T12801] l2tp_ppp: sess 2/0: no socket in recv [ 187.179453][T12810] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1966'. [ 187.205582][T12812] fuse: Bad value for 'fd' [ 187.216132][ T40] audit: type=1400 audit(1779512827.644:1036): avc: denied { create } for pid=12813 comm="syz.4.1968" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 187.226494][T12816] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1969'. [ 187.552304][ T844] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 187.589407][T12831] syzkaller0: entered promiscuous mode [ 187.592427][T12831] syzkaller0: entered allmulticast mode [ 187.640693][T12833] tmpfs: Bad value for 'mpol' [ 187.643203][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1975'. [ 187.646939][T12833] sctp: [Deprecated]: syz.0.1975 (pid 12833) Use of int in max_burst socket option. [ 187.646939][T12833] Use struct sctp_assoc_value instead [ 187.653602][T12834] sctp: [Deprecated]: syz.0.1975 (pid 12834) Use of int in max_burst socket option. [ 187.653602][T12834] Use struct sctp_assoc_value instead [ 187.669979][T12833] tmpfs: Unknown parameter 'grpquota_é­`+Ë»‰inode_hardlimit' [ 187.719660][ T844] usb 9-1: Using ep0 maxpacket: 16 [ 187.723400][ T844] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.728198][ T844] usb 9-1: config 0 interface 0 has no altsetting 0 [ 187.736586][ T844] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 187.740534][ T844] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.744157][ T844] usb 9-1: Product: syz [ 187.745958][ T844] usb 9-1: Manufacturer: syz [ 187.747922][ T844] usb 9-1: SerialNumber: syz [ 187.752959][ T844] usb 9-1: config 0 descriptor?? [ 187.984970][ T844] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input19 [ 188.264823][ T844] rc_core: IR keymap rc-imon-pad not found [ 188.269592][ T844] Registered IR keymap rc-empty [ 188.271524][ T844] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 188.276012][ T844] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 188.417940][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1981'. [ 188.451677][ T844] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 188.458947][ T844] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input20 [ 188.465274][ T844] imon 9-1:0.0: iMON device (15c2:0041, intf0) on usb<9:7> initialized [ 188.633697][ C1] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 188.661017][T12880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.661920][ T7818] usb 9-1: USB disconnect, device number 7 [ 188.761448][T12882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1988'. [ 188.912763][T12899] netlink: 'syz.4.1993': attribute type 1 has an invalid length. [ 188.927648][T12898] netlink: 'syz.4.1993': attribute type 1 has an invalid length. [ 188.958559][T12899] 8021q: adding VLAN 0 to HW filter on device bond4 [ 188.962441][T12899] bond3: (slave bond4): making interface the new active one [ 188.966560][T12899] bond3: (slave bond4): Enslaving as an active interface with an up link [ 188.979573][T12899] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 188.984677][T12899] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1993'. [ 188.990306][T12899] 8021q: adding VLAN 0 to HW filter on device bond3 [ 189.039108][T12911] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1997'. [ 189.042660][T12911] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 189.203614][T12921] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 189.246232][T12923] netlink: 'syz.4.2001': attribute type 1 has an invalid length. [ 189.249315][T12923] netlink: 'syz.4.2001': attribute type 2 has an invalid length. [ 189.251928][T12923] netlink: 'syz.4.2001': attribute type 1 has an invalid length. [ 189.280436][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 189.445365][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 189.449586][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.453522][ T9] usb 5-1: Product: syz [ 189.453638][T12931] xt_hashlimit: max too large, truncated to 1048576 [ 189.454947][ T9] usb 5-1: Manufacturer: syz [ 189.458342][T12931] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 189.459267][ T9] usb 5-1: SerialNumber: syz [ 189.478083][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 189.518520][ T10] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 189.739019][T12908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.744851][T12908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.773330][T12908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.777439][T12908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.135641][T12952] macvtap1: entered promiscuous mode [ 190.137899][T12952] macvtap1: entered allmulticast mode [ 190.140588][T12952] veth1_vlan: entered allmulticast mode [ 190.147874][T12952] team0: Device macvtap1 failed to register rx_handler [ 190.151611][T12952] veth1_vlan: left allmulticast mode [ 190.379462][T12953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.384652][T12953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.658829][ T10] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 190.668164][ T10] ath9k_htc: Failed to initialize the device [ 190.740050][ T10] usb 5-1: ath9k_htc: USB layer deinitialized [ 190.762498][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 190.762514][ T40] audit: type=1400 audit(1779512830.966:1045): avc: denied { ioctl } for pid=12977 comm="syz.5.2018" path="socket:[46886]" dev="sockfs" ino=46886 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 190.768606][ T3268] usb 5-1: USB disconnect, device number 11 [ 191.368233][ T40] audit: type=1400 audit(1779512831.527:1046): avc: denied { mount } for pid=12980 comm="syz.0.2020" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 191.490678][T12988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2022'. [ 191.494919][T12988] validate_nla: 1 callbacks suppressed [ 191.494935][T12988] netlink: 'syz.4.2022': attribute type 11 has an invalid length. [ 191.502738][T12988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2022'. [ 191.507331][T12988] netlink: 'syz.4.2022': attribute type 11 has an invalid length. [ 191.540958][T12994] netlink: 'syz.1.2025': attribute type 4 has an invalid length. [ 191.703084][T13022] dns_resolver: Unsupported server list version (0) [ 191.774046][T13038] netlink: 'syz.1.2040': attribute type 3 has an invalid length. [ 191.981329][T13064] fuse: fd is not a fuse device [ 192.291182][T13073] CIFS mount error: No usable UNC path provided in device string! [ 192.291182][T13073] [ 192.295684][T13073] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 192.365607][T13077] nft_compat: unsupported protocol 0 [ 192.512657][ T40] audit: type=1400 audit(1779512832.604:1047): avc: denied { map } for pid=13082 comm="syz.5.2053" path="socket:[48526]" dev="sockfs" ino=48526 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 192.951879][T13096] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 193.851038][T13118] __nla_validate_parse: 4 callbacks suppressed [ 193.851055][T13118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2063'. [ 194.117579][ T40] audit: type=1326 audit(1779512834.101:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13134 comm="syz.5.2069" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f104d79ce59 code=0x0 [ 194.223260][T13137] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 194.230587][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2069'. [ 194.234461][T13137] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 194.245753][T13137] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 194.257432][T13137] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 194.276006][T13137] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 194.285994][T13137] bridge11: the hash_elasticity option has been deprecated and is always 16 [ 194.301232][T13137] bridge12: the hash_elasticity option has been deprecated and is always 16 [ 194.318907][T13137] bridge13: the hash_elasticity option has been deprecated and is always 16 [ 194.340208][T13137] bridge14: the hash_elasticity option has been deprecated and is always 16 [ 194.355335][T13137] bridge15: the hash_elasticity option has been deprecated and is always 16 [ 194.373428][T13137] bridge16: the hash_elasticity option has been deprecated and is always 16 [ 194.391316][T13137] bridge17: the hash_elasticity option has been deprecated and is always 16 [ 194.414560][T13137] bridge18: the hash_elasticity option has been deprecated and is always 16 [ 194.436897][T13137] bridge19: the hash_elasticity option has been deprecated and is always 16 [ 194.448810][T13137] bridge20: the hash_elasticity option has been deprecated and is always 16 [ 194.468305][T13137] bridge21: the hash_elasticity option has been deprecated and is always 16 [ 194.493398][T13137] bridge22: the hash_elasticity option has been deprecated and is always 16 [ 194.504641][T13137] bridge23: the hash_elasticity option has been deprecated and is always 16 [ 194.521734][T13137] bridge24: the hash_elasticity option has been deprecated and is always 16 [ 194.532494][T13137] bridge25: the hash_elasticity option has been deprecated and is always 16 [ 194.594636][T13137] bridge26: the hash_elasticity option has been deprecated and is always 16 [ 194.605243][T13137] bridge27: the hash_elasticity option has been deprecated and is always 16 [ 194.614073][T13137] bridge28: the hash_elasticity option has been deprecated and is always 16 [ 194.624842][T13137] bridge29: the hash_elasticity option has been deprecated and is always 16 [ 194.635754][T13137] bridge30: the hash_elasticity option has been deprecated and is always 16 [ 194.646253][T13137] bridge31: the hash_elasticity option has been deprecated and is always 16 [ 194.657191][T13137] bridge32: the hash_elasticity option has been deprecated and is always 16 [ 194.664789][T13137] bridge33: the hash_elasticity option has been deprecated and is always 16 [ 194.674320][T13137] bridge34: the hash_elasticity option has been deprecated and is always 16 [ 194.684628][T13137] bridge35: the hash_elasticity option has been deprecated and is always 16 [ 194.697792][T13137] bridge36: the hash_elasticity option has been deprecated and is always 16 [ 194.699430][T13152] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 194.706850][T13137] bridge37: the hash_elasticity option has been deprecated and is always 16 [ 194.717065][T13137] bridge38: the hash_elasticity option has been deprecated and is always 16 [ 194.736479][T13155] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2073'. [ 194.806536][T13161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2075'. [ 195.191676][T13186] netlink: 'syz.0.2084': attribute type 1 has an invalid length. [ 195.211987][T13186] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.220475][ T5814] IPVS: starting estimator thread 0... [ 195.328259][T13188] IPVS: using max 47 ests per chain, 112800 per kthread [ 196.574685][T13267] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2110'. [ 197.330342][ C3] bridge0: port 2(bridge_slave_1) entered learning state [ 197.334522][ C3] bridge0: port 1(bridge_slave_0) entered learning state [ 197.613247][T13286] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2116'. [ 199.119850][T13296] fuse: fd is not a fuse device [ 199.607498][T13322] binder: 13321:13322 ioctl 4018620d 200000004a80 returned -22 [ 199.654172][T13325] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2130'. [ 199.810074][ T5747] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 200.764329][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.300401][T13349] x_tables: ip_tables: osf match: only valid for protocol 6 [ 201.843804][T13371] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 201.967981][T13379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2147'. [ 201.971353][T13379] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2147'. [ 201.974655][T13379] netlink: 'syz.4.2147': attribute type 3 has an invalid length. [ 201.977598][T13379] netlink: 'syz.4.2147': attribute type 2 has an invalid length. [ 201.983905][T13379] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2147'. [ 202.067442][T13379] nbd: device at index 4 is going down [ 202.162041][T13381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2148'. [ 202.177868][T13381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2148'. [ 202.397879][ T40] audit: type=1400 audit(1779512841.849:1049): avc: denied { setopt } for pid=13386 comm="syz.4.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 202.601379][T13394] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2152'. [ 202.624280][T13394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13394 comm=syz.0.2152 [ 202.648177][T13394] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2152'. [ 202.655299][ T40] audit: type=1400 audit(1779512842.093:1050): avc: denied { write } for pid=13398 comm="syz.4.2153" name="/" dev="9p" ino=72876121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.722330][ T5740] Bluetooth: hci5: unexpected event for opcode 0x007f [ 203.068832][T13427] tun0: tun_chr_ioctl cmd 1074025675 [ 203.077926][T13427] tun0: persist enabled [ 203.083235][T13427] tun0: tun_chr_ioctl cmd 1074025675 [ 203.091085][T13427] tun0: persist disabled [ 203.321829][T13434] netlink: 'syz.0.2163': attribute type 1 has an invalid length. [ 203.328943][T13434] netlink: 'syz.0.2163': attribute type 4 has an invalid length. [ 203.337297][T13434] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2163'. [ 203.365003][T13433] overlayfs: overlapping lowerdir path [ 203.812075][T13437] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2164'. [ 204.009279][T13451] netlink: 'syz.5.2169': attribute type 1 has an invalid length. [ 204.051502][T13456] netlink: 'syz.1.2168': attribute type 8 has an invalid length. [ 204.446659][T13485] openvswitch: netlink: IPv4 tunnel dst address is zero [ 204.518104][ T1039] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 204.697263][ T1039] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 204.700652][ T1039] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.705036][ T1039] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.709213][ T1039] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 204.714068][ T1039] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.717672][ T1039] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.724100][ T1039] usb 5-1: config 0 descriptor?? [ 204.975709][ T1039] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 205.038545][ T1039] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 205.052666][ T1039] usb 5-1: USB disconnect, device number 12 [ 205.082632][T13498] vivid-000: ================= START STATUS ================= [ 205.087404][T13498] vivid-000: Test Pattern: 75% Colorbar [ 205.092048][ T40] audit: type=1400 audit(1779512844.376:1051): avc: denied { append } for pid=13500 comm="syz.0.2182" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 205.097639][T13496] fido_id[13496]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/5-1/report_descriptor': No such file or directory [ 205.103049][T13498] vivid-000: Fill Percentage of Frame: 100 [ 205.111169][T13498] vivid-000: Horizontal Movement: No Movement [ 205.113833][T13498] vivid-000: Vertical Movement: No Movement [ 205.122561][T13498] vivid-000: OSD Text Mode: All [ 205.125052][T13498] vivid-000: Show Border: false [ 205.127288][T13498] vivid-000: Show Square: false [ 205.129509][T13498] vivid-000: Sensor Flipped Horizontally: true [ 205.133944][T13498] vivid-000: Sensor Flipped Vertically: false [ 205.136651][T13498] vivid-000: Insert SAV Code in Image: false [ 205.140575][T13498] vivid-000: Insert EAV Code in Image: false [ 205.143072][T13498] vivid-000: Insert Video Guard Band: false [ 205.146481][T13498] vivid-000: Reduced Framerate: false [ 205.149148][T13498] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 205.152212][T13498] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 205.155308][T13498] vivid-000: Enable Capture Cropping: true [ 205.157642][T13498] vivid-000: Enable Capture Composing: true [ 205.160248][T13498] vivid-000: Enable Capture Scaler: false [ 205.162574][T13498] vivid-000: Timestamp Source: End of Frame [ 205.165025][T13498] vivid-000: Colorspace: sRGB [ 205.166909][T13498] vivid-000: Transfer Function: Default [ 205.169022][T13498] vivid-000: Y'CbCr Encoding: Default [ 205.171912][T13498] vivid-000: HSV Encoding: Hue 0-179 [ 205.174014][T13498] vivid-000: Quantization: Default [ 205.176164][T13498] vivid-000: Apply Alpha To Red Only: false [ 205.178695][T13498] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 205.182181][T13498] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 205.185488][T13498] vivid-000: DV Timings: 640x480p59 inactive [ 205.187930][T13498] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 205.190771][T13498] vivid-000: Maximum EDID Blocks: 1 [ 205.192967][T13498] vivid-000: Limited RGB Range (16-235): false [ 205.195098][T13498] vivid-000: Rx RGB Quantization Range: Automatic [ 205.197748][T13498] vivid-000: Power Present: 0x00000001 [ 205.200326][T13498] tpg source WxH: 3840x2160 (Y'CbCr) [ 205.202762][T13498] tpg field: 1 [ 205.204154][T13498] tpg crop: (0,0)/3840x2160 [ 205.205857][T13498] tpg compose: (0,0)/3840x2160 [ 205.207424][T13498] tpg colorspace: 8 [ 205.209390][T13498] tpg transfer function: 0/2 [ 205.211279][T13498] tpg Y'CbCr encoding: 0/1 [ 205.213376][T13498] tpg quantization: 0/2 [ 205.215195][T13498] tpg RGB range: 0/2 [ 205.216860][T13498] vivid-000: ================== END STATUS ================== [ 205.263052][T13511] __nla_validate_parse: 2 callbacks suppressed [ 205.263069][T13511] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2187'. [ 205.273487][T13511] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 205.287712][T13512] overlayfs: failed lookup in lower (newroot/575, name='bus', err=-40): overlapping layers [ 205.328920][ T40] audit: type=1400 audit(1779512844.591:1052): avc: denied { rename } for pid=13510 comm="syz.0.2187" name="file0" dev="tmpfs" ino=3117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 205.330529][T13512] mac80211_hwsim hwsim18 ªªªªª;: renamed from wlan0 [ 205.387631][T13523] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 205.420037][ T40] audit: type=1400 audit(1779512844.685:1053): avc: denied { accept } for pid=13526 comm="syz.0.2192" path=0000214E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 205.438838][ T40] audit: type=1400 audit(1779512844.703:1054): avc: denied { ioctl } for pid=13524 comm="syz.4.2191" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 205.466717][ T40] audit: type=1400 audit(1779512844.722:1055): avc: denied { create } for pid=13524 comm="syz.4.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 205.493392][T13525] fuse: Bad value for 'user_id' [ 205.495584][T13525] fuse: Bad value for 'user_id' [ 206.354888][T13592] /dev/sg0: Can't lookup blockdev [ 206.465722][ T40] audit: type=1326 audit(1779512845.658:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13606 comm="syz.5.2206" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f104d79ce59 code=0x0 [ 206.504536][T13605] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 206.783540][T13626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=13626 comm=syz.0.2207 [ 206.999419][T13631] xt_hashlimit: size too large, truncated to 1048576 [ 207.000093][T13632] openvswitch: netlink: Key type 2315 is out of range max 32 [ 207.000265][T13630] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2208'. [ 207.000417][T13630] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2208'. [ 207.150597][T13639] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 207.260939][T13649] netlink: 'syz.1.2213': attribute type 13 has an invalid length. [ 207.263887][T13649] netlink: 324 bytes leftover after parsing attributes in process `syz.1.2213'. [ 207.272210][T13649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13649 comm=syz.1.2213 [ 207.436672][T13668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2218'. [ 207.440531][T13668] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2218'. [ 207.480503][T13672] netlink: 'syz.5.2219': attribute type 1 has an invalid length. [ 207.486637][T13672] netlink: 'syz.5.2219': attribute type 2 has an invalid length. [ 207.609846][ T40] audit: type=1400 audit(1779512846.734:1057): avc: denied { mount } for pid=13677 comm="syz.5.2222" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 207.615846][T13678] netlink: 'syz.5.2222': attribute type 28 has an invalid length. [ 207.623615][T13678] overlayfs: failed to clone upperpath [ 207.627375][T13678] overlayfs: failed to clone upperpath [ 207.733912][T13688] cgroup: Unknown subsys name 'smackfsroot' [ 207.796339][ T40] audit: type=1400 audit(1779512846.903:1058): avc: denied { connect } for pid=13691 comm="syz.0.2227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 207.887731][T13701] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.2230'. [ 207.893909][T13701] 9p: Unknown Cache mode or invalid value f [ 207.896829][T13701] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2230'. [ 208.158736][T13716] team0: Device 26±ÿ is loopback device. Loopback devices can't be added as a team port [ 208.163745][T13716] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 208.187378][T13711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.200530][T13718] netlink: 'syz.4.2235': attribute type 4 has an invalid length. [ 208.232769][T13721] xt_hashlimit: size too large, truncated to 1048576 [ 208.361356][T13735] netlink: 'syz.5.2239': attribute type 62 has an invalid length. [ 208.369938][T13737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2240'. [ 208.414580][T13742] bond6: option primary: mode dependency failed, not supported in mode broadcast(3) [ 208.420048][T13742] bond6 (unregistering): Released all slaves [ 208.588758][T13756] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2245'. [ 208.640145][T13759] netlink: 'syz.5.2246': attribute type 1 has an invalid length. [ 208.642722][T13759] netlink: 'syz.5.2246': attribute type 2 has an invalid length. [ 208.924824][ T40] audit: type=1400 audit(1779512847.960:1059): avc: denied { read } for pid=13780 comm="syz.5.2254" path="socket:[50614]" dev="sockfs" ino=50614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 208.968476][ T5747] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 209.117117][T13788] program syz.0.2257 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.538791][ T40] audit: type=1326 audit(1779512848.531:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13795 comm="syz.5.2259" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f104d79ce59 code=0x0 [ 209.643271][T13798] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13798 comm=syz.1.2260 [ 209.795330][T13805] bond11 (unregistering): Released all slaves [ 210.090542][T13808] SELinux: failed to load policy [ 210.249933][T13819] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 210.255651][T13819] SELinux: failed to load policy [ 210.263800][T13819] netlink: 'syz.1.2265': attribute type 1 has an invalid length. [ 210.329334][T13822] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 210.792256][T13838] __nla_validate_parse: 4 callbacks suppressed [ 210.792274][T13838] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.2269'. [ 210.798041][T13838] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.2269'. [ 210.926966][ T40] audit: type=1400 audit(1779512849.832:1061): avc: denied { append } for pid=13842 comm="syz.0.2271" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 210.942304][T13843] netlink: 'syz.0.2271': attribute type 1 has an invalid length. [ 210.961323][T13843] bond4: entered promiscuous mode [ 210.965567][T13843] 8021q: adding VLAN 0 to HW filter on device bond4 [ 211.062921][T13843] bond4: (slave bridge41): making interface the new active one [ 211.065545][T13843] bridge41: entered promiscuous mode [ 211.068280][T13843] bond4: (slave bridge41): Enslaving as an active interface with an up link [ 211.150157][ T40] audit: type=1400 audit(1779512850.038:1062): avc: denied { create } for pid=13850 comm="syz.0.2272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 211.328963][T13870] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 211.422564][T13873] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 211.428702][T13873] bond5 (unregistering): Released all slaves [ 211.457846][T13875] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 211.462177][T13875] bond5 (unregistering): Released all slaves [ 211.900200][ T5740] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.919535][ T5740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.925481][ T5740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.932758][ T5740] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.938823][ T5740] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.248754][T13927] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2295'. [ 212.420444][T13903] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.422749][T13903] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.425238][T13903] bridge_slave_0: entered allmulticast mode [ 212.431319][T13903] bridge_slave_0: entered promiscuous mode [ 212.434652][T13903] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.437062][T13903] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.439238][T13903] bridge_slave_1: entered allmulticast mode [ 212.441926][T13903] bridge_slave_1: entered promiscuous mode [ 212.459314][T13903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.465275][T13903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.482046][T13903] team0: Port device team_slave_0 added [ 212.485295][T13903] team0: Port device team_slave_1 added [ 212.500017][T13903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.502151][T13903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.509714][T13903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.513928][T13903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.516055][T13903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.523597][T13903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.550489][T13903] hsr_slave_0: entered promiscuous mode [ 212.552727][T13903] hsr_slave_1: entered promiscuous mode [ 212.637286][T13903] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.642707][T13903] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.762110][T13903] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.766553][T13903] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.833412][T13949] xt_hashlimit: size too large, truncated to 1048576 [ 212.833558][T13951] xt_hashlimit: size too large, truncated to 1048576 [ 212.896937][T13903] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.904280][T13958] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2303'. [ 212.912289][T13903] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.062956][T13967] netlink: 'syz.5.2305': attribute type 1 has an invalid length. [ 213.096952][T13903] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.101046][T13903] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.136339][T13967] bond6: (slave geneve5): making interface the new active one [ 213.140291][T13967] bond6: (slave geneve5): Enslaving as an active interface with an up link [ 213.145012][ T7780] netdevsim netdevsim5 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 213.163161][ T7780] netdevsim netdevsim5 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 213.167017][ T7780] netdevsim netdevsim5 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 213.170693][ T7780] netdevsim netdevsim5 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 213.398828][T13903] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 213.406461][ T40] audit: type=1400 audit(1779512852.152:1063): avc: denied { write } for pid=13991 comm="syz.1.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 213.415930][T13903] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 213.420907][T13903] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 213.426768][T13903] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 213.431642][T13903] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 213.438183][T13903] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 213.442597][T13903] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 213.451116][T13903] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 213.560418][T13903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.574343][T13903] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.596147][ T7780] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.599685][ T7780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.610695][ T7780] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.613642][ T7780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.614992][T14009] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2316'. [ 213.622159][T14009] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2316'. [ 213.731050][ T40] audit: type=1326 audit(1779512852.461:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14016 comm="syz.5.2319" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f104d79ce59 code=0x0 [ 213.813577][T14023] comedi: valid board names for 8255 driver are: [ 213.816528][T14023] 8255 [ 213.817814][T14023] comedi: valid board names for vmk80xx driver are: [ 213.821185][T14023] vmk80xx [ 213.822716][T14023] comedi: valid board names for usbduxsigma driver are: [ 213.825820][T14023] usbduxsigma [ 213.827313][T14023] comedi: valid board names for usbduxfast driver are: [ 213.830435][T14023] usbduxfast [ 213.831940][T14023] comedi: valid board names for usbdux driver are: [ 213.834838][T14023] usbdux [ 213.836165][T14023] comedi: valid board names for ni6501 driver are: [ 213.839551][T14023] ni6501 [ 213.841091][T14023] comedi: valid board names for dt9812 driver are: [ 213.843998][T14023] dt9812 [ 213.845290][T14023] comedi: valid board names for ni_labpc_cs driver are: [ 213.852697][T14023] ni_labpc_cs [ 213.854719][T14023] comedi: valid board names for ni_daq_700 driver are: [ 213.857960][T14023] ni_daq_700 [ 213.859578][T14023] comedi: valid board names for labpc_pci driver are: [ 213.862732][T14023] labpc_pci [ 213.864146][T14023] comedi: valid board names for adl_pci9118 driver are: [ 213.866962][T14023] pci9118dg [ 213.868689][T14023] pci9118hg [ 213.870215][T14023] pci9118hr [ 213.871707][T14023] comedi: valid board names for 8255_pci driver are: [ 213.874939][T14023] 8255_pci [ 213.876542][T14023] comedi: valid board names for s526 driver are: [ 213.879546][T14023] s526 [ 213.880941][T14023] comedi: valid board names for multiq3 driver are: [ 213.883863][T14023] multiq3 [ 213.885300][T14023] comedi: valid board names for pcmuio driver are: [ 213.888097][T14023] pcmuio48 [ 213.889601][T14023] pcmuio96 [ 213.891278][T14023] comedi: valid board names for pcmmio driver are: [ 213.894415][T14023] pcmmio [ 213.895943][T14023] comedi: valid board names for pcmda12 driver are: [ 213.898969][T14023] pcmda12 [ 213.900685][T14023] comedi: valid board names for pcmad driver are: [ 213.903299][T14023] pcmad12 [ 213.904618][T14023] pcmad16 [ 213.905940][T14023] comedi: valid board names for ni_labpc driver are: [ 213.906347][T13903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.908689][T14023] lab-pc-1200 [ 213.908722][T14023] lab-pc-1200ai [ 213.908731][T14023] lab-pc+ [ 213.908738][T14023] comedi: valid board names for atmio16 driver are: [ 213.918887][T14023] atmio16 [ 213.920268][T14023] atmio16d [ 213.921629][T14023] comedi: valid board names for ni_at_ao driver are: [ 213.924745][T14023] at-ao-6 [ 213.926075][T14023] at-ao-10 [ 213.927506][T14023] comedi: valid board names for ni_at_a2150 driver are: [ 213.931031][T14023] ni_at_a2150 [ 213.932864][T14023] comedi: valid board names for adq12b driver are: [ 213.935821][T14023] adq12b [ 213.937070][T14023] comedi: valid board names for mpc624 driver are: [ 213.937568][T13903] veth0_vlan: entered promiscuous mode [ 213.939870][T14023] mpc624 [ 213.939885][T14023] comedi: valid board names for c6xdigio driver are: [ 213.939895][T14023] c6xdigio [ 213.939903][T14023] comedi: valid board names for aio_iiro_16 driver are: [ 213.939913][T14023] aio_iiro_16 [ 213.939921][T14023] comedi: valid board names for aio_aio12_8 driver are: [ 213.939930][T14023] aio_aio12_8 [ 213.939938][T14023] aio_ai12_8 [ 213.939946][T14023] aio_ao12_4 [ 213.939954][T14023] comedi: valid board names for fl512 driver are: [ 213.939963][T14023] fl512 [ 213.939970][T14023] comedi: valid board names for dmm32at driver are: [ 213.939982][T14023] dmm32at [ 213.939989][T14023] comedi: valid board names for dt282x driver are: [ 213.939997][T14023] dt2821 [ 213.940004][T14023] dt2821-f [ 213.940009][T14023] dt2821-g [ 213.940020][T14023] dt2823 [ 213.940027][T14023] dt2824-pgh [ 213.940033][T14023] dt2824-pgl [ 213.940040][T14023] dt2825 [ 213.940046][T14023] dt2827 [ 213.940052][T14023] dt2828 [ 213.940059][T14023] dt2829 [ 213.940065][T14023] dt21-ez [ 213.940072][T14023] dt23-ez [ 213.940079][T14023] dt24-ez [ 213.940085][T14023] dt24-ez-pgl [ 213.940092][T14023] comedi: valid board names for dt2817 driver are: [ 213.940101][T14023] dt2817 [ 213.940108][T14023] comedi: valid board names for dt2815 driver are: [ 213.940115][T14023] dt2815 [ 213.940120][T14023] comedi: valid board names for dt2814 driver are: [ 213.940130][T14023] dt2814 [ 213.940137][T14023] comedi: valid board names for dt2811 driver are: [ 213.940145][T14023] dt2811-pgh [ 213.940151][T14023] dt2811-pgl [ 213.940158][T14023] comedi: valid board names for dt2801 driver are: [ 213.940165][T14023] dt2801 [ 213.940172][T14023] comedi: valid board names for das6402 driver are: [ 213.940180][T14023] das6402-12 [ 213.940187][T14023] das6402-16 [ 213.940194][T14023] comedi: valid board names for das1800 driver are: [ 213.940203][T14023] das-1701st [ 213.940209][T14023] das-1701st-da [ 213.940217][T14023] das-1702st [ 213.940224][T14023] das-1702st-da [ 213.940231][T14023] das-1702hr [ 213.940237][T14023] das-1702hr-da [ 213.940244][T14023] das-1701ao [ 213.940251][T14023] das-1702ao [ 213.940257][T14023] das-1801st [ 213.940264][T14023] das-1801st-da [ 213.940271][T14023] das-1802st [ 213.940277][T14023] das-1802st-da [ 213.940285][T14023] das-1802hr [ 213.940291][T14023] das-1802hr-da [ 213.940298][T14023] das-1801hc [ 213.940305][T14023] das-1802hc [ 213.940312][T14023] das-1801ao [ 213.940319][T14023] das-1802ao [ 213.940326][T14023] comedi: valid board names for das800 driver are: [ 213.940334][T14023] das-800 [ 213.940341][T14023] cio-das800 [ 213.940348][T14023] das-801 [ 213.940354][T14023] cio-das801 [ 213.940361][T14023] das-802 [ 213.940367][T14023] cio-das802 [ 213.940373][T14023] cio-das802/16 [ 213.940380][T14023] comedi: valid board names for isa-das08 driver are: [ 213.940388][T14023] isa-das08 [ 213.940395][T14023] das08-pgm [ 213.940402][T14023] das08-pgh [ 213.940408][T14023] das08-pgl [ 213.940415][T14023] das08-aoh [ 213.940422][T14023] das08-aol [ 213.940428][T14023] das08-aom [ 213.940435][T14023] das08/jr-ao [ 213.940442][T14023] das08jr-16-ao [ 213.940448][T14023] pc104-das08 [ 213.940455][T14023] das08jr/16 [ 213.940462][T14023] comedi: valid board names for das16m1 driver are: [ 213.940470][T14023] das16m1 [ 213.940477][T14023] comedi: valid board names for dac02 driver are: [ 213.940485][T14023] dac02 [ 213.940492][T14023] comedi: valid board names for rti802 driver are: [ 213.940500][T14023] rti802 [ 213.940506][T14023] comedi: valid board names for rti800 driver are: [ 213.940514][T14023] rti800 [ 213.940520][T14023] rti815 [ 213.940528][T14023] comedi: valid board names for pcm3724 driver are: [ 213.940536][T14023] pcm3724 [ 213.940543][T14023] comedi: valid board names for pcl818 driver are: [ 213.940551][T14023] pcl818l [ 213.940558][T14023] pcl818h [ 213.940564][T14023] pcl818hd [ 213.940571][T14023] pcl818hg [ 213.940578][T14023] pcl818 [ 213.940585][T14023] pcl718 [ 213.940591][T14023] pcm3718 [ 213.940598][T14023] comedi: valid board names for pcl816 driver are: [ 213.940606][T14023] pcl816 [ 213.940613][T14023] pcl814b [ 213.940620][T14023] comedi: valid board names for pcl812 driver are: [ 213.940628][T14023] pcl812 [ 213.940635][T14023] pcl812pg [ 213.940642][T14023] acl8112pg [ 213.940648][T14023] acl8112dg [ 213.940655][T14023] acl8112hg [ 213.940662][T14023] a821pgl [ 213.940668][T14023] a821pglnda [ 213.940676][T14023] a821pgh [ 213.940682][T14023] a822pgl [ 213.940689][T14023] a822pgh [ 213.940695][T14023] a823pgl [ 213.940701][T14023] a823pgh [ 213.940707][T14023] pcl813 [ 213.940714][T14023] pcl813b [ 213.940720][T14023] acl8113 [ 213.940727][T14023] iso813 [ 213.940733][T14023] acl8216 [ 213.940740][T14023] a826pg [ 213.940747][T14023] comedi: valid board names for pcl730 driver are: [ 213.940755][T14023] pcl730 [ 213.940762][T14023] iso730 [ 213.940768][T14023] acl7130 [ 213.940775][T14023] pcm3730 [ 213.940781][T14023] pcl725 [ 213.940787][T14023] p8r8dio [ 213.940794][T14023] acl7225b [ 213.940801][T14023] p16r16dio [ 213.940808][T14023] pcl733 [ 213.940814][T14023] pcl734 [ 213.940821][T14023] opmm-1616-xt [ 213.940827][T14023] pearl-mm-p [ 213.940834][T14023] ir104-pbf [ 213.940839][T14023] comedi: valid board names for pcl726 driver are: [ 213.940847][T14023] pcl726 [ 213.940854][T14023] pcl727 [ 213.940860][T14023] pcl728 [ 213.940867][T14023] acl6126 [ 213.940873][T14023] acl6128 [ 213.940880][T14023] comedi: valid board names for pcl724 driver are: [ 213.940889][T14023] pcl724 [ 213.940895][T14023] pcl722 [ 213.940902][T14023] pcl731 [ 213.940908][T14023] acl7122 [ 213.940915][T14023] acl7124 [ 213.940922][T14023] pet48dio [ 213.940929][T14023] pcmio48 [ 213.940935][T14023] onyx-mm-dio [ 213.940942][T14023] comedi: valid board names for pcl711 driver are: [ 213.940950][T14023] pcl711 [ 213.940957][T14023] pcl711b [ 213.940964][T14023] acl8112hg [ 213.940970][T14023] acl8112dg [ 213.940977][T14023] comedi: valid board names for amplc_pc263 driver are: [ 213.940986][T14023] pc263 [ 213.940993][T14023] comedi: valid board names for amplc_pc236 driver are: [ 213.941001][T14023] pc36at [ 213.941008][T14023] comedi: valid board names for amplc_dio200 driver are: [ 213.941022][T14023] pc212e [ 213.941029][T14023] pc214e [ 213.941035][T14023] pc215e [ 213.941041][T14023] pc218e [ 213.941048][T14023] pc272e [ 213.941055][T14023] comedi: valid board names for comedi_parport driver are: [ 213.941064][T14023] comedi_parport [ 213.941073][T14023] comedi: valid board names for comedi_test driver are: [ 213.941082][T14023] comedi_test [ 213.941089][T14023] comedi: valid board names for comedi_bond driver are: [ 213.941100][T14023] comedi_bond [ 214.035160][T14039] xt_CT: No such helper "snmp_trap" [ 214.049338][T13903] veth1_vlan: entered promiscuous mode [ 214.178320][ T5740] Bluetooth: hci0: command tx timeout [ 214.198661][T13903] veth0_macvtap: entered promiscuous mode [ 214.216948][T13903] veth1_macvtap: entered promiscuous mode [ 214.228485][T13903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.236057][T13903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.245916][ T7790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.250266][ T7790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.256059][ T7790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.259991][ T7790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.338265][ T7790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.344170][ T7790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.389776][ T7790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.395075][ T7790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.408940][ T40] audit: type=1400 audit(1779512853.088:1065): avc: denied { mounton } for pid=13903 comm="syz-executor" path="/syzkaller.JW9XRl/syz-tmp" dev="sda1" ino=2040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 214.567423][T14054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2326'. [ 214.572026][T14054] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2326'. [ 214.578948][T14054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=14054 comm=syz.0.2326 [ 214.637258][T14061] xt_CONNSECMARK: invalid mode: 0 [ 214.715682][T14067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=14067 comm=syz.1.2331 [ 214.732968][T14069] bond7: ARP target 9.0.0.0 is already present [ 214.736800][T14069] bond7: option arp_ip_target: invalid value (9) [ 214.743188][T14069] bond7 (unregistering): Released all slaves [ 215.047795][T14093] /dev/nullb0: Can't open blockdev [ 215.052954][T14092] /dev/nullb0: Can't open blockdev [ 215.500691][T14104] ip6tnl1: entered promiscuous mode [ 215.971638][T14116] fuse: fd is not a fuse device [ 216.132806][T14126] FAT-fs (loop0): unable to read boot sector [ 216.172267][T14131] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 216.265956][T14135] SELinux: policydb version 0 does not match my version range 15-35 [ 216.268883][T14135] SELinux: failed to load policy [ 216.390624][ T5740] Bluetooth: hci0: command tx timeout [ 216.539360][ T40] audit: type=1400 audit(1779512855.081:1066): avc: denied { accept } for pid=14152 comm="syz.0.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 216.665328][T14148] binder: 14144:14148 ioctl c0306201 200000000080 returned -14 [ 216.976803][T14164] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2365'. [ 217.220030][ T5747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.226531][ T5747] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.231345][ T5747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.238379][ T5747] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.244519][ T5747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.471211][T14181] only policy match revision 0 supported [ 217.471231][T14181] unable to load match [ 217.655831][T14193] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.2373'. [ 217.673119][T14193] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 217.682828][T14197] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.2373'. [ 217.690958][T14197] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 217.693489][T14196] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2371'. [ 217.754560][T14203] vivid-000: ================= START STATUS ================= [ 217.762649][T14203] vivid-000: Test Pattern: 75% Colorbar [ 217.764885][T14203] vivid-000: Fill Percentage of Frame: 100 [ 217.773898][T14203] vivid-000: Horizontal Movement: No Movement [ 217.775976][T14203] vivid-000: Vertical Movement: No Movement [ 217.778069][T14203] vivid-000: OSD Text Mode: All [ 217.780016][T14203] vivid-000: Show Border: false [ 217.782133][T14203] vivid-000: Show Square: false [ 217.784391][T14203] vivid-000: Sensor Flipped Horizontally: true [ 217.787259][T14203] vivid-000: Sensor Flipped Vertically: false [ 217.789999][T14203] vivid-000: Insert SAV Code in Image: false [ 217.792959][T14203] vivid-000: Insert EAV Code in Image: false [ 217.795580][T14203] vivid-000: Insert Video Guard Band: false [ 217.799585][T14203] vivid-000: Reduced Framerate: false [ 217.802378][T14203] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 217.806010][T14203] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 217.809335][T14203] vivid-000: Enable Capture Cropping: true grabbed [ 217.812278][T14203] vivid-000: Enable Capture Composing: true grabbed [ 217.815904][T14203] vivid-000: Enable Capture Scaler: false grabbed [ 217.819246][T14203] vivid-000: Timestamp Source: End of Frame [ 217.822048][T14203] vivid-000: Colorspace: Rec. 709 [ 217.824401][T14203] vivid-000: Transfer Function: Default [ 217.826752][T14203] vivid-000: Y'CbCr Encoding: Default [ 217.828777][T14203] vivid-000: HSV Encoding: Hue 0-179 [ 217.830966][T14203] vivid-000: Quantization: Default [ 217.833959][T14203] vivid-000: Apply Alpha To Red Only: false [ 217.836776][T14203] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 217.839861][T14203] vivid-000: DV Timings Signal Mode: Current DV Timings [ 217.845931][T14203] vivid-000: DV Timings: 640x480p59 inactive [ 217.848621][T14203] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 217.851952][T14203] vivid-000: Maximum EDID Blocks: 1 [ 217.854414][T14203] vivid-000: Limited RGB Range (16-235): true [ 217.855500][ C3] ================================================================== [ 217.857179][T14203] vivid-000: Rx RGB Quantization Range: [ 217.859821][T14173] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.859943][T14173] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.859919][ C3] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0xa51/0xb30 [ 217.859970][ C3] Read of size 2 at addr ffff8881236f93f4 by task syz.1.2375/14213 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 217.860065][T14173] bridge_slave_0: entered allmulticast mode [ 217.861425][T14173] bridge_slave_0: entered promiscuous mode [ 217.862478][T14203] Automatic [ 217.862910][T14173] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.862985][T14173] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.863062][T14173] bridge_slave_1: entered allmulticast mode [ 217.863813][T14173] bridge_slave_1: entered promiscuous mode [ 217.864701][ C3] [ 217.864713][ C3] CPU: 3 UID: 0 PID: 14213 Comm: syz.1.2375 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.864729][ C3] Tainted: [L]=SOFTLOCKUP [ 217.864737][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 217.864744][ C3] Call Trace: [ 217.864748][ C3] [ 217.864753][ C3] dump_stack_lvl+0x100/0x190 [ 217.864769][ C3] print_report+0x13d/0x4b0 [ 217.864785][ C3] ? __virt_addr_valid+0x239/0x430 [ 217.864799][ C3] ? qdisc_pkt_len_segs_init+0xa51/0xb30 [ 217.864812][ C3] kasan_report+0xdf/0x1d0 [ 217.864825][ C3] ? qdisc_pkt_len_segs_init+0xa51/0xb30 [ 217.864839][ C3] qdisc_pkt_len_segs_init+0xa51/0xb30 [ 217.864854][ C3] __dev_queue_xmit+0x270/0x4950 [ 217.864871][ C3] ? kmem_cache_alloc_node_noprof+0x2a9/0x6f0 [ 217.864888][ C3] ? __asan_memcpy+0x3c/0x60 [ 217.864905][ C3] ? __pfx___dev_queue_xmit+0x10/0x10 [ 217.864922][ C3] ? __pskb_pull_tail+0x86f/0x19b0 [ 217.864936][ C3] ? __asan_memcpy+0x3c/0x60 [ 217.864953][ C3] ? __asan_memset+0x23/0x50 [ 217.864968][ C3] ? __skb_pad+0x252/0x600 [ 217.864982][ C3] ? hsr_create_tagged_frame+0x795/0xf00 [ 217.865097][ C3] hsr_forward_skb+0xdcf/0x28a0 [ 217.865110][ C3] ? __pfx_hsr_drop_frame+0x10/0x10 [ 217.865124][ C3] ? __pfx_hsr_forward_skb+0x10/0x10 [ 217.865139][ C3] hsr_handle_frame+0x82f/0xac0 [ 217.865152][ C3] ? __pfx_hsr_handle_frame+0x10/0x10 [ 217.865164][ C3] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 217.865183][ C3] ? common_startup_64+0x13e/0x148 [ 217.865200][ C3] ? update_group_capacity+0x8f/0xb00 [ 217.865211][ C3] ? arch_scale_cpu_capacity+0x15/0xb0 [ 217.865227][ C3] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 217.865245][ C3] ? arch_scale_cpu_capacity+0x15/0xb0 [ 217.865264][ C3] ? css_rstat_updated+0x1ce/0x5a0 [ 217.865280][ C3] __netif_receive_skb_list_core+0x353/0x940 [ 217.865299][ C3] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 217.865316][ C3] ? lock_acquire+0x1b1/0x370 [ 217.865331][ C3] ? __lock_acquire+0x4a5/0x2630 [ 217.865346][ C3] netif_receive_skb_list_internal+0x722/0xd40 [ 217.865365][ C3] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 217.865384][ C3] ? __lock_acquire+0x4a5/0x2630 [ 217.865398][ C3] ? dev_gro_receive+0x238/0x3060 [ 217.865432][ C3] napi_complete_done+0x221/0x940 [ 217.865449][ C3] ? __pfx_napi_complete_done+0x10/0x10 [ 217.865466][ C3] ? find_held_lock+0x2b/0x80 [ 217.865480][ C3] ? gro_cell_poll+0x441/0x690 [ 217.865513][ C3] ? gro_cell_poll+0x441/0x690 [ 217.865524][ C3] gro_cell_poll+0x46e/0x690 [ 217.865536][ C3] __napi_poll.constprop.0+0xaf/0x450 [ 217.865553][ C3] net_rx_action+0xa40/0xf20 [ 217.865570][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 217.865607][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 217.865624][ C3] ? hrtimer_bases_first+0x1a0/0x210 [ 217.865641][ C3] ? kvm_sched_clock_read+0x11/0x20 [ 217.865657][ C3] ? sched_clock+0x38/0x60 [ 217.865669][ C3] ? sched_clock_cpu+0x6c/0x570 [ 217.865685][ C3] ? sched_clock+0x38/0x60 [ 217.865697][ C3] ? rcu_is_watching+0x12/0xc0 [ 217.865716][ C3] handle_softirqs+0x1ea/0xa00 [ 217.865732][ C3] ? __sysvec_apic_timer_interrupt+0x10b/0x460 [ 217.865749][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 217.865766][ C3] ? irqtime_account_irq+0x176/0x2d0 [ 217.865780][ C3] ? tun_rx_batched.isra.0+0x402/0x750 [ 217.865803][ C3] do_softirq+0xac/0xe0 [ 217.865819][ C3] [ 217.865823][ C3] [ 217.865826][ C3] __local_bh_enable_ip+0xf8/0x120 [ 217.865843][ C3] tun_rx_batched.isra.0+0x407/0x750 [ 217.865859][ C3] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 217.865876][ C3] ? rcu_is_watching+0x12/0xc0 [ 217.865892][ C3] ? tun_get_user+0x1cc8/0x3c20 [ 217.865909][ C3] tun_get_user+0x1e31/0x3c20 [ 217.865928][ C3] ? __pfx_tun_get_user+0x10/0x10 [ 217.865945][ C3] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 217.865962][ C3] ? find_held_lock+0x2b/0x80 [ 217.865972][ C3] ? tun_get+0x191/0x370 [ 217.865986][ C3] ? tun_get+0x191/0x370 [ 217.866002][ C3] tun_chr_write_iter+0xdc/0x200 [ 217.866018][ C3] vfs_write+0x6ac/0x1070 [ 217.866031][ C3] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 217.866048][ C3] ? __pfx_vfs_write+0x10/0x10 [ 217.866060][ C3] ? find_held_lock+0x2b/0x80 [ 217.866074][ C3] ksys_write+0x12a/0x250 [ 217.866087][ C3] ? __pfx_ksys_write+0x10/0x10 [ 217.866099][ C3] ? rcu_is_watching+0x12/0xc0 [ 217.866117][ C3] do_syscall_64+0x10b/0xf80 [ 217.866134][ C3] ? clear_bhb_loop+0x40/0x90 [ 217.866147][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.866159][ C3] RIP: 0033:0x7f5f73b9ce59 [ 217.866169][ C3] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.866181][ C3] RSP: 002b:00007f5f749e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 217.866214][ C3] RAX: ffffffffffffffda RBX: 00007f5f73e16090 RCX: 00007f5f73b9ce59 [ 217.866222][ C3] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000006 [ 217.866229][ C3] RBP: 00007f5f73c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 217.866236][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.866242][ C3] R13: 00007f5f73e16128 R14: 00007f5f73e16090 R15: 00007ffc24277188 [ 217.866253][ C3] [ 217.866257][ C3] [ 217.867884][T14203] [ 217.870562][ C3] The buggy address belongs to the physical page: [ 217.870575][ C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x1799 pfn:0x1236f9 [ 217.875032][T14203] vivid-000: Power Present: [ 217.875190][ T40] audit: type=1400 audit(1779512856.326:1067): avc: denied { write } for pid=5722 comm="syz-executor" path="pipe:[5892]" dev="pipefs" ino=5892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 217.877676][ C3] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 217.877697][ C3] raw: 057ff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 217.877706][ C3] raw: 0000000000001799 0000000000000000 00000000ffffffff 0000000000000000 [ 217.877712][ C3] page dumped because: kasan: bad access detected [ 217.877718][ C3] page_owner tracks the page as freed [ 217.877722][ C3] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 13358, tgid 13358 (syz.0.2141), ts 202157997463, free_ts 203312193940 [ 217.877740][ C3] post_alloc_hook+0xfd/0x120 [ 217.880284][T14203] 0x00000001 [ 217.881398][ C3] get_page_from_freelist+0x11a6/0x33b0 [ 217.884744][T14203] [ 217.886933][ C3] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 217.886956][ C3] alloc_pages_mpol+0x1fb/0x540 [ 217.886966][ C3] folio_alloc_mpol_noprof+0x36/0x260 [ 217.886978][ C3] shmem_alloc_folio+0x135/0x160 [ 217.886991][ C3] shmem_alloc_and_add_folio+0x371/0xd40 [ 217.887006][ C3] shmem_get_folio_gfp+0x6ab/0x1900 [ 217.888448][ T40] audit: type=1400 audit(1779512856.326:1068): avc: denied { read } for pid=5127 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 217.889468][T14203] tpg source WxH: 1280x720 (Y'CbCr) [ 217.889768][T14173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.890873][ T40] audit: type=1400 audit(1779512856.326:1069): avc: denied { search } for pid=5127 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.891327][ C3] shmem_write_begin+0x1a4/0x420 [ 217.892459][T14203] tpg field: 1 [ 217.893625][T14173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.893807][ T40] audit: type=1400 audit(1779512856.326:1070): avc: denied { write search } for pid=5127 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.895640][ T40] audit: type=1400 audit(1779512856.326:1071): avc: denied { add_name } for pid=5127 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.895692][ T40] audit: type=1400 audit(1779512856.326:1072): avc: denied { create } for pid=5127 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 217.896101][ C3] generic_perform_write+0x292/0xa40 [ 217.898295][T14203] tpg crop: (0,0)/1280x720 [ 217.901483][ C3] shmem_file_write_iter+0x10e/0x140 [ 217.901505][ C3] __kernel_write_iter+0x2ac/0x920 [ 217.901516][ C3] dump_user_range+0x3f9/0xad0 [ 217.901526][ C3] elf_core_dump+0x2d5f/0x3d10 [ 217.901536][ C3] vfs_coredump+0x29a0/0x5770 [ 217.901545][ C3] get_signal+0x2162/0x2210 [ 217.902973][T14203] tpg compose: (0,0)/1280x720 [ 217.904122][ C3] page last free pid 13358 tgid 13358 stack trace: [ 217.904137][ C3] free_unref_folios+0xa0d/0x16f0 [ 217.906186][T14203] tpg colorspace: 3 [ 217.907772][ C3] folios_put_refs+0x571/0xa90 [ 217.907795][ C3] shmem_undo_range+0x5e5/0x1570 [ 217.907805][ C3] shmem_evict_inode+0x3f3/0xc40 [ 217.907814][ C3] evict+0x3c2/0xad0 [ 217.907823][ C3] iput.part.0+0x605/0xf50 [ 217.907832][ C3] iput+0x35/0x40 [ 217.907841][ C3] dentry_unlink_inode+0x2c0/0x4c0 [ 217.907857][ C3] __dentry_kill+0x1d0/0x690 [ 217.907875][ C3] finish_dput+0x76/0x480 [ 217.907884][ C3] dput.part.0+0x456/0x570 [ 217.907894][ C3] dput+0x1f/0x30 [ 217.907903][ C3] __fput+0x519/0xb50 [ 217.907918][ C3] task_work_run+0x150/0x240 [ 217.907933][ C3] do_exit+0x951/0x2af0 [ 217.907944][ C3] do_group_exit+0xd5/0x2a0 [ 217.907971][ C3] [ 217.907975][ C3] Memory state around the buggy address: [ 217.907982][ C3] ffff8881236f9280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 218.237414][ C3] ffff8881236f9300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 218.240725][ C3] >ffff8881236f9380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 218.244153][ C3] ^ [ 218.247239][ C3] ffff8881236f9400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 218.250936][ C3] ffff8881236f9480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 218.254863][ C3] ================================================================== [ 218.258253][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 218.261351][ C3] CPU: 3 UID: 0 PID: 14213 Comm: syz.1.2375 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.265469][ C3] Tainted: [L]=SOFTLOCKUP [ 218.267527][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 218.272708][ C3] Call Trace: [ 218.274176][ C3] [ 218.275373][ C3] dump_stack_lvl+0x100/0x190 [ 218.277330][ C3] vpanic+0x552/0x970 [ 218.278997][ C3] ? __pfx_vpanic+0x10/0x10 [ 218.281090][ C3] ? mark_held_locks+0x40/0x70 [ 218.283293][ C3] ? irqentry_exit+0x24d/0x7e0 [ 218.285359][ C3] ? qdisc_pkt_len_segs_init+0xa51/0xb30 [ 218.287635][ C3] panic+0xd1/0xe0 [ 218.289083][ C3] ? __pfx_panic+0x10/0x10 [ 218.290696][ C3] ? check_panic_on_warn+0x1f/0x90 [ 218.292687][ C3] check_panic_on_warn.cold+0x19/0x34 [ 218.295022][ C3] end_report.part.0+0x3a/0x90 [ 218.297004][ C3] kasan_report.cold+0xe/0x18 [ 218.298987][ C3] ? qdisc_pkt_len_segs_init+0xa51/0xb30 [ 218.300867][ C3] qdisc_pkt_len_segs_init+0xa51/0xb30 [ 218.303109][ C3] __dev_queue_xmit+0x270/0x4950 [ 218.305456][ C3] ? kmem_cache_alloc_node_noprof+0x2a9/0x6f0 [ 218.307749][ C3] ? __asan_memcpy+0x3c/0x60 [ 218.309809][ C3] ? __pfx___dev_queue_xmit+0x10/0x10 [ 218.312136][ C3] ? __pskb_pull_tail+0x86f/0x19b0 [ 218.314091][ C3] ? __asan_memcpy+0x3c/0x60 [ 218.316074][ C3] ? __asan_memset+0x23/0x50 [ 218.317646][ C3] ? __skb_pad+0x252/0x600 [ 218.319016][ C3] ? hsr_create_tagged_frame+0x795/0xf00 [ 218.321131][ C3] hsr_forward_skb+0xdcf/0x28a0 [ 218.323264][ C3] ? __pfx_hsr_drop_frame+0x10/0x10 [ 218.325086][ C3] ? __pfx_hsr_forward_skb+0x10/0x10 [ 218.327569][ C3] hsr_handle_frame+0x82f/0xac0 [ 218.329781][ C3] ? __pfx_hsr_handle_frame+0x10/0x10 [ 218.331706][ C3] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 218.333984][ C3] ? common_startup_64+0x13e/0x148 [ 218.336241][ C3] ? update_group_capacity+0x8f/0xb00 [ 218.338460][ C3] ? arch_scale_cpu_capacity+0x15/0xb0 [ 218.340864][ C3] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 218.343968][ C3] ? arch_scale_cpu_capacity+0x15/0xb0 [ 218.346291][ C3] ? css_rstat_updated+0x1ce/0x5a0 [ 218.348303][ C3] __netif_receive_skb_list_core+0x353/0x940 [ 218.350804][ C3] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 218.353339][ C3] ? lock_acquire+0x1b1/0x370 [ 218.355715][ C3] ? __lock_acquire+0x4a5/0x2630 [ 218.358126][ C3] netif_receive_skb_list_internal+0x722/0xd40 [ 218.360865][ C3] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 218.363561][ C3] ? __lock_acquire+0x4a5/0x2630 [ 218.365260][ C3] ? dev_gro_receive+0x238/0x3060 [ 218.366973][ C3] napi_complete_done+0x221/0x940 [ 218.369214][ C3] ? __pfx_napi_complete_done+0x10/0x10 [ 218.371506][ C3] ? find_held_lock+0x2b/0x80 [ 218.373519][ C3] ? gro_cell_poll+0x441/0x690 [ 218.375325][ C3] ? gro_cell_poll+0x441/0x690 [ 218.376978][ C3] gro_cell_poll+0x46e/0x690 [ 218.378732][ C3] __napi_poll.constprop.0+0xaf/0x450 [ 218.380628][ C3] net_rx_action+0xa40/0xf20 [ 218.382371][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 218.384688][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 218.386708][ C3] ? hrtimer_bases_first+0x1a0/0x210 [ 218.388857][ C3] ? kvm_sched_clock_read+0x11/0x20 [ 218.390532][ C3] ? sched_clock+0x38/0x60 [ 218.392074][ C3] ? sched_clock_cpu+0x6c/0x570 [ 218.393754][ C3] ? sched_clock+0x38/0x60 [ 218.395264][ C3] ? rcu_is_watching+0x12/0xc0 [ 218.396839][ C3] handle_softirqs+0x1ea/0xa00 [ 218.398379][ C3] ? __sysvec_apic_timer_interrupt+0x10b/0x460 [ 218.400388][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 218.402450][ C3] ? irqtime_account_irq+0x176/0x2d0 [ 218.404607][ C3] ? tun_rx_batched.isra.0+0x402/0x750 [ 218.406621][ C3] do_softirq+0xac/0xe0 [ 218.408362][ C3] [ 218.409422][ C3] [ 218.410639][ C3] __local_bh_enable_ip+0xf8/0x120 [ 218.412586][ C3] tun_rx_batched.isra.0+0x407/0x750 [ 218.414979][ C3] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 218.417414][ C3] ? rcu_is_watching+0x12/0xc0 [ 218.419565][ C3] ? tun_get_user+0x1cc8/0x3c20 [ 218.421541][ C3] tun_get_user+0x1e31/0x3c20 [ 218.423636][ C3] ? __pfx_tun_get_user+0x10/0x10 [ 218.425774][ C3] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 218.428044][ C3] ? find_held_lock+0x2b/0x80 [ 218.429953][ C3] ? tun_get+0x191/0x370 [ 218.431382][ C3] ? tun_get+0x191/0x370 [ 218.432819][ C3] tun_chr_write_iter+0xdc/0x200 [ 218.434594][ C3] vfs_write+0x6ac/0x1070 [ 218.436031][ C3] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 218.437857][ C3] ? __pfx_vfs_write+0x10/0x10 [ 218.439480][ C3] ? find_held_lock+0x2b/0x80 [ 218.441279][ C3] ksys_write+0x12a/0x250 [ 218.442780][ C3] ? __pfx_ksys_write+0x10/0x10 [ 218.444341][ C3] ? rcu_is_watching+0x12/0xc0 [ 218.445846][ C3] do_syscall_64+0x10b/0xf80 [ 218.447289][ C3] ? clear_bhb_loop+0x40/0x90 [ 218.448824][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.450801][ C3] RIP: 0033:0x7f5f73b9ce59 [ 218.452290][ C3] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.460169][ C3] RSP: 002b:00007f5f749e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 218.463374][ C3] RAX: ffffffffffffffda RBX: 00007f5f73e16090 RCX: 00007f5f73b9ce59 [ 218.466561][ C3] RDX: 000000000000fdef RSI: 00002000000002c0 RDI: 0000000000000006 [ 218.469669][ C3] RBP: 00007f5f73c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 218.472714][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.475768][ C3] R13: 00007f5f73e16128 R14: 00007f5f73e16090 R15: 00007ffc24277188 [ 218.478805][ C3] [ 218.480686][ C3] Kernel Offset: disabled [ 218.482444][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:03:22 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff9615b348 RBX=00000000000001d2 RCX=0000000000046cca RDX=ffffffff9617e118 RSI=0000000000000499 RDI=ffffffff97a953e8 RBP=0000000000000030 RSP=ffffc9000383e8e8 R8 =ffffffff9617e148 R9 =00000000000002c8 R10=ffffc9000383ea78 R11=0000000000000000 R12=ffffffff81e41b20 R13=ffffc9000383e990 R14=ffffffff81e42930 R15=ffffffff97aa5fa8 RIP=ffffffff81e432e8 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055557693f500 ffffffff 00c01300 GS =0000 ffff8880d636a000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5f73d0d2c0 CR3=0000000038986000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000f802fefc Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73657479625f6e69 5f65676173752e42 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc24277676 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc24277676 00007ffc2427767c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f73c33352 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f73c33392 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f73c334f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f73c33384 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff91adc70e RDX=1ffff9200070de86 RSI=ffffc9000386f950 RDI=ffffc9000386f430 RBP=0000000000000000 RSP=ffffc9000386f380 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=000000000003b6ff R12=ffffc9000386f440 R13=ffffc9000386f3f0 R14=ffffc9000386f980 R15=ffffc9000386f424 RIP=ffffffff81b7e36d RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055557c683540 ffffffff 00c01300 GS =0000 ffff8880d646a000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f81711ea540 CR3=0000000025f20000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000044402 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7cdc1ed823 00007f7cdc1ed823 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6370722076636572 206f742064656c69 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7cdc1ede80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7cdc1ede80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557c696ad8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616e676973206e77 6f6e6b6e75000a29 7325203a6425206f 6e7272652820000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444b424c56054b52 4a4b4e4b50000a0c 5600051f4100054a 4b5757400d05000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 05ac841000048210 000004060278b000 236f656469762f76 65642f01ffffffff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffe7080003 06800404a4ac0800 0100000008060601 3fa41c8080808404 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 880006a80302b8c2 04840006a4030404 0006a00300000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffe7080003 06800404a4ac0800 0100000008060601 3fa41c8080808404 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 05ac841000048210 000004060278b000 236f656469762f76 65642f01ffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0102808010000291 8004010000060806 060162920681a208 000291e003001000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000005bb8b RBX=000000000000001a RCX=ffffc90007191000 RDX=0000000000080000 RSI=ffffffff81e7508c RDI=ffff88802b66ca00 RBP=0000000000000001 RSP=ffffc9000378f9b8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff920006f1f39 R13=0000000000000200 R14=ffff888035a50000 R15=ffffc9000378fa80 RIP=ffffffff81e7508e RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5f74a096c0 ffffffff 00c00000 GS =0000 ffff8880d656a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5f749e8d58 CR3=0000000054648000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 307a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff1ae9d246 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff1ae9d246 00007fff1ae9d24c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8171233352 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8171233392 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f81712334f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8171233384 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff857ea7a5 RDI=ffffffff9b47c1c0 RBP=ffffffff9b47c180 RSP=ffffc900006f7ad8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=735f656764697262 R12=0000000000000000 R13=0000000000000069 R14=0000000000000010 R15=ffffffff857ea740 RIP=ffffffff857ea7cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f5f749e86c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d666a000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000010000 CR3=0000000054648000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffff0 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc24277676 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc24277676 00007ffc2427767c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f73c33352 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f73c33392 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f73c334f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f73c33384 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5f73ded5f8 00007f5f73ded5c8 00007f5f73ded600 00007f5f73ded5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000