last executing test programs: 1m52.897071808s ago: executing program 1 (id=6): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x6, 0x2ffffffff}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x21) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="02c8000200060001000ae002"], 0xf) r5 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)="2f9374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) flock(r4, 0x5) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r7, 0x18000000000002a0, 0xeff, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x2100, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x2b, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000004d5d000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000080000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000183a000001000000000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000006a780000fcffffff185400000f0000000000000000000000185c000007000000000000000000000018130000", @ANYRES32=r6, @ANYBLOB="0000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x2, 0x10001, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r6, r7, r1], 0x0, 0x10, 0x5, @void, @value}, 0x94) connect$inet(r3, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r8, 0x89f0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "bb40af00008000"}) close(r3) 1m52.260806264s ago: executing program 1 (id=14): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e00)=@newtaction={0x64, 0x30, 0x1, 0x3, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0x9, 0x10000000, 0x3, 0x20}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0xffffffffffffffc8}}, 0x1006) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x104, 0x24, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xf, 0x1}, {0x10, 0xfff1}, {0x7, 0xfff6}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3b, 0x1, 0x8}}}}, @TCA_RATE={0x6, 0x5, {0xf8, 0x3}}, @TCA_STAB={0xa0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x2, 0x2, 0x8, 0x2, 0x7, 0x40, 0x2}}, {0x8, 0x2, [0x65a, 0x4667]}}, {{0x1c, 0x1, {0x7, 0x4, 0x4, 0x9, 0x2, 0x2c, 0x1, 0x4}}, {0xc, 0x2, [0x1, 0x1, 0x5, 0x9]}}, {{0x1c, 0x1, {0x4, 0x8, 0x1, 0x294, 0x2, 0x8000, 0x3b, 0x6}}, {0x10, 0x2, [0x7, 0x4, 0x5b, 0x9, 0x5, 0x200]}}, {{0x1c, 0x1, {0x1c, 0x0, 0x80, 0x4256, 0x0, 0xa1d, 0x2, 0x1}}, {0x6, 0x2, [0xcb]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xd0}, @TCA_EGRESS_BLOCK={0x8}]}, 0x104}}, 0x4) r4 = signalfd4(r1, &(0x7f0000000280)={[0xfffffffffffffffa]}, 0x8, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000170000004c0006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987ccb819890400050008000600"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xf4, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe66c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x83c9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x35}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x71}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m52.181594361s ago: executing program 1 (id=15): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x226000, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@mpls_getroute={0x24, 0x1a, 0x1, 0x70bd27, 0x25dfdbfe, {0x1c, 0x10, 0x14, 0x2, 0xff, 0x0, 0xc8, 0x3, 0x1600}, [@RTA_DST={0x8, 0x1, {0x200, 0x0, 0x1}}]}, 0x24}, 0x1, 0x0, 0x0, 0x8890}, 0x2) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f00000002c0)={0x0, 0x0, 0xa, 0x5}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x549900, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x7) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ec0)={{r2}, &(0x7f0000001e40), &(0x7f0000001e80)}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x6, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x8800) sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x104, 0xb, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_DATA={0x80, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x18}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xa2}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xd}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x4}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_batadv\x00'}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1m52.180930242s ago: executing program 1 (id=16): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)=ANY=[@ANYBLOB="12011001000000202505a8a4720b1c25030109021f000101ff8008090400fd010701010109050102"], 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mount(&(0x7f00000001c0)=@sg0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='cifs\x00', 0x18, &(0x7f0000000380)='\x00') setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000040)=0xb, 0x4) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x4) mknodat$loop(r2, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x24000, 0x28) unlinkat(r3, &(0x7f00000003c0)='./bus\x00', 0x0) unlink(&(0x7f0000000200)='./file1\x00') syz_usb_control_io$printer(r0, &(0x7f0000001100)={0xffffffffffffff80, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2e, @string={0x2e, 0x3, "8bca3e7e6eac1395f6d8b6a37af1972f771bc5795cb043b7a77d34cd7a14a116ddbf740e00b12f7fc2a3f60e"}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003d00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)={0x20, 0x0, 0x4, {0x2, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x10e) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000000840)={0x2020}, 0x2020) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 1m50.311849941s ago: executing program 1 (id=50): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa4, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0x6e}}}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x533}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x132}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_WME={0x4c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4f}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xd0}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xbe}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) sendmsg$AUDIT_SET(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x3e9, 0x402, 0x70bd2b, 0x25dfdbfb, {0x44, 0x1, 0x1, r2, 0x98, 0x8, 0xdf0f, 0x7, 0x0, 0x5, 0x8}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x9, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000006c0)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x6, 0x2, 0xa}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000700)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000780)={r5, r9, 0x9, 0x3, 0x7}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000007c0)=0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000800)={0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000840)={0x1, 'batadv_slave_1\x00', {}, 0x80}) ioctl$DRM_IOCTL_MODE_GETPLANE(r10, 0xc02064b6, &(0x7f00000008c0)={0x0, r8, r3, 0x0, 0x0, 0x1, &(0x7f0000000880)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r10, 0xc02064b9, &(0x7f0000000a00)={&(0x7f0000000980)=[0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, r4, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f0000000c40)={&(0x7f0000000a40)=[0x0], &(0x7f0000000a80)=[{}, {}, {}, {}], &(0x7f0000000bc0)=[0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x2, 0x1, 0x0, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r10, 0xc03864bc, &(0x7f0000000d40)={0x600, 0x2, &(0x7f0000000900)=[r11, r7], &(0x7f0000000940)=[0x300, 0x3, 0x4, 0xc82], &(0x7f0000000cc0)=[r12, r13], &(0x7f0000000d00)=[0x2a, 0x3, 0x1, 0x8, 0x1], 0x0, 0x4}) write$qrtrtun(r0, &(0x7f0000000d80)="3b5ec2b107b3a3815fdd94f75427e6e99dbb2a92bd1802318fbac6483f203ec778914b56901285543c8d6cba2920792f46556f77d8be23c9b85b4db75c13f0cce9794fa517545ea17ec43031dbd0f6e3f3684ba82559", 0x56) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000e00)=0x236f) close(r10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r10, 0xc01064b5, &(0x7f0000000e80)={&(0x7f0000000e40)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000fc0)={&(0x7f0000000ec0)=[0x0, 0x0], &(0x7f0000000f00)=[0x0], &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000f80)=[0x0], 0x2, 0x1, 0x4, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000001040)={r14, r8, r15, 0x0, 0x0, 0x4, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0]}) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000001080)=0x9, &(0x7f00000010c0)=0x4) r16 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r16, 0x84, 0x7, &(0x7f0000001100), &(0x7f0000001140)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001280)={'sit0\x00', &(0x7f0000001180)={'ip_vti0\x00', 0x0, 0x80, 0x10, 0xa8ca, 0x868, {{0x2d, 0x4, 0x2, 0x9, 0xb4, 0x65, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xa}, {[@timestamp={0x44, 0x10, 0x23, 0x0, 0x0, [0x7, 0x162, 0x8]}, @timestamp_addr={0x44, 0x3c, 0x36, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5f3b}, {@rand_addr=0x64010102, 0x7}, {@rand_addr=0x64010102, 0x8c95}, {@broadcast, 0x50}, {@dev={0xac, 0x14, 0x14, 0x44}, 0xffffffff}, {@private=0xa010102, 0x1}]}, @end, @ssrr={0x89, 0xf, 0xa, [@multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0x81, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x564}, {@local}]}, @rr={0x7, 0x13, 0x19, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote, @broadcast]}, @timestamp_prespec={0x44, 0x1c, 0xf8, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@private=0xa010101, 0x4}, {@remote, 0x8}]}, @noop]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, r17, 0x25, 0x8, @val=@netfilter={0x2, 0x0, 0x1, 0x1}}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001300)={'bridge_slave_1\x00', 0x10}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001340)={'wlan1\x00'}) 1m49.441093076s ago: executing program 1 (id=65): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x16, 0xa01, 0x0, 0x25dfdbfc, {0xa}, [@generic="a32720a95cc7787a1bee670f2ec8d007d618239fbf5e172f30f82c11853810074037fe759c3c0fce7ddc98bdeb9d3d2cc49d", @typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x50}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x16, 0xa01, 0x0, 0x25dfdbfc, {0xa}, [@generic="a32720a95cc7787a1bee670f2ec8d007d618239fbf5e172f30f82c11853810074037fe759c3c0fce7ddc98bdeb9d3d2cc49d", @typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x50}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1) sendmsg$nl_generic(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x24000000) 1m49.379811487s ago: executing program 32 (id=65): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x16, 0xa01, 0x0, 0x25dfdbfc, {0xa}, [@generic="a32720a95cc7787a1bee670f2ec8d007d618239fbf5e172f30f82c11853810074037fe759c3c0fce7ddc98bdeb9d3d2cc49d", @typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x50}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x16, 0xa01, 0x0, 0x25dfdbfc, {0xa}, [@generic="a32720a95cc7787a1bee670f2ec8d007d618239fbf5e172f30f82c11853810074037fe759c3c0fce7ddc98bdeb9d3d2cc49d", @typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x50}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1) sendmsg$nl_generic(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x24000000) 1m11.851316536s ago: executing program 4 (id=640): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x40bb, r2}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) (async) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x38) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newsa={0x104, 0x10, 0xeac0e19b6999623b, 0x0, 0x0, {{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0x11}, 0x4d4, 0x2b}, @in, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0xfd}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000f0000001c0007800c000400002e0000000000000c0003"], 0x30}}, 0x0) (async) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{}, 0xffff}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{0x4}}}], 0xc4) (async, rerun: 64) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000000)) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000001000010427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000180c20000000000140012800b0001006c6f7770616e"], 0x60}}, 0x0) 1m11.791534583s ago: executing program 4 (id=641): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x20, 0x20, 0x400f86f, 0x1, {{0x6, 0x4, 0x1, 0x27, 0x18, 0x64, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@ra={0x94, 0x4}]}}}}}) modify_ldt$write(0x1, &(0x7f0000000000)={0x1001}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m11.791227655s ago: executing program 4 (id=642): capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3}) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0xff], 0x0, 0x0, 0x1}}, 0x40) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1b0008000000000000000000e0000000000000005a3190cc6ec3ea1e965a85ecafce6fa91704ae46b260f00f642a75b46fa81d53bc0ee15c8e37cc0e5959aa1b5d2ff3d34a47b01c840d46c752225a3ac20f6e1f6430a1a6613efee10e8bb8ca9ec3bbeee5851fa37619abd509fa8872f74d682db3568a97c8988fde6d069462f87a1ae311af971762fa13ca78c4cc9a7f5199fd57f28b49a2b30595865a5c0fcebbfd2aaa4c1af26565", @ANYRES32=r0, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="01000000010000000300"/28], 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x10, 0xfffffe01, 0x1, @empty, @remote, 0x20, 0x7800, 0x1, 0x4}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000000640)='fscache_relinquish\x00', r0, 0x0, 0x10001}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x13, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf47, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x0, 0xb, 0x2, 0x0, 0x8, 0xfffffffffffffff8}, @call={0x85, 0x0, 0x0, 0x20}, @map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x8, 0x6a, &(0x7f0000000340)=""/106, 0x81f00, 0x2b, '\x00', r3, @fallback=0x1, r0, 0x8, &(0x7f0000000180)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xc, 0x4, 0x1}, 0x10, 0xffffffffffffffff, r0, 0x7, &(0x7f0000000480)=[r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f00000004c0)=[{0x1, 0x4, 0x1, 0x8}, {0x2, 0x2, 0x7, 0x1}, {0x2, 0x1, 0xa, 0x7}, {0x5, 0x2, 0xe, 0xb}, {0x1, 0x1, 0x10, 0x5}, {0x5, 0x1, 0x5, 0xc}, {0x1, 0x4, 0xa, 0xc}], 0x10, 0x5, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000001, 0x0, &(0x7f0000006680)=0x83) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)='./file1\x00') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f8ffffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed000062030000000000f53e440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c500000057bd81cb2af0b176275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e5b5b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb9134658fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9a958f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f94fefe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e924d6b1594af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e70300000000000000fee18a22da19fcdb4c2890cda1f96b952511e34cb14ea4a10a6f1dbaa69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde20300accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933f638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00000000000000003542591d17b5e8d9be772914cf4e3129e7929aa238bd99c3ddd895e33d8cf6c3d6cc883f0319aec94fb4cffde7a6d1fa1bcc03ead3912c2a68ca172adf3f9417207ea83d03a108d2ae15ee38c06dc98a0d1696b7c7fe142440776889154a93888972462439ae33b24c90e13c8f80d4e32716e96825d7bbdd97e4bae368d009b4611619a778f547fa1c92cc656a89728a6a1758b98fd27e1f5e1b446506d8947ca82bac7c2f00"/2663], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m11.711578899s ago: executing program 4 (id=643): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000040)=0x7ff, 0x4) 1m11.710623916s ago: executing program 4 (id=644): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4900, 0x30a8a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10004}, 0x4080) r3 = socket(0x15, 0x5, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r4, 0xc008551c, &(0x7f00000006c0)={0x7, 0x8, [0x8, 0xab86]}) getsockopt(r3, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r5 = socket(0x3, 0x4, 0x10001) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000180)={[{}, {@subsystem='blkio'}]}) modify_ldt$read(0x0, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r7) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xe2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x6000004}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002140)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002100)={&(0x7f0000000300)=@newtfilter={0x1de8, 0x2c, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xc}, {0x9}, {0x9, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x8}}, @filter_kind_options=@f_cgroup={{0xb}, {0x1db0, 0x2, [@TCA_CGROUP_POLICE={0x48, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x3, 0x0, 0xfffffe01, 0xa, {0x8, 0x0, 0x0, 0x93e2, 0x40, 0x71}, {0x0, 0x0, 0x4, 0x4, 0x3, 0x3}, 0x0, 0x3, 0x1}}]}, @TCA_CGROUP_EMATCHES={0x72c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x464, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xf801}, {0x764, 0x1, 0x3ff, 0x4, 0x4, 0x1}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0xd68}, {0xffff8000, 0x5, 0x10001, 0x4}}}, @TCF_EM_IPT={0xf8, 0x2, 0x0, 0x0, {{0xa37, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_DATA={0xd2, 0x5, "c167b9e9f972746697286d7f4d3dc119640bf5fd7c0a349e9b4bc74a23b0cf75fedcb23f300456ef934529a19357304f46e3fb500e1bf96af06e66909bc79a34cb7c90501fd33e775bfd78f47e1e2493fd7e10ead0b049ab1d4e7f4e3224e8b2e2033b2a8e6edaf43b7f285fee44e7320a79553b3103a8bea9a5eeb788c5afa591bccce25343e2b52f10e0c3ef97fe66e3aa4b579ce153d3d5713ef9e54d29b70e7c731d83db27f84f0f9ead4d454a00d8dfb6f20901844d9c14ca75d2c264e28c14697412e77a13d9203c4ac382"}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5a, 0x3, 0x4}, {0x1, 0x10001, 0xfffffffd, 0x1}}}, @TCF_EM_IPT={0x188, 0x2, 0x0, 0x0, {{0xf, 0x9, 0x3}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0xd0, 0x5, "cf75c2f89ea33a33868111c95f8ea9fd3c33f73b717d44bc791d0b080d0edea2bf89e3c577fb1092fa92a0ce154b55a6a02718bdc269dc349e162af9c340699dcd9550ea75249ce725ac4ecddcd0fc2aebf4f2f5b23e04aad2bc9f188100e0ec95893c8cdfc0a81b23131ac92fa494f4ab67fb9fee439b5d62575b94ee99ada765b9dba0dabd5518641d6ac4c13ee8ed3528b2a9886abefc6caf72984620886034aaf1329d4cc74661995fd30804ce314bcca6c85863967c05037b946b0a9945e914a1ea3e75f64ef64cdc70"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_DATA={0x92, 0x5, "faf6363a6887385999bda772d4efaf939160246b687a6e6c5b62084473437f31a88eac01c9c7f8ce2f408bcade8a1a91cbfa5aabce67387b6f577784bc53e6276ffaf273a8d9e18e05dcf63a52e166ae464feb35e5f2b674f2b47357fbe8fd3113739dd7b30f8f999a8c2459914ab3ec53eb13274b5f9b4aa08588106f6431485d1d43dbacaf691bf949e545832d"}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x3280, 0x3, 0x7f73}, {0x7, 0x10000, 0x3, 0xa1a}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0x8}, {0xfffffff8, 0x3, 0x3, 0x56}}}, @TCF_EM_CONTAINER={0x54, 0x1, 0x0, 0x0, {{0x6, 0x0, 0x1}, "dc9905276b8de0221c804cc93384a74470d345f70f1a1f7a425a1d0a43869f648255f642b17fd2ef8153d676e264b08d42b3e80ef72b7f166b3f9acc772ebd3f052c730f758c97"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8001, 0x8, 0x3}, {0x1, 0x0, 0x8}}}, @TCF_EM_CONTAINER={0xf4, 0x1, 0x0, 0x0, {{0x49, 0x0, 0x5}, "e260576ac72a02fd4b576e20df476aa3651f691c31076229a14c8cf00153a1c04c5d88fca3f37ede2a7cda39c09089e653e220df49e8df3182b4631d2273ce2d180bb849cba36dbca2fb74755aab3d2f68d8f28e5a9a6214c819b38eb30d8f6c020f3dfdcc1ae6d6ce9b898914a8f61a9e7826d0b2132c4a51b1a15b441059c208d4c609b68830f156b7091a6680704fca6b74f869d18ae838c4555efb11e3cb9f954aac390c5f6ab309d71ff3a73c1494b8567d10c3c524091b758a847b79253ca2f4a3d263c1822bbb1b9d6239b2f4410b880436ffa07aa8900b538c92e9d133829bd6895c4072"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x101}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_LIST={0x1e8, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x400, 0x3, 0xc32}, {0x0, 0xd09, 0x6, 0x80000000}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1c, 0x8, 0x82a4}, {0x1, 0x4}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0x5}, {0x80000000, 0x9, 0x3025, 0x7222}}}, @TCF_EM_IPT={0x20, 0x3, 0x0, 0x0, {{0x200, 0x9, 0x200}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_META={0x10, 0x3, 0x0, 0x0, {{0x61, 0x4, 0x9}, [@TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}]}}, @TCF_EM_IPT={0x16c, 0x3, 0x0, 0x0, {{0x200, 0x9, 0x6}, [@TCA_EM_IPT_MATCH_DATA={0x8a, 0x5, "4e040c65d852875811b9ee0cceb554254cf9a5f0261f1f69ef423413462e6baee788791c224f56a20fe42283d74e837d0d2fec3c3885d4ab69fe6f2e0914dab2d0c7b88c6159e59dbcda669c840faf2d667284c602139b23622865e2ad0f83c01e2b5626c4837332906b33ae33548b9c7e93d1b80498a07b1bc8914c1b1190d7ac23a8e1ec9a"}, @TCA_EM_IPT_MATCH_DATA={0xb5, 0x5, "4b5b5f93d0042b947e31bf39ed48c6eb59b4927edc41ff14ba6b70e8e65aa9f06b4844b1278bcdb44c7c3fe82b083b5c1188c1c06c80a92fc6e5a7065f00a26e4fa2862686db8829ae07a7acebe31a84523be8d8997a64c32a52c05a6028bf4149bda2ff66ad4fd5647008c7a546084960bdfd1a67931ccb2298ac949164d3a5d7c9525d825fe7d7046d9d33921d1858c0d88c7318f335ba84df759d79b207591d61a4f53363029f59c543f97572a5a4af"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4d}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0xa4, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xb, 0x7, 0x10}, {{0x1, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x8c, 0x3, 0x0, 0x0, {{0xff, 0x0, 0xffff}, "c8559dfeab082402d3f49064e7a9b141f27137b05a0d5c60eb51fcf4f812533c9757984ec7e1ec1333ef32241f115223ddc2bafeece1c05b03d06d9445b49596abcfd28667f129809b9d12d4eceb5c786f9c20563e0bdf40b38d66673fa1b7b80f5d5ee1c17f0f540e8c892f70aa145bc18341eb45be9de117b301d1cd7dab"}}]}]}, @TCA_CGROUP_EMATCHES={0x1344, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x88, 0x2, 0x0, 0x0, {{0x81, 0x9, 0x100}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x62, 0x5, "cb75bd8c97ce1f28c0f4d213ab481218f959ab4f069fbeb90f9111049840ec9063dd0ed26087b1e6febe22dfe22bf404086530bc2d81fbdf4b69708b887d94f504330839983bac360ef6a8b7e063840b4eda0ff5e7997e7aafb29d9dd9ec"}]}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0xaa, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x31a}}, @TCA_EMATCH_TREE_LIST={0x23c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xfff9, 0x8, 0x6}, {0x4, 0x5, 0x3}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7, 0x1, 0x14}, {0x7ff, 0x1, 0x4, 0x2, 0x9, 0x0, 0x2}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x1, 0x2, 0x4}, {0x2, 0x2, 0x2, '9w'}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x4, 0x2, 0x3ff}, {0x2, 0x7, 0x2, "63a185b46cd806"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0x5}, {0xffffff13, 0x3ff, 0x5, 0xfffffffb}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x1, 0x2, 0x5}, {0x1, 0x1, 0x0, "8f"}}}, @TCF_EM_IPT={0x1b4, 0x3, 0x0, 0x0, {{0x4, 0x9, 0xf4}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x8f, 0x5, "4a3936beb93297de51478d0bc340d5d193b7bed6d1fb7626de58739efc6ead89396750620213a75d45d783eaf251bd4f0a5988e1daf9648083e0e30ec44527f61d78e5c00ef05b5a1458922384c613aa5aa36e10f0bfa9316c17deee386355587f943c4184b0b4a642c1ff19b12f600f989d32ebb3ea4d07df1c0f206bf76bd50d1917211f2770b774ce9c"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_DATA={0xe2, 0x5, "92651c584e9fa9c9756222a926c1120ca76a782721ab65fdbcd5dc60fb2d29031ad72a8e22ffc40e986faf4fd2b28fa66e3b66fb1e6d3e43cb312f74b711744f13d989363b2c7eb1353eb3b371216c95c9e8cb78291055c7ddcea17d13839954891bfb28d45a1b40db3d5f7dfd8a77ff381113dbcd4341c38c05f576b980faba22cf0042eafa452d51bce52d55674995e14ce1fc2a65d1b838c7de14512a44b95271c3010a80d67898106a4492a82a14cd9310c65fb80416cdea227aa627684658795540c8f45e919d98413c6c4c0e80e1c783ae409d8f52b785d90ca7f8"}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x1034, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x40, 0x2, 0xb672}, {0x5, 0x5, 0x2, "d903474f5c"}}}, @TCF_EM_IPT={0x1018, 0x2, 0x0, 0x0, {{0x4000}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "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"}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_CGROUP_ACT={0x23c, 0x1, [@m_xt={0xdc, 0x15, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}]}, {0x87, 0x6, "d37c1bae68b2c084e3e26319b6b80ef0168c0794294a505e2bc488bf2d5b6eab3bd7dfb911917fb259e877baef79aff6dd759829b3d993066204f3c8542c57bf8168b5f00abafb16fafa12ee205b269d529becd9ae00c681d32c1aa277bf40b67faa37e58b9f9489c532c1f18acd18af6b2156e8389f263b923d3e73eca28af7a13f30"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x98, 0x14, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}]}, {0x59, 0x6, "40de9bacdb45331b2de806e2582020075968872d485eb7c2ab20e1557320da5bcfabae421e192f7f7a155e3635f05de88743209601bc36258dfb49dc956f2a888483a352d62b2a922133df5d19ad4c3669203431c7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0xc4, 0x5, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x14, 0x4, [{0x5, 0x10, 0xa, 0x1000}, {0xe, 0x5, 0x5, 0x18}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x6f, 0x6, "387c77f36e3dede9d7ed7ccfe054301cb25d65dc1b54c49d168fb60f798b77c7ea096505ded9d14acf88022d4cc498ce1b5f7c67489cef106153f87e651359d17d3bb5d8fedc0cef762b4f7ef19214b23f7756587c892f011d40223fa7234ea1e85e69fad2e33d19ffff15"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_CGROUP_ACT={0xb8, 0x1, [@m_ctinfo={0xb4, 0x13, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xff78, 0x9, 0x0, 0x1ff, 0x9}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x800}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x80000001}]}, {0x58, 0x6, "35fb2ae013b2b28296315b06f7ff5bd3d451c4f0ed822ba527e9d877fea6fe75bbeae011c7e48b171e029082edd57cf03291490b74a84f1fda67d1309207b5b4ed4cf7f1b7df966fe6aa3731794f98a7a90db3ed"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x1de8}, 0x1, 0x0, 0x0, 0x44000}, 0x8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$SIOCX25GCAUSEDIAG(r5, 0x89e6, &(0x7f0000000280)={0x8, 0x5}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x5, 0xfb95, 0xc, 0xeb69}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000001c0)={r10, 0x974b}, &(0x7f0000000240)=0x8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m11.62149259s ago: executing program 4 (id=645): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', &(0x7f0000000180), 0x0, 0x0) 56.641734829s ago: executing program 33 (id=645): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', &(0x7f0000000180), 0x0, 0x0) 35.820469314s ago: executing program 3 (id=1210): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) (async, rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) (rerun: 32) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000040)=0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x2002, 0x6, 0xfffffffd, 0x46, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x0) (async, rerun: 32) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x3}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (rerun: 32) 35.690949441s ago: executing program 3 (id=1212): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r1, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af25, &(0x7f0000000040)={0x1, 0x6}) 35.689489584s ago: executing program 3 (id=1213): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="eb4468afb93315c97949a10bdc732064a64651d9532eb6066925f2e1e85e36a94998ab23a96c817ec3b53a39f8b6f2db4cc4adb0c1d521b36669e8b6aa1d5f670a8239bba2cd4792252a53b3cb704baf0fa5a2d0a5dc54989e9420756293f1af13f6d27a1ea4a9b6d3fea99a00588b30c2b8444ae5eaf1c84946dd141584e029f369c804d1c1974a035a30a909fb8ca4fd6c24136613e25d0e1eaa39b676206ade03eedfc949c07fe4c475aa3d9b1feba9c5596b60", 0xb5}, {&(0x7f0000000100)="619abb608f1b933f325c3a05b5db0e3ad630e93b01d68b76b193531ac87f44fb2144bfbc892096e5353bb8045e663d043ae65220136e8f5d6ba4852bf222a67e2a8f7fb6c9b65c655832e471d2f8f347a8fb2ee50f99b77a6012259a1a4bf1993834bd689531e94544b565ed3161bfb3ac721e2700", 0x75}, {&(0x7f0000000180)="38d68a4fb048e7f307fc929babdae530ee27b7c588f348880efdd670d15fbb4e1bfbd1dd29910b9c578e9891d1ad1daef9a8669c318b7928d21e8128d97d9fd2dff0c95d2802c04850e48b6993be839b0f652eb276a89695e49397963e105e56fcfa7b3b51db03e772454567a84b8a75226dcb93c185a6f5f5", 0x79}, {&(0x7f0000000200)}, {&(0x7f0000000240)="f37c1aac3aa3277bdef4e616f58dd2e85507da441881a0a163c60381986ad7a0d351bc71c0ba0ab412d31209ce851d841990ba3d402d16b4a0160eed9070dacba064987e26beb963284d952d54192846550eaad1fb08e0c2ea37c3", 0x5b}, {&(0x7f00000002c0)="a1cb8e88039c3540265138193d562e4922a5b1d2cd3f270d19a40cf777d2ac", 0x1f}, {&(0x7f0000000300)="fd4223c9d2c68988a331c49fa8a5f460cb3ed6855e67002b389a73e4386ad69c419d464004f557f32ffd73901199b415a69383aa8a113e5a84e5f89a7405f212c4f44a82b9cae891e34ec4ff69861027e96a8a1473c9a98184fd8b1d841f859acf60bc16f087975bfdffcd4a42b39d7869d936b51e08996d2812c6f811d8f4fa991bc53d706f161d448a15163c219d936fea4f94cade4cde4fdd9e80164e1903aa0e4c2529027268eaaaa318971d4a00933d1ac043815154b86d04bb12ca12c18186b5cda4531074c3bfc148a4079045aaa45277", 0xd4}, {&(0x7f0000000400)="3847ecc33f6aef3914ef1a671632c742562384f323f566b2e0fdeac20951114e60276803785704d599564526e707a75214c650b6335bcc9e7b0a38fb272739048dc38984e4b2163552cc70c40278800e7f55c71a2aadefc73bf57382b712fce99e9b2a2c589faa512f75b8b91ec4d602d793b9a36130a6ee3756795938b3", 0x7e}], 0x8, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x258300, 0x0) ioctl$SNDCTL_TMR_START(r1, 0x5402) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000580)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f00000005c0)) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x801, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x27, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff800}, [@map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @ldst={0x2, 0x2, 0x0, 0x5, 0x8, 0xffffffffffffffe8, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x79a}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000780)='GPL\x00', 0x3, 0x41, &(0x7f00000007c0)=""/65, 0x41000, 0x8, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0x10, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000900)=[{0x5, 0x1, 0xa, 0x2}, {0x4, 0x2, 0x3, 0x9}, {0x5, 0x2, 0x2, 0x7}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b00)={@ifindex=r3, 0x31, 0x1, 0x3d, &(0x7f0000000a00)=[0x0], 0x1, 0x0, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0], &(0x7f0000000ac0)=[0x0], 0x0}, 0x40) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000bc0)=@o_path={&(0x7f0000000b80)='./file0\x00', 0x0, 0x4008, r2}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b40)={@fallback=r1, r4, 0x7, 0xe, r5, @void, @value=r7, @void, @void, r6}, 0x20) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000c00), 0x4) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000c80), 0x80201, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c40)={@fallback=r9, r8, 0x18, 0x4, r4, @void, @value=r7, @void, @void, r6}, 0x20) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000dc0)={&(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x8, 0x5}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000e00)={0x2, r10, 0x7fffffff, 0x7ff, 0x5, 0x1, 0x9}) syz_open_dev$evdev(&(0x7f0000000e40), 0x7, 0x101000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000e80)={{0x1, 0x1, 0x18, r9, {0xfffff001}}, './file0\x00'}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@bloom_filter={0x1e, 0x6, 0x9, 0x6, 0x40, r4, 0x2, '\x00', r3, r11, 0x4, 0x3, 0x3, 0xe, @void, @value, @void, @value}, 0x50) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000f40)=[@in6={0xa, 0x4e23, 0x3, @private1, 0x7}, @in6={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x23}, 0xe}, @in6={0xa, 0x4e24, 0xfffffff7, @mcast1, 0x800}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}, 0x1}], 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000fc0)={r7, r3, 0x25, 0x10, @void}, 0x10) getsockopt(0xffffffffffffffff, 0x4, 0x8, &(0x7f0000001000)=""/119, &(0x7f0000001080)=0x77) sendmsg$NFQNL_MSG_VERDICT(r11, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xb8, 0x1, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFQA_EXP={0xa4, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000841}, 0x4000) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001240), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001280)={@map=r12, r7, 0x20, 0x2, r13, @void, @value=r8, @void, @void, r6}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000012c0)={@cgroup=r4, r8, 0x13, 0x4, 0x0, @void, @value=r13, @void, @void, r6}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000001380)={'syztnl1\x00', &(0x7f0000001300)={'syztnl2\x00', r3, 0x29, 0x2, 0x7f, 0xfffffffc, 0x7d, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x80, 0xfffc0000, 0xb3}}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={@ifindex=r3, 0xffffffffffffffff, 0x2d, 0x20, r4, @void, @void, @void, @value, r6}, 0x20) 35.637658553s ago: executing program 3 (id=1216): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x1, 0x7, 0x14, 0x3, 0x54085405, 0xf4b, 0x100000000000003, 0x4, 0x100feff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x105090, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r1, &(0x7f0000000340)=[{&(0x7f0000000380)=""/258, 0x102}], 0x1, 0x0, 0x0, 0x21) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x28, 0x3, 0x0, {0x4, 0x7, 0x0, '\xbc[:##[)'}}, 0x28) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000500), 0x8, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') r2 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f0000000080)='./file1\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x1, 0x7, 0x14, 0x3, 0x54085405, 0xf4b, 0x100000000000003, 0x4, 0x100feff}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x105090, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) preadv2(r1, &(0x7f0000000340)=[{&(0x7f0000000380)=""/258, 0x102}], 0x1, 0x0, 0x0, 0x21) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x28, 0x3, 0x0, {0x4, 0x7, 0x0, '\xbc[:##[)'}}, 0x28) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000500), 0x8, 0x0) (async) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') (async) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) (async) fallocate(r2, 0x0, 0x0, 0x1000f8) (async) 35.580617111s ago: executing program 3 (id=1218): r0 = syz_io_uring_setup(0xa26, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x10000}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x57, 0x0, 0x27}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007800800124000000000050015"], 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) io_uring_enter(r0, 0x5b3f, 0x0, 0x6, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = dup(0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000002180)='net/dev\x00') preadv(r6, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x29d3, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180), 0x767, 0x348800) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xea7}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4a4f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x41) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0xc, 0x2}]}, 0x34}}, 0x0) 35.100505045s ago: executing program 3 (id=1219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x34, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000000c0)={0x38, r7, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080080) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r1, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x47}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) writev(r0, &(0x7f0000000780)=[{&(0x7f00000000c0)="d059b13db7032cb30d1a8622971a24c019580f23a3039b5771ef5d1f3c0627c38256c5058b5f4c24964c55b2eef88fad1a613a2d69df02c62bb19a2f4b5492562e866299d9b54402d7fadd1d57c8d8dd52ad0141dd12d5aa0f0487100322016617ad8b34faf3461e5d766a00beb7da24e0ec19d760e654ead77105e8cbd4c455801a481ac16d8b9d92b94ebae3a77a03c21da9168b", 0x95}, {&(0x7f00000003c0)="710c368404e496fa710850f17be2f11d2d0402b6094e1f369842a3b6529a5010d70fe5c5659168f0706a7b5c0f1b113c4c413d4a126437cbdb828a87ea037d04e6ea0371d93cb98713da2c4b302cb5c2b3afb13d00b1ec0fd2dd0e688edee74d8367613a6ab85657ddd9a621673519b3f43928938b39c7ba8ade", 0x7a}, {&(0x7f0000000000)="27fc8249223462d8831020f2ae6a8167eb013741179635a814f9f182fcd0", 0x1e}, {&(0x7f0000000180)="0be5f0f17719f46c3167afc63f2dcacfe8fb8307ac9d9bbd78b4c884422094f3918260a528a60dc429", 0x29}, {&(0x7f0000000440)="d5f64eb2161b2802b8e9bb814b821b905a3a1e6ac1a9a647f8678b1effafc7b147e89f8edfa424718cf70dc78b5521c5fade86bf97f72b9d5981bb89c2173081d6e29eda66e87902273aa9fcd757c617ae6b3c6957ff4d41c6daf51527beb620ca06f8702b2218a185962d6e9166cd62def1440b0773aaf51116b2fe7745a7a37024c4c8a0caf1af054b7d313c1dad8cfdfeb584a3", 0x95}, {&(0x7f0000000500)="93ac52a98e1eace00b9e431bae2fcb4b7f748045d7367ee07469d62a443065bd81dab6fad0cf091d4109cfdf7962d56a2033f42e588230af5f2fcc6d1e400fc0ee3e4825c295e07d1bc87296c7903cc79e471151deb91349a0f2c8a8f6de3cf750a30dbd53490d79c1f923c1a79f9de6c7c0c1328442c270b878f9ea0a870b8521f4f0e244ced9e196e59a6a8f57f6fb", 0x90}, {&(0x7f00000005c0)="1acb1a1001dfb0c7a1550b55bfa1d84ba01db9db835fd393cbc16ff108bab149946715c432c2b3f4738576ec01132b5caa62ef05524ca85e8388b475b7428491cf3a07abcff82aed4c5a02931e89506af1c31280167da05fd0a89a2cf9b0f5bd", 0x60}, {&(0x7f0000000300)="6350b9fc48324311d728330a30132bad25fd7d78e1a7a2d0567a479cfb72e027604f965d38942c853fb110e505e93648a1fa3c8484e8669072", 0x39}, {&(0x7f00000006c0)="3fedc5ab5294a42b0d4de35f4cd9dcf970adb66b5c5cfa905b812fd2f0c1feeeef35359472efe6a9a759e44bf89d0108ff68a8bc92ba6b0828e15bea18658adbdcd578dd28c09be0212043f0c1d1499f43d15277f02df11f63fb224c9fa1bbca08ead3c7cba934f30fa6507f496e14ee5392817be1502faa80b09dd912015c3d96c454e63e1da4f4c6244e221419aec87572fe", 0x93}], 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000080abf1b0000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0x60}}, 0x0) 35.092531005s ago: executing program 34 (id=1219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x34, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000000c0)={0x38, r7, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080080) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r1, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x47}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) writev(r0, &(0x7f0000000780)=[{&(0x7f00000000c0)="d059b13db7032cb30d1a8622971a24c019580f23a3039b5771ef5d1f3c0627c38256c5058b5f4c24964c55b2eef88fad1a613a2d69df02c62bb19a2f4b5492562e866299d9b54402d7fadd1d57c8d8dd52ad0141dd12d5aa0f0487100322016617ad8b34faf3461e5d766a00beb7da24e0ec19d760e654ead77105e8cbd4c455801a481ac16d8b9d92b94ebae3a77a03c21da9168b", 0x95}, {&(0x7f00000003c0)="710c368404e496fa710850f17be2f11d2d0402b6094e1f369842a3b6529a5010d70fe5c5659168f0706a7b5c0f1b113c4c413d4a126437cbdb828a87ea037d04e6ea0371d93cb98713da2c4b302cb5c2b3afb13d00b1ec0fd2dd0e688edee74d8367613a6ab85657ddd9a621673519b3f43928938b39c7ba8ade", 0x7a}, {&(0x7f0000000000)="27fc8249223462d8831020f2ae6a8167eb013741179635a814f9f182fcd0", 0x1e}, {&(0x7f0000000180)="0be5f0f17719f46c3167afc63f2dcacfe8fb8307ac9d9bbd78b4c884422094f3918260a528a60dc429", 0x29}, {&(0x7f0000000440)="d5f64eb2161b2802b8e9bb814b821b905a3a1e6ac1a9a647f8678b1effafc7b147e89f8edfa424718cf70dc78b5521c5fade86bf97f72b9d5981bb89c2173081d6e29eda66e87902273aa9fcd757c617ae6b3c6957ff4d41c6daf51527beb620ca06f8702b2218a185962d6e9166cd62def1440b0773aaf51116b2fe7745a7a37024c4c8a0caf1af054b7d313c1dad8cfdfeb584a3", 0x95}, {&(0x7f0000000500)="93ac52a98e1eace00b9e431bae2fcb4b7f748045d7367ee07469d62a443065bd81dab6fad0cf091d4109cfdf7962d56a2033f42e588230af5f2fcc6d1e400fc0ee3e4825c295e07d1bc87296c7903cc79e471151deb91349a0f2c8a8f6de3cf750a30dbd53490d79c1f923c1a79f9de6c7c0c1328442c270b878f9ea0a870b8521f4f0e244ced9e196e59a6a8f57f6fb", 0x90}, {&(0x7f00000005c0)="1acb1a1001dfb0c7a1550b55bfa1d84ba01db9db835fd393cbc16ff108bab149946715c432c2b3f4738576ec01132b5caa62ef05524ca85e8388b475b7428491cf3a07abcff82aed4c5a02931e89506af1c31280167da05fd0a89a2cf9b0f5bd", 0x60}, {&(0x7f0000000300)="6350b9fc48324311d728330a30132bad25fd7d78e1a7a2d0567a479cfb72e027604f965d38942c853fb110e505e93648a1fa3c8484e8669072", 0x39}, {&(0x7f00000006c0)="3fedc5ab5294a42b0d4de35f4cd9dcf970adb66b5c5cfa905b812fd2f0c1feeeef35359472efe6a9a759e44bf89d0108ff68a8bc92ba6b0828e15bea18658adbdcd578dd28c09be0212043f0c1d1499f43d15277f02df11f63fb224c9fa1bbca08ead3c7cba934f30fa6507f496e14ee5392817be1502faa80b09dd912015c3d96c454e63e1da4f4c6244e221419aec87572fe", 0x93}], 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000080abf1b0000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0x60}}, 0x0) 1.159484702s ago: executing program 6 (id=1413): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x63) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) timer_delete(0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @pic={0xfc, 0xff, 0x0, 0x10, 0x0, 0x44, 0x5, 0x3, 0x0, 0x0, 0x20, 0xfd, 0x4, 0x0, 0xff}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x4c, r4, 0x1, 0x703d2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004010}, 0x810) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x10201, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xca9, 0x0, 0x9e, 0xffffffff7ffffffd, 0x1, 0x0, 0x2004c9, 0xa, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fff], 0x2000, 0x2c0f10}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.090694839s ago: executing program 0 (id=1415): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) (async, rerun: 64) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (rerun: 64) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) (async) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) (async, rerun: 64) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (rerun: 64) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r4}, &(0x7f00000005c0)=""/66, 0x42, &(0x7f0000000340)={&(0x7f0000000280)={'crc32c-generic\x00'}}) (async) syz_fuse_handle_req(r0, &(0x7f0000002300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0x1, 0x7, 0x0, '\x00', {0x7ff, 0x0, 0x4, 0x8000, r2, r3, 0x8000, '\x00', 0x1, 0x4, 0xf8c4, 0x2, {0x8003, 0x8}, {0xd}, {0x0, 0x40004}, {0xff, 0xa00}, 0x8000, 0x6, 0x4, 0x6}}}}) (async) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x29418430}}, 0x50) 1.090025547s ago: executing program 0 (id=1417): sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) (async) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000080)=0x6, 0x4) (async) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x10010000004e20, 0xffffffff, @loopback}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)="c1", 0x1}], 0x1}}], 0x1, 0x0) 1.027907673s ago: executing program 6 (id=1419): syz_emit_ethernet(0x4e, &(0x7f0000000e00)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x17, 0x12, [@private, @broadcast, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000400)) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x24, 0x68, 0x1, 0x3, 0x80000004, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0xfa}]}]}, 0x24}}, 0x4000) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000000c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000000), &(0x7f0000000100)=r4}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x70bd2a, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x1a}}}}]}, 0x38}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="0401110b04"], 0x14) 960.940903ms ago: executing program 6 (id=1421): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000002e0efc247520d20060f0"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000000600000008000300", @ANYRES16=r0], 0x1c}}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000080), 0x10) listen(r3, 0x0) accept4$llc(r3, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) 430.487898ms ago: executing program 5 (id=1431): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x110000}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000001840)="f3470fbc06c74424000600007848b800280000000000000f23c00f21f835030004000f23f8c7442406000000000f0114246aa2450f0012124424001afa0000c744240216383d27c7442406000000000f011c2466b8f0000f00d0400f060f00e4c4a1c1edba2500000066baa00066b8000066ef66b82f008ed0", 0x79}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_CAP_VM_TYPES(r1, 0x4068aea3, &(0x7f0000000300)={0xeb, 0x0, 0x4}) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (async) ioctl$KVM_NMI(r2, 0xae9a) (async) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x1b, 0xa, 0x0, "001e2974ea7e3406e2d701be4a6886ce4fb12589bf80d73ae100867a392f08d8", 0x47504a4d}) r5 = socket$inet(0x2, 0x80001, 0x84) r6 = syz_open_dev$usbfs(&(0x7f00000001c0), 0xaa, 0x420840) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x12, 0x1, 0x0, 0x0, 0x0}) (async) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) (async) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r8, r8, 0x0) bind$inet(r5, &(0x7f0000000180)={0x2, 0xce20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async) r9 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r9, 0x1, 0x21, &(0x7f0000000280)=0x2, 0x4) (async) bind$inet(r9, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) ioctl$VIDIOC_SUBDEV_S_EDID(r4, 0xc0285629, &(0x7f0000000100)={0x0, 0x2, 0x2c0b6182, '\x00', &(0x7f0000000000)=0x31}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = dup(r10) bind$inet6(r11, &(0x7f00000002c0)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0x4}, 0x59) mount$9p_fd(0x0, 0xfffffffffffffffe, &(0x7f0000000b80), 0x1001001, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYRES64=r0, @ANYRES64=r3, @ANYRES8=r2, @ANYRES32]) 290.746947ms ago: executing program 2 (id=1432): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f0000000140)}, 0x10) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0xfffffffffffffd39, 0x10, 0x2, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28040, 0x4a248}, [@IFLA_EVENT={0x0, 0x2c, 0x8000}]}, 0x3c}}, 0x200040c0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 290.574787ms ago: executing program 5 (id=1433): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x578, 0x9, 0x2, 0x40000, 0x0, "f759e1000000104c3d5cba6dfb36ba", "0400", "671500", "aa59ad13", ["e5ffe901e74008dd075c5000", "c2fed62d4c87e3065a863243", "808afe00002000", "8d196d85d693aa2200"]}) 241.066214ms ago: executing program 2 (id=1434): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800b0001006e756d67656e00002400028008000240000001010800014000000000080003400000000108000440ffffffd90900010073797a3000000073797a3200000000140080001100010000000000000000000000000a0000000000"], 0x8c}}, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e21, @local}}}, 0x108) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000340)='\t', 0x1}], 0x1, 0xf) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) listen(r1, 0x3) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100), &(0x7f0000000140)=0x4) 240.807779ms ago: executing program 5 (id=1435): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280), 0x840, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getegid() r5 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000600)=ANY=[]) set_mempolicy(0x2005, 0x0, 0xfffffffffffffffe) r8 = fcntl$getown(r2, 0x9) r9 = getpgrp(r6) syz_clone3(&(0x7f0000000540)={0x1000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x19}, &(0x7f00000003c0)=""/171, 0xab, &(0x7f0000000740)=""/171, &(0x7f0000000480)=[r6, r6, r6, r6, r8, r9, r6, r6], 0x8, {r0}}, 0x58) r10 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$chown(0x4, r10, 0xffffffffffffffff, 0xee01) keyctl$chown(0x4, r10, 0x0, 0x0) r11 = dup(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f04", @ANYRESHEX=r11, @ANYBLOB=',k']) 175.57386ms ago: executing program 0 (id=1436): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x40000001, 0x706c, 0x7, 0xe0, 0x6}, {0x40000000, 0x6, 0x1e, 0x2, 0xffffffff}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macsec0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f00000003c0), 0x101001, 0x0) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000400)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000428000001c00128009000100766c616e000000000c000280060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}}, 0x0) 174.406902ms ago: executing program 2 (id=1437): prctl$PR_SET_SECUREBITS(0x1c, 0x2d) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') read$FUSE(r0, &(0x7f0000003240)={0x2020, 0x0, 0x0, 0x0}, 0x1b11) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) setuid(r1) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r4, 0x0, 0x0) 174.031755ms ago: executing program 5 (id=1438): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), 0x0, 0xf4, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x0, 0x0, &(0x7f0000000240), 0x8, 0xab, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'erspan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, 0x0, 0x4001) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000a40)={&(0x7f0000000a00), 0x0, 0x2eb, 0x8}) getresuid(&(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r1, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000d00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0], 0x0, 0x7fff, &(0x7f0000000dc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) fstat(0xffffffffffffffff, &(0x7f0000001040)) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000013c0)={0x0, 0xfa, "b488e3aa089adaca0aa39220fba2dbb882bb30914b64e91656cec6c05b85ff6e249e11153263b687e67e0300793a40c8b2924d6b373166bcaf901c90e9b9327f8458af23c4fb7df7db11b2a11e511830a5774c76076ce0d6121773fa27f2dc7b119b5bdd1b640022da56c56a6764d892b78ac704f254efcdc17d942765f16362cb19d9250b49feecc40c5711a4e16c72262fb5f5ce4ef5f99bc14c1f7e34fd6c3c65f18a2b40344c0a201ccda51e4297d7b38bc7ff0f84ba615c50c488790f40d2a8827f97a9271dee60b632419c4f4a8b1c53e471fcc7b7952e399030860d69a6e8f3a112d9b92af53b655a3dfef3c9eae40a0acd0d49c6f6a3"}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002880)={'syztnl2\x00', &(0x7f0000002800)={'sit0\x00', 0x0, 0x8000, 0x1, 0x515, 0x2af4, {{0x17, 0x4, 0x1, 0x9, 0x5c, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x44, 0x8c, 0x1, 0x7, [{@remote, 0xd}, {@dev={0xac, 0x14, 0x14, 0x35}, 0xfffffff7}, {@empty, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010102}, {@empty, 0x81}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x9}]}, @ra={0x94, 0x4}]}}}}}) syz_emit_vhci(&(0x7f00000028c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x8, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x9}}}, 0xe) 173.62518ms ago: executing program 5 (id=1439): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, r4, 0x25, 0x8, @val=@iter={0x0}}, 0x20) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @local}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000001e000000611000000000000062000b000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000280)={'syztnl2\x00', r4, 0x29, 0x81, 0x7, 0x3, 0x44, @private1, @remote, 0x700, 0x788e, 0xd27, 0x1}}) setfsuid(0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}, 0x1, 0x2c}, 0x0) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv(r7, &(0x7f00000000c0), 0x2a) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r8, 0x8004550f, &(0x7f0000002a40)) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0xa0, r1, 0x401, 0x70bd2a, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0xb}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x80d0) 173.48355ms ago: executing program 2 (id=1440): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x10d, 0x3, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00010025bd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="0200050008000100"], 0x2c}}, 0x0) 101.034693ms ago: executing program 2 (id=1441): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x17, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r3, @ANYRES8], 0x1c}}, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) 62.763517ms ago: executing program 0 (id=1442): r0 = socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f00000006c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x1285000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000010026bd70000000f40000000000", @ANYRES32=0x0, @ANYRESDEC=r0], 0x48}}, 0x0) 61.933645ms ago: executing program 6 (id=1443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x3}}}, 0x24}}, 0x20040054) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_DELCHAIN={0x13c, 0x5, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7d98ca15}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x104, 0xc, "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"}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x178}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000400500040000000000050005000a00000014000780050015000600000008001240"], 0x60}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000200)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r10, r11, 0x7, 0x0, 0xfffffffc, 0x7, {0x4, 0x1, 0x3, 0x69, 0x200, 0x0, 0x3, 0x5, 0x4caf, 0xe174, 0xfffe, 0x0, 0x3f, 0xfffffffd, "fe1d0e223ef3f687dccb6532490240438ece397736ec0268208f7d00"}}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r12 = socket$kcm(0x2, 0x1, 0x84) r13 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r13, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r12, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r12, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0x404c0e0) r14 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r14, &(0x7f0000000200)={0x1f, 0x1}, 0xe) syz_open_dev$tty20(0xc, 0x4, 0x0) 60.858073ms ago: executing program 0 (id=1444): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000400000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendto$netrom(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) timer_create(0x1, &(0x7f0000000080)={0x0, 0xd, 0x5, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(r5, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {r6, r7+10000000}}, 0x0) r8 = dup(r4) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008e"]) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r9) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000200000000050037000000000008000200", @ANYRES32=r11, @ANYBLOB="06000600fe000000060004"], 0x50}, 0x4, 0x700000000000000, 0x0, 0x4}, 0x4040084) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00'}) sysfs$3(0x3) r12 = socket(0x10, 0x3, 0x0) r13 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000280)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x55168e02f3cbf06}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x1, 0x9, 0x3, 0xff4e, 0x400}, {0x0, 0x1, 0x7ff, 0x0, 0x1, 0x4}, 0x2, 0x3, 0x5ed}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xaab363dd6b27b4ef}]}}]}, 0x70}}, 0x0) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', r14, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='map\x00', r15, 0x0, 0x2}, 0x18) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 60.375964ms ago: executing program 2 (id=1445): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)=@newtaction={0x14, 0x76, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x0) write$tun(r0, &(0x7f00000002c0)={@val, @void, @eth={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x4, 0x1c, 0x64, 0x0, 0x2, 0x21, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}, "21d2c3da000bcc42"}}}}}, 0x2e) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\xb7AJ\n\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8\x1cXVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x62, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)=@newtaction={0x14, 0x76, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x0) (async) write$tun(r0, &(0x7f00000002c0)={@val, @void, @eth={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x4, 0x1c, 0x64, 0x0, 0x2, 0x21, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}, "21d2c3da000bcc42"}}}}}, 0x2e) (async) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\xb7AJ\n\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8\x1cXVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x62, 0x0, 0x0) (async) 59.261456ms ago: executing program 5 (id=1446): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) r1 = socket$isdn_base(0x22, 0x3, 0x0) close(r1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) r5 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r5, 0xab00, r4) ioctl$NBD_DO_IT(r3, 0xab03) close_range(r2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) read$snddsp(r0, &(0x7f00000000c0)=""/131, 0x83) mkdirat(r3, &(0x7f0000000180)='./file0\x00', 0x94) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000100)={0xa, 0xfffe, 0x3000003, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000240)='wlan1\x00', 0x10) write(r6, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000080)={'veth0_virt_wifi\x00', @broadcast}) 51.002193ms ago: executing program 6 (id=1447): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), 0x0, 0xf4, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x0, 0x0, &(0x7f0000000240), 0x8, 0xab, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'erspan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, 0x0, 0x4001) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000a40)={&(0x7f0000000a00), 0x0, 0x2eb, 0x8}) getresuid(&(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r1, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000d00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0], 0x0, 0x7fff, &(0x7f0000000dc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) fstat(0xffffffffffffffff, &(0x7f0000001040)) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000013c0)={0x0, 0xfa, "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"}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002880)={'syztnl2\x00', &(0x7f0000002800)={'sit0\x00', 0x0, 0x8000, 0x1, 0x515, 0x2af4, {{0x17, 0x4, 0x1, 0x9, 0x5c, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x44, 0x8c, 0x1, 0x7, [{@remote, 0xd}, {@dev={0xac, 0x14, 0x14, 0x35}, 0xfffffff7}, {@empty, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010102}, {@empty, 0x81}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x9}]}, @ra={0x94, 0x4}]}}}}}) syz_emit_vhci(&(0x7f00000028c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x8, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x9}}}, 0xe) 1.023099ms ago: executing program 6 (id=1448): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RXATTRCREATE(r0, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) (async, rerun: 64) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)={0x34, r3, 0x1, 0x0, 0x0, {0x1d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x200) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x4}]}]}]}}]}, 0x4c}}, 0x0) (async) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r7, &(0x7f0000001040), 0x0, 0x60008004, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_GET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)) (async, rerun: 64) r8 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x2, 0x1a1880) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r8, 0xc1485544, &(0x7f00000003c0)) 0s ago: executing program 0 (id=1449): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000976000/0x3000)=nil, 0x3000}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800018, 0x19) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000540)=""/238, 0xee}], 0x1, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x48090) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=@delchain={0x2580, 0x65, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0x2}, {0x10, 0x9}, {0x10, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x50000}, @filter_kind_options=@f_flow={{0x9}, {0x2370, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x9}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x9fb}, @TCA_FLOW_ACT={0x2354, 0x9, 0x0, 0x1, [@m_police={0x224c, 0x10, 0x0, 0x0, {{0xb}, {0x2164, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0x8, 0x48003142, 0x3, 0x5, 0x3, 0xffffffcb, 0x7, 0x5, 0x6, 0x2, 0x3cd, 0x0, 0x2, 0x9, 0x80, 0x0, 0xf, 0x70d, 0x401, 0xc05, 0x7, 0x8000, 0x672, 0x8000, 0x2, 0x3, 0x1ff, 0x4, 0xa96, 0x80000001, 0x321d3b08, 0x8, 0x7ff, 0x6, 0x9, 0x51, 0x4, 0x8a, 0xf919, 0x7, 0x7e, 0x3ad8, 0xab4b, 0x2, 0x5, 0x80000001, 0x5, 0x0, 0x4, 0x6, 0x9, 0x1, 0xfb, 0x5, 0x99f, 0x10, 0x7, 0x7bb, 0xc07f, 0x2, 0x6, 0x0, 0x3, 0x85c, 0x79d, 0x5, 0x8, 0xffffff5b, 0x8, 0x3, 0x4, 0x8, 0x6, 0x2, 0xb0b3, 0x67, 0x6, 0xffff, 0x10, 0x400, 0x7, 0x6ffe, 0x3, 0x80, 0x9cb, 0x3, 0x2, 0x3, 0x7, 0x81, 0x5acb9a55, 0x0, 0x2, 0x1, 0xf4, 0x7fff, 0xee, 0x4, 0xb1, 0x8, 0x10000, 0x5, 0xe9cf, 0x7f, 0x10000, 0x9d, 0x5, 0xfffffffa, 0xf, 0x7ff, 0x6, 0xd, 0x1f, 0x65cba9e5, 0xc415, 0x52, 0x7, 0x1200000, 0x80000001, 0xe, 0x7, 0x0, 0x9, 0x7, 0x30, 0x4, 0x7, 0xb5, 0x2, 0x4, 0x1, 0x2, 0x2, 0x5, 0x4, 0x4, 0x0, 0x7, 0x0, 0xfff, 0x8001, 0x1, 0x2, 0x1331a4a7, 0x3, 0x1, 0xc6, 0x7, 0x3, 0xa, 0x4, 0x2, 0x9, 0x3, 0x80000000, 0x6, 0x2, 0xc38e, 0x0, 0x1, 0x7, 0x8, 0x2, 0x7fff, 0x3, 0x400, 0xc03, 0x400, 0xd, 0x5, 0xfffffff9, 0x9, 0x1, 0xdaea, 0x1ff, 0x3, 0x5, 0x866, 0xc07, 0x2, 0x4, 0x2, 0xfffffff7, 0x1, 0xe, 0x8, 0x9, 0x2, 0x4, 0x6, 0x1c67, 0xa, 0x7fffffff, 0x10, 0x2a3, 0xed84, 0x5, 0x10, 0x15000, 0x6, 0xf32, 0x41891c1, 0x8, 0x8, 0x0, 0x80, 0x9, 0x400007ff, 0x0, 0x3e, 0xffffffff, 0x800, 0xa, 0x3, 0x7fffffff, 0x3ff, 0x652a, 0x10005c94, 0x10, 0x1, 0x7, 0x7, 0x5, 0x0, 0x8001, 0x3, 0x1, 0x9, 0x5, 0xfffffffa, 0xfffffc0f, 0x8001, 0x10, 0x1, 0x6, 0x39cd31b1, 0x2, 0x2, 0x4, 0x0, 0xfea2, 0x4, 0x4, 0x8, 0x8, 0x0, 0x380, 0x6, 0x8f58, 0x0, 0xbc8, 0x7, 0xfffffe01, 0x7fff]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x5, 0x8, 0x9, 0x6, 0xdf1c, 0x4862, 0x100, 0x2, 0x4, 0x8, 0x80, 0x9, 0x0, 0xf, 0x1ff, 0x2, 0xfffffffe, 0x3, 0x6cee, 0x8, 0x5, 0x8, 0x6, 0xffff, 0x456e, 0x8, 0xe0000000, 0x8001, 0x9, 0xfa2, 0xf39, 0xa7a0, 0x6, 0x8, 0x73c80ff4, 0xff, 0x10, 0x8, 0xda95, 0x200, 0x8, 0x8, 0x1, 0x4, 0x800, 0x4, 0x80cc, 0x8, 0x4c68, 0x0, 0x100, 0x3, 0x7, 0xfff, 0xe, 0x7, 0x0, 0xc9, 0x9, 0x1, 0xae12, 0x33b, 0x9, 0x2, 0x4, 0x8, 0x0, 0x7, 0x10000, 0x5, 0x1, 0x80000, 0x46df, 0xffffffa0, 0x4, 0x3, 0x20, 0x4, 0x0, 0x9, 0x6, 0x7, 0x4, 0x0, 0xc, 0x9, 0x1e, 0xfffffcdb, 0x4, 0x5, 0x3, 0x8, 0x1eb, 0x10000, 0x5, 0x80000001, 0x6, 0xfff, 0x10001, 0x100, 0xde, 0x8, 0x1, 0x3dff, 0x1, 0xc, 0x1a, 0x0, 0x9, 0xfffffff5, 0x3, 0x2, 0x136, 0x81, 0x5, 0x8, 0xfffffffa, 0x0, 0x9, 0x8, 0xfffffff8, 0x0, 0x40, 0x400, 0x2, 0x3, 0xabe, 0x9, 0x8, 0x4, 0x200, 0x7, 0xcc3, 0x9, 0xff, 0xe, 0x602, 0x10, 0x8, 0x3, 0xec4b, 0x6, 0x8, 0x1, 0x55, 0x4, 0x5, 0x1, 0x400, 0x3, 0x7, 0x8f4d, 0xfffffff2, 0x224, 0x80000001, 0x5, 0x2, 0x4, 0x5, 0x3d3, 0x9, 0xb, 0x8, 0x5, 0x4, 0x7, 0xb, 0x3, 0x3, 0x1, 0x6, 0x3, 0x44d, 0x5, 0x7, 0xa6, 0x6, 0x57, 0x7, 0x10001, 0x8, 0x800007ba, 0xffffff00, 0x1000, 0x2, 0x0, 0x6, 0x10000, 0x401, 0x9e3, 0x10000, 0x9, 0xc9, 0x3, 0x8, 0x200, 0x2, 0x59, 0xf8, 0x4, 0x7, 0x0, 0x7, 0x1, 0x40, 0x3, 0x1000, 0x0, 0xfffffffa, 0xe, 0x9, 0x2d9, 0x80000001, 0x3, 0x7, 0x8, 0x1, 0x5ff, 0xfffffff8, 0x8, 0x4, 0x3ff, 0x0, 0x0, 0x2944, 0x8, 0x0, 0x4, 0xffffffff, 0x3, 0x0, 0x6b, 0x288, 0x7765f13e, 0x61, 0x4, 0x8001, 0x3, 0x1, 0x0, 0x10, 0x80000000, 0x4, 0xff8000, 0x10, 0xdf73, 0x0, 0x48592e50, 0x8, 0x3, 0x9, 0x349, 0x400, 0xa23, 0x81]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x8, 0x5, 0x2, 0x4, {0x76, 0x1, 0xfffb, 0xff, 0x5}, {0x4, 0x1, 0x50, 0x3ff0, 0x5, 0xa}, 0x7ff, 0x10000, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x8617941f, 0xf, 0x0, 0x8000, 0x0, 0x8, 0x5, 0xb, 0x200, 0x0, 0xbe66, 0x4, 0xd, 0x401, 0xe0, 0x7, 0x3, 0x400000, 0x5, 0x0, 0x1, 0x1, 0x9, 0x55, 0x3, 0x3, 0x5, 0x8, 0x80000000, 0xf19, 0xa3ed, 0x1, 0x9, 0x9, 0x5, 0x1000, 0x5, 0x9, 0x1, 0x7fffffff, 0x7, 0x1, 0x3, 0x0, 0x8, 0x1, 0x516d, 0x9, 0x6, 0x3dfc, 0x7fff, 0x5, 0x9, 0x3, 0x2, 0x80000001, 0x9, 0x8, 0x5, 0x80000000, 0xa, 0x4eb, 0xc, 0xd, 0x9, 0x6, 0x69, 0xd4e, 0x1, 0x6, 0x0, 0xff0, 0x4, 0x5b, 0x4, 0x4, 0x4b, 0x2, 0x3ff, 0x10002, 0x1, 0x401, 0x1a, 0x8, 0x3, 0x3, 0x5, 0x1, 0x9, 0x8, 0x2, 0xab4e, 0x6964, 0x2, 0x0, 0x10000, 0x3, 0x40, 0x100, 0x4, 0xe00000, 0x10100, 0x5, 0xe947, 0x1ff000, 0x4, 0x40, 0x4, 0x9, 0x0, 0x0, 0xfffeffff, 0x1, 0x80000001, 0x5, 0x8, 0x80000001, 0x32e3, 0x7, 0x400, 0x3932cf, 0x8001, 0x0, 0x3ff, 0xfffffff8, 0x8001, 0x13, 0x2, 0x0, 0x9, 0x8, 0x6, 0xd6c, 0x0, 0x3, 0x4, 0x352f, 0xffff, 0x5, 0x7, 0x5, 0x9, 0x1, 0x0, 0x0, 0x80, 0x79c, 0x4, 0x200, 0x4, 0x8, 0x8, 0x5, 0x9eec, 0x7, 0x8, 0x4, 0x5367, 0x9, 0xffff, 0x3, 0x80000001, 0xd, 0xa25, 0xc9c, 0x4, 0xbec, 0x0, 0x80000000, 0x4, 0x9, 0x1000, 0x5, 0x9, 0xfff, 0x0, 0x5, 0x5, 0x6, 0x1, 0x6, 0x9, 0x0, 0xb65c, 0x6, 0x44a7, 0x80000000, 0x8, 0x1000, 0x1, 0x9, 0x4, 0x886, 0xb2, 0x3, 0x80000100, 0x1, 0xbca, 0x6, 0x7, 0x7, 0x10001, 0x6, 0x9, 0x2, 0x8, 0x8, 0x2, 0xffff, 0xf782, 0x3, 0x8, 0xe8, 0x7, 0x2, 0x2, 0x80, 0x6, 0x80, 0x2, 0x77b, 0x10, 0x0, 0x41a2c915, 0x4000000, 0x9, 0x109e, 0x8, 0x8001, 0xdc16, 0x2, 0xac3, 0x7, 0x9, 0x1, 0x4, 0xfff, 0x0, 0x4, 0x7, 0x401, 0x74, 0x6, 0x7, 0x9, 0xedd, 0x9c7, 0x6, 0x101, 0x5, 0x1e, 0x7fff000, 0x0, 0x101]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x14, 0xb29, 0x2, 0x9, 0x5, 0x8, 0x8001, 0x9, 0x200, 0xffffc875, 0x80000001, 0x8f, 0x0, 0x1, 0x401, 0x81, 0x6, 0x2, 0xfffffffe, 0x7, 0x8001, 0x6, 0x5a8, 0x1, 0x40000, 0xe525, 0x0, 0xfffffffa, 0x9, 0x6, 0x6, 0xb07, 0x0, 0x100, 0x1, 0x3, 0x7, 0x4, 0x80000000, 0x401, 0x3, 0x2, 0x7, 0x8, 0x80000001, 0x0, 0x3, 0x7, 0x7611, 0x81, 0x7, 0x2a8c, 0xd33c, 0x2, 0x6, 0x7fffffff, 0xc0, 0x0, 0x5, 0x6, 0x57e7, 0xffffffff, 0x6, 0x2, 0x7e24, 0xfffffff7, 0x2, 0xdc46, 0x0, 0x5, 0xc84, 0xa3d, 0x3, 0x2, 0xe8, 0x6, 0x8, 0x7, 0x1, 0x159, 0x6, 0x2, 0x4, 0x5, 0x1, 0x10000, 0x1ff, 0xef, 0x5, 0x1, 0x6, 0x7, 0xe, 0x6, 0x100, 0x7fffffff, 0x4, 0x0, 0x4, 0x7, 0x5, 0x10, 0x6, 0x3, 0x1, 0x3, 0x2, 0x5, 0x7, 0x0, 0x8, 0x3, 0x7, 0x4, 0x7, 0xf6d7, 0x80000001, 0x4, 0x6, 0xdda, 0x2, 0x3, 0xffff, 0x7, 0xfffffff4, 0x1, 0x24c, 0x3, 0x7f2c, 0x7, 0x3, 0x1, 0xffff7fff, 0x2, 0x32321532, 0xffffffff, 0x0, 0x6, 0x2, 0xcfc, 0x7c, 0x81, 0x7, 0x2, 0xffff, 0x33, 0x7fffffff, 0x0, 0x5e, 0x2, 0x9, 0x4, 0x9, 0x7, 0x0, 0x1, 0x401, 0x77c1, 0x0, 0x4, 0x4a, 0x1, 0x800000, 0xe, 0xcd, 0x3, 0x6, 0xd, 0x4, 0x7, 0x6, 0xd9, 0x7, 0xaa82, 0x474a41b9, 0x74f0c07e, 0xff, 0xe6e8, 0x0, 0x80000000, 0x8, 0xffff, 0x9, 0x101, 0x34, 0x7, 0x5, 0xfff, 0x1, 0x6, 0x1000, 0x8, 0x3, 0x0, 0x80000001, 0xc, 0x2, 0x3, 0x9, 0xffff0000, 0x7f, 0x5, 0x6, 0x48ea, 0x6, 0x100, 0x100, 0x0, 0x2000001, 0x3, 0x5, 0x2, 0xa, 0x10000, 0xfffffffc, 0x8e61, 0xfff, 0x5, 0x116c, 0x6, 0x0, 0x6, 0x1, 0xf, 0x7, 0xd9, 0xf6, 0x7, 0x1, 0x1, 0x218c, 0x10000, 0x3, 0x4, 0x1, 0x2, 0x9, 0xfffffff8, 0x86, 0xe, 0x5e, 0x7, 0x9, 0xffffffff, 0xffffffff, 0xffff, 0x2, 0xa070, 0x3, 0x8, 0x1, 0x7, 0xfffffae6, 0x81, 0x80000000, 0x80000000]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xb}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x957}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x50c83b39}, @TCA_POLICE_RATE64={0xc, 0x8, 0x51}, @TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x7, 0xfc, 0x1, 0x80000001, {0x51, 0x2, 0x1, 0x7}, {0x6, 0x0, 0xc20, 0x7ff, 0x62, 0xffffffff}, 0x9, 0xff, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xc1}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x7, 0x9, 0x12, 0xd144, 0x6, 0x200000, 0x1, 0x1, 0x0, 0x6, 0x1, 0x6, 0xfff, 0x4, 0x200, 0x2, 0x7, 0x6, 0xc, 0x3, 0xffffff01, 0x1ff, 0x2, 0x6, 0x77, 0x7, 0x5, 0xfff, 0x65, 0x0, 0x7, 0x10001, 0x0, 0x2, 0x80000000, 0x5, 0x1ff, 0x6, 0xc26, 0x2, 0x2374, 0xffffff01, 0x6, 0x1, 0x3, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x719, 0x8, 0x1ff, 0x66d0, 0x1, 0xa, 0x47, 0x10, 0x7ff, 0x0, 0x200, 0xb, 0xffffffff, 0x3, 0x100, 0x7ff, 0x2, 0xb, 0x266, 0x9, 0x400, 0xcbd3, 0x887, 0x100, 0x70, 0x6, 0x3, 0xcf77, 0xde, 0x8, 0x1, 0x1, 0x7, 0xf9e, 0x200, 0x7, 0xd5, 0x0, 0x1, 0x4, 0x800, 0x7fff, 0x5, 0x7, 0x81, 0x8, 0xd301, 0x3, 0xffff7fff, 0xa296, 0x8, 0x9, 0x6, 0x2, 0x800, 0x2, 0x9, 0x1, 0x5, 0x8001, 0x1, 0x0, 0x687, 0xeeb, 0x8, 0xfffffe00, 0x7, 0x3, 0x3000, 0xffffffff, 0x10, 0x40, 0x7fff, 0x7, 0x5, 0x6, 0x40, 0x1000, 0x2, 0x10001, 0x7fff, 0xffb, 0x1, 0x6, 0x8, 0x2, 0x6, 0x3, 0xffffffff, 0x34d, 0x3ff, 0xfffffffe, 0xfffff000, 0xd868, 0x6, 0x2, 0x8, 0x2, 0x101, 0x543, 0x10, 0x5, 0x663, 0x6, 0x7, 0x1, 0xd0, 0x75f2, 0x5, 0x3, 0x9, 0xffff, 0x0, 0xea, 0x7f, 0x3, 0xc, 0x5, 0x3, 0x4, 0xe, 0xa, 0x4, 0x92, 0x8, 0x3, 0x0, 0x5, 0xfff, 0x2, 0x9, 0x1, 0x0, 0x8, 0x51, 0x0, 0x8, 0x5, 0x2, 0x7, 0x1, 0x3, 0x4, 0x2, 0x2, 0xa, 0x8d, 0x9, 0x1, 0x8eca, 0xbd, 0xd, 0x3, 0xd, 0x1, 0x8a9, 0x0, 0x87, 0x8, 0x93a, 0x3, 0xa6c, 0xd, 0x7b, 0x5, 0x4, 0x4, 0xe78, 0x7, 0x8, 0x0, 0xc49, 0x1, 0x101, 0x40, 0x7f, 0x3, 0x3, 0x5, 0x4, 0x2800, 0x7, 0x1, 0x5, 0xfa, 0x9, 0x7f, 0x4, 0xffffff01, 0x2, 0x2, 0x6, 0x7, 0x1, 0x8000, 0x8001, 0x9, 0x700, 0x4, 0xd1c, 0xd70, 0xdb3d, 0xc8, 0x1ff, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x4, 0x101, 0x7ad5, 0x3, 0xde, 0x401, 0x2, 0x5, 0x5, 0x47, 0x6, 0x7, 0xffffff81, 0x1, 0x10001, 0x81, 0x9, 0x80000001, 0x2, 0x6, 0x47, 0x52, 0xd29, 0xd, 0x80000004, 0x28f, 0xffffffff, 0x4e6f, 0x0, 0x70ff, 0x3, 0x1, 0x1, 0xffff26fa, 0x19ed, 0x81, 0x48, 0xfffffff7, 0xb3, 0x0, 0x10001, 0x7, 0x6, 0x400, 0x8, 0x10001, 0xc, 0x101, 0xa, 0x200, 0x6, 0x9, 0x8, 0x7f, 0x4, 0x0, 0xb2, 0x3, 0x0, 0x6, 0x4, 0x6, 0x1ef, 0x1, 0xfffffff3, 0x800, 0x6, 0xfffffff4, 0x3, 0x2, 0x4, 0x3, 0x9, 0x1, 0x1, 0x9, 0x9, 0x4, 0x5, 0x2, 0x2, 0x2, 0x1, 0x1, 0x400, 0x4, 0x3, 0x80000001, 0x4, 0x3ff, 0x2, 0x5, 0x9, 0x3, 0x1ff, 0x3, 0xff, 0x8000, 0x6, 0x0, 0x20, 0x7, 0x1, 0x4, 0xf6, 0x8, 0x3, 0x7, 0x2, 0x7, 0x2, 0x0, 0x3, 0x3, 0x5, 0x3, 0x5bc43897, 0x80000001, 0x0, 0xa0, 0x2, 0x8, 0x1, 0x7, 0x6, 0x40, 0xb0, 0x6, 0x8, 0x2, 0x6, 0x7, 0x0, 0x8, 0x9, 0x29f, 0x1, 0x9, 0xffffffff, 0x6, 0x6, 0x6, 0x1, 0x80000001, 0x7f, 0x4, 0x0, 0x0, 0xb28c, 0x10, 0x4, 0x0, 0x8, 0x716e1059, 0xc, 0x0, 0x7, 0x4, 0x100, 0x7, 0x1, 0x0, 0x5672, 0x80, 0x0, 0x3, 0x6, 0x8, 0x10, 0x9, 0x7, 0x40, 0x7, 0x3, 0x7, 0x8000, 0x8001, 0x4, 0x5, 0x5, 0x7fff, 0x9, 0x1b257ec2, 0x6, 0x5, 0x6, 0x80000001, 0x5, 0x9, 0x7, 0xffffff00, 0xb, 0x6d, 0x1000, 0x2, 0x2c000000, 0x23b, 0x7, 0xffff, 0x5, 0x3ff, 0x4, 0xb, 0x7, 0x1, 0xaf630, 0x4, 0x2, 0x2, 0x1, 0xfffffffd, 0x7f, 0x9, 0x80, 0x1b7, 0x3, 0x3, 0x4, 0x2, 0x335, 0xfffeffff, 0x9, 0x5, 0x8, 0x2c63, 0x101, 0x3b, 0xfffff001, 0xb7, 0x101, 0x738, 0xa6, 0x1, 0x100, 0x0, 0x762c, 0x5, 0x150, 0x9, 0x10000, 0x2, 0xa, 0x2, 0x3, 0x5, 0x8, 0x81, 0x5d11, 0x2, 0x7, 0x8, 0x7, 0x3, 0x0, 0x80000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x8, 0x29769c82, 0x0, 0x2, {0x1, 0x2, 0x0, 0x8, 0x5, 0x839}, {0x2, 0x0, 0x2, 0x6, 0xd8f, 0xd}, 0x5, 0x9, 0x272}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x101}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffc, 0xb, 0x5, 0x8, 0x3, 0x30b22d20, 0x101, 0x7fff, 0x7, 0x1e4, 0x6, 0x3ff, 0x6b1b, 0x80000000, 0xfa0, 0x7, 0x6, 0x5, 0x7f, 0x9, 0x5, 0xcd, 0x5da, 0x9, 0x3ff, 0x4, 0x80000001, 0xda4c, 0x7f5, 0xc, 0xdc1, 0x9, 0x80000001, 0x3ea9, 0x7fff, 0x8, 0x7, 0xe0000000, 0x80, 0xd3a, 0x1, 0xd, 0x4, 0x974a, 0x3, 0x8, 0x401, 0x8001, 0x9, 0x400, 0x1, 0x8, 0x3, 0x9, 0x80000001, 0x9, 0x10, 0x0, 0x9, 0x9, 0x2, 0x8, 0xff, 0x0, 0x7f, 0x1, 0x0, 0x574e, 0x2, 0x1, 0x401, 0x200, 0x2, 0x3, 0x7, 0x7f, 0x2, 0xe, 0xff, 0x9, 0x5, 0x4, 0x1, 0x1ff, 0x1, 0x7fffffff, 0xc, 0x0, 0x401, 0xfffffffe, 0x400, 0x41f5, 0x8, 0x4, 0x80000000, 0x3, 0x45, 0x40, 0x3, 0x8, 0xa, 0x9, 0x82, 0x5, 0x3, 0x3, 0x2c, 0xffffffff, 0xfffffffc, 0x7, 0x9a, 0x4, 0x7f, 0x1, 0x101, 0xd, 0xffffffff, 0x8, 0xf, 0xfffffffe, 0x7, 0x81, 0x0, 0x5, 0x80, 0x4, 0x2, 0x2, 0xfffffffe, 0x23a, 0x3, 0xfffffffa, 0xb, 0xb, 0x5, 0x5, 0x2f, 0x0, 0x8001, 0x9, 0x8, 0x1000, 0xde2d6339, 0x2, 0xb7, 0x711f5a7d, 0x3, 0x8, 0x5, 0x7fff, 0x800, 0x7, 0x8, 0x5a79, 0x3, 0x100, 0x8, 0x0, 0x10, 0x1000, 0x9, 0x0, 0xd49b, 0x8, 0x7ff, 0x5, 0x0, 0x6, 0x10000, 0xe, 0x0, 0x9, 0x3, 0x1, 0x3, 0x4980, 0x2, 0x80, 0x7, 0xf3, 0x23, 0xfffffffd, 0x70, 0x10, 0x7, 0x81, 0x200000, 0x0, 0xffffffff, 0x3, 0x3, 0x0, 0x2, 0x1, 0x3, 0x0, 0x4, 0x1, 0x5991, 0x2, 0x2, 0x5, 0x1, 0x64, 0x7fffffff, 0x2, 0x6, 0x7, 0x4, 0x7, 0x1, 0x0, 0x6, 0xfff, 0xffffff00, 0xb, 0x0, 0x1, 0x251e13c8, 0xa16, 0xb4, 0x6892, 0x5, 0x1, 0x98f, 0x2, 0x60000, 0x7ff, 0xfffffffc, 0x401, 0x3ff00000, 0x8, 0x7, 0x0, 0x8, 0x1, 0x4, 0x0, 0x4, 0x0, 0xfffffffd, 0x7f, 0x3, 0x4, 0x2, 0x3, 0x101, 0x7fff, 0x5, 0x2, 0x400, 0x8, 0xd, 0xfffffffe, 0x2, 0x40]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x7, 0x8001, 0x8, 0x8, 0x3ff, 0xa2f0, 0x10, 0x9, 0x1ff, 0x1, 0x3, 0xee87, 0x4, 0xe6d, 0x10, 0xff, 0xe, 0x9, 0x7, 0x7, 0x8, 0x9, 0x7f, 0x41e6, 0x1ff, 0x5, 0xa85, 0x4, 0x2, 0x764ae1e3, 0xffffffc0, 0x2, 0x7, 0x4, 0xffff9cfc, 0x23c, 0x6, 0x4, 0x80000001, 0x4, 0x8, 0x4, 0x176, 0x7, 0x1, 0x3, 0xf, 0x1, 0x42, 0x8, 0x1, 0x6, 0x0, 0x1, 0x81, 0x0, 0xfffffff9, 0x7f, 0x10, 0x9ec9, 0x6, 0x5, 0x3, 0x9, 0x40, 0x100, 0x10, 0x4, 0x4, 0x2, 0x10, 0x10000, 0x69f, 0x5, 0x7f, 0x4, 0x5956, 0x8000, 0x9, 0x7fffffff, 0x9, 0x5, 0x9, 0xfff, 0x67a, 0x400, 0x9, 0x9, 0x7, 0x7ff, 0x401, 0x5, 0x1ff, 0x4, 0xf1a, 0x401, 0x0, 0x8000000, 0x400, 0x0, 0xfffffffa, 0x1, 0x1ff, 0x4, 0xd313, 0x4, 0x7, 0x2, 0x3, 0x2, 0x5, 0x5, 0x5, 0x8, 0x7b, 0x5, 0x101, 0x5, 0x9, 0xdf, 0x40, 0x80, 0x200, 0x381, 0xb, 0x0, 0x40, 0x2, 0x3ff, 0x0, 0x7, 0xf6, 0x73bb2b3e, 0x7fff, 0x8, 0x5, 0x9, 0xfffffffe, 0x9, 0x0, 0x3, 0x65, 0x4, 0x6, 0x9, 0x7, 0x1ff, 0x3, 0x9, 0x0, 0x10, 0x5, 0xe16, 0x8, 0x4, 0x2, 0x1, 0x6, 0xd9ec, 0x4, 0x5, 0x7, 0x3, 0x1ff, 0x6, 0x9, 0x9, 0x1, 0xde4e, 0x1, 0x1, 0x8001, 0x0, 0x7, 0x3, 0xfffffff8, 0x3, 0x800, 0x3, 0xb69, 0xa6a, 0x1, 0xb, 0x0, 0x3, 0xfffffffd, 0xfffffffc, 0x2, 0x9, 0x80000001, 0x80000000, 0xc00, 0x81, 0xfffffffd, 0x7ff, 0x10001, 0xfffff000, 0x84, 0xa1, 0x3, 0xfffffffe, 0xfff, 0xffffffff, 0x9, 0x17b0, 0x8, 0x200, 0xfffffffb, 0x3a69, 0x61, 0x3, 0x10, 0xffff, 0xdce4, 0x4, 0x4, 0x80000001, 0x3, 0x8000, 0x1, 0xffff, 0x4, 0x511d, 0x0, 0x9, 0x2, 0x9, 0x5, 0x2, 0x6, 0x4, 0xfffffffa, 0x4, 0x1, 0x8, 0x2, 0x80, 0xd, 0x10, 0x2996, 0x9, 0xfff, 0x55, 0x101, 0x1, 0x7, 0x0, 0x400, 0x3, 0x0, 0xfffffff3, 0x1, 0x9, 0xc125, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]]}, {0xbf, 0x6, "120321e74cdca75db20b2a0cd3c2edd78f0dacbc814b06de634a50ddffc4c8a57a749e378b9cf7f8481448dfa3fa10d9308043b797866c08fa1c9a424e00f8ad0625055d766559c7afcbcbf51cbd5dcf43a4675890063872b437bc3211139ee56d8eb8915ca93d372911acb39f59d3cb3ca455961efad03f8a1b9aceb92037bbf2543140ef3fc6b6d71d1840720332016d5467644af0416d4d8aaac3eef3287e5f97194d8ef77436903533daeaf3f6c0aeb588c0b1c29dd16b71bd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x20d9f63de326d95f}}}}, @m_ife={0x104, 0x0, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x44, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x8000}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x1}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xe}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x2}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0x80}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}]}]}, {0x97, 0x6, "3d267f384adb9d2f52089c03f40f9ae4ebe2bbca9f7d9a43baab0a8e3af4255e693ec1eeefefc63d72de66f239bcbac272b3e7b2e0560ff18633b3ed7bbb7d135dd80f0b751de4ca1fffd08ca795bb0633101f43767ba9df9e031632aaff0136e184354c84dfe27416eee93c16d9556f444cc538710cca82c7d75c19699ef76cc8398d9106b2b059adfc22c394f230c78b42ff"}, {0xc}, {0xc}}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x184, 0x2, [@TCA_ROUTE4_ACT={0x170, 0x6, [@m_skbedit={0x60, 0x7, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}]}, {0x1c, 0x6, "7c996ae6f342469ffb5b60e5754f665ac6e7bca800bb9b14"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x10c, 0xf, 0x0, 0x0, {{0xb}, {0xa8, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x2, 0x2, 0x8000, 0x7}, 0xc}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfe01}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xa, 0x401, 0xffffffffffffffff, 0x100, 0x2}, 0x8}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfffffff7, 0x8, 0x1, 0x80000001, 0x8}, 0x7}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="f6b28b13146c"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}]}, {0x3b, 0x6, "1cdc8ff311ba6a8fd90da6fe4d2cb186fb370700638e85004b06ea87da9aae9988d5ab97c7f90ef3da1c74090d2e9537a53e6b42fce827"}, {0xc, 0x7, {0x362b7b99cfa52540, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8001}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x98}}, @filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE={0x5}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x9}, @TCA_FLOWER_KEY_MPLS_TC={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xffffff00}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2580}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r6) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x109200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r9, &(0x7f0000000200)=""/82, 0x52) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r11, &(0x7f0000000380)="a0fd1a", 0x3) splice(r11, &(0x7f0000000040), r10, 0x0, 0x800000000ff, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r12, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r13, 0x0, 0x81, 0xf80, &(0x7f0000000700)="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", 0x4}) kernel console output (not intermixed with test programs): expected event for opcode 0x1cfd [ 66.146911][ T5937] Bluetooth: hci0: unexpected event for opcode 0x1cfd [ 66.146935][ T5937] Bluetooth: hci0: unexpected event for opcode 0x1cfd [ 66.146959][ T5937] Bluetooth: hci0: unexpected event for opcode 0x1cfd [ 66.146991][ T5937] Bluetooth: hci0: unexpected event for opcode 0x1cfd [ 66.147016][ T5937] Bluetooth: hci0: unexpected event for opcode 0x1cfd [ 66.147041][ T5937] Bluetooth: hci0: unexpected event for opcode 0x1cfd [ 66.243620][ T7186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=7186 comm=syz.3.298 [ 66.244342][ T7187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=7187 comm=syz.3.298 [ 66.314647][ T7191] macvtap1: entered promiscuous mode [ 66.316703][ T7191] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 66.319497][ T7191] macvtap1: entered allmulticast mode [ 66.321062][ T7191] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 66.324361][ T7191] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 66.326377][ T7191] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 66.495379][ T7210] ebt_among: src integrity fail: 300 [ 66.601653][ T7225] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 66.641432][ T5937] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 66.656212][ T7222] netlink: 20 bytes leftover after parsing attributes in process `syz.3.310'. [ 66.733349][ T7241] program syz.4.317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.786295][ T7249] xt_socket: unknown flags 0xc [ 66.811918][ T7255] program syz.2.322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.218302][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 67.306974][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.338'. [ 67.372816][ T9] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 67.375869][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.384856][ T9] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 67.387399][ T9] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 67.389740][ T9] usb 9-1: Manufacturer: syz [ 67.392921][ T9] usb 9-1: config 0 descriptor?? [ 67.438321][ T9] rc_core: IR keymap rc-hauppauge not found [ 67.440055][ T9] Registered IR keymap rc-empty [ 67.443195][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 67.446779][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input11 [ 67.604158][ T5936] usb 9-1: USB disconnect, device number 3 [ 67.830647][ T7319] netlink: 'syz.2.341': attribute type 6 has an invalid length. [ 68.511043][ T7353] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.353'. [ 68.513942][ T7353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.353'. [ 68.662448][ T7379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7379 comm=syz.0.359 [ 68.719915][ T7382] ptrace attach of ""[7384] was attempted by "/syz-executor exec"[7382] [ 68.722869][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 68.723038][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.359'. [ 68.725610][ T7383] nlmon0: Master is either lo or non-ether device [ 68.765967][ T7382] team_slave_1 (unregistering): left promiscuous mode [ 68.771242][ T7382] team0: Port device team_slave_1 removed [ 69.188510][ T5936] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 69.338344][ T5936] usb 9-1: device descriptor read/64, error -71 [ 69.435703][ T7419] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 69.441999][ T7419] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 69.445096][ T7419] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 69.476490][ T39] kauditd_printk_skb: 41 callbacks suppressed [ 69.476500][ T39] audit: type=1400 audit(1736701992.074:559): avc: denied { write } for pid=7422 comm="syz.0.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.477428][ T7423] program syz.0.373 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.490458][ T7423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=7423 comm=syz.0.373 [ 69.501546][ T39] audit: type=1400 audit(1736701992.104:560): avc: denied { write } for pid=7422 comm="syz.0.373" name="snmp" dev="proc" ino=4026533193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 69.566820][ T39] audit: type=1400 audit(1736701992.164:561): avc: denied { read write } for pid=7428 comm="syz.2.375" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 69.573547][ T39] audit: type=1400 audit(1736701992.164:562): avc: denied { open } for pid=7428 comm="syz.2.375" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 69.578516][ T7429] netlink: 292 bytes leftover after parsing attributes in process `syz.2.375'. [ 69.601048][ T5936] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 69.691887][ T39] audit: type=1400 audit(1736701992.294:563): avc: denied { watch_mount } for pid=7432 comm="syz.0.376" path="/103" dev="tmpfs" ino=568 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.728501][ T5936] usb 9-1: device descriptor read/64, error -71 [ 69.732411][ T7434] kvm: kvm [7432]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 69.746816][ T7434] kvm: kvm [7432]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 69.760744][ T7434] kvm: kvm [7432]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 69.782980][ T7434] kvm: kvm [7432]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 69.792478][ T7434] kvm: kvm [7432]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 69.804210][ T7434] kvm: kvm [7432]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 69.809800][ T7434] kvm: kvm [7432]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 69.838548][ T5936] usb usb9-port1: attempt power cycle [ 69.850843][ T7434] kvm: kvm [7432]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 69.866567][ T7434] kvm: kvm [7432]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 69.875155][ T7434] kvm: kvm [7432]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 70.198332][ T5936] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 70.231533][ T5936] usb 9-1: device descriptor read/8, error -71 [ 70.468107][ T39] audit: type=1400 audit(1736701993.064:564): avc: denied { create } for pid=7443 comm="syz.2.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 70.488697][ T5936] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 70.511743][ T5936] usb 9-1: device descriptor read/8, error -71 [ 70.531234][ T39] audit: type=1400 audit(1736701993.134:565): avc: denied { write } for pid=7443 comm="syz.2.379" path="socket:[18340]" dev="sockfs" ino=18340 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 70.540953][ T39] audit: type=1400 audit(1736701993.134:566): avc: denied { nlmsg_read } for pid=7443 comm="syz.2.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 70.623381][ T5936] usb usb9-port1: unable to enumerate USB device [ 70.662270][ T39] audit: type=1400 audit(1736701993.264:567): avc: denied { append } for pid=7458 comm="syz.0.383" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.686162][ T7459] netfs: Couldn't get user pages (rc=-14) [ 70.815335][ T39] audit: type=1400 audit(1736701993.414:568): avc: denied { mounton } for pid=7461 comm="syz.0.384" path="/106/file0" dev="proc" ino=4026533291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 70.827096][ T7462] kernel profiling enabled (shift: 7) [ 70.953043][ T7468] xt_hashlimit: size too large, truncated to 1048576 [ 71.092956][ T5936] IPVS: starting estimator thread 0... [ 71.112241][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.114269][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.178582][ T7480] IPVS: using max 38 ests per chain, 91200 per kthread [ 71.221339][ T7488] netlink: 24 bytes leftover after parsing attributes in process `syz.0.391'. [ 71.251238][ T7490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7490 comm=syz.0.392 [ 71.324499][ T7497] CUSE: zero length info key specified [ 71.586192][ T7520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 71.633663][ T7523] o2cb: This node has not been configured. [ 71.635706][ T7523] o2cb: Cluster check failed. Fix errors before retrying. [ 71.638350][ T7523] (syz.0.405,7523,1):user_dlm_register:674 ERROR: status = -22 [ 71.640669][ T7523] (syz.0.405,7523,1):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 71.669633][ T7527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.406'. [ 71.778049][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.409'. [ 71.797554][ T7538] netlink: 'syz.2.409': attribute type 2 has an invalid length. [ 71.801148][ T1137] Bluetooth: hci4: Frame reassembly failed (-84) [ 71.985437][ T7550] program syz.4.414 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.989842][ T7550] xt_HMARK: spi-set and port-set can't be combined [ 72.002458][ T7551] netlink: 276 bytes leftover after parsing attributes in process `syz.0.413'. [ 72.196766][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'. [ 72.199383][ T7558] netlink: 'syz.4.416': attribute type 25 has an invalid length. [ 72.360270][ T7569] batman_adv: batadv0: Adding interface: dummy0 [ 72.362170][ T7569] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.370427][ T7569] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 72.612590][ T7582] netlink: 'syz.4.424': attribute type 17 has an invalid length. [ 72.875182][ T7599] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 73.002591][ T7608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7608 comm=syz.4.431 [ 73.022937][ T7610] tmpfs: Invalid gid '0x00000000ffffffff' [ 73.082731][ T7614] capability: warning: `syz.0.434' uses deprecated v2 capabilities in a way that may be insecure [ 73.272879][ T7629] usb usb7-port1: device 7-1 not suspended yet [ 73.318452][ T7632] tc_dump_action: action bad kind [ 73.417955][ T7641] syz.3.442: attempt to access beyond end of device [ 73.417955][ T7641] loop3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 73.421762][ T7641] qnx6: unable to read the first superblock [ 73.423483][ T7641] syz.3.442: attempt to access beyond end of device [ 73.423483][ T7641] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 73.427622][ T7641] qnx6: unable to read the first superblock [ 73.429897][ T7641] qnx6: unable to read the first superblock [ 73.448076][ T7641] kvm: emulating exchange as write [ 73.828411][ T5937] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 73.854225][ T7538] can0: slcan on ptm0. [ 73.879578][ T7648] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 73.892057][ T7648] CIFS mount error: No usable UNC path provided in device string! [ 73.892057][ T7648] [ 73.895359][ T7648] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 73.908669][ T7538] can0 (unregistered): slcan off ptm0. [ 74.025965][ T7658] __nla_validate_parse: 8 callbacks suppressed [ 74.025977][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.448'. [ 74.040251][ T7658] netlink: 92 bytes leftover after parsing attributes in process `syz.4.448'. [ 74.065575][ T7660] loop0: detected capacity change from 0 to 7 [ 74.070717][ T7660] Dev loop0: unable to read RDB block 7 [ 74.072404][ T7660] loop0: AHDI p1 [ 74.073418][ T7660] loop0: partition table partially beyond EOD, truncated [ 74.077896][ T7660] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20005 [ 74.139374][ T5937] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 74.281437][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'. [ 74.529868][ T5998] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 74.678314][ T5998] usb 5-1: Using ep0 maxpacket: 32 [ 74.681658][ T5998] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.685627][ T5998] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.689531][ T5998] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 74.692828][ T5998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.697148][ T5998] usb 5-1: config 0 descriptor?? [ 75.115492][ T5998] savu 0003:1E7D:2D5A.0004: hiddev1,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 75.305277][ T6275] usb 5-1: USB disconnect, device number 10 [ 75.909239][ T7726] usb usb7-port1: device 7-1 not suspended yet [ 75.963003][ T7730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.466'. [ 75.995444][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.467'. [ 76.231649][ T62] cfg80211: failed to load regulatory.db [ 76.518279][ T62] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 76.678278][ T62] usb 5-1: Using ep0 maxpacket: 8 [ 76.681760][ T62] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 76.684363][ T62] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 76.686475][ T62] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 76.689086][ T62] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 76.692290][ T62] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 76.695427][ T62] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 76.698499][ T62] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 76.702019][ T62] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 76.704493][ T62] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 76.706582][ T62] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 76.709190][ T62] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 76.712323][ T62] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 76.715506][ T62] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 76.718715][ T62] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 76.722195][ T62] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 76.724671][ T62] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 76.726721][ T62] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 76.729331][ T62] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 76.732585][ T62] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 76.735564][ T62] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 76.738581][ T62] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 76.743447][ T62] usb 5-1: string descriptor 0 read error: -22 [ 76.745232][ T62] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 76.747671][ T62] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.752457][ T62] adutux 5-1:246.0: ADU100 now attached to /dev/usb/adutux1 [ 76.781452][ T39] kauditd_printk_skb: 28 callbacks suppressed [ 76.781462][ T39] audit: type=1400 audit(1736701999.384:597): avc: denied { ioctl } for pid=7761 comm="syz.3.476" path="socket:[20766]" dev="sockfs" ino=20766 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 76.811303][ T39] audit: type=1400 audit(1736701999.414:598): avc: denied { getopt } for pid=7766 comm="syz.3.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.893218][ T7775] netlink: 188 bytes leftover after parsing attributes in process `syz.3.479'. [ 76.896714][ T7775] netlink: 'syz.3.479': attribute type 1 has an invalid length. [ 76.901929][ T7775] netlink: 188 bytes leftover after parsing attributes in process `syz.3.479'. [ 76.904605][ T7775] netlink: 'syz.3.479': attribute type 1 has an invalid length. [ 77.059064][ T7789] cdc_wdm 7-1:1.0: Error autopm - -16 [ 77.061502][ T6275] usb 5-1: USB disconnect, device number 11 [ 77.077471][ T7792] xt_CT: You must specify a L4 protocol and not use inversions on it [ 77.078319][ T7791] xt_CT: You must specify a L4 protocol and not use inversions on it [ 77.085290][ T39] audit: type=1400 audit(1736701999.684:599): avc: denied { listen } for pid=7790 comm="syz.2.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.145242][ T7803] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 77.191988][ T39] audit: type=1400 audit(1736701999.794:600): avc: denied { connect } for pid=7800 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.197836][ T39] audit: type=1400 audit(1736701999.794:601): avc: denied { write } for pid=7800 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.205257][ T39] audit: type=1400 audit(1736701999.794:602): avc: denied { read } for pid=7800 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.233385][ T7810] kvm: pic: single mode not supported [ 77.249182][ T7816] netlink: 'syz.2.486': attribute type 10 has an invalid length. [ 77.266506][ T7816] veth0_vlan: left promiscuous mode [ 77.277459][ T7816] veth0_vlan: entered promiscuous mode [ 77.281770][ T7816] team0: Device veth0_vlan failed to register rx_handler [ 77.334305][ T7824] --map-set only usable from mangle table [ 77.427286][ T7832] netlink: 36 bytes leftover after parsing attributes in process `syz.4.494'. [ 77.916178][ T7842] 9pnet_virtio: no channels available for device  [ 78.143752][ T7855] veth3: entered promiscuous mode [ 78.145334][ T7855] veth3: entered allmulticast mode [ 78.179641][ T7860] xfrm1: entered allmulticast mode [ 78.684856][ T39] audit: type=1400 audit(1736702001.284:603): avc: denied { map } for pid=7900 comm="syz.3.517" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.691347][ T39] audit: type=1400 audit(1736702001.284:604): avc: denied { call } for pid=7900 comm="syz.3.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 78.804789][ T7911] netlink: 'syz.3.520': attribute type 10 has an invalid length. [ 78.810021][ T7911] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 78.850179][ T39] audit: type=1400 audit(1736702001.454:605): avc: denied { ioctl } for pid=7914 comm="syz.4.522" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.204804][ T7953] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 79.227647][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.535'. [ 79.232414][ T39] audit: type=1400 audit(1736702001.834:606): avc: denied { getopt } for pid=7956 comm="syz.4.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.531148][ T7964] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 79.533499][ T7964] netlink: 'syz.0.536': attribute type 10 has an invalid length. [ 79.540882][ T7964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.544046][ T7964] batadv0: entered promiscuous mode [ 79.546108][ T7964] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 80.266341][ T7982] 9pnet_virtio: no channels available for device syz [ 80.416293][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.540'. [ 80.807324][ T8011] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input12 [ 80.932213][ T8017] netlink: 48 bytes leftover after parsing attributes in process `syz.4.549'. [ 81.079992][ T8020] warning: `syz.4.550' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.083769][ T8020] (unnamed net_device) (uninitialized): (slave geneve0): Device is not bonding slave [ 81.086428][ T8020] (unnamed net_device) (uninitialized): option active_slave: invalid value (geneve0) [ 82.138510][ T8044] netlink: 'syz.4.557': attribute type 10 has an invalid length. [ 82.147565][ T8044] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 82.177592][ T8046] netlink: 'syz.4.558': attribute type 2 has an invalid length. [ 82.247101][ T8048] vlan2: entered allmulticast mode [ 82.250178][ T8048] bond0: (slave vlan2): Opening slave failed [ 82.277824][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 82.281050][ T8053] netlink: 20 bytes leftover after parsing attributes in process `syz.4.560'. [ 82.283585][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 82.290407][ T8053] dlm: no locking on control device [ 82.421966][ T8064] fuse: Unknown parameter 'group_iN-00000000000000000000' [ 82.445725][ T5937] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 82.550798][ T8080] QAT: Stopping all acceleration devices. [ 82.782933][ T8094] syz.2.575: attempt to access beyond end of device [ 82.782933][ T8094] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 82.786847][ T8094] syz.2.575: attempt to access beyond end of device [ 82.786847][ T8094] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 82.791557][ T8094] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 82.794911][ T8094] syz.2.575: attempt to access beyond end of device [ 82.794911][ T8094] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 82.798849][ T8094] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 82.801882][ T8094] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 82.804023][ T8094] UDF-fs: Scanning with blocksize 512 failed [ 82.806551][ T8094] syz.2.575: attempt to access beyond end of device [ 82.806551][ T8094] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 82.810488][ T8094] syz.2.575: attempt to access beyond end of device [ 82.810488][ T8094] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 82.814107][ T8094] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 82.817253][ T8094] syz.2.575: attempt to access beyond end of device [ 82.817253][ T8094] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 82.822006][ T8094] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 82.825558][ T8094] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 82.828585][ T8094] UDF-fs: Scanning with blocksize 1024 failed [ 82.831652][ T8094] syz.2.575: attempt to access beyond end of device [ 82.831652][ T8094] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 82.833115][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 82.836419][ T8094] syz.2.575: attempt to access beyond end of device [ 82.836419][ T8094] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 82.843622][ T8094] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 82.848052][ T8094] syz.2.575: attempt to access beyond end of device [ 82.848052][ T8094] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 82.853143][ T8094] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 82.856724][ T8094] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 82.859625][ T8094] UDF-fs: Scanning with blocksize 2048 failed [ 82.862236][ T8094] syz.2.575: attempt to access beyond end of device [ 82.862236][ T8094] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 82.867474][ T8094] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 82.871480][ T8094] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 82.875058][ T8094] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 82.877874][ T8094] UDF-fs: Scanning with blocksize 4096 failed [ 82.880739][ T8094] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 82.971239][ T8099] unknown channel width for channel at 909000KHz? [ 82.974588][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 82.974600][ T39] audit: type=1400 audit(1736702005.574:608): avc: denied { setopt } for pid=8098 comm="syz.2.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 83.209624][ T39] audit: type=1400 audit(1736702005.814:609): avc: denied { mount } for pid=8108 comm="syz.0.581" name="/" dev="rpc_pipefs" ino=21934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 83.219353][ T39] audit: type=1326 audit(1736702005.814:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8108 comm="syz.0.581" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19e8d85d29 code=0x0 [ 83.291126][ T8122] netlink: 'syz.4.584': attribute type 9 has an invalid length. [ 83.293470][ T8122] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.584'. [ 83.327414][ T8122] sp0: Synchronizing with TNC [ 83.332930][ T8122] netlink: 'syz.4.584': attribute type 1 has an invalid length. [ 83.335177][ T8122] netlink: 308 bytes leftover after parsing attributes in process `syz.4.584'. [ 83.475673][ T5937] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 83.500501][ T8130] netlink: 412 bytes leftover after parsing attributes in process `syz.4.586'. [ 83.634976][ T8136] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 83.916651][ T39] audit: type=1400 audit(1736702006.514:611): avc: denied { create } for pid=8137 comm="syz.2.589" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 83.922665][ T39] audit: type=1400 audit(1736702006.514:612): avc: denied { unlink } for pid=8137 comm="syz.2.589" name="file0" dev="tmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 84.005201][ T39] audit: type=1400 audit(1736702006.604:613): avc: denied { bind } for pid=8148 comm="syz.0.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 84.029817][ T8149] netdevsim netdevsim0: Direct firmware load for . [ 84.029817][ T8149] failed with error -2 [ 84.033013][ T8149] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 84.033013][ T8149] [ 84.066460][ T8152] 8021q: VLANs not supported on ipvlan0 [ 84.821521][ T62] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 84.871897][ T39] audit: type=1400 audit(1736702007.474:614): avc: denied { accept } for pid=8160 comm="syz.2.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.930712][ T8168] 9pnet_fd: p9_fd_create_tcp (8168): problem binding to privport [ 84.932105][ T8165] netlink: 'syz.0.597': attribute type 1 has an invalid length. [ 84.968375][ T62] usb 9-1: Using ep0 maxpacket: 8 [ 84.971633][ T62] usb 9-1: config 0 has no interfaces? [ 84.972367][ T8174] netlink: 'syz.2.599': attribute type 2 has an invalid length. [ 84.974718][ T62] usb 9-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=e1.2d [ 84.975575][ T8174] netlink: 'syz.2.599': attribute type 1 has an invalid length. [ 84.978119][ T62] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.978131][ T62] usb 9-1: Product: syz [ 84.978139][ T62] usb 9-1: Manufacturer: syz [ 84.978146][ T62] usb 9-1: SerialNumber: syz [ 84.979978][ T62] usb 9-1: config 0 descriptor?? [ 84.980992][ T8174] netlink: 'syz.2.599': attribute type 1 has an invalid length. [ 85.050952][ T8184] __nla_validate_parse: 1 callbacks suppressed [ 85.050962][ T8184] netlink: 32 bytes leftover after parsing attributes in process `syz.2.601'. [ 85.055940][ T8184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=419 sclass=netlink_route_socket pid=8184 comm=syz.2.601 [ 85.060342][ T8184] netlink: 32 bytes leftover after parsing attributes in process `syz.2.601'. [ 85.100157][ T8188] netlink: 20 bytes leftover after parsing attributes in process `syz.2.602'. [ 85.168404][ T833] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 85.169413][ T8197] netlink: 52 bytes leftover after parsing attributes in process `syz.2.604'. [ 85.184860][ T62] usb 9-1: USB disconnect, device number 8 [ 85.266689][ T8206] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 85.269075][ T8206] IPv6: NLM_F_CREATE should be set when creating new route [ 85.272260][ T39] audit: type=1400 audit(1736702007.874:615): avc: denied { map } for pid=8196 comm="syz.2.604" path="socket:[22017]" dev="sockfs" ino=22017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 85.339806][ T833] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.342790][ T833] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 85.345274][ T833] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 85.347844][ T833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.359048][ T833] usb 5-1: config 0 descriptor?? [ 85.364133][ T833] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 85.366090][ T833] dvb-usb: bulk message failed: -22 (3/0) [ 85.374880][ T833] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 85.378136][ T833] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 85.381103][ T833] usb 5-1: media controller created [ 85.383573][ T833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 85.391292][ T833] dvb-usb: bulk message failed: -22 (6/0) [ 85.392974][ T833] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 85.397301][ T833] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input13 [ 85.402089][ T833] dvb-usb: schedule remote query interval to 150 msecs. [ 85.404736][ T833] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 85.563689][ T833] usb 5-1: USB disconnect, device number 12 [ 85.577497][ T833] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 85.579535][ T8223] syzkaller1: entered promiscuous mode [ 85.583143][ T8223] syzkaller1: entered allmulticast mode [ 85.659898][ T39] audit: type=1400 audit(1736702008.264:616): avc: denied { bind } for pid=8227 comm="syz.2.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 85.746382][ T8236] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 85.749321][ T8236] IPv6: NLM_F_CREATE should be set when creating new route [ 85.752313][ T8236] IPv6: NLM_F_CREATE should be set when creating new route [ 85.755003][ T8236] IPv6: NLM_F_CREATE should be set when creating new route [ 85.883365][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.616'. [ 85.886440][ T8252] bridge_slave_1: left allmulticast mode [ 85.888040][ T8252] bridge_slave_1: left promiscuous mode [ 85.890791][ T8252] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.894546][ T8252] bridge_slave_0: left allmulticast mode [ 85.896202][ T8252] bridge_slave_0: left promiscuous mode [ 85.897896][ T8252] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.999446][ T39] audit: type=1400 audit(1736702008.604:617): avc: denied { connect } for pid=8257 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.030182][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.616'. [ 86.032856][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.616'. [ 86.036047][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.616'. [ 86.039727][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.616'. [ 86.043211][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.616'. [ 86.601163][ T8301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=8301 comm=syz.0.631 [ 86.606471][ T8301] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 86.717778][ T8306] netlink: 'syz.0.633': attribute type 15 has an invalid length. [ 87.166743][ T5937] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 87.507839][ T8341] netlink: 'syz.4.644': attribute type 21 has an invalid length. [ 87.512512][ T8341] netlink: 'syz.4.644': attribute type 4 has an invalid length. [ 87.514732][ T8341] netlink: 'syz.4.644': attribute type 5 has an invalid length. [ 87.519958][ T8341] cgroup: subsys name conflicts with all [ 88.835735][ T8349] netlink: 'syz.2.648': attribute type 1 has an invalid length. [ 88.870431][ T8306] syz.0.633 (8306) used greatest stack depth: 20544 bytes left [ 89.168840][ T8365] loop6: detected capacity change from 0 to 524287999 [ 89.174257][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 89.262390][ T8378] fuse: Bad value for 'group_id' [ 89.264316][ T8378] fuse: Bad value for 'group_id' [ 89.319307][ T8383] netlink: 'syz.3.659': attribute type 10 has an invalid length. [ 89.322719][ T8383] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 91.028406][ T5937] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 91.112862][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 91.112873][ T39] audit: type=1400 audit(1736702013.714:630): avc: denied { connect } for pid=8401 comm="syz.3.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 91.231609][ T8402] team0 (unregistering): Port device team_slave_0 removed [ 91.236158][ T8402] team0 (unregistering): Port device team_slave_1 removed [ 91.432559][ T39] audit: type=1400 audit(1736702014.034:631): avc: denied { sqpoll } for pid=8411 comm="syz.2.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 91.458255][ T8415] @: renamed from vlan0 [ 91.487668][ T39] audit: type=1400 audit(1736702014.084:632): avc: denied { mount } for pid=8416 comm="syz.2.669" name="/" dev="configfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 91.508276][ T39] audit: type=1400 audit(1736702014.094:633): avc: denied { setattr } for pid=8416 comm="syz.2.669" name="/" dev="configfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.514550][ T39] audit: type=1400 audit(1736702014.104:634): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 91.645848][ T39] audit: type=1400 audit(1736702014.244:635): avc: denied { getopt } for pid=8431 comm="syz.2.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.180363][ T8472] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 92.356883][ T39] audit: type=1400 audit(1736702014.954:636): avc: denied { create } for pid=8480 comm="syz.3.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 92.363964][ T39] audit: type=1400 audit(1736702014.964:637): avc: denied { ioctl } for pid=8480 comm="syz.3.687" path="socket:[23885]" dev="sockfs" ino=23885 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 92.371642][ T39] audit: type=1400 audit(1736702014.964:638): avc: denied { write } for pid=8480 comm="syz.3.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 92.395148][ T8487] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 92.412568][ T8487] misc userio: Invalid payload size [ 92.459911][ T8491] geneve2: entered promiscuous mode [ 92.461524][ T8491] geneve2: entered allmulticast mode [ 92.692725][ T8516] netlink: 'syz.0.698': attribute type 10 has an invalid length. [ 92.708062][ T8516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.713647][ T8516] team0: Device bond0 failed to register rx_handler [ 93.001871][ T39] audit: type=1400 audit(1736702015.604:639): avc: denied { setopt } for pid=8544 comm="syz.0.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 93.135314][ T8554] __nla_validate_parse: 30 callbacks suppressed [ 93.135329][ T8554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.708'. [ 93.163032][ T8556] openvswitch: netlink: Missing valid actions attribute. [ 93.165134][ T8556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.910891][ T8618] tmpfs: Bad value for 'mpol' [ 93.947522][ T8622] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 94.029566][ T8625] program syz.0.733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.270272][ T8649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'. [ 94.303853][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.741'. [ 94.307174][ T8656] netlink: 40 bytes leftover after parsing attributes in process `syz.3.741'. [ 94.312535][ T8656] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.315671][ T8656] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.319998][ T8656] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.322478][ T8656] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.324972][ T8656] geneve2: entered promiscuous mode [ 94.326976][ T8656] geneve2: entered allmulticast mode [ 94.406407][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.746'. [ 95.057899][ T8687] netlink: 'syz.3.753': attribute type 4 has an invalid length. [ 95.136382][ T8701] tmpfs: Bad value for 'mpol' [ 95.163641][ T8704] RDS: rds_bind could not find a transport for fe80::41, load rds_tcp or rds_rdma? [ 95.217601][ T8709] netlink: 64 bytes leftover after parsing attributes in process `syz.2.761'. [ 95.966038][ T8700] orangefs_mount: mount request failed with -4 [ 96.121234][ T8751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.775'. [ 96.181811][ T39] kauditd_printk_skb: 10 callbacks suppressed [ 96.181826][ T39] audit: type=1400 audit(1736702018.784:650): avc: denied { listen } for pid=8754 comm="syz.0.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.195900][ T39] audit: type=1400 audit(1736702018.794:651): avc: denied { setopt } for pid=8754 comm="syz.0.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 97.414449][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.782'. [ 97.417689][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.782'. [ 97.449520][ T8784] netlink: 'syz.3.785': attribute type 1 has an invalid length. [ 97.451769][ T8784] netlink: 67 bytes leftover after parsing attributes in process `syz.3.785'. [ 97.456068][ T8788] netlink: 'syz.3.785': attribute type 1 has an invalid length. [ 97.630406][ T39] audit: type=1800 audit(1736702020.234:652): pid=8799 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.788" name="bus" dev="overlay" ino=1110 res=0 errno=0 [ 98.487620][ T8835] can0: slcan on ttyS3. [ 98.529447][ T8835] can0 (unregistered): slcan off ttyS3. [ 98.566236][ T39] audit: type=1400 audit(1736702021.164:653): avc: denied { write } for pid=8838 comm="syz.3.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 98.602373][ T8848] overlayfs: failed to resolve './file0': -2 [ 98.605317][ T39] audit: type=1400 audit(1736702021.204:654): avc: denied { bind } for pid=8847 comm="syz.3.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 98.614403][ T39] audit: type=1400 audit(1736702021.214:655): avc: denied { ioctl } for pid=8849 comm="syz.2.804" path="socket:[27859]" dev="sockfs" ino=27859 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 98.623657][ T8848] program syz.3.802 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.963714][ T8870] __nla_validate_parse: 2 callbacks suppressed [ 98.963736][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.808'. [ 99.021328][ T8876] [U] V3Fپ"W/4:XTZWTLW= [ 99.023666][ T8876] netlink: 'syz.3.809': attribute type 13 has an invalid length. [ 99.026093][ T8876] netlink: 152 bytes leftover after parsing attributes in process `syz.3.809'. [ 99.029288][ T8876] syz_tun: refused to change device tx_queue_len [ 99.031123][ T8876] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 99.089124][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.811'. [ 99.091683][ T8881] netlink: 56 bytes leftover after parsing attributes in process `syz.3.811'. [ 99.145790][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'. [ 99.198051][ T8886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=8886 comm=syz.3.813 [ 99.439946][ T8888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.814'. [ 99.443131][ T8888] overlay: ./bus is not a directory [ 99.483588][ T39] audit: type=1400 audit(1736702022.084:656): avc: granted { setsecparam } for pid=8896 comm="syz.3.817" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 99.488582][ T39] audit: type=1400 audit(1736702022.084:657): avc: granted { setsecparam } for pid=8896 comm="syz.3.817" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 99.493379][ T39] audit: type=1400 audit(1736702022.084:658): avc: granted { setsecparam } for pid=8896 comm="syz.3.817" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 99.498394][ T39] audit: type=1400 audit(1736702022.084:659): avc: granted { setsecparam } for pid=8896 comm="syz.3.817" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 100.349981][ T8935] xt_hashlimit: max too large, truncated to 1048576 [ 100.354804][ T8935] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 100.385101][ T8939] No control pipe specified [ 100.439801][ T8939] fuse: Unknown parameter 'g""m&F' [ 100.441850][ T8939] netlink: 28 bytes leftover after parsing attributes in process `syz.3.828'. [ 100.477847][ T8941] fuse: blksize only supported for fuseblk [ 100.556777][ T8945] ptrace attach of "/syz-executor exec"[8946] was attempted by "/syz-executor exec"[8945] [ 100.968839][ T8957] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.079584][ T8965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.839'. [ 101.658590][ T8974] netlink: 16 bytes leftover after parsing attributes in process `syz.2.841'. [ 101.661776][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.841'. [ 101.665623][ T8974] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.667775][ T8974] IPv6: NLM_F_CREATE should be set when creating new route [ 101.799971][ T8981] xt_ecn: cannot match TCP bits for non-tcp packets [ 102.049472][ T6000] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 102.145723][ T8990] sctp: [Deprecated]: syz.3.848 (pid 8990) Use of int in maxseg socket option. [ 102.145723][ T8990] Use struct sctp_assoc_value instead [ 102.178298][ T6000] usb 5-1: device descriptor read/64, error -71 [ 102.250050][ T8993] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.253960][ T8993] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.257497][ T8993] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.261394][ T8993] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.264587][ T8993] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.267249][ T8993] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.271512][ T8993] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.274209][ T8993] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.277311][ T8993] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.280640][ T8993] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.428368][ T6000] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 102.528172][ T9005] loop6: detected capacity change from 0 to 262144 [ 102.558481][ T6000] usb 5-1: device descriptor read/64, error -71 [ 102.568268][ C0] I/O error, dev loop6, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 102.572416][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 102.572429][ T39] audit: type=1400 audit(1736702025.174:664): avc: denied { execute } for pid=9007 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 102.582996][ C3] I/O error, dev loop6, sector 262016 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 102.583016][ T39] audit: type=1400 audit(1736702025.174:665): avc: denied { execute_no_trans } for pid=9007 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 102.586037][ C3] Buffer I/O error on dev loop6, logical block 32752, async page read [ 102.680363][ T6000] usb usb5-port1: attempt power cycle [ 102.708134][ T5288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 102.719579][ T5288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 102.732894][ T5288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 102.733107][ T9026] [U]  [ 102.736929][ T5288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 102.743042][ T5288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 102.745609][ T5288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 102.867181][ T9021] chnl_net:caif_netlink_parms(): no params data found [ 102.867829][ T9043] ceph: Path missing in source [ 102.912002][ T9021] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.914168][ T9021] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.916529][ T9021] bridge_slave_0: entered allmulticast mode [ 102.918826][ T9021] bridge_slave_0: entered promiscuous mode [ 102.921402][ T9021] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.923309][ T9021] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.925722][ T9021] bridge_slave_1: entered allmulticast mode [ 102.927829][ T9021] bridge_slave_1: entered promiscuous mode [ 102.962222][ T9021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.967498][ T9021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.993378][ T9021] team0: Port device team_slave_0 added [ 102.997359][ T9021] team0: Port device team_slave_1 added [ 103.022505][ T9021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.025229][ T9021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.028311][ T6000] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 103.035071][ T9021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.041388][ T9021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.043400][ T9021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.058280][ T9021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.059500][ T6000] usb 5-1: device descriptor read/8, error -71 [ 103.088175][ T9021] hsr_slave_0: entered promiscuous mode [ 103.090269][ T9021] hsr_slave_1: entered promiscuous mode [ 103.092217][ T9021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.094372][ T9021] Cannot create hsr debugfs directory [ 103.155485][ T39] audit: type=1400 audit(1736702025.754:666): avc: denied { mounton } for pid=9066 comm="syz.3.862" path="/256/file0" dev="configfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.161888][ T39] audit: type=1400 audit(1736702025.754:667): avc: denied { read } for pid=9066 comm="syz.3.862" name="/" dev="configfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.167881][ T39] audit: type=1400 audit(1736702025.754:668): avc: denied { open } for pid=9066 comm="syz.3.862" path="/256/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.173691][ T9021] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 103.180287][ T9021] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 103.183528][ T9021] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 103.187169][ T9021] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 103.198978][ T9021] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.201098][ T9021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.203834][ T9021] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.205899][ T9021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.236864][ T9077] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 103.244701][ T9021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.254511][ T9021] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.259239][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.260373][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.283206][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.285284][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.293338][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.295284][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.318847][ T6000] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 103.351618][ T6000] usb 5-1: device descriptor read/8, error -71 [ 103.373690][ T9021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.415481][ T9100] wireguard0: entered promiscuous mode [ 103.417224][ T9100] wireguard0: entered allmulticast mode [ 103.430848][ T9103] wireguard1: entered promiscuous mode [ 103.433785][ T9103] wireguard1: entered allmulticast mode [ 103.458473][ T6000] usb usb5-port1: unable to enumerate USB device [ 103.481791][ T9021] veth0_vlan: entered promiscuous mode [ 103.485780][ T9021] veth1_vlan: entered promiscuous mode [ 103.497303][ T9021] veth0_macvtap: entered promiscuous mode [ 103.500610][ T9021] veth1_macvtap: entered promiscuous mode [ 103.506626][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.510935][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.513745][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.516609][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.520543][ T9021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.524255][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.527152][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.529933][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.532880][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.535666][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.539265][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.542779][ T9021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.548786][ T9021] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.551242][ T9021] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.553646][ T9021] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.556035][ T9021] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.585814][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.588283][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.600643][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.602950][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.618377][ T39] audit: type=1400 audit(1736702026.214:669): avc: denied { mounton } for pid=9021 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 103.828431][ T9137] binder: BINDER_SET_CONTEXT_MGR already set [ 103.831198][ T9137] binder: 9133:9137 ioctl 4018620d 20000100 returned -16 [ 103.874057][ T39] audit: type=1400 audit(1736702026.474:670): avc: denied { setopt } for pid=9138 comm="syz.5.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 103.880652][ T39] audit: type=1400 audit(1736702026.474:671): avc: denied { ioctl } for pid=9138 comm="syz.5.876" path="socket:[27397]" dev="sockfs" ino=27397 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 104.048558][ T39] audit: type=1400 audit(1736702026.654:672): avc: denied { connect } for pid=9147 comm="syz.5.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 104.106507][ T39] audit: type=1400 audit(1736702026.704:673): avc: denied { bind } for pid=9147 comm="syz.5.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 104.788433][ T5937] Bluetooth: hci4: command tx timeout [ 104.950935][ T9169] binder: 9168:9169 ioctl c018620b 0 returned -14 [ 104.983187][ T9171] __nla_validate_parse: 5 callbacks suppressed [ 104.983204][ T9171] netlink: 20 bytes leftover after parsing attributes in process `syz.2.888'. [ 104.990801][ T9171] netlink: 40 bytes leftover after parsing attributes in process `syz.2.888'. [ 105.171735][ T9191] openvswitch: netlink: nsh attr 8192 is out of range max 3 [ 105.174047][ T9191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.294643][ T9205] netlink: 'syz.2.898': attribute type 10 has an invalid length. [ 105.297405][ T9205] hsr0: entered promiscuous mode [ 105.301462][ T9205] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 105.304490][ T9205] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 105.308021][ T9205] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 105.357626][ T9208] nvme_fabrics: missing parameter 'transport=%s' [ 105.359666][ T9208] nvme_fabrics: missing parameter 'nqn=%s' [ 105.367551][ C2] I/O error, dev loop6, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 105.372060][ C3] I/O error, dev loop6, sector 262016 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 105.374953][ C3] Buffer I/O error on dev loop6, logical block 32752, async page read [ 105.474117][ T9230] overlayfs: failed to resolve './file1': -2 [ 105.493081][ T9223] erofs (device erofs): cannot find valid erofs superblock [ 105.605731][ T9238] 9pnet_virtio: no channels available for device [ 105.608468][ T9240] xt_l2tp: missing protocol rule (udp|l2tpip) [ 105.655982][ T9242] IPVS: set_ctl: invalid protocol: 52247 224.0.0.2:20003 [ 105.684306][ T9248] netlink: 20 bytes leftover after parsing attributes in process `syz.3.910'. [ 105.686955][ T9248] netlink: 20 bytes leftover after parsing attributes in process `syz.3.910'. [ 105.690854][ T9248] netlink: 20 bytes leftover after parsing attributes in process `syz.3.910'. [ 105.693737][ T9248] netlink: 20 bytes leftover after parsing attributes in process `syz.3.910'. [ 105.696377][ T9248] netlink: 20 bytes leftover after parsing attributes in process `syz.3.910'. [ 105.699215][ T9248] netlink: 20 bytes leftover after parsing attributes in process `syz.3.910'. [ 105.701840][ T9248] netlink: 20 bytes leftover after parsing attributes in process `syz.3.910'. [ 105.704388][ T9248] netlink: 20 bytes leftover after parsing attributes in process `syz.3.910'. [ 105.985833][ T9278] fuse: Unknown parameter '' [ 105.998991][ T9282] overlayfs: missing 'lowerdir' [ 106.091930][ T5937] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 106.503222][ T5937] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 106.585248][ T9350] openvswitch: netlink: Unexpected mask (mask=4, allowed=10048) [ 106.679866][ T9363] afs: Unknown parameter '&.Qk' [ 106.725423][ T9369] blktrace: Concurrent blktraces are not allowed on sg0 [ 106.888695][ T9379] random: crng reseeded on system resumption [ 107.034732][ T9379] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194322 ns). Using initial count to start timer. [ 107.062047][ T9379] kvm: pic: non byte write [ 107.305672][ T9418] random: crng reseeded on system resumption [ 107.574984][ T5937] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 107.858292][ T6000] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 108.015164][ T6000] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 108.017572][ T6000] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.021042][ T6000] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 108.024451][ T6000] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 108.027621][ T6000] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.031460][ T6000] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.034118][ T6000] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.038041][ T6000] usb 10-1: config 0 descriptor?? [ 108.040145][ T9427] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 108.166151][ T9438] program syz.0.964 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.400763][ T39] kauditd_printk_skb: 18 callbacks suppressed [ 108.400774][ T39] audit: type=1400 audit(1736702031.004:692): avc: denied { read } for pid=9451 comm="syz.0.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.445582][ T6000] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 108.448630][ T6000] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 108.453796][ T6000] plantronics 0003:047F:FFFF.0005: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 108.468290][ T5937] Bluetooth: hci4: command tx timeout [ 108.951581][ T9464] CIFS: Unable to determine destination address [ 109.121991][ T9484] [U] [ 109.123120][ T9484] [U] [ 109.124145][ T9484] [U] [ 109.124947][ T9484] [U] [ 109.126578][ T9484] [U] [ 109.127412][ T9484] [U] [ 109.128214][ T9484] [U] [ 109.129081][ T9484] [U] [ 109.131096][ T9484] [U] [ 109.132020][ T9484] [U] [ 109.133045][ T9484] [U] [ 109.134055][ T9484] [U] [ 109.135053][ T9484] [U] [ 109.135916][ T9484] [U] [ 109.136897][ T9484] [U] [ 109.137892][ T9484] [U] [ 109.139081][ T9484] [U] [ 109.139999][ T9484] [U] [ 109.141021][ T9484] [U] [ 109.142003][ T9484] [U] [ 109.143088][ T9484] [U] [ 109.143945][ T9484] [U] [ 109.144780][ T9484] [U] [ 109.145720][ T9484] [U] [ 109.149110][ T9484] [U] [ 109.150238][ T9484] [U] [ 109.151321][ T9484] [U] [ 109.152438][ T9484] [U] [ 109.153439][ T9484] [U] [ 109.154512][ T9484] [U] [ 109.155548][ T9484] [U] [ 109.156619][ T9484] [U] [ 109.164043][ T9484] [U] [ 109.165115][ T9484] [U] [ 109.166149][ T9484] [U] [ 109.167186][ T9484] [U] [ 109.168345][ T9484] [U] [ 109.169381][ T9484] [U] [ 109.170399][ T9484] [U] [ 109.171443][ T9484] [U] [ 109.172638][ T9484] [U] [ 109.173684][ T9484] [U] [ 109.174555][ T9484] [U] [ 109.175607][ T9484] [U] [ 109.176774][ T9484] [U] [ 109.177864][ T9484] [U] [ 109.178913][ T9484] [U] [ 109.179982][ T9484] [U] [ 109.181460][ T9484] [U] [ 109.182510][ T9484] [U] [ 109.183534][ T9484] [U] [ 109.184557][ T9484] [U] [ 109.185650][ T9484] [U] [ 109.186740][ T9484] [U] [ 109.187819][ T9484] [U] [ 109.188895][ T9484] [U] [ 109.190940][ T9484] [U] [ 109.192549][ T9484] [U] [ 109.193601][ T9484] [U] [ 109.194647][ T9484] [U] [ 109.195908][ T9484] [U] [ 109.197012][ T9484] [U] [ 109.198080][ T9484] [U] [ 109.199163][ T9484] [U] [ 109.200372][ T9484] [U] [ 109.201452][ T9484] [U] [ 109.202532][ T9484] [U] [ 109.203597][ T9484] [U] [ 109.204487][ T9484] [U] [ 109.205346][ T9484] [U] [ 109.206202][ T9484] [U] [ 109.207022][ T9484] [U] [ 109.207925][ T9484] [U] [ 109.208764][ T9484] [U] [ 109.209592][ T9484] [U] [ 109.210400][ T9484] [U] [ 109.211408][ T9484] [U] [ 109.212227][ T9484] [U] [ 109.213042][ T9484] [U] [ 109.213840][ T9484] [U] [ 109.214691][ T9484] [U] [ 109.215503][ T9484] [U] [ 109.216309][ T9484] [U] [ 109.217108][ T9484] [U] [ 109.217914][ T9484] [U] [ 109.218723][ T9484] [U] [ 109.219528][ T9484] [U] [ 109.220342][ T9484] [U] [ 109.221304][ T9484] [U] [ 109.222143][ T9484] [U] [ 109.222955][ T9484] [U] [ 109.223758][ T9484] [U] [ 109.224587][ T9484] [U] [ 109.225388][ T9484] [U] [ 109.226195][ T9484] [U] [ 109.226994][ T9484] [U] [ 109.227817][ T9484] [U] [ 109.228670][ T9484] [U] [ 109.229469][ T9484] [U] [ 109.230268][ T9484] [U] [ 109.231144][ T9484] [U] [ 109.231938][ T9484] [U] [ 109.232746][ T9484] [U] [ 109.233546][ T9484] [U] [ 109.234359][ T9484] [U] [ 109.235180][ T9484] [U] [ 109.235992][ T9484] [U] [ 109.236789][ T9484] [U] [ 109.237618][ T9484] [U] [ 109.238433][ T9484] [U] [ 109.239247][ T9484] [U] [ 109.240060][ T9484] [U] [ 109.240920][ T9484] [U] [ 109.241712][ T9484] [U] [ 109.242516][ T9484] [U] [ 109.243315][ T9484] [U] [ 109.244131][ T9484] [U] [ 109.244931][ T9484] [U] [ 109.245723][ T9484] [U] [ 109.246521][ T9484] [U] [ 109.247331][ T9484] [U] [ 109.248141][ T9484] [U] [ 109.248938][ T9484] [U] [ 109.249766][ T9484] [U] [ 109.250762][ T9484] [U] [ 109.251563][ T9484] [U] [ 109.252377][ T9484] [U] [ 109.255548][ T9483] [U] [ 109.369365][ T9494] netlink: 'syz.0.978': attribute type 21 has an invalid length. [ 109.390386][ T9498] loop2: detected capacity change from 0 to 7 [ 109.394809][ T9498] Dev loop2: unable to read RDB block 7 [ 109.396465][ T9498] loop2: unable to read partition table [ 109.398127][ T9498] loop2: partition table beyond EOD, truncated [ 109.400340][ T9498] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 109.537909][ T39] audit: type=1400 audit(1736702032.134:693): avc: denied { accept } for pid=9502 comm="syz.3.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 110.048347][ T6000] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 110.230009][ T6000] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 110.233286][ T6000] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.235837][ T6000] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.240520][ T6000] usb 5-1: config 0 interface 0 has no altsetting 0 [ 110.243640][ T6000] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.246203][ T6000] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.249278][ T6000] usb 5-1: config 0 interface 0 has no altsetting 0 [ 110.251872][ T6000] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.254460][ T6000] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.257444][ T6000] usb 5-1: config 0 interface 0 has no altsetting 0 [ 110.260849][ T6000] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.263388][ T6000] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.266419][ T6000] usb 5-1: config 0 interface 0 has no altsetting 0 [ 110.269178][ T6000] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.271662][ T6000] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.274717][ T6000] usb 5-1: config 0 interface 0 has no altsetting 0 [ 110.277604][ T6000] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.280488][ T6000] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.283436][ T6000] usb 5-1: config 0 interface 0 has no altsetting 0 [ 110.286881][ T6000] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.289643][ T6000] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.292618][ T6000] usb 5-1: config 0 interface 0 has no altsetting 0 [ 110.295219][ T6000] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 110.297822][ T6000] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 110.301120][ T6000] usb 5-1: config 0 interface 0 has no altsetting 0 [ 110.305325][ T6000] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 110.308598][ T6000] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 110.311545][ T6000] usb 5-1: Product: syz [ 110.313038][ T6000] usb 5-1: Manufacturer: syz [ 110.314772][ T6000] usb 5-1: SerialNumber: syz [ 110.319656][ T6000] usb 5-1: config 0 descriptor?? [ 110.331407][ T6000] yurex 5-1:0.0: USB YUREX device now attached to Yurex #2 [ 110.523903][ T9533] cdc_wdm 7-1:1.0: Error autopm - -16 [ 110.528034][ T6000] usb 5-1: USB disconnect, device number 17 [ 110.530739][ T6000] yurex 5-1:0.0: USB YUREX #2 now disconnected [ 110.548394][ T5937] Bluetooth: hci4: command tx timeout [ 110.616731][ T5936] usb 10-1: USB disconnect, device number 2 [ 111.206763][ T39] audit: type=1326 audit(1736702033.804:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9546 comm="syz.2.995" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79d9b85d29 code=0x0 [ 111.286314][ T9551] xt_hashlimit: max too large, truncated to 1048576 [ 111.288753][ T9551] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 111.381529][ T9559] virtio-fs: tag <(null)> not found [ 111.421455][ T39] audit: type=1400 audit(1736702034.024:695): avc: denied { listen } for pid=9560 comm="syz.2.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.549952][ T9544] block nbd5: shutting down sockets [ 111.738448][ T9570] nbd5: detected capacity change from 0 to 22 [ 111.744163][ T9582] block nbd5: shutting down sockets [ 111.749731][ C2] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.753131][ C2] Buffer I/O error on dev nbd5, logical block 0, async page read [ 111.756502][ T6006] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.759721][ T6006] Buffer I/O error on dev nbd5, logical block 0, async page read [ 111.761955][ T6006] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.764394][ T6006] Buffer I/O error on dev nbd5, logical block 0, async page read [ 111.766780][ T6006] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.769690][ T6006] Buffer I/O error on dev nbd5, logical block 0, async page read [ 111.771881][ T6006] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.774359][ T6006] Buffer I/O error on dev nbd5, logical block 0, async page read [ 111.776570][ T6006] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.779434][ T6006] Buffer I/O error on dev nbd5, logical block 0, async page read [ 111.781650][ T6006] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.784252][ T6006] Buffer I/O error on dev nbd5, logical block 0, async page read [ 111.786538][ T6006] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.789462][ T6006] Buffer I/O error on dev nbd5, logical block 0, async page read [ 111.791743][ T6006] ldm_validate_partition_table(): Disk read failed. [ 111.793706][ T6006] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.796466][ T6006] Buffer I/O error on dev nbd5, logical block 0, async page read [ 111.798813][ T6006] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.801480][ T6006] Buffer I/O error on dev nbd5, logical block 0, async page read [ 111.803845][ T6006] Dev nbd5: unable to read RDB block 0 [ 111.805588][ T6006] nbd5: unable to read partition table [ 111.807295][ T6006] nbd5: partition table beyond EOD, truncated [ 111.814036][ T6006] ldm_validate_partition_table(): Disk read failed. [ 111.817036][ T6006] Dev nbd5: unable to read RDB block 0 [ 111.819631][ T6006] nbd5: unable to read partition table [ 111.821953][ T6006] nbd5: partition table beyond EOD, truncated [ 111.830441][ T39] audit: type=1400 audit(1736702034.434:696): avc: denied { read } for pid=9588 comm="syz.2.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.874043][ T39] audit: type=1400 audit(1736702034.474:697): avc: denied { accept } for pid=9588 comm="syz.2.1008" path="socket:[29265]" dev="sockfs" ino=29265 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.883452][ T39] audit: type=1400 audit(1736702034.474:698): avc: denied { map } for pid=9588 comm="syz.2.1008" path="socket:[29265]" dev="sockfs" ino=29265 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.938476][ T5936] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 112.108294][ T5936] usb 5-1: Using ep0 maxpacket: 8 [ 112.111212][ T5936] usb 5-1: config 0 has no interfaces? [ 112.114110][ T5936] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.116932][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 112.119500][ T5936] usb 5-1: SerialNumber: syz [ 112.122152][ T5936] usb 5-1: config 0 descriptor?? [ 112.326027][ T5936] usb 5-1: USB disconnect, device number 18 [ 112.438837][ T9615] input: syz1 as /devices/virtual/input/input18 [ 112.498324][ T39] audit: type=1400 audit(1736702035.094:699): avc: denied { checkpoint_restore } for pid=9614 comm="syz.5.1014" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 112.623315][ T9622] tmpfs: Cannot change global quota limit on remount [ 112.625601][ T9623] tmpfs: Cannot change global quota limit on remount [ 112.857912][ T9630] 9p: Unknown uid 00000000004294967295 [ 113.088694][ T9642] __nla_validate_parse: 41 callbacks suppressed [ 113.088706][ T9642] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1022'. [ 113.166132][ T9646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1023'. [ 113.172228][ T9646] ipvlan2: entered promiscuous mode [ 113.175159][ T9646] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 113.178324][ T9646] team0: Device ipvlan2 is already an upper device of the team interface [ 113.416993][ T39] audit: type=1400 audit(1736702036.014:700): avc: denied { mount } for pid=9651 comm="syz.5.1026" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 113.417304][ T9652] devtmpfs: Cannot change global quota limit on remount [ 113.428268][ T39] audit: type=1400 audit(1736702036.014:701): avc: denied { remount } for pid=9651 comm="syz.5.1026" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 113.433677][ T39] audit: type=1400 audit(1736702036.024:702): avc: denied { map } for pid=9651 comm="syz.5.1026" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.440620][ T39] audit: type=1400 audit(1736702036.024:703): avc: denied { execute } for pid=9651 comm="syz.5.1026" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.540201][ T5937] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 113.568447][ T9662] 9pnet: p9_errstr2errno: server reported unknown error [ 113.573729][ T9662] tmpfs: Bad value for 'mpol' [ 113.609158][ T9666] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 113.610967][ T9666] PKCS7: Only support pkcs7_signedData type [ 113.614901][ T9666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.672597][ T39] audit: type=1400 audit(1736702036.274:704): avc: denied { write } for pid=9673 comm="syz.3.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 113.672707][ T9674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1034'. [ 113.707584][ T9676] binder: 9675:9676 ioctl 4018620d 0 returned -22 [ 113.710638][ T9676] binder: 9675:9676 ioctl 40309439 20000100 returned -22 [ 113.780076][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 113.947176][ T39] audit: type=1400 audit(1736702036.544:705): avc: denied { setopt } for pid=9682 comm="syz.3.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 113.953516][ T39] audit: type=1400 audit(1736702036.544:706): avc: denied { ioctl } for pid=9682 comm="syz.3.1036" path="socket:[32556]" dev="sockfs" ino=32556 ioctlcmd=0x8935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.012396][ T9688] tun0: tun_chr_ioctl cmd 1074025675 [ 114.013876][ T9688] tun0: persist disabled [ 114.022148][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1040'. [ 114.025182][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1040'. [ 114.025360][ T9691] ceph: Path missing in source [ 114.066527][ T9692] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1041'. [ 114.069496][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'. [ 114.073205][ T9692] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.129319][ T39] audit: type=1400 audit(1736702036.734:707): avc: denied { setattr } for pid=9693 comm="syz.0.1042" name="PING" dev="sockfs" ino=29350 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 114.133594][ T9690] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 114.206263][ T9703] openvswitch: netlink: IPv4 frag type 224 is out of range max 2 [ 114.401474][ T39] audit: type=1400 audit(1736702037.004:708): avc: denied { write } for pid=9704 comm="syz.5.1046" path="socket:[29378]" dev="sockfs" ino=29378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 114.408366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.410807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.413282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.415757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.418387][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.420693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.423073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.425474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.428078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.479082][ T9708] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 114.566020][ T39] audit: type=1400 audit(1736702037.164:709): avc: denied { nlmsg_read } for pid=9720 comm="syz.2.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 114.679620][ T9737] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 114.975331][ T9759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9759 comm=syz.3.1052 [ 114.975333][ T9758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9758 comm=syz.3.1052 [ 114.995318][ T9768] Cannot find del_set index 4 as target [ 115.154077][ T9786] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 115.201347][ T9793] vivid-001: ================= START STATUS ================= [ 115.202458][ T9793] vivid-001: RDS Tx I/O Mode: Controls [ 115.206766][ T9793] vivid-001: RDS Program ID: 32904 [ 115.208911][ T9793] vivid-001: RDS Program Type: 3 [ 115.210364][ T9793] vivid-001: RDS PS Name: VIVID-TX [ 115.211814][ T9793] vivid-001: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 115.214798][ T9793] vivid-001: RDS Stereo: true [ 115.216171][ T9793] vivid-001: RDS Artificial Head: false [ 115.217769][ T9793] vivid-001: RDS Compressed: false [ 115.219381][ T9793] vivid-001: RDS Dynamic PTY: false [ 115.220891][ T9793] vivid-001: RDS Traffic Announcement: false [ 115.222697][ T9793] vivid-001: RDS Traffic Program: true [ 115.224261][ T9793] vivid-001: RDS Music: true [ 115.225670][ T9793] vivid-001: ================== END STATUS ================== [ 115.329125][ T9798] overlayfs: missing 'lowerdir' [ 115.353145][ T9798] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1063'. [ 115.404816][ T9801] ip6tnl0: entered promiscuous mode [ 115.406701][ T9801] ip6tnl0: entered allmulticast mode [ 115.449477][ T9803] 9pnet_fd: p9_fd_create_tcp (9803): problem binding to privport [ 115.510079][ T9803] 9pnet_virtio: no channels available for device 127.0.0.1 [ 115.550844][ T9811] overlayfs: failed to resolve './file1': -2 [ 115.663773][ T9825] binder: BINDER_SET_CONTEXT_MGR already set [ 115.666149][ T9825] binder: 9822:9825 ioctl 4018620d 20000100 returned -16 [ 115.701677][ T9831] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1072'. [ 115.705112][ T9831] netem: unknown loss type 13 [ 115.707500][ T9831] netem: change failed [ 115.735072][ T9832] fuseblk: Bad value for 'fd' [ 115.999146][ T9857] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1081'. [ 116.005276][ T9863] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 116.156075][ T9890] affs: Unknown parameter '[ u8EޯqϏ>ppYN+X[1\EK:y!G [ 116.156075][ T9890] MWvYFlrCI9z [ 116.156075][ T9890] ʠ1S' [ 116.266169][ T5937] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 116.475122][ T9913] fuse: Bad value for 'user_id' [ 116.477179][ T9913] fuse: Bad value for 'user_id' [ 116.491447][ T9913] overlayfs: statfs failed on './file0' [ 116.906155][ T9929] netlink: zone id is out of range [ 116.907603][ T9929] netlink: zone id is out of range [ 116.909857][ T9929] netlink: get zone limit has 8 unknown bytes [ 117.032782][ T9948] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 117.140146][ T9964] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.142302][ T9964] IPv6: NLM_F_CREATE should be set when creating new route [ 117.145387][ T9964] IPv6: NLM_F_CREATE should be set when creating new route [ 117.148406][ T9964] IPv6: NLM_F_CREATE should be set when creating new route [ 118.377254][T10015] tmpfs: Bad value for 'mpol' [ 118.468325][T10024] [U] V3Fپ"W/4:XTZWTLW= [ 118.506245][T10024] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194322 ns). Using initial count to start timer. [ 118.540936][T10024] kvm: pic: non byte write [ 118.544669][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 118.544679][ T39] audit: type=1400 audit(1736702041.144:721): avc: denied { read } for pid=10023 comm="syz.0.1128" path="socket:[34898]" dev="sockfs" ino=34898 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 118.955498][ T39] audit: type=1400 audit(1736702041.554:722): avc: denied { read } for pid=10055 comm="syz.0.1135" dev="sockfs" ino=34122 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 118.979053][T10058] Attempt to restore checkpoint with obsolete wellknown handles [ 119.226798][T10074] usb usb7-port1: device 7-1 not suspended yet [ 119.280355][T10075] input: syz1 as /devices/virtual/input/input20 [ 119.326688][T10079] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=10079 comm=syz.3.1142 [ 119.413669][T10082] overlay: ./file0 is not a directory [ 119.431233][ T833] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 119.452942][T10082] __nla_validate_parse: 6 callbacks suppressed [ 119.452959][T10082] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1143'. [ 119.471344][T10092] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1145'. [ 119.474857][T10092] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1145'. [ 119.477425][T10092] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1145'. [ 119.569032][T10103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1150'. [ 119.593753][ T833] usb 5-1: config 0 has an invalid descriptor of length 51, skipping remainder of the config [ 119.597882][ T833] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.603604][ T833] usb 5-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 119.607222][ T833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.610800][ T833] usb 5-1: config 0 descriptor?? [ 119.614156][ T833] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 119.748070][T10114] netlink: 'syz.3.1152': attribute type 32 has an invalid length. [ 119.752134][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1152'. [ 119.754929][T10114] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 119.816682][ T833] usb 5-1: USB disconnect, device number 19 [ 119.893953][ T39] audit: type=1400 audit(1736702042.494:723): avc: denied { mount } for pid=10126 comm="syz.3.1155" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 119.904645][ T39] audit: type=1400 audit(1736702042.504:724): avc: denied { map } for pid=10126 comm="syz.3.1155" path="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 119.913709][ T39] audit: type=1400 audit(1736702042.504:725): avc: denied { create } for pid=10126 comm="syz.3.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 119.922490][ T39] audit: type=1400 audit(1736702042.504:726): avc: denied { sys_admin } for pid=10126 comm="syz.3.1155" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 119.929304][ T39] audit: type=1400 audit(1736702042.514:727): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 120.251322][T10171] debugfs: Bad value for 'uid' [ 120.251332][ T39] audit: type=1400 audit(1736702042.854:728): avc: denied { remount } for pid=10170 comm="syz.5.1165" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 120.253726][T10171] debugfs: Bad value for 'uid' [ 120.305382][ T39] audit: type=1400 audit(1736702042.904:729): avc: denied { write } for pid=10172 comm="syz.5.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 120.305637][T10173] netlink: 'syz.5.1166': attribute type 1 has an invalid length. [ 120.312484][ T5288] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 120.318279][ T5288] Bluetooth: hci0: Injecting HCI hardware error event [ 120.324417][ T5946] Bluetooth: hci0: hardware error 0x00 [ 120.426855][T10183] fuse: Bad value for 'group_id' [ 120.429221][T10183] fuse: Bad value for 'group_id' [ 120.639596][T10192] netlink: 'syz.5.1171': attribute type 11 has an invalid length. [ 120.752775][T10205] netlink: 'syz.5.1176': attribute type 6 has an invalid length. [ 120.956434][T10226] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 120.956945][T10225] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 120.963804][T10226] tmpfs: Bad value for 'mpol' [ 121.039692][T10230] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input21 [ 121.275619][ T39] audit: type=1400 audit(1736702043.874:730): avc: denied { append } for pid=10249 comm="syz.2.1183" name="file0" dev="9p" ino=37098942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.311237][T10252] syzkaller1: entered promiscuous mode [ 121.313251][T10252] syzkaller1: entered allmulticast mode [ 121.449202][T10259] syz_tun: entered allmulticast mode [ 121.454000][T10259] dvmrp8: entered allmulticast mode [ 121.457609][T10258] syz_tun: left allmulticast mode [ 121.633850][T10279] bond1: entered promiscuous mode [ 121.635522][T10279] bond1: entered allmulticast mode [ 121.637234][T10279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.643357][T10273] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 122.070959][ T5288] Bluetooth: hci1: command 0x1003 tx timeout [ 122.071026][ T5937] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 122.388470][ T5946] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 122.809187][T10323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1199'. [ 122.811882][T10323] syz_tun: left allmulticast mode [ 122.813384][T10323] syz_tun: left promiscuous mode [ 122.814999][T10323] bridge0: port 3(syz_tun) entered disabled state [ 122.830186][T10323] bridge_slave_1: left allmulticast mode [ 122.832420][T10323] bridge_slave_1: left promiscuous mode [ 122.834831][T10323] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.843007][T10323] bridge_slave_0: left allmulticast mode [ 122.845407][T10323] bridge_slave_0: left promiscuous mode [ 122.850193][T10323] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.071322][T10333] netlink: 'syz.3.1201': attribute type 9 has an invalid length. [ 123.073850][T10333] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1201'. [ 123.276067][T10351] 9pnet_virtio: no channels available for device ./file0 [ 123.282359][T10349] input: syz1 as /devices/virtual/input/input22 [ 123.508434][T10370] block nbd0: Device being setup by another task [ 123.518973][T10370] block nbd0: shutting down sockets [ 123.573313][T10384] 9pnet_fd: Insufficient options for proto=fd [ 123.617922][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 123.617933][ T39] audit: type=1326 audit(1736702046.214:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10391 comm="syz.0.1217" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19e8d85d29 code=0x0 [ 123.631903][T10393] Bluetooth: MGMT ver 1.23 [ 124.274874][ T5937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.279237][ T5937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.281970][ T5937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.285513][ T5937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.287839][ T5937] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 124.289977][ T5937] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 124.360700][T10407] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 124.367535][T10399] chnl_net:caif_netlink_parms(): no params data found [ 124.497138][ T39] audit: type=1400 audit(1736702047.094:737): avc: denied { map } for pid=10422 comm="syz.0.1227" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 124.519858][T10424] program syz.2.1226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.540324][T10399] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.542481][T10399] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.544995][T10399] bridge_slave_0: entered allmulticast mode [ 124.549383][T10399] bridge_slave_0: entered promiscuous mode [ 124.553630][T10399] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.555857][T10399] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.558018][T10399] bridge_slave_1: entered allmulticast mode [ 124.562348][T10399] bridge_slave_1: entered promiscuous mode [ 124.603637][T10399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.608127][T10399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.651305][T10399] team0: Port device team_slave_0 added [ 124.655039][T10399] team0: Port device team_slave_1 added [ 124.658317][ T39] audit: type=1400 audit(1736702047.254:738): avc: denied { create } for pid=10431 comm="syz.0.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.668282][ T39] audit: type=1400 audit(1736702047.264:739): avc: denied { write } for pid=10431 comm="syz.0.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.676922][ T39] audit: type=1400 audit(1736702047.264:740): avc: denied { nlmsg_write } for pid=10431 comm="syz.0.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.774321][T10399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.776353][T10399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.783699][T10399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.787594][T10399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.789668][T10399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.796993][T10399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.832070][T10399] hsr_slave_0: entered promiscuous mode [ 124.836240][T10399] hsr_slave_1: entered promiscuous mode [ 124.838861][T10399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.841046][T10399] Cannot create hsr debugfs directory [ 124.931344][T10399] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 124.950871][T10399] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 124.959310][T10399] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 124.967179][T10399] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 124.981850][T10399] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.983875][T10399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.985959][T10399] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.987945][T10399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.016814][T10399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.029826][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.036483][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.077018][T10399] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.080847][T10453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10453 comm=syz.0.1236 [ 125.089252][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.092324][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.098185][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.100298][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.222173][T10399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.323257][T10399] veth0_vlan: entered promiscuous mode [ 125.330497][T10399] veth1_vlan: entered promiscuous mode [ 125.341974][T10399] veth0_macvtap: entered promiscuous mode [ 125.346692][T10399] veth1_macvtap: entered promiscuous mode [ 125.357976][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.361675][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.364603][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.367573][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.370539][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.373599][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.377129][T10399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.382540][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.385517][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.388570][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.391581][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.394504][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.397740][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.401041][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.404096][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.407632][T10399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.412236][T10399] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.415186][T10399] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.418609][T10399] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.421869][T10399] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.474626][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.478981][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.503110][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.506053][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.516535][ T39] audit: type=1400 audit(1736702048.114:741): avc: denied { mounton } for pid=10399 comm="syz-executor" path="/syzkaller.zyCwjs/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=36423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 125.534721][ T39] audit: type=1400 audit(1736702048.134:742): avc: denied { mount } for pid=10399 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 125.688821][T10491] netlink: 'syz.6.1220': attribute type 10 has an invalid length. [ 125.727759][T10491] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 125.812373][T10502] hub 2-0:1.0: USB hub found [ 125.814340][T10502] hub 2-0:1.0: 2 ports detected [ 125.832512][ T39] audit: type=1400 audit(1736702048.434:743): avc: denied { create } for pid=10501 comm="syz.2.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 126.035182][T10485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.105113][T10507] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1244'. [ 126.200242][T10510] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1245'. [ 126.230274][T10510] afs: Unknown parameter 'dynkaller0' [ 126.308355][ T5937] Bluetooth: hci0: command tx timeout [ 126.767038][T10522] netlink: 'syz.6.1249': attribute type 10 has an invalid length. [ 126.783657][T10522] veth0_vlan: left promiscuous mode [ 126.788008][T10522] veth0_vlan: entered promiscuous mode [ 126.793013][T10522] team0: Device veth0_vlan failed to register rx_handler [ 126.922209][ T5937] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 126.956451][ T39] audit: type=1400 audit(1736702049.554:744): avc: denied { listen } for pid=10529 comm="syz.6.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 126.969340][ T39] audit: type=1400 audit(1736702049.554:745): avc: denied { bind } for pid=10529 comm="syz.6.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 127.578394][T10544] netlink: 'syz.5.1255': attribute type 10 has an invalid length. [ 127.590582][T10544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.594173][T10544] team0: Port device bond0 added [ 127.856629][T10546] netlink: 'syz.6.1256': attribute type 27 has an invalid length. [ 127.919327][T10546] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.921484][T10546] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.083228][T10546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.092510][T10546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.175065][T10546] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.177681][T10546] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.180485][T10546] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.183108][T10546] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.267823][T10547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.271386][T10547] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.280320][T10547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.328788][T10559] bpf: Bad value for 'gid' [ 128.337982][ T5937] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 128.358913][T10563] ip_vti0: mtu less than device minimum [ 128.388431][ T5937] Bluetooth: hci0: command tx timeout [ 128.403119][T10570] xt_TCPMSS: Only works on TCP SYN packets [ 128.559712][ T5937] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 128.569220][T10591] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10591 comm=syz.6.1271 [ 128.617594][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1274'. [ 128.620496][T10600] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1274'. [ 128.622994][T10600] netlink: 'syz.6.1274': attribute type 13 has an invalid length. [ 128.625155][T10600] netlink: 'syz.6.1274': attribute type 11 has an invalid length. [ 128.680446][T10606] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1276'. [ 128.691063][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.693147][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.695809][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.697949][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.700777][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.702896][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.704992][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.707823][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.710388][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.712689][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.714777][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.717001][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.719489][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.722133][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.724259][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.726405][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.728886][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.731105][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.733198][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.735281][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.737937][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.740466][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.742632][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.744769][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.746907][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.749617][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.751751][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.754331][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.756478][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.758971][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.761170][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.763253][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.765401][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.767809][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.771194][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.773971][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.776732][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.780027][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.782200][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.784649][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.786695][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.789160][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.791250][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.793482][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.795534][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.797671][ T5976] hid-generic 0008:0000:0000.0006: unknown main item tag 0x0 [ 128.804396][ T5976] hid-generic 0008:0000:0000.0006: hidraw1: HID v0.03 Device [syz0] on syz0 [ 130.468385][ T5937] Bluetooth: hci0: command tx timeout [ 132.548606][ T5937] Bluetooth: hci0: command tx timeout [ 132.551190][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.553044][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.189903][T10625] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1279'. [ 134.234124][T10629] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1280'. [ 134.237527][T10629] netlink: 'syz.0.1280': attribute type 7 has an invalid length. [ 134.241581][T10629] netlink: 'syz.0.1280': attribute type 8 has an invalid length. [ 134.244426][T10629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1280'. [ 134.253161][T10629] ip6gretap0: entered promiscuous mode [ 134.259394][T10629] erspan0: entered promiscuous mode [ 134.262455][T10629] gretap0: entered promiscuous mode [ 134.445619][T10648] delete_channel: no stack [ 134.565615][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 134.565626][ T39] audit: type=1400 audit(1736702057.164:749): avc: denied { accept } for pid=10657 comm="syz.5.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 134.573182][ T39] audit: type=1400 audit(1736702057.164:750): avc: denied { getopt } for pid=10657 comm="syz.5.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 134.604238][T10667] nbd: must specify a device to reconfigure [ 134.703028][ T39] audit: type=1400 audit(1736702057.304:751): avc: denied { create } for pid=10685 comm="syz.2.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 134.710412][ T39] audit: type=1400 audit(1736702057.314:752): avc: denied { read } for pid=10685 comm="syz.2.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 134.746867][T10690] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1297'. [ 134.815736][ T5937] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 134.853594][T10708] xt_ecn: cannot match TCP bits for non-tcp packets [ 134.939751][T10716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1305'. [ 134.942955][T10718] overlay: ./bus is not a directory [ 134.975868][T10721] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1308'. [ 134.982082][T10723] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1308'. [ 135.081676][T10735] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 135.095471][ T5937] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 135.122470][T10740] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.128902][T10740] af_packet: tpacket_rcv: packet too big, clamped from 1064 to 4294967272. macoff=96 [ 135.133109][T10740] netlink: 344 bytes leftover after parsing attributes in process `syz.2.1313'. [ 135.137385][ T39] audit: type=1400 audit(1736702057.734:753): avc: denied { append } for pid=10739 comm="syz.2.1313" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 135.153361][ T39] audit: type=1400 audit(1736702057.754:754): avc: denied { append } for pid=10741 comm="syz.6.1314" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 135.163638][ T39] audit: type=1326 audit(1736702057.754:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10741 comm="syz.6.1314" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2ff85d29 code=0x7ffc0000 [ 135.173067][ T39] audit: type=1326 audit(1736702057.754:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10741 comm="syz.6.1314" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2ff85d29 code=0x7ffc0000 [ 135.182124][ T39] audit: type=1326 audit(1736702057.754:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10741 comm="syz.6.1314" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9f2ff85d29 code=0x7ffc0000 [ 135.193928][ T39] audit: type=1326 audit(1736702057.764:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10741 comm="syz.6.1314" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f2ff85d29 code=0x7ffc0000 [ 135.359378][T10747] netlink: ct family unspecified [ 135.360883][T10747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.365157][T10747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1315'. [ 136.087855][T10763] Bluetooth: MGMT ver 1.23 [ 136.089917][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 136.131063][T10764] netlink: 'syz.6.1320': attribute type 29 has an invalid length. [ 136.190014][ T5937] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 136.458302][ T5976] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 136.608348][ T5976] usb 11-1: Using ep0 maxpacket: 8 [ 136.615508][ T5976] usb 11-1: config 170 has an invalid interface number: 250 but max is 0 [ 136.619157][ T5976] usb 11-1: config 170 contains an unexpected descriptor of type 0x2, skipping [ 136.622737][ T5976] usb 11-1: config 170 contains an unexpected descriptor of type 0x2, skipping [ 136.626394][ T5976] usb 11-1: config 170 has an invalid descriptor of length 130, skipping remainder of the config [ 136.631236][ T5976] usb 11-1: config 170 has no interface number 0 [ 136.633825][ T5976] usb 11-1: config 170 interface 250 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 136.639264][ T5976] usb 11-1: config 170 interface 250 has no altsetting 0 [ 136.644462][ T5976] usb 11-1: New USB device found, idVendor=0424, idProduct=9909, bcdDevice=22.2b [ 136.647336][ T5976] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.650543][ T5976] usb 11-1: Product: ⇴럘襞컆暙꛸撈鰫펾鈤噿糍氈䉿蒆箊Ⱇ萖糞鵭詹୕椳㱬秺뗎癟츦鰝琎㔧쿙ꅤꧻ䎢隀⥎緬ꐇ顜⊲⧪蕫氢㟗嘃玺䂐⚓謁셢冟䔿䡰膧䳝媳ਕ膘皘ॴ汁䈽뾂鷦⊮謃땕샬ꂋ㭉쏼灀蟫跊㊛웢痃鐯쫳ﺘ쓼켍儍㌃䀴꘭䴂쬉멪వ﵀땐ꞙﹴ乷 [ 136.659382][ T5976] usb 11-1: Manufacturer: ﯜ韪፲ૃᵆ篹࿴핣퉩乘牋š鑯ᚵ茲ⴤ⭑遟짰Ὡⓦࢍ셽尡䲫뿱妓询杼雍䂵䩼ᶚꘇꑈ炻쫔橄헌槝ꆛ腞坩ਖ౨悰䨤તⅴ䃅∻ჵᛊ䭵㤻錺蕇籘ᡆꭠ䖪⃲쬏䌉䝞謑ꡨ䞕햖ⵝ㺱וּ钐餝駝䇿፽ᮺ썅ﲎ堦큅躚ᬼ淟迌긾稹纪↚ꝶ祱 [ 136.668039][ T5976] usb 11-1: SerialNumber: Ћ [ 136.921243][ T5976] smsc95xx v2.0.0 [ 136.922348][ T5976] smsc95xx 11-1:170.250 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 136.925895][ T5976] smsc95xx 11-1:170.250: probe with driver smsc95xx failed with error -22 [ 136.935343][ T5976] usb 11-1: USB disconnect, device number 2 [ 147.308342][T10802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.363129][T10802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.421165][T10809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.747172][T10813] __nla_validate_parse: 1 callbacks suppressed [ 147.747183][T10813] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1336'. [ 147.818480][T10814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54329 sclass=netlink_route_socket pid=10814 comm=syz.0.1336 [ 149.161984][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058ceec00: rx timeout, send abort [ 149.167866][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888058ceec00: 0x0f002: (3) A timeout occurred and this is the connection abort to close the session. [ 151.793327][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 151.793336][ T39] audit: type=1400 audit(1736702074.394:764): avc: denied { shutdown } for pid=10825 comm="syz.2.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.986490][ T5937] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 152.091802][ T39] audit: type=1326 audit(1736702074.694:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.0.1346" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19e8d85d29 code=0x0 [ 152.130408][ T5937] Bluetooth: hci4: link tx timeout [ 152.130450][ T5937] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.138654][ T5946] Bluetooth: hci4: link tx timeout [ 152.138666][ T5946] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.166625][T10860] netlink: 'syz.5.1347': attribute type 9 has an invalid length. [ 152.170837][T10860] netlink: 61951 bytes leftover after parsing attributes in process `syz.5.1347'. [ 152.173290][T10860] sch_tbf: peakrate 64 is lower than or equals to rate 256 ! [ 152.217290][ T5946] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 152.253057][T10878] tc_dump_action: action bad kind [ 152.307264][ T39] audit: type=1400 audit(1736702074.904:766): avc: denied { listen } for pid=10882 comm="syz.0.1356" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 152.431982][T10899] sch_fq: defrate 0 ignored. [ 152.438893][T10901] xt_hashlimit: size too large, truncated to 1048576 [ 152.521181][ T62] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 152.691340][ T62] usb 11-1: Using ep0 maxpacket: 8 [ 152.696569][ T62] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 152.699943][ T62] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 152.702901][ T62] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 152.705812][ T62] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.712744][ T62] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 152.715564][ T62] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.925264][T10881] cdc_wdm 7-1:1.0: Error autopm - -16 [ 152.928843][T10881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.931412][T10881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.934256][T10881] cdc_wdm 7-1:1.0: Error autopm - -16 [ 152.936462][ T62] usb 11-1: usb_control_msg returned -71 [ 152.938095][ T62] usbtmc 11-1:16.0: can't read capabilities [ 152.942551][ T39] audit: type=1400 audit(1736702075.544:767): avc: denied { mounton } for pid=10879 comm="syz.6.1355" path="/40/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 152.948857][T10881] kAFS: No cell specified [ 152.965950][ T62] usb 11-1: USB disconnect, device number 3 [ 153.088319][ T5946] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 153.124776][T10917] netlink: 'syz.5.1364': attribute type 10 has an invalid length. [ 153.191296][T10921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1365'. [ 153.463258][ T39] audit: type=1400 audit(1736702076.064:768): avc: denied { unmount } for pid=10399 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 153.511871][T10934] overlay: Bad value for 'workdir' [ 153.549683][ T39] audit: type=1400 audit(1736702076.154:769): avc: denied { execmem } for pid=10938 comm="syz.6.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 153.615154][T10912] Set syz1 is full, maxelem 65536 reached [ 154.148348][ T5946] Bluetooth: hci4: command 0x0406 tx timeout [ 155.114436][T10917] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 155.253518][T10947] syzkaller1: entered promiscuous mode [ 155.255114][T10947] syzkaller1: entered allmulticast mode [ 155.303184][T10951] syz.0.1375[10951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.303242][T10951] syz.0.1375[10951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.306622][T10951] syz.0.1375[10951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.313621][T10951] TCP: out of memory -- consider tuning tcp_mem [ 155.464203][ T39] audit: type=1400 audit(1736702078.064:770): avc: denied { map } for pid=10955 comm="syz.5.1377" path="socket:[39169]" dev="sockfs" ino=39169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 155.817722][ T5937] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 156.185988][T10976] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1384'. [ 156.231098][ T5937] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 156.235234][ T5937] Bluetooth: hci0: Injecting HCI hardware error event [ 156.240173][ T5937] Bluetooth: hci0: hardware error 0x00 [ 156.246893][T10977] tmpfs: Unknown parameter 'usrquota.' [ 156.392112][T10979] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 156.397509][T10979] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 156.445757][T10984] xt_hashlimit: size too large, truncated to 1048576 [ 156.695280][ T39] audit: type=1800 audit(1736702079.294:771): pid=10971 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1380" name="/" dev="fuse" ino=1 res=0 errno=0 [ 156.895905][T10994] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 157.468065][T11000] ubi0: attaching mtd0 [ 157.476504][T11000] ubi0: scanning is finished [ 157.479794][T11000] ubi0: empty MTD device detected [ 157.523281][T11001] (syz.6.1391,11001,2):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "grpquota../file0/file0" or missing value [ 157.529504][T11001] (syz.6.1391,11001,2):ocfs2_fill_super:1178 ERROR: status = -22 [ 157.570920][T11003] netlink: 'syz.0.1392': attribute type 10 has an invalid length. [ 157.581793][T11003] syz_tun: entered promiscuous mode [ 157.584450][T11003] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 157.589920][T11003] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1392'. [ 157.617078][T11000] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 157.620423][T11000] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 157.623211][T11000] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 157.623725][T11006] netlink: 456 bytes leftover after parsing attributes in process `syz.0.1393'. [ 157.626014][T11000] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 157.631849][T11000] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 157.634421][T11000] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 157.639441][T11000] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1203919392 [ 157.640913][ T39] audit: type=1400 audit(1736702080.244:772): avc: denied { bind } for pid=11005 comm="syz.0.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 157.658776][T11000] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 157.671779][T11004] ubi0: background thread "ubi_bgt0d" started, PID 11004 [ 157.712245][T11013] overlay: Unknown parameter 'euid>00000000000000000000' [ 157.865022][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1403'. [ 157.868001][T11031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1403'. [ 157.949028][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1405'. [ 157.960499][T11032] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1401'. [ 157.974080][ T5946] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 158.048830][T11061] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 158.051774][T11061] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 158.056722][T11067] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 158.058641][T11067] PKCS7: Only support pkcs7_signedData type [ 158.156180][ T5946] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 158.235301][ T39] audit: type=1400 audit(1736702080.834:773): avc: denied { listen } for pid=11088 comm="syz.6.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 158.240978][ T39] audit: type=1400 audit(1736702080.834:774): avc: denied { accept } for pid=11088 comm="syz.6.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 158.308505][ T5937] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 158.391101][T11096] kvm: user requested TSC rate below hardware speed [ 158.718924][ T5937] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 158.898818][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 158.901668][T11126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1432'. [ 158.951052][T11132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1434'. [ 159.006916][ T5937] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 159.040372][T11144] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 159.070349][T11143] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 159.076042][ T39] audit: type=1400 audit(1736702081.674:775): avc: denied { ioctl } for pid=11145 comm="syz.2.1441" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 159.090040][T11150] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1442'. [ 159.096766][T11151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=11151 comm=syz.6.1443 [ 159.102214][T11151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=11151 comm=syz.6.1443 [ 159.107104][T11142] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 159.282544][T11158] [ 159.283295][T11158] ====================================================== [ 159.285575][T11158] WARNING: possible circular locking dependency detected [ 159.287547][T11158] 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 Not tainted [ 159.289685][T11158] ------------------------------------------------------ [ 159.292971][T11158] syz.5.1446/11158 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 159.294667][T11158] ffff888025f1acf8 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 159.297698][T11158] [ 159.297698][T11158] but task is already holding lock: [ 159.299768][T11158] ffff888025f1a7c8 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0 [ 159.302973][T11158] [ 159.302973][T11158] which lock already depends on the new lock. [ 159.302973][T11158] [ 159.305907][T11158] [ 159.305907][T11158] the existing dependency chain (in reverse order) is: [ 159.308487][T11158] [ 159.308487][T11158] -> #4 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 159.310836][T11158] blk_mq_submit_bio+0x1fb6/0x24c0 [ 159.312423][T11158] __submit_bio+0x384/0x540 [ 159.313853][T11158] submit_bio_noacct_nocheck+0x698/0xd70 [ 159.315547][T11158] submit_bio_noacct+0x93a/0x1e20 [ 159.317072][T11158] block_read_full_folio+0x812/0xa50 [ 159.318687][T11158] filemap_read_folio+0xc6/0x2a0 [ 159.320184][T11158] filemap_get_pages+0x155f/0x1be0 [ 159.321745][T11158] filemap_read+0x3ca/0xd70 [ 159.323138][T11158] blkdev_read_iter+0x187/0x480 [ 159.324661][T11158] vfs_read+0x87f/0xbe0 [ 159.325944][T11158] ksys_read+0x12b/0x250 [ 159.327238][T11158] do_syscall_64+0xcd/0x250 [ 159.328623][T11158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.330354][T11158] [ 159.330354][T11158] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 159.332945][T11158] down_read+0x9a/0x330 [ 159.334318][T11158] filemap_fault+0x2e0/0x2820 [ 159.336091][T11158] __do_fault+0x10a/0x490 [ 159.337442][T11158] do_pte_missing+0xebd/0x3e00 [ 159.338863][T11158] __handle_mm_fault+0x103c/0x2a40 [ 159.340417][T11158] handle_mm_fault+0x3fa/0xaa0 [ 159.341867][T11158] do_user_addr_fault+0x7a3/0x13f0 [ 159.343390][T11158] exc_page_fault+0x5c/0xc0 [ 159.344842][T11158] asm_exc_page_fault+0x26/0x30 [ 159.346338][T11158] _copy_from_iter+0x380/0x1560 [ 159.347839][T11158] vhci_write+0x153/0x470 [ 159.349313][T11158] vfs_write+0x5ae/0x1150 [ 159.350666][T11158] ksys_write+0x12b/0x250 [ 159.352036][T11158] do_syscall_64+0xcd/0x250 [ 159.353443][T11158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.355246][T11158] [ 159.355246][T11158] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 159.357322][T11158] __might_fault+0x11b/0x190 [ 159.358735][T11158] _copy_from_user+0x29/0xd0 [ 159.360170][T11158] __blk_trace_setup+0xa8/0x180 [ 159.361695][T11158] blk_trace_setup+0x47/0x70 [ 159.363132][T11158] sg_ioctl+0x65e/0x2750 [ 159.364507][T11158] __x64_sys_ioctl+0x190/0x200 [ 159.365981][T11158] do_syscall_64+0xcd/0x250 [ 159.367400][T11158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.369206][T11158] [ 159.369206][T11158] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 159.371452][T11158] __mutex_lock+0x19b/0xa60 [ 159.372862][T11158] blk_register_queue+0x13c/0x4f0 [ 159.374403][T11158] add_disk_fwnode+0x785/0x1300 [ 159.375864][T11158] brd_alloc.isra.0+0x5a2/0x840 [ 159.377399][T11158] brd_init+0x12b/0x1d0 [ 159.378741][T11158] do_one_initcall+0x128/0x700 [ 159.380214][T11158] kernel_init_freeable+0x5c7/0x900 [ 159.381818][T11158] kernel_init+0x1c/0x2b0 [ 159.383165][T11158] ret_from_fork+0x45/0x80 [ 159.384813][T11158] ret_from_fork_asm+0x1a/0x30 [ 159.386670][T11158] [ 159.386670][T11158] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 159.388884][T11158] __lock_acquire+0x249e/0x3c40 [ 159.390501][T11158] lock_acquire.part.0+0x11b/0x380 [ 159.392107][T11158] __mutex_lock+0x19b/0xa60 [ 159.392123][T11158] __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 159.392138][T11158] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 159.392153][T11158] nbd_start_device+0x15b/0xd70 [ 159.392164][T11158] nbd_ioctl+0x21a/0xfd0 [ 159.392174][T11158] blkdev_ioctl+0x276/0x6d0 [ 159.392188][T11158] __x64_sys_ioctl+0x190/0x200 [ 159.392203][T11158] do_syscall_64+0xcd/0x250 [ 159.392216][T11158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.392232][T11158] [ 159.392232][T11158] other info that might help us debug this: [ 159.392232][T11158] [ 159.392235][T11158] Chain exists of: [ 159.392235][T11158] &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#54 [ 159.392235][T11158] [ 159.392259][T11158] Possible unsafe locking scenario: [ 159.392259][T11158] [ 159.392262][T11158] CPU0 CPU1 [ 159.392265][T11158] ---- ---- [ 159.392267][T11158] lock(&q->q_usage_counter(io)#54); [ 159.392276][T11158] lock(mapping.invalidate_lock#2); [ 159.392286][T11158] lock(&q->q_usage_counter(io)#54); [ 159.392296][T11158] lock(&q->sysfs_lock); [ 159.392302][T11158] [ 159.392302][T11158] *** DEADLOCK *** [ 159.392302][T11158] [ 159.392304][T11158] 4 locks held by syz.5.1446/11158: [ 159.392310][T11158] #0: ffff8880266c3998 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xfd0 [ 159.392334][T11158] #1: ffff8880266c38d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x20/0x40 [ 159.392361][T11158] #2: ffff888025f1a7c8 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0 [ 159.392389][T11158] #3: ffff888025f1a800 (&q->q_usage_counter(queue)#38){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0 [ 159.392418][T11158] [ 159.392418][T11158] stack backtrace: [ 159.392422][T11158] CPU: 2 UID: 0 PID: 11158 Comm: syz.5.1446 Not tainted 6.13.0-rc6-syzkaller-00262-gb62cef9a5c67 #0 [ 159.392434][T11158] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 159.392440][T11158] Call Trace: [ 159.392444][T11158] [ 159.392448][T11158] dump_stack_lvl+0x116/0x1f0 [ 159.392462][T11158] print_circular_bug+0x419/0x5d0 [ 159.392474][T11158] check_noncircular+0x31a/0x400 [ 159.392484][T11158] ? __pfx_check_noncircular+0x10/0x10 [ 159.392496][T11158] ? add_lock_to_list+0x17d/0x390 [ 159.392505][T11158] __lock_acquire+0x249e/0x3c40 [ 159.392519][T11158] ? __pfx___lock_acquire+0x10/0x10 [ 159.392531][T11158] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 159.392544][T11158] ? stack_depot_save_flags+0x38f/0x9c0 [ 159.392560][T11158] lock_acquire.part.0+0x11b/0x380 [ 159.392572][T11158] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 159.392585][T11158] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 159.392596][T11158] ? rcu_is_watching+0x12/0xc0 [ 159.392610][T11158] ? trace_lock_acquire+0x14e/0x1f0 [ 159.392624][T11158] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 159.392635][T11158] ? lock_acquire+0x2f/0xb0 [ 159.392646][T11158] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 159.392657][T11158] __mutex_lock+0x19b/0xa60 [ 159.392670][T11158] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 159.392682][T11158] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 159.392693][T11158] ? __pfx___mutex_lock+0x10/0x10 [ 159.392709][T11158] ? __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 159.392720][T11158] __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 159.392733][T11158] ? __mutex_trylock_common+0xea/0x250 [ 159.392744][T11158] ? __pfx___mutex_trylock_common+0x10/0x10 [ 159.392756][T11158] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 159.392767][T11158] ? rcu_is_watching+0x12/0xc0 [ 159.392780][T11158] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 159.392791][T11158] ? __pfx___mutex_trylock_common+0x10/0x10 [ 159.392802][T11158] ? avc_has_perm_noaudit+0x61/0x3a0 [ 159.392817][T11158] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 159.392828][T11158] ? __pfx___mutex_lock+0x10/0x10 [ 159.392841][T11158] ? trace_contention_end+0xee/0x140 [ 159.392853][T11158] ? __mutex_lock+0x1cc/0xa60 [ 159.392866][T11158] ? nbd_ioctl+0x151/0xfd0 [ 159.392877][T11158] ? __pfx___mutex_lock+0x10/0x10 [ 159.392891][T11158] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 159.392902][T11158] nbd_start_device+0x15b/0xd70 [ 159.392913][T11158] ? bpf_lsm_capable+0x9/0x10 [ 159.392923][T11158] nbd_ioctl+0x21a/0xfd0 [ 159.392934][T11158] ? ioctl_has_perm.constprop.0.isra.0+0x2f2/0x450 [ 159.392948][T11158] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 159.392968][T11158] ? __pfx_nbd_ioctl+0x10/0x10 [ 159.392984][T11158] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 159.393005][T11158] ? __pfx_lock_release+0x10/0x10 [ 159.393018][T11158] ? __pfx_nbd_ioctl+0x10/0x10 [ 159.393030][T11158] blkdev_ioctl+0x276/0x6d0 [ 159.393046][T11158] ? __pfx_blkdev_ioctl+0x10/0x10 [ 159.393061][T11158] ? selinux_file_ioctl+0x180/0x270 [ 159.393074][T11158] ? selinux_file_ioctl+0xb4/0x270 [ 159.393089][T11158] ? __pfx_blkdev_ioctl+0x10/0x10 [ 159.393103][T11158] __x64_sys_ioctl+0x190/0x200 [ 159.393118][T11158] do_syscall_64+0xcd/0x250 [ 159.393132][T11158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.393151][T11158] RIP: 0033:0x7f7751385d29 [ 159.393160][T11158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.393170][T11158] RSP: 002b:00007f7752155038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.393181][T11158] RAX: ffffffffffffffda RBX: 00007f7751575fa0 RCX: 00007f7751385d29 [ 159.393189][T11158] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 159.393195][T11158] RBP: 00007f7751401b08 R08: 0000000000000000 R09: 0000000000000000 [ 159.393202][T11158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.393208][T11158] R13: 0000000000000000 R14: 00007f7751575fa0 R15: 00007ffccc02f9c8 [ 159.393218][T11158] [ 159.393327][ C2] vkms_vblank_simulate: vblank timer overrun [ 159.398033][ T5937] block nbd5: Receive control failed (result -32) [ 159.398076][ T5937] block nbd5: Receive control failed (result -32) [ 159.450970][T11158] block nbd5: shutting down sockets [ 159.552703][T11173] bond0: (slave syz_tun): Releasing backup interface [ 159.593338][T11173] syz_tun (unregistering): left promiscuous mode [ 159.767029][ T63] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.852219][ T63] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.931823][ T63] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.982238][ T63] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.053276][ T63] bridge_slave_1: left allmulticast mode [ 160.055516][ T63] bridge_slave_1: left promiscuous mode [ 160.057811][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.061596][ T63] bridge_slave_0: left allmulticast mode [ 160.063355][ T63] bridge_slave_0: left promiscuous mode [ 160.065531][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.114463][ T63] dvmrp8 (unregistering): left allmulticast mode [ 160.361637][ T63] team0: Port device bond0 removed [ 160.364337][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.367526][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.370992][ T63] bond0 (unregistering): Released all slaves [ 160.446062][ T63] bond1 (unregistering): Released all slaves [ 160.714016][ T63] hsr_slave_0: left promiscuous mode [ 160.715984][ T63] hsr_slave_1: left promiscuous mode [ 160.718324][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.720691][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.723153][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.725349][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.729372][ T63] veth1_macvtap: left promiscuous mode [ 160.730975][ T63] veth0_macvtap: left promiscuous mode [ 160.732573][ T63] veth1_vlan: left promiscuous mode [ 160.734082][ T63] veth0_vlan: left promiscuous mode [ 160.910648][ T63] team0 (unregistering): Port device team_slave_1 removed [ 160.950429][ T63] team0 (unregistering): Port device team_slave_0 removed [ 161.595219][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.651601][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.721783][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.780834][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.891743][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.941667][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.001970][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.072903][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.174705][ T63] ip6gretap0 (unregistering): left promiscuous mode [ 162.211084][ T63] erspan0 (unregistering): left promiscuous mode [ 162.216932][ T63] gretap0 (unregistering): left promiscuous mode [ 162.600722][ T63] bond0 (unregistering): left promiscuous mode [ 162.603177][ T63] bond_slave_0: left promiscuous mode [ 162.605367][ T63] bond_slave_1: left promiscuous mode [ 162.607585][ T63] batadv0: left promiscuous mode [ 162.610879][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.615794][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.620999][ T63] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 162.626315][ T63] bond0 (unregistering): Released all slaves [ 162.635111][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.642114][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.646330][ T63] bond0 (unregistering): Released all slaves [ 162.652043][ T63] bond1 (unregistering): Released all slaves [ 162.657078][ T63] bond2 (unregistering): Released all slaves [ 162.715216][ T63] tipc: Left network mode [ 163.124047][ T63] team0: left promiscuous mode [ 163.125714][ T63] team_slave_0: left promiscuous mode [ 163.129819][ T63] hsr_slave_0: left promiscuous mode [ 163.132284][ T63] hsr_slave_1: left promiscuous mode [ 163.134704][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.137462][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.140523][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.142566][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.146276][ T63] hsr_slave_0: left promiscuous mode [ 163.148116][ T63] hsr_slave_1: left promiscuous mode [ 163.150723][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.152851][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.155123][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.157224][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.161694][ T63] veth1_macvtap: left promiscuous mode [ 163.163280][ T63] veth0_macvtap: left promiscuous mode [ 163.164857][ T63] veth1_vlan: left promiscuous mode [ 163.166365][ T63] veth0_vlan: left promiscuous mode [ 163.168673][ T63] veth1_macvtap: left promiscuous mode [ 163.170253][ T63] veth0_macvtap: left promiscuous mode [ 163.171846][ T63] veth1_vlan: left promiscuous mode [ 163.421344][ T63] team0 (unregistering): Port device team_slave_0 removed [ 163.909275][ T63] team0 (unregistering): Port device team_slave_1 removed [ 163.951577][ T63] team0 (unregistering): Port device team_slave_0 removed [ 164.703780][ T63] IPVS: stop unused estimator thread 0... [ 165.122261][ T63] bridge_slave_1: left allmulticast mode [ 165.124434][ T63] bridge_slave_1: left promiscuous mode [ 165.126678][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.130444][ T63] bridge_slave_0: left allmulticast mode [ 165.132561][ T63] bridge_slave_0: left promiscuous mode [ 165.134735][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.495156][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.498971][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.503107][ T63] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 165.506153][ T63] bond0 (unregistering): Released all slaves [ 165.768820][ T63] hsr_slave_0: left promiscuous mode [ 165.770660][ T63] hsr_slave_1: left promiscuous mode [ 165.772487][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.774648][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.323557][ T63] team0 (unregistering): Port device team_slave_1 removed [ 166.406191][ T63] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 17:14:42 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=fffff52000000faa RSI=0000000000000004 RDI=ffffc9000566fcd0 RBP=000000250ff64a71 RSP=ffffc90000007e28 R8 =0000000000000000 R9 =fffffbfff3551a6c R10=ffffffff9aa8d363 R11=ffffc90000007ff8 R12=ffffc9000566fcd0 R13=ffff88806a62ca80 R14=ffff88806a62ca00 R15=000000250ff7487c RIP=ffffffff81873c20 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555581603500 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c37c596 CR3=000000003230a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f19e8e02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f19e8e02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f19e8e02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f19e8e02ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f19e8e02b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f19e8e02c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f19e8f4b488 00007f19e8f4b480 00007f19e8f4b478 00007f19e8f4b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f19e9aad100 00007f19e8f4b440 00007f19e8f4b458 00007f19e8f4b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f19e8f4b498 00007f19e8f4b490 00007f19e8f4b488 00007f19e8f4b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffea000170d640 RCX=ffffffff81d429eb RDX=ffff88802a752440 RSI=ffffffff81d42e3f RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc9000366f798 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=00000000000a4001 R12=ffff88801b0b3048 R13=0000000000000000 R14=0000000000000000 R15=ffff88807ffd7540 RIP=ffffffff819a14a1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9b3a8a7d60 CR3=000000000df7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9b39d4b6a3 00007f9b39d4b6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd05eb77a0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557fb33773 000055557fb33290 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557faca421 000055557fac9fa0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 800301f210005e10 0003800401000000 080608013cf60010 0002ce1000018004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10100035c0900300 100035c080030480 041a800400100006 01608603ffffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0435c08004 0010000008000801 609612100035c0b0 0300100035c0a003 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 06005fba00236f65 6469762f7665642f 01ffffffffffffff ffe70801800303ff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010010000880a298 c008000100001008 06060114aa000400 0194fc8408000004 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851bf025 RDI=ffffffff9ab11b20 RBP=ffffffff9ab11ae0 RSP=ffffc9000cdaf028 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff851befc0 R15=0000000000000000 RIP=ffffffff851bf04f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f77521556c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f79da8a56c0 CR3=0000000028a6a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=0000000000004211 Opmask02=000000000000ffdf Opmask03=2040000404420020 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc39d15d40 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000ff0000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73730c1850d4ef43 73730c1850d4ef43 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737232 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000051 0000000000000000 32706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559b43b81ff0 0000559b43b2c720 0000000000000041 0000000000000032 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a007d6c7966676b 2632263b263a7826 3e3b3b26393b3b26 383b3b263b3b3b26 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3c3a3a26323c3a3a 264e393a3a264839 3a3a264b393a3a26 32393a3a263d393a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=ffff88806a846880 RCX=ffffffff818e08dc RDX=ffff888054184880 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000723fb18 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed100d508d11 R13=0000000000000001 R14=ffff88806a846888 R15=ffff88806a93fe40 RIP=ffffffff818e08b1 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f79d79f66c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000042374000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffc000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79d9c02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79d9c02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79d9c02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79d9c02ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79d9c02b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79d9c02c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000031647261632f 6972642f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000012475142400c 4a51470c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000