last executing test programs: 32.121416721s ago: executing program 2 (id=407): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = creat(&(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1ab) setsockopt$llc_int(r3, 0x10c, 0x5, &(0x7f00000007c0)=0x9, 0x4) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000ddb6000040"]) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) setuid(0xee00) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) capset(&(0x7f00000002c0)={0x20071026}, &(0x7f0000000080)={0x2, 0x0, 0x5, 0x1000, 0x200000}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r7, &(0x7f00000008c0)=[{{&(0x7f0000000140)=@in6={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x6}}], 0x18}}], 0x1, 0x4000000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0xffffffe8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r6, r5, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r10 = syz_open_dev$video4linux(&(0x7f0000000280), 0x718, 0xc440) r11 = ioctl$UDMABUF_CREATE_LIST(r4, 0x40087543, &(0x7f0000000540)={0x0, 0x6, [{r8, 0x0, 0x100000000, 0x100000000}, {r4, 0x0, 0x1000000000000, 0x1000000}, {r7, 0x0, 0xfffffffff0000000}, {r8, 0x0, 0x8000, 0x1000000000000}, {r4, 0x0, 0x1000000, 0x100010000}, {r4, 0x0, 0x2000, 0xfffff000}]}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000680)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r10}, @fd={0x66642a85, 0x0, r11}, @fd={0x66642a85, 0x0, r8}}, &(0x7f0000000300)}}], 0xfffffffffffffdc8, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000002540)={@ptr={0x70742a85, 0x0, 0x0, 0xdc, 0x1, 0x25}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x1, 0x29}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x20}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) write$P9_RSETATTR(r8, &(0x7f0000000240)={0x7, 0x1b, 0x1}, 0x7) 32.021121343s ago: executing program 2 (id=411): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1038c2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x1) ioctl$TCFLSH(r0, 0x8910, 0x2) 31.901954679s ago: executing program 2 (id=412): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x10) iopl(0x3) (async) iopl(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0xc5d116e9899720b9, {{0x42}}}, 0x10) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) (async) r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x2000) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x2000) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xc4) 31.850932391s ago: executing program 2 (id=413): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r0 = socket(0x1, 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x4206c2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000280)={0x48}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f00000006c0)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES8=r2], 0xc0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000003e0007010300000000000000017c0000040042800c00018006000600843b0000100002800c0009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000100)={0xf1e5b317, 0x800000, 0x0, 0xfffffffc, 0x40001000}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff033}]}, 0x10) setresuid(0x0, r3, 0x0) fsetxattr$system_posix_acl(r6, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[], 0x2c, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 31.791835306s ago: executing program 2 (id=414): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x101200) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000001c0)={0x2, 0x6}) setsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000000)=0x4, 0x4) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580"], 0x48}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x2, 0x3, 0xff) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$inet(r5, &(0x7f0000000280)="12f0dda7f17f60b7c78be42301125e6cb51c467f", 0xfdef, 0x800, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000206030000000000000000000000000015000100070000000900020073797a31000000000500050003000000050005000200a70005000400fc00000011000300686173683a69702c706f727400000000"], 0x54}}, 0x0) 31.611643396s ago: executing program 2 (id=416): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8a) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r2, &(0x7f0000000000)={0x2a, 0x1, 0x4000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00010026bd7000ffdbdf2500000000", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="627f7ad918000106007d2e4efed9df251c140020ff896ee99938335bfe00000100baa3778a001a01421c76637781ce2ad263e4188cab76ec7387882faa830d577a2510b8e931a74eadd6aaaf00f13349995be02d74d43365065a7f86f6f8f7ce00cad02a3d8a6de7a6b9529b00000000000000000000000000e86e70b23c4d9f55e4f3ac4f43d30260e0a4fe0444a10c2b63b8a710c90881f41a57d48f091ba96f465ccf2d0da7a010ca594fe6282cf8b7258cc65211ae6def92e4f4ccff439978b82ed55ef9097ed5daacf8c9975324", @ANYRES16=r1, @ANYRESDEC=r1], 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x1, 'vlan0\x00'}) 31.579160781s ago: executing program 32 (id=416): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8a) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r2, &(0x7f0000000000)={0x2a, 0x1, 0x4000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00010026bd7000ffdbdf2500000000", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="627f7ad918000106007d2e4efed9df251c140020ff896ee99938335bfe00000100baa3778a001a01421c76637781ce2ad263e4188cab76ec7387882faa830d577a2510b8e931a74eadd6aaaf00f13349995be02d74d43365065a7f86f6f8f7ce00cad02a3d8a6de7a6b9529b00000000000000000000000000e86e70b23c4d9f55e4f3ac4f43d30260e0a4fe0444a10c2b63b8a710c90881f41a57d48f091ba96f465ccf2d0da7a010ca594fe6282cf8b7258cc65211ae6def92e4f4ccff439978b82ed55ef9097ed5daacf8c9975324", @ANYRES16=r1, @ANYRESDEC=r1], 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x1, 'vlan0\x00'}) 3.501626199s ago: executing program 3 (id=780): syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde08004500003000000000000190787f000001ac1414aa05009078e00000e0450000001000000000110000ac1414aa00000000"], 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0x1, &(0x7f0000000000)="73804a4f5dbf75e0fe75b9f015ff28aabf91cf5892fc6a33c7efe64ca03142802243d7e0362b4146df5a12233e3bbfe2852eb506a267ac83a6", 0x0}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x109702, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f0000000140)) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 3.320435725s ago: executing program 3 (id=784): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8884}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x10000, 0x6, 0x7, 0x7}, 0x1}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x46f83}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x40000) socket$vsock_stream(0x28, 0x1, 0x28) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x6dc8}]}}}]}, 0x40}}, 0x0) 3.313717287s ago: executing program 4 (id=785): sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r0, 0x0, 0x9}, 0x18) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r1 = dup(0xffffffffffffffff) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=fscache']) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) 3.248001546s ago: executing program 3 (id=786): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@newqdisc={0xbc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x12}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xfffffffe}]}}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7f, 0x3, 0x5b7, 0x544aee3381d3757, 0x7, 0xf, 0x4}}, {0xc, 0x2, [0x0, 0x7, 0xffff, 0x9]}}, {{0x1c, 0x1, {0x9, 0x4, 0x6, 0x8, 0x0, 0x7, 0xd1, 0x4}}, {0xc, 0x2, [0xa, 0x100, 0x3, 0x2]}}]}]}, 0xbc}}, 0x0) 3.247662324s ago: executing program 4 (id=787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYBLOB="54c8344da87712f5ca45e6cc529ecea7dd4409cbbe7a14ed9dd6a9a7b5d6b713795ba68a3d23835318e3cc02c6b4b80dfa6015278ee9e006f09a8dbc6ffd6d7d7184ad677c539e21"], 0xd4}}, 0x24000004) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc4c03d12, &(0x7f0000000380)={0x4, 0x1}) (async) ppoll(&(0x7f0000000000)=[{r0, 0x200}, {0xffffffffffffffff, 0x40}], 0x2, &(0x7f00000000c0)={r1, r2+60000000}, &(0x7f0000000100)={[0xc]}, 0x8) (async) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x1ad001, 0x0) ioctl$CDROM_LAST_WRITTEN(r4, 0x5323, 0x0) 3.247284483s ago: executing program 3 (id=788): r0 = socket(0x10, 0x80002, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@bridge_dellink={0x20, 0x11, 0x5, 0x2, 0x0, {0x7, 0x0, 0x0, 0x0, 0x24000}}, 0x20}}, 0x0) getpid() (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r3, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c094}, 0x840) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0xc0a85322, &(0x7f0000000100)={{0x0, 0xfa}}) (async) tkill(0x0, 0x7) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000004800010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001000000000000000000000000000d"], 0x38}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000000ff160000000000000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="54010000", @ANYRES16=r7, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x4000}, 0x80a0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) rt_sigaction(0x15, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000740)) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400", "c14ec98dcd2ad89f"}, 0x28) (async) sendto$inet6(r8, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20002040}, 0x4040000) (async) chdir(&(0x7f0000000480)='./cgroup\x00') (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r10, &(0x7f0000001240)=[{&(0x7f0000001300)=""/231, 0xe7}], 0x1, 0xe12, 0x200000c) 3.247206625s ago: executing program 4 (id=789): r0 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_pdu(r0, &(0x7f00000000c0)=@data_h2c_no_hdigest={{0x6, 0x0, 0x18, 0x18, 0x2}, 0xa7, 0x6, 0x40, 0x7, "383e00e0"}, 0x80, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) 3.176168355s ago: executing program 3 (id=790): syz_pidfd_open(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x2, 0x80, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 3.175883349s ago: executing program 4 (id=791): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000000)=""/73, 0x49) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) close_range(r2, r1, 0x0) 2.060831376s ago: executing program 1 (id=812): syz_io_uring_setup(0x5ce, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000340)={0xf, 0x5, 0x1, 0x0, 0x80000001}, 0x14) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d589ccd75d0275367048f46e1d1833f0b225d71e6aeeafac6b1195e3a2a07b7e7608b3a26ff", 0x30) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r4, 0x4068aea3, &(0x7f00000000c0)={0xb6, 0x0, 0x8}) r5 = accept4(r2, 0x0, 0x0, 0x80000) r6 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/94, 0xb8}], 0x1}, 0x10022) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000004}, 0xc046) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES32=r4], 0x2c}, 0x1, 0x0, 0x0, 0x24008800}, 0x805) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4389cf13bdbf833b, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) recvmmsg(r1, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x40000102, 0x0) 1.101292225s ago: executing program 1 (id=815): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@newqdisc={0xbc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xfffffffe}]}}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7f, 0x3, 0x5b7, 0x544aee3381d3757, 0x7, 0xf, 0x4}}, {0xc, 0x2, [0x0, 0x7, 0xffff, 0x9]}}, {{0x1c, 0x1, {0x9, 0x4, 0x6, 0x8, 0x0, 0x7, 0xd1, 0x4}}, {0xc, 0x2, [0xa, 0x100, 0x3, 0x2]}}]}]}, 0xbc}}, 0x0) 1.099705515s ago: executing program 1 (id=816): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x5, 0xa2740) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x0, 0x224}, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x22c140) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r2, r2, 0x2f, 0x10}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='fdinfo/4\x00') read$FUSE(r3, &(0x7f0000001f40)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r4], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x34, r6, 0x1, 0xffffffff, 0x0, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r7, 0x1, 0x13, &(0x7f0000000000)=0x9, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) 1.001403662s ago: executing program 1 (id=817): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000006, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x10, 0x2, 0x1, "11010000001400000100b64c0000005c4b7c1500"}) r2 = socket$netlink(0x10, 0x3, 0x12) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0) ioctl$SNAPSHOT_UNFREEZE(r4, 0x3302) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x40000000000}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1c}, 0xfffffffd, 0x33}, 0x2, @in6=@empty, 0xfffffffd, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000780)="e1e62499f5bbff0fb5d14fa14c243abec59f1a9a0b9313fdedf99b4435ae823fa5615d6b415fe526edfc9c9ef73ea0846607fdebd5a5069ac96154b23956715f68fea647c446d7324a677c22695d365075ce06792cb79473a2bf1a0c293ec21130b20d0d68aafc337b74a96cd4b23c34e8bd294962205dde627f7a9fe0508a5b2c06025e123b11167fc697449fa6339d4a29558b318b8daddf44131cf69394d57a1faecc38ba86377d26afbf63eb2bdabdbbcd0795423cb14cf163d3acf0c704d44c356813466bd96be3e8c4149e771c96d3790961cd5ddaf4f249b7417f56cb7d344b37e2659e4eb60f20a621c9901b5ce6af2f5c6d8775c16e4f1eba1313d4cb32af436c2a6d947525a9695be06e4660ae288e0ff2280848b70c5f480931c7dce160d9b4d5921dd067b4003ec80932be2cdb24624e8f460ff5224cc1344dd76763e22f4a6750aa03e3ce23fc2f6a69fdae9be4f4a8c973a195575ee1b1f34fdfda17820bbbef734dff833a6b4c5460071deace35b2a03edb22eac10eb0c3f262b23bfa1ecbe2bd51b418d8167ef8f1a6b8f463b0557b6670357d66251b19e367c66c1f150c95d15db0c23563d99b02504cf0070133792fed28e2d63b95d091224396b17d4314d603bc24de0a28f2d146765d4260225fdcf486db8e6ce16cdaae1a1f06b228e858c7bdf1d71a15c07e23a42b1d43c9c2599c62945d980444e9b70b8a8405e8b61e9df9514860bc8cafe70d8deb32d39ac07b8e6d43efa28b330a8f4f988407f1b3185713a6dac5320aba4b0a142c5b5f00b83d0f455d316f40a6a35df6e93965cd9d26649aaf7b80e9875e10136e7c0d7a18ca946133046e4b4f224890a0f4b77e45f036a3831c70b9eff97523151eb9dc6ce844b8e9ee8bfac165892b2e1bd88d3b77c1e200af342af9609d10a02466ab1fa667512f88dd61f04c00b9a98887c6cdec58e6c45c6c8eb16e3f99d6a980389078bdec7426eacbb45e5958b1fd66f4a49795b68977c9b84f4b8cf8d1db2277557d5c042e94841ed848d4707e7138dea28ccb7b349f7fb70403a650913fd6c89ddadae76baeeb3b9dd27063d7c900407f4b22f749c4df02a4851320c74199030f01ccfd3827c061fc1c75a0329dad06a4645381e266be21078398b165e1e1e5a5610f55263190b03f0582ec79caa91510d9e3300fed4ccb2756d2b96471af273cec441fadc3504b1c36a17d3edc11839fc134ef42a14acefa77b05782c8fcff36514f7fadb4e44c9a50d329f9a73c894421e98280f3214a269c89eb79be62e7825dc383164e869c8ddc8fe877f0cf698feeca638099f1db108b31f46173fb285b254b3998b7ab4b68c9f04a54c61dce3714b22838c886f2e99f2c8f0b523b41178f58a3674c692b6a8a46abc4b498742c6d56738227862bd6cdac85c5f9d8a91420f2f0974e82e77d7023bb5d2611337960103dc006b03c878ed9719651f9ed6862225d8c195501453a369063dc179dbf34dfd7262bf907d8595fd5c29179a28c7ff2c0634f416d3c26894ad94e3aa9a39638296be7b0b4546a23c6b53c234678a5377c3554d604d7b1dad7a21a904c208d35a5db3a723759a921d450d99d8d120c052391cdd5555d4a10355f747c15574af72a44e0be9e97a564ff8559a8f5c6536646b4ef34c7ed84937324df8bff0ee7f872ff96380dfb9ef0fe65856ae734234ffd68eee540fd581cd2e818f2401992c8ce5608709a45dded05690da38ab77ccc9c16c4c2475772ca5aaae4df77b8d97159539c76638b089be6cf2a5fb81a93bf86fb60887678d786550d4cc0a5956c07b64c03dc3455bd0afa65dd5fa2ab364c8463abd1659ae1e78b6ffd459e85fd19acd555d2a54dd233086c86536d1b1c380e6cab49d24faccadd47fb701c2e57fa275fe3064571e2761a8ab016d7837d7ea4d757224e86c5cefb90b67ca3929b9c804014567a89ead2a1193c1da04dec8b6ecc9b9c6e54ce495471fedf41f1658ee78950efdcd8f5fb751740592176679f1e5cd590fda31a91dec92f6eb9cfaa84753301bb5b1dbf3df7e4d407c7ec5207a53650e254449d1b2edb760909a96813929fb3bde0b8adb09e9ae5182892691276833a540bea1807e6ada697e8aba0fe4d8f380ee9e4e05d44190ccc62d57c5c87a7d93804401bf013d79f94efa6e4f7401fec3b9802a9cce8c909751ccbe1a69f6ef84e45fe46085ec182ac96b65e5f844ce99dbb04c770f2ddaa3f5d2ddea180f83f813c30937df7bc05fa7fdb728fbb35f2d7209ffc318fd71fa4843d20489175e2ca84b6949ed4419be38f3794bb3eaa8893aadd6037654c8aa4e405b5f9299996169cb5c07b357e31d9ddd42cc4b299c6a274c8b3a40ce5eba06bc0e325f237cbbe2c026140d5c451eafcb8af900b050d8ae568c7e1471aed75e75e0626bac90a05920df896e0127520275521f7e2e0a8883bfe66716c0778041b16ae8ba56074081a2ac8e30f1316fb70728994565642d8ecb04f178d3f569b5d3c12e7b33dc3fffb6d78548224a40cda4acdee5c1ee0e733a3301955994186c812f6e25f2e052d38f11e7bb501bb4a8eae93affca8df939423eb4c726c640c631283fa75480f31f42dcf221ad7bd22f8369f37f41c6fa20d44cb7a4d211cbd15139bf88a1bbe694ff726513fdc97c539f144d6959552172042c08f03b2a03e8fc583181ee97cee2d8bc4eba662922829e21e61ce7f6b3b636fe8c8e7bcd19ff5fa0d3b305ee298f2219391eb075508cec3bb0b85d53d102f0f797cca85db286d7a36536862275c10aa36c272fd96900782fb8666cf20858f7ddf9ab01c30156e14e190c47e7c17dc0948bae26ae7baf580a59615f64f50e00f263efa506c3871d712a7f02ce6407c07422de1bcae106a07c1881ab4f81e1dbbab7039562b6cf92c517324ac00352bd0be5ff4cca24b2f3026888213ebe5e5e6a2bd169b1ae3dcf7c0093336fcea7eac2bd2f918034db80311d18aad56f916d58b133b27a320f7749327dfce5574e32935de51edb50b64fa0adb187757576bf9c40f1b4851b3901b97e4458de49816664a1f50865e37f4ed240765088737f2f5fbb7c851a1ef5607849f590e01a86bf7ede085ecb6517b678ac87022350338ee5222690babda46ee0c4c80689fc2c7c4ad4dbe66696a60013575fdf1f5d23971e19b0ffca27b96bc7c2520fce5bd3a50f81518e1f60eea9bd893298b21f1e090ad54a0ce0a537ad9a697cde0b47c52424ffb024b3a69f021681dacfeb7cca843e88a48ce31966e702d7b5125b98b2c15528b83ae7752c21b243454cd343b3392412b676dd0bd62debbcbe8f61b060faecab1d02d968a56668b175f750fe99bcdc4b81250b36189caeac40e4dad52668e2a0e37e0347d6ac563ef45bfb5881714428a7893747d1e5bdc6a0a1da4904889757910d693e06224cb948c242078bb02b2bd8cb592c14a78e89a50753a7c65c217168e86739a26f53e78bcc9b10fed36723b02a1aacb65166015e42f8b84fb5e4092ff01d0e5cb8ac5a1e1d37fbf048853b1ff5fa4f830e31a545f7ae0235dfe5c87fea124cb5eb51d4aa48b37492c2319e0d1ea80eb08f8d609f20c2414127322995bf5d7d81736e42b6c0bf1e48cccbf1a81dd74a8e42774d17fd45bc776df065a88de5e38196af6944a72aa49090baf02a7b3c4e567a4abe8b2d1e411457b4c24954f27c63e0774d0c23847fc1635ecc4023c660862680d7c4446b58bf0defaa574c1601d684a520579076cca0d11ff6364624c2daabb39889b46f4e158d57437561adfa4ae44e35e7df6038a77ea468b142aba6fd8232dfeca890f9f24e6d4acd590024bc45c497248a76e5052f0d5523e31a66b0eb91d1e47113d94382215c328b7ad0fc570f1798c3c86f67dbf6d5cdb51b46100636e0b2ec56b95264fa7a4375d9799e555eb7f5de6b1d31859b525d9a0917bd2e2547758a634a24119039ecd873bfb5392c0472b270f5c0365958ba507d01dc7238365930cceb8a93a197d81ea48d4aa1a9c72c375a69439587a15562a5af5f5958f1690302fe4990220c8e39ec2af804038d574d4c2c4a1f3d0ecf3a0a2a29fe49e42b176b5993e6631ef103da65729ca86ba7bfb135ecfd8684273a657cf8e96c6a42a329398e05f9d8211dcb50f48ceef8d55cf8128749a00dba427d841826910cc5599fc1338419c16b9abb511d6633a8d74d972aa6ce89fe7fd89f18c16af2158bff6fad4df7cfe0d3272ae103172a863defc9954a97bac8d579c35cb6aa2dafc9731cccf80f2397e326e311785cbf7fb2f4f3e2698d80c3359ca1ee212cef03cf597621795307043ab4c3ab771115a11400ab521d9b35405407852a012b4a7a576b7ab0bbb44f7958c75ec9ba88dc4643913cbd240fdeb18dd25e379b8c46ffceda399049295e078b77bf5b8aa12df34a2c77a5c08b2e2f1b26489caa757492ae198e9d437c38c2be2ca78b9d884100b4ea25b4165fd80b3cd84e68a7e9e9b058fd6c3893dd532f121d2df7039852a1117d57c9ca390624535d6c21db3f4b7a25e3ae0c6a4c0be962acbed1749f73ad2049c95124925059f5320b31779e4e07fd429656289678e14a85da75ad668b49a602cc107e6dedf63707fa058cc6bfa43a9d3def22a1db203a83640e30f4e0158f29abb43b9c67e4ea9edde093ab3cac1843eee620d6c85e2c35b15e33e5c4039e363e8b4086a83ae7551b849708e30a1227e9eee43ef777dbded881810042d34e1fcae29ca29a0d3e641d6edff1698f32aa4a8f222e8a1227675bfc9cfa344cce39f76b25e48bab91848f7c89afe8a38dad66abc750b51b078ed60dd5d689e7551f1f4ec3acd4f3133b2e840dc5beaa3171c5b047b7f7b019e155990a51b115e7b366bfce2b8eb891b7cc7d405c89cbb4146b9169ec35845e3f785435debc92b7721ff82b974adb136cd6d8dfce739eb49ba36d3787b1515ddf977dce1ff9e5b7ae788343af2aa01ba002c35f09d0ddfcdf4c4a1678460f140268fe927bcf84f132afb528d2bf9572b8177c34d201a56f1eeadf48456dd38f95efeb46d75403e9bf6e95b4bac54826bb5e72b925fb50030dd38c7310678b5202362e9bb18f10e9ebcd34769f07dce19f3b8f3baeb00c465adcc2e1c03a7d34118585cb9f612c74369cb40cb2f1cfaed9457d297c0df396446b60be2ce8b660653ff68daf50fcb4290f8446fca109129cb8e7291050d142cfdfcb0303263dba7204e90cda1c023b6e3ee9c0267975927818f11551418fe02143afe91c331a205113471e7e5fc3f83bca3c1c981b50aaa6dc22d9aa715abc360f6374646a0907caf8645120cf3888ea4fc9cd1f92ee29ac384f57b7d052e323e71c6096de3ccd4997166ba1bae24b449906831c9c996c7024342ddde5e578af4f1a0134bc224221898c0ba87f21ff28601f61a8af63058ac7578984ef51568005972c2d9c1fddf120fbe9447f9152cf1e51fa5106ae835c17c2e55b55c9be17daffe641cf326045ad7c841bb44f25e20f186f59b5150c02022930f83b8960632cbd8ad5011e0560278952ed8f9c39d4cfbbe76657c01b7bf9c6ff70a973249e17f3b34e748ce7fb1e49f76be3aef11da26c7dad1054a1c7e0d4da76694ebc85fd51185a38a0dcee74a5eb49ae1fb9d78c799464c7c49eafcdacf70711ed716ed7819cd1a312ef80a4a2095381c679db84c30049578d34364ef63a1fdaf0aa4eaa9771b4dfbcdf8f4542a118ddc81649d3a537ef5f7ff489c6e772e57d6ef6b6e5f2f2c8a0fad8e4d46a12ea70ad5798977ab14c1fdf8f190a694a8f4733cda285a7a712fa0d32acf89567837aa6ffcf03493656cdb7bfd0c47005ba126c70af1924ca30601ab0fc4aaa4ea4d0570c5ddd03c2a5e731fa77c1d24e85c1235e10c1575dcd2d34bafbed490094fc2538df08d178502d27c953d2e0af5e3d829a0d5132cc5ee1b9d2519a95787e91836ef1d29e92bb1b662c138a49f8a77829f9dde0943ca82a4466275dac744b92dd75493a0a040a19e77a225b9e21e94d445415483aa67d2b2839de965b4c4803c61680e32e7e4deac5afa877ddc26a34d486499697d6268701ff391f4bd04612066ed9386abdfb3a6234f8705aa3e298bde969f9bcc16af97fc107d0e565d2b9659ab0e3029b1e195ba1a517ae0484352ce366fc0bdf1b5517aa878d6b8a09b7c01e0d6c52c74a0113a97afc505d47d65dcae6db63e014838af156e72021b09c6db109a59c4166c9cc8ad5207878348a58f65b77de388ec8296373f3dd8acdb7c04bce3032fffd3032cf724376ddefe642a54e6624ff147ffb28fa4fcc351eef9051a86f4b93c30d7515ea247fe0ce484f9b39e1b8e051fd7babc9800e55bce6ae1c08e64fede1cd264678509e94bfc4f3409206c4ef05181f47a1abae8ba185772913c13fa0fe4d36a4239595cbe5cb38643e74966cf2cac2c0cde26f49a60925f238b60434f67b28d9e01df9c23984ce8c6c3a40b4f69c1750a99e6ba451f2429565d38e21993f982f9eb4c7ec77b03ac472327fd43e30f8ec565710f1964aaef8683a0c5526a8994de98db77b550a620ec894ee07a706d092eebd9d692b0feca7ae8c13434f947814c84e5a159f2f9314970ca864f261a2a16f3f3352f8d1e1f19dc6292a586e57326ded4e5cc1f17562d175e755e9fa62dfc817bafa4896e611b897ac7bcccc2fcbfd7a5576478b503f7add397c03ddbe6150846324b12544ad783da46ec793e7f37dabde9426d044cedd50440d1b26782233b1612390d4fdd249737f250c3ce1731a825b0cb9341f847a568d8e82b81f883eb90e146d792a2a46cd07518858e6d64b07db16c1d002f3d2cce2bc5f3ae150379c923555170a07c6663e4adede0649ac47c044f1a65657eda07a0b5cb16966b5e9f11ff04dd6bba7a0b0bdcf03e0a15424198b267ac0f89ef01022ec38a7d26d355e0d8d6b794b472352d932093bc91349618ff1e8f956916b5d8e4cbf658fe5ada42cdef4ca5407a997b67e4e1347b90d43c78825b558eda995447f6008eebfc9775814921f72cf243d3156fda3dddc1874f2c0a651ccfd1c77b10f57cd86b32d9c1612b53c69e5172e9045c0689391c90c97bf1a1b902546763336e0f76be74b269c4bf72c030f1040413d4de5fa65ba9f4109e37a3c387e729394f765dbc2e6b769fc5995c7e3c5fa509c07cdf9acbe99dc5cad14640bffad695f0404b066496d87fd6ffc0bea12bad489858169a0c63141fa5857ac1e8b454362fe15a7e55ac371da68cf6a291d41784883658d0c5bb5e6db28b205204e0db38881c4ae83b37dcf945c6d09aea33506ae051287e066f787925bf7d57587e849655969e5677eedc372448e6f2a2f8ce6bdd4def434bd9a2bed09c93c96877dd5e7773a699ed9feda02372e2d82ea0ecbed08ade26c7744dc5276a0e817bd3bd4383790929b79719002bd4df059006fb755877c85d51d433b35b5d9c3769d7c1101e871c7d2d51bf579a10bb9664e60ce918e23655935a7f89db15a0d88e6663a3ba02dae1210a4d7d7eff522c3d4fa3f5fc4c36346185d0ef55c8910a52d41fe3e4a792e8e1fe35af1a15a8c91b06e64fd36f7725c34dd8468422ed96c2e2fc5faf1a7c51b01e9c216f82aa11f8da041804461303a40578cb5f9fd49c0b6abd420581ba4461a6013500552f8d2379f960c6f680fa66eca3faf97504fc6916f84319f554a24829c4cae9c63be3bb3d2c7176b93063d37c3df69c8ac6c0fa43ad9a8274b94ee35dd8a69c3b560dd57353ce9c8188e9db8652544d32fbd2d931ceb0484eb1b27ba74c237dbc1e81b6a867ded6400b3dc0cf973790c03ef6bb69ebc76bb175233793a123ff009d16d1e43fa6f15303ad5169ca42b3ef9f9630b92e03e9a6cd32ec08dbc8abd342931b617bd37ef8e09b68713757e39bcf24f4b95f9972d5b7680e22e7fc421b67e27d3cd97cea6ee1ae78ab792751d317fc317e39545e4a2eebd72c1298b84452de9bc6f6d13d0ec0d7faa52e3b59134531f82214548e6202416f1aa43d65bc1e10fbb1737ebfe51c862dfe6bcc064695ef87f90eeaa011fce5903f6c7af9ba34a627165e909c2f9060055c496a506487249810745b53d137860f0a9ae482932c579511c736d0db447e0941cb8b32bc8e5aeeb0abdcebe66ac420b77f981b1dcde605299caf0171cdb722f42072e3fa1376ff3b3ebc747597822c9c07bb7f76b3e1ef89d4c8155af4c1fcd95272bf93ca058eae43b71997edf14d3f09edb495c7ce361c78ff8dc8cc95a639ce0332b955bd66d9a4ff4c882297338172622cc3a05f2bf02eb8103b32083c42d64259df53d0ba3e4cf80307eb0e00380213370d6a7ce33e685237949fc14657b6eead581de144fe6ab1d318efe2e14823ad3bac3f83819c1810a0c49664c7400af906f6c670e41b94582551cefd8462ae86e1ae10b1f56e48e2591737c0336985f09ce751f68924760daa1881417ea27db9ecfa7580ff9c2879a267d5db8b88d6f984563038c25254cdb88a1fa5240b76cbe0614ab1d4e81072d26ce1d0b1c4b1780e201937fcfd6db6a4561315e1e6be0a381fdecfb42cacb575a5d86aff6a92a4454637ad249d24573ccea9d71ed580eeae16a09f79e27ddf38a281c8779f945720b067a10005cdc04d3f7b483df35d4bc0503a0c66cdb87b3f58c6e367cbb902236ab95cc817b79969865e6a9cde65d543f6f624b5f9e53e4b07b43d77ca7bb503d7a39a35114152f804c78bc9211f61c2f0eb3842c0d1e9a9b3b4585318a007490ad0343ce1368ae5582da587af3c4c156ed943acbd977ec6060047a8fd89005af9ab41302ec3a72c88030fec45013d35efc5ecbd7ff5b41c6bef7ce7adddd7cc322c6ea213f1b7dba5a844f630c63bb5a3662be935d013b3d4104da390d87c127651d1abe3d2b183cf51720f1d3eab3342c6414d5b8d09e635b618712b510e6fbf4376df28870087ad2be875994e1538729dccbeebd3f532814db319e961b3ab3c718f5025bf68c6a366a180f638b074ee966ccb9db4cf321af69d3c5e654146d3c73a47a48a2df1d6dbf27f6e863978d64ba8e59ddfcdf45e485b44ef5025690dfc85d3f8b0fed638f8017d81b82f4bcaa6dab7ad10ce1ac59a6ec59725521b17ae5212e7bf1e71cc4be8d9c57bcccaea6afc256b9947c618616ae75df1952b683e9382f9b69a86b214007fab11c10dc4758e809880fa3ccc4a4966a333af9652d10aeb2830c9cc0c4dd1c50b5b19830cb5ad0bba23927c72097084002acc317c134b467e8ef66481d295af5216ba2b2227463ff4c52cc8ba8f84dc940edb9384394f66c3683821677635baefe43d09e53f421307a22a675c89b7704b93d26b68aa601f12b98c80522672be8fb44114f5ee4577609792d4a8731765316f46d08e25936a38535925462fd884fb699e6024a27c66f45a00d2c941da5c1213cc7fb08470450af51c9b9e366630c4deff3b0aad756750d8e9a0570170a111d8d9dfb26ca6df846e5e0e960dd76223e3e5a356241420cb63fe7638afb2b393c89f3784463313dd0502ce2582fe494c33358b228df38d673801a13aef8ccbfb601499b05eab9fc1ea79ff0457136b8505f5a0828b14cabc11da7d8064a1ea6512a5235440f18e424509eaa917901fc04d403a0ac0c009ddfd54fc64c87b93395271b3d6645775029bf2b5ccc97ccaded244ca5970f6cf5c7885a411e45de398c6b06f3553e25604bf7dcf10a080e836864875d2949496f0256c60919fca02970cc6b866c799284a111b61251a8335a4dda28997cf73eef8423a8edc5ea103d50ad85da49a82a5eef5e1adfeb2b674ab274b3e1d7c425b19ff279de9514f4f9178893bad99fd9b27b99e8d07f98166d9c24cc7761f37449354a07904334a36c86429b96b906bb9aaf854d5512a2f2139cc4076832d2cd1f3aafa601680c6ed9a729c4388a760ec3e660e3a9a3b6c0e842aacdf3f8a1558b090053f99721dab91d8200d4fd49efb89db83a7c8683e666632dd8f8e50665d27890b214c14feee115579a9799d42babf78830611654826a4fb5f352964e4f0f6fcd8beff16301ffd8e69979c635b1e00254492f1e2a9683eb14abd24e25f9c7a973befd88024811203b8c5891edb1224e68aed33264f1c195137e9dfac078dee77dad6f1aaf618447f7126c2e63637573163a104111991e81213bd9de6ae8a47185c3d37b52202077e93b4e97d9b5514a58079c45b10de04d38d7f2af2115e33b98d46011e5fb3d52092daed0a8a6f98ec79e6a9ddb7469f66c44d5ce7f76013aacb1e162c874134064bf0faf37236c6104598967cb18bcb99aea6f0fe0fb1c42706663b0adc7ee75d0a5f4be66a9ac60f9e9b4d71d4408e777b763163f5695f8852bb567b1cd12e056a61d5c16443622a5730a34a5d4b2146e19b366d2aaaf2c11abdf69e304387b9951093d404a5da6ffcdc161282b625f32eec22b02e1830daa3c5f692cd0e7be3d59efe1671a1e28381e506699fe5cf533ec2854a27b91079e3efb6aeb9886f8a040e4d37210929e02ca7a06d74d4ea884aca97b9b592afdcd5758662f4b258988248117f3db349c5e76cdeb89e598950f465497d138b7b810611198e5ea7ebcb8bf347c41b5c704e1ab3618454039177a929aa60f882b1d27a55454ae08c5077c468e8de8de555f558c9d0cda133698044686d3d4f8c36edae2ee9e6cc430355d45b40ee99366a63b50d5fbd71b6403324807e822afdee6788a3ce97a79da4b730e6079d1d9f62b35ea4e6859c569e6f7ced8e029358ed5c8b6db16a37f7bdbe8969429759681001fbb5f963acb46d3398d59ba92cb435e0ae954f33be138e45007dc1c1acb8f4b3816b2e35f93341587364ef6473992aeda5cef90557b13a48fcb760c704e732937ff455fed55e84cfbf2d7232271706029e2bbdd08d7262541fe62df2d8b6b8f36ec6582fcb3364a256a72b701cb74a85b4c0ed0339b05c41157d8324903772066e393868aa77f923b46b9f4e5109d34a250c5e579c9882029e6c10e19750b315747f665fdcc89f6335614f9668d4fdb233907ff2d0a9b1fc342ee609926431b667728afac5d01690d4fe4d514ccceff7a9b62cbe7046d6d20e128a09f2c2ea684e318086dd470369058dcefefe314a2dd275d06dc7d05ce96076e10139596833f522e962f503906b647a6852481d90176737c0d5e193127792e3bb0543f3c3d37bfc0724744d8b0abc32e1b62a0b40466ed8e74a072838abba492654a7d6c4821e4918575079f71ce332258b72f7a84c51769386415c1719df530277d7028703deb53e3f86b266914042965c0b08905bb96559253e46173a4054bd9d12fe3bcc6abb2a8de808039b039bc8abdea0b055f525e8f1f11a02fd3102a3c1587beafff1c57ad32c8721cccc3525c673472d898bfae25b12346121ac46e18c4ab29ae51e11481d4c59f9a5627dacf9940ee538c88100e8a2b09ca2831cc269adbc1b0aab0b3a80c101be80fcb972838ba49465bd947c60122ebfc7d1ed6c5ce35426a3f7", 0x2000, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmmsg(r5, &(0x7f0000000480), 0x21, 0x0) writev(r2, &(0x7f00000001c0), 0x0) 315.3262ms ago: executing program 0 (id=821): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000480)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r7, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x20000034) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, r3, 0x0, 0x0, 0x6, 0x105, {0x4, 0x1, 0x8, 0x69, 0x200, 0x0, 0x10, 0x8000, 0xe156, 0xe156, 0x400, 0x0, 0x60ff, 0x0, "fe0100003413000900000000000004b427ff001015000000000c00"}}) r9 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) read$midi(r9, &(0x7f0000000240)=""/101, 0x65) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) sendmsg$NFT_BATCH(r10, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELTABLE={0x50, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x180, 0x3, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x786ec7f5}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x81}]}, @NFTA_CHAIN_USERDATA={0xa5, 0xc, "bca40d8a450e800435fdb0ccd5e75b6a6f01926992ad1d16c34e73b451ec730ee9144d253d3a6ba013bdd357ea843af6b251926278d1fddfe055c1f3f6fc1d3451eebfab9907145f4482d1b8a05bcdabc7c3355adea8505c11dc4ee54955e5ea3d828bc24f6639cfde3628d112f096da56dc66d62c9b31f0e6de751358a0f051103fef572d34a78e67f86512286fa30b05aa88c0b7962fe63f6c04ff8cb21d8b8c"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan1\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'tunl0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1f8}, 0x1, 0x0, 0x0, 0x8c}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 241.578203ms ago: executing program 0 (id=822): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121701, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x9444) 236.834271ms ago: executing program 0 (id=823): futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) r0 = memfd_secret(0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0xa10001, 0x1, '\x00', @p_u8=0x0}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000023c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002400)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x3dbc13c87a763ecd}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x77d027659921b9a8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) 160.840982ms ago: executing program 0 (id=824): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@newqdisc={0xbc, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xfffffffe}]}}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7f, 0x3, 0x5b7, 0x544aee3381d3757, 0x7, 0xf, 0x4}}, {0xc, 0x2, [0x0, 0x7, 0xffff, 0x9]}}, {{0x1c, 0x1, {0x9, 0x4, 0x6, 0x8, 0x0, 0x7, 0xd1, 0x4}}, {0xc, 0x2, [0xa, 0x100, 0x3, 0x2]}}]}]}, 0xbc}}, 0x0) 160.367731ms ago: executing program 0 (id=825): mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0xc3072, 0xffffffffffffffff, 0x7bcc0000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000009f000/0x2000)=nil, 0x2000) 101.300229ms ago: executing program 4 (id=826): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x52, 0x109, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x641, 0x101001) ppoll(&(0x7f0000000080)=[{r3, 0x20}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) wait4(r4, 0x0, 0x0, &(0x7f0000000500)) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 101.123186ms ago: executing program 3 (id=827): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) (async) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)=0x1) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x32bbc9153b3c9679, &(0x7f0000000000)=[{&(0x7f0000000280)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1f7}, 0x40440cd) 100.916275ms ago: executing program 0 (id=828): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x321001, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000840)={0x3, 0x28, [0x400, 0x8, 0x7, 0x4], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="430fab1c6342d9d00f20c035000000800f22c0460f01f8c4227d308800500000af1bb2bf000000430f01cbc461fe127b62400f07", 0x34}], 0x1, 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @multicast2, @private}, &(0x7f0000000400)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x14, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0x3, 0x1, 0x6, 0x0, 0x7, 0x20, 0xfffffffffffffff0}, @map_fd={0x18, 0x3, 0x1, 0x0, r4}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x82, &(0x7f0000000500)=""/130, 0x41100, 0x5a, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x2, 0xbb15, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000640)=[r4], &(0x7f00000006c0)=[{0x5, 0x3, 0x2, 0x3}, {0x3, 0x5, 0x4, 0x9}, {0x2, 0x5, 0x4, 0xc}, {0x2, 0x2, 0x5, 0x3}], 0x10, 0x81}, 0x94) socket$key(0xf, 0x3, 0x2) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x5, 0x3, 0xa}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) mremap(&(0x7f00003f1000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ff9000/0x4000)=nil) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xe0a42, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000001ac0)={r9, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xff]}}) r11 = dup(r10) ioctl$LOOP_CLR_FD(r11, 0x4c01) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r12, 0x1, 0x200000, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x34}}, 0x640008c0) r13 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r13, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r13, 0x0) 100.366816ms ago: executing program 1 (id=829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0), 0x10) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001400)=@newchain={0x340c, 0x64, 0x2, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {0x5, 0x1}, {0xffff, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x21b}, @filter_kind_options=@f_bpf={{0x8}, {0x33c0, 0x2, [@TCA_BPF_ACT={0x335c, 0x1, [@m_connmark={0x140, 0x11, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x8, 0x0, 0x8000}, 0x3}}]}, {0xf1, 0x6, "69b3092e0600079bf284fb2b5c92703c4f3a711bcf300dffbb98ec335debf2efb93b13a4d7d537166969a473d70a983483c502064cc4924f08902c7fe8890a6e7cf255583e7857bed0598695e4fb1070c82b642ceb0ba86203d3d48da1c98e407144baceb8dd63dc156648ed155784d0caa54c6ba3c645bafdfc7815a3986f048f445e2289cc2124c8fdea2051b2fb33df3ead38b52ba9c3df1047801e336bf451662f8a32921abe72b79feff87cbba4a10af4df6a545afcc814feec473eff9769dbef70598ad89151e0229647933443fbc18b620248d41987d2944b03b602785d134f83f2964136d43e96ad3e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0xdc, 0x5, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d60, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x7, 0x3, 0x9, 0x95}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x1, 0x2, 0x7fff, 0x4}}]}, {0x72, 0x6, "4ae3cf8d59784cafa2abb23fb1ba770551f2ff55224356e97865e88d8baa45398993737198a6da737d98e4a22576db0f1557d7274e9814818b3a9e7cdae9613d137ea559696f6bc00e523c0de6caf240309157ce4f17513b4455815a1b6d9989ece40cf69df4f78e418e9f3f2c1a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x2e90, 0x5, 0x0, 0x0, {{0xb}, {0x2dc4, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x5, 0x6, 0x98ac, 0x8356, 0x8000, 0x10001, 0xfffeffff, 0x5, 0x1, 0x1, 0x80, 0x4, 0x7, 0xffff71fc, 0x9, 0xf, 0x7, 0x2, 0x10001, 0x8, 0x2b7, 0x7, 0x7fff, 0xd0d3, 0x3, 0xe30, 0x10, 0xb, 0x9889, 0x5c, 0x2, 0x6, 0x7, 0x3, 0xfffffc01, 0x8, 0x1000, 0x5, 0x3, 0x1, 0x3372, 0x80000000, 0x1, 0x200, 0x390, 0xef76, 0xfffffff7, 0xcf8d, 0x80, 0x9, 0x5, 0x7, 0x800, 0x400, 0xfffffffe, 0x800, 0x721cae54, 0x8, 0x5, 0x7fffffff, 0x60000000, 0x7, 0x9, 0x1, 0x0, 0x687, 0x3, 0x8, 0xfd, 0x200, 0x0, 0x4, 0x2, 0x7, 0x7, 0x4f52, 0x5, 0xe63, 0x4, 0xfffffffd, 0x0, 0x8, 0x5, 0x629e, 0x0, 0xeb7, 0xfffffff9, 0x80000001, 0x6, 0x81, 0x7937deb, 0x1, 0x2, 0x9, 0x40002b, 0xb926, 0x7, 0x100, 0x86a, 0x1, 0xfffffffb, 0xfffffff9, 0x8001, 0xffff, 0x79, 0xfffffffb, 0x80000001, 0x6, 0x83, 0x7fffffff, 0x482, 0x3, 0x3, 0x7, 0x4, 0x2faf, 0x5e61, 0xd, 0x6, 0x5c, 0x7, 0x10, 0x6, 0x2, 0x1, 0x3ff, 0x8001, 0x0, 0x5, 0x3, 0x1, 0x3, 0x9, 0x9, 0x0, 0xfaa, 0x7, 0x5, 0x9, 0x3, 0xdda, 0xbbad, 0x8, 0x1000, 0x1, 0x401, 0x2, 0x3, 0x59f, 0x7fffffff, 0x40, 0x9, 0xfd2, 0x7, 0x200, 0xffffffc0, 0x3, 0xfffffffc, 0x8, 0x6, 0x2, 0x8, 0x10000, 0xfffffff3, 0x3a2, 0x8, 0x6, 0x6, 0x5, 0x2, 0x51d, 0x4, 0xa, 0xd, 0x9, 0x7, 0x1, 0x1b3, 0x8, 0x7, 0xfffffff7, 0xd9, 0x1, 0x7, 0x80000000, 0x1, 0xa, 0x400, 0x1, 0xd94, 0x3ff, 0x8, 0x4, 0xfffffffe, 0x70000, 0xaac8, 0x1, 0x6, 0x9, 0x2, 0xb6, 0xd57, 0x3, 0x19, 0x6, 0x5, 0x6, 0x0, 0x5, 0x3, 0x80, 0x1, 0x80000000, 0x3ff, 0x9, 0x6, 0x8, 0x14, 0x7, 0x1, 0x16a1, 0x3, 0x6, 0x400, 0x2e, 0x7fffffff, 0x500, 0x0, 0x3a, 0xfffc0000, 0xdab, 0x80000001, 0x80000000, 0x1, 0x1, 0x1ff, 0x9, 0xfffffeff, 0x65fe, 0xffffffff, 0x4, 0x0, 0x0, 0x82b, 0x4, 0x0, 0x6, 0x9, 0x2, 0xda7, 0x10, 0x5, 0x1ff, 0xf, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x1, 0x5fb, 0xb, 0x3b, {0xff, 0x1, 0x6, 0xc6a6, 0x7ff, 0x8001}, {0x9, 0x0, 0x6, 0x3, 0x8, 0x1ff}, 0x4, 0x2, 0x7841}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0xc5d, 0x96, 0x6, 0x8, 0x485, 0x5, 0x3, 0xe3c, 0x4, 0xfff, 0x7d54450b, 0x80000000, 0x9, 0x81, 0x6f62, 0x5, 0x0, 0xfffffffb, 0x9, 0x1, 0x1, 0x80000001, 0x8, 0x3, 0xfffffff8, 0x80000001, 0x59dd85fa, 0x6, 0x5, 0x80000000, 0x2, 0xc7f, 0x9, 0x9e, 0x9, 0x6, 0x1, 0x8000, 0xfffffffb, 0x5, 0x1, 0x3, 0x200, 0x0, 0x8, 0x8, 0x1, 0x8, 0x6, 0xfffffffb, 0x8, 0x1, 0x8, 0x1, 0x65f7, 0xab, 0x10000, 0x74ea711d, 0x8, 0xd82, 0xfad, 0x7f, 0x80, 0xfffffc00, 0x7fff, 0x4, 0x5, 0xffffffff, 0x8001, 0x3, 0x6, 0x4b1, 0x7, 0x8000, 0x97a, 0x7, 0x2, 0x8, 0x5, 0x5, 0xd8e, 0x2, 0xffffff11, 0x9, 0x9, 0x6, 0x4, 0x6, 0x4, 0x9, 0x1000, 0x5c02, 0x7, 0x5, 0x7fffffff, 0xf24, 0x5, 0x9, 0x9, 0x9fda, 0xfffffffb, 0x9, 0x3, 0x0, 0x9, 0x8, 0xe5, 0x20000000, 0x7fff, 0x8, 0x0, 0x5, 0xc26, 0x0, 0x9, 0x5, 0x4, 0x7fff, 0xfffffffd, 0x2, 0x5, 0x6, 0x7, 0x1, 0x7, 0x156, 0x3, 0x0, 0x2, 0x80000000, 0x7a2, 0x2, 0x80, 0x3ff, 0x9, 0xe7, 0x5, 0xfffffff7, 0xffff, 0x6a, 0x0, 0x2, 0x800, 0x4, 0x5, 0x0, 0xb4a, 0x2, 0x6, 0x5bac, 0x0, 0x6, 0x3, 0x1, 0x8001, 0x50000, 0x81, 0x0, 0x5, 0x1, 0x6, 0x1, 0x8, 0x10000, 0x5, 0x8, 0xfffff999, 0x800, 0x2, 0x81, 0x80, 0x2, 0xfffffff7, 0xd5cc, 0xf, 0x5, 0x3, 0x1, 0x7, 0x2, 0x8, 0x10000, 0x0, 0x8001, 0x48, 0x1, 0x5, 0x47cca867, 0x3, 0x5, 0xfffffff9, 0x7ff, 0x81, 0x8, 0x7be, 0x9, 0xd4b7, 0x6ba87648, 0x2, 0x9, 0x9, 0x37e5, 0x1, 0x7, 0x5817863a, 0x5, 0xf2, 0x2, 0x7, 0xe, 0x1, 0x8, 0x8, 0x6, 0x101, 0xa, 0x0, 0xff, 0xfff, 0xff, 0x3, 0x7, 0x6, 0x6, 0x1, 0x2, 0x101, 0x8, 0x7, 0x4, 0x8000, 0xde33, 0x2, 0x7, 0x5, 0xffffffff, 0x1, 0x1, 0x4, 0x4, 0xffffffff, 0x8, 0xfffffff8, 0x4, 0x3, 0xf, 0x1, 0x9c00, 0xffff, 0x1, 0x9, 0x101, 0x5dce0eff, 0x7, 0xfffffff8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x97ca}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x1, 0x8001, 0x9, 0x8, 0x9, 0xd8800000, 0xc, 0x6, 0x1c3, 0x6, 0x1, 0x3, 0x6, 0x101, 0x9, 0x81, 0x400, 0x3, 0x0, 0x4, 0x2, 0x5, 0xd7, 0x1, 0x80, 0x8, 0x9, 0x69, 0xfffffff7, 0x6, 0x0, 0x8, 0x1, 0xc60e, 0x3, 0x7ff, 0x0, 0x3, 0x80000001, 0xc34, 0xe9, 0x3, 0x8, 0x38, 0x0, 0x3, 0x7fffffff, 0x49ba, 0x8fc, 0x55632c95, 0x3, 0x2, 0x0, 0x4, 0x9, 0x5, 0x4, 0x8001, 0x1808c82d, 0x1000, 0xfffffffa, 0x69, 0x8, 0xb90, 0x2, 0x1ce, 0x6, 0x10000, 0x80000001, 0x1, 0x6b3, 0x9, 0x4, 0x5, 0x0, 0x3, 0x3, 0xc, 0xfffffff7, 0xfffffff1, 0x1, 0x46, 0xe, 0x3, 0xfffffffa, 0x8, 0xb909, 0x7fff, 0x1, 0x116d, 0x7, 0x4, 0x1, 0x5, 0x80000001, 0x7, 0x3, 0x3, 0x8, 0x6, 0x5, 0xfffffff7, 0x101, 0x3, 0xdd5, 0x438, 0x81c3, 0x3, 0x6, 0x80000000, 0x1, 0x6, 0x6, 0x9, 0xff, 0x8, 0x100, 0x2, 0x653, 0x9, 0x100, 0x0, 0x1, 0x1, 0x8, 0x2, 0x8, 0x81, 0xfffffffc, 0x9, 0xaf59, 0x5, 0x1, 0x800000, 0xfffffffc, 0xc4, 0x7, 0xcd10, 0x6, 0x0, 0x4, 0x6, 0xd, 0x3, 0x3, 0x380, 0x8, 0x200, 0x9, 0x6, 0x302, 0x1, 0x5, 0x7, 0x635, 0x7, 0xe234, 0x2, 0x7, 0x2, 0x6678f328, 0x3, 0x800, 0x9, 0x3, 0x5, 0xea37, 0x6, 0x6, 0x8, 0x81, 0x1, 0xbc, 0x8, 0x10000, 0x8, 0x4, 0x9, 0xffff, 0x2, 0x4, 0x6, 0x5, 0x4, 0xff, 0x7, 0x80, 0x4, 0x8, 0xd400, 0x7, 0x400, 0xfffffffd, 0xef28, 0x7, 0x5, 0x7, 0x8, 0x1800000, 0x8000, 0x0, 0x8, 0x5b, 0xae40c0b, 0xd8, 0xe, 0x1f80000, 0x0, 0x4, 0x0, 0x4, 0xf90, 0xc1, 0x6, 0x7, 0x0, 0x5, 0xe, 0x1, 0xd5, 0x1, 0x1ba, 0x7, 0xc, 0x5, 0x8, 0xa, 0xef1, 0x2826, 0x4d2, 0xa, 0x5, 0x9, 0x6, 0x96c2, 0x4, 0x9, 0x8, 0x0, 0x4, 0x8, 0x7f, 0x1, 0x9f, 0x10001, 0x313, 0xc, 0x4, 0x10000, 0x0, 0xd, 0x10000, 0x5, 0x1, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0xa146, 0xe9, 0x0, 0x2, 0x1, 0xebe, 0x6, 0x375, 0x658, 0x1, 0x1, 0x9, 0xf, 0xc, 0x80000001, 0xffffffff, 0x0, 0x1, 0x881a, 0xffffffff, 0x4, 0xe6, 0xfe79, 0x7ff, 0x8, 0xffff, 0xf, 0x3, 0x3, 0x3, 0x3, 0x5, 0x9, 0x274, 0x2, 0xfffffffe, 0x7, 0x1000, 0x90, 0x4, 0x2, 0x101, 0xa, 0x10, 0x9e3a, 0x6, 0xff, 0x0, 0x0, 0x1, 0x480000, 0x3013, 0x8001, 0x5, 0x2, 0x7c08, 0x5, 0x1, 0x7, 0x0, 0xfffff801, 0x81, 0x0, 0x40, 0x3, 0xfffffe00, 0x100, 0xfff, 0x7ae, 0xf, 0x9, 0x1, 0x8, 0x6, 0x50dc, 0x9, 0x8, 0xe, 0x2, 0x9, 0x7fffffff, 0x1, 0x165, 0x1ff, 0x7, 0x9, 0x10001, 0x7, 0x4, 0x6, 0xfffffff7, 0x5, 0x8, 0x6, 0x7fffffff, 0x2, 0x3ff, 0x5928, 0x80000000, 0x1, 0x694, 0x2, 0x81, 0x7, 0x3, 0x5, 0x6, 0xf9, 0x1ff, 0x3c14, 0x400, 0x0, 0x10001, 0x4, 0x7fff, 0x10000, 0x4, 0x3, 0x0, 0x2, 0x3, 0x1d5e, 0x1, 0x9, 0x400, 0x51577e68, 0xfffffff9, 0x9, 0x6a, 0x5, 0x9, 0x8, 0x1, 0x5, 0x0, 0x3, 0x7, 0x2, 0x79a2295f, 0x8, 0x10001, 0xe, 0x7, 0x7f, 0x6, 0x1, 0x6, 0x9, 0x6, 0x400, 0x8, 0x4, 0x7, 0x8, 0x363, 0x7, 0x6, 0x6, 0x8, 0x15, 0x1, 0x2, 0x23, 0x1, 0x6, 0x2, 0x8000, 0x6, 0xb1ed, 0x3, 0x2, 0x89c, 0x2, 0x49c, 0x100, 0x3, 0x1, 0x6, 0x9, 0x6, 0x4aeccc6, 0x1ff, 0x969, 0x782, 0x6, 0xe, 0x6, 0xe0000000, 0xffffffa2, 0x9, 0x57d, 0xa1d, 0x0, 0x8, 0x80000001, 0xf, 0x0, 0xffff8001, 0x88, 0x4, 0x9, 0x5f, 0x2, 0x8000, 0x80, 0xfffffffe, 0xfff, 0xf, 0x6, 0x1, 0x4, 0x0, 0x1000, 0x6, 0x100, 0x6, 0x1, 0x1, 0x1, 0x1, 0x7, 0xc, 0x580, 0x4, 0x1ff, 0xf6, 0xfffff800, 0x401, 0xfffffff8, 0x0, 0x4, 0x4, 0x2, 0x9, 0x0, 0x5, 0x6, 0x2, 0x3, 0xf, 0x3, 0xfffffffb, 0x6, 0x3, 0x4, 0x3, 0x0, 0x6, 0xffffffff, 0x7fff, 0xcf, 0x9170, 0x2, 0xfffffff9]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x290, 0x8, 0x9, 0x8, 0x1, 0x7, 0x7, 0x9, 0xfffffffe, 0x2d, 0x48ea, 0x3, 0x9, 0xfffffffc, 0x3, 0x9, 0x6, 0x10, 0x0, 0x101, 0x94cb, 0x5, 0x8, 0x3e96, 0x4, 0x200, 0x53197ca2, 0x3, 0x1, 0x1, 0x401, 0x8, 0x1, 0x1, 0x1, 0x3, 0x10, 0x9, 0x6, 0x0, 0xda, 0x1ff, 0x5, 0x10, 0x6, 0xf, 0x5, 0x3, 0x1, 0x101, 0x7f, 0x6, 0x1, 0xcdd, 0x2, 0x7, 0x0, 0xfc0, 0x10, 0xfffffffd, 0x2a, 0x28, 0x7ab, 0x1, 0x4, 0x1, 0x8, 0x9, 0x1, 0x8, 0x53bc, 0x4, 0x81, 0xe00000, 0x7, 0x9, 0xffffff6a, 0x2, 0x6, 0x8, 0x2, 0xfff, 0x9, 0xfffffd27, 0x0, 0xff, 0xbc, 0x55, 0x4, 0x7, 0x9, 0x1, 0x5, 0x6, 0x5af0, 0x4, 0x0, 0x3, 0x1, 0xffff, 0x0, 0x10000, 0x5a, 0x7fffffff, 0xffff, 0x13dd3b44, 0x0, 0xa5, 0x9, 0xa, 0x2, 0x8, 0x401, 0x6, 0x1, 0x6, 0xffff7fff, 0xc03c, 0x3675, 0x3, 0xfffffffd, 0x4, 0x7, 0x0, 0x5, 0x71e8290b, 0x8, 0xe, 0x9, 0x6, 0xc64, 0x0, 0xc124, 0xa4f, 0x9, 0x5e, 0xac7, 0x5, 0x3000000, 0xfffffff7, 0x20, 0x3, 0x800, 0x5, 0x10001, 0x46, 0x0, 0x5d, 0xfff, 0xbba, 0x1, 0x101, 0x5, 0x7, 0x26, 0x10, 0x512e, 0x1, 0x0, 0x9, 0xe, 0x2, 0x9, 0x1, 0x8, 0x1, 0xc843, 0x5, 0x8, 0x4, 0x162b, 0x2177, 0xfffffffc, 0xffff, 0xc4c8, 0x1, 0x3, 0x641c, 0x5, 0xbf2, 0x7, 0x3fe5, 0x5, 0x7, 0x7, 0x10, 0x4, 0x7, 0x6, 0x0, 0x3, 0x7ff, 0x80, 0x7, 0x0, 0x859, 0x7, 0x400000, 0xd, 0x3, 0x8, 0xf2bc, 0x3e, 0x5, 0x40, 0x8, 0x5, 0x6, 0x9, 0x4c, 0x3, 0x7, 0x8, 0x2, 0x7b9, 0x7fffffff, 0x8, 0x4, 0x8, 0x9, 0x4, 0x3, 0xffff, 0xffffffff, 0x2, 0x8, 0xfffffffd, 0x6, 0xf, 0x0, 0x2, 0x400, 0x6, 0x9, 0xc, 0x8, 0xfffffffc, 0x8001, 0x2, 0x59, 0x4, 0x5, 0xe, 0x3, 0x6c000, 0x9, 0x7, 0x80000000, 0x9, 0x1000, 0x3, 0x7, 0x4, 0x5, 0x2, 0x7]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x3, 0x8, 0x52, 0x8000, {0xf7, 0x2, 0x4, 0x3, 0x62, 0x5}, {0x8, 0x0, 0x9, 0x5, 0x0, 0x2}, 0xe188, 0x5, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0xdb9d, 0x8, 0x0, 0x4, 0xff, 0x6, 0x6, 0x7f, 0x6, 0x0, 0x0, 0xc, 0x10, 0x7, 0xffffffff, 0x376, 0x4, 0xd5d1, 0xe2, 0x39, 0x9, 0x8, 0x3, 0x72, 0xb0a, 0x3, 0x4, 0x7ff, 0x8, 0xd49a, 0x4, 0x7, 0xaa92, 0x7, 0x7, 0xc95, 0x8, 0x529, 0x1, 0x7f, 0x3, 0x1, 0xd, 0x4, 0x5, 0x10, 0x2, 0x0, 0x5df, 0x8, 0xc055, 0x200, 0x3, 0x8, 0xe, 0x56678e02, 0x8, 0x1, 0x9, 0x6, 0x21f6, 0x81, 0x2, 0x2380, 0x3, 0xfffffff8, 0x10, 0x5, 0x6, 0x6, 0xfbb7, 0x9, 0x4da6, 0x3, 0x4, 0x3, 0x219, 0x1, 0x7, 0xdca5, 0x7bd, 0x9, 0x4, 0x3ff, 0x2, 0x4, 0xfffff496, 0x7f, 0x0, 0x7, 0xa, 0x80, 0x1000, 0xb0fc, 0x7, 0x372, 0x0, 0x80, 0x9, 0x101, 0x8000, 0xfffffff8, 0x39, 0x1, 0x1, 0x9, 0x9, 0x80000001, 0x0, 0x2, 0x2, 0x1, 0xfffffff9, 0x2989, 0x9, 0x6, 0x7, 0x30ffc000, 0x4, 0x873, 0x3, 0x2, 0xfffff000, 0x6, 0x0, 0x400000, 0x7ff, 0x100, 0x7, 0x7, 0x2, 0xffffffff, 0x9, 0x5e1c, 0x2, 0x2, 0x401, 0x3ff, 0xe6, 0x7fffffff, 0x1000, 0x8, 0x4, 0xa, 0x1, 0xfffffad9, 0x8, 0x7, 0x8, 0x5, 0xf, 0x3, 0x3, 0x8, 0x0, 0xd281, 0x6e6, 0x401, 0x9, 0x8, 0x8001, 0x800, 0x1, 0x3, 0x8, 0x3, 0x7f, 0x8, 0x10000, 0x7, 0x8001, 0x4, 0xffffffc0, 0x4, 0xffffff98, 0xfffffff8, 0x7, 0x5, 0xf6, 0x3, 0xf, 0xffff, 0x3, 0x3, 0xd, 0xd, 0x81, 0xfffffffe, 0x800, 0xf, 0x0, 0x2, 0x0, 0x1c0000, 0xf42, 0xfffffffa, 0x0, 0x8, 0x1, 0xad1f, 0x81, 0x5, 0x8, 0xe, 0x22f, 0x2, 0xb, 0x0, 0x96, 0x4, 0x1, 0x5, 0x7, 0x80, 0x0, 0x3, 0xffffbb7f, 0xfff, 0x1, 0x10000, 0x5, 0x5000000, 0xffffff80, 0x4, 0x80000000, 0xfffffffd, 0x3, 0x3, 0x4, 0x8, 0x7, 0x0, 0x2, 0x3, 0x6, 0x79, 0x1, 0xffff, 0x0, 0x10, 0x0, 0x0, 0x8000, 0xfff, 0x80000001, 0x5, 0x6, 0x1, 0xa6, 0x1, 0xfffffff6, 0xfff, 0x0, 0x2, 0x9, 0x4b5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x6, 0x6, 0x3, 0x7, 0xfffffff4, 0x7, 0x1, 0x8, 0x0, 0x401, 0xfffffff8, 0x1ff, 0x8, 0x1ff, 0xd65, 0x7, 0xf224, 0x6, 0xc, 0x2, 0x6, 0xffffffff, 0x3, 0x1, 0x9, 0x6, 0x88c, 0x10001, 0x7, 0x3, 0x0, 0xc, 0x8, 0x9, 0x500000, 0x6, 0x976b, 0xffffffff, 0x800000, 0x5, 0x8, 0x81a0, 0x10, 0xffffffff, 0x1, 0xd, 0xfffffff7, 0x2, 0x42, 0x7fff, 0xfff, 0x6, 0x2, 0x200, 0xfffffe01, 0xfffffd78, 0xfffffffe, 0xfffffff6, 0xffffffff, 0x3, 0x6, 0x7f7b8, 0x5d, 0x0, 0xd9cd, 0x915, 0x3, 0x3, 0x3648, 0x81, 0x81, 0x3, 0x8, 0x5, 0x10, 0x0, 0x3, 0x4, 0x7d1d, 0x8, 0x1, 0xac95, 0xbf6d, 0x1, 0x40, 0x200, 0x1, 0x9, 0x80, 0x9, 0x8000, 0x6, 0x806, 0x40400, 0x3, 0x6, 0x4, 0x1, 0x7, 0xa76, 0x1, 0x1ba, 0x7ebf, 0x8, 0xfffffff8, 0x8, 0x932, 0x74416911, 0xb6ef, 0xdb, 0x7, 0x0, 0xa0, 0x200, 0x401, 0x6, 0x8001, 0x81, 0x3, 0x7, 0x4bb1, 0x3, 0x401, 0xa, 0x80000001, 0x7, 0xa, 0x8788, 0x3f, 0xfff, 0x8000, 0xfffffff8, 0x8, 0x9, 0xd94, 0x6, 0x0, 0xb, 0xaa, 0xc, 0xfff, 0x200, 0x2, 0x4, 0x2, 0x3, 0x0, 0x20200, 0x1602e790, 0x1, 0x5, 0x8, 0xb, 0xffff, 0x7fff, 0x7, 0x7, 0x0, 0x8, 0x6, 0x401, 0x1ff, 0x2, 0x80000001, 0x1db4, 0x7, 0x0, 0xfd3e, 0x2, 0x3, 0x0, 0x4, 0x6, 0x4b, 0x2, 0x7ff, 0x2d6d, 0x9, 0xb, 0x5, 0x40, 0x200, 0x4, 0x7, 0xffffffff, 0x0, 0x1, 0xf, 0xc0fe, 0xa, 0xcd9, 0x8, 0x1ff, 0x4, 0x8, 0x9, 0xfffffff9, 0xffffffff, 0xcfa2, 0xffffff7f, 0x5, 0x60, 0x4, 0xb, 0xfffffffa, 0x4, 0x4, 0x2, 0x8, 0xe, 0x1, 0x2, 0x2, 0xfffffffa, 0x3ff, 0x9, 0x7fffffff, 0x10, 0x6, 0x3c3, 0xffffffff, 0x7a6, 0x400, 0x0, 0x2, 0x7, 0x3, 0x10001, 0x0, 0xc8, 0x5a29, 0x5, 0x7f, 0x7, 0x101, 0x4, 0x9, 0x1, 0x9, 0x7fc00000, 0x9, 0x1ff, 0xe, 0xff, 0x7, 0xffffffff, 0x80000000, 0x7, 0x0, 0x5, 0xc8ef, 0x80, 0x2, 0x1, 0x39a]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x7, 0x7, 0x0, 0xffff, 0xff, 0x3, 0x6, 0xffffffff, 0x8, 0xfffffffa, 0xc4fc, 0x80000001, 0x7, 0x7, 0x100, 0x8, 0xfffffffd, 0x4, 0x5, 0x8, 0x40, 0x1, 0x2, 0x5, 0x8, 0x0, 0x7, 0x3, 0x2d02, 0x6, 0xffffff81, 0x6, 0x2, 0x9, 0x0, 0x3ff, 0xdb, 0x1, 0x1d, 0x4, 0x8, 0x0, 0x6, 0x0, 0xb0, 0x2, 0x8, 0x1, 0x4, 0x6, 0x5, 0xfd6, 0x12e86cf0, 0x5, 0x80, 0xc527, 0x2, 0x3, 0x3, 0x9, 0x3, 0x2, 0x1, 0x400, 0x7f, 0x7fffffff, 0x8, 0x9, 0x7, 0x0, 0x8, 0x9, 0x3, 0xf94, 0xe0e000, 0x9, 0xf, 0xf44, 0x101, 0x4, 0x0, 0x0, 0x7, 0x6, 0x401, 0x101, 0x5, 0x7ff, 0x8, 0x7, 0x8, 0x0, 0x8, 0x9, 0x81, 0xfff, 0xd2, 0x5, 0x7, 0x8, 0x8, 0x3184, 0x5, 0x4e, 0x3, 0xff, 0xfffffffb, 0x5, 0x1, 0x7, 0x3, 0x3, 0x4, 0x7, 0x3, 0x800, 0x5, 0x3, 0x0, 0x1, 0x8, 0xfff, 0x401, 0xa9e, 0x6, 0x7fff, 0xd829, 0x4c9, 0x40, 0x2, 0x3c, 0x9, 0x3, 0x8, 0x49, 0x1be, 0xa3, 0x8, 0x8d9, 0x4, 0x101, 0x6, 0x2, 0x101, 0x9, 0x8001, 0x6, 0x5314, 0x8, 0x55, 0x9, 0x2, 0xd1ed, 0xfb7, 0x6, 0x401, 0x10001, 0x1, 0x4, 0x3, 0x80000000, 0x574, 0x0, 0x2, 0x1, 0x10000, 0x7fffffff, 0x1796, 0x8, 0x0, 0x4, 0xffff, 0x2, 0x9aae, 0x48455ad3, 0x5, 0x5, 0x40, 0x4, 0x3, 0xc, 0x9, 0x7000, 0x2e, 0x2, 0x0, 0xffff, 0x4, 0x5, 0xda44, 0x9, 0xff, 0xb3d, 0x401, 0x53, 0x9, 0x0, 0xdd3, 0xbccc, 0x5, 0xfffffffa, 0x1, 0x28, 0x5, 0x6, 0x0, 0x6, 0x0, 0x4, 0x2, 0x4, 0x13b9, 0x9, 0x8000, 0x0, 0x6, 0x9, 0xf73, 0x4, 0x0, 0x9, 0x1, 0x3, 0x8001, 0x3, 0x5516, 0x8, 0x9, 0x7, 0x7ff, 0xbf, 0x2, 0x8, 0x2, 0x97, 0x9, 0x1, 0x3, 0x2, 0x1, 0x4, 0x8, 0x1, 0x0, 0x3, 0xda1d, 0x40, 0x4, 0xec06bf1, 0x2, 0x1000000, 0x4db39880, 0x8, 0xc340, 0xfffffff8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000000, 0x80000001, 0x8, 0x3, {0x3, 0x0, 0x7f, 0x4, 0xfff2, 0x80}, {0x5, 0x0, 0x2, 0x4000, 0x1, 0x7}, 0x2, 0x1, 0x8}}], [], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x401}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xe, 0xc, 0x45a1, 0x5, 0xf, 0x7, 0x9, 0x1, 0xd84d, 0x3, 0x1, 0x4, 0xa, 0x7, 0xc104, 0x4, 0x6, 0x9, 0x17, 0xfffffff9, 0x3e92, 0x7ff, 0xffff, 0x5, 0x800, 0x1, 0xffffffff, 0x4, 0x8, 0x4, 0x7, 0x8000, 0x3, 0x7, 0x5, 0xfffffff9, 0x18000, 0x47, 0x814, 0x80, 0x2, 0xf, 0x7, 0x401, 0x6, 0x6, 0xcea2, 0x1, 0x80, 0xe5, 0xffffffff, 0x9, 0x261, 0x4, 0x1, 0xe0000000, 0x7, 0x8001, 0x3, 0xfffffff9, 0xa0d, 0x9, 0x1, 0x5, 0xfffffffd, 0x8, 0x5, 0xb, 0x9, 0x3, 0x4, 0xffffffff, 0x10001, 0x8, 0x0, 0x0, 0x9, 0x9, 0x8, 0x400, 0x4, 0x1ec, 0x2, 0x5, 0x5, 0x721becaf, 0x1, 0x4, 0x8, 0x7, 0xbb, 0x8001, 0x200, 0x6, 0xfffff001, 0x5, 0x3, 0x6c, 0x6, 0x2, 0x1, 0x6d66, 0x7ff800, 0xa9, 0x440e, 0x8, 0xb, 0x2, 0x1, 0x1, 0x5, 0xa6, 0xfffffffa, 0xa1, 0x1ff, 0x7fffffff, 0xe2df, 0x7, 0x7, 0x7ff, 0x8001, 0x4, 0x1, 0x80, 0x4, 0x6, 0x2, 0x9, 0x67d2ce0, 0x3, 0x5, 0x200, 0x1, 0x9, 0x8, 0x7, 0x9838, 0x9, 0x0, 0x8, 0x6, 0xe7, 0x7, 0x9, 0xb2, 0x7fffffff, 0xb4, 0x6, 0xfffffffc, 0x0, 0x4, 0xf, 0x4, 0x9, 0xfff, 0x6, 0xffff, 0x7ff, 0x5, 0x6, 0x10001, 0x2, 0x8, 0x5, 0xe790, 0x4, 0x6, 0xfffffffa, 0x48, 0xffffffff, 0x9, 0x800, 0x3, 0x81, 0xbb, 0x8, 0x8, 0x400, 0x7, 0x0, 0x10000, 0x1, 0x7fff, 0x80480000, 0x77, 0x40000000, 0x7, 0xc, 0x2, 0x7ff, 0x6, 0xffff7fff, 0x0, 0xc, 0x7, 0x0, 0x1, 0x3ff, 0x7, 0x5, 0x1, 0x2, 0x5e, 0x7fffffff, 0x0, 0x4cf2, 0x4, 0x1, 0x3, 0x2, 0x8, 0x9619, 0x4, 0x4, 0xdfc6, 0x3, 0x3, 0x8, 0x400, 0x6, 0x3, 0x7fffffff, 0x7fd, 0x6, 0xa5a, 0x80000000, 0x0, 0xf, 0x400, 0x80000001, 0xd, 0x0, 0xfffffff7, 0x8d, 0x2, 0x9, 0x4, 0x6, 0x9, 0x2, 0x3, 0x5, 0x1a, 0x1, 0xe, 0x8, 0x101, 0x3, 0x2, 0x3, 0x3, 0x0, 0x815f, 0x1, 0xf95]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4000, 0x40, 0x8001, 0x0, 0x5, 0x800, 0x200, 0x2, 0xc34, 0x2, 0x800, 0x3, 0xb, 0x9, 0x8, 0x401, 0x7, 0x5, 0x947, 0xc, 0x7ff, 0x4, 0xb8f7, 0x9, 0x9, 0x1000, 0x1, 0xffffed62, 0xfe, 0x6, 0x38, 0x7, 0x2, 0xbcf, 0x1, 0x5, 0x4, 0x8, 0x6, 0x8, 0xffff, 0x683e65cb, 0x6, 0x800, 0x8, 0x8, 0x4, 0x7, 0x3, 0x49, 0x6, 0x0, 0xfff, 0x5, 0x5, 0x400, 0x1ff, 0x4, 0x5, 0x5d, 0x6, 0x3ff, 0x80000000, 0x4, 0x5, 0x7, 0x7, 0xe, 0x7, 0xfffeffff, 0x7, 0x6, 0x1, 0x9, 0x2, 0x6, 0xd63, 0x2, 0x5, 0x8, 0x102, 0x0, 0x7f, 0x80000001, 0x7, 0xfff, 0x7, 0x1, 0xad4, 0x6, 0x40, 0x4, 0x4, 0x200, 0x100, 0x1, 0x8, 0x0, 0xc, 0x200, 0x3, 0xb0, 0xcaf3, 0x0, 0x7fff, 0xd08, 0x0, 0x8a18, 0x9, 0x9, 0x7, 0x1, 0x6, 0x1ff, 0x9, 0x3, 0x8, 0x0, 0x6, 0x9, 0x1, 0x5, 0xffffffff, 0x5, 0x8, 0x6, 0x0, 0x5, 0x0, 0x8, 0x9, 0x80, 0x5, 0x7d, 0x3, 0x2, 0xffff, 0x3, 0x5, 0x80000, 0x5, 0x3, 0xcbd, 0x10001, 0x80000001, 0xffffff7f, 0x6, 0xfffff7d6, 0x6, 0xffff83f0, 0xa, 0x81, 0x3fff80, 0xd, 0xb, 0x4, 0x6, 0x401, 0x1d0b, 0xe, 0x0, 0x9, 0x5, 0xd, 0x9, 0xbfc8, 0xed66, 0x8001, 0xb, 0xfffffff3, 0x9, 0x7, 0x9, 0x2, 0x0, 0x209eb940, 0x332beced, 0xffffff56, 0x8, 0x8000000, 0x101, 0x71, 0x9, 0x6, 0x7, 0xa, 0x9, 0xb2, 0x2, 0x2, 0x8, 0x56, 0x8001, 0x3ff, 0x1, 0x5, 0xfffffffb, 0x0, 0xc, 0x1ff, 0xbce, 0x8, 0x5, 0x8, 0x4, 0x4, 0x1, 0x40, 0x6, 0x80000001, 0xffff, 0xd, 0xb4, 0x101, 0x5, 0x726, 0x535b, 0x2d, 0x48f, 0x6e, 0x6f, 0x0, 0xfff, 0x2, 0x9159, 0x5a, 0x1, 0x9, 0x80000001, 0x5, 0x7, 0x8, 0x1ff, 0x0, 0x5, 0x5, 0xfff, 0x5, 0x3, 0x1, 0xf4d400, 0xa6, 0x15c, 0xc612, 0x1, 0x5, 0xf5, 0x9, 0x7f, 0x6, 0xde1, 0x9, 0x19, 0x80000000, 0xffffffff, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x401, 0x4, 0xfffffffe, 0x5c2, 0x1, 0x7f, 0x50f4, 0x4, 0x0, 0x8, 0x1, 0x1, 0x37b2, 0x0, 0x9, 0xff, 0x7f, 0x2, 0xff, 0x6, 0x1, 0x502c1ed, 0x2, 0x3ff, 0x101, 0xfee5, 0x2, 0x917, 0x6, 0xfffffff9, 0x2, 0x5, 0x2, 0x3696, 0xffffff84, 0x4, 0x6087, 0x3, 0x3, 0x7, 0x100, 0x1, 0xd53f, 0x2, 0x7, 0xf, 0x26e9, 0x7, 0xfffffffc, 0x6c, 0x3, 0x7, 0x3b178e35, 0x6, 0x73, 0x800, 0x7f, 0xbfc9, 0x9, 0x92, 0x4, 0xf, 0x1, 0x6, 0x1000, 0x0, 0x3, 0x4, 0x1, 0xfffffff9, 0x2, 0x800, 0x7ff, 0x4, 0xc, 0x0, 0x3, 0x274, 0x4, 0x3, 0x7665943c, 0x3, 0x2df5, 0x6, 0x5, 0x3e, 0x4, 0x7fffffff, 0xf, 0xcbf, 0x80000000, 0x1, 0x8058, 0x6, 0x0, 0x401, 0x10001, 0x9, 0x1, 0x2, 0x8, 0x7, 0x318, 0x7fff, 0x1, 0x1, 0x5, 0xfd8, 0x5, 0x400, 0x1, 0x5, 0xd9, 0x6, 0x1000, 0x8, 0x80000000, 0x2, 0x7, 0x4, 0x5, 0x9, 0x8001, 0x4, 0x17e2, 0x8, 0xfffffff7, 0x8, 0x298, 0x2, 0x4, 0x81, 0x10001, 0x9, 0x2, 0xfffffc00, 0x8, 0x51, 0x7, 0x6, 0x5, 0x1, 0x9, 0x1, 0x3, 0x2, 0x3, 0x401, 0x8, 0x8, 0xffffff32, 0x59, 0x4, 0x0, 0x0, 0x61, 0x8, 0x0, 0x8, 0x7, 0x200000, 0x3, 0x1, 0x40, 0x80000001, 0x80000001, 0x6, 0x45a, 0x3ff, 0x0, 0x100000, 0x8, 0x5, 0x0, 0x6d39d55d, 0x8, 0xeac, 0x800, 0x2000000, 0x71000000, 0x0, 0x1, 0x401, 0xdaf, 0x1800000, 0x3, 0x1, 0x1, 0x7, 0x1, 0xfff, 0xff, 0x2, 0x60f, 0x3, 0x8, 0x1ff, 0x6, 0x7, 0x9, 0x8, 0x6, 0x2, 0xffff1733, 0x3, 0x1, 0x9, 0x4, 0xe7, 0x0, 0x1, 0x80000000, 0x67d3f399, 0x56, 0x0, 0x9, 0x1c2a7990, 0x6, 0x9d0a, 0x5, 0x7, 0xfffffff9, 0x4, 0x3ff, 0x3, 0x7, 0x8, 0x0, 0x3, 0x7, 0x4, 0x0, 0x3, 0xb2d8, 0x1, 0x0, 0xd, 0x5, 0x7ff, 0x6, 0x9, 0x80, 0x800, 0x3, 0x401, 0x6, 0x7, 0xff, 0x16a7, 0x1, 0xfffff800, 0xe, 0x2, 0x1, 0x30]}]]}, {0xa3, 0x6, "f7f97dc289675bb8653fdd48faa15e25867160df7e6dbced303bfed1ec989a062defd901b5e8753e84f89db5009fd58695acbe2e9b14ec0bd124757eedc8a3c4961df05a3c708e30a85a5a90a09957d13cba4d4dc41a9ef83832dc179a0d98356f98d24da4bf640128d2fc62ec19bdaa73ab1bc13785f100c3de390338e15a7f200f5620fb8ca4c943ca0f5b0419dc64e9073adfe5480431740bd9bf508831"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0x1a4, 0xc, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xa, 0x4, 0xad, 0x5}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x17d, 0x3b395dc9, 0x0, 0x903, 0x4cae}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x23fead00, 0x1, 0x81, 0x5702}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff7, 0x800, 0x6, 0x9, 0x401}, 0x3, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x40, 0x8e, 0x7, 0x3, 0x5}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x1, 0xfffffffffffffff9, 0x100}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7fffffff, 0x4, 0x82, 0xfffffff9}, 0x1, r5}}]}, {0x95, 0x6, "7a0ab245ae89320d523c97f0470cab61798447617e409585cff83434f424bad8bf4a2871652dcf968d164e1c2d2c5b77edcb8bc48730b92bafda013bbe6f7e4f46fa414265f7a3ad20bb44af45baf50ade523b51fa2d9a3b388187d44a8c053d976172da70d75f6a5a32b1e22ce4b1adb7bddcc7b9b22b93f408d2e713948556f519ff5f02310c4b397f81442e8db8103b"}, {0xc}, {0xc}}}, @m_csum={0x108, 0x1e, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8001, 0x9, 0x20000000, 0x5, 0x7ff}, 0x25}}]}, {0xbd, 0x6, "80d1aae0ee37fefc059af5033b6db132bc5a5a37021f58ae5316c285123f813abd741a8390f498a02583fd4539bf897c8bd0b52eed649cf19fae0d7ea6c6f6df8130ca7f62e7d345a619418a5bd9087742eb270ba201fcd22c1ceac42d0b713efab53708a0ad58153d1af9bfcc42ed09ac3e53c4efae100d1b85b049cf1fbd45544df74c3db66cefc9257e84284310970137ca32ea429e70fc8bf3e62e401d2494e1ed6988d2a65ee6adfd9ba34f3ddc98dd28e066af6a577f"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff3, 0x9}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x6, 0x4, 0x7, 0x6}, {0x56a, 0x57, 0x7, 0x1}, {0x1000, 0xd, 0xd, 0xf7}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xf, 0xc}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x8d, 0xf}}, @filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x340c}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd70000000000097e0000008000300", @ANYRES32=r9, @ANYBLOB='4\x003'], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x10) r11 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r11, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0x2}, @connect={{0x2, 0x83}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time={0x3}, {}, {0x0, 0xfc}, @connect={{}, {0x0, 0x5}}}], 0x70) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r12, 0x3b82, &(0x7f0000000000)={0x18, r13, 0x1, 0x0, &(0x7f0000000100)=[{0x8012df, 0x2000000000000003}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r12, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r13, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8000000000000000}) 729.845µs ago: executing program 4 (id=830): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}], 0x1, 0x40800) (async, rerun: 32) sched_setscheduler(0x0, 0x1, 0x0) (rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000300)={0x9, 0x2fc, 0x1, 0x7, 0x2000, 0x0, 0x63ce, 0x3cc, r1}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001000), 0x1, 0x0) (rerun: 32) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) (async) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x7, @empty, 0xa}, 0x1c, 0x0}}], 0x1, 0x200880c0) (async) getsockopt$inet6_buf(r5, 0x29, 0x3d, &(0x7f00000020c0)=""/171, &(0x7f0000000000)=0xab) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) (async) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x2000) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x4, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r8, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r8, 0xc02864c3, &(0x7f0000000080)={&(0x7f0000000000)=[r9], 0x400000080000001, 0x1, 0xa}) (async) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x1005, 0x6, 0x4745504d, 0x6, 0x20000000, 0x9, 0xb, 0x4006, 0x1, 0x4, 0x1, 0x4}}) (async) mmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x0, 0x810, r2, 0x79b82000) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000400)='net/ip6_tables_matches\x00') pread64(r10, &(0x7f0000001b80)=""/4084, 0xff4, 0x7f) 0s ago: executing program 1 (id=831): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0xffffffffffffff80, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x0}) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000040)) kernel console output (not intermixed with test programs): idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 55.456122][ T6016] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.495552][ T6016] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 55.502269][ T6094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6094 comm=syz.1.27 [ 55.516525][ T6105] loop6: detected capacity change from 0 to 524287999 [ 55.522430][ T6105] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.525522][ T6094] netlink: 'syz.1.27': attribute type 1 has an invalid length. [ 55.526884][ T6105] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.533799][ T6105] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.537365][ T6105] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.542278][ T6105] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.545939][ T6105] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.550845][ T6105] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.553512][ T6105] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.559715][ T6105] ldm_validate_partition_table(): Disk read failed. [ 55.561787][ T6105] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.564393][ T6105] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.568504][ T6105] Dev loop6: unable to read RDB block 0 [ 55.571454][ T6105] loop6: unable to read partition table [ 55.573498][ T6105] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 55.573919][ T6109] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22'. [ 55.828041][ T6123] pimreg: entered allmulticast mode [ 55.875453][ T6125] netdevsim0: mtu less than device minimum [ 55.875524][ T5957] Bluetooth: hci2: command tx timeout [ 55.879213][ T5960] Bluetooth: hci0: command tx timeout [ 55.949487][ T5960] Bluetooth: hci1: command tx timeout [ 55.959289][ T5960] Bluetooth: hci3: command tx timeout [ 55.981861][ T6016] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 56.102247][ T6139] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=6139 comm=syz.3.37 [ 56.106318][ T6139] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=6139 comm=syz.3.37 [ 56.135494][ T6016] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 56.138959][ T6016] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 56.142662][ T6016] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 56.145865][ T6016] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 56.148674][ T6016] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.159476][ T6118] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 56.164050][ T6016] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 56.186820][ T6142] netlink: 56 bytes leftover after parsing attributes in process `syz.0.34'. [ 56.465125][ T6034] usb 6-1: USB disconnect, device number 2 [ 56.515839][ T40] kauditd_printk_skb: 123 callbacks suppressed [ 56.515850][ T40] audit: type=1800 audit(1753567869.645:213): pid=6160 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.43" name="/" dev="9p" ino=65538 res=0 errno=0 [ 56.538520][ T40] audit: type=1400 audit(1753567869.665:214): avc: denied { read write } for pid=6180 comm="syz.1.44" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.546013][ T40] audit: type=1400 audit(1753567869.665:215): avc: denied { open } for pid=6180 comm="syz.1.44" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.556574][ T40] audit: type=1400 audit(1753567869.675:216): avc: denied { ioctl } for pid=6180 comm="syz.1.44" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.558784][ T6181] tipc: Started in network mode [ 56.567960][ T6181] tipc: Node identity 2, cluster identity 4711 [ 56.572504][ T6181] tipc: Node number set to 2 [ 56.691314][ T40] audit: type=1400 audit(1753567869.815:217): avc: denied { setopt } for pid=6190 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.697605][ T40] audit: type=1400 audit(1753567869.815:218): avc: denied { bind } for pid=6190 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.704318][ T40] audit: type=1400 audit(1753567869.815:219): avc: denied { name_bind } for pid=6190 comm="syz.1.47" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 56.711212][ T40] audit: type=1400 audit(1753567869.815:220): avc: denied { node_bind } for pid=6190 comm="syz.1.47" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 56.717664][ T40] audit: type=1400 audit(1753567869.825:221): avc: denied { create } for pid=6192 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 56.772615][ T6196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=6196 comm=syz.1.49 [ 56.818921][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'. [ 56.878077][ T6198] team0 (unregistering): Port device team_slave_0 removed [ 56.885397][ T6198] team0 (unregistering): Port device team_slave_1 removed [ 57.004220][ T40] audit: type=1400 audit(1753567870.135:222): avc: denied { create } for pid=6200 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 57.026795][ T6201] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 57.029650][ T6201] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 57.034678][ T6201] vhci_hcd vhci_hcd.0: Device attached [ 57.042686][ T6202] vhci_hcd: connection closed [ 57.043717][ T6172] vhci_hcd: stop threads [ 57.048079][ T6172] vhci_hcd: release socket [ 57.050591][ T6172] vhci_hcd: disconnect device [ 57.710571][ T6216] netlink: 36 bytes leftover after parsing attributes in process `syz.3.57'. [ 57.714495][ T6217] netlink: 36 bytes leftover after parsing attributes in process `syz.3.57'. [ 57.792382][ T3246] usb 7-1: USB disconnect, device number 2 [ 57.945873][ T6229] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 57.949521][ T5957] Bluetooth: hci2: command tx timeout [ 57.949523][ T5960] Bluetooth: hci0: command tx timeout [ 58.027414][ T6236] loop6: detected capacity change from 0 to 63 [ 58.039327][ T5957] Bluetooth: hci3: command tx timeout [ 58.039811][ T5960] Bluetooth: hci1: command tx timeout [ 58.354255][ T6252] netlink: 612 bytes leftover after parsing attributes in process `syz.2.67'. [ 58.461314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.518485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.595214][ T6269] syz.0.74: attempt to access beyond end of device [ 58.595214][ T6269] loop0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 58.604604][ T6269] qnx4: unable to read the superblock [ 58.660197][ T53] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 58.831400][ T53] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 58.833811][ T53] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 58.837128][ T53] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 58.841905][ T53] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 58.845510][ T53] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 58.851067][ T53] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 58.853571][ T53] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 58.860173][ T53] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 58.863729][ T53] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 58.867076][ T53] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 58.873062][ T53] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 58.875808][ T53] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 58.880299][ T53] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 58.884049][ T53] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 58.887537][ T53] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 58.894157][ T53] usb 6-1: string descriptor 0 read error: -22 [ 58.896061][ T53] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 58.898892][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.908379][ T53] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 59.002978][ T6296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.84'. [ 59.654000][ T6320] bond0: entered promiscuous mode [ 59.656178][ T6320] bond_slave_0: entered promiscuous mode [ 59.658502][ T6320] bond_slave_1: entered promiscuous mode [ 59.660927][ T6320] bond0: entered allmulticast mode [ 59.662951][ T6320] bond_slave_0: entered allmulticast mode [ 59.665192][ T6320] bond_slave_1: entered allmulticast mode [ 59.882547][ T6336] capability: warning: `syz.2.99' uses 32-bit capabilities (legacy support in use) [ 59.887773][ T6336] loop6: detected capacity change from 0 to 524287999 [ 60.029539][ T5957] Bluetooth: hci0: command tx timeout [ 60.031217][ T5960] Bluetooth: hci2: command tx timeout [ 60.072384][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'. [ 60.109532][ T5960] Bluetooth: hci3: command tx timeout [ 60.119793][ T5960] Bluetooth: hci1: command tx timeout [ 60.751601][ T6386] ======================================================= [ 60.751601][ T6386] WARNING: The mand mount option has been deprecated and [ 60.751601][ T6386] and is ignored by this kernel. Remove the mand [ 60.751601][ T6386] option from the mount to silence this warning. [ 60.751601][ T6386] ======================================================= [ 60.779241][ T6016] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 60.828477][ T6389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.231054][ T9] usb 6-1: USB disconnect, device number 3 [ 61.414476][ T6394] netlink: 'syz.1.117': attribute type 1 has an invalid length. [ 61.417742][ T6394] netlink: 224 bytes leftover after parsing attributes in process `syz.1.117'. [ 61.779219][ T6016] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 61.949418][ T6016] usb 7-1: Using ep0 maxpacket: 8 [ 61.953810][ T6016] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 61.958269][ T6016] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 61.962222][ T6016] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.967825][ T6016] usb 7-1: config 0 descriptor?? [ 62.177567][ T6016] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 62.273750][ T6409] ip6t_rpfilter: unknown options [ 62.346837][ T6413] syz.1.121 uses obsolete (PF_INET,SOCK_PACKET) [ 62.353794][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.121'. [ 62.365720][ T40] kauditd_printk_skb: 68 callbacks suppressed [ 62.365735][ T40] audit: type=1400 audit(1753567875.495:291): avc: denied { unlink } for pid=6412 comm="syz.1.121" name="#1" dev="tmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 62.377027][ T40] audit: type=1400 audit(1753567875.495:292): avc: denied { mount } for pid=6412 comm="syz.1.121" name="/" dev="overlay" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 62.519211][ T40] audit: type=1400 audit(1753567875.645:293): avc: denied { ioctl } for pid=6423 comm="syz.3.124" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.530410][ T6428] 9pnet: p9_errstr2errno: server reported unknown error œª°@˜’œª°@ [ 62.577055][ T6429] wireguard0: entered promiscuous mode [ 62.578939][ T6429] wireguard0: entered allmulticast mode [ 62.612548][ T9] usb 7-1: USB disconnect, device number 4 [ 62.667980][ T40] audit: type=1800 audit(1753567875.795:294): pid=6434 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.126" name="/" dev="9p" ino=65538 res=0 errno=0 [ 62.749274][ T53] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.826644][ T40] audit: type=1400 audit(1753567875.955:295): avc: denied { accept } for pid=6450 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 62.839057][ T6453] loop6: detected capacity change from 0 to 524287999 [ 62.844214][ T6068] buffer_io_error: 31 callbacks suppressed [ 62.844223][ T6068] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.848680][ T6068] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.853749][ T6068] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.856225][ T6068] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.858838][ T6068] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.861652][ T6068] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.864355][ T6068] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.866938][ T6068] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.870833][ T6068] ldm_validate_partition_table(): Disk read failed. [ 62.872058][ T40] audit: type=1400 audit(1753567876.005:296): avc: denied { append } for pid=6454 comm="syz.3.134" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 62.872998][ T6068] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.880446][ T40] audit: type=1400 audit(1753567876.005:297): avc: denied { mount } for pid=6454 comm="syz.3.134" name="/" dev="autofs" ino=9983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 62.883836][ T6068] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.891240][ T40] audit: type=1400 audit(1753567876.005:298): avc: denied { read } for pid=6454 comm="syz.3.134" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 62.892491][ T6068] Dev loop6: unable to read RDB block 0 [ 62.899610][ T40] audit: type=1400 audit(1753567876.005:299): avc: denied { open } for pid=6454 comm="syz.3.134" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 62.903440][ T6068] loop6: unable to read partition table [ 62.909542][ T40] audit: type=1400 audit(1753567876.015:300): avc: denied { ioctl } for pid=6454 comm="syz.3.134" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 62.922165][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 62.924589][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 62.924623][ T53] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 62.924639][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.926582][ T53] usb 5-1: config 0 descriptor?? [ 63.008307][ T6453] ldm_validate_partition_table(): Disk read failed. [ 63.010701][ T6453] Dev loop6: unable to read RDB block 0 [ 63.012675][ T6453] loop6: unable to read partition table [ 63.014573][ T6453] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 63.129468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.134656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.158395][ T53] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 63.163115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.300462][ T6490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.146'. [ 63.435068][ T6498] ALSA: seq fatal error: cannot create timer (-22) [ 63.607637][ T6422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.617586][ T6422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.645092][ T9] usb 5-1: USB disconnect, device number 2 [ 63.663328][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.151'. [ 63.689736][ T6509] comedi comedi3: pcl812: I/O port conflict (0xfff,16) [ 63.693446][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'. [ 63.695766][ T6517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6517 comm=syz.0.154 [ 63.696839][ T6509] netlink: 16 bytes leftover after parsing attributes in process `syz.3.153'. [ 63.696950][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'. [ 63.710147][ T6509] netlink: 16 bytes leftover after parsing attributes in process `syz.3.153'. [ 63.713466][ T6521] trusted_key: encrypted_key: master key parameter 'eOryptfs' is invalid [ 63.763046][ T6528] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.768176][ T6524] qnx6: unable to set blocksize [ 63.934097][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'. [ 64.017392][ T6544] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 64.019851][ T6546] netlink: 'syz.2.166': attribute type 7 has an invalid length. [ 64.032674][ T6546] : entered promiscuous mode [ 64.175163][ T6554] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.260215][ T6557] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 64.349273][ T53] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 64.523124][ T53] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 64.525486][ T53] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 64.529113][ T53] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.533010][ T53] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 64.536243][ T53] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 64.542725][ T53] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 64.545286][ T53] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 64.549082][ T53] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.553445][ T53] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 64.556857][ T53] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 64.562658][ T53] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 64.565057][ T53] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 64.568450][ T53] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.572196][ T53] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 64.575568][ T53] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 64.582707][ T53] usb 8-1: string descriptor 0 read error: -22 [ 64.585491][ T53] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 64.593097][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.604918][ T53] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 64.709231][ T839] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 64.759905][ T6562] tmpfs: Bad value for 'mpol' [ 64.765001][ T6562] warning: `syz.1.172' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 64.807384][ T24] usb 8-1: USB disconnect, device number 2 [ 64.844481][ T6564] netlink: 'syz.1.173': attribute type 1 has an invalid length. [ 64.859833][ T839] usb 5-1: Using ep0 maxpacket: 32 [ 64.873678][ T6560] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.171'. [ 65.320618][ T53] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 65.428139][ T6582] capability: warning: `syz.2.181' uses deprecated v2 capabilities in a way that may be insecure [ 65.449382][ T53] usb 6-1: device descriptor read/64, error -71 [ 65.689333][ T53] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 65.819972][ T53] usb 6-1: device descriptor read/64, error -71 [ 65.930274][ T53] usb usb6-port1: attempt power cycle [ 66.270640][ T53] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 66.289644][ T53] usb 6-1: device descriptor read/8, error -71 [ 66.292695][ T6603] CUSE: unknown device info "ý<±5æç—‘ë\áïð«ºzöŒ0z,~XY©+A}sÎ…F'%ÓËó:„Ij!ó@Q…åmß‘RÞúGQãò––q 6*³5p)ÙxÙ?," [ 66.305397][ T6603] CUSE: unknown device info "ÿŽ&b¬í%Z‰ñWú«)«×3\my­ åû" [ 66.307652][ T6603] CUSE: unknown device info "Ò­Sû‡¨‚¨«€ýmMÀiÊ_¿Ä0˱°Ý¯;qÈ]Â{ìi¹ë79ñ©{Ò0Ôµßt•º~ø±>V¤ûÞÂZÀ\.9êÁOC‡«®U™&†qÿ…±Ïmsfûkž½cêð±"" [ 66.313416][ T6603] CUSE: DEVNAME unspecified [ 66.315892][ T6603] xt_hashlimit: size too large, truncated to 1048576 [ 66.529231][ T53] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 66.549989][ T53] usb 6-1: device descriptor read/8, error -71 [ 66.629246][ T5996] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 66.657820][ T6611] bridge_slave_0: left allmulticast mode [ 66.660223][ T53] usb usb6-port1: unable to enumerate USB device [ 66.662048][ T6611] bridge_slave_0: left promiscuous mode [ 66.666543][ T6611] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.683150][ T6611] bridge_slave_1: left allmulticast mode [ 66.685571][ T6611] bridge_slave_1: left promiscuous mode [ 66.688160][ T6611] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.699300][ T6611] bond0: (slave bond_slave_0): Releasing backup interface [ 66.706819][ T6611] bond0: (slave bond_slave_1): Releasing backup interface [ 66.721993][ T6611] team0: Port device team_slave_0 removed [ 66.729084][ T6611] team0: Port device team_slave_1 removed [ 66.732360][ T6611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.735523][ T6611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.740072][ T6611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.743191][ T6611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.799298][ T5996] usb 8-1: Using ep0 maxpacket: 32 [ 66.815990][ T5996] usb 8-1: unable to get BOS descriptor or descriptor too short [ 66.819007][ T5996] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 66.822135][ T5996] usb 8-1: can't read configurations, error -71 [ 67.408915][ T6623] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 67.414761][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 67.414770][ T40] audit: type=1400 audit(1753567880.555:341): avc: denied { relabelto } for pid=6621 comm="syz.2.194" name="58" dev="tmpfs" ino=320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 67.420994][ T6623] process 'syz.2.194' launched './file0' with NULL argv: empty string added [ 67.426817][ T40] audit: type=1400 audit(1753567880.555:342): avc: denied { associate } for pid=6621 comm="syz.2.194" name="58" dev="tmpfs" ino=320 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 67.436921][ T40] audit: type=1400 audit(1753567880.555:343): avc: denied { add_name } for pid=6621 comm="syz.2.194" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 67.447069][ T40] audit: type=1400 audit(1753567880.555:344): avc: denied { create } for pid=6621 comm="syz.2.194" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.456412][ T40] audit: type=1400 audit(1753567880.555:345): avc: denied { associate } for pid=6621 comm="syz.2.194" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.464195][ T40] audit: type=1400 audit(1753567880.555:346): avc: denied { setattr } for pid=6621 comm="syz.2.194" name="file0" dev="tmpfs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.471233][ T40] audit: type=1400 audit(1753567880.555:347): avc: denied { execute } for pid=6621 comm="syz.2.194" name="file0" dev="tmpfs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.478390][ T40] audit: type=1400 audit(1753567880.555:348): avc: denied { read open } for pid=6621 comm="syz.2.194" path="/58/file0" dev="tmpfs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.481531][ T839] usb 5-1: unable to get BOS descriptor or descriptor too short [ 67.486015][ T40] audit: type=1400 audit(1753567880.555:349): avc: denied { execute_no_trans } for pid=6621 comm="syz.2.194" path="/58/file0" dev="tmpfs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.488877][ T839] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 67.498223][ T839] usb 5-1: can't read configurations, error -71 [ 67.502964][ T40] audit: type=1400 audit(1753567880.635:350): avc: denied { name_bind } for pid=6626 comm="syz.3.196" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 67.507696][ T6627] bridge_slave_0: left allmulticast mode [ 67.511406][ T6627] bridge_slave_0: left promiscuous mode [ 67.513241][ T6627] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.517823][ T6627] bridge_slave_1: left allmulticast mode [ 67.520571][ T6627] bridge_slave_1: left promiscuous mode [ 67.522419][ T6627] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.528361][ T6627] bond0: (slave bond_slave_0): Releasing backup interface [ 67.533948][ T6627] bond0: (slave bond_slave_1): Releasing backup interface [ 67.548681][ T6627] team0: Port device team_slave_0 removed [ 67.555878][ T6633] netlink: 'syz.3.196': attribute type 10 has an invalid length. [ 67.556505][ T6627] team0: Port device team_slave_1 removed [ 67.562397][ T6627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.564857][ T6627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.567898][ T6627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.573218][ T6627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.590622][ T6633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.594756][ T6633] team0: Port device bond0 added [ 67.600431][ T6632] Illegal XDP return value 4294967274 on prog (id 44) dev syz_tun, expect packet loss! [ 67.677891][ T6640] xt_bpf: check failed: parse error [ 67.752327][ T6647] syzkaller1: entered promiscuous mode [ 67.754406][ T6647] syzkaller1: entered allmulticast mode [ 67.944888][ T6665] kAFS: unparsable volume name [ 68.038381][ T6671] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 68.169257][ T5996] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 68.177781][ T6680] pim6reg1: entered promiscuous mode [ 68.179641][ T6680] pim6reg1: entered allmulticast mode [ 68.186080][ T6677] __nla_validate_parse: 3 callbacks suppressed [ 68.186093][ T6677] netlink: 16 bytes leftover after parsing attributes in process `syz.0.215'. [ 68.329213][ T5996] usb 8-1: Using ep0 maxpacket: 16 [ 68.337919][ T5996] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 68.342335][ T5996] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 68.348415][ T5996] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.352021][ T5996] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.355956][ T5996] usb 8-1: Product: ß³ [ 68.357645][ T5996] usb 8-1: Manufacturer: 碈쯾麡솦ᕂﮘ∜ï—í·î„‰ëš¢ç„™åª‹î“¬ç¼¦æ³Ÿé¨ˆî‹·éŽ½â±¨âšè¡‘î¤©ç¤Œç…¼ï²±çœªç¡¼ã°±ë¶©è¿¯êª…íŸœÍ¥á¾¿è„™à·µìª‹á¹æ—ï—äžîˆ‚ᤪ痢愷幻䣗粭㒪劲⼬肸䃮懊諗㨻䚦梄ì¥ç —æ¶è½¤ê‚¢â”šãŸˆã¯¦í‚¡è‘·ã½‰ç顰転໣鎡ë¶èžµì³» [ 68.367823][ T5996] usb 8-1: SerialNumber: ë¹–à¶á’‡ê”ªèƒ°æ¤•⃉㓠ﶢ㽄齵噾븕椔ᤨຠ塗ë°è©±ëœ¶ïŠ¿ï©ºæŒ´ï€“åŠ¥ì¼¼Ï› [ 68.581599][ T5996] cdc_ncm 8-1:1.0: bind() failure [ 68.585216][ T5996] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 68.587411][ T5996] cdc_ncm 8-1:1.1: bind() failure [ 68.592500][ T5996] usb 8-1: USB disconnect, device number 5 [ 68.681121][ T839] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 68.769418][ T34] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 68.833918][ T839] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 68.837680][ T839] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.845041][ T839] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 68.848705][ T839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 68.852208][ T839] usb 5-1: Product: syz [ 68.853823][ T839] usb 5-1: Manufacturer: syz [ 68.855384][ T839] usb 5-1: SerialNumber: syz [ 68.859621][ T3246] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 68.919408][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 68.923705][ T34] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 68.927149][ T34] usb 7-1: config 0 has no interface number 0 [ 68.929801][ T34] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 68.934219][ T34] usb 7-1: config 0 interface 85 has no altsetting 0 [ 68.938990][ T34] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 68.942821][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.946076][ T34] usb 7-1: Product: syz [ 68.947881][ T34] usb 7-1: Manufacturer: syz [ 68.950077][ T34] usb 7-1: SerialNumber: syz [ 68.954460][ T34] usb 7-1: config 0 descriptor?? [ 69.009308][ T3246] usb 6-1: Using ep0 maxpacket: 8 [ 69.013008][ T3246] usb 6-1: config 0 interface 0 has no altsetting 0 [ 69.015110][ T3246] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 69.017932][ T3246] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.023278][ T3246] usb 6-1: config 0 descriptor?? [ 69.062315][ T839] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 69.282268][ T839] usb 5-1: USB disconnect, device number 5 [ 69.299114][ T839] usblp0: removed [ 69.321847][ T6712] lo speed is unknown, defaulting to 1000 [ 69.324611][ T6712] lo speed is unknown, defaulting to 1000 [ 69.329116][ T6712] lo speed is unknown, defaulting to 1000 [ 69.334760][ T6712] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 69.343466][ T6712] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 69.362233][ T6712] lo speed is unknown, defaulting to 1000 [ 69.365276][ T6712] lo speed is unknown, defaulting to 1000 [ 69.367744][ T6712] lo speed is unknown, defaulting to 1000 [ 69.372230][ T6712] lo speed is unknown, defaulting to 1000 [ 69.438116][ T3246] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 69.626066][ T6736] netlink: 'syz.3.233': attribute type 5 has an invalid length. [ 69.626059][ T6737] netlink: 'syz.3.233': attribute type 5 has an invalid length. [ 69.630245][ T6736] netlink: 'syz.3.233': attribute type 7 has an invalid length. [ 69.631821][ T6737] netlink: 'syz.3.233': attribute type 7 has an invalid length. [ 69.643025][ T6736] : entered promiscuous mode [ 69.646677][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.233'. [ 69.946904][ T53] usb 6-1: USB disconnect, device number 8 [ 70.274467][ T34] appletouch 7-1:0.85: Failed to read mode from device. [ 70.277583][ T34] appletouch 7-1:0.85: probe with driver appletouch failed with error -5 [ 70.285840][ T34] usb 7-1: USB disconnect, device number 5 [ 70.536539][ T6784] loop6: detected capacity change from 0 to 2560 [ 70.540196][ T6784] buffer_io_error: 23 callbacks suppressed [ 70.540208][ T6784] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.546956][ T6784] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.551353][ T6784] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.554835][ T6784] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.558408][ T6784] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.562050][ T6784] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.564885][ T6784] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.567415][ T6784] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.570945][ T6784] ldm_validate_partition_table(): Disk read failed. [ 70.573763][ T6784] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.577136][ T6784] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.581166][ T6784] Dev loop6: unable to read RDB block 0 [ 70.583923][ T6784] loop6: unable to read partition table [ 70.588707][ T6784] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 70.995239][ T6841] netlink: 32 bytes leftover after parsing attributes in process `syz.1.263'. [ 70.999275][ T6108] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 71.035907][ T6845] mmap: syz.3.265 (6845) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.150357][ T6108] usb 7-1: Using ep0 maxpacket: 16 [ 71.153608][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.153783][ T6108] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 71.156404][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.159645][ T6108] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 71.165387][ T6108] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 71.168289][ T6108] usb 7-1: config 0 interface 0 has no altsetting 0 [ 71.173226][ T6108] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 71.176193][ T6108] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.178893][ T6108] usb 7-1: Product: syz [ 71.180555][ T6108] usb 7-1: Manufacturer: syz [ 71.182467][ T6108] usb 7-1: SerialNumber: syz [ 71.188796][ T6108] usb 7-1: config 0 descriptor?? [ 71.396948][ T6108] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input7 [ 71.403203][ T5347] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 71.416244][ T6872] netlink: 'syz.3.275': attribute type 3 has an invalid length. [ 71.419097][ T6872] netlink: 132 bytes leftover after parsing attributes in process `syz.3.275'. [ 71.423851][ T5347] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 71.428393][ T5347] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 71.438735][ T5965] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 71.447354][ T5347] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 71.452434][ T5347] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 71.457471][ T5347] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 71.469477][ T5347] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 71.669413][ T6814] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 71.679705][ T53] usb 7-1: USB disconnect, device number 6 [ 72.110285][ T6885] netlink: 'syz.1.279': attribute type 13 has an invalid length. [ 72.113947][ T6885] macvtap0: entered promiscuous mode [ 72.117638][ T6885] macvtap0: refused to change device tx_queue_len [ 72.274019][ T6897] lo speed is unknown, defaulting to 1000 [ 72.447187][ T6909] loop4: detected capacity change from 0 to 2560 [ 72.511353][ T40] kauditd_printk_skb: 55 callbacks suppressed [ 72.511368][ T40] audit: type=1400 audit(1753567885.645:406): avc: denied { execute } for pid=6910 comm="syz.2.286" path="/proc/206/task/207/net/netlink" dev="proc" ino=4026533324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 72.526627][ T40] audit: type=1400 audit(1753567885.645:407): avc: denied { read } for pid=6910 comm="syz.2.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.597230][ T40] audit: type=1400 audit(1753567885.725:408): avc: denied { write } for pid=6922 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.647635][ T6928] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 72.653759][ T6928] overlayfs: missing 'lowerdir' [ 72.768040][ T40] audit: type=1400 audit(1753567885.895:409): avc: denied { write } for pid=6933 comm="syz.1.292" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 72.809215][ T40] audit: type=1400 audit(1753567885.935:410): avc: denied { create } for pid=6933 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 72.817233][ T40] audit: type=1400 audit(1753567885.945:411): avc: denied { map } for pid=6933 comm="syz.1.292" path="socket:[15218]" dev="sockfs" ino=15218 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 73.099388][ T53] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 73.249382][ T53] usb 6-1: Using ep0 maxpacket: 8 [ 73.252259][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 73.256543][ T53] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 73.259636][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.263421][ T53] usb 6-1: config 0 descriptor?? [ 73.377809][ T40] audit: type=1400 audit(1753567886.505:412): avc: denied { bind } for pid=6939 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.463187][ T40] audit: type=1400 audit(1753567886.595:413): avc: denied { map } for pid=6943 comm="syz.2.296" path=2F70726F632F3231332F6E65742F70666B6579202864656C6574656429 dev="proc" ino=4026533428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 73.476768][ T53] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 73.521682][ T40] audit: type=1400 audit(1753567886.655:414): avc: denied { write } for pid=6945 comm="syz.2.297" path="socket:[13922]" dev="sockfs" ino=13922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.522932][ T6946] x_tables: ip_tables: tcpmss match: only valid for protocol 6 [ 73.656751][ T40] audit: type=1400 audit(1753567886.785:415): avc: denied { getopt } for pid=6951 comm="syz.2.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.821429][ T53] usb 6-1: USB disconnect, device number 9 [ 73.952184][ T839] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 74.100381][ T839] usb 7-1: Using ep0 maxpacket: 8 [ 74.104289][ T839] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 74.108115][ T839] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 74.118873][ T6978] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 74.119226][ T839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.121075][ T6978] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 74.129474][ T6978] vhci_hcd vhci_hcd.0: Device attached [ 74.132660][ T839] usb 7-1: config 0 descriptor?? [ 74.145319][ T6981] vhci_hcd: connection closed [ 74.146864][ T6182] vhci_hcd: stop threads [ 74.152389][ T6182] vhci_hcd: release socket [ 74.154311][ T6182] vhci_hcd: disconnect device [ 74.262704][ T7003] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000004 [ 74.352731][ T839] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 74.363310][ T7006] syz.1.317: attempt to access beyond end of device [ 74.363310][ T7006] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 74.367575][ T7006] XFS (nbd1): SB validate failed with error -5. [ 74.390485][ T6285] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 74.428028][ T7016] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 74.550005][ T6285] usb 8-1: Using ep0 maxpacket: 8 [ 74.553863][ T6285] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 74.558360][ T6285] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 74.561929][ T7018] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 74.562446][ T6285] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.562793][ T53] usb 7-1: USB disconnect, device number 7 [ 74.576780][ T6285] usb 8-1: config 0 descriptor?? [ 74.695549][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 74.698925][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'. [ 74.699552][ T7033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7033 comm=syz.2.323 [ 74.699661][ T7032] netlink: 32 bytes leftover after parsing attributes in process `syz.2.323'. [ 74.699684][ T7033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7033 comm=syz.2.323 [ 74.788708][ T6285] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 74.874653][ T7045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.328'. [ 74.905550][ T7046] tmpfs: Bad value for 'mpol' [ 74.905687][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.328'. [ 74.912674][ T7046] input: syz1 as /devices/virtual/input/input9 [ 74.979028][ T7052] fuse: Bad value for 'user_id' [ 74.981302][ T7052] fuse: Bad value for 'user_id' [ 75.051953][ T6034] usb 8-1: USB disconnect, device number 6 [ 75.269326][ T53] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 75.305402][ T7076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.338'. [ 75.419630][ T53] usb 6-1: Using ep0 maxpacket: 8 [ 75.422532][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 75.425989][ T53] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 75.428861][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.432964][ T53] usb 6-1: config 0 descriptor?? [ 75.530692][ T1346] cfg80211: failed to load regulatory.db [ 75.640288][ T53] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 75.656911][ T7083] tipc: Started in network mode [ 75.658599][ T7083] tipc: Node identity ce070601703c, cluster identity 4711 [ 75.661459][ T7083] tipc: Enabled bearer , priority 0 [ 75.664624][ T7083] syzkaller0: entered promiscuous mode [ 75.666444][ T7083] syzkaller0: entered allmulticast mode [ 75.679729][ T7083] tipc: Resetting bearer [ 75.684862][ T7082] tipc: Resetting bearer [ 75.692431][ T7082] tipc: Disabling bearer [ 75.829288][ T7089] ptrace attach of "/syz-executor exec"[5953] was attempted by ""[7089] [ 75.901136][ T53] usb 6-1: USB disconnect, device number 10 [ 75.903099][ C3] iowarrior 6-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 76.121364][ T7099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.345'. [ 76.290501][ T7102] ucma_write: process 216 (syz.1.347) changed security contexts after opening file descriptor, this is not allowed. [ 76.336400][ T7109] 9pnet_virtio: no channels available for device syz [ 76.339096][ T7109] 9pnet_virtio: no channels available for device syz [ 76.342371][ T7109] 9pnet_virtio: no channels available for device syz [ 76.345310][ T7109] 9pnet_virtio: no channels available for device syz [ 76.348165][ T7109] 9pnet_virtio: no channels available for device syz [ 76.351372][ T7109] 9pnet_virtio: no channels available for device syz [ 76.354646][ T7109] 9pnet_virtio: no channels available for device syz [ 76.357855][ T7109] 9pnet_virtio: no channels available for device syz [ 76.360411][ T7112] netlink: 256 bytes leftover after parsing attributes in process `syz.1.350'. [ 76.361232][ T7109] 9pnet_virtio: no channels available for device syz [ 76.366712][ T7109] 9pnet_virtio: no channels available for device syz [ 76.371834][ T7109] 9pnet_virtio: no channels available for device syz [ 76.374108][ T7109] 9pnet_virtio: no channels available for device syz [ 76.376279][ T7109] 9pnet_virtio: no channels available for device syz [ 76.379376][ T7109] 9pnet_virtio: no channels available for device syz [ 76.382036][ T7109] 9pnet_virtio: no channels available for device   [ 76.394380][ T7109] 9pnet_virtio: no channels available for device   [ 76.396803][ T7109] 9pnet_virtio: no channels available for device   [ 76.400920][ T7109] 9pnet_virtio: no channels available for device   [ 76.469513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.482090][ T7124] trusted_key: encrypted_key: key user:syz not found [ 76.499289][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 76.624703][ T7139] openvswitch: netlink: IPv4 tun info is not correct [ 76.663842][ T7145] bond0: entered promiscuous mode [ 76.666043][ T7145] bond0: left promiscuous mode [ 76.673380][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 76.753356][ T7150] sctp: [Deprecated]: syz.3.361 (pid 7150) Use of int in maxseg socket option. [ 76.753356][ T7150] Use struct sctp_assoc_value instead [ 76.760763][ T7150] netlink: 14 bytes leftover after parsing attributes in process `syz.3.361'. [ 76.769268][ T7152] dvmrp1: entered allmulticast mode [ 76.813196][ T7155] 9pnet_fd: Insufficient options for proto=fd [ 76.819962][ T7150] team0: Port device bond0 removed [ 76.822671][ T7150] bond0 (unregistering): Released all slaves [ 77.653393][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 77.653409][ T40] audit: type=1400 audit(1753567890.785:445): avc: denied { set_context_mgr } for pid=7194 comm="syz.2.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 77.664338][ T7195] binder: BINDER_SET_CONTEXT_MGR already set [ 77.666419][ T7195] binder: 7194:7195 ioctl 4018620d 2000000002c0 returned -16 [ 77.667911][ T40] audit: type=1400 audit(1753567890.795:446): avc: denied { name_bind } for pid=7197 comm="syz.0.375" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 77.679190][ T838] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 77.812637][ T40] audit: type=1400 audit(1753567890.945:447): avc: denied { bind } for pid=7210 comm="syz.0.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.814118][ T7213] vxcan1 speed is unknown, defaulting to 1000 [ 77.827059][ T7212] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 77.830966][ T7213] vxcan1 speed is unknown, defaulting to 1000 [ 77.833276][ T7213] vxcan1 speed is unknown, defaulting to 1000 [ 77.844521][ T40] audit: type=1400 audit(1753567890.975:448): avc: denied { view } for pid=7214 comm="syz.2.380" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 77.874985][ T40] audit: type=1400 audit(1753567891.005:449): avc: denied { mounton } for pid=7214 comm="syz.2.380" path="mnt:[4026533264]" dev="nsfs" ino=4026533264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.899359][ T3246] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 77.934032][ T61] vxcan1 speed is unknown, defaulting to 1000 [ 77.936131][ T7213] infiniband syz2: set active [ 77.937757][ T7213] infiniband syz2: added vxcan1 [ 77.972077][ T7213] RDS/IB: syz2: added [ 77.979598][ T7213] smc: adding ib device syz2 with port count 1 [ 77.981754][ T7213] smc: ib device syz2 port 1 has pnetid [ 77.984600][ T61] vxcan1 speed is unknown, defaulting to 1000 [ 77.988428][ T7213] vxcan1 speed is unknown, defaulting to 1000 [ 77.998941][ T7223] netlink: 'syz.2.383': attribute type 9 has an invalid length. [ 78.050829][ T3246] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 78.053491][ T3246] usb 6-1: config 0 has no interface number 0 [ 78.055462][ T3246] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 78.058874][ T3246] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 78.062830][ T3246] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 78.066496][ T3246] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 78.070316][ T3246] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 78.073889][ T3246] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 78.077893][ T3246] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 78.083359][ T3246] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.088905][ T3246] usb 6-1: config 0 descriptor?? [ 78.105554][ T7196] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 78.106947][ T7213] vxcan1 speed is unknown, defaulting to 1000 [ 78.107969][ T7196] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 78.155847][ T40] audit: type=1400 audit(1753567891.275:450): avc: denied { accept } for pid=7229 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 78.183860][ T3246] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 78.196859][ T7232] ip6t_REJECT: ECHOREPLY is not supported [ 78.221069][ T40] audit: type=1400 audit(1753567891.355:451): avc: denied { getopt } for pid=7231 comm="syz.2.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.313316][ T7213] vxcan1 speed is unknown, defaulting to 1000 [ 78.314778][ T40] audit: type=1400 audit(1753567891.445:452): avc: denied { associate } for pid=7233 comm="syz.2.387" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 78.325541][ T40] audit: type=1800 audit(1753567891.445:453): pid=7234 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.387" name="bus" dev="9p" ino=35913920 res=0 errno=0 [ 78.336754][ T40] audit: type=1800 audit(1753567891.465:454): pid=7234 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.387" name="bus" dev="9p" ino=35913920 res=0 errno=0 [ 78.415131][ T7213] vxcan1 speed is unknown, defaulting to 1000 [ 78.858128][ T7248] autofs: Bad value for 'fd' [ 78.862814][ T7248] overlayfs: missing 'lowerdir' [ 79.008372][ T7253] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 79.309460][ T6108] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 79.479825][ T6108] usb 8-1: Using ep0 maxpacket: 8 [ 79.483180][ T6108] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 79.486432][ T6108] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 79.489444][ T6108] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.534178][ T7282] netlink: 'syz.0.405': attribute type 3 has an invalid length. [ 79.561047][ T7279] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 79.604905][ T7287] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7287 comm=syz.0.406 [ 79.631917][ T7292] binder: 7291:7292 unknown command 0 [ 79.633707][ T7292] binder: 7291:7292 ioctl c0306201 200000000080 returned -22 [ 79.713359][ T5953] cgroup: fork rejected by pids controller in /syz0 [ 79.738518][ T7300] block nbd2: NBD_DISCONNECT [ 79.815126][ T7302] overlay: filesystem on ./bus not supported as upperdir [ 79.821548][ T7304] evm: overlay not supported [ 79.872310][ T7306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.959762][ T6169] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.105986][ T6169] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.176620][ T5957] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.180453][ T5957] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.184082][ T5957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.187547][ T5957] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.190192][ T5957] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.201593][ T6169] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.224990][ T7310] lo speed is unknown, defaulting to 1000 [ 80.228195][ T7310] vxcan1 speed is unknown, defaulting to 1000 [ 80.261486][ T6169] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.273780][ T5957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.277185][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.280271][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.285338][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.288279][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.319777][ T7312] lo speed is unknown, defaulting to 1000 [ 80.374540][ T7312] vxcan1 speed is unknown, defaulting to 1000 [ 80.616821][ T6034] usb 6-1: USB disconnect, device number 11 [ 80.624140][ T6034] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 80.796023][ T6169] bond0 (unregistering): Released all slaves [ 80.907648][ T6169] : left promiscuous mode [ 80.927896][ T7337] __nla_validate_parse: 6 callbacks suppressed [ 80.927906][ T7337] netlink: 52 bytes leftover after parsing attributes in process `syz.1.423'. [ 80.957180][ T7310] chnl_net:caif_netlink_parms(): no params data found [ 80.988995][ T7312] chnl_net:caif_netlink_parms(): no params data found [ 81.008110][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.424'. [ 81.085375][ T7310] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.087626][ T7310] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.091791][ T7310] bridge_slave_0: entered allmulticast mode [ 81.094576][ T7310] bridge_slave_0: entered promiscuous mode [ 81.126560][ T7310] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.128913][ T7310] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.132858][ T7310] bridge_slave_1: entered allmulticast mode [ 81.135618][ T7310] bridge_slave_1: entered promiscuous mode [ 81.246063][ T7312] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.248371][ T7312] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.252341][ T7312] bridge_slave_0: entered allmulticast mode [ 81.254983][ T7312] bridge_slave_0: entered promiscuous mode [ 81.263115][ T7310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.286332][ T7363] binder: 7361:7363 ioctl c0306201 200000000640 returned -22 [ 81.294441][ T7312] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.297559][ T7312] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.304021][ T7312] bridge_slave_1: entered allmulticast mode [ 81.308060][ T7312] bridge_slave_1: entered promiscuous mode [ 81.312877][ T7310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.421244][ T7310] team0: Port device team_slave_0 added [ 81.427746][ T7312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.435832][ T7312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.450244][ T7369] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 81.473428][ T7310] team0: Port device team_slave_1 added [ 81.509429][ T7312] team0: Port device team_slave_0 added [ 81.546234][ T7312] team0: Port device team_slave_1 added [ 81.552242][ T7310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.554719][ T7310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.563450][ T7310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.609083][ T7310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.611687][ T7310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.622446][ T7310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.634295][ T7312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.636514][ T7312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.645857][ T7312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.664767][ T7312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.667064][ T7312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.676412][ T7312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.723502][ T6169] hsr_slave_0: left promiscuous mode [ 81.725725][ T6169] hsr_slave_1: left promiscuous mode [ 81.742719][ T6169] veth1_macvtap: left promiscuous mode [ 81.744648][ T6169] veth0_macvtap: left promiscuous mode [ 81.746653][ T6169] veth1_vlan: left promiscuous mode [ 81.748450][ T6169] veth0_vlan: left promiscuous mode [ 81.895498][ T7382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.071519][ T838] usb 8-1: USB disconnect, device number 7 [ 82.270410][ T5960] Bluetooth: hci2: command tx timeout [ 82.350711][ T5960] Bluetooth: hci3: command tx timeout [ 82.940375][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.437'. [ 82.940640][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.437'. [ 82.945225][ T7399] syzkaller1: entered promiscuous mode [ 82.948520][ T7399] syzkaller1: entered allmulticast mode [ 82.971435][ T7310] hsr_slave_0: entered promiscuous mode [ 82.974455][ T7404] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7404 comm=syz.1.438 [ 82.974518][ T7310] hsr_slave_1: entered promiscuous mode [ 82.978353][ T7404] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7404 comm=syz.1.438 [ 82.982098][ T7310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.985369][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 82.985379][ T40] audit: type=1400 audit(1753567896.115:491): avc: denied { audit_write } for pid=7403 comm="syz.1.438" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 82.987558][ T7310] Cannot create hsr debugfs directory [ 82.991360][ T40] audit: type=1400 audit(1753567896.125:492): avc: denied { setattr } for pid=7403 comm="syz.1.438" name="/" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 83.024171][ T7312] hsr_slave_0: entered promiscuous mode [ 83.026960][ T7312] hsr_slave_1: entered promiscuous mode [ 83.030397][ T7312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.038136][ T7312] Cannot create hsr debugfs directory [ 83.305122][ T7310] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.349822][ T6285] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 83.414886][ T7310] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.509356][ T6285] usb 6-1: Using ep0 maxpacket: 8 [ 83.509757][ T6016] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 83.509809][ T7310] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.516448][ T6285] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 83.526183][ T6285] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 83.529368][ T6285] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.533124][ T6285] usb 6-1: config 0 descriptor?? [ 83.623411][ T7310] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.683061][ T6016] usb 8-1: Using ep0 maxpacket: 8 [ 83.688414][ T6016] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 83.693118][ T6016] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 83.702151][ T6016] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.705958][ T6169] bridge_slave_1: left allmulticast mode [ 83.708403][ T6169] bridge_slave_1: left promiscuous mode [ 83.712272][ T6169] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.718733][ T6169] bridge_slave_0: left allmulticast mode [ 83.722690][ T6169] bridge_slave_0: left promiscuous mode [ 83.724562][ T6169] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.928435][ T6169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.931451][ T6169] bond_slave_0: left promiscuous mode [ 83.933371][ T6169] bond_slave_0: left allmulticast mode [ 83.936268][ T6169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.939306][ T6169] bond_slave_1: left promiscuous mode [ 83.941113][ T6169] bond_slave_1: left allmulticast mode [ 83.943464][ T6169] bond0 (unregistering): Released all slaves [ 83.946683][ T6285] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 83.990728][ T7310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.997573][ T7310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.011466][ T7310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.028298][ T6169] tipc: Left network mode [ 84.028350][ T7310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.091534][ T7312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.097457][ T7312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.103510][ T7312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.111581][ T7312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.217022][ T7310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.230981][ T7312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.231050][ T53] usb 6-1: USB disconnect, device number 12 [ 84.247129][ T7312] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.251665][ T7310] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.256265][ T6179] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.258563][ T6179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.269272][ T6179] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.271511][ T6179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.279086][ T6179] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.281464][ T6179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.285890][ T6179] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.288204][ T6179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.333786][ T6169] hsr_slave_0: left promiscuous mode [ 84.337022][ T6169] hsr_slave_1: left promiscuous mode [ 84.341298][ T6169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.344444][ T6169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.348780][ T6169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.352074][ T6169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.355415][ T7450] netlink: 40 bytes leftover after parsing attributes in process `syz.1.442'. [ 84.367546][ T5960] Bluetooth: hci2: command tx timeout [ 84.386687][ T6169] veth1_macvtap: left promiscuous mode [ 84.389086][ T6169] veth0_macvtap: left promiscuous mode [ 84.391699][ T6169] veth1_vlan: left promiscuous mode [ 84.394806][ T6169] veth0_vlan: left promiscuous mode [ 84.439430][ T5960] Bluetooth: hci3: command tx timeout [ 84.468022][ T6169] pimreg (unregistering): left allmulticast mode [ 84.986347][ T6169] team0 (unregistering): Port device team_slave_1 removed [ 85.042551][ T6169] team0 (unregistering): Port device team_slave_0 removed [ 85.358417][ T6170] smc: removing ib device syz2 [ 85.510227][ T6034] vxcan1 speed is unknown, defaulting to 1000 [ 85.512177][ T6034] syz2: Port: 1 Link DOWN [ 85.672677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.679261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 85.684150][ T7312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.754230][ T7310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.809509][ T7482] netlink: 750 bytes leftover after parsing attributes in process `syz.1.446'. [ 85.854165][ T7310] veth0_vlan: entered promiscuous mode [ 85.877882][ T7310] veth1_vlan: entered promiscuous mode [ 85.932339][ T7310] veth0_macvtap: entered promiscuous mode [ 85.938615][ T7312] veth0_vlan: entered promiscuous mode [ 85.945480][ T7310] veth1_macvtap: entered promiscuous mode [ 85.949445][ T7312] veth1_vlan: entered promiscuous mode [ 85.972417][ T7310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.975578][ T7312] veth0_macvtap: entered promiscuous mode [ 85.984426][ T7310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.988966][ T7312] veth1_macvtap: entered promiscuous mode [ 85.993278][ T7310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.996003][ T7310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.998764][ T7310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.001786][ T7310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.017932][ T7312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.025832][ T7312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.038245][ T7312] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.042897][ T7312] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.045682][ T7312] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.048466][ T7312] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.088923][ T6182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.094076][ T6182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.114867][ T6172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.117400][ T6172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.126530][ T6172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.129012][ T6172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.138528][ T40] audit: type=1400 audit(1753567899.265:493): avc: denied { mounton } for pid=7310 comm="syz-executor" path="/syzkaller.ZJDf6c/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 86.148782][ T6170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.152179][ T6170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.185923][ T6285] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 86.194557][ T7505] ipt_ECN: cannot use operation on non-tcp rule [ 86.267238][ T61] usb 8-1: USB disconnect, device number 8 [ 86.280129][ T7515] netlink: 24 bytes leftover after parsing attributes in process `syz.4.450'. [ 86.294112][ T7517] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 86.320300][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.450'. [ 86.350860][ T6285] usb 6-1: Using ep0 maxpacket: 32 [ 86.359521][ T6285] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 86.372363][ T6285] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 86.375772][ T6285] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 86.378512][ T6285] usb 6-1: Product: syz [ 86.387192][ T6285] usb 6-1: Manufacturer: syz [ 86.388763][ T6285] usb 6-1: SerialNumber: syz [ 86.395757][ T6285] usb 6-1: config 0 descriptor?? [ 86.398986][ T7498] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 86.410008][ T6285] hub 6-1:0.0: bad descriptor, ignoring hub [ 86.412361][ T6285] hub 6-1:0.0: probe with driver hub failed with error -5 [ 86.429343][ T5960] Bluetooth: hci2: command tx timeout [ 86.458393][ T40] audit: type=1400 audit(1753567899.585:494): avc: denied { setopt } for pid=7536 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.498521][ T40] audit: type=1400 audit(1753567899.625:495): avc: denied { write } for pid=7540 comm="syz.4.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.506361][ T7541] netlink: 36 bytes leftover after parsing attributes in process `syz.4.458'. [ 86.519263][ T5957] Bluetooth: hci3: command tx timeout [ 86.539303][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 86.611070][ T40] audit: type=1400 audit(1753567899.745:496): avc: denied { getattr } for pid=7546 comm="syz.4.459" name="/" dev="9p" ino=35913914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 86.689309][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 86.692689][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 86.696054][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 86.698843][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.707069][ T9] usb 5-1: config 0 descriptor?? [ 86.915409][ T9] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 87.168107][ T7563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.171647][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 87.174519][ T7563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.319211][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 87.322164][ T24] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 87.325831][ T24] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.330844][ T24] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.334180][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.341190][ T24] usbtmc 9-1:16.0: bulk endpoints not found [ 87.500643][ T7498] usb 6-1: reset high-speed USB device number 13 using dummy_hcd [ 87.664351][ T7498] usb 6-1: device firmware changed [ 87.668288][ T6285] usb 6-1: USB disconnect, device number 13 [ 87.671581][ T9] usb 5-1: USB disconnect, device number 6 [ 87.809407][ T6285] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 87.969316][ T6285] usb 6-1: Using ep0 maxpacket: 32 [ 87.972890][ T6285] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 87.979529][ T6285] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 87.982356][ T6285] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 87.984901][ T6285] usb 6-1: Product: syz [ 87.986236][ T6285] usb 6-1: Manufacturer: Ë”âŠ¸ì–©é¾³ïˆ›èš€ë´¼ë´¯â·›ä£…ì‡µîŽ£î†ˆç€¬ážæ·Œï¥ î­®é¯¡â±µì„›ã‰•ä”Œé‚¾îæ‘šéš„㫜ᴊ켊寱麻 [ 87.993655][ T6285] usb 6-1: config 0 descriptor?? [ 87.995722][ T7552] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 87.998646][ T6285] hub 6-1:0.0: bad descriptor, ignoring hub [ 88.000736][ T6285] hub 6-1:0.0: probe with driver hub failed with error -5 [ 88.202696][ T7498] QAT: Device 2 not found [ 88.278556][ T7574] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 88.283805][ T7574] netlink: 76 bytes leftover after parsing attributes in process `syz.0.463'. [ 88.319520][ T6108] usb 6-1: USB disconnect, device number 14 [ 88.447238][ T7577] netlink: 68 bytes leftover after parsing attributes in process `syz.0.464'. [ 88.509304][ T5957] Bluetooth: hci2: command tx timeout [ 88.509325][ T5960] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 88.589295][ T5960] Bluetooth: hci3: command tx timeout [ 88.635883][ T40] audit: type=1800 audit(1753567901.765:497): pid=7587 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.466" name="/" dev="9p" ino=65538 res=0 errno=0 [ 88.736637][ T7590] Malformed UNC in devname [ 88.736637][ T7590] [ 88.738930][ T7590] CIFS: VFS: Malformed UNC in devname [ 88.774060][ T7601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.779053][ T53] lo speed is unknown, defaulting to 1000 [ 88.814548][ T7603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.472'. [ 88.938898][ T7614] netlink: 830 bytes leftover after parsing attributes in process `syz.0.475'. [ 89.115055][ T40] audit: type=1400 audit(1753567902.245:498): avc: denied { connect } for pid=7620 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.123303][ T40] audit: type=1400 audit(1753567902.245:499): avc: denied { relabelfrom } for pid=7620 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 89.133110][ T40] audit: type=1400 audit(1753567902.245:500): avc: denied { relabelto } for pid=7620 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 89.293343][ T7633] netlink: 17 bytes leftover after parsing attributes in process `syz.0.480'. [ 89.336372][ T40] audit: type=1400 audit(1753567902.465:501): avc: denied { getopt } for pid=7634 comm="syz.0.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.340444][ T7635] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 89.447043][ T40] audit: type=1400 audit(1753567902.575:502): avc: denied { read } for pid=7636 comm="syz.0.482" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 89.453418][ T7637] orangefs: client-core tried to read wrong size [ 89.455734][ T40] audit: type=1400 audit(1753567902.575:503): avc: denied { open } for pid=7636 comm="syz.0.482" path="/15/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 89.846292][ T5960] Bluetooth: hci0: hardware error 0x03 [ 89.848667][ T40] audit: type=1400 audit(1753567902.975:504): avc: denied { map } for pid=7659 comm="syz.0.490" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.877087][ T7658] IPVS: persistence engine module ip_vs_pe_s not found [ 89.885760][ T7663] lo speed is unknown, defaulting to 1000 [ 89.914578][ T7665] jfs: Unknown parameter 'usrquota®ý' [ 89.930955][ T61] usb 9-1: USB disconnect, device number 2 [ 89.953614][ T7671] loop8: detected capacity change from 0 to 79 [ 89.954931][ T40] audit: type=1400 audit(1753567903.085:505): avc: denied { create } for pid=7672 comm="syz.4.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 89.970874][ T40] audit: type=1400 audit(1753567903.105:506): avc: denied { setattr } for pid=7670 comm="syz.3.494" name="CAN_BCM" dev="sockfs" ino=20532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.981235][ T7671] affs: No valid root block on device nullb0 [ 89.986670][ T7676] kernel profiling enabled (shift: 63) [ 89.988751][ T7676] profiling shift: 63 too large [ 90.049670][ T7671] loop8: detected capacity change from 79 to 78 [ 90.346303][ T7710] netlink: 36 bytes leftover after parsing attributes in process `syz.1.508'. [ 90.349213][ T7710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.508'. [ 90.511996][ T7725] netlink: 'syz.1.514': attribute type 7 has an invalid length. [ 91.043068][ T7759] omfs: Invalid superblock (0) [ 91.476992][ T7772] siw: device registration error -23 [ 91.885004][ T7788] __nla_validate_parse: 2 callbacks suppressed [ 91.885015][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.531'. [ 91.960286][ T5960] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 92.497092][ T7822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.541'. [ 92.552010][ T7827] overlayfs: failed to resolve './file0': -2 [ 92.630661][ T7837] libceph: resolve '4' (ret=-3): failed [ 92.661806][ T7841] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 92.667628][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.546'. [ 92.670616][ T7841] nbd: socks must be embedded in a SOCK_ITEM attr [ 92.702064][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.546'. [ 92.709300][ T7840] nbd: socks must be embedded in a SOCK_ITEM attr [ 92.715941][ T7849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=7849 comm=syz.3.547 [ 92.759070][ T7853] binder: 7852:7853 unknown command 0 [ 92.761018][ T7853] binder: 7852:7853 ioctl c0306201 200000000080 returned -22 [ 92.771607][ T7853] xt_hashlimit: size too large, truncated to 1048576 [ 92.877304][ T7865] binder: 7861:7865 ioctl c0306201 2000000001c0 returned -14 [ 92.981434][ T7884] netlink: 180 bytes leftover after parsing attributes in process `syz.1.557'. [ 93.048405][ T7883] netlink: 48 bytes leftover after parsing attributes in process `syz.4.560'. [ 93.057250][ T7883] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.122350][ T7900] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 93.165858][ T7906] netlink: 596 bytes leftover after parsing attributes in process `syz.0.567'. [ 93.171472][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'. [ 93.174500][ T7906] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 93.176803][ T7906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.183217][ T7906] overlayfs: workdir and upperdir must be separate subtrees [ 93.482485][ T7935] fuse: Unknown parameter 'roo [ 93.482485][ T7935] mode' [ 93.583445][ T7947] netlink: 20 bytes leftover after parsing attributes in process `syz.1.580'. [ 93.589013][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.580'. [ 93.615907][ T7950] netdevsim netdevsim0 ªªªªªª: renamed from netdevsim0 (while UP) [ 93.639039][ T7937] kvm: pic: non byte write [ 93.645707][ T40] kauditd_printk_skb: 1854 callbacks suppressed [ 93.645722][ T40] audit: type=1326 audit(1753567906.815:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7924 comm="syz.4.573" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239dd8e9a9 code=0x50000 [ 93.648449][ T7953] netlink: 'syz.1.582': attribute type 6 has an invalid length. [ 93.656131][ T40] audit: type=1326 audit(1753567906.815:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7924 comm="syz.4.573" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239dd8e9a9 code=0x50000 [ 93.664112][ T40] audit: type=1326 audit(1753567906.815:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7924 comm="syz.4.573" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239dd8e9a9 code=0x50000 [ 93.666768][ T7950] audit: audit_backlog=65 > audit_backlog_limit=64 [ 93.671204][ T40] audit: type=1326 audit(1753567906.815:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7924 comm="syz.4.573" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239dd8e9a9 code=0x50000 [ 93.673586][ T7950] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 93.673597][ T7950] audit: backlog limit exceeded [ 93.689203][ T40] audit: type=1326 audit(1753567906.815:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7924 comm="syz.4.573" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239dd8e9a9 code=0x50000 [ 93.706388][ T40] audit: type=1326 audit(1753567906.815:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7924 comm="syz.4.573" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239dd8e9a9 code=0x50000 [ 93.715463][ T40] audit: type=1326 audit(1753567906.815:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7924 comm="syz.4.573" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239dd8e9a9 code=0x50000 [ 93.746982][ T7950] : renamed from bond0 (while UP) [ 93.811587][ T7966] fuse: Bad value for 'fd' [ 93.867586][ T7968] overlay: ./file0 is not a directory [ 93.871801][ T7968] overlay: ./file0 is not a directory [ 93.917507][ T7972] geneve2: entered promiscuous mode [ 93.919948][ T7972] geneve2: entered allmulticast mode [ 94.103532][ T7982] i2c i2c-1: Invalid block write size 33 [ 94.619231][ T53] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 94.769196][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 94.769302][ T53] usb 6-1: Using ep0 maxpacket: 8 [ 94.775785][ T53] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 94.780015][ T53] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.784275][ T53] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 94.787050][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.794801][ T53] usbtmc 6-1:16.0: bulk endpoints not found [ 94.919207][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 94.922064][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 94.925357][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 94.928365][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.931451][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.935314][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 94.938013][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.145301][ T24] usb 5-1: GET_CAPABILITIES returned 0 [ 95.147437][ T24] usbtmc 5-1:16.0: can't read capabilities [ 95.351744][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 95.355075][ T24] usb 5-1: USB disconnect, device number 7 [ 96.177889][ T8052] cgroup: release_agent respecified [ 96.317092][ T8055] input: syz0 as /devices/virtual/input/input10 [ 96.605616][ T8076] 9p: Unknown uid 00000000004294967295 [ 97.186187][ T8093] hub 9-0:1.0: USB hub found [ 97.187975][ T8093] hub 9-0:1.0: 1 port detected [ 97.220883][ T8096] __nla_validate_parse: 10 callbacks suppressed [ 97.220894][ T8096] netlink: 152 bytes leftover after parsing attributes in process `syz.0.624'. [ 97.297632][ T8107] program syz.3.627 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.361516][ T8116] fuse: Unknown parameter 'fÃ[c©^ [ 97.908441][ T8181] dump_stack_lvl+0x16c/0x1f0 [ 97.908499][ T8181] warn_alloc+0x248/0x3a0 [ 97.908522][ T8181] ? __pfx_warn_alloc+0x10/0x10 [ 97.908544][ T8181] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 97.908559][ T8181] ? __vmalloc_node_noprof+0xad/0xf0 [ 97.908574][ T8181] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 97.908592][ T8181] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 97.908608][ T8181] ? __lock_acquire+0x622/0x1c90 [ 97.908618][ T8181] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 97.908632][ T8181] ? __alloc_pages_noprof+0xb/0x1b0 [ 97.908647][ T8181] ? ___kmalloc_large_node+0x84/0x1e0 [ 97.908662][ T8181] __kvmalloc_node_noprof+0x30a/0x620 [ 97.908677][ T8181] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 97.908691][ T8181] ? net_generic+0xea/0x2a0 [ 97.908704][ T8181] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 97.908721][ T8181] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 97.908740][ T8181] hashlimit_mt_check_common+0x8bb/0x1460 [ 97.908758][ T8181] hashlimit_mt_check+0x71/0x90 [ 97.908771][ T8181] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 97.908785][ T8181] xt_check_match+0x283/0xa50 [ 97.908798][ T8181] ? __init_zone_device_page+0x2d2/0x690 [ 97.908814][ T8181] ? __pfx_xt_check_match+0x10/0x10 [ 97.908835][ T8181] ? xt_find_target+0x1f2/0x290 [ 97.908854][ T8181] ? xt_find_match+0x1f6/0x290 [ 97.908877][ T8181] find_check_entry.constprop.0+0x34e/0xa20 [ 97.908895][ T8181] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 97.908913][ T8181] ? lockdep_hardirqs_on+0x7c/0x110 [ 97.908931][ T8181] ? kfree+0x2b4/0x4d0 [ 97.908943][ T8181] ? translate_table+0xc0e/0x17b0 [ 97.908959][ T8181] translate_table+0xd0b/0x17b0 [ 97.908977][ T8181] ? __pfx_translate_table+0x10/0x10 [ 97.908996][ T8181] do_ip6t_set_ctl+0x570/0xb00 [ 97.909009][ T8181] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 97.909025][ T8181] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 97.909040][ T8181] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 97.909057][ T8181] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 97.909071][ T8181] nf_setsockopt+0x8a/0xf0 [ 97.909083][ T8181] ipv6_setsockopt+0x135/0x170 [ 97.909098][ T8181] rawv6_setsockopt+0xc2/0x510 [ 97.909109][ T8181] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 97.909132][ T8181] ? selinux_socket_setsockopt+0x6a/0x80 [ 97.909153][ T8181] ? sock_common_setsockopt+0x2e/0xf0 [ 97.909165][ T8181] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 97.909178][ T8181] do_sock_setsockopt+0xf0/0x1d0 [ 97.909191][ T8181] __sys_setsockopt+0x1a0/0x230 [ 97.909209][ T8181] __x64_sys_setsockopt+0xbd/0x160 [ 97.909224][ T8181] ? do_syscall_64+0x91/0x4c0 [ 97.909233][ T8181] ? lockdep_hardirqs_on+0x7c/0x110 [ 97.909248][ T8181] do_syscall_64+0xcd/0x4c0 [ 97.909259][ T8181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.909270][ T8181] RIP: 0033:0x7f506fd8e9a9 [ 97.909278][ T8181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.909288][ T8181] RSP: 002b:00007f506dbd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 97.909298][ T8181] RAX: ffffffffffffffda RBX: 00007f506ffb6080 RCX: 00007f506fd8e9a9 [ 97.909305][ T8181] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000009 [ 97.909311][ T8181] RBP: 00007f506fe10d69 R08: 0000000000000588 R09: 0000000000000000 [ 97.909316][ T8181] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 97.909322][ T8181] R13: 0000000000000000 R14: 00007f506ffb6080 R15: 00007ffec0e83418 [ 97.909335][ T8181] [ 97.926917][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.645'. [ 97.936714][ T8181] Mem-Info: [ 98.036113][ T8181] active_anon:12516 inactive_anon:0 isolated_anon:0 [ 98.036113][ T8181] active_file:6655 inactive_file:48978 isolated_file:31 [ 98.036113][ T8181] unevictable:1768 dirty:46 writeback:0 [ 98.036113][ T8181] slab_reclaimable:11975 slab_unreclaimable:72765 [ 98.036113][ T8181] mapped:25035 shmem:2429 pagetables:1449 [ 98.036113][ T8181] sec_pagetables:313 bounce:0 [ 98.036113][ T8181] kernel_misc_reclaimable:0 [ 98.036113][ T8181] free:415771 free_pcp:13798 free_cma:0 [ 98.054676][ T8181] Node 0 active_anon:51056kB inactive_anon:0kB active_file:26620kB inactive_file:195712kB unevictable:3536kB isolated(anon):0kB isolated(file):124kB mapped:100140kB dirty:184kB writeback:0kB shmem:6180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14064kB pagetables:5620kB sec_pagetables:1252kB all_unreclaimable? no Balloon:0kB [ 98.065430][ T8181] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 98.075249][ T8181] Node 0 DMA free:6364kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2376kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:336kB local_pcp:12kB free_cma:0kB [ 98.085037][ T8181] lowmem_reserve[]: 0 1234 1234 1234 1234 [ 98.086891][ T8181] Node 0 DMA32 free:32556kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49196kB inactive_anon:0kB active_file:26620kB inactive_file:195712kB unevictable:3536kB writepending:184kB present:2080628kB managed:1264284kB mlocked:0kB bounce:0kB free_pcp:44540kB local_pcp:2164kB free_cma:0kB [ 98.098942][ T8181] lowmem_reserve[]: 0 0 0 0 0 [ 98.103101][ T8181] Node 1 Normal free:1607172kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:11024kB local_pcp:2848kB free_cma:0kB [ 98.117057][ T8181] lowmem_reserve[]: 0 0 0 0 0 [ 98.120441][ T8181] Node 0 DMA: 1*4kB (M) 2*8kB (ME) 2*16kB (UE) 1*32kB (M) 2*64kB (UE) 2*128kB (ME) 3*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 0*2048kB 0*4096kB = 5332kB [ 98.131359][ T8181] Node 0 DMA32: 9*4kB (UE) 320*8kB (UME) 262*16kB (UM) 476*32kB (UME) 299*64kB (UME) 19*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 1*4096kB (U) = 47940kB [ 98.141024][ T8181] Node 1 Normal: 4*4kB (E) 10*8kB (UE) 11*16kB (E) 11*32kB (E) 12*64kB (UME) 3*128kB (E) 2*256kB (UM) 1*512kB (E) 1*1024kB (U) 1*2048kB (E) 387*4096kB (M) = 1591024kB [ 98.155490][ T8181] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.169244][ T8181] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.174986][ T8181] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 98.181158][ T8181] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 98.184917][ T8181] 57959 total pagecache pages [ 98.188687][ T8181] 0 pages in swap cache [ 98.194852][ T8181] Free swap = 124996kB [ 98.196810][ T8181] Total swap = 124996kB [ 98.198658][ T8181] 1048443 pages RAM [ 98.200293][ T8181] 0 pages HighMem/MovableOnly [ 98.202360][ T8181] 283043 pages reserved [ 98.204179][ T8181] 0 pages cma reserved [ 98.248734][ T8189] : (slave bond_slave_1): Releasing backup interface [ 98.359081][ T8212] nbd: must specify at least one socket [ 98.455719][ T8221] ubi31: attaching mtd0 [ 98.464737][ T8221] ubi31: scanning is finished [ 98.466267][ T8221] ubi31: empty MTD device detected [ 98.578487][ T8221] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 98.581580][ T8221] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 98.584105][ T8221] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 98.586701][ T8221] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 98.589917][ T8221] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 98.592248][ T8221] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 98.598067][ T8221] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1633785546 [ 98.601877][ T8221] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 98.605828][ T8229] ubi31: background thread "ubi_bgt31d" started, PID 8229 [ 98.962388][ T8254] dns_resolver: Unsupported server list version (0) [ 98.967675][ T40] kauditd_printk_skb: 29260 callbacks suppressed [ 98.967685][ T40] audit: type=1400 audit(1753567912.135:31628): avc: denied { execute } for pid=8253 comm="syz.3.657" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.985104][ T40] audit: type=1400 audit(1753567912.155:31629): avc: denied { create } for pid=8253 comm="syz.3.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 99.003670][ T8254] lo speed is unknown, defaulting to 1000 [ 99.300164][ T40] audit: type=1400 audit(1753567912.475:31630): avc: denied { ioctl } for pid=8269 comm="syz.3.661" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 99.311403][ T8270] /dev/nullb0: Can't open blockdev [ 99.317544][ T40] audit: type=1400 audit(1753567912.475:31631): avc: denied { mount } for pid=8265 comm="syz.1.662" name="/" dev="hugetlbfs" ino=20451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 99.350995][ T40] audit: type=1400 audit(1753567912.525:31632): avc: denied { create } for pid=8273 comm="syz.3.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.607737][ T53] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 99.651928][ T8282] netlink: 232 bytes leftover after parsing attributes in process `syz.1.667'. [ 99.739387][ T53] usb 8-1: device descriptor read/64, error -71 [ 99.746442][ T8291] program syz.0.671 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.766952][ T40] audit: type=1400 audit(1753567912.935:31633): avc: denied { append } for pid=8292 comm="syz.4.672" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 99.776974][ T8291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=8291 comm=syz.0.671 [ 99.789586][ T8295] netlink: 'syz.1.673': attribute type 10 has an invalid length. [ 99.800336][ T8297] netlink: 'syz.1.673': attribute type 10 has an invalid length. [ 99.823382][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.674'. [ 99.928049][ T8308] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 99.995767][ T40] audit: type=1400 audit(1753567913.155:31634): avc: denied { nlmsg_read } for pid=8314 comm="syz.1.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 99.999240][ T53] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 100.009296][ T40] audit: type=1400 audit(1753567913.165:31635): avc: denied { append } for pid=8319 comm="syz.4.683" name="2:0:0:0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 100.057461][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.678'. [ 100.140194][ T53] usb 8-1: device descriptor read/64, error -71 [ 100.219301][ T838] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 100.249571][ T53] usb usb8-port1: attempt power cycle [ 100.370137][ T40] audit: type=1400 audit(1753567913.545:31636): avc: denied { getopt } for pid=8345 comm="syz.1.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.421559][ T8348] syz.1.691: attempt to access beyond end of device [ 100.421559][ T8348] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 100.425576][ T8348] SQUASHFS error: Failed to read block 0x0: -5 [ 100.427563][ T8348] unable to read squashfs_super_block [ 100.436416][ T8348] syzkaller1: entered promiscuous mode [ 100.438239][ T8348] syzkaller1: entered allmulticast mode [ 100.545439][ T40] audit: type=1400 audit(1753567913.715:31637): avc: denied { setopt } for pid=8350 comm="syz.1.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 100.619271][ T53] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 100.632077][ T8358] xt_l2tp: missing protocol rule (udp|l2tpip) [ 100.649934][ T53] usb 8-1: device descriptor read/8, error -71 [ 100.824247][ T8365] xfrm0 speed is unknown, defaulting to 1000 [ 100.826334][ T8365] xfrm0 speed is unknown, defaulting to 1000 [ 100.828762][ T8365] xfrm0 speed is unknown, defaulting to 1000 [ 100.843775][ T8365] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 100.861514][ T8365] xfrm0 speed is unknown, defaulting to 1000 [ 100.864505][ T8365] xfrm0 speed is unknown, defaulting to 1000 [ 100.867310][ T8365] xfrm0 speed is unknown, defaulting to 1000 [ 100.871631][ T8365] xfrm0 speed is unknown, defaulting to 1000 [ 100.887800][ T8369] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.890830][ T8369] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.893655][ T8369] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.896517][ T8369] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.899294][ T53] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 100.903548][ T8369] vxlan0: entered promiscuous mode [ 100.905376][ T8369] vxlan0: entered allmulticast mode [ 100.912252][ T8371] loop4: detected capacity change from 0 to 7 [ 100.917253][ T6068] Dev loop4: unable to read RDB block 7 [ 100.920476][ T53] usb 8-1: device descriptor read/8, error -71 [ 100.922909][ T6068] loop4: unable to read partition table [ 100.924793][ T6068] loop4: partition table beyond EOD, truncated [ 100.930700][ T8371] Dev loop4: unable to read RDB block 7 [ 100.932711][ T8371] loop4: unable to read partition table [ 100.934598][ T8371] loop4: partition table beyond EOD, truncated [ 100.936921][ T8371] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà–e) failed (rc=-5) [ 101.029300][ T53] usb usb8-port1: unable to enumerate USB device [ 101.269460][ T6016] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 101.439328][ T6016] usb 9-1: Using ep0 maxpacket: 8 [ 101.446390][ T6016] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 101.450838][ T6016] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.454393][ T6016] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.458398][ T6016] usb 9-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 101.464503][ T6016] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 101.468243][ T6016] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.477169][ T6016] usbtmc 9-1:16.0: bulk endpoints not found [ 102.300992][ T8405] netlink: 'syz.1.714': attribute type 1 has an invalid length. [ 102.330279][ T8405] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.394800][ T8412] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.716'. [ 102.398921][ T8411] netlink: 'syz.3.716': attribute type 2 has an invalid length. [ 102.545257][ T8425] overlayfs: failed to set uuid (183/file0, err=-1); falling back to uuid=null. [ 102.548153][ T8425] overlayfs: failed to verify upper root origin [ 102.655538][ T8438] netlink: 'syz.3.724': attribute type 1 has an invalid length. [ 102.657980][ T8438] netlink: 224 bytes leftover after parsing attributes in process `syz.3.724'. [ 102.871539][ T8442] netlink: 168 bytes leftover after parsing attributes in process `syz.1.725'. [ 102.878338][ T8442] syz.1.725: attempt to access beyond end of device [ 102.878338][ T8442] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 102.882909][ T8442] syz.1.725: attempt to access beyond end of device [ 102.882909][ T8442] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 102.888462][ T8442] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 102.892644][ T8442] syz.1.725: attempt to access beyond end of device [ 102.892644][ T8442] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 102.896849][ T8442] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 102.906653][ T8442] syz.1.725: attempt to access beyond end of device [ 102.906653][ T8442] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 102.911154][ T8442] syz.1.725: attempt to access beyond end of device [ 102.911154][ T8442] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 102.915341][ T8442] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 102.920885][ T8442] syz.1.725: attempt to access beyond end of device [ 102.920885][ T8442] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 102.925190][ T8442] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 102.928660][ T8442] syz.1.725: attempt to access beyond end of device [ 102.928660][ T8442] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 102.933704][ T8442] syz.1.725: attempt to access beyond end of device [ 102.933704][ T8442] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 102.938145][ T8442] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 102.941842][ T8442] syz.1.725: attempt to access beyond end of device [ 102.941842][ T8442] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 102.946176][ T8442] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 102.950111][ T8442] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 102.953254][ T8442] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 102.956253][ T8442] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 103.239238][ T54] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 103.399246][ T54] usb 5-1: Using ep0 maxpacket: 8 [ 103.404118][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.408599][ T54] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 103.412555][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.418267][ T54] usb 5-1: config 0 descriptor?? [ 103.624341][ T54] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 103.911247][ T54] usb 5-1: USB disconnect, device number 8 [ 104.045736][ T6285] usb 9-1: USB disconnect, device number 3 [ 104.128220][ T8479] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 104.133956][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 104.133964][ T40] audit: type=1400 audit(1753567917.305:31647): avc: denied { read append } for pid=8476 comm="syz.4.735" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 104.149205][ T40] audit: type=1400 audit(1753567917.315:31648): avc: denied { open } for pid=8476 comm="syz.4.735" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 104.309388][ T54] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 104.451762][ T8489] netlink: 20 bytes leftover after parsing attributes in process `syz.3.736'. [ 104.459340][ T54] usb 6-1: Using ep0 maxpacket: 8 [ 104.464096][ T54] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 104.464564][ T40] audit: type=1400 audit(1753567917.635:31649): avc: denied { read } for pid=8487 comm="syz.3.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 104.467251][ T54] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 104.478102][ T54] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.482437][ T54] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 104.486697][ T54] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 104.491659][ T54] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 104.493985][ T54] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 104.498324][ T54] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.502290][ T54] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 104.505731][ T54] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 104.510844][ T54] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 104.513255][ T54] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 104.517398][ T54] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.522108][ T54] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 104.526761][ T54] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 104.535168][ T54] usb 6-1: string descriptor 0 read error: -22 [ 104.538096][ T54] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 104.541940][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.553428][ T54] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 104.959987][ T8478] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 104.962577][ T8478] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 104.968898][ T8478] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 104.974185][ T8478] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 104.976298][ T8478] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 104.981589][ T8478] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 104.986025][ T8478] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 104.988065][ T8478] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 104.992477][ T8478] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 105.023724][ T6285] usb 6-1: USB disconnect, device number 17 [ 105.374245][ T40] audit: type=1800 audit(1753567918.545:31650): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.742" name="bus" dev="overlay" ino=433 res=0 errno=0 [ 105.381407][ T40] audit: type=1804 audit(1753567918.545:31651): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.742" name="/newroot/72/bus/bus" dev="overlay" ino=433 res=1 errno=0 [ 105.393998][ T8504] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=90 sclass=netlink_tcpdiag_socket pid=8504 comm=syz.0.742 [ 105.481128][ T5960] Bluetooth: hci1: unexpected event for opcode 0x0c47 [ 105.549200][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 105.556490][ T8513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.745'. [ 105.608496][ T8516] syzkaller1: entered promiscuous mode [ 105.610567][ T8516] syzkaller1: entered allmulticast mode [ 105.620556][ T8517] bridge_slave_0: left allmulticast mode [ 105.622346][ T8517] bridge_slave_0: left promiscuous mode [ 105.624189][ T8517] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.637139][ T8517] bridge_slave_1: left allmulticast mode [ 105.638921][ T8517] bridge_slave_1: left promiscuous mode [ 105.641446][ T8517] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.648777][ T8517] : (slave bond_slave_0): Releasing backup interface [ 105.665400][ T8517] team0: Port device team_slave_0 removed [ 105.674401][ T8517] team0: Port device team_slave_1 removed [ 105.676597][ T8517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.678908][ T8517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.683836][ T8517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.686181][ T8517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.719281][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 105.722311][ T9] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 105.725884][ T9] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.729189][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.733467][ T9] usb 9-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 105.737388][ T9] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.740283][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.746135][ T9] usbtmc 9-1:16.0: bulk endpoints not found [ 105.852484][ T8521] netlink: 'syz.0.747': attribute type 2 has an invalid length. [ 105.911386][ T8527] 9p: Unknown uid 00000000004294967295 [ 105.956656][ T8530] syzkaller0: entered allmulticast mode [ 105.962587][ T8529] syzkaller0: left allmulticast mode [ 106.194324][ T40] audit: type=1400 audit(1753567919.365:31652): avc: denied { read } for pid=8538 comm="syz.3.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 106.208640][ T40] audit: type=1400 audit(1753567919.375:31653): avc: denied { map } for pid=8541 comm="syz.0.754" path="socket:[26744]" dev="sockfs" ino=26744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 106.317848][ T8539] FAT-fs (nullb0): bogus number of reserved sectors [ 106.320286][ T8539] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 106.436211][ T40] audit: type=1400 audit(1753567919.605:31654): avc: denied { mount } for pid=8552 comm="syz.0.756" name="/" dev="ramfs" ino=24847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 106.450536][ T40] audit: type=1400 audit(1753567919.625:31655): avc: denied { mounton } for pid=8552 comm="syz.0.756" path="/bus" dev="ramfs" ino=24850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 106.454582][ T8553] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 106.462049][ T8553] overlayfs: failed to set xattr on upper [ 106.464274][ T8553] overlayfs: ...falling back to redirect_dir=nofollow. [ 106.467018][ T8553] overlayfs: ...falling back to index=off. [ 106.469536][ T8553] overlayfs: ...falling back to uuid=null. [ 106.480344][ T8553] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 106.553971][ T8557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.758'. [ 106.669289][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.853303][ T8562] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.856055][ T8562] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.858791][ T8562] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.861674][ T8562] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.932036][ T8562] wireguard0: left promiscuous mode [ 106.933921][ T8562] wireguard0: left allmulticast mode [ 106.938696][ T61] lo speed is unknown, defaulting to 1000 [ 106.940707][ T61] syz0: Port: 1 Link DOWN [ 106.989291][ T5960] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.991237][ T5960] Bluetooth: hci2: command 0x0c1a tx timeout [ 107.046751][ T8576] 9pnet_fd: Insufficient options for proto=fd [ 107.085632][ T8584] veth0_to_bond: mtu less than device minimum [ 107.098478][ T8578] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 107.112026][ T8578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.766'. [ 107.225621][ T6182] Bluetooth: hci4: Frame reassembly failed (-84) [ 107.228505][ T6182] Bluetooth: hci4: Frame reassembly failed (-84) [ 107.258204][ T8605] 9pnet_fd: Insufficient options for proto=fd [ 107.277859][ T8606] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 107.354183][ T8612] netlink: 40 bytes leftover after parsing attributes in process `syz.3.778'. [ 107.357754][ T8612] netlink: 40 bytes leftover after parsing attributes in process `syz.3.778'. [ 107.363042][ T40] audit: type=1400 audit(1753567920.535:31656): avc: denied { name_connect } for pid=8611 comm="syz.3.778" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 107.391446][ T8614] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 107.394357][ T8614] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 107.397963][ T8614] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 108.221546][ T8616] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 108.224069][ T8616] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 108.226588][ T8616] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 108.306337][ T9] usb 9-1: USB disconnect, device number 4 [ 108.432656][ T8630] 9pnet_fd: Insufficient options for proto=fd [ 108.489426][ T8640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8640 comm=syz.3.788 [ 108.505781][ T8644] netlink: 'syz.4.789': attribute type 10 has an invalid length. [ 108.508778][ T8644] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.516713][ T8644] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.518974][ T8644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.524472][ T8644] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 108.759267][ T6108] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 108.819258][ T6285] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 108.929199][ T6108] usb 8-1: Using ep0 maxpacket: 8 [ 108.932274][ T6108] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.932290][ T6108] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 108.932302][ T6108] usb 8-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 108.932312][ T6108] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.932332][ T6108] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.932343][ T6108] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.935459][ T6108] usbtmc 8-1:16.0: bulk endpoints not found [ 108.989301][ T6285] usb 9-1: Using ep0 maxpacket: 8 [ 108.992919][ T6285] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 108.996927][ T6285] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 109.000810][ T6285] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.006833][ T6285] usb 9-1: config 0 descriptor?? [ 109.069290][ T5957] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.069330][ T5964] Bluetooth: hci3: command 0x0c1a tx timeout [ 109.220441][ T6285] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 109.229353][ T5960] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 109.229581][ T5964] Bluetooth: hci4: command 0x1003 tx timeout [ 109.592760][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 109.592774][ T40] audit: type=1400 audit(1753567922.765:31658): avc: denied { setopt } for pid=8704 comm="syz.1.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 109.601932][ T40] audit: type=1400 audit(1753567922.765:31659): avc: denied { write } for pid=8704 comm="syz.1.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 109.608603][ T8705] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 109.614162][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.810'. [ 109.663649][ T8708] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.811'. [ 109.962728][ T8713] binder: 8712:8713 unknown command 0 [ 109.964972][ T8713] binder: 8712:8713 ioctl c0306201 200000000080 returned -22 [ 109.971276][ T40] audit: type=1400 audit(1753567923.145:31660): avc: denied { call } for pid=8712 comm="syz.0.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 110.259209][ T6108] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 110.410972][ T6108] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 110.415493][ T6108] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 110.420064][ T6108] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 110.424106][ T6108] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 110.427416][ T6108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.433543][ T8716] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 110.438531][ T6108] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 110.716556][ T6108] usb 5-1: USB disconnect, device number 9 [ 110.770244][ T40] audit: type=1400 audit(1753567923.945:31661): avc: denied { create } for pid=8722 comm="syz.1.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 110.779638][ T40] audit: type=1400 audit(1753567923.955:31662): avc: denied { bind } for pid=8722 comm="syz.1.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.780076][ T8724] random: crng reseeded on system resumption [ 110.785766][ T40] audit: type=1400 audit(1753567923.955:31663): avc: denied { write } for pid=8722 comm="syz.1.817" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 110.798167][ T40] audit: type=1400 audit(1753567923.975:31664): avc: denied { ioctl } for pid=8722 comm="syz.1.817" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 111.149368][ T5960] Bluetooth: hci2: command 0x0c1a tx timeout [ 111.159346][ T5960] Bluetooth: hci3: command 0x0c1a tx timeout [ 111.264171][ T8728] netlink: 56 bytes leftover after parsing attributes in process `syz.0.818'. [ 111.278324][ T8728] affs: No valid root block on device nullb0 [ 111.398080][ T8734] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 111.400704][ T8734] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 111.403185][ T8734] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 111.405659][ T8734] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 111.408035][ T8734] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 111.410428][ T8734] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 111.412861][ T8734] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 111.415249][ T8734] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 111.417638][ T8734] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 111.420060][ T8734] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 111.512984][ T8738] futex_wake_op: syz.0.823 tries to shift op by 32; fix this program [ 111.580721][ T6285] usb 9-1: USB disconnect, device number 5 [ 111.581990][ C1] iowarrior 9-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 111.596880][ T6016] usb 8-1: USB disconnect, device number 13 [ 111.643425][ T8756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.829'. [ 111.647504][ T8756] dlm: no locking on control device [ 111.682316][ T8752] loop6: detected capacity change from 0 to 524287999 [ 111.731387][ T40] audit: type=1400 audit(1753567924.905:31665): avc: denied { load_policy } for pid=8760 comm="syz.4.830" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 111.731591][ T8762] ------------[ cut here ]------------ [ 111.740534][ T8762] WARNING: CPU: 0 PID: 8762 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 111.743954][ T8762] Modules linked in: [ 111.745383][ T8762] CPU: 0 UID: 0 PID: 8762 Comm: syz.4.830 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 111.750776][ T8762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.754191][ T8762] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 111.756287][ T8762] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 9d 46 7d 0e 00 75 0b c6 05 94 46 7d 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 111.761080][ T8766] netlink: 132 bytes leftover after parsing attributes in process `syz.1.831'. [ 111.762978][ T8762] RSP: 0018:ffffc900039f74f8 EFLAGS: 00010246 [ 111.767527][ T8762] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 111.770213][ T8762] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 111.772731][ T8762] RBP: 0000000400000000 R08: 0000000000000005 R09: 0000000000000000 [ 111.775208][ T8762] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000016 [ 111.777770][ T8762] R13: 1ffff9200073eeb4 R14: 0000000400000000 R15: 0000000000000016 [ 111.780462][ T8762] FS: 00007f239ec7f6c0(0000) GS:ffff8880d6720000(0000) knlGS:0000000000000000 [ 111.783720][ T8762] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.786087][ T8762] CR2: 0000200000001000 CR3: 000000005a9be000 CR4: 0000000000352ef0 [ 111.788633][ T8762] Call Trace: [ 111.789781][ T8762] [ 111.790808][ T8762] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 111.793070][ T8762] ? rcu_is_watching+0x12/0xc0 [ 111.794769][ T8762] ? trace_kmem_cache_alloc+0x28/0xc0 [ 111.796560][ T8762] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 111.798593][ T8762] ? hashtab_init+0x1b1/0x290 [ 111.800324][ T8762] __alloc_pages_noprof+0xb/0x1b0 [ 111.802090][ T8762] ___kmalloc_large_node+0x84/0x1e0 [ 111.803859][ T8762] ? hashtab_init+0x1b1/0x290 [ 111.805677][ T8762] __kmalloc_large_node_noprof+0x1c/0x70 [ 111.807609][ T8762] ? __pfx_ebitmap_read+0x10/0x10 [ 111.809498][ T8762] __kmalloc_noprof.cold+0xc/0x61 [ 111.811357][ T8762] hashtab_init+0x1b1/0x290 [ 111.812844][ T8762] ? __asan_memcpy+0x3c/0x60 [ 111.814514][ T8762] policydb_read+0x7b4/0x3220 [ 111.816376][ T8762] ? __pfx_policydb_read+0x10/0x10 [ 111.818184][ T8762] security_load_policy+0x15c/0x12c0 [ 111.820100][ T8762] ? irqentry_exit+0x3b/0x90 [ 111.821786][ T8762] ? __pfx_security_load_policy+0x10/0x10 [ 111.823843][ T8762] ? _copy_from_user+0x93/0xd0 [ 111.825563][ T8762] sel_write_load+0x332/0x1bd0 [ 111.827537][ T8762] ? irqentry_exit+0x3b/0x90 [ 111.829520][ T8762] ? lockdep_hardirqs_on+0x7c/0x110 [ 111.831546][ T8762] ? __pfx_sel_write_load+0x10/0x10 [ 111.833673][ T8762] ? lock_acquire+0x62/0x350 [ 111.835293][ T8762] ? __pfx_sel_write_load+0x10/0x10 [ 111.836945][ T8762] vfs_write+0x2a0/0x1150 [ 111.838313][ T8762] ? __pfx___mutex_lock+0x10/0x10 [ 111.840264][ T8762] ? __pfx_vfs_write+0x10/0x10 [ 111.842273][ T8762] ? __fget_files+0x20e/0x3c0 [ 111.843898][ T8762] ksys_write+0x12a/0x250 [ 111.845521][ T8762] ? __pfx_ksys_write+0x10/0x10 [ 111.847341][ T8762] do_syscall_64+0xcd/0x4c0 [ 111.849004][ T8762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.851053][ T8762] RIP: 0033:0x7f239dd8e9a9 [ 111.852772][ T8762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.859432][ T8762] RSP: 002b:00007f239ec7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 111.862408][ T8762] RAX: ffffffffffffffda RBX: 00007f239dfb6080 RCX: 00007f239dd8e9a9 [ 111.865137][ T8762] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000046 [ 111.867911][ T8762] RBP: 00007f239de10d69 R08: 0000000000000000 R09: 0000000000000000 [ 111.870835][ T8762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.873588][ T8762] R13: 0000000000000000 R14: 00007f239dfb6080 R15: 00007ffcdad433e8 [ 111.876406][ T8762] [ 111.877601][ T8762] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 111.880204][ T8762] CPU: 0 UID: 0 PID: 8762 Comm: syz.4.830 Not tainted 6.16.0-rc7-syzkaller-00127-g302f88ff3584 #0 PREEMPT(full) [ 111.883903][ T8762] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.887286][ T8762] Call Trace: [ 111.888412][ T8762] [ 111.889511][ T8762] dump_stack_lvl+0x3d/0x1f0 [ 111.891126][ T8762] panic+0x71c/0x800 [ 111.892586][ T8762] ? __pfx_panic+0x10/0x10 [ 111.894205][ T8762] ? show_trace_log_lvl+0x29b/0x3e0 [ 111.896037][ T8762] ? check_panic_on_warn+0x1f/0xb0 [ 111.898051][ T8762] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 111.900282][ T8762] check_panic_on_warn+0xab/0xb0 [ 111.902071][ T8762] __warn+0xf6/0x3c0 [ 111.903544][ T8762] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 111.905660][ T8762] report_bug+0x3c3/0x580 [ 111.907169][ T8762] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 111.909387][ T8762] handle_bug+0x184/0x210 [ 111.910814][ T8762] exc_invalid_op+0x17/0x50 [ 111.912257][ T8762] asm_exc_invalid_op+0x1a/0x20 [ 111.913761][ T8762] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 111.915759][ T8762] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 9d 46 7d 0e 00 75 0b c6 05 94 46 7d 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 111.921675][ T8762] RSP: 0018:ffffc900039f74f8 EFLAGS: 00010246 [ 111.923479][ T8762] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 111.925884][ T8762] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 111.928256][ T8762] RBP: 0000000400000000 R08: 0000000000000005 R09: 0000000000000000 [ 111.930735][ T8762] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000016 [ 111.933186][ T8762] R13: 1ffff9200073eeb4 R14: 0000000400000000 R15: 0000000000000016 [ 111.935587][ T8762] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 111.937552][ T8762] ? rcu_is_watching+0x12/0xc0 [ 111.939041][ T8762] ? trace_kmem_cache_alloc+0x28/0xc0 [ 111.941004][ T8762] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 111.942931][ T8762] ? hashtab_init+0x1b1/0x290 [ 111.944386][ T8762] __alloc_pages_noprof+0xb/0x1b0 [ 111.945987][ T8762] ___kmalloc_large_node+0x84/0x1e0 [ 111.947607][ T8762] ? hashtab_init+0x1b1/0x290 [ 111.949098][ T8762] __kmalloc_large_node_noprof+0x1c/0x70 [ 111.950863][ T8762] ? __pfx_ebitmap_read+0x10/0x10 [ 111.952896][ T8762] __kmalloc_noprof.cold+0xc/0x61 [ 111.954480][ T8762] hashtab_init+0x1b1/0x290 [ 111.955908][ T8762] ? __asan_memcpy+0x3c/0x60 [ 111.957364][ T8762] policydb_read+0x7b4/0x3220 [ 111.958849][ T8762] ? __pfx_policydb_read+0x10/0x10 [ 111.960479][ T8762] security_load_policy+0x15c/0x12c0 [ 111.962211][ T8762] ? irqentry_exit+0x3b/0x90 [ 111.963663][ T8762] ? __pfx_security_load_policy+0x10/0x10 [ 111.965457][ T8762] ? _copy_from_user+0x93/0xd0 [ 111.966958][ T8762] sel_write_load+0x332/0x1bd0 [ 111.968472][ T8762] ? irqentry_exit+0x3b/0x90 [ 111.969937][ T8762] ? lockdep_hardirqs_on+0x7c/0x110 [ 111.971873][ T8762] ? __pfx_sel_write_load+0x10/0x10 [ 111.973905][ T8762] ? lock_acquire+0x62/0x350 [ 111.975449][ T8762] ? __pfx_sel_write_load+0x10/0x10 [ 111.977345][ T8762] vfs_write+0x2a0/0x1150 [ 111.978883][ T8762] ? __pfx___mutex_lock+0x10/0x10 [ 111.980620][ T8762] ? __pfx_vfs_write+0x10/0x10 [ 111.982334][ T8762] ? __fget_files+0x20e/0x3c0 [ 111.984144][ T8762] ksys_write+0x12a/0x250 [ 111.985731][ T8762] ? __pfx_ksys_write+0x10/0x10 [ 111.987470][ T8762] do_syscall_64+0xcd/0x4c0 [ 111.989034][ T8762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.991137][ T8762] RIP: 0033:0x7f239dd8e9a9 [ 111.992703][ T8762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.999356][ T8762] RSP: 002b:00007f239ec7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 112.002153][ T8762] RAX: ffffffffffffffda RBX: 00007f239dfb6080 RCX: 00007f239dd8e9a9 [ 112.005013][ T8762] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000046 [ 112.007617][ T8762] RBP: 00007f239de10d69 R08: 0000000000000000 R09: 0000000000000000 [ 112.010087][ T8762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.012526][ T8762] R13: 0000000000000000 R14: 00007f239dfb6080 R15: 00007ffcdad433e8 [ 112.014946][ T8762] [ 112.016754][ T8762] Kernel Offset: disabled [ 112.018101][ T8762] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:12:05 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855a57c5 RDI=ffffffff9b0b9e60 RBP=ffffffff9b0b9e20 RSP=ffffc900039f6e60 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000038 R14=ffffffff9b0b9e20 R15=ffffffff855a5760 RIP=ffffffff855a57ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f239ec7f6c0 ffffffff 00c00000 GS =0000 ffff8880d6720000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=000000005a9be000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000027a15 RCX=0000000000000001 RDX=0000000000000000 RSI=00000000ffffffff RDI=ffffffff8e5c4e00 RBP=ffffffff8e5c4e00 RSP=ffffc90004917730 R8 =0000000000000006 R9 =0000000000001000 R10=0000000000000000 R11=0000000000000001 R12=ffff88802606c880 R13=00000000ffffffff R14=00000000ffffffff R15=0000000000000000 RIP=ffffffff8b8690c8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6820000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000002cf87000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fed56611d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fed56611d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fed56611d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fed56611d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fed56611de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fed56611ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fed56786488 00007fed56786480 00007fed56786478 00007fed56786450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fed572ed100 00007fed56786440 00007fed56786458 00007fed567864a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fed56786498 00007fed56786490 00007fed56786488 00007fed56786480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffea0001182480 RCX=ffffffff82064e4a RDX=ffff888026a4a440 RSI=ffffffff820669af RDI=ffffea0001182480 RBP=ffffea0001182480 RSP=ffffc90003687520 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=00007f7be06f7000 R14=ffffc900036878c0 R15=ffffc90003687608 RIP=ffffffff820581f1 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555646ad500 ffffffff 00c00000 GS =0000 ffff8880d6920000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7be20e56c0 CR3=00000000517dd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000002000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffda162d5b0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7be1411d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7be1411d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7be1411d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7be1411d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7be1411de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7be1411ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000d85f3 RBX=0000000000000003 RCX=ffffffff8b869c99 RDX=0000000000000000 RSI=ffffffff8de3046a RDI=ffffffff8c1574e0 RBP=ffffed1003bda000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801ded0000 R14=ffffffff90a94250 R15=0000000000000000 RIP=ffffffff8b8687ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a20000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe42043d000 CR3=0000000034b70000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556e602694 000055556e6023e0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556e5f9ed8 000055556e5f9de0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004b00303b01000 069003434b95922a 45933defede4d60d d4cce65deecb9e2a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 06060168d203d080 080004e003001000 04d0030fffffffff ffff0404c0030210 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 86037a797301ffff fffffffffffff908 0480032482a01000 0480040100000208 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008060601248804 800402100004013f b600020004880340 0180808080820004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010180041880a2c0 8808000100000008 0606012488048004 02100004013fb600 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200048803400180 8080808200048603 7a797301ffffffff fffffffff9080480 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 032482a010000480 0401000002080606 0168d203d0800800 04e00300100004d0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030fffffffffffff 0404c00302100004 b00303b010000690 03434b95922a4593 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000