last executing test programs: 45.814434417s ago: executing program 2 (id=127): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x88a, 0x2) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) (async) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1e) (async, rerun: 32) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0x19, 0x1, 0x0, "14a5593b595ccb9e289f1548f12ec9745f90084a013424cf6dc99d2466980300", 0x38414761}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000090c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028006001900040000c0f2cba2f9e5c71bc2"], 0x44}}, 0x0) 45.499356315s ago: executing program 2 (id=130): socket$inet_udp(0x2, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = io_uring_setup(0x6257, &(0x7f0000000300)={0x0, 0x17ba, 0x100, 0x1, 0x256}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0xb74, 0x4, 0xc, 0x7fff0000}]}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000000040)=0x1) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000d0000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x0) syz_io_uring_setup(0x1ed3, &(0x7f0000000680)={0x0, 0x10, 0x10100, 0x5, 0x279}, &(0x7f00000002c0), &(0x7f0000000140)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x38}}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) fanotify_init(0x10, 0x400) pipe(&(0x7f0000000500)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 45.271240782s ago: executing program 2 (id=131): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)={0x74, 0x0, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xbe2cd1427c94682b}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x72}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0xa}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8917}]}, 0x74}, 0x1, 0x0, 0x0, 0x57}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 45.181870792s ago: executing program 2 (id=133): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='vegas', 0x5) (async) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1000000000000072}, 0x4000010) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) (async) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') (async) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000400)=@abs={0x1}, 0x6e) pread64(r4, &(0x7f0000000240)=""/164, 0x131, 0x131) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r3, 0x801, 0x70bd2a, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xd4209235e937efa7}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) (async) syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7], 0x90}}, 0x0) (async) r8 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) (async) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_disconnect(r8) (async) syz_usb_control_io$cdc_ncm(r8, &(0x7f0000000040)={0x14, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x44, &(0x7f0000000680)={0x20, 0x17, 0xe8, "27a197945bfe4ea9282023cce41f920787e3cfc63f45e7ddd9c50ad197a3516548b7879d0748ca1b0052c8ce2d2dbde25880ded2a5671bae850d15347432651724dd9cb0a50fcabe3b96789737320ad09ef9d4205137dffe9704c0723529c45abeceb08855f61a1ce63859990c2abccc8f61519f59e28f41bd18dabd671f8bb23593a55958d4af7d2e0dd2c29a030bc6120c64acadf5e39d3c6449b90094494bce8554937de4f72dc96a6e9ff26ecea9aaa155b1297a8add3b72c08b197b4eccbc39d2f93f35e85f0b7f5558d9ae97a20e9bd345edd187a8a20000000000000000000011299c5981"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x8, 0x8, 0x9, 0x6, 0xd6e5, 0x5, 0x1, 0xfffef000, 0x1, 0x2, 0x3, 0x800}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000540)={0x20, 0x83, 0x2}, &(0x7f0000000580)={0x20, 0x87, 0x2, 0x5}, &(0x7f00000005c0)={0x20, 0x89, 0x2}}) 43.550310764s ago: executing program 2 (id=149): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001200210300"], 0x1c}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmmsg(r1, &(0x7f00000077c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) lsetxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=@v2={0x3, 0x3, 0x7, 0x7}, 0x9, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x10004, 0x6, 0x70000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) statfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)=""/182) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r3, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) 43.281502032s ago: executing program 2 (id=155): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000006140)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0xf, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0xff14) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09103b28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4811}, 0x40884) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYRESHEX=r3, @ANYRES64=r11], 0x1c}}, 0x840) write$nci(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) 43.220893889s ago: executing program 32 (id=155): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000006140)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0xf, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0xff14) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09103b28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4811}, 0x40884) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYRESHEX=r3, @ANYRES64=r11], 0x1c}}, 0x840) write$nci(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) 27.981129014s ago: executing program 3 (id=327): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket(0x2, 0x80805, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000100)={0xae, [0xff, 0x1], 0x6}, 0x10) (async) r3 = socket(0x28, 0x5, 0x0) (async) syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', r1, 0x29, 0x6, 0xe3, 0x9, 0x39, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8, 0x7800, 0x0, 0x3ff}}) (async) bind$can_raw(r3, &(0x7f0000000200)={0x1d, r1}, 0x10) (async) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000080)=0x1, 0x4) 27.810705284s ago: executing program 3 (id=328): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x2, 0xf506, 0x4f565559, 0x3, 0x0, 0xff, 0x0, 0x6, 0x1, 0x4, 0x1, 0x4}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000002f0000800000000000000000a0000043c0002802c000180140003002001000000000000000000000000000214000400fe8800000000000000000000000001010c000280050001001700000031ab2a932cc9a1"], 0x50}, 0x1, 0x0, 0x0, 0x4c086}, 0x200440c4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x5, 0x6}, 0x6) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000004c0)={0x0, 0x200, 0x1e00, 0x3231564e, 0x2, [0x2], [0x7fc], [0x4], [0x400000000000001]}) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04ff0a90fb769b0ba9246a08bfcdc4604d24f344cf"], 0xd) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60e0ffac00142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b00fffc", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a55be23091af0b80001596f90dbc9324f67300000000000079691c246e753eb6a321756adc91f6fa3beec9625ead4a34cfe53bb0cf432a5403c9e27204534232804da586e07246a11556efdbd781360cbfbb7d8423ccc4c675c26bba376a6a20ec4da262e007da866444fb1ed4145dfbdb86ed35bb2c1a7f3965fc73f83c332149ca11a2995c3e2a3534dfeb4ae3104852614dd79fadc1"], 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'macvtap0\x00', &(0x7f0000000000)=@ethtool_test={0x1a, 0xc, 0x6, 0x3, [0x9f45, 0x800, 0x0]}}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101082, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x33) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=ANY=[], 0x118}], 0x1, 0x0, 0xfffffffffffffe74, 0x408c4c5}, 0x4844) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r7, 0x8008af26, &(0x7f0000000180)={0x1}) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="780023e3070a0102000000000000e96db119af190d91d83cf022d771468600000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d60800f80d0000000008000140000000010800014000000009080001400000000b080002"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYRES16=r4], 0x38}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r10 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) mkdirat(r10, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4) 25.731245099s ago: executing program 3 (id=373): r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x2932762e758a263e, 0x0, 0x7}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x36, &(0x7f00000046c0)=ANY=[@ANYBLOB="ffffffffffff0180c2000000865d605678c100002b0000b6272291000000000000000000fe80001900004cb600000000000000aa"], 0x0) 25.641866655s ago: executing program 3 (id=374): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x2200000, &(0x7f0000000380)={'trans=virtio,', {[{@cache_fscache}, {@cachetag={'cachetag', 0x3d, 'auxv\x00'}}, {@msize={'msize', 0x3d, 0x3}}, {@version_u}, {@access_any}], [{@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x30, 0x0, 0x61, 0x33, 0x30, 0x66, 0x65], 0x2d, [0x31, 0x31, 0x66, 0x36], 0x2d, [0x61, 0x38, 0x32, 0x31], 0x2d, [0x65, 0x61, 0x79, 0x35], 0x2d, [0x34, 0x36, 0x64, 0x33, 0x39, 0x66, 0x61, 0x35]}}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@seclabel}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x39, 0x30, 0x62, 0x33, 0x5a, 0x37, 0x33], 0x2d, [0x33, 0x31, 0x39, 0x31], 0x2d, [0x30, 0x62, 0x31, 0x62], 0x2d, [0x30, 0x39, 0x30, 0x38], 0x2d, [0x61, 0x38, 0x39, 0x61, 0x0, 0x5d, 0x39, 0x30]}}}]}}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='auxv\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002e0001002abd70000000000008000000", @ANYRESDEC=r0, @ANYBLOB="0b00e880976b6408686030000500018099"], 0x2c}], 0x1}, 0x0) (async) umount2(&(0x7f0000000340)='./file0\x00', 0x8) 25.641515105s ago: executing program 3 (id=375): write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x1, 0x4, 0x2, 0x1, "80071743bd0a576ab09b86464efb7d1e9b2e96b22cddff212e0bf0ed964ede469a2974a6fffff767f232402625b27d211eaaf0cb0f280e19eca8c0c1c1f3b8b610e13c5388f42b5731e6855b4dc1b5c5db5bc7607e47186ff2d3c12b2e84dc69588bd54f0a040e2b5b38d1f67f"}, 0x7d) r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)}, 0x0) 24.961856474s ago: executing program 3 (id=377): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000000580)={r2, &(0x7f0000000440)='batadv_slave_0\x00', 0x40200, &(0x7f0000000480)={@align=0x7, {0x7, 0x7, 0x2, 0x1}}, 0x1d, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0x6e3c}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000680)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f0000000700)={r9, r10, 0x0, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x0, 0x0]}) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)={0x1c, r7, 0xd, 0x70bd28, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x40) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1a, 0x4, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4004000) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r3, 0x501, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x20000004) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf8, r0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffc}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd}]}, 0xf8}, 0x1, 0x0, 0x0, 0x2}, 0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000300003801400020062617461647630000000000000000000080001000200000008000300000000000600040005000000"], 0x44}}, 0x0) 24.946621346s ago: executing program 33 (id=377): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000000580)={r2, &(0x7f0000000440)='batadv_slave_0\x00', 0x40200, &(0x7f0000000480)={@align=0x7, {0x7, 0x7, 0x2, 0x1}}, 0x1d, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0x6e3c}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000680)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f0000000700)={r9, r10, 0x0, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x0, 0x0]}) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)={0x1c, r7, 0xd, 0x70bd28, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x40) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1a, 0x4, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4004000) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r3, 0x501, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x20000004) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf8, r0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffc}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd}]}, 0xf8}, 0x1, 0x0, 0x0, 0x2}, 0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000300003801400020062617461647630000000000000000000080001000200000008000300000000000600040005000000"], 0x44}}, 0x0) 3.740058756s ago: executing program 4 (id=764): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x38}}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) fanotify_init(0x10, 0x400) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.590166109s ago: executing program 4 (id=765): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYRES64=r2], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.589624339s ago: executing program 4 (id=766): r0 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f00000001c0), &(0x7f00000005c0)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NILFS_IOCTL_RESIZE(r2, 0x40086e8b, &(0x7f0000000380)=0x2a65) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x800, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x6}, {0xfff3}, {0x6, 0xe}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000001c0)=0x6533, 0x4) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmmsg$unix(r4, &(0x7f0000007d00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000440)=""/230, 0xe6}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000000540)=""/104, 0x68}, {&(0x7f0000000700)=""/215, 0xd7}, {&(0x7f00000008c0)=""/91, 0x5b}, {&(0x7f0000000940)=""/215, 0xd7}], 0x6}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000ac0)=""/199, 0xc7}, {&(0x7f0000000bc0)=""/94, 0x5e}, {&(0x7f0000000c40)=""/248, 0xf8}, {&(0x7f0000000d40)=""/112, 0x70}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/191, 0xbf}, {&(0x7f0000000e80)=""/224, 0xe0}, {&(0x7f0000000f80)=""/157, 0x9d}, {&(0x7f0000001040)=""/101, 0x65}], 0xa}}, {{&(0x7f0000001180)=@abs, 0x6e, &(0x7f0000003540)=[{&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000001200)=""/201, 0xc9}, {&(0x7f0000001300)=""/227, 0xe3}, {&(0x7f00000003c0)=""/22, 0x16}, {&(0x7f0000001400)=""/167, 0xa7}, {&(0x7f0000004940)=""/4096, 0x1000}], 0x6}}, {{&(0x7f00000035c0), 0x6e, &(0x7f0000003780)=[{&(0x7f0000000800)=""/52, 0x34}, {&(0x7f0000003640)=""/97, 0x61}, {&(0x7f00000014c0)=""/33, 0x21}, {&(0x7f0000005940)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/16, 0x10}, {&(0x7f0000003700)=""/120, 0x78}, {&(0x7f0000006940)=""/4096, 0x1000}], 0x7, &(0x7f0000007940)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000007a00)=""/189, 0xbd}, {&(0x7f0000007ac0)=""/160, 0xa0}], 0x2, &(0x7f0000003880)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000007c80)=[{&(0x7f0000007b80)=""/118, 0x76}, {&(0x7f0000007c00)=""/125, 0x7d}], 0x2, &(0x7f0000007cc0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}], 0x6, 0x2001, &(0x7f0000007e80)) getsockopt$inet_int(r6, 0x0, 0x13, 0x0, &(0x7f0000000040)) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000340)={&(0x7f0000000300)={&(0x7f0000000240)="1b12c249f89dc192bd8b28d3ad28e3c349702375513b75f8d4fab72ab5218501607395c639e7971b20473239873ff508194b00549e204c12e57fb431f267a613d39efa2d8b51783fbcbdbd13ce4b5fb584670069f78957bd777597a38a315994c160071af770929c6a2e89a6f469c8cc08a6", 0x72, 0x0, 0x5, 0x2}, 0x1}, 0x1) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) r7 = syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0x2943) ioctl$BLKROSET(r7, 0x125d, &(0x7f00000003c0)) recvfrom$inet(r5, 0x0, 0x0, 0x2043, 0x0, 0x0) r8 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, &(0x7f0000000000)={0x6, {"e512864f2c63b42b1e937260904ce544", "b80b00", "98fed86df169f801002f69ff0008e800"}, 0x3ff, 0x5}) ioctl$DVB_DEMUX_DMX_START(r8, 0x6f29) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010007bd7000fddbdf2555000000080001006400000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) syz_io_uring_setup(0xbbd, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x0, 0x0, r0}, 0x0, 0x0) 3.471806503s ago: executing program 4 (id=767): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$inet(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000080), 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 3.471204744s ago: executing program 4 (id=768): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0281, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x2, 0xfffffffffffffffd, &(0x7f0000000340)) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000240)={0x2, 0x0, [{0xffffff81, 0x4, 0x0, 0x0, @msi={0x7, 0x40000000, 0x9, 0x400}}, {0x8, 0x3, 0x0, 0x0, @sint={0xb380000, 0xd3}}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x24, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRESOCT=r0, @ANYRES16, @ANYBLOB="2589acabdfd67e706e0b5c0fb984956697c28e0528fe"], 0x14}, 0x1, 0x0, 0x0, 0x6010041}, 0x4040805) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000140)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) 3.411711977s ago: executing program 4 (id=769): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000024c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x1d8, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0x194, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x190, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd5c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x76f4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbb}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7dae}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa5c7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbeb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x75}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xaa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x200}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) r4 = openat$fb1(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x3f, 0x0, 0x1, 0x3e, 0x0, 0x0, {}, {0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) socket(0x18, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r6, 0xc208ae62, 0x0) r7 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) syz_open_dev$tty1(0xc, 0x4, 0x3) unshare(0x22020600) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(0xffffffffffffffff, 0x0, 0xa) r10 = openat$cgroup_ro(r9, &(0x7f0000000180)='cgroup.events\x00', 0x300, 0x0) read$FUSE(r10, &(0x7f0000000480)={0x2020}, 0x2020) 2.090728487s ago: executing program 0 (id=776): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x2208}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f8483f0000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f00000001c0)={r5, r5, 0x5, 0x2000, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r4, 0xc01064c4, &(0x7f00000002c0)={&(0x7f0000000240)=[r5], 0x1}) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="000000003a00010025bd7000ffdbdf250c000000"], 0x14}}, 0x4000000) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x2000000000000154, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r9, r11, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8}}, 0x40) write$tun(r8, &(0x7f0000001740)={@val={0x70}, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0xfffd, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x42) r12 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000f0ffffffbca30000000000002403000020feffff720af0fff8ffffff71a4f2ff000000001f030000000000002e100200000000002604fdffff02000014010000000000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf3a0cd0a77de966c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="10000000001000003c0033800b000100697036746e6c00002c000280140003002001000000000000000000000000020000000000000000000000000001000e000000000019fa895167bc33b6fc163de786e5421732796e46e0e43fed7e0f84d5935daf279c6e1b1f7a0dbd159cba90f2ba6c1beab2"], 0x5c}}, 0x0) 1.164949571s ago: executing program 0 (id=793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000090900010073797a301200000050000000090a010400000000000000000100100008000a40000000000900010073797a3000000000080005400000001e6c880fd008000140000060000900020073797a32000000000800034000000023140000001000010000000000000000000000000a", @ANYRES32=r0], 0x98}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0400000203010100000000000000000a00000205000500020000000900020073797a3200000000090002f8b0b728a50073797a3200000000050005"], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) r3 = socket$kcm(0x2, 0x2, 0x73) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f00000004c0)={0x7, @meta={0x50314b52, 0x48bad32d, 0xc317, 0x69aa, 0x1c7f8861}}) socket$kcm(0x2, 0x2, 0x73) r7 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10) bind$inet(r7, &(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f00000001c0)) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000400)=[{r9, 0x2000}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000000040)=0x18) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(xtea)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r9, 0x0) 680.900692ms ago: executing program 5 (id=803): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0xffff}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}, 0x1, 0xf5ffffff}, 0x4800) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r3, 0x8) 530.887868ms ago: executing program 5 (id=804): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async, rerun: 64) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000040000924211ec000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newqdisc={0x6, 0x24, 0xf1d, 0x0, 0x4, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xfff3}, {0xd}}, [@TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x0, 0x7f, 0x5, 0x80000000, 0x0, 0x3f8, 0x7}}, {0x0, 0x2, [0xb, 0x4, 0x9, 0x8a2e, 0x400, 0x200, 0x0]}}, {{0x0, 0x1, {0x80, 0x4, 0x1ff, 0x0, 0x0, 0xfffffffb, 0x9ae}}, {0x0, 0x2, [0x108, 0x3]}}, {{0x0, 0x1, {0x5, 0xf, 0xa7, 0x10001, 0x2, 0xf52, 0x4042}}, {0x0, 0x2, [0x2, 0x3, 0x5]}}, {{0x0, 0x1, {0x9, 0x2, 0xab4, 0x7, 0x1, 0xd4f, 0xffffffff}}, {0x0, 0x2, [0x9, 0x7, 0x8000]}}, {{0x0, 0x1, {0x8, 0xf, 0x1, 0xfff, 0x1, 0x8, 0x8}}, {0x0, 0x2, [0x4, 0xdeeb, 0xc, 0xa, 0x5, 0x0, 0x362]}}, {{0x0, 0x1, {0xb, 0x0, 0x8000, 0x10, 0x2, 0x2, 0xb96}}, {0x0, 0x2, [0xfff, 0x0]}}]}]}, 0x30}}, 0x804) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x40, 0x29, 0x800, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x9, 0xfff1}, {0xfff2, 0x1}, {0xfff2, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x41}}, @tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x5, 0xfa}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40001) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000380)={0x2, 0x0, 0x7, 0xffffffffffffffff}) (async, rerun: 32) r6 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) recvmsg$unix(r6, &(0x7f0000000840)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/46, 0x2e}, {&(0x7f00000003c0)=""/160, 0xa0}, {&(0x7f0000000640)=""/118, 0x76}, {&(0x7f0000000500)=""/128, 0x80}, {&(0x7f0000000900)=""/152, 0x98}, {&(0x7f0000000340)=""/7, 0x7}, {&(0x7f00000009c0)=""/194, 0xc2}], 0x7, &(0x7f00000005c0)}, 0x12140) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 64) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) timer_create(0x0, &(0x7f0000000200)={0x0, 0x11, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async, rerun: 32) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='$+{\x00', 0x0, 0xffffffffffffffff) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r10, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) finit_module(0xffffffffffffffff, 0x0, 0x4) (async, rerun: 32) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {0x8}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 529.520951ms ago: executing program 1 (id=805): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000500)={@rand_addr=' \x01\x00', 0x36, r3}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'ipvlan0\x00', 0x0}) (async) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000006c0)={&(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @broadcast}, 0x4, 0x4, 0x3}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000700)="6265fbefe545810f32b439a775dd217ee7a22159f4900221a0b549668d919fc411bcc9218cfbb597e859396d5d77bc4c266c9effae726c7ef334a756df531bdf0ecb51f3acde57b4d7bd262f94aa2af3b5fd1d5e424f720293825ea7ae9f3f345e3592f280741e8b270a99ee4bf7ebf71b", 0x71}, {&(0x7f0000000200)="2d15b98584", 0x5}, {&(0x7f0000000380)="10a7aaa403c011ad08a0b16a314d6634a636d87e9308e6de33588b6e8f244a8e889ed02d0bdef7a4d1c3bec11e695b8f690fc8f230caed4d526d688e6a5fb04bffc24523c7518152a991305fe96116c2e21a6c82889cfc90ef470ec426944a199d60b4e4c141d534aad21478bfca996e0367567b1805f9574b057bd3c44fbaa1e43f85b6823f56b2ec146613df94df801267e9eafc02296b3b9310f82c2f91ecd0bd2a639b18bd6eef2cef1876bad791a89218ae03144bfbf1763985c956c534b7e3f2ceb9b33f882676feb5252c1f826753cf11224608fc207a0fd3949b8f3212ace92b445b84725007fe0da6f5a0", 0xef}, {&(0x7f0000000480)="a560a08ac10c8797fd602a7cb661001864467828b4f95e45ab27bb", 0x1b}, {&(0x7f0000000780)="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", 0x1af}, {&(0x7f0000000600)='\a', 0x1}], 0x6}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) 526.761659ms ago: executing program 5 (id=806): r0 = gettid() capget(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000080)={0x9, 0x0, 0x4, 0x3ff, 0x4, 0x81}) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) r1 = io_uring_setup(0x2688, &(0x7f0000000300)={0x0, 0x600, 0x80, 0x8001004, 0x3d7}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r3, 0x200204) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r6 = accept(r2, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0f0000000400000004000000a400000000000000", @ANYRES32, @ANYBLOB="00000000000000898885af51dc78aa0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r6}, 0x20) recvmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) chdir(0x0) setxattr$security_capability(&(0x7f0000000100)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)=@v2={0x2000000, [{0xffffffff, 0x5}, {0x5}]}, 0x14, 0x3) 461.756876ms ago: executing program 1 (id=807): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0xa8301, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xffffffffffff, 0x5, 0xfffffffffffffffa}, {0x2, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x1, 0x0, 0x2, 0x7c, 0xfffffffe}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xffffffffffff, 0x5, 0xfffffffffffffffa}, {0x2, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x1, 0x0, 0x2, 0x7c, 0xfffffffe}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) (async) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000000), 0x4, &(0x7f0000000080)={'trans=virtio,', {[{@dfltgid}]}}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) read$FUSE(r3, &(0x7f0000003480)={0x2020}, 0x2020) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f00000001c0)={0x1}) 461.632325ms ago: executing program 5 (id=808): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x1401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080) 390.768081ms ago: executing program 1 (id=809): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0)={0xa}, 0x1) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x6, @pix={0x100, 0x7, 0x29335b58, 0x8, 0xfffffffb, 0xe6, 0xc, 0x4, 0x0, 0x2, 0x0, 0x2}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000080)=r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100ffffffff00000000010000000c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32=r5], 0x6c}}, 0x20000000) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) 299.308446ms ago: executing program 5 (id=810): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000004c0)={0x1f, 0x0, 0x3}, 0x6) write(r1, &(0x7f0000000040)="05000000010000", 0x7) ioctl$TIOCL_SETSEL(r0, 0x80085610, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x80, 0x100}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000340), &(0x7f0000000100)=@udp}, 0x20) close(r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0xff, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0x12, 0x5, 0xcc}, {0x805, 0x2, 0x1, 0x45, 0x7, 0x0, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x0, 0x3, 0x6, 0x3, 0x84, 0x7, 0x83, 0x50, 0x8, 0x1, 0x4, 0x7, 0x24ab}], 0xffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x4008000) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_buf(r8, 0x0, 0x20, &(0x7f00000001c0)=""/83, &(0x7f0000000000)=0x53) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 298.700258ms ago: executing program 0 (id=811): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x900) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) read(r0, &(0x7f00000000c0)=""/232, 0xffffffffffffffe2) 241.08658ms ago: executing program 0 (id=812): syz_open_dev$tty1(0xc, 0x4, 0x1) io_uring_setup(0x3c93, &(0x7f0000000300)={0x0, 0xd6eb, 0x1, 0x1000, 0x60}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000007000000020000000300000000010000", @ANYRES32, @ANYBLOB="03000000000000000000000000000000000000009bf04efe367d60589d17505babea638de6a5f8aa05cec4bba0d757d07e0fa0a60c992ae92f27cefb10c6617c053214e3acd4765e5420f562afda2ea6e5dfb081c5764cfd6bce50f0473b5307ecd2c15d0d53bdfc6b74d4daa2487d9547f7cd4acb3e17265aa00b4c78c62e7669a12c0b460675c4224f7b1156fb2cdd47c5dbc9d7150bed5eceb78f5a5a29e567269827f6f53024d8d9de1efa5c1ba33445750c437aa7f57b228a882ab6d43c6df8e7aaec2b3c432e5cac7e31ce6fbb2982883861e27b94d19de2231e24b5881c4b798608", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x400, 0x1, 0xfffff0e6, 0x40000, 0x1, 0x7, '\x00', 0x0, r0, 0x5, 0x0, 0x2, 0x7}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0xd}, 0x50) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r2) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x4, 0x1, 0x1, 0x40000003, {0xa, 0x4e20, 0xffffce99, @remote, 0x107}}}, 0x80, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="edaf827280ee"}) userfaultfd(0x80801) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x42, 0x18) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48881) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r4) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r10, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x3, 0x228d, 0x9, @empty, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x80, 0x8, 0x401, 0x7}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x8c, r8, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xde}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x4000050) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) 88.203235ms ago: executing program 1 (id=813): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f00000001c0)={&(0x7f0000000000)=[{0x1, 0x0, 0x320, 0xa17, 0x0, 0xfffffffffffffff7, 0x80000000, 0x1}, {0x0, 0x0, 0x7, 0x1ff, 0xfffffffffffffff8, 0x8, 0x100000000, 0xfff}, {0x0, 0x0, 0x7ff, 0x3, 0x3, 0x8b8, 0x9, 0x1}, {0x1, 0x0, 0xffffffffffffffff, 0x800, 0xe, 0x2, 0x3, 0x9}, {0x0, 0x0, 0x4, 0x0, 0x4, 0x401, 0x6, 0x3}, {0x2, 0x0, 0x5b41, 0x5, 0x0, 0xb3, 0x6, 0x6}, {0x2, 0x0, 0x100000001, 0x6, 0x2, 0x7f, 0x4, 0x3107}, {0x1, 0x0, 0x3, 0x3, 0xfffffffffffffffe, 0x3, 0x9, 0x80}], 0x8, 0x38, 0x0, 0x4}) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, &(0x7f0000000200)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000340)={0x28, 0x1, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000300)}) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000380)=@x86={0x2, 0x5, 0xcc, 0x0, 0x1, 0x40, 0x1, 0x0, 0x9, 0xf1, 0xac, 0x0, 0x0, 0x5, 0xffff0001, 0x2, 0x5, 0x6, 0x7, '\x00', 0x7, 0x6}) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000400)={0x80, 0x64, "41eb6795beac787a3a06cc300931774c1dbd24318ad3418055396b8d1c5c32bf4837f36330e34ef1f0820dee95899048be690017776ec74c641e4c33aa018fc7ad2c9681fa050c4ca89be2fdbed6ca17c07bf9cc278957945c7bdd711568b9b55ad4ebaa"}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x40a403, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r5, 0x3b8d, &(0x7f0000000500)={0x20, r1, &(0x7f00000004c0)}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000600)={0x28, 0x3, r2, r3, 0x0, 0x0, 0x0, 0x93, &(0x7f0000000540)="76f409a74912b9ddbd7061f4b18ab6cf0db56f3847c6e5e7e11827077326a44846d6ba18f5b65411c0366784470bead873ad47f37166c50bfce5d3b305c012646ed81bde2c5c5d673a0585a40ece23ec19986eb7bef8ca2c1efc8d87cc2a70983444a8f22c7fca3e924a6b7e6f7d4a69afbde42d52f714879ccac216fa9f479789c7511d63733d35af5b2ff2d7740ad1774bb5"}) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f0000000680)={0x20, r3, 0x3, 0x0, &(0x7f0000000640)=[{}, {}, {}]}) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000006c0)=0x4000) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000700)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f0000000740)={0x28, 0x0, r3, r6, 0xac, 0x896, 0x6}) preadv(r4, &(0x7f0000000880)=[{&(0x7f0000000780)=""/87, 0x57}, {&(0x7f0000000800)=""/65, 0x41}], 0x2, 0xffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f00000008c0)={0x1, "75ad01c67fb03864d50b213365ae3d6662479adc184922bbb3b460b2be5a4e4528dcb461318bf2688d51afdd12ccc129fe7cfb1febd4d313174afb42a1f0e303", {0x7ff, 0x8}}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000007040)={0x2000000, 0x19ae, &(0x7f0000000980)=[0x2, 0xee, 0x6df, 0xc1, 0x2, 0x4, 0x3, 0x1, 0x2, 0x6, 0x8, 0x8, 0xe, 0x3, 0x1d, 0x1, 0x200, 0x7, 0x3, 0x6, 0x6, 0xc, 0x80000001, 0x3, 0x3, 0x80f4, 0x6, 0x80000000, 0xecd1, 0x10, 0x5, 0x1, 0x7fffffff, 0x0, 0x1f, 0x2, 0xb, 0xe620, 0x1, 0x33, 0x12, 0x8, 0x5, 0x515f, 0x8234, 0x9, 0x9, 0x8, 0xfffffffb, 0x1, 0x9, 0x7, 0x43, 0x81, 0x180c, 0x4, 0x386, 0x6, 0x1, 0xfffffffd, 0x2ad0, 0x6, 0x4, 0xfffffff9, 0x8001, 0xf, 0x2, 0x3, 0x2, 0x5, 0x7, 0x81, 0xfffffffb, 0x1, 0x7, 0x7, 0x5, 0x2e, 0x9a9d, 0x1, 0x4, 0x1ff, 0x5, 0x3, 0x8, 0x4f4, 0xffff, 0x81, 0xd, 0x81a, 0x81, 0x8, 0x3, 0x88d, 0x6, 0xffffffff, 0xdb, 0x3, 0xfffffff3, 0x0, 0x9, 0x200, 0x0, 0x2, 0x3, 0x3, 0x101, 0x40000000, 0x1, 0x1, 0x3, 0x9, 0x200, 0x1b2cd0ad, 0x4153, 0x3, 0x8, 0x9, 0x2360, 0x3, 0xff, 0x3, 0x6, 0x8, 0xfffffffc, 0x6, 0x7, 0x0, 0x80000000, 0x0, 0x5, 0x7fff, 0x2, 0x2, 0x3, 0xeb3, 0x1, 0x4, 0x81d8, 0x2, 0x80000000, 0x6398, 0xfffffff6, 0x7000, 0x6, 0x7, 0xfffffffe, 0x40bf, 0x9, 0x2, 0x1, 0xffffffff, 0x0, 0x800, 0x7, 0x8, 0x80, 0x4, 0x8, 0x6, 0x1, 0xb29a, 0x6, 0x5, 0x3, 0x4, 0x1b, 0x7, 0x8, 0x10, 0xa1800000, 0x0, 0xd, 0xfffffc00, 0x100, 0x9, 0x0, 0x5, 0x9a, 0x1000, 0x9557, 0x8, 0x3, 0x8, 0x90, 0x5, 0x2, 0xe17, 0x2, 0x8, 0x80, 0x40, 0x5, 0x3c58, 0x5, 0xbfd0, 0x9, 0x6, 0x101, 0x3, 0x6, 0xf, 0x4, 0x8ac, 0x800, 0x7ff, 0x5, 0x7, 0x9, 0xfff, 0xfffffffd, 0x0, 0x5, 0x985, 0xc, 0x97, 0x7, 0x0, 0x7, 0x9, 0x6, 0x0, 0x6, 0x7, 0x5, 0xfffffffb, 0x8, 0x3, 0x0, 0x7fff, 0x1, 0x1, 0x7, 0x5, 0x5, 0x8, 0x3, 0x80, 0x2, 0x2b38, 0x6, 0x4, 0x5, 0xf327, 0xffff, 0x4, 0x8, 0xfffff85c, 0x2, 0x9, 0x9, 0x6, 0x81, 0xf8, 0x7, 0xdb4, 0x5, 0xa05d, 0xfffeffff, 0x7ff, 0x5, 0x56, 0x0, 0x4, 0x7, 0x5, 0x9, 0x248, 0x6, 0x84f, 0x6, 0xba73, 0xa, 0x4, 0x9, 0x1, 0x5, 0xff, 0x94, 0x81, 0x6, 0x6998, 0x4, 0x3, 0x3, 0xffffffff, 0x9, 0x7fffffff, 0x9, 0x6, 0xc, 0xff, 0x8, 0x101, 0x7, 0xb6, 0x9, 0x7, 0x8, 0x1000, 0x3, 0x6, 0x4, 0x0, 0x3, 0x6, 0x7fff, 0x8, 0x7, 0xb, 0xce, 0x9, 0x4b, 0xfffffffb, 0x4, 0x3ff, 0x4, 0x1000, 0x7, 0x6, 0x1, 0x9, 0x2, 0x7, 0x6, 0xfffff770, 0x3, 0x8, 0x9, 0x5, 0x590, 0x2, 0x9, 0x7, 0x7f, 0x9, 0x8, 0x0, 0x269, 0xb14, 0x7, 0x7fffffff, 0x4, 0x7, 0x3, 0x101, 0x81, 0xd58, 0x4bd4, 0x8, 0x1, 0x1, 0x5, 0xffffff96, 0x5450000, 0x7, 0x400, 0x7, 0x81, 0x5, 0x1, 0x6, 0x7, 0xb, 0x3, 0xfffffff7, 0x3, 0x9, 0x3a04070d, 0xfffffff1, 0x9, 0x6, 0x9, 0xd, 0x4, 0x90, 0x5cf4, 0x400, 0x6, 0x1, 0x54, 0xa24, 0x4, 0x2, 0x3, 0x6532a1d, 0x200, 0xb, 0x5b, 0xf0000000, 0x1, 0x7, 0x2, 0x40, 0x0, 0x1, 0x4, 0x3, 0xe1, 0x40, 0x6, 0x3f08c155, 0x8, 0x3, 0x3, 0x7ff, 0x8, 0x9, 0x3, 0x0, 0x7, 0x2, 0x9, 0x80000001, 0x3, 0xfffffffc, 0xb3ad, 0x6, 0xf08, 0x6, 0x4, 0x9, 0x0, 0x9, 0x9, 0x4, 0x9, 0x4, 0x3, 0x81, 0x80000001, 0x8000, 0x8, 0x4, 0x6, 0x1, 0x1, 0x7d1f6cab, 0x8, 0x6, 0x7, 0x6, 0x1, 0x7, 0x7, 0x100, 0xffff, 0x4, 0x1, 0x3, 0xfff, 0x9, 0x42bb, 0x1ff, 0xffffffff, 0x7f, 0x8000, 0x1, 0x1ff, 0xb, 0xac, 0xfffffffd, 0x5e1c, 0x8, 0x7fff, 0x8, 0xf, 0x8, 0x7f, 0x9, 0x9, 0x0, 0x6, 0xdc, 0x6, 0x853c, 0x6, 0x7, 0x5, 0x0, 0x1ff, 0x5, 0x5, 0x81, 0x0, 0xab0, 0x7, 0x0, 0x6, 0x81, 0x9, 0x6, 0xeb, 0x3, 0x4, 0x7ff, 0xfffffffa, 0x0, 0xfc9, 0x80, 0xb, 0x56dd, 0x5779, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x7fffffff, 0x81, 0x5, 0x8, 0x80, 0x2, 0x8, 0xc, 0x9, 0x4, 0x5, 0xe, 0x4118, 0x69, 0xfff, 0x81, 0x5, 0x40, 0x1, 0x6, 0x2, 0x80000000, 0x10, 0x8, 0x7f, 0x401, 0xffff, 0x9, 0x6, 0x25a, 0x8, 0x3, 0x0, 0x40, 0x80000001, 0x40, 0x9, 0x1, 0xffffffff, 0x7fff, 0x2, 0x0, 0x3, 0x6, 0x1, 0x0, 0x4, 0x5, 0xa0000000, 0x8994, 0xfffffff8, 0x8, 0x3, 0x7fff, 0x80000000, 0x7, 0x6, 0x6309, 0x1, 0x8001, 0x5, 0x5, 0x4, 0x81, 0x6, 0x1, 0xd, 0x3f97, 0x6, 0x80000000, 0x5, 0x2, 0xffffffff, 0x8001, 0x8, 0xfffffff7, 0x4, 0x0, 0x0, 0x29bc, 0x0, 0x10, 0xfffffffb, 0x4, 0x2, 0x8000, 0x7fff, 0x10001, 0x3, 0x6, 0xac9, 0x2b11, 0x6, 0x7, 0x6f, 0x1, 0x18e8, 0x4, 0xffff, 0x4b, 0x5, 0x5, 0x77e, 0xbcfc, 0x9, 0xf9a, 0xf, 0x3, 0x4, 0xeb, 0x5, 0x3, 0x7, 0xc5f, 0x8, 0x3, 0xffff, 0xa441, 0x9, 0x9, 0x800, 0xd7d9, 0x7f, 0x10, 0xfffffc49, 0x1, 0x10, 0x0, 0x3, 0x1, 0x2, 0x5, 0xd09, 0x80000001, 0x0, 0x7, 0x7fffffff, 0x7, 0xffffffff, 0x4, 0x0, 0x5, 0x200, 0x3, 0xdc, 0x7850, 0x990, 0x401, 0xfffffffe, 0x101, 0x7fffffff, 0x7, 0x7e, 0x2, 0x6, 0xfffffff8, 0x7, 0x10, 0x8, 0x5d77, 0x8, 0xffffff12, 0x1, 0x6, 0xff, 0x4, 0x6, 0x3e, 0x9, 0x5, 0x5, 0xfff, 0x200, 0x0, 0xe, 0x1, 0x2, 0x2, 0x3, 0x101, 0xffff, 0x0, 0x40, 0x2362, 0x777, 0x5, 0xd, 0x6, 0x1, 0x7, 0x6, 0xf, 0x8, 0x6, 0xffffff01, 0x200, 0x0, 0x5, 0x4, 0x200, 0x5, 0x6, 0x6, 0x2, 0x80000000, 0x80, 0x9, 0x7fffffff, 0x2, 0xd4, 0xfffffffc, 0xe9, 0x8001, 0x4, 0x10000, 0x2, 0x8, 0x1, 0x4, 0x5, 0x12a, 0x5, 0x5, 0x7f23, 0x7fffffff, 0x4, 0x1, 0x80000000, 0x3, 0x75, 0x7, 0x4, 0xfffffff6, 0x8, 0x7ff, 0x101, 0xd1d, 0xdf10, 0x4, 0x3, 0x1, 0x5, 0x1, 0x7, 0xfa9f, 0x3, 0x6511, 0xa18, 0x6, 0x0, 0x38de9f85, 0x745f, 0x1, 0x2, 0x5, 0x9, 0x4, 0x1, 0x6, 0x0, 0x8, 0x1, 0x3ff, 0x3, 0x7fffffff, 0x72f, 0xb0000000, 0xfffffffb, 0x3, 0xfd, 0x8a, 0x9, 0x8, 0x6, 0xc450, 0xeb8, 0x0, 0xfffffffa, 0x380000, 0x7, 0x55, 0x4, 0x78d45800, 0x6, 0x4, 0x7fff, 0x100, 0x1, 0x9, 0xb0, 0x401, 0x796b6a2d, 0x4, 0x3, 0x8, 0x1, 0x3, 0xc0000, 0x8, 0x1, 0xd5, 0x9, 0xcfc5, 0x920a, 0xe, 0xbf, 0x1, 0x6, 0x5, 0x1, 0x37c, 0x2, 0x7, 0x3, 0xfffffffb, 0x9, 0x3d, 0x88, 0x3, 0x3d, 0x6, 0x5, 0x3, 0x7f, 0x800, 0x0, 0x8, 0x8, 0x80, 0xc50, 0x7fffffff, 0xfb8, 0x392, 0x7e, 0x6, 0x9, 0xffff, 0x3, 0x4, 0x7, 0x2, 0xfffffffc, 0x800, 0xffff, 0x8, 0x8, 0x3, 0x7, 0xfffffffe, 0x9, 0x9, 0x5ee4, 0x6c, 0x5, 0x4, 0x1, 0x3, 0x400, 0x8000, 0x6, 0x4d, 0xd, 0x5, 0x39, 0x100, 0x80000001, 0xff800000, 0x8, 0xfffffffe, 0x6, 0x684, 0x4, 0x0, 0xcd90, 0x0, 0x1000, 0x373, 0x3, 0x8001, 0x400, 0x3, 0x3, 0x8, 0x5, 0x80, 0x6, 0x1, 0x200, 0x4, 0xffffffff, 0x637, 0xe, 0x8, 0x5, 0x2, 0x1, 0x1, 0x1, 0x8001, 0xee3f, 0x80000001, 0x7, 0x8000, 0x3, 0x85, 0x4, 0x5, 0x5b2, 0x8, 0x4, 0xe, 0x8, 0x6, 0x100, 0x380, 0x59, 0x8616, 0x0, 0x12b, 0x9, 0x7, 0x8, 0x8, 0x79f, 0x7, 0xd, 0x10001, 0x2, 0x4, 0x2, 0x401, 0x1, 0x40, 0x0, 0x2, 0xf3ab, 0x0, 0x5d80, 0x7, 0x4, 0x1, 0x10001, 0x1, 0x81, 0x7, 0xff, 0x1, 0xe2f4, 0x6, 0x7fff, 0x4, 0x7, 0x8, 0x40bf, 0x0, 0xa6, 0x14, 0x31, 0x9, 0x2f3, 0x7fffffff, 0x200, 0x4, 0x8, 0xffe00000, 0x2, 0x9, 0x1, 0xe00000, 0x66a, 0x0, 0x0, 0xe, 0x80, 0x6, 0xc, 0x7ff, 0x5, 0x1, 0x7, 0x1, 0x8, 0x9, 0x1, 0xa97e, 0xfffffff9, 0x7, 0x1, 0x8, 0x7, 0x339, 0xffffffff, 0x9, 0xc43, 0x101, 0x6, 0x0, 0x80000000, 0x5, 0x800, 0x3, 0x400, 0xc, 0xffffffff, 0x4, 0x7fff, 0x9, 0x10000, 0x10, 0xd1, 0x42a0, 0x7, 0x3, 0x3ff, 0xeb3, 0xc5, 0x7, 0x4, 0x2, 0x2, 0x5, 0xf63a, 0x5, 0x10000, 0xffff, 0x5, 0x3, 0x4, 0x8, 0x81, 0x2, 0xfffff800, 0x40000, 0x7f, 0x401, 0x1, 0x3, 0xb, 0x699, 0x8, 0x8, 0x0, 0x9, 0x4, 0x7, 0x7, 0x7fff, 0x7, 0x401, 0x80, 0xffff, 0x4, 0x1f00000, 0x9, 0x0, 0x6, 0x2, 0x10001, 0x6, 0x21, 0xfffffffa, 0x3af, 0x2, 0xaece, 0xffffffff, 0xfff, 0xae, 0x6, 0x3, 0x97e, 0x7, 0x1, 0x2, 0x4, 0x8, 0x0, 0x0, 0x0, 0x344a, 0x6, 0x8, 0x5e8, 0x800, 0x0, 0x3, 0x9, 0x4, 0x9, 0x0, 0x3ff, 0x1, 0x200, 0x0, 0x3, 0x90c, 0x4, 0x6, 0xffffffff, 0x6, 0xa, 0x980, 0x447, 0xffffffff, 0x2, 0x35, 0x5, 0x0, 0x6, 0xb54, 0x6, 0x4, 0x7f, 0x1ff, 0x9, 0xffffffff, 0x7, 0x96c, 0x7fffffff, 0x9023, 0x4b, 0xf, 0x1, 0x6, 0x4, 0x46, 0x6, 0x2, 0x8, 0xd, 0x1, 0x5, 0x6, 0x8, 0x8592, 0x0, 0xff, 0x7ff, 0x5, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfffffff8, 0xfffffffe, 0x3, 0x7, 0x616, 0x2, 0x1, 0x1, 0x0, 0xb74, 0x8da4, 0x7f, 0x7ff, 0x6c, 0x8, 0x7, 0x3ff, 0x2, 0x2, 0x6, 0x8ca4, 0xffffffff, 0x8, 0x7, 0x0, 0x2, 0x6cd, 0xffffff81, 0x401, 0x100, 0xaa25, 0x1, 0x9, 0x2, 0x4, 0x10000, 0x2, 0x43, 0x6a, 0x8, 0x4, 0x7fff, 0x8001, 0xfffffffd, 0x3, 0x4, 0xfffffff5, 0x3ff, 0xb0, 0x8000, 0x0, 0x2, 0xe, 0x2, 0x2, 0x7, 0x5, 0x644, 0x7, 0x83, 0x9, 0x0, 0x4, 0x2, 0x6, 0x2, 0x7, 0x4, 0xf5de, 0x8, 0x200, 0x4, 0x4, 0x1, 0x41e0, 0x6, 0x8, 0x6, 0x6, 0x9, 0x2c1f, 0x1, 0xb437, 0x6, 0x3, 0x81, 0x6, 0x1, 0x4, 0x7, 0x10, 0x3, 0x5, 0x6, 0x9, 0x80000001, 0x1, 0x5, 0x8, 0x0, 0xfff, 0xd, 0x8, 0x3, 0xf, 0x82, 0x5, 0xa279, 0xffffffff, 0xec4, 0xfff, 0xe0, 0x6, 0x401, 0x3, 0x1, 0xfffffffe, 0x1000, 0x7f9, 0xfc0b, 0x3, 0x4, 0x561a, 0x2, 0x9, 0x4, 0x3, 0x7, 0x10000, 0x100000, 0x7fffffff, 0x1, 0x1, 0x4, 0x3, 0x82, 0x1800, 0x6, 0x2, 0x101, 0x14, 0x0, 0x3ff, 0x4, 0x1, 0x4, 0x3, 0x3f4, 0x4, 0x9, 0x6, 0x1, 0x7, 0x4, 0x7, 0x2, 0x291, 0x7f, 0x0, 0x8, 0x76fa, 0x3, 0x9, 0x8, 0x3, 0x1, 0x555, 0x3, 0x5, 0x54d, 0x5, 0x100, 0x3, 0x2, 0x7, 0x771d, 0x9, 0x2, 0x0, 0x4bb9bc52, 0x6f1, 0xf, 0x1, 0x8, 0x4, 0x5, 0x7, 0xfff, 0x10, 0x8, 0x23, 0xe9, 0x1ff, 0x7, 0x8d, 0x1, 0x4, 0x400, 0x5, 0x4, 0x9, 0x7, 0x1, 0x7, 0x29, 0x9, 0x563, 0x3, 0xae, 0x3, 0x6, 0x3, 0x8, 0x8001, 0x5, 0x7, 0x0, 0x81, 0x3, 0xc, 0x691, 0x10001, 0x1, 0x0, 0x8001, 0xc, 0x9, 0x80000001, 0x9, 0x70, 0x2, 0x80000001, 0x3ff, 0xe, 0x40, 0x800, 0xffff, 0x80000000, 0xc040, 0x1, 0x9, 0xf3, 0xfffffffb, 0x100, 0x1, 0x8, 0x2, 0x3, 0x7, 0x2, 0x23f, 0x4, 0x4, 0x4, 0x2, 0x6, 0x9, 0x9, 0x4bd2, 0x9, 0x1, 0x5, 0x7560, 0x3, 0x1000, 0x10, 0x2, 0x9, 0xffffff6c, 0x6, 0x0, 0x4, 0x6, 0x3, 0x3ff, 0x9, 0x8001, 0x5, 0x3, 0x15, 0x8001, 0x3, 0x3, 0xe, 0x7, 0x1, 0x2, 0x4, 0x9, 0x9, 0xfe2, 0x4, 0xcbaf, 0xf, 0x6, 0xd, 0x9, 0x8, 0x0, 0x8d6, 0x8, 0x9, 0x0, 0x5, 0x7, 0x440, 0x10000, 0xc, 0x9, 0x7fff, 0x1, 0xf, 0x1ff, 0x319d8558, 0x2, 0x78, 0x5, 0x8001, 0x5ae, 0x2, 0x5, 0x40, 0xc57, 0x200, 0x10000, 0x2, 0x2000000, 0xd6b, 0x9, 0x5, 0x1, 0x9, 0x8, 0xd, 0x5, 0xfff, 0x7fffffff, 0x6, 0x368d, 0x2, 0x8, 0x0, 0x6, 0x1, 0x1000, 0x52, 0x2, 0x5465, 0x5, 0x1, 0x200, 0x5, 0x3, 0x4, 0xf, 0x1, 0x641, 0x439, 0xd04, 0xfffffff9, 0x9, 0x5, 0x6, 0xfffffff9, 0x80000001, 0x7, 0x8, 0x101, 0x80, 0x6, 0xfffffffd, 0x93, 0x57, 0x7, 0x3b, 0x1ff, 0xfffffffe, 0x74f9d1e, 0x4, 0x0, 0x400, 0x6, 0x6, 0x9, 0x8, 0x2c30, 0xfffffffa, 0x1, 0x80000001, 0xa, 0x1, 0xe, 0x3, 0x7, 0x3, 0x7b36, 0x3, 0x8, 0xfffffbff, 0xf, 0x4f2, 0x6, 0x7f, 0x100, 0x8, 0x4, 0x4, 0x4, 0x8001, 0xa, 0xfffffc06, 0x6, 0x1, 0x5, 0x0, 0xa0b, 0x2, 0x5, 0xc7, 0x7, 0x80, 0x6, 0x4, 0xd, 0x0, 0x8, 0x358, 0x7ff, 0x400, 0xfffffffb, 0xffff, 0x881, 0x10000, 0x3, 0x8, 0x40000000, 0x0, 0x8, 0x1, 0x81, 0x10000, 0xdb, 0x3, 0x10001, 0x5, 0x2, 0x8, 0xa51e, 0x6, 0x1000, 0x8, 0x3, 0x5, 0x1, 0x800, 0xc9a, 0x14000000, 0x9, 0xbb3, 0x3, 0x7, 0x5, 0x4, 0x100, 0xf, 0xffffffff, 0x8001, 0x6, 0x3, 0xfffffffa, 0x1, 0x7, 0x8, 0xd7a7, 0x2, 0x1000, 0x8, 0x1, 0x1, 0x83, 0x7, 0x3, 0xc6, 0x6, 0x2, 0x4, 0x8f, 0xfe, 0x4, 0xe, 0x0, 0x1, 0x200, 0x9, 0x2, 0x2, 0x6, 0x9, 0x7fff, 0x0, 0xbc, 0x9, 0x7, 0x2055, 0x9, 0x10001, 0xffffff00, 0x8, 0x7fff, 0x9, 0x0, 0x2, 0xffffffff, 0x9, 0x9, 0x6, 0x9, 0x0, 0x7fff, 0x51, 0x80, 0x10, 0x0, 0x6, 0x4, 0x2, 0x10001, 0x7, 0x6, 0x327, 0x400, 0x0, 0xc, 0x6, 0x1, 0xb, 0xce, 0xb, 0x1, 0x7, 0x400, 0x3, 0x9, 0x3fb4, 0x1, 0x0, 0x5, 0x8, 0x0, 0x4, 0x1, 0x2, 0x8a, 0x9, 0x75, 0x9, 0x9, 0xffffff00, 0x800, 0x9, 0x9, 0xe, 0x10001, 0x80000001, 0x2, 0x0, 0x9, 0x8001, 0x9, 0x82c, 0x3, 0xffffffff, 0xfffffffb, 0x80000001, 0xad5, 0x3, 0xc, 0x2f10, 0x72a82270, 0x80000000, 0x2, 0x0, 0x780, 0x348, 0xb898, 0x5, 0x9, 0x6, 0x0, 0x36, 0x9, 0x3, 0x8c67, 0x8, 0x5, 0x4, 0xefe, 0x307b, 0xfffffffc, 0x7fff, 0x9, 0x3ff, 0x3ff, 0x0, 0x5, 0x8, 0x45, 0xfffffffd, 0xc, 0x4, 0x7f, 0x9, 0x8, 0x2, 0xfffffffe, 0x200, 0x5, 0x4, 0x5, 0x8, 0x1ff, 0x1, 0x9, 0x2, 0x3, 0x8, 0x4, 0x0, 0x0, 0x81, 0xa, 0xf, 0x1, 0x8, 0x1ff, 0x8, 0xce, 0x80000001, 0xffff, 0x4, 0x4, 0x3, 0x10000, 0xfffffff9, 0x9, 0x4, 0xffffffff, 0x7fff, 0x0, 0x1, 0x4, 0x10, 0x0, 0x8, 0x1, 0x6, 0x0, 0x6, 0x4, 0x8, 0x4, 0x5, 0xffff, 0x5, 0x6, 0x9, 0x2, 0x6, 0xda1, 0x10000, 0x6973f657, 0x8, 0x8, 0xd531, 0x3, 0x6, 0x5ef, 0xff, 0x3c, 0x2, 0x7d28, 0x401, 0x9, 0x7, 0x7, 0xfffffffd, 0xa, 0x40, 0x600000, 0x7, 0x6, 0x1, 0xfffffff5, 0x3, 0xe04b, 0x80, 0x5, 0x7, 0x400, 0x3fee, 0x7, 0x401, 0x7fffffff, 0x1, 0x4, 0x8, 0xfffffffb, 0x3, 0xfffffffc, 0x6, 0x567a, 0x2, 0x2, 0x9, 0x0, 0x3, 0x9, 0x2, 0x318356cc, 0x3, 0x0, 0x5, 0x4, 0x4, 0xffff, 0x7, 0x8, 0x6, 0x7fff, 0x1000, 0xffffffff, 0x4e67, 0x1, 0x3, 0x7fffffff, 0x3, 0x200, 0x9, 0x6, 0x6, 0x2, 0x7, 0xc98, 0x8, 0x3b, 0x40, 0x5, 0xc4, 0x1000, 0x7, 0x5, 0x9, 0x101, 0x101, 0x8, 0x80000001, 0x9, 0x8a, 0x6, 0x6, 0xf9, 0xfffffffe, 0x7, 0xfffffff9, 0x8001, 0x7ff, 0x9b5, 0x2, 0x550, 0x9, 0x2, 0xfff, 0x200, 0x5, 0x5, 0x7, 0x0, 0x100, 0x48a, 0x4, 0x8, 0x3, 0x9, 0x0, 0x8000, 0x7fff, 0x8, 0x4, 0xf8000000, 0x47, 0x4, 0xfffffffa, 0x100000, 0x10000, 0x4, 0x8000, 0x5, 0x2, 0x2, 0x9, 0x5, 0x2, 0x0, 0x1ff, 0x8, 0x4, 0x3, 0xb, 0x8, 0x6, 0x1, 0xd, 0x7, 0xf, 0x8, 0x7, 0x7, 0x95c3, 0x3, 0xfff, 0x6df, 0xb, 0x8000, 0x800, 0x9, 0x7, 0xf, 0x0, 0x8, 0x3, 0x6, 0x0, 0x8f3, 0x6e3, 0x3, 0x78, 0x7, 0x3, 0x81, 0x4, 0x3, 0x8, 0xfff, 0xf47, 0x1, 0x3, 0x9, 0x5, 0x2, 0x0, 0x4, 0x7, 0x87a, 0x2, 0x8, 0x5, 0x5, 0xfffffc00, 0x200, 0x4, 0x7, 0xd, 0x3ff, 0x80000001, 0x3, 0x81, 0x8, 0x3, 0xf74, 0x4, 0x4, 0x4, 0x10000, 0x7, 0x5, 0xc, 0x76f0, 0x8, 0x5, 0x3, 0x9, 0x4, 0x4d000, 0x4, 0x0, 0x490, 0x2, 0x3, 0x10000, 0x100, 0x8640, 0x10, 0x50, 0x2, 0x401, 0x38, 0x2, 0x7, 0xa8, 0x5, 0x5, 0x6, 0x1e, 0x239, 0x1, 0x8, 0x0, 0x9, 0xddf, 0xffff8b63, 0x10, 0x100, 0xf, 0x3, 0x7fff, 0x2, 0x100, 0xf026, 0x9, 0xfff, 0x9, 0x7, 0x1ff, 0x9, 0x6649d322, 0x4, 0x6, 0x6, 0x3, 0x1, 0x6, 0x5, 0x101, 0xffc00000, 0x8, 0x7, 0x3a, 0x2, 0x6, 0x7, 0x4, 0x81, 0x5, 0x8, 0x3, 0x2, 0x3, 0x2, 0x6114907a, 0x9, 0x19d, 0x1, 0x10, 0x1, 0x81, 0x2, 0x6ad94cb6, 0x6, 0xc7, 0xc, 0x7, 0x8, 0x8, 0x5, 0x80000001, 0x4, 0x1, 0x1, 0x0, 0xec, 0x9, 0x5, 0x8, 0x657, 0x6, 0xd97, 0x2, 0x482fd298, 0x19, 0x26, 0x9, 0x0, 0xf2, 0x2, 0x8, 0x9, 0x200, 0x1, 0x9, 0x6, 0x1ff, 0x2, 0x1, 0x1, 0xc2a9, 0x5, 0x7, 0xff, 0x400, 0x5, 0x526c3df9, 0x4f37, 0x2, 0x1, 0x41e, 0x7, 0x29749e08, 0x2, 0x7, 0x7, 0xa64d, 0x8, 0x1, 0x3, 0x4, 0xffff, 0x5, 0x2, 0x9, 0x66dbde57, 0x3ff, 0x401, 0xfe81, 0x58, 0x7, 0x7, 0x6, 0x3, 0xfc, 0x7, 0x6, 0x6, 0x7, 0xf, 0x3ff, 0x9, 0x5, 0xfffffffa, 0x10, 0x4, 0x9, 0x4, 0x2, 0x1, 0x7, 0x2be, 0x7, 0xc, 0x390, 0x2, 0x10001, 0x4, 0xd, 0x80, 0x4, 0x7, 0x0, 0x15d1, 0x0, 0x8, 0x4, 0x9, 0x9, 0x3, 0x6, 0x7, 0x9, 0x8001, 0x217c, 0x4b01, 0x3, 0x4034, 0x6, 0x3, 0x7fffffff, 0x4, 0x6, 0x8, 0x3, 0x4, 0xfffffff8, 0x7, 0x917, 0x6, 0x7fffffff, 0x2, 0xad28, 0x67, 0x2, 0x8, 0x6, 0x1, 0xfff, 0x7, 0x7, 0x10, 0x9, 0x9, 0x0, 0xf, 0x2ebaa5f7, 0x0, 0x0, 0xfffffff7, 0x14, 0x3, 0x2, 0x3, 0x4, 0x7, 0x100, 0x9, 0x3ff, 0x6, 0xfffff120, 0x6, 0x234b, 0x2, 0x400, 0xfff, 0x4, 0x10, 0x5, 0x54e, 0xfffff801, 0x1ff, 0x101, 0x5, 0xfff, 0x7a1c, 0x7fff, 0x5, 0x5, 0x7f, 0x9, 0x7, 0x2, 0x2, 0x0, 0xfff, 0x0, 0x0, 0x4, 0x800, 0x6, 0x1, 0x6, 0x8, 0xff, 0x7, 0x7, 0x4, 0x5bd2547, 0x0, 0x7, 0x1, 0x8000, 0x3, 0x5, 0xfe5e, 0x9, 0x9, 0x8001, 0x5c6, 0xd9c, 0x101, 0x3, 0xc0c9, 0x2, 0x1, 0x7, 0x3, 0xa, 0x1, 0xd4e, 0x1, 0x3, 0xd8, 0x7, 0x0, 0x8, 0x3, 0x40, 0x4, 0x9, 0x9, 0xffffdf1c, 0x2, 0x0, 0x3, 0x8e, 0x1, 0x8, 0xfffffffc, 0x36, 0x30, 0xa0, 0x8, 0x8, 0x1, 0x2, 0x5, 0x4f2f, 0xf, 0x7, 0x401, 0xc1b, 0x10, 0x79e9f635, 0x101, 0x8000, 0x5, 0x1, 0x7fffffff, 0x5, 0x2, 0x5, 0x8, 0x3ff, 0x90, 0x5, 0x7, 0x7f, 0x9, 0x8, 0x9, 0x8, 0x4, 0xfffffffe, 0xfffffffb, 0x3, 0x1, 0x101, 0x7fff, 0x9, 0x3, 0x4, 0x4, 0x9, 0x1, 0x10, 0x99, 0x9, 0x6, 0x4, 0x7, 0x8, 0x3, 0x9, 0x9, 0x7, 0x2, 0x1, 0x7, 0xa4be, 0x4, 0x400, 0x4, 0x90d, 0x4ad, 0x2, 0x80000001, 0x6, 0x100, 0x5, 0xd58, 0x0, 0x1, 0xaf8b, 0x6, 0x8f1, 0x6, 0x0, 0x50, 0x2, 0x5, 0x3, 0x2, 0x1, 0xd9, 0x8001, 0x9, 0x8a, 0x6, 0x5, 0x3, 0x3, 0x6, 0x3, 0x9, 0x1000, 0x2970, 0x1, 0x631, 0x1, 0x0, 0xfff, 0x5, 0xffffffff, 0x205, 0x8, 0x77, 0xfffffff9, 0x1, 0x3, 0xea1, 0x6, 0x6, 0x8, 0xfffffffc, 0x3, 0x4, 0x6b0b, 0x10000, 0x1, 0x2, 0x1, 0x80, 0xbd, 0x0, 0x3, 0x10, 0x400, 0x0, 0x4, 0x4, 0x3, 0x0, 0x2, 0x2, 0x1, 0x7, 0x97a, 0xfffffffd, 0x6, 0x800, 0x5, 0x8, 0x6, 0x9, 0x1, 0x6, 0x5, 0x6, 0xa, 0x0, 0x3ff, 0x2, 0x1e74, 0x5, 0x4, 0xfffffff9, 0x9, 0xaa, 0x0, 0x3, 0x3, 0xb, 0x7, 0x9, 0x7ff, 0x0, 0x3, 0x3, 0x401, 0x3, 0x9, 0x3be3, 0x0, 0x10, 0x7, 0x1, 0x88, 0x2, 0x6659, 0x5, 0x8, 0xd2, 0x5, 0x295, 0x4, 0xff, 0x200, 0x8001, 0x1, 0x7, 0x8, 0x400, 0xfff, 0x10, 0x8, 0x4, 0x6, 0x8, 0x2f8, 0x48, 0x3, 0xb, 0xa, 0x7, 0x3, 0x336, 0x1, 0x6, 0x0, 0x80000000, 0x0, 0x2, 0x4, 0x8, 0x10, 0x1, 0x4, 0x80, 0x5, 0xb47, 0x7, 0x400, 0x100, 0xa, 0xfff, 0x81, 0xffffffff, 0x5250, 0x7f, 0x0, 0x101, 0x2, 0x40, 0x0, 0x3, 0x1, 0x8001, 0x3, 0x772, 0x10000, 0x1, 0x1, 0x0, 0x9, 0x4, 0x9, 0x6, 0x0, 0x2, 0x3, 0xe, 0x8, 0x73b1, 0x1, 0x8, 0xe484, 0x3d82, 0xf, 0x5, 0xfff, 0xffff4488, 0x3, 0x1ff, 0x29, 0xf, 0x9, 0xe4d0, 0x6, 0x3, 0x3, 0x4, 0x1, 0x4, 0xf6e3, 0x1c7, 0x80000000, 0x8, 0x16a, 0x1, 0x2e3, 0xffff, 0x10001, 0x3, 0xdb, 0x0, 0x1, 0x0, 0x4, 0x1ff, 0x3d87, 0x3, 0x2, 0x0, 0x1, 0x7fffffff, 0xffff, 0xec7, 0x9, 0x81, 0x7, 0x40, 0xffff9c5d, 0x0, 0xff, 0x0, 0xfffffffd, 0x100, 0x722, 0x0, 0x0, 0x20e03931, 0x7, 0x9, 0x8, 0x1, 0x8, 0x2, 0x400, 0xa4, 0x2, 0x0, 0x43, 0xfffffffd, 0xfff, 0x0, 0xf3, 0x2, 0x4, 0x5b, 0x2, 0x5, 0x5, 0x6, 0x40, 0x80, 0xffffffff, 0x4, 0x8, 0x80000000, 0x9, 0x5, 0x6, 0x1, 0xfffffffa, 0x8a, 0x979b, 0x7fffffff, 0x7, 0xfffffff8, 0x5, 0x7, 0xd, 0xffffffff, 0x4, 0x4, 0x0, 0x9, 0x9, 0x9, 0x7, 0x5, 0x5, 0x3ff, 0x2d3d5c20, 0x4, 0x1, 0xffff, 0x4, 0x5, 0x3ff, 0x6, 0x4, 0x0, 0x1, 0x8, 0x575, 0xf, 0xffffffff, 0x2, 0x7, 0x100, 0x8000000, 0xb, 0xfffffffe, 0x4, 0x1, 0xfff, 0x2, 0xffffffed, 0x6, 0x9, 0x9, 0x3, 0x401, 0x7f, 0x7fff, 0x8b, 0x9, 0x200, 0x0, 0x0, 0xf60, 0xb, 0xa7f, 0x0, 0x100, 0x8, 0x6, 0xc0, 0x8, 0x8001, 0xe, 0xa, 0x7, 0x4, 0x8, 0x5b, 0x9, 0x2, 0x0, 0x1, 0x3, 0x8, 0x8, 0x8, 0x3, 0x80, 0x6, 0x4, 0x1, 0x9, 0xffffffff, 0x7, 0x8, 0x2, 0x6, 0xb, 0xff, 0x7, 0x4, 0x6, 0x341, 0x5, 0x950dc000, 0xfffffff9, 0xfffffffe, 0x10000, 0x3, 0xe, 0x64ca, 0x9b4, 0x5, 0x497, 0x9, 0x5, 0x4, 0x27, 0x4, 0xffffffbd, 0x1, 0x5201, 0x7, 0x7f, 0x2, 0x6, 0xef0e, 0x8, 0x1, 0x2, 0x3, 0x7, 0x4, 0x2, 0x2, 0x9, 0x0, 0x6, 0xc, 0x0, 0x4, 0x81, 0x4, 0x8, 0x2, 0x2000, 0xd357, 0x3, 0x2, 0xffff, 0x800, 0x8001, 0x3, 0x800, 0x800, 0x5, 0x8, 0x6, 0x100, 0x2, 0x4, 0x1, 0xffff, 0x9, 0x1700000, 0x2, 0x4fbd, 0x1, 0x7, 0x0, 0x200, 0x80, 0x3, 0xb, 0x2, 0xfffffffa, 0xfffffff0, 0x9, 0x8, 0x7, 0x9, 0xfff, 0x3, 0x2, 0xd, 0x0, 0x7, 0x0, 0x9, 0x6, 0x1, 0x4, 0x4, 0x8, 0x19, 0x5, 0x0, 0x0, 0xfffffffb, 0x8001, 0xffffffff, 0x7, 0x0, 0x1, 0x8, 0x4, 0x3, 0x3, 0xfc2, 0x8, 0x7, 0xfa7, 0x2, 0xffffffbd, 0x7, 0x0, 0x2, 0x6, 0x401, 0x8000, 0x6, 0xffffffff, 0x2, 0x5, 0xd70, 0x9, 0x7, 0x5, 0x9, 0x7, 0xfffffff8, 0x7, 0xe, 0x80000000, 0x8bc, 0xa49, 0x10001, 0x2, 0x3ff, 0x80000000, 0x3, 0x5, 0x1ff, 0x3dae, 0x5, 0xfffffffe, 0x3, 0x3, 0x5, 0x180, 0x4, 0x100, 0x7, 0x3, 0x1, 0xfffffffe, 0x9d, 0x9, 0x2, 0xff, 0x8, 0x2, 0x7, 0x80000000, 0x0, 0x9, 0xdaf, 0x9, 0x7, 0x1, 0x159b, 0xfffffffc, 0xfffffffa, 0x7, 0x3, 0x9, 0xffff0000, 0x7, 0x800, 0x1, 0x25a6eade, 0x2, 0x2, 0x7, 0xca, 0x6, 0xffffffff, 0x7, 0xf, 0x6, 0x401, 0x7f, 0x9, 0x8, 0x8, 0x1, 0x0, 0x0, 0x7, 0x6, 0x4, 0x3ff, 0x2, 0x9, 0x70, 0x6, 0x1ff, 0x0, 0x3, 0x3, 0x9, 0x7, 0x80000000, 0x373bfbc7, 0x8001, 0x3, 0xbf, 0x0, 0x7ff, 0x1e3, 0x10001, 0x1, 0xe, 0xa, 0x9, 0x3, 0x4000800, 0x8, 0x26, 0x80, 0xffffffff, 0x4, 0x2, 0xca1, 0xa, 0x6, 0x7d4b, 0x7fff, 0x4, 0xcd, 0x5, 0x2, 0xa4, 0x40, 0xfff, 0x1, 0xfffff034, 0x101, 0xfffffffb, 0x2, 0x1, 0x3, 0x0, 0x3, 0xa6, 0x0, 0x6, 0x7, 0x6, 0x4, 0x7, 0x7, 0x1, 0x4, 0xc22d, 0x8, 0x4, 0x3, 0x900000, 0x6bd, 0x2, 0x3, 0x7, 0x7, 0xcf61, 0x4, 0x400, 0x1, 0xaa6, 0x3, 0x3ff, 0x70, 0xfb39, 0x1, 0x4aac, 0xfffffff9, 0x7dae0390, 0x8, 0x1000, 0x4, 0x7, 0x9, 0x0, 0x10000, 0xbfb, 0x2, 0x100, 0x5e, 0x7, 0x80000001, 0x7, 0x24c, 0x2, 0x0, 0x24000, 0xfffffffb, 0x6, 0x800, 0x13b, 0x7ff, 0x5, 0x9, 0x6, 0xffff, 0x6, 0xe, 0x9c, 0x9, 0x7, 0x7, 0xb40a, 0x65a30673, 0x8001, 0x1, 0x0, 0x1ff, 0x8000, 0xd, 0x9b92, 0x248e, 0x7, 0x59, 0x4, 0x6, 0x80000001, 0xffffff72, 0x6, 0xdc, 0x101, 0xffffff01, 0x2, 0x0, 0xdb, 0x6, 0xbb6, 0x7, 0x8, 0xfffffff0, 0x1, 0x0, 0xfc, 0x4, 0x5, 0x2eb, 0x9, 0x7f, 0x3ff, 0x6, 0x953, 0x1ff, 0xfffffffd, 0x9, 0x5, 0x5, 0x1f, 0x4, 0x6, 0x8, 0x7, 0x800, 0x10001, 0x3, 0xe12e, 0x7fffffff, 0x4, 0xfe, 0x800, 0xfffffffb, 0x6, 0xfff, 0x0, 0x8, 0x0, 0x7, 0x4, 0xcf7f, 0x1, 0x8, 0x0, 0x1, 0x10001, 0x6, 0x800, 0x0, 0x9, 0x6, 0x1, 0x8, 0x2, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0x1, 0x1, 0x9, 0xe90, 0x8, 0xfffffffe, 0x400, 0xfffffffb, 0x4, 0x4, 0x8, 0x640defaa, 0xc, 0x7, 0x7, 0x8, 0x40, 0x10, 0x5, 0xf2e, 0x7, 0x4, 0x0, 0xffff, 0x200, 0x3, 0x5, 0x6a27, 0x6, 0xb5, 0x5, 0xfbf3, 0xc5, 0x8, 0x4, 0x5, 0x7fff, 0x1, 0x40, 0x4, 0x0, 0x2, 0xff, 0x8, 0xffffeb21, 0xfffffff9, 0x101, 0x0, 0x1, 0x2, 0x9, 0x46d, 0x3, 0x7, 0xa8, 0x4, 0x6, 0x7fff, 0x76, 0x5, 0x8, 0x80, 0x1000, 0x8001, 0x0, 0x8000, 0x4, 0x94, 0x5, 0x8, 0xb1c2, 0x2, 0x6, 0x6, 0x4, 0x2, 0xc, 0xffff0001, 0x9, 0xffff8001, 0x9, 0x1ff, 0x8000, 0xb32, 0x3ff, 0x80, 0x3, 0x5, 0x63f, 0x6, 0xfffffffd, 0x800, 0x2, 0x9, 0x9, 0x2, 0x800, 0x2, 0x2, 0x5, 0x4e2, 0x8, 0x4, 0x433, 0x0, 0x98, 0x7, 0x100, 0x800, 0x8, 0x8000, 0x2, 0x7, 0x5, 0x8, 0xffffffff, 0x6, 0x0, 0xfffffffc, 0x5, 0x1000, 0xb, 0x8, 0x7, 0x342c18be, 0x6735, 0x7, 0x1, 0xfff, 0x2, 0x4, 0x1, 0x200, 0x7, 0x3, 0x3, 0xb, 0x7f, 0x2a, 0x4ea3, 0x8, 0xc54, 0x4, 0x1, 0x6, 0x9, 0x5, 0x17, 0xb3, 0x400, 0x3, 0xfff, 0x5ef, 0x7, 0x41f, 0xbc2, 0x354, 0x8, 0x400, 0x37a1, 0x5, 0xc, 0x7, 0x6, 0x7, 0x4, 0xffff, 0x4, 0x7, 0x9, 0x4, 0x8000, 0x80, 0x4, 0x81, 0x6, 0x2, 0x1c1952a7, 0x1000, 0x600000, 0x800, 0x3, 0x37, 0xa66, 0xa, 0x6, 0x8, 0xac9, 0x5, 0x7ff, 0x400, 0x1, 0x8, 0x6, 0xf, 0xfffffff7, 0x1, 0x6, 0xed5, 0xe0, 0x2ad, 0x17, 0x0, 0x7, 0xc4e9, 0xf, 0x1072, 0xff1, 0x3, 0x3, 0x0, 0x8, 0x2, 0x54f1, 0x8, 0x4, 0x6a, 0x8, 0x0, 0x80000001, 0x47, 0x4745, 0x1000, 0xe006, 0x0, 0x783, 0xe24a, 0x8, 0x41e, 0x9, 0x7fff, 0x3, 0x1ff, 0x6, 0x10001, 0x9, 0x80000000, 0x7f, 0xfff, 0xfff, 0x5, 0x5, 0x10001, 0x38, 0x5, 0x1, 0x7f, 0x5, 0x6, 0x80, 0x6, 0x2, 0x6, 0x2, 0x400, 0x200, 0x4, 0x1000, 0x6, 0x10, 0x9, 0x55c45c63, 0x9, 0x3, 0x9, 0x6, 0x953, 0x97fc, 0x8, 0x8001, 0x4, 0x7fffffff, 0x9e, 0x3, 0x80000001, 0x4, 0xe, 0x6, 0x9722, 0x3, 0x100, 0x9, 0x76, 0x4, 0xfffffff8, 0x70017c36, 0x8, 0x0, 0x0, 0x2ee153ce, 0x30, 0x9, 0x9, 0xf2f, 0x3, 0xd, 0x4, 0xf10, 0xffff0000, 0x5, 0x40, 0x2, 0x7f, 0xc, 0x7ff, 0x5, 0x498, 0x209, 0x101, 0xc, 0x9c, 0x6, 0x9, 0x2, 0x9, 0x9, 0x3, 0x5, 0x2, 0xc0fb, 0xae8, 0x2, 0x4, 0xb92, 0x1000, 0x5, 0x81, 0x100, 0x3, 0x5, 0x7, 0x4, 0x9, 0x0, 0x9, 0x7, 0x9, 0x5, 0x6, 0x3, 0x472c, 0xfffffffa, 0x1, 0x9, 0x2, 0x4, 0xd, 0x9, 0x2, 0x1, 0x6, 0x6, 0x4, 0xb69, 0x55, 0x6, 0x1, 0xfff, 0xe1c5, 0x0, 0x8, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x8, 0x200, 0x2, 0x9, 0x9, 0x8, 0x6646, 0x87, 0x2, 0x8, 0x200, 0x3, 0x100, 0xfffffff9, 0x4, 0x0, 0x6, 0x4, 0x61, 0x7f, 0x20, 0x7, 0x80000000, 0x100, 0x5, 0x3, 0x5, 0xf, 0xc, 0x200, 0x81, 0x0, 0x1, 0x7, 0x4, 0x81, 0x46, 0x10000, 0x3, 0x80000001, 0x6, 0x7, 0x4cd, 0xffff0000, 0x4, 0x9026, 0x3, 0x1, 0x6, 0x0, 0x80000000, 0x80000000, 0xfffffffd, 0x7, 0xfa8b, 0xbe31, 0x9d, 0x6000, 0x95c, 0x80000000, 0x8001, 0xffff5bdc, 0x967b, 0x5, 0x7, 0x8d2f, 0x100, 0x187ef872, 0x2, 0x0, 0x4, 0x1, 0x4, 0x9e5, 0x9, 0x2, 0x53b1f208, 0x5c, 0x1, 0xc, 0x3, 0x9, 0x101, 0xff, 0xffffff81, 0x4, 0x2, 0x0, 0x0, 0x0, 0x6, 0x7, 0x7, 0xdb, 0xfffeffff, 0x6, 0x93, 0x7, 0x7, 0x6, 0xffffffff, 0xc4e4da5, 0x5, 0x8, 0x1ff, 0x2, 0x40, 0xffffff77, 0x5, 0x6, 0x122, 0x1, 0x5, 0xfa, 0x3, 0x3, 0x400, 0x4, 0x8, 0x0, 0x10, 0x10001, 0x9, 0x0, 0x2, 0x7fffffff, 0x3, 0x800, 0x6, 0x7, 0x5, 0x9, 0x0, 0x0, 0x7, 0x7, 0x9, 0x80000001, 0xa, 0x7, 0x9, 0xcd, 0xff, 0x3ff, 0x3, 0xf, 0xd4, 0x8, 0xb, 0xc26d, 0xff, 0xfe000000, 0x1, 0x0, 0x4, 0x34d, 0x81, 0x4, 0xe54, 0x6, 0x10001, 0x1, 0xfffffff8, 0xc, 0xe, 0x56495de1, 0xffff0754, 0x2, 0x8, 0x8b, 0x0, 0x524, 0x5a, 0x6, 0x2, 0xe36e, 0x2, 0x6, 0xffffffff, 0x7, 0x7, 0xa, 0xd, 0x293, 0x2, 0x5, 0xc, 0xc, 0xf, 0x4, 0x7, 0x7fff, 0x2b, 0x1bd96476, 0x8000, 0xff8, 0x400, 0xe5, 0x9, 0x7, 0x7, 0x13, 0xa7, 0x4b0, 0x16a7, 0x61, 0x1, 0x4, 0x8001, 0x800, 0xfffffff1, 0x5, 0x1ff, 0x547c, 0x78, 0x7fff, 0xbb, 0xed3, 0x7fffffff, 0x3, 0x2, 0x8001, 0x9, 0x7, 0x0, 0xfff, 0x0, 0x1, 0x0, 0x400, 0x73e4333b, 0x9, 0x2f3, 0x80, 0x7, 0xc, 0xffffffff, 0x8, 0xf59, 0x0, 0x2, 0x3, 0x1, 0x0, 0x1, 0x8, 0x5, 0xffffffff, 0x5, 0x9, 0x5, 0x6, 0xffffffff, 0x2, 0x49d1, 0xd, 0x6, 0x7fffffff, 0x7, 0x436, 0x0, 0x0, 0x8, 0x4e, 0x1, 0x6, 0x4, 0x9, 0xbb3a, 0x7, 0x9, 0x0, 0x5, 0x0, 0xff1c, 0x8, 0x3, 0x59, 0x8, 0xfffffc00, 0x0, 0x4, 0x6, 0xffff, 0x400, 0x3ff, 0xa56, 0x9, 0xfffffff7, 0x3, 0x1, 0x7, 0x10001, 0x3, 0x0, 0x72ac, 0x40, 0xd0, 0x4, 0x0, 0xd, 0x1, 0x4, 0x8f75, 0x9, 0x6, 0xfffffffb, 0x4aa, 0x400, 0x9, 0x8, 0x1, 0x10000, 0x81, 0x3, 0x2, 0x8001, 0x3, 0x0, 0x40, 0x8, 0x8, 0x800, 0x264, 0x7b, 0x5, 0x5, 0x5, 0x3, 0x800, 0xfff, 0x9, 0x2, 0x0, 0x80000001, 0x8000, 0x887, 0x2, 0x3, 0xbfd5, 0x4, 0x3e7, 0x8, 0x4, 0x9f, 0x6, 0x6, 0x4, 0x9, 0x4, 0x101, 0x3, 0x3, 0x1, 0xfff, 0xffff, 0x5, 0xd493, 0x2, 0x7, 0x4, 0x8000, 0x1ff, 0x3, 0x7, 0x8, 0xffffffff, 0x3ff, 0x8, 0x0, 0x8, 0x4, 0x5, 0xfffffff8, 0xffff, 0x8, 0x7, 0x10000, 0x17cb, 0x9, 0x3, 0x80, 0x8000, 0x2, 0x4, 0x2, 0x10000, 0x9bcf, 0x9, 0x9, 0x5, 0x5, 0x2, 0xc, 0x7, 0xef, 0x1, 0x0, 0x10001, 0x9, 0x400, 0x5, 0x7fff, 0x3, 0x9, 0x10000, 0xf49, 0x0, 0x0, 0xfffffff9, 0x8, 0x3b1740e7, 0xf26c, 0x10000000, 0x2, 0x3e37f86, 0x92, 0x5, 0x5, 0xa0, 0x2, 0x7, 0xf2, 0x0, 0x9, 0xfffffffb, 0x3, 0xfffffffb, 0x100, 0x0, 0x1, 0xf798, 0x400, 0x5, 0xe7, 0x7f, 0x3, 0xf, 0x4, 0x9dc, 0x78, 0x6, 0xa, 0x6, 0x3, 0x56, 0x6, 0xfa5, 0x1, 0x3, 0xfffffffb, 0x10, 0x1, 0x7ff, 0xb, 0x0, 0x0, 0x7fffffff, 0x4, 0x5, 0x0, 0x8b, 0xc, 0xffff, 0xafd9, 0x7, 0x4, 0x5, 0x79b40580, 0x1, 0x525b, 0x5, 0xa, 0x259d9bfa, 0x3, 0x20000, 0xfffffffc, 0xffffffff, 0x7, 0x8, 0x6, 0xe0, 0x1, 0x793, 0x7fffffff, 0x2, 0x2, 0x7fff, 0x3, 0x2, 0x4, 0x0, 0x81, 0x400, 0x5, 0x2, 0x0, 0x9, 0x6, 0x3, 0x6, 0xc31, 0xf0, 0x8, 0x6, 0x50, 0x7fffffff, 0x3, 0xfffffff7, 0x200, 0x8, 0x6, 0x2, 0x7, 0x100, 0x7, 0x0, 0x9, 0x53, 0x5, 0xffffff00, 0x2, 0xa34, 0x6, 0x5, 0x3, 0x9, 0x3, 0x1, 0x8, 0x0, 0x2, 0x9, 0x3ff, 0x3, 0x8, 0xfffffffb, 0x7fff, 0xe2a6, 0x10001, 0x7fff, 0x688, 0x6, 0x0, 0xffff, 0x8000000, 0x1, 0x1000, 0x9, 0x5, 0x7, 0x3, 0xfff, 0x1, 0x6, 0x1000, 0x6, 0x3, 0x5, 0xbae, 0x8, 0xffffffff, 0x2, 0x0, 0x9, 0x1, 0x7fff, 0xfffffffe, 0x8, 0x7fff, 0xe, 0x1, 0xf, 0x4, 0x4, 0x3, 0x7fffffff, 0xfffffff7, 0x9, 0x6d21, 0x101, 0x4, 0x9, 0x0, 0x6, 0x1, 0x0, 0x401, 0x3, 0x6, 0xb1d, 0xfffffffc, 0x0, 0xffffffff, 0x4, 0x5, 0x9, 0x80000000, 0xab3, 0x9, 0x7f, 0x1, 0x1ff, 0x3, 0x40, 0x0, 0x5d6, 0x1, 0x6, 0x5, 0x8, 0x0, 0x9, 0x9, 0x7f, 0xc, 0x8, 0x1, 0x356, 0x5, 0x7, 0xd, 0x5, 0x1, 0x148, 0xfff, 0x5, 0x4, 0xb, 0x9, 0x9, 0xb60, 0x225d, 0xfffff377, 0x1d1e, 0xb4b3, 0x2, 0x200, 0x81, 0xefb4, 0x5, 0x6, 0x5, 0x1, 0x6, 0x9952, 0x9, 0x5, 0x5, 0xd4, 0xffff, 0x3, 0x149, 0x6, 0x4, 0x5, 0xffffffff, 0x8, 0x9, 0x0, 0x8, 0xb8, 0xffffff68, 0x3a8, 0x200, 0x8, 0x5, 0x6, 0x6, 0x4, 0x1, 0x2, 0x0, 0x9, 0x1, 0xfffff79d, 0x0, 0x80, 0x748c, 0x5, 0xfffffff7, 0x507b, 0x5, 0x3, 0x9, 0x19, 0x2, 0x1, 0xfff, 0x5, 0x8, 0x2, 0x2, 0x0, 0x5, 0x29c6, 0x3, 0x0, 0x10, 0x1, 0x1000, 0x3, 0x4787, 0xa, 0x3, 0x9, 0x7, 0x3, 0x9, 0x33, 0xffffdc01, 0x8c5c, 0x80000000, 0x8, 0x1c2649a, 0x7, 0xfffffffb, 0x7, 0x0, 0x4, 0x80000001, 0x101, 0x0, 0x101, 0xd, 0x6, 0x53, 0xffff, 0x3, 0x0, 0x2, 0xa, 0x6, 0x8b, 0x2, 0x4, 0x6d79, 0x4b40, 0x5, 0x10, 0x5, 0x800, 0x7fff, 0xfffff8d9, 0x0, 0x9, 0x5, 0x9, 0xc3, 0x5, 0x5, 0xba2d, 0x6, 0x101, 0x9, 0x10000, 0xca9, 0x4, 0x400, 0x6, 0x9, 0x80000001, 0x2, 0xd1, 0x6, 0x8b, 0x78, 0xfffffffb, 0x8, 0xb5e, 0x0, 0x1, 0x4, 0xdc0, 0x0, 0x5, 0x7, 0x2, 0x5, 0x2, 0x7, 0xffffffff, 0xffffff7f, 0x101, 0x7f0f, 0x8, 0x2, 0xd, 0xffff412d, 0x4f9cbed9, 0x4, 0x7, 0x6, 0xfff, 0x9, 0x7, 0x2, 0x1, 0xfffffffc, 0x4, 0xf98, 0x4, 0x1, 0x8, 0x5, 0x2, 0x9, 0x9, 0x80000001, 0xfffffffd, 0x2, 0x8, 0x100, 0x5, 0x424, 0x8, 0xfff, 0xfffffff8, 0xff, 0x4, 0x700a, 0x8, 0x8000, 0x1, 0xa, 0x69, 0x6, 0x5, 0x8d, 0x9, 0x4, 0x7, 0xa7, 0x2, 0x5, 0x2, 0x6, 0x75, 0x5, 0x1, 0x4, 0x100, 0xb39, 0x10000, 0x8, 0xfffffeff, 0x3, 0x7, 0xfffffff9, 0x3, 0x9, 0x2f, 0x3ff, 0x9, 0x1, 0x8, 0xd13, 0x7, 0x2, 0x100, 0xfffffffd, 0x10000, 0x2, 0x80, 0x10001, 0x2, 0xe2a, 0x8, 0x0, 0x1, 0x6, 0x4, 0x2, 0xffffffff, 0x5, 0x8, 0x2, 0x5, 0x1, 0x1, 0x5, 0xff, 0xf267, 0x79, 0x8000000, 0x7fff, 0x5, 0x5, 0x3, 0x5, 0x5, 0x0, 0x4, 0x1, 0x0, 0xb315, 0x7, 0x2, 0x7, 0x10, 0x800, 0xf, 0x874c, 0x1d9, 0x7, 0x5, 0x9, 0x0, 0x80000000, 0x45555f16, 0x7, 0x0, 0xc4, 0x9, 0xfffff800, 0xe0, 0x8, 0x9, 0x10000, 0x80000001, 0x9, 0x400, 0x1, 0x0, 0x6, 0xa, 0x4, 0xfff, 0x100, 0xff, 0x2000, 0x7, 0x1f7, 0x9, 0x79e, 0xf8, 0x4, 0x6, 0xffffffff, 0xa, 0x27, 0x3, 0x0, 0x5ec, 0x26a8dea1, 0x8, 0x0, 0xf, 0x7ff, 0xf957, 0xfffff800, 0x6ec0, 0x7f87, 0x10000, 0x5, 0x9, 0x80000000, 0x101, 0x80000001, 0x9, 0x3ff, 0xe6, 0x7ff, 0xcf3, 0x3, 0x3, 0x8, 0x10000, 0x7, 0x1, 0xc, 0x81, 0xfffffffc, 0xffffffff, 0x2, 0x65b2bf1a, 0x6, 0x5, 0x1, 0xfffffe00, 0x1, 0x3, 0x1, 0x7, 0x1, 0x3, 0x80, 0x1ff, 0x9, 0x3, 0x6, 0x9, 0x80000000, 0x4, 0x80000001, 0x100, 0x4, 0x2909, 0x6, 0x5, 0x2, 0x1, 0x8000, 0x3, 0x1, 0x9, 0x1, 0xfffffff6, 0x8a6, 0xf, 0x81, 0xfffffff8, 0x3, 0x8fc, 0x0, 0x36, 0x4, 0xbb, 0x9, 0xd, 0x0, 0x8, 0x3, 0x9, 0x10, 0xfffff801, 0x3, 0x3, 0x4, 0x1, 0x923f, 0xd3a, 0x8000, 0x6, 0x50, 0x5, 0x2, 0x0, 0x1000, 0x9, 0x5, 0x2, 0x3d6, 0x5d02, 0x7, 0x2, 0x8, 0x4, 0x2, 0x5, 0xfffff001, 0x98, 0x1ff, 0x9, 0x5, 0x6, 0x7, 0x4, 0x7, 0x126, 0x301c, 0x6, 0x2, 0x3, 0x10000, 0xbf3, 0x7, 0x6, 0x0, 0x1, 0x7e, 0x6, 0x0, 0x216, 0x15be, 0xff, 0x6, 0xa1, 0x618, 0x0, 0xae45, 0x52, 0x8, 0x8001, 0x1, 0x9, 0x8001, 0x1, 0xffffffff, 0x8, 0x6, 0x1, 0x8000, 0x6, 0xffffff00, 0x0, 0x5, 0x7fffffff, 0x76ab, 0x0, 0x5, 0xfffffffe, 0x0, 0x80000000, 0x10001, 0x0, 0x1c0d, 0xb, 0x3, 0x80, 0x6, 0x10000, 0x80, 0x1, 0x1007, 0x1, 0x2, 0x3ff, 0xc51, 0x3, 0x7, 0x0, 0x4, 0x10001, 0x0, 0x3, 0x29, 0xd3ef, 0x4, 0x8, 0x6, 0x5, 0x7, 0xff, 0x1, 0x40, 0x1, 0x3c8fb7d8, 0x3, 0x7d62, 0xfffffffa, 0xf16, 0x6, 0xa66, 0xb, 0x39, 0x3, 0x1825, 0x13b, 0x1, 0x8, 0x6a16b6b2, 0x4, 0xf, 0x8, 0x100, 0x7f, 0x7, 0x6, 0x7, 0xfffffff2, 0x3000000, 0x8, 0x6, 0x2, 0x200, 0x1ff, 0x9, 0x5, 0x3, 0x0, 0x7, 0xa6af, 0x8, 0x5, 0x6, 0xa5, 0x8, 0x0, 0x3, 0x80000001, 0x6, 0x1ff, 0x2, 0x1, 0x5, 0x3, 0x6, 0x8b, 0x6cb, 0x8, 0x101, 0x252, 0x8, 0x39ef, 0x1, 0x1000, 0xaf, 0x9, 0x8000, 0x10, 0x0, 0x8, 0xfffffff7, 0x7fffffff, 0x2, 0x3, 0x5, 0x6, 0x3, 0xfffffef4, 0x4, 0xa, 0x7, 0x2, 0x9, 0x3, 0xffff, 0x6, 0x7f, 0x200, 0x1, 0xc85, 0x8, 0xfff, 0x4, 0xfffffff7, 0x8, 0xdca8, 0x8000, 0x5, 0xfffffffc, 0x3ff, 0x7f, 0x80000001, 0xc, 0x80000001, 0x15, 0xff, 0x0, 0x3, 0x8, 0x9, 0x7, 0xc, 0x4, 0xfffffffc, 0x10c, 0x8, 0x8, 0xfffffff7, 0x9, 0x5, 0x4, 0x6, 0xaef, 0xd2, 0x6, 0x2, 0x0, 0x3, 0x0, 0x3, 0x330e84f6, 0x2, 0x2, 0x5, 0xfffffffd, 0xa, 0x4, 0x4483, 0x9, 0x800, 0x2, 0x6, 0x10000, 0xd, 0x1, 0x4, 0x9, 0x5, 0x6, 0x9, 0xfffffffd, 0x5, 0x8, 0x1, 0x5, 0x1ff, 0x40, 0x4, 0x3, 0xa, 0x3, 0xf, 0x7, 0x5, 0x5, 0xa1, 0x7, 0x0, 0x10000, 0x5, 0xf66, 0x1, 0x401, 0xd255, 0x644, 0x2, 0x1, 0x2, 0x3, 0x6db, 0xfffffffb, 0x8, 0x5, 0x1, 0x6, 0x4, 0x9, 0xfffffff9, 0xfffffff9, 0xe0, 0x7, 0x7f13, 0x0, 0x5, 0x5, 0x4, 0x2, 0x1, 0xffffffff, 0x9, 0x7b, 0x1, 0x1c, 0x800, 0x7, 0x7, 0x6, 0x9, 0x3, 0x8, 0x72be3c16, 0x0, 0x1, 0xfff, 0xc2, 0x3fb9, 0x101, 0x6, 0xfffffff2, 0xf15f, 0xbb7, 0x0, 0x7, 0x1e4f, 0xd82, 0x464e, 0x7f, 0x4, 0x7, 0x5f98, 0x2, 0xf53, 0x7, 0x7000, 0x80000000, 0xe, 0x39bb, 0x2, 0x2, 0x80000001, 0x3, 0x1, 0x0, 0x5, 0x7, 0x2889, 0x0, 0xd, 0x99c5, 0x1, 0x6, 0x5, 0x8, 0x8000, 0xfffffff8, 0x6, 0x2, 0x80000000, 0x8a5, 0x6, 0xd, 0xd9, 0x4, 0x77, 0x4, 0x38, 0xffffffff, 0x2, 0x1b, 0xa, 0x6, 0x3, 0x4, 0x100, 0x800, 0xffffffff, 0x3, 0x11, 0x0, 0x101, 0x7, 0x6, 0x0, 0x4, 0xfffffffe, 0xb05f, 0x2, 0x3, 0x3, 0xfffffffd, 0xd, 0x3, 0x0, 0x3, 0x0, 0x4, 0x5a38, 0x6, 0x5, 0x5, 0x5, 0xc, 0x9a1, 0x7, 0x7d4acdc4, 0x7, 0x4, 0xffff, 0x9, 0x8, 0x3, 0x2, 0x4, 0x6, 0x2, 0xffffff80, 0x5, 0x1, 0x8f, 0x7, 0x7, 0x9, 0xffffd8e8, 0x7, 0x6, 0x8, 0x8, 0x1, 0xfffffff7, 0x4, 0x7, 0xc, 0x3ff, 0x3, 0x8, 0x6, 0x10000, 0x3, 0x1, 0xe, 0x1000, 0x7, 0x9, 0x7, 0x0, 0x7, 0x7, 0x956d, 0x7f, 0x2, 0x4, 0x400, 0x0, 0x5, 0xfc, 0x8000000, 0x7, 0x2e8, 0x2, 0x8, 0x6, 0x7, 0xecb, 0x8001, 0x0, 0x813, 0x2, 0x0, 0xff, 0x200, 0x9, 0x0, 0x5, 0x5, 0x8, 0x4, 0x3, 0x8001, 0x0, 0xa, 0xe38b, 0xffff, 0xf15, 0x1478e261, 0x6, 0x0, 0x40, 0x80, 0x4, 0xfffffff8, 0x6, 0xc, 0x3, 0x6, 0x8, 0xffff, 0x3, 0xe, 0x950e, 0x7fff, 0x4, 0x1, 0x6, 0x1ff, 0x2, 0x9, 0x2, 0x40, 0x3, 0x8, 0xd6d9, 0x2, 0x100, 0x6, 0x3, 0x101, 0x7, 0x7, 0x95, 0x9, 0x8, 0x10001, 0xe, 0x3391, 0x3, 0x1000, 0x200, 0x8, 0x0, 0x9, 0x401, 0xa1, 0x3, 0x4, 0xe, 0x848, 0xeb6, 0x101, 0x4, 0x40, 0x4, 0x81e, 0x0, 0x0, 0xf7, 0x4, 0x5, 0x1, 0x1, 0x1ff, 0x200, 0x0, 0x5, 0x9, 0x65e6, 0x6df2, 0x2, 0x4, 0x400, 0x40, 0x2, 0x8b, 0x8, 0x6ea66d03, 0x0, 0x6, 0x5, 0xa, 0x7, 0xc, 0x8, 0x1, 0x400, 0x964, 0x7, 0x5, 0x8, 0x7fffffff, 0x401, 0xfffffe65, 0x922, 0x2, 0xbd41, 0x9, 0xfffffffd, 0x2, 0x9, 0x4, 0x4, 0x0, 0x5, 0x0, 0x9, 0x6, 0x0, 0x6a, 0x3, 0x7, 0xff, 0x10, 0x0, 0x5, 0x80, 0x6f6, 0x2, 0x4, 0xffffffff, 0x1ff, 0x2, 0x1fc9cbcd, 0x4, 0x8, 0x0, 0xc442, 0x800, 0x8, 0x64, 0x5, 0x3, 0x5, 0x3, 0x5ab9, 0x60000000, 0x3, 0x800, 0x1, 0x6, 0x401, 0x401, 0x6, 0xfffffd5e, 0x3, 0xd8, 0x9, 0x8f, 0x6, 0x3, 0xd, 0x4, 0x8, 0x8001, 0x5, 0x7, 0xffffffff, 0x8000, 0x2, 0x4, 0x4, 0x9, 0x4, 0x3, 0x7, 0x6, 0x8, 0x40, 0x1ff, 0x7, 0x4, 0x8, 0x0, 0x9, 0xb, 0xa00000, 0x1, 0x1c1, 0xbb, 0x5, 0x6d14, 0x9e000000, 0x28000, 0xfffffffe, 0x5, 0x0, 0x27f2, 0x2, 0xfb3, 0xd, 0x7fffffff, 0x10000, 0x3, 0xa, 0x101, 0x0, 0x9, 0x9, 0x9, 0x0, 0x8a89, 0x200, 0x8, 0x7, 0xfffffff8, 0x7, 0x401, 0x8, 0x0, 0x5, 0x1, 0x80000000, 0x8, 0x3, 0x8, 0x3, 0x0, 0x4, 0x4, 0xfff, 0x64, 0x4, 0x0, 0x67, 0x2, 0xa, 0x6, 0x9, 0x7, 0x3, 0x8000, 0x7, 0x944, 0x8, 0xfffffff7, 0x8, 0xb, 0xee6, 0xff, 0x3, 0xce82, 0x5cedf530, 0x6, 0x0, 0x8, 0x3, 0x7694, 0x3, 0x0, 0x96, 0x7, 0x2, 0x3, 0x3, 0x6, 0xb1, 0x6, 0x379bd6d8, 0xa, 0x0, 0x101, 0x217, 0x9, 0xff, 0xffff, 0x8, 0x6, 0x3, 0x1, 0x4, 0xb, 0xfffffff7, 0x6, 0xb8, 0x1000, 0x6, 0x2, 0x5, 0x80, 0x7f, 0xde41, 0x4, 0xfffffffb, 0x9, 0xff, 0x2, 0x10, 0xfffffffb, 0x401, 0xfe000000, 0x1, 0x2, 0x2, 0x0, 0x7, 0x2, 0x1, 0x9, 0x9, 0x8000, 0x3ff, 0x6, 0x2, 0x9, 0xfffff000, 0xef5, 0x80, 0x2, 0x2, 0x4, 0x6, 0x80000001, 0x7fffffff, 0xfffffffa, 0x5, 0x3, 0x0, 0x8, 0xfffffff7, 0x8, 0x2, 0x4, 0x8, 0x705, 0xd95, 0x6, 0x6, 0xfffffffb, 0x0, 0x9, 0x48a7, 0x1000000, 0x4, 0x1, 0x9, 0x81, 0x7c, 0xc, 0x1, 0xc, 0x2, 0x5, 0x68b, 0x8, 0x0, 0x9, 0x7, 0x8000, 0x14a8, 0x81, 0x5ac0000, 0x9, 0x9, 0x2, 0x81, 0x7fff, 0x6, 0x3fe, 0x1, 0x4, 0x6, 0x400, 0x7, 0x8, 0x7, 0x3, 0xfbbe, 0x0, 0x8, 0xc8, 0x5, 0x81, 0x6, 0x7f, 0x4, 0xa, 0x9f, 0x80000000, 0xec3, 0x4, 0x8, 0xffffff7f, 0x7, 0x2, 0x3, 0x10, 0x1, 0xad, 0x8878, 0x7e, 0x4, 0x3, 0x1, 0x101, 0x4, 0xdf, 0x4a, 0x0, 0x2, 0x1, 0x2, 0x4, 0xb2d, 0x3, 0x488, 0xed0, 0x3c48, 0x7, 0x6, 0x80000, 0x6, 0xfa, 0x7, 0x10000, 0xa47, 0x8, 0x8, 0x5, 0x1, 0x5, 0x5, 0x6, 0x1ff, 0x6, 0x5, 0x10001, 0x0, 0x7, 0x4, 0x5, 0x5, 0x7, 0x360, 0x6, 0x10, 0x3, 0xfffffff8, 0x504, 0xe, 0x10001, 0x40, 0x4, 0xff, 0x6, 0xffffffff, 0x4, 0x2, 0xd3, 0xffff, 0x6cf4, 0x3, 0x101, 0x8, 0x1, 0x7, 0x7fff, 0x8, 0x6a, 0xffffff32, 0xad, 0x1, 0x2, 0x2, 0x0, 0x258, 0xe, 0x8000, 0x4, 0x1, 0x80000000, 0x3, 0x4, 0xb4, 0x9, 0x5, 0x9, 0xb, 0x0, 0x2, 0x2, 0x2, 0x8, 0x9, 0x4, 0xf104, 0xfffffffd, 0x4, 0x2, 0x1, 0x4, 0x3ff, 0x2, 0x0, 0x9, 0x8, 0x463, 0x0, 0x883, 0x9, 0x9, 0x4, 0x310, 0xe5b, 0x4, 0x3ff, 0x2, 0x1000, 0x80000000, 0xfffffffd, 0x3, 0x7, 0xf, 0x9550, 0x10, 0x5, 0x47b, 0x3, 0xca, 0x4, 0x0, 0x6, 0x3, 0x4, 0x1, 0x10000, 0xec, 0x1, 0x0, 0x5, 0x5, 0x2, 0x9, 0x1, 0x32, 0x9, 0xfff, 0x2, 0x10, 0x3, 0x5, 0x8, 0x4, 0x6, 0x401, 0x81, 0x8, 0x3, 0x8001, 0x0, 0x2e889e53, 0x8, 0x10, 0x2, 0x8, 0x8, 0x3, 0x7, 0xb1b, 0x8, 0x4f, 0x9, 0x6, 0x4, 0x6, 0x40, 0xfffffffb, 0x200, 0x800, 0x1, 0x4, 0x8, 0xff, 0x3, 0x3, 0xe5f, 0x0, 0x0, 0x6, 0x6, 0x5, 0x4, 0x8, 0x10001, 0x5, 0x6, 0x0, 0xffffffff, 0x3, 0x3, 0x694d, 0x100, 0xe9, 0x7, 0xd, 0x9, 0x7, 0x9, 0x1, 0x4, 0xfffffffe, 0x7, 0x6, 0x2, 0xea, 0x8, 0xfffffffc, 0x9, 0xd, 0x7, 0x3, 0x6, 0x2, 0x80000000, 0x278a, 0x5, 0x6, 0x7, 0x4, 0x0, 0x9, 0x1, 0xd7, 0x7f, 0x8c41, 0x6, 0xd1, 0x8001, 0x1, 0x2f1, 0x7, 0x0, 0x6, 0x6, 0x345, 0x4, 0xff, 0x0, 0xa, 0x0, 0x5, 0x3, 0x0, 0x4, 0x3, 0xf8000000, 0xb4, 0xffffff51, 0x4, 0x7, 0x5, 0x2, 0x9, 0x7a, 0x9, 0xfffff811, 0x0, 0xd, 0xfcf2, 0x3, 0x3ff, 0x1, 0x2, 0x87, 0x6, 0x44be, 0x100, 0x200, 0x3, 0x3, 0x4, 0x6, 0x7, 0x4, 0x9, 0x77, 0x6cb8, 0x6, 0x4, 0x8ebf, 0x0, 0x7fffffff, 0x7ff, 0x8, 0x1, 0xf, 0x4, 0x9, 0x7fff, 0x4, 0x4, 0x10, 0x9, 0x6, 0x9, 0x6, 0x2, 0x80000001, 0x7, 0x2, 0x2, 0x42cb, 0xc, 0x6, 0x1ff, 0x9, 0x78, 0xc, 0x3, 0x5, 0x1, 0x50000, 0x3, 0x4, 0xc50581f, 0x2, 0x9, 0x1, 0x7, 0x2, 0x342, 0x3, 0xbf079b51, 0x9, 0xd670, 0x200, 0x4, 0x23, 0x44a, 0x40, 0x80000000, 0x6, 0x996e, 0xe, 0x6, 0x400, 0x1df, 0x3, 0x0, 0x10001, 0x431, 0x0, 0x8001, 0x2, 0x6, 0x2, 0x4, 0x2, 0xc0000000, 0xeba6, 0xa, 0x6, 0x8, 0x7, 0x1, 0x3, 0x101, 0xe, 0x42, 0xff, 0x3, 0x160, 0x400, 0x6, 0x2, 0x20000, 0x42, 0x4, 0xb0, 0x1, 0xff, 0x4, 0xe9, 0x6, 0x7b62, 0x2, 0xc5, 0xffffffff, 0x1000, 0x7, 0x3, 0x401, 0x0, 0x8, 0x53, 0x9, 0x4, 0xffff46ab, 0x0, 0x2d73, 0xd7a2, 0xc234, 0x80, 0x0, 0x6, 0x6, 0x1, 0x3, 0x7, 0x1, 0x80, 0x6, 0x10000, 0x0, 0x7, 0x8, 0x3, 0x2, 0x95, 0xe, 0x13cc473d, 0xf8, 0x9, 0xbb58, 0x1, 0x5, 0x34, 0x40, 0x800, 0x8, 0x6, 0x0, 0x8, 0x1ff, 0x6, 0x4, 0xc, 0x8, 0xa96, 0x837, 0x81, 0x67, 0x2, 0xffffffff, 0x0, 0x100, 0x1000, 0x8, 0x7, 0x7fff, 0xfffffffa, 0xbb, 0x7, 0x7, 0xca, 0x4, 0x8308, 0x6, 0x2, 0x70000000, 0xfffffffb, 0x8, 0x4, 0x9a38, 0xfffffffa, 0x9619, 0x7, 0x698, 0x0, 0x3f4, 0x1b36, 0xa559, 0x7f, 0x8, 0x4, 0xd92, 0x9, 0x8001, 0x30000, 0x1, 0x5317, 0xffff, 0x5, 0x3, 0x10001, 0xe, 0x11f9, 0x7, 0x4, 0xfee527a4, 0x8001, 0x1ef5, 0x100, 0x5c10, 0x293, 0x9, 0x1, 0x3ff, 0xc, 0x10001, 0x101, 0xb, 0xd417, 0x6, 0x53, 0x8, 0x4, 0xfffffff7, 0x1ff, 0x8a8, 0x6, 0x8001, 0x9, 0x7fc, 0xec5, 0x3, 0x7992, 0x29, 0x2, 0x8, 0x3, 0x2, 0x552, 0xf0f, 0xc, 0xd, 0xc, 0xadc3, 0x5, 0x4, 0x80000001, 0x6, 0x6, 0x400, 0x5, 0xffff7fff, 0x7fff, 0x5, 0x2, 0x80000000, 0xafd, 0x1, 0x7, 0x1, 0x2, 0xfa38, 0xf193, 0x4, 0x3, 0x5, 0x8000, 0x4, 0x7, 0xa, 0x5, 0x80, 0x40, 0x200, 0x6, 0x4000000, 0x3, 0x101, 0x21, 0x7bb, 0x8, 0x2, 0x2, 0x805, 0x78, 0x1, 0x1, 0x3, 0x7, 0x0, 0x5, 0x6, 0xf, 0x2, 0x9, 0x9f2, 0xffffffff, 0x8, 0x1ff, 0xf993, 0x5cc, 0x9f86, 0x80000000, 0x7, 0x2, 0x80000001, 0x1000, 0x10001, 0xfffffffc, 0xce5, 0x8000, 0x0, 0x9, 0xfff, 0x8, 0x0, 0xfffffff8, 0x400, 0x6, 0x2, 0x3, 0xfffffafc, 0x1ff, 0x5, 0x4, 0x2, 0x24, 0x1, 0x7, 0x1, 0x7, 0x8, 0x6, 0x7, 0x7, 0x12, 0x7, 0x4, 0x9, 0x1, 0x3, 0xfffffffd, 0x8, 0xfff, 0x6, 0xda6, 0xfffffffd, 0xfb0, 0x1, 0x80000001, 0x1a000000, 0xfffffffc, 0x3b7, 0x1, 0x80, 0x81, 0x1, 0x7, 0x4, 0xb, 0x8, 0x1000, 0x0, 0x1, 0x9503, 0xab, 0x10000, 0x40, 0xffffffff, 0x6dc3fee2, 0x2, 0x7, 0x2b, 0x7, 0x5, 0x100, 0x8, 0x6, 0x81, 0x7, 0x7f, 0x8, 0x3, 0x432e, 0x96, 0xb, 0xa, 0x3, 0x9, 0x5, 0xf, 0x3, 0xd95, 0x80000000, 0xff, 0xba, 0x9, 0x9, 0x2, 0x44f4, 0x7ad, 0x3000, 0xfffff26c, 0x0, 0xe, 0x200, 0x6, 0x8, 0x1db, 0xb3, 0xd3f, 0x14, 0x9, 0x6, 0x70f, 0x7ff, 0xe, 0x3, 0x1, 0x200, 0x7, 0x8, 0x10001, 0x40, 0x3, 0x36, 0x9, 0x8001, 0x10000, 0xfffffc10, 0x689e, 0x4, 0x8, 0x4, 0xb, 0x100, 0x1, 0x8, 0xfbf, 0x6, 0x3, 0x7, 0x100, 0x7, 0x0, 0xd0, 0x45e, 0xffffffff, 0x3, 0x10, 0x18, 0x1, 0x400, 0x8, 0xfffffffe, 0x1000, 0x7f, 0x9, 0x4, 0xfffffff9, 0x1, 0x2e9, 0x100, 0xcf2b, 0x2, 0x6, 0xe73, 0x1a5, 0x90, 0x2, 0x0, 0x687a6a60, 0x2, 0xfff, 0x5, 0x1, 0x8daa, 0x4, 0x5, 0x7, 0x6, 0x9, 0x1, 0x59868fe2, 0xfff, 0x6, 0x81, 0xffff1585, 0x7ff, 0x7, 0x8000, 0xc9b, 0x2, 0x5, 0x3, 0x8, 0x9, 0x2, 0xc, 0x1, 0x1000, 0x8001, 0x1, 0x7, 0xf5, 0x5, 0x0, 0x2, 0xc16, 0x4, 0x40000000, 0xff, 0x401, 0x1, 0x8001, 0x7fff, 0x200, 0x8, 0x4, 0x3, 0x72f, 0xb1, 0x9ea0, 0x8, 0x1, 0x0, 0x0, 0x1000, 0xffffffff, 0xfffffff9, 0x7f, 0x3, 0x6, 0x2, 0x5, 0x5, 0x1, 0x7fff, 0x0, 0x5, 0x6, 0x0, 0x7fffffff, 0xb6e00000, 0x3, 0x4, 0x8, 0x200, 0x10, 0x5c1a, 0x8, 0xe7, 0x41ec, 0x5e1, 0x3581, 0x6, 0x9, 0x2, 0x0, 0x4, 0x8, 0x3, 0x5, 0x1000, 0xfffff9a5, 0x1, 0x6, 0x7f, 0xd, 0x2, 0x3ff, 0x3076, 0x1, 0x2, 0x4, 0xa, 0xafe1, 0x4, 0x6, 0x4, 0x401, 0x0, 0x1, 0x6, 0x7, 0xffff, 0x6, 0x5, 0x9, 0x5, 0xfffffff7, 0xfffffffd, 0x6, 0x6, 0x5, 0x8, 0x2, 0xcb67, 0x401, 0x6, 0x8000, 0x4, 0x3, 0x5, 0x6, 0x4, 0x3, 0x5, 0x9, 0x6, 0x2, 0xa811, 0xf307, 0x6, 0x0, 0xfffffc01, 0x2, 0x7566d5f6, 0x0, 0x80000000, 0x800, 0xb1, 0xfffffffa, 0x5, 0x8, 0x8, 0x80, 0x9, 0x1, 0x7, 0xd, 0x6, 0x7, 0x2, 0x2, 0x8, 0x7ff, 0x6, 0x9, 0xdb, 0x9, 0x7, 0x8001, 0x7, 0x6, 0x6, 0xd, 0x5, 0xfffffffb, 0x2, 0x1, 0x5, 0x8, 0x6, 0x1, 0x80000000, 0x2, 0xc75300, 0x6, 0x5, 0x6, 0x8, 0xfffffffb, 0x80, 0x3, 0x7, 0x7bd, 0x3, 0x66, 0x7, 0x66, 0x7fffffff, 0x10001, 0x6, 0x3ff, 0x9, 0x4, 0xc, 0x2, 0x4, 0x8, 0x2, 0x10001, 0x0, 0x5, 0x0, 0x10000, 0x8000, 0x8001, 0x56, 0x8001, 0x5e, 0x0, 0x5, 0x400, 0x7, 0x684, 0x9, 0x100, 0x1, 0x8, 0x9, 0x9, 0x4, 0x80000000, 0x9e77, 0x100, 0x4, 0x80000001, 0x5, 0xff, 0x4, 0x0, 0x8c8, 0x1, 0x7, 0x0, 0x3, 0xc3, 0xd, 0x3, 0x4, 0x1, 0x260, 0x9, 0x7, 0x5, 0x10000, 0x0, 0x5, 0x10, 0x40, 0x5, 0x1e, 0x2, 0x756, 0x0, 0xf97, 0x6be, 0xbd, 0x9, 0xfe6, 0x8f2, 0x5, 0x40, 0x4, 0x1000, 0xffffffff, 0x9180, 0x1, 0x31e, 0x6, 0x8, 0x8000, 0x4, 0x7c5c, 0x7, 0x7f, 0x1, 0x7, 0x0, 0x8, 0xfffffffd, 0x1, 0x5, 0x200, 0x1, 0x4, 0x8, 0x6, 0x9, 0x10, 0x0, 0xf, 0x7000000, 0x48, 0xfffe, 0x5, 0x0, 0xf, 0x9, 0xffff, 0x2, 0x8, 0xb2ba, 0xd3e, 0x10000, 0x9, 0x5, 0x8, 0xfffffffd, 0x3, 0x9, 0x7f, 0x3, 0x3, 0x80000000, 0xfff, 0x6, 0x0, 0x1ff, 0x6, 0x3, 0x1000, 0x8, 0x8000, 0x2, 0x8, 0x5, 0xffffffff, 0x7fff, 0x9, 0x89d, 0x9, 0x5, 0x28d, 0x6, 0xe, 0x58dd7ee1, 0x7ff, 0xffffffff, 0x9, 0x401, 0xc8], 0x1, 0x8}) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000007080), 0x80, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f00000070c0)={0x0, @in6={{0xa, 0x4e20, 0xff, @private2, 0x5}}, 0x5, 0x7, 0x8548, 0x9dd5, 0xfff}, &(0x7f0000007180)=0x98) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f00000071c0)={r8, 0x5, 0x10, 0x1, 0xe9}, &(0x7f0000007200)=0x18) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000007340)={r0, &(0x7f0000007240)='&@\x00', 0x107600, &(0x7f0000007280)={@_ha_fsid={[0x3, 0x2]}, {0x7, 0xfff5, 0x6, 0xffffffff}}, 0x6, &(0x7f00000072c0)={@_ha_fsid}, &(0x7f0000007300)=0x1}) ioctl$IOMMU_VFIO_SET_IOMMU(r9, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(r9, 0x3b88, &(0x7f0000007380)={0xc}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x5, &(0x7f00000073c0), &(0x7f0000007400)=0x4) ioctl$XFS_IOC_FSBULKSTAT(r9, 0xc0205865, &(0x7f0000007b80)={&(0x7f0000007440)=0x100000001, 0x80000000, &(0x7f0000007480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000007b40)}) 87.869163ms ago: executing program 5 (id=814): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) (async) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) (async, rerun: 64) ioctl$BLKOPENZONE(r0, 0x40101286, &(0x7f0000000240)={0x200, 0x6}) (rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x4040850) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x6, 0x24, &(0x7f0000000540)=ANY=[], 0x0) (async) ioctl$EVIOCRMFF(r6, 0x40045506, 0x0) close(r5) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x40000, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) (rerun: 64) fcntl$lock(r7, 0x26, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x200000000}) fcntl$lock(r7, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x2007, 0x1fd}) (async) mmap(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x200000b, 0x10, r5, 0x264e6000) (async) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6(0xa, 0x1, 0x100) (async) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa20000, 0x5, 0x3, r7, 0x0, &(0x7f00000000c0)={0x990906, 0xfffffffd, '\x00', @p_u32=&(0x7f0000000080)=0x9}}) (async, rerun: 64) syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) (rerun: 64) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b090c, 0x80, '\x00', @p_u32=0x0}}) 85.667826ms ago: executing program 1 (id=815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc00f5ff0000000000000000000000021800018014000240ff0100000000000000000000000000010500030080ff00000900020073797a31"], 0x64}}, 0x4800) 20.645446ms ago: executing program 0 (id=816): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x1f, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x114}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r2, 0x4068aea3, &(0x7f0000000200)={0xa4, 0x0, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)=@arm64={0x40, 0xf, 0x4, '\x00', 0xb}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000180)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) syz_clone(0x8000000, 0x0, 0x90b2abc016661e7, 0x0, 0x0, 0x0) 19.023518ms ago: executing program 1 (id=817): request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95::\x01\x00\x00', 0x0) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0xf) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000140)='syzkaller\x00', 0x8, 0xef, &(0x7f0000000000)=""/239, 0x41000, 0x40}, 0x94) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mknodat$loop(r1, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x3a, 0x1, 0x0, 0x20) 0s ago: executing program 0 (id=818): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) (async) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x8) (async) sendmmsg$inet6(r2, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) (async) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x29, 0x13, 0x7, 0xd, 0x8, 0xd3, 0x0, 0x158, 0xffffffffffffffff}}) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0x200, @dev={0xfe, 0x80, '\x00', 0x44}}, 0x1c) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000080)={0x26, 0x6a, 0x46, 0x3, 0x0, 0x85, 0x6, 0x21, 0xe6, 0x0, 0x81, 0x4c, 0x2, 0x3}, 0xe) (async) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) syz_usb_connect(0x3, 0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000000000000000705e37e1b"], 0x0) (async) syz_open_dev$evdev(&(0x7f0000000040), 0x40, 0x127502) (async) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) (async) pselect6(0x40, &(0x7f0000000900)={0x6, 0x0, 0x1ff, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x7fff, 0x0, 0xc, 0xf, 0x9, 0x3, 0x9}, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_IIF, @TCA_ROUTE4_POLICE={0x0, 0x5, [@TCA_POLICE_RATE={0x0, 0x2, [0x3, 0x2, 0x0, 0x0, 0x3, 0x8, 0x9454, 0x4, 0xe6, 0x8, 0xf1a2, 0x5, 0x3, 0x1000, 0x2, 0x81, 0x81, 0x0, 0x3c, 0x7, 0x4, 0x8, 0x6, 0x6, 0x87c, 0x9, 0x8, 0x0, 0x1, 0x8, 0x3, 0x8001, 0x1000, 0x80, 0x2, 0x8, 0x1, 0x80000001, 0x2, 0xffff, 0x800, 0x81, 0x8, 0x520, 0x0, 0x7, 0x3, 0xc, 0x0, 0x1, 0xffffff01, 0x7, 0xb581, 0x9, 0xe9, 0x18000000, 0x8259, 0x8, 0x0, 0x8, 0x6, 0x8, 0x10000, 0x63, 0x4, 0x0, 0x7, 0x4, 0xb11, 0x101, 0x7, 0x1, 0xffffff81, 0x10001, 0x800, 0x37f, 0x2, 0x1, 0xa, 0x7, 0x6ac, 0x8, 0x401, 0xff, 0x400, 0x6, 0xfffffff8, 0xd9, 0x7, 0x2, 0x72e, 0xd, 0x2c78, 0x8, 0x1, 0x5a4, 0x81, 0x2, 0x7, 0x80000001, 0x81, 0x0, 0x9, 0x7fff, 0xfffffffe, 0x3, 0x466ad571, 0x0, 0x225a, 0x9, 0x7af6, 0xb, 0x6, 0x5, 0xa, 0x8, 0x5, 0xceb5, 0x7ced, 0xb, 0xfffffff8, 0x9, 0xfffffffa, 0xfff, 0x9, 0x2ef, 0x15e, 0x80000001, 0x8, 0xc, 0x1, 0x400, 0xb, 0x9, 0x3, 0xa, 0xbb7, 0x4, 0x2, 0x7, 0x100000, 0xff2, 0x2, 0x2, 0x1, 0xa0000000, 0x4, 0x5, 0x4, 0x3, 0x9, 0x2, 0xc77, 0x8, 0x1, 0x3ec7, 0x8, 0x4, 0x8, 0x7, 0x20b, 0xfffffffb, 0xaaea, 0x8, 0xa2, 0x8001, 0xfffffff9, 0x5, 0x0, 0x4, 0x6, 0x10db, 0x40, 0xfe39, 0xa7f5, 0x4f, 0x1, 0x5, 0xa, 0x4, 0x95, 0xfffffff0, 0x62, 0x7, 0x7ff, 0xd2c3, 0x1, 0x6, 0x3cd6ff79, 0x3, 0x81, 0x4, 0x401, 0x7cee22ca, 0x10000, 0x9, 0x7, 0x3, 0x5, 0x8, 0x2, 0x9, 0x3, 0x9, 0xf86, 0xb92, 0xf16, 0x8, 0xa, 0x2, 0xffffffff, 0x6, 0x800, 0x1, 0x5, 0x0, 0xfffff000, 0x8, 0x9, 0x8, 0x7, 0x1, 0xe05c, 0x6, 0x7, 0x1, 0xffff7a4d, 0x7, 0x5, 0x5, 0x8, 0x2, 0x3, 0x100, 0x7f, 0x7ff, 0x8, 0x5e70, 0x7836207e, 0x8, 0x10000, 0x9, 0x4f12, 0x3, 0x5, 0x4, 0xb99481ff, 0xfffffff7, 0x86, 0xfff, 0xffff, 0x0, 0x10001, 0x401, 0x2, 0x5]}]}, @TCA_ROUTE4_POLICE={0x0, 0x5, [@TCA_POLICE_TBF={0x0, 0x1, {0x9, 0x1, 0x6, 0x3, 0x6144, {0xfc, 0x0, 0xffff, 0x7f, 0x2, 0x4}, {0x2, 0x2, 0xfff1, 0x400, 0x7, 0x9}, 0x0, 0x4, 0x5}}, @TCA_POLICE_RATE={0x0, 0x2, [0x9, 0x1, 0x5, 0x1ff, 0x6, 0x5, 0x0, 0x2, 0x0, 0x10, 0x8001, 0x0, 0x1, 0xffffffff, 0xfff, 0x8, 0x7f, 0x2, 0x4, 0x1, 0x192, 0x3b0, 0x3, 0x8, 0x5, 0x5, 0xfffffffc, 0x4, 0x81, 0x9, 0x3ff, 0x6, 0x8, 0x2, 0x81, 0x6, 0x3, 0x6, 0x5, 0x4, 0x8, 0x2, 0x9, 0x3, 0x8, 0x3c, 0x9f0, 0x8, 0x0, 0xffffffff, 0xf7f, 0x94, 0x8, 0x1, 0x5, 0x0, 0x96, 0x8, 0xef, 0x80000000, 0x3, 0x7, 0x7, 0x7, 0x41ec, 0x6, 0x506ad46f, 0x442, 0x8, 0x4, 0xcd8, 0x5, 0x5, 0x8, 0xffff3c47, 0xe42, 0x4, 0x3ff, 0x10, 0x0, 0x10000, 0x8000, 0x4, 0x0, 0x6, 0x7ff, 0x0, 0x8, 0x8, 0x0, 0x9, 0x2, 0x3, 0xffff, 0x9, 0xca, 0x3, 0xc5de, 0x3, 0x9, 0x2, 0x42e, 0x3, 0x8, 0xfffffffa, 0xb, 0xffff, 0x6, 0x9, 0x2, 0x40, 0x10, 0x9, 0x4, 0xd, 0xa26, 0xfffffffb, 0x9, 0xa, 0x0, 0x9, 0xfffffe01, 0x1, 0x0, 0x6, 0xaf, 0xfbdf, 0x200, 0x1, 0x0, 0x3, 0x7, 0x8, 0x0, 0x4, 0x1, 0x3ff, 0x7f, 0x6, 0x8, 0x3, 0x6, 0x7, 0x400, 0x1fe000, 0x6, 0x0, 0x400000, 0x2, 0xb, 0x693, 0x6, 0x74, 0x2, 0x864e, 0x0, 0xfffffffd, 0x0, 0x77, 0x5, 0x1, 0x9, 0x0, 0x2, 0x9, 0x0, 0x1, 0x6, 0x80000001, 0x10000, 0x6, 0x7, 0x5c8, 0xfffffffe, 0xfffeffff, 0x5, 0x3, 0xd875, 0x7f, 0xd, 0x867f, 0x6, 0x5, 0x4, 0x8001, 0x3, 0x2, 0x1, 0x7, 0xfffffff4, 0x7, 0xfffffff3, 0xfff, 0x26, 0x4, 0x5, 0xc13, 0xca, 0x401, 0x80000001, 0x1, 0x2, 0x8, 0xa, 0x6, 0xc, 0x6, 0x0, 0x9, 0x1, 0x2, 0x7, 0x0, 0x523ceb1a, 0x4, 0x0, 0x7fffffff, 0x6, 0xffffe47a, 0xffff, 0xd, 0x3, 0x3, 0x7f, 0x9, 0x1000, 0x100, 0xb94, 0x8, 0x3, 0x5, 0x5, 0xa841a5fb, 0xfffff801, 0x8, 0x10001, 0x9, 0xb1cc, 0x49a, 0x1ff, 0x6, 0x7f2, 0x8, 0x3, 0x6, 0x1, 0x7b5f, 0x4, 0x6, 0x6, 0x8, 0x1, 0x6, 0x7, 0x4bc, 0x7]}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x306}]}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 0s ago: executing program 1 (id=819): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffec6) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x11, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYRES8=r2, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa00000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000010000000290d00000000000000000000000000000a00010000000000000000004c0012006d6f727573313238302d61767832000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800100004800010073686132353600"/316], 0x184}}, 0x8000090) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r6, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000001c0)=[r7], 0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r6, 0xc01864cb, &(0x7f0000000780)={&(0x7f0000000280)=[r7], &(0x7f0000000740), 0x4000010b}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800ba279df912800a000100767863616e0000001800028014000100", @ANYRES32=0x0, @ANYBLOB="0100000000000000"], 0x48}, 0x1, 0x4801000000000000, 0x0, 0x20004042}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r11, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) (async) syz_open_dev$video(&(0x7f0000000180), 0x3, 0x1) kernel console output (not intermixed with test programs): netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.524253][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.536053][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.543214][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.553399][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.557774][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.570839][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.580442][ T5932] Bluetooth: hci3: command tx timeout [ 54.583414][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.587102][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.599154][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.605333][ T5928] veth0_macvtap: entered promiscuous mode [ 54.611533][ T5928] veth1_macvtap: entered promiscuous mode [ 54.626724][ T5926] veth0_vlan: entered promiscuous mode [ 54.645733][ T5926] veth1_vlan: entered promiscuous mode [ 54.667037][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.681496][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.686331][ T96] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.699426][ T96] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.702452][ T96] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.708409][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.715068][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.719407][ T96] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.737928][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.740627][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.753159][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.755690][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.766394][ T5926] veth0_macvtap: entered promiscuous mode [ 54.775182][ T5926] veth1_macvtap: entered promiscuous mode [ 54.795466][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.798443][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.800986][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.805161][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.813210][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.813720][ T5927] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.826441][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.836108][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.849649][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.849730][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.853200][ T96] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.862962][ T96] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.865934][ T96] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.951682][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.954269][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.968984][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.971999][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.026687][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 55.030803][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 55.091717][ T6023] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 55.110968][ T6023] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 55.118032][ T6023] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 55.199102][ T6031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6'. [ 55.201966][ T6031] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6'. [ 55.544471][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 55.553575][ T6042] xt_TPROXY: Can be used only with -p tcp or -p udp [ 55.732085][ T6070] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.750924][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 55.753779][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 56.234829][ T6093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23'. [ 56.266800][ T6099] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 56.267782][ T6100] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 56.270813][ T6099] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 56.273735][ T6100] block device autoloading is deprecated and will be removed. [ 56.276571][ T6099] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 56.282160][ T6099] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 56.394632][ T6104] warning: `syz.3.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 56.434949][ T6106] ipt_REJECT: TCP_RESET invalid for non-tcp [ 56.453577][ T6108] mmap: syz.1.28 (6108) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.511250][ T6122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.30'. [ 56.559800][ T60] af_packet: tpacket_rcv: packet too big, clamped from 96 to 4294967272. macoff=96 [ 56.578424][ T5932] Bluetooth: hci1: command tx timeout [ 56.578451][ T5935] Bluetooth: hci0: command tx timeout [ 56.657325][ T6140] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.658578][ T5935] Bluetooth: hci3: command tx timeout [ 56.838712][ T6157] capability: warning: `syz.0.42' uses deprecated v2 capabilities in a way that may be insecure [ 56.887417][ T6159] Bluetooth: MGMT ver 1.23 [ 56.889732][ T6159] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 57.058226][ T5935] Bluetooth: hci2: command tx timeout [ 57.431400][ T6132] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 57.434569][ T6132] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 57.441626][ T6132] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 57.444769][ T6132] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 57.446827][ T6132] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 57.450966][ T6132] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 57.456553][ T6132] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 57.458979][ T6132] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 57.461713][ T6132] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 57.465199][ T6132] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 57.467232][ T6132] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 57.470923][ T6132] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 57.485340][ T6145] block device autoloading is deprecated and will be removed. [ 57.525790][ T40] kauditd_printk_skb: 123 callbacks suppressed [ 57.525801][ T40] audit: type=1400 audit(1773839194.361:218): avc: denied { open } for pid=6161 comm="syz.0.46" path="/dev/ptyq4" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 57.543036][ T40] audit: type=1400 audit(1773839194.381:219): avc: denied { setopt } for pid=6164 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.557393][ T40] audit: type=1400 audit(1773839194.381:220): avc: denied { ioctl } for pid=6161 comm="syz.0.46" path="/dev/ptyq4" dev="devtmpfs" ino=131 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 57.579978][ T40] audit: type=1400 audit(1773839194.421:221): avc: denied { read write } for pid=6170 comm="syz.1.48" name="qrtr-tun" dev="devtmpfs" ino=1340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.587602][ T40] audit: type=1400 audit(1773839194.421:222): avc: denied { open } for pid=6170 comm="syz.1.48" path="/dev/qrtr-tun" dev="devtmpfs" ino=1340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.596286][ T40] audit: type=1400 audit(1773839194.421:223): avc: denied { ioctl } for pid=6172 comm="syz.2.47" path="socket:[10633]" dev="sockfs" ino=10633 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.807847][ T40] audit: type=1400 audit(1773839194.641:224): avc: denied { getopt } for pid=6182 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.816288][ T40] audit: type=1400 audit(1773839194.651:225): avc: denied { append } for pid=6182 comm="syz.1.51" name="comedi0" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.826016][ T40] audit: type=1400 audit(1773839194.651:226): avc: denied { ioctl } for pid=6182 comm="syz.1.51" path="/dev/comedi0" dev="devtmpfs" ino=1302 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.838920][ T40] audit: type=1400 audit(1773839194.651:227): avc: denied { append } for pid=6182 comm="syz.1.51" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 58.421608][ T6198] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 58.738405][ T5935] Bluetooth: hci0: command 0x0419 tx timeout [ 59.458973][ T5935] Bluetooth: hci1: command 0x0419 tx timeout [ 59.459135][ T5932] Bluetooth: hci2: command 0x0c1a tx timeout [ 59.538194][ T5932] Bluetooth: hci3: command 0x0419 tx timeout [ 60.818748][ T5932] Bluetooth: hci0: command 0x0419 tx timeout [ 60.880107][ T6185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 60.885676][ T6210] __nla_validate_parse: 5 callbacks suppressed [ 60.885690][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.57'. [ 60.953820][ T6240] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6240 comm=syz.1.67 [ 60.967295][ T6240] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=31 sclass=netlink_tcpdiag_socket pid=6240 comm=syz.1.67 [ 60.973779][ T6243] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 60.976294][ T6243] IPv6: NLM_F_CREATE should be set when creating new route [ 61.050832][ T6251] program syz.1.71 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.146106][ T6261] syz.1.74 uses obsolete (PF_INET,SOCK_PACKET) [ 61.334426][ T6267] overlayfs: conflicting lowerdir path [ 61.383713][ T6274] process 'syz.3.79' launched './file0' with NULL argv: empty string added [ 61.457381][ T6277] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 61.465065][ T6278] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 61.482582][ T6280] SET target dimension over the limit! [ 61.488322][ T6281] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 61.538362][ T5932] Bluetooth: hci2: command 0x0c1a tx timeout [ 61.548152][ T5932] Bluetooth: hci1: command 0x0419 tx timeout [ 61.628204][ T5932] Bluetooth: hci3: command 0x0419 tx timeout [ 61.724993][ T6296] netlink: 'syz.0.85': attribute type 1 has an invalid length. [ 61.736008][ T6296] bond1: entered promiscuous mode [ 61.737730][ T6296] bond1: entered allmulticast mode [ 61.740573][ T6296] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.748542][ T6296] erspan1: entered allmulticast mode [ 61.788788][ T6300] netlink: 36 bytes leftover after parsing attributes in process `syz.0.86'. [ 61.819794][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'. [ 61.890339][ T6307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'. [ 62.557610][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 62.557662][ T40] audit: type=1400 audit(1773839199.391:267): avc: denied { getopt } for pid=6317 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.600058][ T40] audit: type=1400 audit(1773839199.441:268): avc: denied { read } for pid=6322 comm="syz.2.93" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.609701][ T40] audit: type=1400 audit(1773839199.441:269): avc: denied { open } for pid=6322 comm="syz.2.93" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.619874][ T40] audit: type=1400 audit(1773839199.441:270): avc: denied { ioctl } for pid=6322 comm="syz.2.93" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.629278][ T40] audit: type=1400 audit(1773839199.441:271): avc: denied { set_context_mgr } for pid=6322 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 62.636001][ T40] audit: type=1400 audit(1773839199.441:272): avc: denied { write } for pid=6322 comm="syz.2.93" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.643668][ T40] audit: type=1400 audit(1773839199.441:273): avc: denied { map } for pid=6322 comm="syz.2.93" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.652967][ T40] audit: type=1400 audit(1773839199.441:274): avc: denied { call } for pid=6322 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 62.898201][ T5932] Bluetooth: hci0: command 0x0419 tx timeout [ 63.618258][ T5932] Bluetooth: hci2: command 0x0c1a tx timeout [ 63.618272][ T5935] Bluetooth: hci1: command 0x0419 tx timeout [ 63.698203][ T5932] Bluetooth: hci3: command 0x0419 tx timeout [ 64.324114][ T6267] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 64.374147][ T40] audit: type=1400 audit(1773839201.211:275): avc: denied { write } for pid=6328 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 64.429854][ T40] audit: type=1400 audit(1773839201.271:276): avc: denied { create } for pid=6330 comm="syz.3.96" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.538678][ T5932] Bluetooth: hci0: unexpected event for opcode 0x0c58 [ 64.585693][ T6346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6346 comm=syz.1.103 [ 64.589946][ T6346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=6346 comm=syz.1.103 [ 64.593914][ T6346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=6346 comm=syz.1.103 [ 64.597879][ T6346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=6346 comm=syz.1.103 [ 64.602581][ T6346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=6346 comm=syz.1.103 [ 64.607966][ T6347] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6347 comm=syz.2.102 [ 64.792723][ T6362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.107'. [ 64.796286][ T6362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.107'. [ 64.903507][ T6375] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 64.907011][ T6375] binder: 6374:6375 ioctl 4018620d 200000000100 returned -1 [ 64.985976][ T6381] kvm: kvm [6380]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000 [ 64.992576][ T6381] kvm: kvm [6380]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010058) = 0x8000 [ 65.001634][ T6381] kvm: kvm [6380]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010006) = 0x8000 [ 65.011072][ T6381] kvm: kvm [6380]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010058) = 0x8000 [ 65.020221][ T6381] kvm: kvm [6380]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010006) = 0x8000 [ 65.021755][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.110'. [ 65.029232][ T6381] kvm: kvm [6380]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010058) = 0x8000 [ 65.038432][ T6381] kvm: kvm [6380]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010006) = 0x8000 [ 65.050903][ T6381] kvm: kvm [6380]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010058) = 0x8000 [ 65.060800][ T6381] kvm: kvm [6380]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010006) = 0x8000 [ 65.074041][ T6381] kvm: kvm [6380]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010058) = 0x8000 [ 65.101733][ T6397] dlm: no locking on control device [ 65.374112][ T6409] use of bytesused == 0 is deprecated and will be removed in the future, [ 65.376846][ T6409] use the actual size instead. [ 65.486477][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.123'. [ 65.490999][ T6426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.123'. [ 65.610281][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 65.633044][ T5932] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 65.651256][ T6440] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.681218][ T6433] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 65.690547][ T6433] bond1 (unregistering): Released all slaves [ 65.728142][ T6440] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.788198][ T5932] Bluetooth: hci3: command 0x0419 tx timeout [ 65.811680][ T6440] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.899909][ T6440] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.975505][ T96] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.985928][ T59] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.993633][ T59] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.003812][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.119979][ T6460] ======================================================= [ 66.119979][ T6460] WARNING: The mand mount option has been deprecated and [ 66.119979][ T6460] and is ignored by this kernel. Remove the mand [ 66.119979][ T6460] option from the mount to silence this warning. [ 66.119979][ T6460] ======================================================= [ 66.135644][ T6460] netlink: 28 bytes leftover after parsing attributes in process `syz.2.133'. [ 66.139731][ T6460] netlink: 'syz.2.133': attribute type 7 has an invalid length. [ 66.142402][ T6460] netlink: 'syz.2.133': attribute type 8 has an invalid length. [ 66.145367][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.133'. [ 66.271703][ T6466] Zero length message leads to an empty skb [ 66.388150][ T39] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 66.455416][ T6473] ipvlan2: entered allmulticast mode [ 66.457325][ T6473] batadv_slave_1: entered allmulticast mode [ 66.465542][ T6473] befs: (nullb0): No write support. Marking filesystem read-only [ 66.469994][ T6473] befs: (nullb0): invalid magic header [ 66.550322][ T39] usb 7-1: Using ep0 maxpacket: 32 [ 66.555538][ T39] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 66.565317][ T39] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 66.570590][ T39] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 208, changing to 11 [ 66.575494][ T39] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 18076, setting to 1024 [ 66.579577][ T39] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 66.585329][ T39] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 66.588620][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.591190][ T39] usb 7-1: Product: syz [ 66.592671][ T39] usb 7-1: Manufacturer: syz [ 66.594191][ T39] usb 7-1: SerialNumber: syz [ 66.600170][ T6461] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 66.605497][ C3] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 66.610198][ T39] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input6 [ 66.819602][ T6507] netlink: 'syz.0.144': attribute type 1 has an invalid length. [ 66.822249][ T6507] netlink: 'syz.0.144': attribute type 1 has an invalid length. [ 66.825155][ T6505] 9pnet_virtio: no channels available for device syz [ 66.829656][ T39] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 66.832453][ T39] (id 0x00) [ 66.878137][ T39] rc_core: IR keymap rc-imon-pad not found [ 66.880164][ T39] Registered IR keymap rc-empty [ 66.881807][ T39] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 66.885421][ T39] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 66.909252][ T39] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 66.913734][ T39] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input7 [ 66.922263][ T39] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:2> initialized [ 67.012083][ T6480] usb 7-1: USB disconnect, device number 2 [ 67.138223][ T5932] Bluetooth: hci0: command 0x0419 tx timeout [ 67.727042][ T40] kauditd_printk_skb: 53 callbacks suppressed [ 67.727059][ T40] audit: type=1400 audit(1773839204.561:330): avc: denied { read write } for pid=5927 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.740323][ T40] audit: type=1400 audit(1773839204.571:331): avc: denied { open } for pid=5927 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.749396][ T40] audit: type=1400 audit(1773839204.571:332): avc: denied { ioctl } for pid=5927 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.776060][ T6520] FAT-fs (sr0): bogus number of reserved sectors [ 67.777088][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 67.789142][ T6520] FAT-fs (sr0): Can't find a valid FAT filesystem [ 67.792159][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 67.854188][ T40] audit: type=1400 audit(1773839204.691:333): avc: denied { allowed } for pid=6528 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 67.875509][ T6531] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.941150][ T6543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57872 sclass=netlink_route_socket pid=6543 comm=syz.0.153 [ 68.025440][ T96] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.120128][ T40] audit: type=1400 audit(1773839204.961:334): avc: denied { execute } for pid=6554 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 68.138693][ T40] audit: type=1400 audit(1773839204.961:335): avc: denied { execute_no_trans } for pid=6554 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 68.160374][ T96] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.186584][ T40] audit: type=1400 audit(1773839205.021:336): avc: denied { mount } for pid=6559 comm="syz.0.160" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 68.186592][ T6560] loop6: detected capacity change from 0 to 2640 [ 68.203098][ T6561] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 68.206007][ T6561] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 68.208146][ T40] audit: type=1400 audit(1773839205.021:337): avc: denied { watch } for pid=6559 comm="syz.0.160" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.210210][ T6562] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 2 [ 68.215805][ T40] audit: type=1400 audit(1773839205.021:338): avc: denied { append } for pid=6559 comm="syz.0.160" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.228341][ T5935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.229232][ T6560] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.231960][ T5935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.233801][ T6560] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.237241][ T5935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.240361][ T6562] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.242744][ T5935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.245584][ T6562] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.248464][ T5935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.254373][ T6562] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.257574][ T6559] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.260317][ T6559] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.261669][ T40] audit: type=1400 audit(1773839205.051:339): avc: denied { map } for pid=6559 comm="syz.0.160" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.266589][ T6559] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.276062][ T6562] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.280599][ T96] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.282535][ T6560] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.287623][ T6560] ldm_validate_partition_table(): Disk read failed. [ 68.295293][ T6560] Dev loop6: unable to read RDB block 0 [ 68.297446][ T6560] loop6: unable to read partition table [ 68.299731][ T6560] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 68.336850][ T96] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.421662][ T6566] chnl_net:caif_netlink_parms(): no params data found [ 68.495657][ T96] bridge_slave_1: left allmulticast mode [ 68.497641][ T96] bridge_slave_1: left promiscuous mode [ 68.500386][ T96] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.506534][ T96] bridge_slave_0: left allmulticast mode [ 68.508602][ T96] bridge_slave_0: left promiscuous mode [ 68.510740][ T96] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.662215][ T96] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.667149][ T96] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.670940][ T96] bond0 (unregistering): Released all slaves [ 68.675463][ T6566] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.677847][ T6566] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.680607][ T6566] bridge_slave_0: entered allmulticast mode [ 68.683274][ T6566] bridge_slave_0: entered promiscuous mode [ 68.686841][ T6566] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.689299][ T6566] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.691819][ T6566] bridge_slave_1: entered allmulticast mode [ 68.694923][ T6566] bridge_slave_1: entered promiscuous mode [ 68.712708][ T6566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.718635][ T6566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.735391][ T6566] team0: Port device team_slave_0 added [ 68.739031][ T6566] team0: Port device team_slave_1 added [ 68.763429][ T6566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.765854][ T6566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.769321][ T6587] ip6t_rpfilter: unknown options [ 68.774209][ T6566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.780197][ T6566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.782477][ T6566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.791653][ T6566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.815743][ T6566] hsr_slave_0: entered promiscuous mode [ 68.818012][ T6566] hsr_slave_1: entered promiscuous mode [ 68.820289][ T6566] debugfs: 'hsr0' already exists in 'hsr' [ 68.822127][ T6566] Cannot create hsr debugfs directory [ 68.999253][ T6566] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.007488][ T6566] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.020116][ T6566] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.024167][ T6566] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.071016][ T6615] FAT-fs (sr0): bogus number of reserved sectors [ 69.074339][ T6615] FAT-fs (sr0): Can't find a valid FAT filesystem [ 69.087764][ T96] hsr_slave_0: left promiscuous mode [ 69.091234][ T6611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.165'. [ 69.100762][ T96] hsr_slave_1: left promiscuous mode [ 69.103430][ T96] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.105902][ T96] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.122480][ T96] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.125584][ T96] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.133740][ T96] veth1_macvtap: left promiscuous mode [ 69.135711][ T96] veth0_macvtap: left promiscuous mode [ 69.137546][ T96] veth1_vlan: left promiscuous mode [ 69.139618][ T96] veth0_vlan: left promiscuous mode [ 69.284951][ T96] team0 (unregistering): Port device team_slave_1 removed [ 69.293934][ T96] team0 (unregistering): Port device team_slave_0 removed [ 69.400919][ T6566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.410697][ T6566] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.416236][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.419344][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.436964][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.439517][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.444255][ T6632] netlink: 56 bytes leftover after parsing attributes in process `syz.1.171'. [ 69.562437][ T6652] netlink: 60 bytes leftover after parsing attributes in process `syz.1.173'. [ 69.575743][ T6566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.615878][ T6658] binder_alloc: 6656: binder_alloc_buf size -280 failed, no address space [ 69.622134][ T6658] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 69.626905][ T6658] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 69.719632][ T6566] veth0_vlan: entered promiscuous mode [ 69.734175][ T6566] veth1_vlan: entered promiscuous mode [ 69.736628][ T6667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.175'. [ 69.749067][ T6667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.175'. [ 69.783962][ T6566] veth0_macvtap: entered promiscuous mode [ 69.792225][ T6566] veth1_macvtap: entered promiscuous mode [ 69.803208][ T6566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.812227][ T6566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.820820][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.824370][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.827674][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.831593][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.885400][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.887967][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.911461][ T96] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.915666][ T96] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.106097][ T6681] sctp: [Deprecated]: syz.1.178 (pid 6681) Use of struct sctp_assoc_value in delayed_ack socket option. [ 70.106097][ T6681] Use struct sctp_sack_info instead [ 70.348391][ T5935] Bluetooth: hci0: command tx timeout [ 70.692510][ T6711] netlink: 'syz.4.185': attribute type 11 has an invalid length. [ 70.692993][ T6712] netlink: 'syz.4.185': attribute type 11 has an invalid length. [ 71.411160][ T6726] 9pnet_virtio: no channels available for device syz [ 71.478610][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 71.526772][ T6734] Bluetooth: MGMT ver 1.23 [ 71.685784][ T6744] netlink: 'syz.4.195': attribute type 28 has an invalid length. [ 71.709852][ T6480] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 71.855464][ T6751] netlink: 'syz.0.196': attribute type 4 has an invalid length. [ 71.859235][ T6751] netlink: 17 bytes leftover after parsing attributes in process `syz.0.196'. [ 71.859704][ T6480] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 71.866905][ T6480] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 71.870038][ T6480] usb 8-1: config 0 interface 0 has no altsetting 0 [ 71.873817][ T6480] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 71.876622][ T6480] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 71.882007][ T6480] usb 8-1: Product: syz [ 71.883381][ T6480] usb 8-1: Manufacturer: syz [ 71.884873][ T6480] usb 8-1: SerialNumber: syz [ 71.887704][ T6480] usb 8-1: config 0 descriptor?? [ 71.891459][ T6480] hub 8-1:0.0: bad descriptor, ignoring hub [ 71.893464][ T6480] hub 8-1:0.0: probe with driver hub failed with error -5 [ 71.897864][ T6480] usb 8-1: selecting invalid altsetting 0 [ 71.989096][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 72.003623][ T6761] netlink: 36 bytes leftover after parsing attributes in process `syz.1.198'. [ 72.013761][ T6764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6764 comm=syz.0.199 [ 72.018003][ T6764] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 72.191416][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.194688][ T24] usb 9-1: config 0 has no interfaces? [ 72.196521][ T24] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 72.198404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.209350][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.216937][ T24] usb 9-1: config 0 descriptor?? [ 72.218763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 72.222592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.225773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.230792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.234783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.256774][ T6774] netlink: 14 bytes leftover after parsing attributes in process `syz.0.201'. [ 72.277052][ T6774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.295648][ T5982] usb 8-1: USB disconnect, device number 2 [ 72.301513][ T6774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.305970][ T6774] bond0 (unregistering): Released all slaves [ 72.369797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.393640][ T6777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'. [ 72.397557][ T6777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.407208][ T6777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.428268][ T5935] Bluetooth: hci0: command tx timeout [ 72.432446][ T24] usb 9-1: USB disconnect, device number 2 [ 73.217883][ T6807] netlink: 60 bytes leftover after parsing attributes in process `syz.0.212'. [ 73.221773][ T6809] netlink: 60 bytes leftover after parsing attributes in process `syz.0.212'. [ 73.226852][ T6806] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 73.258838][ T40] kauditd_printk_skb: 42 callbacks suppressed [ 73.258854][ T40] audit: type=1400 audit(1773839210.101:382): avc: denied { write } for pid=6789 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.315349][ T6811] fuse: Bad value for 'fd' [ 73.348531][ T40] audit: type=1400 audit(1773839210.191:383): avc: denied { create } for pid=6812 comm="syz.4.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 73.357465][ T40] audit: type=1400 audit(1773839210.191:384): avc: denied { write } for pid=6812 comm="syz.4.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 73.396947][ T40] audit: type=1400 audit(1773839210.231:385): avc: denied { read } for pid=6814 comm="syz.0.216" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 73.402400][ T6819] input: syz0 as /devices/virtual/input/input8 [ 73.412451][ T40] audit: type=1400 audit(1773839210.231:386): avc: denied { ioctl } for pid=6814 comm="syz.0.216" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 73.428125][ T40] audit: type=1400 audit(1773839210.231:387): avc: denied { ioctl } for pid=6814 comm="syz.0.216" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 73.456894][ T40] audit: type=1400 audit(1773839210.291:388): avc: denied { read } for pid=5322 comm="acpid" name="event4" dev="devtmpfs" ino=2895 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.465390][ T40] audit: type=1400 audit(1773839210.291:389): avc: denied { open } for pid=5322 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2895 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.478185][ T40] audit: type=1400 audit(1773839210.291:390): avc: denied { ioctl } for pid=5322 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2895 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.589335][ T6824] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 73.616869][ T40] audit: type=1400 audit(1773839210.451:391): avc: denied { unmount } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 73.742991][ T6836] bond0: (slave bond_slave_0): Releasing backup interface [ 73.820361][ T6832] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 73.822581][ T6832] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 73.824739][ T6832] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 73.826954][ T6832] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 73.830381][ T6832] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 73.834294][ T6832] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 73.918195][ T5982] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.068118][ T5982] usb 5-1: Using ep0 maxpacket: 8 [ 74.076302][ T5982] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 74.079453][ T5982] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 74.082497][ T5982] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 74.085951][ T5982] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.090244][ T5982] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 74.093108][ T5982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.302819][ T5982] usb 5-1: GET_CAPABILITIES returned 0 [ 74.304620][ T5982] usbtmc 5-1:16.0: can't read capabilities [ 74.329909][ T6838] TCP: tcp_parse_options: Illegal window scaling value 218 > 14 received [ 74.385172][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.222'. [ 74.389259][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.222'. [ 74.393192][ T6842] netlink: 'syz.4.222': attribute type 11 has an invalid length. [ 74.403083][ T6842] netlink: 'syz.4.222': attribute type 7 has an invalid length. [ 74.413677][ T6842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=6842 comm=syz.4.222 [ 74.419356][ T6845] netlink: 60 bytes leftover after parsing attributes in process `syz.4.222'. [ 74.502185][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 74.522602][ T6834] qnx4: unable to read the superblock [ 74.589565][ T6480] usb 5-1: USB disconnect, device number 2 [ 74.762814][ T6859] netlink: 'syz.1.228': attribute type 10 has an invalid length. [ 74.928609][ T6865] IPv6: NLM_F_CREATE should be specified when creating new route [ 75.098735][ T6877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=6877 comm=syz.3.233 [ 75.244321][ T6884] netlink: 'syz.0.236': attribute type 39 has an invalid length. [ 75.778466][ T5935] Bluetooth: hci2: command 0x0c1a tx timeout [ 75.858255][ T5935] Bluetooth: hci0: command 0x0419 tx timeout [ 75.858301][ T63] Bluetooth: hci1: command 0x0419 tx timeout [ 75.862977][ T5932] Bluetooth: hci3: command 0x0419 tx timeout [ 75.974879][ T6921] tun0: tun_chr_ioctl cmd 1074025676 [ 75.976830][ T6921] tun0: owner set to 0 [ 76.001628][ T6923] tmpfs: Bad value for 'mpol' [ 76.107156][ T6930] fuse: Unknown parameter '' [ 76.131875][ T6935] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 76.137049][ T6935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.262328][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.264515][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.515864][ T6951] team0: No ports can be present during mode change [ 76.574921][ T6953] syzkaller0: entered promiscuous mode [ 76.576771][ T6953] syzkaller0: entered allmulticast mode [ 76.587156][ T6953] __nla_validate_parse: 2 callbacks suppressed [ 76.587167][ T6953] netlink: 16 bytes leftover after parsing attributes in process `syz.0.258'. [ 77.031415][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.271'. [ 77.035241][ T6997] netlink: 'syz.4.272': attribute type 21 has an invalid length. [ 77.037918][ T6997] netlink: 128 bytes leftover after parsing attributes in process `syz.4.272'. [ 77.043759][ T6997] netlink: 3 bytes leftover after parsing attributes in process `syz.4.272'. [ 77.047715][ T6997] netlink: 'syz.4.272': attribute type 21 has an invalid length. [ 77.051613][ T6997] netlink: 128 bytes leftover after parsing attributes in process `syz.4.272'. [ 77.054495][ T6997] netlink: 3 bytes leftover after parsing attributes in process `syz.4.272'. [ 77.058365][ T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 77.078226][ T7002] Illegal XDP return value 4232826880 on prog (id 53) dev N/A, expect packet loss! [ 77.081735][ T7000] netlink: 168 bytes leftover after parsing attributes in process `syz.0.274'. [ 77.117434][ T7010] ip6gretap0: entered promiscuous mode [ 77.120120][ T7010] macsec1: entered promiscuous mode [ 77.121917][ T7010] macsec1: entered allmulticast mode [ 77.123283][ T7015] netlink: 'syz.1.277': attribute type 11 has an invalid length. [ 77.123676][ T7010] ip6gretap0: entered allmulticast mode [ 77.126522][ T7015] netlink: 179920 bytes leftover after parsing attributes in process `syz.1.277'. [ 77.132116][ T7010] ip6gretap0: left allmulticast mode [ 77.134018][ T7010] ip6gretap0: left promiscuous mode [ 77.151395][ T7014] netlink: 28 bytes leftover after parsing attributes in process `syz.4.278'. [ 77.154980][ T96] Bluetooth: hci4: Frame reassembly failed (-84) [ 77.220532][ T24] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 77.223164][ T24] usb 8-1: config 1 has no interface number 0 [ 77.225151][ T24] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 77.229460][ T24] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 77.230172][ T7017] sd 0:0:0:0: PR command failed: 1026 [ 77.232613][ T24] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.234352][ T7017] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 77.239701][ T24] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 77.240616][ T7017] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 77.242806][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.247537][ T24] usb 8-1: Product: syz [ 77.249348][ T24] usb 8-1: Manufacturer: syz [ 77.250869][ T24] usb 8-1: SerialNumber: syz [ 77.254857][ T6976] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 77.270745][ T7017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.279'. [ 77.661187][ T6976] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 77.864927][ T24] usb 8-1: Incompatible driver and firmware versions [ 77.872025][ T24] usb 8-1: USB disconnect, device number 3 [ 77.948186][ T63] Bluetooth: hci0: command 0x0419 tx timeout [ 78.739221][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 78.739232][ T40] audit: type=1400 audit(1773839215.581:427): avc: denied { checkpoint_restore } for pid=7044 comm="syz.3.287" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.859045][ T7052] overlayfs: missing 'lowerdir' [ 79.034765][ T7053] overlayfs: missing 'lowerdir' [ 79.137169][ T7057] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.218403][ T5932] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 79.250332][ T40] audit: type=1400 audit(1773839216.091:428): avc: denied { read } for pid=7062 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.260962][ T7063] : renamed from wg2 (while UP) [ 79.302618][ T7073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=7073 comm=syz.0.294 [ 79.309130][ T40] audit: type=1400 audit(1773839216.141:429): avc: denied { relabelfrom } for pid=7069 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 79.316110][ T40] audit: type=1400 audit(1773839216.151:430): avc: denied { relabelto } for pid=7069 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 79.324842][ T40] audit: type=1400 audit(1773839216.151:431): avc: denied { read append } for pid=7069 comm="syz.0.294" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 79.333367][ T40] audit: type=1400 audit(1773839216.151:432): avc: denied { open } for pid=7069 comm="syz.0.294" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 79.343562][ T40] audit: type=1400 audit(1773839216.151:433): avc: denied { ioctl } for pid=7069 comm="syz.0.294" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 79.472214][ T7096] unsupported nlmsg_type 40 [ 79.480968][ T40] audit: type=1400 audit(1773839216.321:434): avc: denied { read } for pid=7089 comm="syz.4.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 79.490285][ T7091] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.553281][ T7103] netlink: 'syz.0.302': attribute type 1 has an invalid length. [ 79.556579][ T7103] netlink: 'syz.0.302': attribute type 1 has an invalid length. [ 79.638142][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 79.708891][ T40] audit: type=1400 audit(1773839216.551:435): avc: denied { mount } for pid=7115 comm="syz.4.305" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 79.812835][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.816344][ T24] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 79.821747][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.824895][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.828353][ T24] usb 6-1: Product: syz [ 79.830071][ T24] usb 6-1: Manufacturer: syz [ 79.831697][ T24] usb 6-1: SerialNumber: syz [ 79.839434][ T24] cdc_mbim 6-1:1.0: skipping garbage [ 79.841250][ T40] audit: type=1400 audit(1773839216.681:436): avc: denied { read append } for pid=7125 comm="syz.4.307" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 80.018156][ T63] Bluetooth: hci0: command 0x0419 tx timeout [ 80.038296][ T7081] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 80.644791][ T7081] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 80.647390][ T24] cdc_mbim 6-1:1.0: setting tx_max = 184 [ 80.650443][ T24] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 80.656086][ T24] wwan wwan0: port wwan0mbim0 attached [ 80.663424][ T24] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, be:4e:49:26:87:b9 [ 80.849444][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 80.851804][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 80.854007][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 80.856179][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 80.858373][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 80.860533][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 80.862739][ C3] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 80.864912][ C3] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 80.869295][ T24] usb 6-1: USB disconnect, device number 2 [ 80.871921][ T24] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 80.941166][ T24] wwan wwan0: port wwan0mbim0 disconnected [ 82.098150][ T63] Bluetooth: hci0: command 0x0419 tx timeout [ 82.553209][ T7103] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 82.603575][ T7139] binder: BINDER_SET_CONTEXT_MGR already set [ 82.605541][ T7139] binder: 7137:7139 ioctl 4018620d 200000000200 returned -16 [ 82.632995][ T7151] __nla_validate_parse: 3 callbacks suppressed [ 82.633007][ T7151] netlink: 36 bytes leftover after parsing attributes in process `syz.0.312'. [ 82.722106][ T7157] netlink: 32 bytes leftover after parsing attributes in process `syz.1.315'. [ 82.799535][ T7165] input: syz1 as /devices/virtual/input/input10 [ 82.802097][ T7165] input: failed to attach handler leds to device input10, error: -6 [ 83.038408][ T7184] netlink: 'syz.3.319': attribute type 2 has an invalid length. [ 83.052136][ T7184] netlink: 700 bytes leftover after parsing attributes in process `syz.3.319'. [ 83.180772][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'. [ 83.516711][ T7229] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 83.522268][ T168] Bluetooth: hci4: Frame reassembly failed (-84) [ 83.829769][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 83.829821][ T40] audit: type=1400 audit(1773839220.671:448): avc: denied { connect } for pid=7243 comm="syz.4.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.858833][ T7253] 5gQ[: renamed from lo (while UP) [ 83.915278][ T40] audit: type=1800 audit(1773839220.751:449): pid=7255 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.336" name="bus" dev="overlay" ino=538 res=0 errno=0 [ 83.948134][ T1337] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 84.132020][ T1337] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.136454][ T1337] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 84.140811][ T1337] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 84.141598][ T7263] /dev/sg0: Can't lookup blockdev [ 84.143955][ T1337] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.151180][ T1337] usb 6-1: config 0 descriptor?? [ 84.155100][ T1337] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 84.157688][ T1337] dvb-usb: bulk message failed: -22 (3/0) [ 84.169932][ T1337] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 84.173254][ T1337] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 84.178244][ T1337] usb 6-1: media controller created [ 84.181458][ T1337] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 84.191727][ T1337] dvb-usb: bulk message failed: -22 (6/0) [ 84.193896][ T1337] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 84.198014][ T1337] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input11 [ 84.210264][ T1337] dvb-usb: schedule remote query interval to 150 msecs. [ 84.213270][ T1337] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 84.233849][ T7267] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 84.323312][ T40] audit: type=1400 audit(1773839221.161:450): avc: denied { ioctl } for pid=7268 comm="syz.4.342" path="socket:[19162]" dev="sockfs" ino=19162 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.358162][ T24] usb 6-1: USB disconnect, device number 3 [ 84.379748][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 84.386585][ T40] audit: type=1400 audit(1773839221.211:451): avc: denied { read } for pid=7278 comm="syz.4.344" name="usbmon1" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 84.392780][ T7272] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 84.398135][ T40] audit: type=1400 audit(1773839221.211:452): avc: denied { open } for pid=7278 comm="syz.4.344" path="/dev/usbmon1" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 84.405767][ T40] audit: type=1400 audit(1773839221.221:453): avc: denied { ioctl } for pid=7278 comm="syz.4.344" path="/dev/usbmon1" dev="devtmpfs" ino=738 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 84.456248][ T40] audit: type=1400 audit(1773839221.291:454): avc: denied { getopt } for pid=7281 comm="syz.0.346" lport=10 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.459476][ T7282] IPv6: NLM_F_REPLACE set, but no existing node found! [ 84.472484][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 84.480272][ T7282] netlink: 96 bytes leftover after parsing attributes in process `syz.4.345'. [ 84.522544][ T40] audit: type=1400 audit(1773839221.361:455): avc: denied { ioctl } for pid=7288 comm="syz.4.348" path="socket:[17723]" dev="sockfs" ino=17723 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 84.529769][ T7289] netlink: 'syz.4.348': attribute type 1 has an invalid length. [ 84.570570][ T7289] netlink: 28 bytes leftover after parsing attributes in process `syz.4.348'. [ 84.575862][ T7289] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.629901][ T7294] blkio.reset_stats is deprecated [ 85.006527][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.355'. [ 85.086953][ T40] audit: type=1400 audit(1773839221.921:456): avc: denied { read write } for pid=7317 comm="syz.4.357" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 85.099755][ T6480] hid (null): unknown global tag 0xc [ 85.102684][ T6480] hid (null): report_id 2869937055 is invalid [ 85.106349][ T40] audit: type=1400 audit(1773839221.921:457): avc: denied { open } for pid=7317 comm="syz.4.357" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 85.121493][ T6480] hid (null): report_id 53161 is invalid [ 85.128436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.130763][ T6480] hid-generic 000F:0FFF:10000.0002: collection stack underflow [ 85.134467][ T6480] hid-generic 000F:0FFF:10000.0002: item 0 2 0 12 parsing failed [ 85.137975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.139305][ T6480] hid-generic 000F:0FFF:10000.0002: probe with driver hid-generic failed with error -22 [ 85.140955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.142966][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.356'. [ 85.210664][ T7330] sock: sock_set_timeout: `syz.4.359' (pid 7330) tries to set negative timeout [ 85.283038][ T7343] netlink: 68 bytes leftover after parsing attributes in process `syz.1.362'. [ 85.315857][ T7345] gfs2: error -5 reading superblock [ 85.347760][ T7349] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 85.352582][ T7349] overlayfs: failed to resolve './bus': -2 [ 85.394904][ T7349] erspan0: entered promiscuous mode [ 85.538189][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 85.538217][ T5932] Bluetooth: hci4: command 0x1003 tx timeout [ 86.324795][ T168] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.396093][ T168] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.434699][ T7396] program syz.4.378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.459938][ T168] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.493792][ T5932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.499059][ T5932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.504737][ T841] cfg80211: failed to load regulatory.db [ 86.505513][ T5932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.513509][ T5932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.516933][ T5932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.541292][ T7400] netlink: 'syz.0.379': attribute type 10 has an invalid length. [ 86.544850][ T168] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.648694][ T7403] chnl_net:caif_netlink_parms(): no params data found [ 86.696240][ T168] bridge_slave_1: left allmulticast mode [ 86.698405][ T168] bridge_slave_1: left promiscuous mode [ 86.700518][ T168] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.704572][ T168] bridge_slave_0: left allmulticast mode [ 86.706551][ T168] bridge_slave_0: left promiscuous mode [ 86.709259][ T168] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.922079][ T168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.926152][ T168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.938927][ T168] bond0 (unregistering): Released all slaves [ 86.995714][ T7403] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.998790][ T7403] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.001759][ T7403] bridge_slave_0: entered allmulticast mode [ 87.005771][ T7403] bridge_slave_0: entered promiscuous mode [ 87.036285][ T7403] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.040550][ T7403] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.043015][ T7403] bridge_slave_1: entered allmulticast mode [ 87.046128][ T7403] bridge_slave_1: entered promiscuous mode [ 87.066388][ T7403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.070977][ T7403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.089094][ T7492] xt_l2tp: wrong L2TP version: 0 [ 87.097796][ T7403] team0: Port device team_slave_0 added [ 87.101662][ T7403] team0: Port device team_slave_1 added [ 87.116548][ T7403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.119275][ T7403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.128198][ T7403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.132628][ T7403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.134916][ T7403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.144318][ T7403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.169902][ T7403] hsr_slave_0: entered promiscuous mode [ 87.172158][ T7403] hsr_slave_1: entered promiscuous mode [ 87.174369][ T7403] debugfs: 'hsr0' already exists in 'hsr' [ 87.176261][ T7403] Cannot create hsr debugfs directory [ 87.288155][ T7403] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 87.293635][ T7403] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 87.298782][ T7403] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 87.317422][ T7403] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 87.360046][ T7509] netlink: 'syz.0.388': attribute type 21 has an invalid length. [ 87.380929][ T7403] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.383767][ T7403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.386750][ T7403] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.389631][ T7403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.563140][ T168] hsr_slave_0: left promiscuous mode [ 87.566228][ T168] hsr_slave_1: left promiscuous mode [ 87.568490][ T168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.570964][ T168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.573787][ T168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.576195][ T168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.585298][ T168] veth1_macvtap: left promiscuous mode [ 87.587805][ T168] veth0_macvtap: left promiscuous mode [ 87.591342][ T168] veth1_vlan: left promiscuous mode [ 87.594602][ T168] veth0_vlan: left promiscuous mode [ 87.677104][ T7524] gfs2: not a GFS2 filesystem [ 87.702408][ T7524] evm: overlay not supported [ 87.703459][ T7525] gfs2: not a GFS2 filesystem [ 87.707887][ T7526] overlayfs: failed lookup in lower (newroot/107, name='bus', err=-40): overlapping layers [ 87.712470][ T7524] overlayfs: failed lookup in lower (newroot/107, name='file0', err=-40): overlapping layers [ 87.739759][ T168] team0 (unregistering): Port device team_slave_1 removed [ 87.752439][ T168] team0 (unregistering): Port device team_slave_0 removed [ 87.841665][ T7438] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.845350][ T7438] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.903363][ T7403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.915308][ T7403] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.923282][ T7436] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.926491][ T7436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.933928][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.936340][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.065097][ T7403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.121593][ T7560] __nla_validate_parse: 4 callbacks suppressed [ 88.121605][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 88.129561][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 88.230563][ T7403] veth0_vlan: entered promiscuous mode [ 88.242415][ T7403] veth1_vlan: entered promiscuous mode [ 88.259971][ T7403] veth0_macvtap: entered promiscuous mode [ 88.263967][ T7403] veth1_macvtap: entered promiscuous mode [ 88.275776][ T7403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.283278][ T7403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.292833][ T7452] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.296145][ T7452] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.303697][ T7578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.310275][ T7452] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.320181][ T7452] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.361283][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.364754][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.397814][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.401728][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.511835][ T7600] netlink: 'syz.5.407': attribute type 29 has an invalid length. [ 88.514991][ T7600] netlink: 'syz.5.407': attribute type 29 has an invalid length. [ 88.518279][ T7600] netlink: 500 bytes leftover after parsing attributes in process `syz.5.407'. [ 88.521595][ T7600] unsupported nla_type 58 [ 88.523374][ T7600] fuse: Unknown parameter 'z)!wOIG/o' [ 88.579297][ T5935] Bluetooth: hci2: command tx timeout [ 88.608245][ T6480] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 88.759986][ T6480] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.763570][ T6480] usb 9-1: config 0 has no interfaces? [ 88.771112][ T6480] usb 9-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 88.774271][ T6480] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.777554][ T6480] usb 9-1: Product: syz [ 88.779997][ T6480] usb 9-1: Manufacturer: syz [ 88.781923][ T6480] usb 9-1: SerialNumber: syz [ 88.808351][ T6480] usb 9-1: config 0 descriptor?? [ 88.849307][ T29] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 88.881791][ T60] IPVS: starting estimator thread 0... [ 88.882328][ T7626] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 88.934159][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 88.934176][ T40] audit: type=1400 audit(1773839225.771:522): avc: denied { create } for pid=7629 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 88.943338][ T40] audit: type=1400 audit(1773839225.781:523): avc: denied { accept } for pid=7629 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 88.968448][ T7628] IPVS: using max 24 ests per chain, 57600 per kthread [ 88.974489][ T7630] binder: 7629:7630 ioctl c0306201 2000000003c0 returned -14 [ 89.008838][ T29] usb 10-1: Invalid ep0 maxpacket: 64 [ 89.017501][ T40] audit: type=1400 audit(1773839225.851:524): avc: denied { create } for pid=7583 comm="syz.4.403" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.027005][ T40] audit: type=1400 audit(1773839225.851:525): avc: denied { write } for pid=7583 comm="syz.4.403" name="file0" dev="tmpfs" ino=421 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.038511][ T40] audit: type=1400 audit(1773839225.851:526): avc: denied { open } for pid=7583 comm="syz.4.403" path="/78/file0" dev="tmpfs" ino=421 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.045864][ T40] audit: type=1400 audit(1773839225.861:527): avc: denied { ioctl } for pid=7583 comm="syz.4.403" path="/78/file0" dev="tmpfs" ino=421 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.084907][ T5968] usb 9-1: USB disconnect, device number 3 [ 89.158475][ T29] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 89.308191][ T29] usb 10-1: Invalid ep0 maxpacket: 64 [ 89.310187][ T29] usb usb10-port1: attempt power cycle [ 89.398148][ T60] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.428229][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 89.548200][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 89.551454][ T60] usb 5-1: config 210 has an invalid interface number: 131 but max is 3 [ 89.554195][ T60] usb 5-1: config 210 has an invalid interface number: 155 but max is 3 [ 89.557305][ T60] usb 5-1: config 210 contains an unexpected descriptor of type 0x1, skipping [ 89.560645][ T60] usb 5-1: config 210 has an invalid interface number: 4 but max is 3 [ 89.563706][ T60] usb 5-1: config 210 has an invalid interface number: 231 but max is 3 [ 89.566794][ T60] usb 5-1: config 210 has an invalid interface number: 116 but max is 3 [ 89.569809][ T60] usb 5-1: config 210 has an invalid interface number: 146 but max is 3 [ 89.572542][ T60] usb 5-1: config 210 contains an unexpected descriptor of type 0x1, skipping [ 89.575387][ T60] usb 5-1: config 210 has 6 interfaces, different from the descriptor's value: 4 [ 89.578432][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 89.580121][ T60] usb 5-1: config 210 has no interface number 0 [ 89.582221][ T60] usb 5-1: config 210 has no interface number 1 [ 89.584400][ T60] usb 5-1: config 210 has no interface number 2 [ 89.586450][ T60] usb 5-1: config 210 has no interface number 3 [ 89.588832][ T60] usb 5-1: config 210 has no interface number 5 [ 89.590980][ T60] usb 5-1: config 210 interface 131 altsetting 6 bulk endpoint 0x9 has invalid maxpacket 1023 [ 89.594386][ T24] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 89.597248][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 89.600981][ T60] usb 5-1: config 210 interface 131 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 89.604520][ T60] usb 5-1: config 210 interface 131 altsetting 6 bulk endpoint 0x2 has invalid maxpacket 32 [ 89.607730][ T60] usb 5-1: config 210 interface 131 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 89.611378][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 89.614580][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 89.614990][ T40] audit: type=1400 audit(1773839226.451:528): avc: denied { unlink } for pid=6566 comm="syz-executor" name="file0" dev="tmpfs" ino=421 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.618583][ T60] usb 5-1: config 210 interface 155 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 89.631953][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 89.635150][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.639500][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 89.642955][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.643698][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.420'. [ 89.646236][ T60] usb 5-1: config 210 interface 155 altsetting 10 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 89.652076][ T40] audit: type=1400 audit(1773839226.501:529): avc: denied { accept } for pid=7642 comm="syz.4.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.653668][ T60] usb 5-1: config 210 interface 155 altsetting 10 has a duplicate endpoint with address 0x8A, skipping [ 89.658322][ T29] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 89.670241][ T60] usb 5-1: config 210 interface 155 altsetting 10 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 89.675849][ T60] usb 5-1: config 210 interface 155 altsetting 10 has a duplicate endpoint with address 0xA, skipping [ 89.678545][ T29] usb 10-1: Invalid ep0 maxpacket: 64 [ 89.679506][ T60] usb 5-1: config 210 interface 155 altsetting 10 bulk endpoint 0x5 has invalid maxpacket 1024 [ 89.684745][ T60] usb 5-1: config 210 interface 155 altsetting 10 has a duplicate endpoint with address 0x2, skipping [ 89.689169][ T60] usb 5-1: config 210 interface 155 altsetting 10 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 89.694646][ T60] usb 5-1: config 210 interface 4 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 89.702438][ T60] usb 5-1: config 210 interface 4 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 89.707181][ T60] usb 5-1: config 210 interface 4 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 89.712897][ T60] usb 5-1: too many endpoints for config 210 interface 231 altsetting 46: 163, using maximum allowed: 30 [ 89.717538][ T60] usb 5-1: config 210 interface 231 altsetting 46 has a duplicate endpoint with address 0x2, skipping [ 89.722381][ T60] usb 5-1: config 210 interface 231 altsetting 46 has 1 endpoint descriptor, different from the interface descriptor's value: 163 [ 89.727977][ T60] usb 5-1: too many endpoints for config 210 interface 116 altsetting 92: 149, using maximum allowed: 30 [ 89.732833][ T60] usb 5-1: config 210 interface 116 altsetting 92 has a duplicate endpoint with address 0xF, skipping [ 89.737612][ T60] usb 5-1: config 210 interface 116 altsetting 92 has a duplicate endpoint with address 0xE, skipping [ 89.742152][ T60] usb 5-1: config 210 interface 116 altsetting 92 has a duplicate endpoint with address 0x5, skipping [ 89.743862][ T40] audit: type=1400 audit(1773839226.591:530): avc: denied { read } for pid=7646 comm="syz.4.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.746575][ T60] usb 5-1: config 210 interface 116 altsetting 92 has a duplicate endpoint with address 0x9, skipping [ 89.757217][ T60] usb 5-1: config 210 interface 116 altsetting 92 has a duplicate endpoint with address 0x9, skipping [ 89.761850][ T60] usb 5-1: config 210 interface 116 altsetting 92 has a duplicate endpoint with address 0x6, skipping [ 89.766565][ T60] usb 5-1: config 210 interface 116 altsetting 92 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 89.771620][ T60] usb 5-1: config 210 interface 116 altsetting 92 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 89.776776][ T60] usb 5-1: config 210 interface 116 altsetting 92 has a duplicate endpoint with address 0x87, skipping [ 89.781660][ T60] usb 5-1: config 210 interface 116 altsetting 92 has an invalid descriptor for endpoint zero, skipping [ 89.786459][ T60] usb 5-1: config 210 interface 116 altsetting 92 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 89.790614][ T60] usb 5-1: config 210 interface 116 altsetting 92 bulk endpoint 0x8 has invalid maxpacket 32 [ 89.793938][ T60] usb 5-1: config 210 interface 116 altsetting 92 has a duplicate endpoint with address 0xA, skipping [ 89.796939][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.422'. [ 89.797495][ T60] usb 5-1: config 210 interface 116 altsetting 92 has 13 endpoint descriptors, different from the interface descriptor's value: 149 [ 89.800775][ T7647] openvswitch: netlink: Flow actions attr not present in new flow. [ 89.809324][ T60] usb 5-1: config 210 interface 146 altsetting 4 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 89.813230][ T60] usb 5-1: config 210 interface 146 altsetting 4 has a duplicate endpoint with address 0x8A, skipping [ 89.816747][ T60] usb 5-1: config 210 interface 146 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 89.818184][ T29] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 89.820240][ T60] usb 5-1: config 210 interface 146 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 89.826332][ T60] usb 5-1: config 210 interface 146 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 89.830015][ T60] usb 5-1: config 210 interface 146 altsetting 4 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 89.833639][ T60] usb 5-1: config 210 interface 146 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 89.838788][ T60] usb 5-1: config 210 interface 146 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 89.842298][ T60] usb 5-1: config 210 interface 146 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 89.845790][ T60] usb 5-1: config 210 interface 146 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 89.849945][ T60] usb 5-1: config 210 interface 146 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 89.851087][ T29] usb 10-1: Invalid ep0 maxpacket: 64 [ 89.853745][ T60] usb 5-1: config 210 interface 146 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 89.853761][ T60] usb 5-1: config 210 interface 146 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 89.853773][ T60] usb 5-1: config 210 interface 146 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 89.853785][ T60] usb 5-1: config 210 interface 146 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 89.853797][ T60] usb 5-1: config 210 interface 146 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 89.853809][ T60] usb 5-1: config 210 interface 131 has no altsetting 0 [ 89.853819][ T60] usb 5-1: config 210 interface 155 has no altsetting 0 [ 89.853828][ T60] usb 5-1: config 210 interface 4 has no altsetting 0 [ 89.853838][ T60] usb 5-1: config 210 interface 231 has no altsetting 0 [ 89.853847][ T60] usb 5-1: config 210 interface 116 has no altsetting 0 [ 89.853905][ T60] usb 5-1: config 210 interface 146 has no altsetting 0 [ 89.856262][ T60] usb 5-1: Dual-Role OTG device on HNP port [ 89.868904][ T29] usb usb10-port1: unable to enumerate USB device [ 89.870702][ T60] usb 5-1: New USB device found, idVendor=0c52, idProduct=2411, bcdDevice=e8.a1 [ 89.894436][ T24] usb 6-1: usb_control_msg returned -71 [ 89.896254][ T24] usbtmc 6-1:16.0: can't read capabilities [ 89.898943][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.901576][ T60] usb 5-1: Product: 否曇었೉俛㧄椅㡀⌵甸Ὂ훝뛉ヤ⎡鶳荚駥⺋ꚮ䢂⟍ⱑ〰埡탹皲⦶뢪㜵鶱滇秤쐭顜萂ꔃ즹ꧦ︜꿬蓦︻ [ 89.918260][ T60] usb 5-1: Manufacturer: ᰁ [ 89.920340][ T60] usb 5-1: SerialNumber: ⫙匈滛㴩㿊ᲈ處︝㧡娈邚ᥩ䚯ꌕᥳ톑⦲㇎蘩᷌㕩罝钶ᩱ녉֬別딝웡 [ 89.926701][ T24] usb 6-1: USB disconnect, device number 4 [ 89.939781][ T7639] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 89.942326][ T7639] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 90.152047][ T60] ftdi_sio 5-1:210.131: FTDI USB Serial Device converter detected [ 90.155685][ T60] ftdi_sio ttyUSB0: unknown device type: 0xe8a1 [ 90.171799][ T60] ftdi_sio 5-1:210.155: FTDI USB Serial Device converter detected [ 90.175011][ T60] ftdi_sio ttyUSB1: unknown device type: 0xe8a1 [ 90.183131][ T60] ftdi_sio 5-1:210.4: FTDI USB Serial Device converter detected [ 90.186066][ T60] ftdi_sio ttyUSB2: unknown device type: 0xe8a1 [ 90.190677][ T60] ftdi_sio 5-1:210.231: FTDI USB Serial Device converter detected [ 90.193917][ T60] ftdi_sio ttyUSB3: unknown device type: 0xe8a1 [ 90.198527][ T60] ftdi_sio 5-1:210.116: FTDI USB Serial Device converter detected [ 90.202544][ T60] ftdi_sio ttyUSB4: unknown device type: 0xe8a1 [ 90.208748][ T60] ftdi_sio 5-1:210.146: FTDI USB Serial Device converter detected [ 90.211661][ T60] ftdi_sio ttyUSB5: unknown device type: 0xe8a1 [ 90.217279][ T60] usb 5-1: USB disconnect, device number 3 [ 90.232807][ T60] ftdi_sio 5-1:210.131: device disconnected [ 90.237209][ T60] ftdi_sio 5-1:210.155: device disconnected [ 90.241964][ T60] ftdi_sio 5-1:210.4: device disconnected [ 90.245034][ T60] ftdi_sio 5-1:210.231: device disconnected [ 90.249811][ T60] ftdi_sio 5-1:210.116: device disconnected [ 90.253490][ T60] ftdi_sio 5-1:210.146: device disconnected [ 90.554726][ T7681] xfrm1: entered allmulticast mode [ 90.658280][ T5935] Bluetooth: hci2: command tx timeout [ 90.704877][ T7698] trusted_key: encrypted_key: master key parameter '' is invalid [ 90.724297][ T7694] loop5: detected capacity change from 0 to 7 [ 90.731273][ T7694] Dev loop5: unable to read RDB block 7 [ 90.733200][ T7694] loop5: unable to read partition table [ 90.735440][ T7694] loop5: partition table beyond EOD, truncated [ 90.737797][ T7694] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 90.774920][ T40] audit: type=1400 audit(1773839227.611:531): avc: denied { associate } for pid=7701 comm="syz.1.435" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 90.795465][ T7700] team0 (unregistering): Port device team_slave_0 removed [ 90.820226][ T7700] team0 (unregistering): Port device team_slave_1 removed [ 90.838546][ T7707] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 90.840960][ T7707] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 90.849520][ T7707] vhci_hcd vhci_hcd.0: Device attached [ 90.972472][ T7708] vhci_hcd: connection closed [ 90.974359][ T168] vhci_hcd vhci_hcd.4: stop threads [ 90.978152][ T168] vhci_hcd vhci_hcd.4: release socket [ 90.980780][ T168] vhci_hcd vhci_hcd.4: disconnect device [ 91.038181][ T1337] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 91.208040][ T7727] fuse: Unknown parameter 'grou00000000000000000000' [ 91.262527][ T7731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.443'. [ 91.266393][ T7731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.443'. [ 91.270854][ T7731] netlink: 56 bytes leftover after parsing attributes in process `syz.1.443'. [ 91.521621][ T60] hid-generic 0005:04F3:0000.0003: item fetching failed at offset 0/1 [ 91.524661][ T60] hid-generic 0005:04F3:0000.0003: probe with driver hid-generic failed with error -22 [ 91.692504][ T7757] fuse: Unknown parameter 'grou00000000000000000000' [ 91.697844][ T7758] netlink: 12 bytes leftover after parsing attributes in process `syz.5.450'. [ 91.787739][ T7767] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.792516][ T7767] netlink: 16 bytes leftover after parsing attributes in process `syz.0.454'. [ 91.795860][ T7767] tmpfs: Bad value for 'mpol' [ 91.961161][ T7784] loop7: detected capacity change from 0 to 7 [ 91.966691][ T7784] Dev loop7: unable to read RDB block 7 [ 91.969275][ T7784] loop7: unable to read partition table [ 91.971914][ T7784] loop7: partition table beyond EOD, truncated [ 91.988272][ T7784] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 91.997810][ C1] operation not supported error, dev loop7, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10800800 phys_seg 0 prio class 2 [ 92.219640][ T7799] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.542670][ T7827] cgroup: No subsys list or none specified [ 92.738208][ T5935] Bluetooth: hci2: command tx timeout [ 92.816657][ T7835] binder: 7834:7835 ioctl c00c620f 0 returned -14 [ 92.824112][ T7835] netlink: 'syz.1.475': attribute type 1 has an invalid length. [ 93.109086][ T7865] overlayfs: upper fs does not support tmpfile. [ 93.139947][ T7878] sctp: [Deprecated]: syz.1.488 (pid 7878) Use of int in maxseg socket option. [ 93.139947][ T7878] Use struct sctp_assoc_value instead [ 93.175282][ T7884] __nla_validate_parse: 4 callbacks suppressed [ 93.175297][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.491'. [ 93.185440][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.491'. [ 93.217023][ T7891] Device name not specified. [ 93.217023][ T7891] [ 93.224796][ T5935] Bluetooth: hci0: connection err: -111 [ 93.229148][ T5935] Bluetooth: hci0: connection err: -111 [ 93.279931][ T7900] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 93.376617][ T7458] Bluetooth: Error in BCSP hdr checksum [ 93.521996][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.501'. [ 93.525917][ T7922] netlink: 75 bytes leftover after parsing attributes in process `syz.0.501'. [ 93.610189][ T7932] netlink: 'syz.1.504': attribute type 10 has an invalid length. [ 93.616878][ T7932] team0: Device vxcan1 is of different type [ 93.677911][ T7939] 9pnet_fd: Insufficient options for proto=fd [ 93.684163][ T7939] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.506'. [ 93.826471][ T7947] netlink: 'syz.1.509': attribute type 2 has an invalid length. [ 93.829199][ T7947] netlink: 'syz.1.509': attribute type 2 has an invalid length. [ 93.884541][ T7949] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 94.034668][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 94.034680][ T40] audit: type=1400 audit(1773839230.871:562): avc: denied { setattr } for pid=7954 comm="syz.5.511" name="NETLINK" dev="sockfs" ino=22246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.034841][ T7955] netlink: 'syz.5.511': attribute type 1 has an invalid length. [ 94.047187][ T7955] netlink: 224 bytes leftover after parsing attributes in process `syz.5.511'. [ 94.136361][ T7957] netlink: 'syz.5.511': attribute type 1 has an invalid length. [ 94.140071][ T7957] netlink: 224 bytes leftover after parsing attributes in process `syz.5.511'. [ 94.471240][ T7966] netlink: 256 bytes leftover after parsing attributes in process `syz.5.513'. [ 94.509328][ T7968] vcan0: tx address claim with dest, not broadcast [ 94.553609][ T7970] netlink: 16 bytes leftover after parsing attributes in process `syz.5.515'. [ 94.557279][ T7972] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 94.566342][ T40] audit: type=1400 audit(1773839231.401:563): avc: denied { setopt } for pid=7971 comm="syz.0.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.567327][ T7972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.516'. [ 94.818223][ T63] Bluetooth: hci2: command tx timeout [ 95.054664][ T8007] binder: 8006:8007 ioctl c0306201 0 returned -14 [ 95.054708][ T8008] binder: 8006:8008 ioctl c0306201 0 returned -14 [ 95.388269][ T63] Bluetooth: hci4: command 0x1003 tx timeout [ 95.390519][ T5935] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 95.424452][ T8020] fuse: Unknown parameter 'w8c!V3cPNk\uQ [ 95.424452][ T8020] 0 [ 95.424452][ T8020] xɜ ' [ 95.435036][ T40] audit: type=1400 audit(1773839232.271:564): avc: denied { listen } for pid=8019 comm="syz.1.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 95.443717][ T40] audit: type=1400 audit(1773839232.271:565): avc: denied { lock } for pid=8019 comm="syz.1.530" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 95.506109][ T40] audit: type=1400 audit(1773839232.341:566): avc: denied { setopt } for pid=8031 comm="syz.0.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 96.178637][ T40] audit: type=1400 audit(1773839233.021:567): avc: denied { read } for pid=8088 comm="syz.5.549" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 96.186114][ T40] audit: type=1400 audit(1773839233.021:568): avc: denied { ioctl } for pid=8088 comm="syz.5.549" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 96.345665][ T40] audit: type=1400 audit(1773839233.181:569): avc: denied { setopt } for pid=8115 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 96.356266][ T40] audit: type=1400 audit(1773839233.191:570): avc: denied { create } for pid=8115 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 96.367712][ T40] audit: type=1400 audit(1773839233.191:571): avc: denied { write } for pid=8115 comm="syz.0.557" path="socket:[24614]" dev="sockfs" ino=24614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 96.697002][ T8142] xt_hashlimit: size too large, truncated to 1048576 [ 96.871307][ T8162] hsr_slave_0: left promiscuous mode [ 96.878277][ T8162] hsr_slave_1: left promiscuous mode [ 96.963949][ T8172] openvswitch: netlink: Flow key attr not present in new flow. [ 96.966650][ T8172] netlink: 'syz.5.575': attribute type 20 has an invalid length. [ 97.299340][ T8197] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8197 comm=syz.4.583 [ 97.480950][ T8216] overlayfs: failed to clone upperpath [ 97.484809][ T8216] overlayfs: failed to clone upperpath [ 97.525852][ T8221] loop2: detected capacity change from 0 to 7 [ 97.531807][ T5930] Dev loop2: unable to read RDB block 7 [ 97.533701][ T5930] loop2: unable to read partition table [ 97.535880][ T5930] loop2: partition table beyond EOD, truncated [ 97.541127][ T8221] Dev loop2: unable to read RDB block 7 [ 97.543088][ T8221] loop2: unable to read partition table [ 97.545025][ T8221] loop2: partition table beyond EOD, truncated [ 97.547738][ T8221] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 97.716343][ T8239] dlm: no locking on control device [ 97.835078][ T8249] nbd: couldn't find device at index -2143879164 [ 98.063888][ T1337] hid (null): unknown global tag 0xe [ 98.070908][ T1337] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 98.073513][ T1337] hid-generic 00A0:0006:0003.0004: unknown global tag 0xe [ 98.075733][ T1337] hid-generic 00A0:0006:0003.0004: item 0 0 1 14 parsing failed [ 98.078551][ T1337] hid-generic 00A0:0006:0003.0004: probe with driver hid-generic failed with error -22 [ 98.378276][ T6480] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 98.549413][ T6480] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.552940][ T6480] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.556045][ T6480] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.560261][ T6480] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.563148][ T6480] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.567595][ T6480] usb 5-1: config 0 descriptor?? [ 98.814176][ T6480] usbhid 5-1:0.0: can't add hid device: -71 [ 98.816497][ T6480] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 98.822092][ T6480] usb 5-1: USB disconnect, device number 4 [ 98.850054][ T1337] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 98.893651][ T8307] hub 2-0:1.0: USB hub found [ 98.896130][ T8307] hub 2-0:1.0: 2 ports detected [ 98.913826][ T8312] __nla_validate_parse: 74 callbacks suppressed [ 98.913846][ T8312] netlink: 64 bytes leftover after parsing attributes in process `syz.4.620'. [ 98.988152][ T1337] usb 10-1: device descriptor read/64, error -71 [ 99.035736][ T8309] syzkaller0: entered promiscuous mode [ 99.037734][ T8309] syzkaller0: entered allmulticast mode [ 99.051947][ T8309] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8309 comm=syz.0.618 [ 99.147559][ T8337] 9p: Unknown access argument anyq: -22 [ 99.200529][ T8340] sp0: Synchronizing with TNC [ 99.211203][ T8340] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 99.214206][ T8340] netlink: 32 bytes leftover after parsing attributes in process `syz.4.628'. [ 99.238252][ T1337] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 99.388159][ T1337] usb 10-1: device descriptor read/64, error -71 [ 99.436522][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.631'. [ 99.503304][ T8364] netlink: 'syz.4.634': attribute type 1 has an invalid length. [ 99.508489][ T1337] usb usb10-port1: attempt power cycle [ 99.524593][ T8364] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.529967][ T8364] netlink: 36 bytes leftover after parsing attributes in process `syz.4.634'. [ 99.533506][ T8364] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8364 comm=syz.4.634 [ 99.843647][ T8384] capability: warning: `syz.0.636' uses 32-bit capabilities (legacy support in use) [ 99.870043][ T1337] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 99.900458][ T1337] usb 10-1: device descriptor read/8, error -71 [ 100.135762][ T8401] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 100.148288][ T1337] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 100.183716][ T1337] usb 10-1: device descriptor read/8, error -71 [ 100.207464][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.643'. [ 100.210661][ T8403] hsr_slave_0: left promiscuous mode [ 100.212947][ T8403] hsr_slave_1: left promiscuous mode [ 100.262708][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 100.262726][ T40] audit: type=1400 audit(1773839237.101:587): avc: denied { write } for pid=8402 comm="syz.0.643" lport=58393 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 100.285067][ T40] audit: type=1400 audit(1773839237.121:588): avc: denied { create } for pid=8406 comm="syz.1.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 100.288940][ T1337] usb usb10-port1: unable to enumerate USB device [ 100.502292][ T8418] netlink: 'syz.0.647': attribute type 1 has an invalid length. [ 100.527642][ T8418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.551644][ T8418] bond0: (slave ip6erspan0): making interface the new active one [ 100.557074][ T8418] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 100.563248][ T8418] netlink: 'syz.0.647': attribute type 39 has an invalid length. [ 100.713510][ T8433] fuse: Bad value for 'fd' [ 100.777174][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.653'. [ 100.782811][ T8438] netlink: 'syz.0.653': attribute type 5 has an invalid length. [ 100.785900][ T8438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'. [ 100.799785][ T7456] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.803094][ T7456] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.806752][ T7456] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.810152][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.653'. [ 100.810811][ T7456] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.814265][ T8438] netlink: 'syz.0.653': attribute type 5 has an invalid length. [ 100.821231][ T8438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'. [ 101.128228][ T40] audit: type=1400 audit(1773839237.961:589): avc: denied { map } for pid=8451 comm="syz.0.658" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 101.137548][ T40] audit: type=1400 audit(1773839237.971:590): avc: denied { execute } for pid=8451 comm="syz.0.658" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 101.182714][ T8454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8454 comm=syz.1.659 [ 101.215940][ T8456] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.660'. [ 101.269076][ T8459] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in; [ 101.269076][ T8459] program syz.0.661 not setting count and/or reply_len properly [ 101.277482][ T8459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.282630][ T40] audit: type=1400 audit(1773839238.131:591): avc: denied { watch watch_reads } for pid=8457 comm="syz.0.661" path="/195" dev="tmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 101.283961][ T8459] vcan0: tx address claim with dlc 0 [ 101.603598][ T8479] Bluetooth: MGMT ver 1.23 [ 101.808517][ T8507] sctp: [Deprecated]: syz.5.674 (pid 8507) Use of int in maxseg socket option. [ 101.808517][ T8507] Use struct sctp_assoc_value instead [ 101.890220][ T8510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.899838][ T8510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.958726][ T40] audit: type=1400 audit(1773839238.791:592): avc: denied { write } for pid=8517 comm="syz.0.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.013398][ T40] audit: type=1400 audit(1773839238.851:593): avc: denied { ioctl } for pid=8522 comm="syz.4.680" path="socket:[27766]" dev="sockfs" ino=27766 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 102.129452][ T8537] fuse: Invalid rootmode [ 102.205811][ T8539] netlink: 'syz.4.685': attribute type 20 has an invalid length. [ 102.278560][ T40] audit: type=1400 audit(1773839239.121:594): avc: denied { block_suspend } for pid=8538 comm="syz.4.685" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.399802][ T40] audit: type=1400 audit(1773839239.241:595): avc: denied { ioctl } for pid=8544 comm="syz.0.687" path="socket:[27037]" dev="sockfs" ino=27037 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 102.534985][ T8549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.735715][ T8557] binder_alloc: 8556: binder_alloc_buf size -280 failed, no address space [ 102.738606][ T40] audit: type=1400 audit(1773839239.571:596): avc: denied { set_context_mgr } for pid=8556 comm="syz.0.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 102.746268][ T8557] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 104.027825][ T8606] fuse: Unknown parameter 'use00000000000000000000' [ 104.409730][ T8637] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 104.507282][ T8651] fuse: Unknown parameter 'use00000000000000000000' [ 104.750096][ T8677] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 104.759950][ T8680] __nla_validate_parse: 4 callbacks suppressed [ 104.759961][ T8680] netlink: 100 bytes leftover after parsing attributes in process `syz.1.723'. [ 105.023267][ T8713] fuse: Unknown parameter 'use00000000000000000000' [ 105.026464][ T8715] netlink: 'syz.0.727': attribute type 10 has an invalid length. [ 105.030143][ T8715] veth1_macvtap: left promiscuous mode [ 105.348187][ T5968] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 105.390124][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 105.390140][ T40] audit: type=1400 audit(1773839242.231:605): avc: denied { bind } for pid=8733 comm="syz.5.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 105.509799][ T8738] fuse: Unknown parameter 'user_i00000000000000000000' [ 105.519368][ T5968] usb 5-1: config 16 has an invalid descriptor of length 137, skipping remainder of the config [ 105.528504][ T5968] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.533505][ T5968] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.537117][ T5968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.544645][ T40] audit: type=1400 audit(1773839242.381:606): avc: denied { watch } for pid=8741 comm="syz.4.738" path="/157/file0" dev="tmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 105.550047][ T5968] usbtmc 5-1:16.0: bulk endpoints not found [ 105.553974][ T40] audit: type=1400 audit(1773839242.381:607): avc: denied { watch_sb watch_reads } for pid=8741 comm="syz.4.738" path="/157/file0" dev="tmpfs" ino=842 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 105.704788][ T8750] tmpfs: Bad value for 'mpol' [ 105.739004][ T8750] binder: BINDER_SET_CONTEXT_MGR already set [ 105.741631][ T8750] binder: 8749:8750 ioctl 4018620d 2000000000c0 returned -16 [ 106.008469][ T40] audit: type=1400 audit(1773839242.851:608): avc: denied { write } for pid=8770 comm="syz.1.746" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 106.036041][ T8775] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 106.038214][ T8775] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 106.041016][ T8775] vhci_hcd vhci_hcd.0: Device attached [ 106.044816][ T40] audit: type=1400 audit(1773839242.881:609): avc: denied { validate_trans } for pid=8774 comm="syz.4.747" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 106.051617][ T8777] vhci_hcd: connection closed [ 106.051787][ T7471] vhci_hcd vhci_hcd.4: stop threads [ 106.055136][ T7471] vhci_hcd vhci_hcd.4: release socket [ 106.058133][ T7471] vhci_hcd vhci_hcd.4: disconnect device [ 106.087743][ T8780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.748'. [ 106.258274][ T6480] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 106.326408][ T8791] syz.5.751: vmalloc error: size 4127592448, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 106.332489][ T8791] CPU: 3 UID: 0 PID: 8791 Comm: syz.5.751 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.332516][ T8791] Tainted: [L]=SOFTLOCKUP [ 106.332522][ T8791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.332533][ T8791] Call Trace: [ 106.332540][ T8791] [ 106.332546][ T8791] dump_stack_lvl+0x100/0x190 [ 106.332589][ T8791] warn_alloc.cold+0x95/0x1c1 [ 106.332618][ T8791] ? __pfx_warn_alloc+0x10/0x10 [ 106.332640][ T8791] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 106.332666][ T8791] ? lockdep_hardirqs_on+0x78/0x100 [ 106.332689][ T8791] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 106.332716][ T8791] ? kasan_save_stack+0x3f/0x50 [ 106.332738][ T8791] ? kasan_save_stack+0x30/0x50 [ 106.332760][ T8791] ? kasan_save_track+0x14/0x30 [ 106.332785][ T8791] ? vb2_vmalloc_alloc+0x135/0x410 [ 106.332818][ T8791] __vmalloc_node_range_noprof+0x1252/0x1530 [ 106.332839][ T8791] ? do_syscall_64+0x106/0xf80 [ 106.332859][ T8791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.332882][ T8791] ? vb2_vmalloc_alloc+0x135/0x410 [ 106.332914][ T8791] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 106.332943][ T8791] ? vb2_vmalloc_alloc+0x135/0x410 [ 106.332968][ T8791] vmalloc_user_noprof+0x9e/0xe0 [ 106.332987][ T8791] ? vb2_vmalloc_alloc+0x135/0x410 [ 106.333013][ T8791] vb2_vmalloc_alloc+0x135/0x410 [ 106.333037][ T8791] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 106.333064][ T8791] __vb2_queue_alloc+0x8d5/0x1160 [ 106.333100][ T8791] vb2_core_create_bufs+0x5fa/0xa30 [ 106.333135][ T8791] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 106.333189][ T8791] ? rcu_is_watching+0x12/0xc0 [ 106.333212][ T8791] vb2_create_bufs+0x40c/0x830 [ 106.333238][ T8791] ? __pfx_vb2_create_bufs+0x10/0x10 [ 106.333261][ T8791] ? v4l_sanitize_format+0x18d/0x430 [ 106.333286][ T8791] vb2_ioctl_create_bufs+0x244/0x3e0 [ 106.333309][ T8791] ? check_fmt+0x230/0x900 [ 106.333328][ T8791] v4l_create_bufs+0x17d/0x270 [ 106.333348][ T8791] __video_do_ioctl+0xaf8/0xdc0 [ 106.333372][ T8791] ? __might_fault+0xc5/0x140 [ 106.333394][ T8791] ? __pfx___video_do_ioctl+0x10/0x10 [ 106.333429][ T8791] video_usercopy+0x47a/0x1740 [ 106.333452][ T8791] ? __pfx___video_do_ioctl+0x10/0x10 [ 106.333475][ T8791] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 106.333500][ T8791] ? __pfx_video_usercopy+0x10/0x10 [ 106.333536][ T8791] v4l2_ioctl+0x1bd/0x250 [ 106.333558][ T8791] ? __pfx_v4l2_ioctl+0x10/0x10 [ 106.333581][ T8791] __x64_sys_ioctl+0x18e/0x210 [ 106.333607][ T8791] do_syscall_64+0x106/0xf80 [ 106.333627][ T8791] ? clear_bhb_loop+0x40/0x90 [ 106.333648][ T8791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.333665][ T8791] RIP: 0033:0x7f799359c799 [ 106.333680][ T8791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.333695][ T8791] RSP: 002b:00007f79943f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.333712][ T8791] RAX: ffffffffffffffda RBX: 00007f7993815fa0 RCX: 00007f799359c799 [ 106.333723][ T8791] RDX: 0000200000000140 RSI: 00000000c100565c RDI: 0000000000000004 [ 106.333733][ T8791] RBP: 00007f7993632c99 R08: 0000000000000000 R09: 0000000000000000 [ 106.333744][ T8791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.333753][ T8791] R13: 00007f7993816038 R14: 00007f7993815fa0 R15: 00007ffd699c34c8 [ 106.333775][ T8791] [ 106.333805][ T8791] Mem-Info: [ 106.463103][ T8791] active_anon:11220 inactive_anon:6316 isolated_anon:0 [ 106.463103][ T8791] active_file:5781 inactive_file:41662 isolated_file:0 [ 106.463103][ T8791] unevictable:1768 dirty:299 writeback:0 [ 106.463103][ T8791] slab_reclaimable:9819 slab_unreclaimable:69850 [ 106.463103][ T8791] mapped:25260 shmem:6015 pagetables:3798 [ 106.463103][ T8791] sec_pagetables:293 bounce:0 [ 106.463103][ T8791] kernel_misc_reclaimable:0 [ 106.463103][ T8791] free:437512 free_pcp:32129 free_cma:0 [ 106.463241][ T6480] usb 6-1: device descriptor read/64, error -71 [ 106.478365][ T8791] Node 0 active_anon:44620kB inactive_anon:25264kB active_file:22912kB inactive_file:166448kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:101028kB dirty:1196kB writeback:0kB shmem:20524kB shmem_thp:8192kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:15552kB pagetables:5912kB sec_pagetables:1172kB all_unreclaimable? no Balloon:0kB [ 106.491235][ T8791] Node 1 active_anon:260kB inactive_anon:0kB active_file:212kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:9280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 106.500963][ T8791] Node 0 DMA free:11052kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:136kB local_pcp:68kB free_cma:0kB [ 106.510725][ T8791] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 106.512642][ T8791] Node 0 DMA32 free:176304kB boost:0kB min:27476kB low:34344kB high:41212kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44632kB inactive_anon:25152kB active_file:22912kB inactive_file:166448kB unevictable:3536kB writepending:1196kB zspages:0kB present:2080628kB managed:1260900kB mlocked:0kB bounce:0kB free_pcp:46012kB local_pcp:14488kB free_cma:0kB [ 106.524054][ T8791] lowmem_reserve[]: 0 0 0 0 0 [ 106.525627][ T8791] Node 1 Normal free:1562692kB boost:0kB min:39760kB low:49700kB high:59640kB reserved_highatomic:0KB free_highatomic:0KB active_anon:260kB inactive_anon:0kB active_file:212kB inactive_file:200kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:82576kB local_pcp:37304kB free_cma:0kB [ 106.536111][ T8791] lowmem_reserve[]: 0 0 0 0 0 [ 106.537696][ T8791] Node 0 DMA: 13*4kB (UM) 15*8kB (UM) 12*16kB (UM) 12*32kB (U) 11*64kB (UM) 11*128kB (UM) 10*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 0*2048kB 0*4096kB = 11052kB [ 106.543090][ T8791] Node 0 DMA32: 2476*4kB (UM) 1222*8kB (UME) 827*16kB (UME) 360*32kB (UME) 201*64kB (UME) 123*128kB (UME) 89*256kB (UME) 59*512kB (UME) 35*1024kB (UM) 7*2048kB (UM) 0*4096kB = 176208kB [ 106.549267][ T8791] Node 1 Normal: 289*4kB (U) 238*8kB (UE) 231*16kB (U) 265*32kB (UME) 207*64kB (UME) 192*128kB (UME) 259*256kB (UM) 249*512kB (UME) 193*1024kB (UM) 24*2048kB (UME) 261*4096kB (M) = 1562692kB [ 106.555600][ T8791] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 106.558812][ T8791] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 106.562741][ T8791] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 106.566607][ T8791] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 106.570489][ T8791] 53433 total pagecache pages [ 106.572433][ T8791] 0 pages in swap cache [ 106.574253][ T8791] Free swap = 124996kB [ 106.575966][ T8791] Total swap = 124996kB [ 106.577695][ T8791] 1048443 pages RAM [ 106.579875][ T8791] 0 pages HighMem/MovableOnly [ 106.581847][ T8791] 283907 pages reserved [ 106.583586][ T8791] 0 pages cma reserved [ 106.719565][ T6480] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 106.729909][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'. [ 106.736085][ T8797] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.860054][ T6480] usb 6-1: device descriptor read/64, error -71 [ 106.978371][ T6480] usb usb6-port1: attempt power cycle [ 107.178296][ T40] audit: type=1400 audit(1773839244.021:610): avc: denied { mount } for pid=8812 comm="syz.4.754" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 107.187196][ T8813] overlay: filesystem on ./bus not supported as upperdir [ 107.214974][ T40] audit: type=1400 audit(1773839244.051:611): avc: denied { unmount } for pid=6566 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 107.318246][ T6480] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 107.338828][ T6480] usb 6-1: device descriptor read/8, error -71 [ 107.416622][ T8834] fuse: Unknown parameter 'user_id00000000000000000000' [ 107.446988][ T8836] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 107.588217][ T6480] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 107.618829][ T6480] usb 6-1: device descriptor read/8, error -71 [ 107.734750][ T6480] usb usb6-port1: unable to enumerate USB device [ 107.772698][ T8867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.766'. [ 108.108571][ T10] usb 5-1: USB disconnect, device number 5 [ 108.138328][ T6480] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 108.179720][ T40] audit: type=1326 audit(1773839245.021:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8900 comm="syz.5.771" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f799359c799 code=0x0 [ 108.289835][ T6480] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.293573][ T6480] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 108.296741][ T6480] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30062, setting to 8 [ 108.300347][ T6480] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 108.303676][ T6480] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.315107][ T8882] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 108.318677][ T6480] hub 9-1:1.0: bad descriptor, ignoring hub [ 108.320723][ T6480] hub 9-1:1.0: probe with driver hub failed with error -5 [ 108.326173][ T6480] cdc_wdm 9-1:1.0: skipping garbage [ 108.327867][ T6480] cdc_wdm 9-1:1.0: skipping garbage [ 108.332216][ T6480] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 108.334102][ T6480] cdc_wdm 9-1:1.0: Unknown control protocol [ 108.355019][ T8905] bond3: entered promiscuous mode [ 109.086385][ T5935] Bluetooth: hci3: unexpected event for opcode 0x0c14 [ 109.157127][ T40] audit: type=1400 audit(1773839245.991:613): avc: denied { mounton } for pid=8909 comm="syz.5.774" path="/85/file0" dev="tmpfs" ino=460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 109.167069][ T8905] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 109.171358][ T8905] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 109.174266][ T8905] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 109.177146][ T8905] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 109.180374][ T8905] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 109.184409][ T8905] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 109.227950][ T8921] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.776'. [ 109.232970][ T8921] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 109.238853][ T8921] netlink: 'syz.0.776': attribute type 10 has an invalid length. [ 109.242486][ T8921] veth0_macvtap: left promiscuous mode [ 109.324557][ T8924] netlink: 'syz.0.776': attribute type 51 has an invalid length. [ 109.350744][ T40] audit: type=1400 audit(1773839246.191:614): avc: granted { setsecparam } for pid=8926 comm="syz.1.780" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 109.490335][ T8882] usb 9-1: reset low-speed USB device number 5 using dummy_hcd [ 109.638322][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 109.758172][ T8882] usb 9-1: device descriptor read/64, error -71 [ 109.798207][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 109.802533][ T8943] netlink: 12 bytes leftover after parsing attributes in process `syz.5.785'. [ 109.802906][ T10] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 109.809164][ T10] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 109.812739][ T5935] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 109.814562][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.820832][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.823618][ T10] usb 6-1: Product: syz [ 109.824983][ T10] usb 6-1: Manufacturer: 镺㧛⻚㶆㤍蒲엙䶪䴞⽝캜沚™壯䋲毲뉎᱖餌씸훤㜩蕁忥䌦淭뱝䚴馗砼蒌媍䝲ﯰધ䔦䒩䱍˨솖Ҡ꩛妥彉뙁슨퍺菅䘩ು濶딝盛㎝垔ϗꬼO茪敗碔骁藟ꊴ◧ꩡ奜㲉瓅㼍쀞ਅᡠ䃝휵퐹珕㏅ڲ☂㦬⏀≚茘Ǎ⯩띕쪇䀿㲸䆸ᶨ⋐槫縅ڤԸ❻괗វ䑳㻸ᅹḷ [ 109.835913][ T10] usb 6-1: SerialNumber: syz [ 109.961169][ T8952] FAULT_INJECTION: forcing a failure. [ 109.961169][ T8952] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 109.965533][ T8952] CPU: 1 UID: 0 PID: 8952 Comm: syz.5.789 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.965551][ T8952] Tainted: [L]=SOFTLOCKUP [ 109.965555][ T8952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.965562][ T8952] Call Trace: [ 109.965566][ T8952] [ 109.965570][ T8952] dump_stack_lvl+0x100/0x190 [ 109.965592][ T8952] should_fail_ex.cold+0x5/0xa [ 109.965606][ T8952] _copy_from_user+0x2e/0xd0 [ 109.965617][ T8952] copy_msghdr_from_user+0x9f/0x4f0 [ 109.965636][ T8952] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 109.965660][ T8952] ___sys_sendmsg+0x106/0x1e0 [ 109.965678][ T8952] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.965711][ T8952] __sys_sendmsg+0x170/0x220 [ 109.965725][ T8952] ? __pfx___sys_sendmsg+0x10/0x10 [ 109.965747][ T8952] do_syscall_64+0x106/0xf80 [ 109.965761][ T8952] ? clear_bhb_loop+0x40/0x90 [ 109.965775][ T8952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.965788][ T8952] RIP: 0033:0x7f799359c799 [ 109.965797][ T8952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.965808][ T8952] RSP: 002b:00007f79943f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.965819][ T8952] RAX: ffffffffffffffda RBX: 00007f7993815fa0 RCX: 00007f799359c799 [ 109.965826][ T8952] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000004 [ 109.965837][ T8952] RBP: 00007f79943f5090 R08: 0000000000000000 R09: 0000000000000000 [ 109.965846][ T8952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.965856][ T8952] R13: 00007f7993816038 R14: 00007f7993815fa0 R15: 00007ffd699c34c8 [ 109.965878][ T8952] [ 110.055203][ T8954] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: 1 [ 110.061113][ T8954] ref_ctr increment failed for inode: 0x200 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888022fb6200 [ 110.068228][ T8954] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: -1 [ 110.071988][ T8954] ref_ctr decrement failed for inode: 0x200 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888022fb6200 [ 110.075621][ T8954] uprobe: syz.5.790:8954 failed to unregister, leaking uprobe [ 110.138388][ T8882] usb 9-1: reset low-speed USB device number 5 using dummy_hcd [ 110.166545][ T8960] netlink: 32 bytes leftover after parsing attributes in process `syz.0.793'. [ 110.254010][ T8969] autofs4:pid:8969:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc018937e) [ 110.258351][ T8970] autofs4:pid:8970:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc018937e) [ 110.262990][ T8970] autofs4:pid:8970:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 110.266677][ T8969] autofs4:pid:8969:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 110.272538][ T10] cdc_ncm 6-1:1.0: bind() failure [ 110.279150][ T10] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 110.288181][ T10] cdc_ncm 6-1:1.1: bind() failure [ 110.292882][ T10] usb 6-1: USB disconnect, device number 9 [ 110.338889][ T8980] netlink: 'syz.5.798': attribute type 1 has an invalid length. [ 110.342185][ T8980] random: crng reseeded on system resumption [ 110.349059][ T8980] Hibernate inconsistent memory map detected! [ 110.351607][ T8980] PM: hibernation: Image mismatch: architecture specific data [ 110.418252][ T5935] Bluetooth: hci1: command 0x0419 tx timeout [ 110.428801][ T8882] usb 9-1: device descriptor read/64, error -71 [ 110.537349][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 110.537360][ T40] audit: type=1400 audit(1773839247.371:620): avc: denied { remount } for pid=8989 comm="syz.5.801" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 110.589460][ T8992] smc: net device ip_vti0 applied user defined pnetid SYZ0 [ 110.799626][ T9003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.805'. [ 110.831126][ T8882] usb 9-1: reset low-speed USB device number 5 using dummy_hcd [ 110.832807][ T40] audit: type=1400 audit(1773839247.671:621): avc: denied { read } for pid=9006 comm="syz.1.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 110.840703][ T40] audit: type=1400 audit(1773839247.671:622): avc: denied { read } for pid=9006 comm="syz.1.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 110.849720][ T8882] usb 9-1: device descriptor read/8, error -71 [ 111.148520][ T9025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.812'. [ 111.178264][ T9015] nbd0: detected capacity change from 0 to 63 [ 111.183975][ T63] block nbd0: Receive control failed (result -104) [ 111.185440][ T5935] block nbd0: Receive control failed (result -32) [ 111.218298][ T5935] Bluetooth: hci3: command 0x0419 tx timeout [ 111.220294][ T5935] Bluetooth: hci2: command 0x0c1a tx timeout [ 111.222326][ T5935] Bluetooth: hci0: command 0x0419 tx timeout [ 111.238234][ T8882] usb 9-1: reset low-speed USB device number 5 using dummy_hcd [ 111.322814][ T40] audit: type=1400 audit(1773839248.161:623): avc: denied { bpf } for pid=9035 comm="syz.1.817" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.331158][ T40] audit: type=1400 audit(1773839248.161:624): avc: denied { perfmon } for pid=9035 comm="syz.1.817" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.385775][ T9046] ------------[ cut here ]------------ [ 111.388176][ T9046] 1 [ 111.388182][ T9046] WARNING: mm/page_alloc.c:5226 at __alloc_frozen_pages_noprof+0x23ea/0x2ba0, CPU#3: syz.1.819/9046 [ 111.392571][ T9046] Modules linked in: [ 111.394390][ T9046] CPU: 3 UID: 0 PID: 9046 Comm: syz.1.819 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.399611][ T9046] Tainted: [L]=SOFTLOCKUP [ 111.401432][ T9046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.405938][ T9046] RIP: 0010:__alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 111.408923][ T9046] Code: 00 45 31 c9 49 83 bc 24 70 05 00 00 00 4c 89 4c 24 50 0f 85 5f f8 ff ff c6 44 24 10 00 e9 f3 ea ff ff c6 05 22 7c 5a 0e 01 90 <0f> 0b 90 e9 69 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 111.415750][ T9046] RSP: 0018:ffffc90003b9f738 EFLAGS: 00010246 [ 111.418043][ T9046] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 111.421550][ T9046] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 111.424664][ T9046] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 111.427476][ T9046] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0 [ 111.430244][ T9046] R13: 1ffff92000773f36 R14: 0000000000000015 R15: 1ffff92000773f00 [ 111.433109][ T9046] FS: 00007fb9aa6de6c0(0000) GS:ffff8880d6642000(0000) knlGS:0000000000000000 [ 111.436775][ T9046] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.439703][ T9046] CR2: 00007fb9a96720c0 CR3: 000000005c347000 CR4: 0000000000352ef0 [ 111.443016][ T9046] Call Trace: [ 111.444427][ T9046] [ 111.445663][ T9046] ? find_held_lock+0x2b/0x80 [ 111.447810][ T9046] ? is_bpf_text_address+0x8a/0x1a0 [ 111.450216][ T9046] ? is_bpf_text_address+0x8a/0x1a0 [ 111.452381][ T9046] ? bpf_ksym_find+0x128/0x1c0 [ 111.454366][ T9046] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 111.456909][ T9046] ? is_bpf_text_address+0x94/0x1a0 [ 111.459507][ T9046] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 111.462132][ T9046] ? __kernel_text_address+0xd/0x30 [ 111.464285][ T9046] ? unwind_get_return_address+0x59/0xa0 [ 111.466595][ T9046] ? tomoyo_path_number_perm+0x46d/0x580 [ 111.469247][ T9046] ? stack_trace_save+0x8e/0xc0 [ 111.471268][ T9046] ? __pfx_stack_trace_save+0x10/0x10 [ 111.473077][ T9046] ? stack_depot_save_flags+0x27/0x9d0 [ 111.474859][ T9046] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 111.476806][ T9046] ? policy_nodemask+0xed/0x4f0 [ 111.478913][ T9046] alloc_pages_mpol+0x1fb/0x550 [ 111.480534][ T9046] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 111.482296][ T9046] ? drm_syncobj_array_find+0x34/0x3b0 [ 111.484085][ T9046] ___kmalloc_large_node+0x104/0x150 [ 111.485810][ T9046] ? find_held_lock+0x2b/0x80 [ 111.487368][ T9046] __kmalloc_large_node_noprof+0x1c/0x70 [ 111.489426][ T9046] __kmalloc_noprof+0x5be/0x850 [ 111.491038][ T9046] ? avc_has_extended_perms+0x484/0x1080 [ 111.492885][ T9046] drm_syncobj_array_find+0x34/0x3b0 [ 111.494937][ T9046] drm_syncobj_query_ioctl+0x25d/0xb70 [ 111.497203][ T9046] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 111.499852][ T9046] ? find_held_lock+0x2b/0x80 [ 111.501836][ T9046] ? drm_dev_exit+0x41/0x60 [ 111.503847][ T9046] ? drm_dev_exit+0x41/0x60 [ 111.505757][ T9046] drm_ioctl_kernel+0x1f3/0x3e0 [ 111.507795][ T9046] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 111.510335][ T9046] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 111.512149][ T9046] drm_ioctl+0x5e6/0xc60 [ 111.513559][ T9046] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 111.515542][ T9046] ? __pfx_drm_ioctl+0x10/0x10 [ 111.517120][ T9046] ? selinux_file_ioctl+0x139/0x290 [ 111.518898][ T9046] ? selinux_file_ioctl+0xb4/0x290 [ 111.520632][ T9046] ? __pfx_drm_ioctl+0x10/0x10 [ 111.522232][ T9046] __x64_sys_ioctl+0x18e/0x210 [ 111.523842][ T9046] do_syscall_64+0x106/0xf80 [ 111.525422][ T9046] ? clear_bhb_loop+0x40/0x90 [ 111.526991][ T9046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.529011][ T9046] RIP: 0033:0x7fb9a979c799 [ 111.530486][ T9046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.536669][ T9046] RSP: 002b:00007fb9aa6de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.539462][ T9046] RAX: ffffffffffffffda RBX: 00007fb9a9a15fa0 RCX: 00007fb9a979c799 [ 111.542163][ T9046] RDX: 0000200000000780 RSI: 00000000c01864cb RDI: 0000000000000007 [ 111.545437][ T9046] RBP: 00007fb9a9832c99 R08: 0000000000000000 R09: 0000000000000000 [ 111.548702][ T9046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.551694][ T9046] R13: 00007fb9a9a16038 R14: 00007fb9a9a15fa0 R15: 00007ffd825590f8 [ 111.554384][ T9046] [ 111.555598][ T9046] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 111.558089][ T9046] CPU: 3 UID: 0 PID: 9046 Comm: syz.1.819 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.561559][ T9046] Tainted: [L]=SOFTLOCKUP [ 111.562903][ T9046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.565999][ T9046] Call Trace: [ 111.567064][ T9046] [ 111.568039][ T9046] dump_stack_lvl+0x100/0x190 [ 111.569550][ T9046] vpanic+0x552/0x970 [ 111.570859][ T9046] ? __pfx_vpanic+0x10/0x10 [ 111.572398][ T9046] panic+0xd1/0xe0 [ 111.573635][ T9046] ? __pfx_panic+0x10/0x10 [ 111.575103][ T9046] ? check_panic_on_warn+0x1f/0x90 [ 111.576825][ T9046] check_panic_on_warn.cold+0x19/0x34 [ 111.578584][ T9046] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 111.580590][ T9046] __warn.cold+0x191/0x348 [ 111.582060][ T9046] __report_bug+0x296/0x3d0 [ 111.583559][ T9046] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 111.585559][ T9046] ? __pfx___report_bug+0x10/0x10 [ 111.587201][ T9046] ? __lock_acquire+0x4a5/0x2630 [ 111.588830][ T9046] ? __lock_acquire+0x4a5/0x2630 [ 111.590452][ T9046] ? __lock_acquire+0x4a5/0x2630 [ 111.592093][ T9046] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 111.594092][ T9046] report_bug+0xb2/0x220 [ 111.595498][ T9046] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 111.597504][ T9046] handle_bug+0x16a/0x2a0 [ 111.598923][ T9046] exc_invalid_op+0x17/0x50 [ 111.600425][ T9046] asm_exc_invalid_op+0x1a/0x20 [ 111.602010][ T9046] RIP: 0010:__alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 111.604190][ T9046] Code: 00 45 31 c9 49 83 bc 24 70 05 00 00 00 4c 89 4c 24 50 0f 85 5f f8 ff ff c6 44 24 10 00 e9 f3 ea ff ff c6 05 22 7c 5a 0e 01 90 <0f> 0b 90 e9 69 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 111.610311][ T9046] RSP: 0018:ffffc90003b9f738 EFLAGS: 00010246 [ 111.612277][ T9046] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 111.614816][ T9046] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 111.617368][ T9046] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 111.619918][ T9046] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0 [ 111.622480][ T9046] R13: 1ffff92000773f36 R14: 0000000000000015 R15: 1ffff92000773f00 [ 111.625027][ T9046] ? find_held_lock+0x2b/0x80 [ 111.626565][ T9046] ? is_bpf_text_address+0x8a/0x1a0 [ 111.628271][ T9046] ? is_bpf_text_address+0x8a/0x1a0 [ 111.630007][ T9046] ? bpf_ksym_find+0x128/0x1c0 [ 111.631615][ T9046] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 111.633608][ T9046] ? is_bpf_text_address+0x94/0x1a0 [ 111.635318][ T9046] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 111.637376][ T9046] ? __kernel_text_address+0xd/0x30 [ 111.639067][ T9046] ? unwind_get_return_address+0x59/0xa0 [ 111.640868][ T9046] ? tomoyo_path_number_perm+0x46d/0x580 [ 111.642705][ T9046] ? stack_trace_save+0x8e/0xc0 [ 111.644304][ T9046] ? __pfx_stack_trace_save+0x10/0x10 [ 111.646038][ T9046] ? stack_depot_save_flags+0x27/0x9d0 [ 111.647812][ T9046] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 111.649730][ T9046] ? policy_nodemask+0xed/0x4f0 [ 111.651361][ T9046] alloc_pages_mpol+0x1fb/0x550 [ 111.652946][ T9046] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 111.654683][ T9046] ? drm_syncobj_array_find+0x34/0x3b0 [ 111.656454][ T9046] ___kmalloc_large_node+0x104/0x150 [ 111.658185][ T9046] ? find_held_lock+0x2b/0x80 [ 111.659744][ T9046] __kmalloc_large_node_noprof+0x1c/0x70 [ 111.661603][ T9046] __kmalloc_noprof+0x5be/0x850 [ 111.663198][ T9046] ? avc_has_extended_perms+0x484/0x1080 [ 111.665035][ T9046] drm_syncobj_array_find+0x34/0x3b0 [ 111.666751][ T9046] drm_syncobj_query_ioctl+0x25d/0xb70 [ 111.668527][ T9046] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 111.670468][ T9046] ? find_held_lock+0x2b/0x80 [ 111.672019][ T9046] ? drm_dev_exit+0x41/0x60 [ 111.673506][ T9046] ? drm_dev_exit+0x41/0x60 [ 111.674956][ T9046] drm_ioctl_kernel+0x1f3/0x3e0 [ 111.676554][ T9046] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 111.678501][ T9046] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 111.680246][ T9046] drm_ioctl+0x5e6/0xc60 [ 111.681634][ T9046] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 111.683584][ T9046] ? __pfx_drm_ioctl+0x10/0x10 [ 111.685154][ T9046] ? selinux_file_ioctl+0x139/0x290 [ 111.686846][ T9046] ? selinux_file_ioctl+0xb4/0x290 [ 111.688524][ T9046] ? __pfx_drm_ioctl+0x10/0x10 [ 111.690090][ T9046] __x64_sys_ioctl+0x18e/0x210 [ 111.691696][ T9046] do_syscall_64+0x106/0xf80 [ 111.693206][ T9046] ? clear_bhb_loop+0x40/0x90 [ 111.694744][ T9046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.696653][ T9046] RIP: 0033:0x7fb9a979c799 [ 111.698151][ T9046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.705878][ T9046] RSP: 002b:00007fb9aa6de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.709334][ T9046] RAX: ffffffffffffffda RBX: 00007fb9a9a15fa0 RCX: 00007fb9a979c799 [ 111.712600][ T9046] RDX: 0000200000000780 RSI: 00000000c01864cb RDI: 0000000000000007 [ 111.715859][ T9046] RBP: 00007fb9a9832c99 R08: 0000000000000000 R09: 0000000000000000 [ 111.719133][ T9046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.722399][ T9046] R13: 00007fb9a9a16038 R14: 00007fb9a9a15fa0 R15: 00007ffd825590f8 [ 111.725650][ T9046] [ 111.727616][ T9046] Kernel Offset: disabled [ 111.729408][ T9046] Rebooting in 86400 seconds..