last executing test programs: 1m3.48598655s ago: executing program 1 (id=73): io_uring_setup(0x7939, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x200028, 0x8, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x1004, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000000)=0x714, 0xfd0f) syz_emit_ethernet(0x42, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0xc, 0xe, 0x1, 0x0, [{@private=0xa010100, 0x6}]}]}}, @timestamp}}}}, 0x0) readv(r5, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) creat(&(0x7f0000000000)='./file0\x00', 0x108) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r6, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x80000001, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000001380)='./file0\x00', 0x4) 58.75564357s ago: executing program 1 (id=77): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0xd}) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x800, 0x84) (async) r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r5 = fanotify_init(0x200, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r5, 0x455, 0x40001019, r6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) io_uring_enter(r2, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) (async) r7 = fsmount(r0, 0x1, 0x0) fchdir(r7) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_DIRENT(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) (async) mknodat$loop(r6, &(0x7f0000000200)='./file1\x00', 0x2000, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESDEC=r9]) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) read$FUSE(r8, &(0x7f0000000300)={0x2020}, 0x2020) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) 58.754858668s ago: executing program 1 (id=79): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) unshare(0x62040200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0xfffd, @remote}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x1}) listen(r0, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000066061401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000000000000000000000000000f1aeb5cf416839be711d6c7d3cae5b65291047147e9033f43dcd0e06ee73ccd1921e53df86634508022db78291cc81938bada2c6f7d19e5020a2c9b8f244fab0cffbd4ac1289"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0xb, 0x3) r5 = userfaultfd(0x80001) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000140)=0x4) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000100)={{&(0x7f0000428000/0x4000)=nil, 0x4000}}) 57.466682854s ago: executing program 1 (id=93): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) pread64(r3, &(0x7f0000000200)=""/150, 0x96, 0x92) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x300, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x8, 0x43e2540a, 0x400}}}, ["", ""]}, 0x30}}, 0x8080) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f0000000340)={{}, 0x7}) 57.397508277s ago: executing program 1 (id=94): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0x2, 0xa, 0x2) readv(r2, &(0x7f0000001880)=[{&(0x7f00000012c0)=""/128, 0x80}, {&(0x7f0000001340)=""/127, 0x7f}, {&(0x7f00000013c0)=""/152, 0x98}, {&(0x7f0000001480)=""/209, 0xd1}, {&(0x7f0000001580)=""/121, 0x79}, {&(0x7f0000001600)=""/99, 0x63}, {&(0x7f0000001680)=""/245, 0xf5}, {&(0x7f0000001780)=""/70, 0x46}, {&(0x7f0000001800)=""/109, 0x6d}], 0x9) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x36, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x0) preadv2(r1, &(0x7f0000000240)=[{&(0x7f0000001940)=""/141, 0x8d}, {&(0x7f0000000080)=""/15, 0xf}], 0x2, 0x8001, 0x4, 0x1) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f0000000040)={0x0, 0x8}) write$char_usb(r5, &(0x7f00000002c0)="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", 0x1000) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000000)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a80)={{r3}, &(0x7f0000001a00), &(0x7f0000001a40)=r3}, 0x20) 56.537537877s ago: executing program 1 (id=117): r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f00000003c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000140)={0x5, r0, 0x3f, {0x9, 0x1}, 0x6}, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=unix']) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f00000003c0), &(0x7f0000000000)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000140)={0x5, r0, 0x3f, {0x9, 0x1}, 0x6}, 0x1) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) (async) listen(r1, 0x0) (async) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=unix']) (async) 41.455342521s ago: executing program 32 (id=117): r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f00000003c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000140)={0x5, r0, 0x3f, {0x9, 0x1}, 0x6}, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=unix']) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f00000003c0), &(0x7f0000000000)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000140)={0x5, r0, 0x3f, {0x9, 0x1}, 0x6}, 0x1) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) (async) listen(r1, 0x0) (async) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=unix']) (async) 27.162236088s ago: executing program 2 (id=496): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001900)='./binderfs/binder0\x00', 0x3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001440)={0xc, 0x0, &(0x7f00000015c0)=[@dead_binder_done], 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0x0, 0x20000820}, 0x890) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{}], 0x1}, 0x24044880) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') r2 = socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) r3 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x1d0}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) io_uring_enter(r3, 0x6f58, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x2}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 26.977407074s ago: executing program 2 (id=500): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x38, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x0, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFTYPE, @NL802154_ATTR_EXTENDED_ADDR]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x38, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x0, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFTYPE, @NL802154_ATTR_EXTENDED_ADDR]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) (async) 26.901215162s ago: executing program 2 (id=504): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_kthread_work_queue_work\x00', r2}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$sndmidi(0x0, 0x1, 0x141580) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_kthread_work_queue_work\x00', r2}, 0x10) (async) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_open_dev$sndmidi(0x0, 0x1, 0x141580) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) 26.70745121s ago: executing program 2 (id=506): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400f800", @ANYRES16=r1, @ANYRESOCT=r0, @ANYRES32=r2, @ANYBLOB="1400038004000500040004000800020000000000"], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x80000003) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = dup2(r4, r4) read$FUSE(r8, &(0x7f00000063c0)={0x2020}, 0x2020) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'bridge_slave_1\x00', 0x2822}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 25.894853185s ago: executing program 2 (id=510): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000380)=0x53, 0x2) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) 25.616577303s ago: executing program 2 (id=513): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x80f0f007, 0x1}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x0, 0x0) 25.59060848s ago: executing program 33 (id=513): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x80f0f007, 0x1}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmstat\x00', 0x0, 0x0) 9.720825408s ago: executing program 0 (id=734): fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {}, {0x5, 0xfff2}}}, 0x24}}, 0x20008050) (async) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) (async) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, &(0x7f0000000080)={"1b35c5d759c91cc8f344ebf959befaf3f45ad6feb825dc6c514b5f80d42a", 0xf5, 0x1, 0x2, [0x0, 0x7, 0x2ce, 0x6, 0x7, 0x1f79, 0xff, 0x4, 0x5, 0x10, 0x39e6, 0x61f7, 0x1ff, 0x3, 0x6, 0x0, 0x2, 0x65]}) (async) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000280)=ANY=[]) (async) r2 = syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x1, 0x402040) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x500, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@gettaction={0xc8, 0x32, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0xc8}}, 0x81) (async) ptrace(0x10, r3) (async) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 9.640532227s ago: executing program 0 (id=736): mknod(&(0x7f0000000180)='./bus\x00', 0xc000, 0x100) (async) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='vfat\x00', 0x8080, &(0x7f00000001c0)='discard') (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) eventfd2(0x2, 0x1) (async) sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) (async, rerun: 64) socket$kcm(0x29, 0x0, 0x0) (rerun: 64) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) 9.596858541s ago: executing program 0 (id=738): shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x75f9b6f7, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1}, 0x1c) (async) syz_clone3(&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000001040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000980)={0x8, 0x8000, 0x4, 0x10000c, r3}, &(0x7f00000009c0)=0x10) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @loopback, 0xd7}, 0x1c) (async) r4 = shmget$private(0x0, 0x11000, 0x0, &(0x7f0000fec000/0x11000)=nil) (async) io_uring_setup(0x2b12, &(0x7f0000000100)={0x0, 0x8443, 0x8, 0x3, 0x339}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r6}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0020000100000000000000000000005893dd66bf3ce816"], 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0600"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00de07000100000000007974000100e01d0b6382972f4b8f"], 0x48}}, 0x0) (async) mmap(&(0x7f0000ab2000/0x3000)=nil, 0x3000, 0xb, 0x2031, 0xffffffffffffffff, 0xf9f1000) (async) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mlockall(0x3) (async) shmat(r4, &(0x7f0000fed000/0x4000)=nil, 0x7000) 9.485896884s ago: executing program 0 (id=741): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') socket$rds(0x15, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x2a}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f0000001380)=[{0x5, 0x0, 0x0, 0x0, @tick, {0xff}, {}, @note={0x9, 0x3, 0x2, 0x7, 0xfffffffc}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0x6aaf}, {}, {0x2}, @raw8={"f8dc112573d90bde1bd3bc76"}}, {0x0, 0x0, 0x2, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @raw8={"03b9106e2211a7b061127e1f"}}, {0x0, 0xfc, 0x1, 0x0, @time={0x3}, {}, {0x0, 0xfc}, @connect={{}, {0x0, 0x5}}}], 0x70) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'bridge_slave_1\x00', {0x2}, 0x2}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000140)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r4 = io_uring_setup(0x47af, &(0x7f0000000280)={0x0, 0x2800008, 0x80, 0x0, 0x16}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x100}) close_range(r4, 0xffffffffffffffff, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYRES8=r4], 0x1c}}, 0x40008) 9.242809701s ago: executing program 0 (id=748): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x7, 0x50323234, 0x4, 0x0, [{0x0, 0x9}, {0x1, 0xd420}, {0xea10, 0x9}, {0x10, 0x8001}, {0x80005, 0x1}, {0x3, 0x569}, {0x6, 0x7}, {0x6, 0x10000}], 0xfd, 0x0, 0x9, 0x0, 0x3}}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x800}]}}]}, 0x38}}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) (async) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=@mpls_getroute={0x150, 0x1a, 0x800, 0x70bd27, 0x25dfdbff, {0x1c, 0x20, 0x14, 0x4b, 0xff, 0x4, 0xc8, 0x7, 0x800}, [@RTA_OIF={0x8, 0x4, r6}, @RTA_NEWDST={0x84, 0x13, [{0x1}, {0x4}, {0xe}, {0xa, 0x0, 0x1}, {0xa827}, {}, {0x1b0, 0x0, 0x1}, {0x9}, {0x7}, {}, {0x0, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x800}, {0x8, 0x0, 0x1}, {0x3}, {0xc4f}, {0xd}, {0x9, 0x0, 0x1}, {0x1}, {0x401, 0x0, 0x1}, {0x3}, {0xa28}, {0x3ff}, {0x8}, {0x6, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x1000, 0x0, 0x1}, {0x1, 0x0, 0x1}, {}, {0x1b75}, {0x3}]}, @RTA_VIA={0x14, 0x12, {0xa, "5ea36573818e634a6d8c6040770a"}}, @RTA_DST={0x8, 0x1, {0x5}}, @RTA_NEWDST={0x84, 0x13, [{0x2}, {0x9, 0x0, 0x1}, {0x2}, {0x6, 0x0, 0x1}, {0xffff7, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x100}, {0x4}, {0x1, 0x0, 0x1}, {0xb32}, {}, {0x9}, {0x7, 0x0, 0x1}, {0xe9b, 0x0, 0x1}, {0x9}, {0x9}, {0x4}, {0x2}, {0x4, 0x0, 0x1}, {0xfe0}, {0x7fe5, 0x0, 0x1}, {0x80}, {0x4}, {0x800, 0x0, 0x1}, {0xc, 0x0, 0x1}, {0xf83}, {0x5eab, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x2, 0x0, 0x1}]}, @RTA_OIF={0x8}]}, 0x150}, 0x1, 0x0, 0x0, 0x20040840}, 0x60000040) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x20300, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000340), &(0x7f0000000140)=r8}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xfc, 0x0, 0x1, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xfc, 0x0, 0x1, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'pim6reg\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'pim6reg\x00', 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c6761636865040bed45d36782a72d667363616368652c76657273696f6e3d3970323030302e75"]) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c6761636865040bed45d36782a72d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x100, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=@newtfilter={0x3d10, 0x2c, 0xd27, 0x30b52c, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {}, {0xfff2, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x3cdc, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_ACT={0x3ca4, 0x2, [@m_skbmod={0x7c, 0x1d, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x5ef, 0x0, 0x781, 0xc0000}, 0x4}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0x1d, 0x6, "8ed9b707ec7b5dbe9974e7a8dc859d37a36e89434c87e30216"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0x3b90, 0x8, 0x0, 0x0, {{0xa}, {0x3b14, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x5, 0x4, 0x20000000, 0xf, 0xffffffff}, 0x6d, 0x6, [{0xffff, 0x10000, 0x9, 0x9, 0x6, 0x6}, {0x40, 0x581, 0x7ff, 0x5, 0x8, 0x401}]}, [{0x200, 0x1ff, 0x4, 0xffffffff, 0x0, 0x6}, {0x5, 0x401, 0x3, 0x7, 0x9, 0xf}, {0x6, 0x40, 0x1f9e, 0x281, 0x3, 0x594}, {0x9, 0x6, 0x8, 0x8001, 0x1ff, 0x7}, {0x0, 0x6, 0x7, 0xffff, 0x7, 0x3}, {0x3, 0x7, 0xf8e, 0x0, 0x6b76, 0x8000}, {0x3, 0x9, 0x3, 0x401, 0x401, 0x5}, {0x8, 0x6, 0x8, 0xfffffffb, 0x9, 0x4dd}, {0xf16, 0x0, 0x7, 0x8, 0x7, 0x8}, {0xc84, 0x401, 0x3ff, 0x1, 0x5, 0x9}, {0x7, 0x2, 0x2, 0x80000000, 0x6, 0x1}, {0x9, 0x8000, 0x0, 0xffffffff, 0x3, 0xa}, {0x76f, 0x700, 0x5, 0x5, 0x1ff, 0x5}, {0x5, 0xfffffff8, 0x7, 0x5, 0x7, 0x2}, {0x4, 0xffff, 0xea6c, 0xe09, 0x1, 0x4a1c6618}, {0x1f, 0x5, 0x3, 0x1, 0x10000, 0x9}, {0x2, 0x4, 0x40, 0xd, 0x4, 0x5}, {0x446c, 0x3, 0xb80e, 0x4, 0x7, 0xd}, {0x9, 0x5c, 0xfce8, 0x9, 0xfffffff9, 0x31b}, {0x8000, 0x8000, 0xf, 0x0, 0x401, 0x50}, {0x10000, 0x1, 0x0, 0x8001, 0x3, 0x2}, {0x3, 0x5, 0x8cd, 0x3}, {0x1, 0x1, 0xffffffff, 0x8, 0x10000}, {0x77d, 0x100, 0x2, 0x9, 0x7fffffff, 0x5}, {0x1, 0x8, 0x7, 0x0, 0x0, 0xff}, {0x7, 0x1, 0x8, 0x80000001, 0x25b8, 0x24000000}, {0x4, 0x0, 0xb, 0x1000, 0x8, 0x1}, {0xfffffffa, 0x100, 0x400, 0xff, 0x3, 0x9}, {0xfffffffb, 0x3, 0x8a32, 0x9, 0x4, 0x7f}, {0x4, 0x80000001, 0x80000000, 0x40, 0x0, 0x6}, {0x9, 0x7fffffff, 0xdba2, 0x2, 0x5, 0xffff0001}, {0x8, 0xf, 0x98, 0x5, 0x5, 0x57cacfdc}, {0x7, 0xffff, 0x80, 0x101, 0x4, 0xffff4be7}, {0x3, 0x7fffffff, 0xfffffffb, 0xffffffff, 0x8, 0xb}, {0x5, 0x9, 0x6, 0x0, 0x5}, {0x5, 0x1, 0x2, 0x5, 0x1, 0x2}, {0x6, 0x12000, 0x8, 0xfffffffe, 0x2, 0x4}, {0x38949dd5, 0x5, 0xffffffff, 0xfff, 0x2, 0x7}, {0x6, 0xdc34, 0xff, 0x9, 0x1fce, 0x8cc}, {0x4, 0xfffffffe, 0xe, 0x81, 0x7fff, 0x2}, {0x10000, 0xb112, 0x138b, 0xe519, 0x0, 0x8}, {0x2e9, 0x8, 0x1, 0x7fff, 0xc, 0xce37}, {0x9, 0x6, 0xfffffffd, 0x81, 0xc, 0xd}, {0xa2f, 0xff, 0x9, 0x2, 0x4, 0x9}, {0x81, 0x7, 0x2, 0x7, 0xb, 0x1ff}, {0x22e, 0x4, 0x0, 0x3, 0xa, 0x5}, {0x88, 0x10000, 0x5a, 0x2, 0x8001, 0x2}, {0xffffffe3, 0x5, 0x6, 0x6, 0x0, 0x8000}, {0x1, 0x9, 0x7, 0x29, 0x101, 0xf7c}, {0x4, 0x3, 0x100, 0x0, 0x599bd322, 0x8d}, {0xfffffffd, 0x4, 0x5, 0x5, 0x98, 0x1}, {0xfff, 0x3, 0x2, 0x0, 0x5, 0x4}, {0x28, 0x5, 0x31eb, 0x6, 0x6, 0xfe000000}, {0x7fff, 0xd7, 0x7, 0x6, 0xd, 0x7}, {0x5, 0x0, 0x3ff, 0x7, 0x8, 0x6}, {0x2, 0x0, 0xfffffffc, 0x8, 0x9}, {0x5eea, 0xffff, 0x800, 0x7, 0x2, 0xfffffffc}, {0x10001, 0x800, 0x3, 0xf, 0x40, 0x7}, {0x8000, 0x7ff, 0x6, 0x0, 0x0, 0x4}, {0xfffff801, 0x4ed, 0x40, 0x4, 0x8000, 0x5a}, {0x1, 0x8a, 0xd250, 0xb1bc, 0x5, 0xa}, {0xb, 0x8, 0x4, 0x8000, 0x1, 0x88}, {0x5, 0x3, 0x1, 0x7, 0x7, 0x3}, {0x200, 0x1, 0x4, 0xd, 0xffffffff, 0x6}, {0x9, 0x0, 0x1, 0x4, 0xe8a, 0x4e22}, {0x3ff, 0x30, 0x3, 0x101, 0x0, 0x2}, {0x101, 0x4, 0x66, 0x4, 0x400, 0xfe04}, {0x9, 0x5000, 0x1, 0x1, 0x45c6, 0x100}, {0x8, 0x80, 0x45c808c1, 0xffffff80, 0x7, 0x2}, {0xffffff07, 0x0, 0x9, 0x9, 0x4, 0xac5b}, {0x6, 0x3, 0x6, 0x1, 0x1, 0x69c2}, {0x7fff, 0xfffffffa, 0x6818, 0x9, 0x1, 0xfffffffd}, {0x49ad, 0x7, 0x0, 0x5, 0x4, 0x101}, {0x2, 0x2, 0x8000, 0x5, 0x0, 0x2}, {0x5, 0x7, 0x5, 0x5, 0x10, 0x8}, {0xffffffb0, 0x10, 0x3, 0xb1, 0x8001, 0x80}, {0xffff, 0x8d, 0xf, 0x27b, 0x2, 0x5}, {0xffffff81, 0x2, 0x7fffffff, 0x9, 0x94ab6a2, 0xb11a}, {0x5, 0x1, 0x1ff, 0x101, 0x20009, 0x200}, {0x2, 0x1, 0x220, 0x4, 0x81, 0x8}, {0x174, 0x80000000, 0x7, 0x80000000, 0x4, 0x1000}, {0x80000000, 0x8e, 0x4, 0x4, 0x4510, 0xffffffff}, {0xf, 0x2, 0x7, 0x8, 0x2986b7c9, 0x5}, {0x4, 0xc2, 0x694b, 0x4, 0x5, 0x9}, {0x1, 0xffff, 0x77, 0x80, 0x3, 0x4}, {0x705, 0x7, 0x6, 0x9, 0x9, 0x2b}, {0x10001, 0xfffffffa, 0x2ee, 0xd, 0x8, 0x8}, {0xfffffff9, 0x1eb78979, 0x1, 0x1, 0x7, 0x9}, {0x9, 0x80000000, 0x1, 0xffffffff, 0x5, 0x7}, {0x9, 0x8, 0x1, 0xc, 0x4, 0x1}, {0x9, 0x6, 0x9, 0x1, 0x8, 0x101}, {0x5, 0x6, 0x8, 0x7ff, 0x106, 0x3}, {0xfffffffd, 0x5, 0x5a2, 0x5, 0x7, 0x81}, {0x2, 0x80, 0x81, 0x492e, 0x100, 0x10}, {0x4, 0x2, 0x9, 0x5, 0x5, 0x9}, {0x400, 0x6, 0x9e, 0xc, 0x7, 0x7ff}, {0x67b3, 0x7, 0x3ff, 0x4264, 0x6, 0x9}, {0x200, 0x0, 0x0, 0x7be, 0x4e, 0xfffffff9}, {0x5, 0x7, 0x0, 0x1, 0xb, 0x3}, {0x1, 0xd, 0x5, 0x5, 0x58, 0x100009}, {0x79, 0x1, 0x6d1, 0x80, 0x200, 0x6}, {0x2, 0x6, 0x6, 0x4, 0xe20e494a, 0x4}, {0x66c2, 0x9, 0xc, 0x7, 0x14, 0x4}, {0x9, 0x7, 0x9, 0xa, 0xc, 0x4}, {0x0, 0x6, 0x0, 0x8, 0xffff, 0x1}, {0x4, 0x6, 0xfff, 0x90, 0x3, 0xffff7fff}, {0x1, 0x5, 0x6, 0x0, 0xefce, 0x4}, {0x200, 0xb, 0x7, 0xfffffffe, 0x7, 0x9}, {0x10, 0x8, 0x8, 0xc, 0x6, 0xfffffffe}, {0x6, 0x33, 0xffffffff, 0x2, 0x6, 0x1}, {0x9c, 0x10000, 0x100, 0x800, 0xc0000000, 0x49f5}, {0x1, 0x6, 0xfd9d, 0x7, 0x800, 0x8}, {0xfffffffd, 0x0, 0xd, 0x1, 0x8000, 0x4}, {0x2, 0x8000, 0x8, 0xf5a, 0x1ff, 0x10000}, {0xd, 0x2, 0x1, 0xbd, 0x5, 0xc}, {0x308, 0xffff, 0x1e8b6f8d, 0xfff, 0x6, 0x7}, {0x7, 0x3, 0x4bd, 0x8, 0xfffff800, 0x1}, {0x0, 0x8, 0x4, 0x8, 0x1, 0xd}, {0x7, 0x4, 0x28e, 0x5, 0x2, 0x97}, {0x50, 0x6, 0x100, 0x4, 0x80000001, 0x8}, {0x8, 0x1, 0x7e, 0xffff, 0x7, 0x3}, {0x2, 0x5a489a25, 0x7f, 0x0, 0x3, 0x8001}, {0xffffffff, 0x7, 0x9, 0x2, 0x1, 0x1}, {0x3, 0x8, 0x80000000, 0x0, 0x3, 0x3}, {0x5, 0x5, 0x8, 0x40, 0xa, 0x8001}, {0xffffffff, 0x0, 0x3, 0x4, 0x0, 0xf}, {0x80000001, 0x3, 0x4, 0x2, 0x7, 0xffffffff}, {0x4, 0x7, 0xf, 0x5, 0x2, 0x5}], [{0x4, 0x1}, {0xec68dbd90ae7b4f9}, {0x5}, {0x4}, {0x2, 0x1}, {}, {0x5, 0x2}, {}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x2}, {0x1}, {0x4}, {0x4}, {0x3}, {0xe8b2a96238fdf56c}, {0x5, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x4}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {}, {0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x2}, {0x4, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x1}, {}, {0x5}, {0x5}, {}, {0x7}, {0x78bd8cbf2bfa66de}, {0x6}, {0x6, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xc8, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x4}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_PARMS_EX={0xee0, 0x4, {{{0xbc, 0x3, 0x7, 0x6, 0x5cfcf175}, 0xec, 0xa5, [{0x1, 0x8, 0x0, 0x6, 0x4085, 0xe65}, {0xc2, 0x4, 0x3, 0x6, 0x8, 0x9}, {0x4, 0x1ce, 0x8, 0x0, 0x3, 0x200}, {0x8, 0x5, 0x2, 0xffffff01, 0x4, 0x8}, {0x10, 0x4, 0x105a, 0x2, 0x7, 0x2}, {0x4, 0x7, 0x4b50, 0x9, 0x9b}, {0xf, 0x6, 0x5, 0x1, 0x88, 0x7}, {0x7fff, 0x1, 0x4, 0x21, 0x7, 0x7}]}, [{0x5488, 0x3, 0xc40c, 0xc, 0x9, 0xfffffff3}, {0xfffffff9, 0x241eb7df, 0x8, 0xe89, 0x8, 0x7}, {0x2, 0x40, 0x1, 0x4, 0x10000, 0x1}, {0xcc, 0x0, 0x7, 0x8, 0x6, 0xa}, {0xe5, 0x8, 0x9, 0xa789, 0x63, 0x9}, {0x2, 0x4, 0x5, 0x9, 0x100, 0x3f}, {0x1, 0x8, 0x1, 0x9, 0x400, 0x5}, {0x7f, 0x2, 0x9, 0x5, 0x9}, {0x7f, 0x2, 0x8, 0x4, 0x8, 0xc}, {0x3, 0x3ff, 0x176a, 0x0, 0x1, 0x1ff}, {0x2, 0x8, 0x101, 0x200, 0x9, 0x101}, {0x3, 0x4, 0x1ff, 0x2, 0x5f4c, 0x1}, {0x8, 0x40, 0x5, 0x6, 0xfffeffff, 0x80000001}, {0x3, 0x4, 0x5, 0x81, 0x2, 0xd5}, {0x5, 0x3ff, 0x6, 0xe110, 0x101, 0x5}, {0x6, 0x80000001, 0x7, 0x8, 0xf1c3, 0x3}, {0x1, 0xd, 0xa, 0x6, 0xe, 0x1}, {0x81, 0x4, 0xfff, 0x0, 0x7, 0x800}, {0x7d5, 0x7, 0xb5, 0x5, 0x9, 0x40100}, {0x9, 0xd, 0x5, 0x3, 0x1, 0x8}, {0x4, 0x4, 0x9, 0x200, 0x0, 0x40}, {0x49, 0x6, 0xfbc, 0x4, 0xd67, 0x9}, {0xf, 0x5, 0x10001, 0x1, 0x1}, {0x4, 0x2, 0x47, 0x8, 0x9dc5, 0x1}, {0xe, 0x9, 0x80000000, 0x43, 0x0, 0x2}, {0x3, 0x4, 0x5, 0xc9, 0xb, 0xfffffff8}, {0x4, 0x5, 0x1, 0x8c, 0x7fffffff, 0x9}, {0x101, 0xb5, 0x5, 0x7fff, 0x4, 0x73}, {0xc3, 0xfe4b, 0x9, 0x3, 0x7db, 0x7f}, {0x2, 0xb31, 0x9df, 0x4364, 0x8, 0x200}, {0xfffffffb, 0x8, 0x3c, 0x9, 0x7, 0x40}, {0x73, 0x2, 0x3ff, 0x5, 0x6, 0x170}, {0xffffffff, 0xb, 0xf, 0x39, 0x91, 0x1}, {0x800, 0x1, 0x40000000, 0x3, 0xfffffffc, 0x9}, {0x6fa5, 0x13f7, 0x3, 0x10000, 0x6, 0x8}, {0xfffffeff, 0x5, 0x5, 0x3, 0x1, 0xc6}, {0x10000, 0x8001, 0x9, 0x2, 0x4, 0xfffffff9}, {0xd, 0x7, 0xd9d, 0xa1b745e, 0xb3bc6da, 0xfffffffd}, {0x9, 0x1ff, 0x2, 0x9, 0x20200000, 0x81}, {0x6, 0x4, 0x6, 0x8, 0xffffffff, 0x7421}, {0x7, 0x80000001, 0x800, 0x6, 0x8020, 0x3}, {0x1000, 0x0, 0x4, 0x9, 0x4, 0x8}, {0x7, 0xa9c, 0xffff, 0x4, 0x45, 0x8}, {0x4, 0x4, 0x8, 0x8, 0xe, 0xd}, {0x9, 0xff2, 0x8, 0x0, 0x4, 0x1}, {0x7f, 0x0, 0x7, 0x3, 0x0, 0xc}, {0xff, 0x8, 0xa, 0x7f, 0x3, 0x1c6}, {0x13e, 0x80, 0xffffff81, 0x8, 0x7, 0x100}, {0x0, 0x1, 0x7c5, 0x1f6, 0x0, 0x7f}, {0x7, 0xe, 0xfc, 0x9, 0x4, 0x9}, {0x1ff, 0x9, 0x3, 0xfffffff9, 0x2, 0x8}, {0x7ff, 0x200, 0x5, 0x6, 0x572, 0x6}, {0x6, 0x5, 0x6, 0xb4fdd063, 0x40, 0x4}, {0x2, 0x3, 0x3, 0x5, 0x9, 0x1}, {0x4, 0x6, 0x1c000, 0x2, 0x8, 0x3cd1}, {0x5, 0x697, 0xfc, 0x8, 0x1, 0xfffffffb}, {0x9, 0x1, 0xa3d4, 0x3, 0x40000ff, 0xf}, {0x7, 0x101, 0x1, 0x8d0, 0x3, 0x100}, {0x0, 0xa, 0x5, 0x7f, 0x5, 0xfc}, {0x200, 0x10, 0x8, 0x5, 0x9, 0x6}, {0x40, 0x7, 0x81, 0x8, 0x9, 0x7}, {0x0, 0x7ff, 0x7, 0x7, 0x4, 0x101}, {0x400, 0x1, 0x8, 0xff, 0xc206, 0x4}, {0x2, 0xd1, 0x81, 0x8000, 0x0, 0x5}, {0x8001, 0x96400000, 0x2, 0x1, 0x9}, {0x81, 0xfffffffe, 0x4, 0x0, 0x9, 0x5}, {0x10000, 0x5, 0x894, 0x6, 0xd, 0x6c8}, {0x0, 0x2, 0x9, 0x9, 0x7fffffff, 0x54}, {0x1, 0x2, 0x4, 0x8000, 0x5, 0xfffffffc}, {0x5, 0x3, 0x7fffffff, 0x18, 0x3, 0x7}, {0x87f, 0x80000001, 0xe3e, 0x1, 0xfffffffe, 0x1000}, {0x200, 0xcd, 0x4, 0x9, 0x7, 0x6}, {0x3, 0x6, 0x3, 0x1000, 0x2, 0x9}, {0x6, 0x9a, 0xbf5, 0x4, 0x7fffffff, 0xfff}, {0xe6a, 0x9, 0x7, 0x1, 0x3, 0x7}, {0x6, 0xd, 0x2, 0x2, 0x0, 0x9b03}, {0x2, 0x5, 0x10000, 0xab04, 0x2, 0x8}, {0xe, 0x7ff, 0x1, 0x8, 0x5, 0x800}, {0x9, 0x5, 0x4, 0x3, 0xc45e, 0x9}, {0xd, 0x0, 0x7, 0xc03b93, 0xd, 0x18}, {0x5, 0x0, 0xfffffff9, 0x7, 0x401, 0xcdb}, {0x48d18423, 0x7, 0x5, 0x1, 0x9, 0x3}, {0x1, 0x200, 0xca, 0x1, 0x6, 0x83}, {0xc, 0x7ff, 0x1, 0x0, 0xd74e, 0x86f}, {0x3, 0x4, 0xa, 0x0, 0x0, 0x644}, {0xfffffffc, 0x4, 0x8, 0x6e, 0x80, 0x3}, {0x4, 0x1, 0x980f, 0x5fbc, 0xfffffc00, 0x40}, {0x7, 0x53f4f9b2, 0x3, 0x0, 0x401, 0x1}, {0x5, 0x0, 0x4, 0x2, 0x3}, {0x5, 0x5, 0x8, 0x4, 0x6, 0x6}, {0xffffa7df, 0x7, 0x4, 0x3, 0xaf25, 0x1}, {0x100, 0x2, 0x8, 0xc0000000, 0x75, 0x8}, {0x5, 0x7, 0x1, 0x7, 0x8}, {0xfffffff9, 0x8, 0x10001, 0x80000000, 0x15, 0x8}, {0x1, 0xffffff99, 0x4, 0xa3e3, 0x0, 0x8}, {0x6974, 0x4, 0x100, 0x4, 0x34, 0x38}, {0x93d, 0x6, 0x1c4, 0xb8, 0x6, 0x7}, {0x1ea, 0x26, 0x0, 0x9, 0x0, 0x5d7}, {0xf1bc, 0xa0, 0x101, 0x6, 0x5524, 0x5400000}, {0x937, 0xce5, 0x4, 0x7, 0x1, 0x9}, {0x2, 0x2, 0x9, 0x4, 0x4, 0xff}, {0x3, 0xffffff3e, 0x6, 0xdf49717, 0xffffffff, 0x7}, {0x3ff, 0x5, 0x8001, 0x6, 0xa, 0x9b}, {0x0, 0x8, 0x1, 0x6b, 0x5, 0x2}, {0x9, 0x74c, 0x0, 0x7, 0x5, 0x10}, {0x3, 0x1, 0x6, 0xc9a, 0x7f, 0x1}, {0x100000, 0x5, 0x6, 0x3, 0x7fff, 0x8}, {0x0, 0x8001, 0x7, 0xffff8000, 0x0, 0x6}, {0xca, 0x3, 0x3, 0x80, 0x200, 0xe}, {0x1000, 0x7, 0xfffffdb8, 0x1}, {0x40, 0xffffffff, 0x8, 0x2, 0x81}, {0x101, 0x9, 0x5, 0x535f, 0x1d79, 0x1}, {0x19938672, 0x5, 0x10000, 0x800, 0x2, 0xb}, {0xfffffff0, 0xfffffa74, 0x3, 0xffffffff, 0x401, 0xffffff81}, {0xb, 0x8001, 0xa}, {0x100, 0x6, 0x3, 0x3a0f, 0x1, 0x10}, {0x0, 0x0, 0x1, 0xfff, 0x2, 0xfea}, {0x0, 0x2, 0x0, 0x6, 0xffff, 0x9}, {0xa, 0x8, 0x5, 0x9, 0xd437}, {0x4, 0x7, 0xfffffffb, 0x5, 0xffff, 0x1c7}, {0x1, 0x39a, 0x6, 0x678, 0x7, 0x2}, {0xe32c, 0x20004000, 0xd, 0x2, 0x101, 0xf}, {0x8001, 0x81, 0xbb, 0xffffff80, 0x6e, 0x2}, {0x81, 0xd, 0x8, 0x400, 0x6, 0x7ff}, {0x0, 0xc5, 0x7, 0x5, 0x1884, 0x6}, {0x1, 0xffff00ee, 0xd, 0x2, 0x4, 0x1ff}, {0x10001, 0x10, 0x0, 0x8, 0x6, 0x9d05}, {0xff, 0x1, 0x4, 0xfffffffa, 0x8}], [{0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x3}, {0x3}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {}, {0x3, 0x1}, {0x3}, {0x2}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x27917c795776a8e9, 0x1}, {0x2}, {0x3}, {0x2}, {0x4, 0x1}, {0x3}, {0x2}, {0x4}, {0x3}, {0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x2}, {0x4}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {}, {0xcaa9a3a604be5f3c}, {0x0, 0x1}, {0x1}, {0x5, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xee0, 0x2, {{{0x3, 0x807, 0x10000000, 0x4, 0xd}, 0xd, 0x0, [{0x3, 0x6, 0x5, 0xd5, 0x3, 0xfffff036}, {0x80, 0x0, 0x9, 0x0, 0x800, 0x1}, {0x8, 0x8000, 0x3, 0x0, 0x81, 0xc}, {0xce9, 0x5, 0xe0, 0xfff, 0x5, 0x6}, {0x7, 0x380000, 0x5, 0x5, 0x2, 0x4}, {0x4, 0x1, 0x1, 0x200, 0x1ff, 0x6}, {0x62f503d0, 0x5, 0x4, 0x66a, 0x4, 0xf6}, {0xff, 0x0, 0xffffffff, 0x8000, 0x8, 0x6}]}, [{0x3, 0x4, 0xffffffff, 0x6, 0x7f, 0x80000001}, {0xce7b, 0x8, 0xfff, 0x5e6e6b9b, 0x8}, {0x0, 0x80, 0xffff5ec7, 0x9, 0x5, 0x1}, {0x6, 0x5, 0x9, 0x5, 0x2}, {0x5, 0x7, 0x4, 0x5, 0x8a, 0x5}, {0x2, 0x9, 0x6, 0x3, 0x9, 0x1}, {0x3, 0xd, 0x7, 0x7fffffff}, {0x9a94, 0x4, 0x6, 0x1, 0x4, 0x3}, {0x5, 0x8, 0x7, 0x8, 0x2, 0x7}, {0x60, 0x2, 0x10001, 0x50, 0x0, 0x3ba}, {0x0, 0x3, 0x200, 0x28fd, 0x3, 0xc0}, {0x146, 0xffff, 0x3, 0x4, 0x8, 0xfffffff9}, {0x79a, 0x7f, 0x5, 0x7f, 0x9, 0x3ff}, {0x1, 0x6e80000, 0x6, 0x80000001, 0x5, 0x3}, {0xf4, 0x3, 0x10000, 0x1ff, 0x3, 0x70ea}, {0xdc10, 0xc0000000, 0x8000, 0x9, 0x40, 0xfffffffa}, {0x8, 0x6, 0x7, 0xa61d, 0xfffffff7, 0x4}, {0x1, 0x1ff, 0x3, 0x6, 0xb, 0xfffff74e}, {0x1, 0x3, 0x1, 0x2, 0x8, 0x4}, {0x8, 0x2, 0x1, 0x8, 0x6, 0x757}, {0x0, 0x9, 0x100, 0x9, 0x10100000, 0x6}, {0x7fffffff, 0x2, 0xffffffc4, 0xc, 0x6, 0x6}, {0x7, 0x35edc2c7, 0x6, 0xe, 0x8, 0x1}, {0xf29, 0x7, 0x7, 0x6, 0xce63, 0x49d7}, {0x200000, 0x101, 0x4, 0x9, 0x40, 0x4}, {0x5, 0x3, 0x1, 0x660, 0x0, 0x2}, {0xfe, 0xcaf9581, 0x5, 0xf0, 0x8, 0x7}, {0x1, 0x1d, 0x401, 0xd, 0xfffffff7, 0x2}, {0x200, 0x4, 0xbc03, 0x200, 0x0, 0x7}, {0x4, 0x1a, 0x77d2, 0x2, 0x10001, 0x800}, {0x0, 0x101, 0x3ff, 0x63, 0x4, 0x5}, {0x50, 0xcb, 0x0, 0x4b3, 0x3ff, 0x6000}, {0xdae, 0x3c, 0x81, 0x9, 0x322f1db1, 0x7}, {0x7fff, 0x400, 0x3, 0x1, 0x0, 0x4}, {0x8, 0x1, 0x7f, 0x9, 0xc, 0x4}, {0x277c, 0x9, 0xf, 0xc449, 0x1000, 0x5}, {0xfffffff9, 0x35, 0x10001, 0x1, 0xfffffff7, 0x9}, {0x5, 0x1, 0x7a3ab840, 0x100, 0x1, 0x7}, {0xf, 0xd4, 0xfffff8f7, 0x857, 0xcae5}, {0xfff, 0x13, 0x8000, 0x9, 0x80000001, 0x4}, {0x3, 0x5, 0xffffffff, 0xa, 0xfffffc58, 0x6}, {0xd, 0x1, 0x4, 0x9, 0x5, 0x4}, {0x9, 0x101, 0x2, 0x9, 0x1d4, 0xf0a}, {0x866, 0x1, 0xc19, 0x5, 0x4, 0x2}, {0x5, 0x8000, 0x5, 0x6, 0xbf1, 0x4}, {0x7, 0x7fffffff, 0x3, 0x4, 0x0, 0x80}, {0x2, 0x5, 0x200, 0x3, 0x7, 0x9}, {0x5, 0x1, 0x2, 0x4, 0x7}, {0x5, 0x1000, 0xfffffff9, 0xd3, 0x1c000, 0x8c15}, {0x7fffffff, 0x80, 0xc, 0x8, 0x7ff000, 0x8}, {0x26c, 0x6, 0x0, 0x8, 0x10, 0x6}, {0x81, 0x7fffffff, 0x38af, 0x0, 0x200, 0x9}, {0xffff, 0x1, 0x3, 0xf8000000, 0xfffffff9, 0x1}, {0x3, 0x7fff, 0xfffffbff, 0x1, 0xfffffff9, 0x5}, {0x40000000, 0x5, 0x8, 0x7f, 0xa, 0x7}, {0x5, 0x3, 0xe20, 0x6, 0x0, 0x1}, {0x2, 0x7, 0x72, 0xfffff8ff, 0x7, 0x8001}, {0xe, 0x10001, 0x1, 0x4, 0xa, 0x9}, {0x8, 0x2, 0xce, 0x4, 0x4, 0x3}, {0x1, 0x51, 0x1000, 0x1ff, 0x1379, 0x5}, {0x800, 0x81, 0x1, 0x7, 0x7, 0xffffffff}, {0x6, 0x6, 0xc0, 0x7, 0xea2f, 0x4}, {0x401, 0x9, 0x1, 0x1, 0x1, 0x2}, {0x1994, 0x8, 0x6, 0x4, 0xa, 0x2}, {0x401, 0x2, 0x5d2c3db1, 0x7, 0x1, 0x81}, {0xffff, 0x118000, 0x8000, 0x1, 0x35, 0xffffffff}, {0x0, 0xfffffff9, 0x7, 0xfffffeff, 0x1, 0x7}, {0x1ff, 0xffff, 0xa, 0x74f, 0x5, 0x647a}, {0x6, 0x6, 0x8514, 0x2, 0x3, 0x7f}, {0x1, 0x6, 0x2, 0x4, 0x3, 0xc}, {0xa8, 0x5, 0x8, 0x8, 0x81, 0x8}, {0x4b6, 0x0, 0xe5, 0x10, 0xffffff8b, 0x10000}, {0x2, 0x8000, 0x7fffffff, 0x8a, 0x8000000, 0x200}, {0x600, 0x4b, 0x5e908ac6, 0x7f, 0x0, 0x101}, {0x10, 0x0, 0x4, 0x5, 0xfc5, 0xffffff7f}, {0x1b, 0x101, 0x8, 0x6e, 0x200, 0x9}, {0xa78, 0x9, 0x10000, 0x1, 0x9, 0x362}, {0xffff, 0xff, 0xb, 0xc652, 0x401, 0xed6}, {0x4, 0x8, 0x80000001, 0x8, 0xbc6, 0x9}, {0x4, 0x9, 0x2, 0x7, 0xfff, 0x6}, {0x370, 0x89, 0xa, 0x1, 0x8, 0x2}, {0x1ff, 0x7, 0x10000, 0x7, 0xa6, 0xffff}, {0x0, 0x80003, 0x5, 0x1ff, 0x7f, 0x90000000}, {0x5, 0xd, 0x5, 0x33a, 0x4, 0xff}, {0x9, 0x8, 0x26f800, 0x3, 0x3ff, 0x4}, {0x9, 0x9, 0x1, 0x9, 0x9, 0x101}, {0x3, 0xfff, 0xab33, 0x214b, 0x6, 0x10000}, {0x7, 0x10, 0x7, 0x6, 0x38, 0xcbb5}, {0x5, 0xea3, 0x40, 0x8, 0x1, 0x7}, {0xb, 0xe0, 0x7, 0x7, 0x8, 0x87c2}, {0xeb, 0x1000, 0x800, 0x1, 0x10, 0x8}, {0x4, 0x4, 0xfa0f, 0xd, 0x6, 0xc}, {0x100, 0x81, 0x3, 0xfffffffd, 0x3, 0x7}, {0x5, 0x1, 0x2, 0x0, 0x10, 0xfffffffb}, {0x5, 0x1, 0x2, 0x2, 0x4, 0x4}, {0x6, 0x100, 0x100, 0x5, 0x10, 0x40}, {0x6, 0x0, 0x1, 0x18, 0x4, 0xfffffffd}, {0xfff, 0x6, 0xb0c, 0x100, 0x5, 0x3}, {0x9, 0xe, 0x9, 0x7, 0x2}, {0x9, 0x8, 0x7, 0x6, 0x1, 0x2}, {0x5, 0xfffffff7, 0x6, 0xa, 0x3, 0xf48b}, {0x6, 0xe0, 0x8858, 0x2c, 0x6, 0x56}, {0xfffffffa, 0xffffffff, 0x7, 0x401, 0x6, 0x8}, {0x5, 0x7fffffff, 0xa, 0x237, 0x1, 0x7}, {0x8, 0x9, 0x6, 0x6, 0x9, 0x1}, {0x2, 0xeb, 0x8, 0x6, 0x3, 0x87}, {0x8, 0x32f0, 0x9, 0x9, 0xf}, {0x1, 0x3, 0x9, 0x7, 0x1, 0xff}, {0xc, 0x1000, 0x5, 0x3ff, 0x1ff, 0x4}, {0x2, 0x79e, 0x2, 0x9, 0x9, 0xa}, {0xe74, 0x7, 0x9, 0x8, 0x1, 0x7}, {0x1, 0x1, 0x6be, 0x3, 0x101, 0x1}, {0x3ff, 0x3, 0x8001, 0x6, 0x5, 0x200}, {0x80, 0x4, 0x100, 0x5, 0x200, 0xc}, {0x2, 0x3, 0x0, 0x55, 0x33, 0x2f9a9382}, {0x45b83abe, 0x400, 0x8, 0xfffffffe, 0x18, 0x6}, {0xfc1, 0x7e81, 0x0, 0xa3, 0xff, 0x100}, {0x8, 0xe, 0xdd, 0x5, 0x400, 0x1}, {0xffffff60, 0xb3, 0xf50e, 0x0, 0x1, 0xd}, {0xfff00000, 0x0, 0x7, 0x1, 0x2, 0xe1}, {0x100, 0x8, 0x40, 0x4, 0x2, 0xf}, {0x4, 0x5, 0x0, 0x68e8, 0x80, 0x8001}, {0x8, 0x3ce, 0x401, 0x3ff, 0x7f}, {0x4000, 0xfc000000, 0x1, 0x1, 0x800, 0x80000001}, {0x2, 0xc1e, 0x6, 0x1b, 0x8, 0x6}, {0x8e000000, 0xd7f, 0x7fff, 0x800, 0xffffff73, 0x7}, {0x7, 0x3f, 0x3, 0x6, 0x8, 0x8}, {0x0, 0x7, 0x3, 0x47, 0x5, 0x8}], [{0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x5}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x13c6fd77634cc6ac, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {}, {}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x3}, {}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x2}, {0x2}, {0x2, 0x1}, {0x1}, {}, {0x4}, {0x4, 0x1}, {0x361cb6fab0a20421}, {0x2}, {0x4, 0x1}, {0x5}, {0x2}, {0x2}, {0x1}, {0xdf05065b2ac63cf9}, {}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x4}, {}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x1}, {0x2}, {0x3}, {0x4}, {0x3}, {0x3}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x2}, {0x1, 0x2}, {}, {0x2}]}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x200, 0x3, 0x20000000, 0x5, 0x1}, 0x2, 0x6, [{0x77, 0x8, 0x9, 0x8, 0x9, 0x62}]}, [{0x3, 0x800, 0x1, 0x8, 0x1, 0x4}, {0x7a1, 0x8, 0x80, 0x0, 0x5, 0x2}, {0x100, 0x1, 0xb8, 0x2, 0xfffffffc, 0x1}, {0x8ee, 0x80, 0x4940745d, 0x2, 0x101, 0x9}, {0xfffffe01, 0x1, 0xb0, 0xe, 0x8, 0x4}, {0x3ff, 0x7f, 0x9, 0x7, 0x6, 0x1ff}, {0x80000001, 0x9, 0x6, 0xff, 0x40, 0x300000}, {0x5, 0xc, 0x40, 0x7, 0xe3, 0x495e}, {0x7, 0x7, 0x9, 0x7, 0x0, 0x7}, {0x3, 0x4, 0x98, 0x9, 0xfffffffb, 0x3}, {0x400, 0x6, 0x5, 0x3ff, 0x1000, 0x7}, {0x400, 0x1ff, 0x401, 0xae8, 0xd75, 0x10001}, {0x5, 0x8000, 0x4, 0x0, 0x0, 0xe}, {0x1, 0x3ff, 0x4, 0xdf, 0x100, 0x7}, {0x2, 0x52, 0x4, 0x4, 0x9, 0x3}, {0x2, 0x9, 0x10, 0xf8000000, 0x1000, 0x7f}, {0xfffffffd, 0x91faecb7, 0x7, 0xff, 0x8, 0x4}, {0x4cfe375f, 0x1, 0x1, 0xf, 0x2, 0xc}, {0x6, 0x8, 0x10000, 0x5, 0x9, 0xfffffffc}, {0x0, 0x5, 0x8, 0x12, 0x6}, {0x8000, 0x2, 0x7, 0xa, 0x7, 0xffff3d29}, {0x7fff, 0x80000001, 0xfffffffd, 0x7, 0x1, 0xff}, {0x4, 0x40, 0x8c, 0x7}, {0x2, 0xe8b, 0x2, 0xaa30, 0x3280, 0x4}, {0x9, 0xfc6, 0x6, 0x200, 0x8001, 0x7}, {0x8, 0xe, 0x1, 0x7, 0x8, 0xffffffc1}, {0x1200, 0x80000001, 0x3, 0x32, 0x71d6, 0x4}, {0x3, 0xffca, 0xffff, 0x1, 0x101, 0x3}, {0x6, 0x9, 0x8, 0x6, 0x10, 0x4}, {0x7, 0x1, 0x4d82, 0x2, 0x0, 0xfd9}, {0xfffffffa, 0x1, 0x6, 0x3, 0x9, 0x80000000}, {0x2, 0x2, 0x40, 0x4, 0xff, 0x401}, {0x3, 0x3db8, 0xd5b, 0x80000001, 0x8, 0xd}, {0x1000, 0x7f, 0x8, 0x4, 0x4, 0x8}, {0x1dd, 0xfffffffb, 0x40, 0xffff, 0xf}, {0x400, 0x9, 0xfffffff4, 0x0, 0x7, 0x6}, {0x3, 0x8, 0x2, 0x5, 0x7, 0x9}, {0x4, 0x4, 0x2, 0x80000000, 0x46, 0x5}, {0x4, 0x9, 0x58f6, 0x7, 0xf, 0x10000}, {0x9, 0x9, 0x6, 0xc0, 0x1, 0xffffffff}, {0xc, 0x0, 0x3, 0x2, 0x5, 0x4}, {0x4, 0x6, 0x5, 0x800, 0x7fffffff, 0x2}, {0x0, 0x7, 0x5, 0x2, 0x2, 0x8}, {0x7, 0xfff, 0xfffffff9, 0x81, 0x200, 0x7}, {0x196, 0xd, 0x4, 0x2, 0x1}, {0x3ff, 0x4, 0x7, 0x9, 0x1ff, 0x4}, {0x3, 0x3ff, 0x7fffffff, 0x7fff, 0x6}, {0x6, 0x1, 0x9, 0x7, 0x200, 0x3b7}, {0xb, 0xb67, 0x7, 0x5, 0xe02a}, {0x8, 0x5, 0x6, 0x7, 0x9, 0x8}, {0x27cf, 0x8, 0x9, 0xf, 0x614f5a97, 0xc}, {0x4, 0x5, 0x9, 0x80000000, 0xf, 0x1}, {0xa251, 0x3, 0x4, 0x4, 0x92, 0x4}, {0x4, 0x2d1, 0x2f68, 0x9, 0xf, 0x2}, {0x1, 0x7, 0x800, 0x8, 0xf0b8, 0x101}, {0x100, 0x4, 0x0, 0x0, 0x3, 0x9}, {0xfffffff8, 0x5, 0x8, 0x9de9, 0xdb42, 0x5}, {0x1, 0x8, 0x7, 0xc, 0x2, 0xa}, {0x0, 0x4d04, 0x8, 0x9, 0x7f, 0x8}, {0xa, 0x1, 0x7fffffff, 0xa5, 0x8, 0xc}, {0x8, 0x80000001, 0x4, 0x10001, 0x3, 0x31}, {0x401, 0x800, 0x2, 0x3500, 0x932, 0x2}, {0x0, 0x5, 0x5, 0x8, 0x4, 0x8317}, {0x0, 0x7, 0x3ff, 0x2, 0x7, 0x5}, {0x7de, 0xf93, 0x7, 0xc2a, 0xffffff3f, 0x5}, {0x6, 0x9, 0x5, 0x0, 0x1, 0x2}, {0xee, 0x2, 0x200, 0x401, 0x7, 0x5}, {0x1, 0x9, 0x9, 0x85, 0xfffffff7, 0x4}, {0x3, 0xbb7, 0x6, 0x1, 0x5, 0x3}, {0x1000, 0x2, 0x3, 0x9, 0x5, 0x7}, {0x10, 0x5dca, 0xfffffff9, 0x1, 0x2, 0x10}, {0xffffffff, 0x766b, 0x0, 0x3, 0x2, 0x29d8}, {0x0, 0x6874, 0x3, 0x732b, 0x200, 0x1000}, {0x80000000, 0x7, 0xb9ca, 0x7fff, 0x1, 0x6}, {0x3, 0x6, 0x6, 0x2, 0x0, 0x6}, {0x6, 0x5, 0x2, 0xa, 0x9, 0x3}, {0x370, 0x1, 0x7, 0x5, 0xf7, 0x10000}, {0x9, 0xfff, 0x4, 0x6, 0x6, 0x1}, {0x10, 0x400, 0x1, 0x40, 0x101, 0x2}, {0x2, 0x0, 0x3, 0xc80, 0x5, 0xa}, {0x1ff, 0x3, 0x7, 0x8, 0x8, 0xe}, {0x7, 0x5, 0x8, 0x23b4, 0x8f9, 0x6}, {0x9b2d, 0x4, 0x0, 0x1, 0x7, 0x8}, {0x5, 0x5, 0x1, 0x0, 0x6, 0xf1}, {0x6, 0x499, 0x4, 0x7fffffff, 0x10}, {0xc2, 0x704, 0x8, 0x3, 0x2, 0xd5c}, {0x3, 0x7b9, 0x0, 0xf22c, 0x3, 0x5}, {0x32c2, 0xfffff001, 0x6, 0x5, 0xcc8, 0x4}, {0xc3, 0x7, 0x4, 0x7, 0x9, 0x83b6}, {0xffffffff, 0x97b, 0xf1707cb, 0x7, 0x0, 0xfffffff0}, {0x2, 0x20000000, 0xf7f, 0x3, 0x8, 0x4}, {0x4, 0x5, 0x0, 0x78000000, 0xff, 0x3}, {0x8, 0x8, 0x78, 0x6, 0x44, 0xffffff03}, {0x95, 0x5e, 0x401, 0x40, 0x7}, {0x4, 0x8, 0x23c, 0x805c, 0x4, 0xf}, {0x8001, 0xcc5, 0x8, 0x9, 0x0, 0xe2a4}, {0x10001, 0x6, 0x4, 0x1, 0x7, 0x9}, {0xffffff8c, 0x10, 0x8, 0x80000000, 0x120}, {0x1, 0x81, 0x0, 0x2, 0x10000}, {0x3, 0x4, 0x6, 0x94, 0x9, 0x4}, {0x4, 0x5, 0x1, 0x80000000, 0x7, 0x8}, {0x3, 0x10001, 0x3, 0x8a, 0x7, 0x1}, {0x80000001, 0x3, 0x7, 0x3, 0x800, 0x7}, {0x5, 0x2ca, 0x8, 0x1, 0xbe, 0x2494}, {0x5, 0x5, 0x6, 0x3, 0x10000, 0x80}, {0x3, 0x9, 0x9, 0xe, 0x9, 0x4}, {0xc87d, 0x65e, 0x3, 0xfffffff7, 0x4, 0x7}, {0x0, 0x2, 0x8, 0x6, 0x261ba8c9, 0xbc9}, {0x4, 0xf52, 0x2, 0x3, 0xffffff9e, 0x3}, {0x1ff, 0xfffffffd, 0x10, 0x8, 0x4}, {0x1, 0xd8, 0x3, 0x80000001, 0x3e8, 0x6}, {0x7, 0x8, 0x48000000, 0x3, 0x80000001, 0xa12}, {0x6, 0x5, 0x4, 0xffffffff, 0x2, 0x5}, {0x3, 0x40, 0x1, 0x8001, 0x4, 0x8}, {0x1800, 0x8, 0xd4, 0xffbd, 0x3f, 0x5}, {0x5, 0x3c10, 0x8, 0x7fff, 0x3, 0xe}, {0x6, 0x5, 0x1000, 0xfffffe00, 0x4, 0x3}, {0x8, 0xa4, 0x763, 0x7, 0x7, 0xb}, {0x4, 0x3bb5, 0x3, 0x2, 0x5, 0x10000}, {0x80000001, 0x3, 0x4, 0x3, 0x7, 0x3}, {0x6, 0x7, 0x7, 0x1, 0x4, 0x4}, {0x6a56, 0x7, 0x455, 0x4, 0x4, 0x717a}, {0x1, 0x6, 0x4, 0x3ff8, 0x861, 0x2}, {0x80000001, 0x3, 0x1, 0x6, 0x5, 0xb3b7}, {0x7e, 0x8, 0x8000, 0x6, 0x4, 0x3}, {0x8e4, 0xfa, 0x6, 0x2, 0x4, 0x8}, {0x3, 0x6, 0x800, 0x4, 0x6, 0x8}, {0x7, 0x9, 0x3e280228, 0x1, 0x3, 0x4094}], [{0x4}, {0xb, 0x1}, {0x7}, {0x2}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x1}, {0x5}, {0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {}, {0x4}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x4}, {0x5}, {0x5, 0x3}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x0, 0x31382accc2f35d4d}, {0x1}, {0x2, 0x1}, {0x3}, {}, {0x58944d045022b9b}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {}, {0x2, 0x2}, {}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x5, 0x1}], 0x1}}]}, {0x52, 0x6, "46ba40099d445fc1c306240863bfaf9ec500c6ccd6512fea694cc5f691a86f0a43c725689b6fd1567ff6a0d27026b937aec311bddebc8af22bb3444fbb215843b6494b6eb98ac2da7c6b3c0431c0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x7, 0x2}}}}, @m_mpls={0x94, 0x18, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x3000, 0x2, 0x3, 0x0, 0x4}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0xfb}, @TCA_MPLS_TTL={0x5}]}, {0x3b, 0x6, "81426aeca569ac9185d235d7be13f8cb68d67b351b32178c4d59cca0d34b3304212119892f53d0648353c7ec814c2ea9c5223c73584a1e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x3d10}, 0x1, 0x0, 0x0, 0x10}, 0x0) 9.17205227s ago: executing program 0 (id=751): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 64) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="380100"], 0x138) (async, rerun: 64) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x660080, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x4) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b0000000700000002"], 0x50) (async) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="10"], 0x10) (async) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000280)=ANY=[], 0xa8) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) (async) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) r8 = fsmount(r7, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r6, r8}, 0x10) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r9, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r10, 0x4) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x10, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) dup2(r5, r0) (async) socket$kcm(0x29, 0xf, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x400, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x54030}, [@IFLA_MAP={0x24, 0xe, {0x2, 0x3, 0x3, 0xc, 0x2d, 0x2}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x800}, 0x0) 9.103601561s ago: executing program 34 (id=751): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 64) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="380100"], 0x138) (async, rerun: 64) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x660080, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x4) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b0000000700000002"], 0x50) (async) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="10"], 0x10) (async) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000280)=ANY=[], 0xa8) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) (async) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) r8 = fsmount(r7, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r6, r8}, 0x10) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r9, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r10, 0x4) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x10, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) dup2(r5, r0) (async) socket$kcm(0x29, 0xf, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x400, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x54030}, [@IFLA_MAP={0x24, 0xe, {0x2, 0x3, 0x3, 0xc, 0x2d, 0x2}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x800}, 0x0) 1.829365998s ago: executing program 3 (id=867): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000600)={0x30, 0x5, 0x0, {0x0, 0x3, 0x37c2, 0x3}}, 0x30) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000380)=ANY=[@ANYRES64=r1], 0x15) (async) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000680)={0x18, 0xffffffffffffffda}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) (async) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r7, &(0x7f0000000200)='m', 0x1) (async) r8 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000100)) (async) r9 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r9, 0xc0844123, &(0x7f0000000180)=0x4) close(0x3) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, 0x0, 0x0}, 0x20) (async) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000140)=ANY=[], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mknodat$loop(r3, &(0x7f0000000400)='./file0\x00', 0x4, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r10, 0x4, 0x42000) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r11, 0x4, 0x2400) (async) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',posixacl']) 1.779025494s ago: executing program 3 (id=868): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="01001000000000005e00000000000000440f704e0d85642e410f2167b930080000b871de0000ba000000000f30"], 0x5e}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x3, 0x0, 0x0, 0x51792e7248df3904}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x3ff}]}}}]}, 0x3c}}, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x10000000000000, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.596100408s ago: executing program 6 (id=876): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'caif0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ac0), 0x100, 0x0) mmap$xdp(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x3, 0x12, r4, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x200, 0x0, 0x3, 0x9, 0x0, 0x4, 0x8}, 0x1c) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@dellink={0x20, 0x11, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x100, 0x24010}}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x880) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'caif0\x00'}) (async) socket$packet(0x11, 0x2, 0x300) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000ac0), 0x100, 0x0) (async) mmap$xdp(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x3, 0x12, r4, 0x0) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x200, 0x0, 0x3, 0x9, 0x0, 0x4, 0x8}, 0x1c) (async) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@dellink={0x20, 0x11, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x100, 0x24010}}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x880) (async) 1.534418719s ago: executing program 4 (id=877): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000340)=0xfdd) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x48) mmap(&(0x7f00005b1000/0x4000)=nil, 0x4000, 0x0, 0x21011, r1, 0x800000) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000700)=0x1c, 0x80000) getsockname(r2, &(0x7f00000007c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, &(0x7f0000000740)=0x80) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000380)="1d310e2536fd6be6b2230774a1bb409ef990c131170be27d20932d2cc9a3a23771717d0812f8c9b535abcc979c0b6045a5aa7e5259e8a4f6ea9586945a82a7e9d230050896b045468e956dc56a017c38198f1207d365043e536b96ac3a9093d727a6e3b3d04e0798813dd0e8ae2f0cd79c13900a4afdc4576c6ebc3cff07abbef4c8a9cb", 0x84}, {&(0x7f0000000e00)="4cf6c42638502141d746063e459e472bd6a6cce1980db4445833da2ab9398951ace0a15bbdecea2dceb414e449e15181c59846517872571f67b52e9bcf80891bba6db55f13653d9614653e3b3e2a367a697ae306ebc914b79dc08edbf703747db88cc68e0d8d6d1d48efedeea2a210678f7192945c6d6b36aad05d5c3809624fcba0b9e39ac83322df2ce948361e36c2be4fee296c17feb96ba0ecef1fbd2154977541920a7cd3ec58671e44fd15403921c56131c91b8f4ad85a2b65e7fec233d4b11f5ee5e243d508b68f4832c737a711ca0ad340f8034973", 0xd9}, {&(0x7f0000001080)="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", 0x163}], 0x3, 0x4, 0xa, 0x8) r4 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) write$tun(r3, &(0x7f0000000280)={@val={0x0, 0x8809}, @val={0x2, 0x3, 0xfffc, 0x9, 0x1, 0x8}, @llc={@llc={0x80, 0x2, "b9"}}}, 0x11) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_usbip_server_init(0x3) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, &(0x7f0000002480)={0x48, 0x14}) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000000)={0x1d, r9}, 0x18) sendmsg$can_j1939(r8, &(0x7f0000000700)={&(0x7f00000000c0)={0x1d, r9, 0x1, {0x2, 0x0, 0x4}, 0xfd}, 0x18, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x404c041}, 0xc000) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000000)=0x2, 0x4) sendmsg$can_raw(r7, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r10}, 0x10, &(0x7f0000000480)={&(0x7f0000000040)=@can={{0x3, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "11e97f5d0c1f526b"}, 0x10}, 0x1, 0x0, 0x0, 0x2}, 0x20044850) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="020021bd70000008003900680000000500290000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x30000011}, 0x10) recvmsg$kcm(r3, &(0x7f0000000dc0)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a00)=""/119, 0x77}, {&(0x7f0000000a80)=""/239, 0xef}, {&(0x7f0000000b80)=""/242, 0xf2}], 0x3, &(0x7f0000000cc0)=""/249, 0xf9}, 0x10000) 1.481033025s ago: executing program 6 (id=880): socket$key(0xf, 0x3, 0x2) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000020000000000"], 0x0, 0x1a}, 0x20) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xdc, 0x9, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x401}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x9, 0x1a, '\\{,,\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4e}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xe}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7fff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8080}, 0x80000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000780)="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", 0x2000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000380)={0x10201, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000003c0)={0x79, 0x0, 0xcd1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0xffff, 0x401f, 0xffffffff}) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000240)={[0x45836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x10000, 0x80cd4}) (async, rerun: 64) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) (rerun: 64) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r7, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r7, @ANYBLOB="0000000000000000690000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) setreuid(0xee01, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) (async) ioprio_get$uid(0x3, 0xee01) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) r8 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r8, 0x5385, &(0x7f0000000000)={0x1b, ""/27}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) (async) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48890}, 0x8800) 1.23299891s ago: executing program 6 (id=885): io_uring_setup(0x7939, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x200028, 0x8, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x8, 0x1004, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000000)=0x714, 0xfd0f) syz_emit_ethernet(0x42, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0xc, 0xe, 0x1, 0x0, [{@private=0xa010100, 0x6}]}]}}, @timestamp}}}}, 0x0) readv(r5, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) creat(&(0x7f0000000000)='./file0\x00', 0x108) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, 0x0, 0x0) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x80000001, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000001380)='./file0\x00', 0x4) 838.441544ms ago: executing program 3 (id=886): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f0000000100)="3f031c000302140006001e00890000004a1b7880610cc945000088a800008100000081000000", 0x26, 0x20040845, &(0x7f0000000540)={0xc9, 0x8100, r2, 0x1, 0x1, 0x6, @broadcast}, 0x14) syz_open_dev$usbmon(&(0x7f0000000040), 0x80, 0x101000) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000080)) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000001c0)=@delqdisc={0x2c, 0x25, 0x10, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x5, 0xfff1}, {0x6, 0x1}, {0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x2c}}, 0x0) 838.285326ms ago: executing program 3 (id=887): syz_emit_ethernet(0x76, &(0x7f00000005c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x40, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "c5dec3", 0x0, 0x0, 0x0, @loopback, @empty, [@routing={0x6}], "df7d270b77aa81ed"}}}}}}}, 0x0) socket(0x22, 0x2, 0x4) socket(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_init_net_socket$x25(0x9, 0x5, 0x0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 778.675692ms ago: executing program 3 (id=888): getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) ftruncate(r1, 0x6) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a00000405000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r5 = openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) close_range(r1, r5, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r6, 0x4068aea3, &(0x7f0000000600)={0xdf, 0x0, 0x4000}) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r7, 0x400442c9, &(0x7f0000002fc0)={0x8, @multicast}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_RESET_DIRTY_RINGS(r6, 0xaec7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_dev$radio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_LOG_STATUS(r9, 0x5646, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x102e}) 454.897802ms ago: executing program 5 (id=889): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x4, r0, &(0x7f0000000080), 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x224, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x224}, 0x1, 0x0, 0x0, 0x804}, 0x0) 394.687285ms ago: executing program 5 (id=890): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000100)=@newtaction={0x98, 0x30, 0x9, 0x0, 0x0, {}, [{0x84, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x401}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x9, {0x1a9}}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x98}}, 0x0) (fail_nth: 3) 394.011016ms ago: executing program 5 (id=891): r0 = socket$can_j1939(0x1d, 0x2, 0x7) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r3) sendmmsg(r3, &(0x7f0000006580)=[{{0x0, 0x0, &(0x7f0000005ec0)=[{&(0x7f0000005b80)="e7dae6dd2f4204adea4f9cd63c5ee8355798db7784262fa704fff6d993ffefd17adba7fd6625f6468f117d4d7d13801868530b58e086ad2f1e891d943a83d66747e832fa7654b52e24a43f182178353783acdac1194be4da266436d5f0", 0x5d}, {&(0x7f0000005c00)="1d985594b60079c7a815a46b6e5e8bbf93043852bc15d18ee5c8dce9aa", 0x1d}, {&(0x7f0000005c40)="c8d27b7e6878", 0x6}], 0x3}}], 0x1, 0x4000010) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) sendmsg$kcm(r4, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xa}, 0x1c) sendto$inet6(r8, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000004c0)="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", 0x1a1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r10, @ANYBLOB="010000000000000000000c0000009c00058008000100756470001c000280080003000000000008000200000000000800020000000000080001006574680008000100756470000800030065746800140002800800030000000000080002000000000014000280080004"], 0xb0}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 386.61032ms ago: executing program 6 (id=892): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8fff8ffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) getdents64(r2, &(0x7f0000000280)=""/81, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r4, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x8, @mcast2}, {0xa, 0x0, 0x7, @remote}, r7}}, 0x48) close_range(r5, 0xffffffffffffffff, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 293.282012ms ago: executing program 6 (id=893): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b33, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 292.538215ms ago: executing program 5 (id=894): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000100)=@newtaction={0x98, 0x30, 0x9, 0x0, 0x0, {}, [{0x84, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x401}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x9, {0x1a9}}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x98}}, 0x0) 291.985957ms ago: executing program 6 (id=895): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x72141, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="c3ff", 0x2}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r6, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) recvmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000003c0)='\x008', 0x2}], 0x1}, 0x2404c140) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000003a40), 0x41, 0x0) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r8, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x200080d0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r8, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001600)=""/4102, 0x1006}], 0x1, &(0x7f0000000440)}, 0x7}], 0x1, 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(r7, 0x330b) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) 243.333137ms ago: executing program 5 (id=896): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$read(0xb, r0, &(0x7f00000003c0)=""/240, 0xf0) r1 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r1, &(0x7f00000053c0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="580000000000000000000000070000008616000000030510"], 0x70}}], 0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000100)=@newtaction={0x98, 0x30, 0x9, 0x0, 0x0, {}, [{0x84, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x401}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x9, {0x1a9}}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x98}}, 0x0) 242.049849ms ago: executing program 5 (id=897): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) ioctl$KVM_HAS_DEVICE_ATTR_vm(r1, 0x4018aee3, &(0x7f0000000680)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) r8 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x40400) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000240)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000200)={r9, 0x0, 0x0}) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r10 = accept$alg(r7, 0x0, 0x0) recvmmsg(r10, &(0x7f0000003d80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000088c0)=""/4101, 0x1005}], 0x1}, 0x6}], 0x1, 0x2001, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r14, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000e607000040"]) r15 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r15, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r15, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) 142.270375ms ago: executing program 3 (id=898): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, &(0x7f0000000240)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fedbdf250500000008000300f3"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fspick(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060a00008bfee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r6) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="04020000", @ANYRES16=r8, @ANYBLOB="00042cbd7000ffdbdf250a000000640007800c00040000f8ffffffffffff0c00040003000000000000000c00030000000080000000000c0003000400000000000000080002000600000008000100080000000c000300090000000000000008000100010000000c000400dc07000000000000780004800900010073797a31000000000900010073797a30000000001300010062726f6164636173742d6c696e6b00001c000780080002008d0000000800030007000000080001001e000000040007801c00078008000300f7ffffff080002004000000008000200172c00000900010073797a31000000002800018024000280080003000800000008000200ffffff7f080003000700000008000200010000002000058014000280080002000500000008000100000000000700010069620000f40006803f00040067636d286165732900000000000000000000000000000000000000000000000017000000562192d0b2d772d34f29767146be24aba3a31b1b1cd3980004000200040002005a000300f11a231f456f98b5381d6a09f9cdc77be15f7f70bf08e06464398865bb778048b4fcfa1ee680c39b482552b713fbd18fa347f4cd9059d8fd76873a872c1e916ff68a10998722a96149c49f597195c04ef203d21edab70000040005003f00040067636d286165732900000000000000000000000000000000000000000000000017000000dd7bdb2366ccc2fd924e01f94d5cb18be0156f87421ea4000800010008000000300007800c000400040000000000000008000200ff0100000c00030001000000000000000c00030001000080000000000c00078008000200050000005000028008000100010100000800010071c100001c00038008000200090000000800020001000000080001005d00000008000200feffffff0c00038008000100040000000400040008000100070000004c00038008000100c900000008000200050000000800020002000000080001000900000008000200230d00000800030005000000080002000000010008000100060000000800020008000000"], 0x304}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) 141.934199ms ago: executing program 4 (id=899): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d008d0f61"], &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000009500000000000000b7080000000000007b8af8", @ANYRES32, @ANYBLOB="0000000000002000b70500f7ffffff0085000000a5000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8"], 0x0, 0x1, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000980)=[{0x40001, 0x1, 0x2000007, 0xa}, {0x5, 0x0, 0xf, 0xa}, {0x5, 0x2, 0xf, 0x9}, {0x0, 0x5, 0x0, 0x7}], 0x10, 0x7}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000080)="eeb303000000a79c1b72073c20c4b50000000000a3", 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) prctl$PR_GET_SECCOMP(0x44) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="11052abd7000000000000900000030000380080003000400000006000400c30400001400060048faee472e48e49d0000000000000000080005000a010102"], 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r6 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000001780)) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) prctl$PR_GET_SECCOMP(0x15) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x20, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r9}}, 0x20}}, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000001880)={0x60, 0x2, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7, 0x0, 0x0, 0x401, 0x8, 0x61, 0x4, 0x24}) munlockall() sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 138.037059ms ago: executing program 4 (id=900): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x9, &(0x7f0000000380), 0x98) write(r2, &(0x7f0000000140)="2600000014004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140f, 0x400, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000040}, 0x20048800) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x4000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x902c, 0x400}}}}}}]}, 0x48}}, 0x0) 71.089796ms ago: executing program 4 (id=901): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) r6 = syz_io_uring_setup(0x749, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x4, 0x700000000000000}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc}) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x20, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) r9 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r9, 0x80186803, &(0x7f0000000100)) (async) landlock_restrict_self(r9, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 70.748607ms ago: executing program 4 (id=902): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @multicast2}, &(0x7f0000000200)=0xc) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, r2, 0x4a011, 0x4806}, [@IFLA_ADDRESS={0xa, 0x3, @broadcast}, @IFLA_VF_PORTS={0x18, 0x18, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xe, 0x2, 'wireguard\x00'}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000740)={&(0x7f0000000140)=@nl=@kern={0x10, 0x0, 0x0, 0x8000}, 0x80, &(0x7f0000000680)=[{&(0x7f00000001c0)}, {&(0x7f0000000280)="398db615d93ee966c717e8559a64e858af8d36d4598e65ebb14d3edf17e7ed60264a81c128b261c7d41b7e5d468f43d6f41f3b7b201b5ac67572f347643da24df4eded27a018957f61e0cb119ab40be808de775c09ca2b468d093f878cd01acc01308db97ffe2023a2e2f5dbaebcbf42f9fbbc8a39d2ee16d8e1b856149c068f4e91c68226e3", 0x86}, {&(0x7f0000000340)="744b6c36ac526cfa4824f08bbe6299c0bfd270d7f5d9fcffe31f61b86cc863d3fc86520d812d05cb952b68a1b5c3cd5b7f5abc10c9c9cf91c0d32912c270910ce1ecd677c73ab8c9e5fa73e7395d4a6c2940eaa9c0f52fffff93daadaf61685acae97a22386f74b4a7b014fe9c0f25b085bd503e490689afd5afe99c6b77ad949d0c7f6fc2bf0883889c9bdd3280b2b9d1257cc339e5301d91b96b5957", 0x9d}, {&(0x7f0000000200)}, {&(0x7f0000000440)="28c09ea9c269591d0144e4225b3c55bc5e95d40b7fcc9c8d7fc47782200605df400acb05b78d8242ffd12a8ea8d61008dcaa67e2ac4f9b", 0x37}, {&(0x7f0000000480)="d701de49c4f081f7d6432ec67716fb6fdbb62762fe2de58da1e44fba4648c236f99f9c9d8037423dbdc6d0d31ca5b0dd394df36b6ec51252eff8cc1e51fc18507082c3022435e24d1eadffc3b5c1400d417eb1f38fc93507cbb0058422bd62e2da9352aa0ec803b68ea98fa73c839407cefe159105c79c103b24520a1e564b9729488ca44cd1c8da3805cf002abe15d8cc6b72c46a2578785bc4caf118eb61c41c7240a182074e9fe83d0f9602f8013fc2af3611a715a4dc3c3405ba004f1488691119ec1c509ef9ef41339b022ed1dbd24d19757ea9c1890d39d32c9cd2afc7a2b9148b1190256d25e33f", 0xeb}, {&(0x7f0000000580)="2eeb0af72f2b59f94ecb9004936ea25c80e937f2a6912bab6cc402166fe224f4fd25d6894f1c28dcd76e57fc8eaf879fc85c37afd2a5bf45bd286395038a", 0x3e}, {&(0x7f00000005c0)="1dfc6e1190e4e475e48bb1b3bdfbbdbd465c9a2dbf7c087a1d3bf7d6437b5bc74496fe8c038ab005fc1a1fde8c7d35bf6031e361a6cf3e85f54ac5abc10f5b8f50f8b3740b0023640a45dd3a55296266eb2e6b7360fe3b73ef7c366c76fbaa15ae30e9", 0x63}, {&(0x7f0000000640)="23c7a2d737e8ee61e32bde3c9f67f81777a7a67d26", 0x15}], 0x9}, 0x4000000) fchmod(0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x81}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7c8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 4 (id=903): userfaultfd(0x801) (async) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x2, 0xfffffffb, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000f51000/0x4000)=nil, 0x4000, 0xe26a2ea4204cf729, 0x4000010, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) close_range(r0, r0, 0x0) kernel console output (not intermixed with test programs): 83.105:240): avc: denied { read write } for pid=6346 comm="syz.3.27" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 64.079291][ T40] audit: type=1400 audit(1751828783.105:241): avc: denied { open } for pid=6346 comm="syz.3.27" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 64.096211][ T6348] macvtap1: entered allmulticast mode [ 64.097939][ T6348] veth0_macvtap: entered allmulticast mode [ 64.102711][ T40] audit: type=1400 audit(1751828783.135:242): avc: denied { sqpoll } for pid=6345 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 64.239789][ T40] audit: type=1400 audit(1751828783.275:243): avc: denied { bind } for pid=6356 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.246585][ T40] audit: type=1400 audit(1751828783.275:244): avc: denied { connect } for pid=6356 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.314066][ T6361] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 64.418642][ T6369] QAT: Device 7 not found [ 64.455542][ T6379] syz.1.94 uses obsolete (PF_INET,SOCK_PACKET) [ 64.496185][ T6385] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 64.520153][ T6385] 9pnet_virtio: no channels available for device syz [ 64.748958][ T6407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16416 sclass=netlink_route_socket pid=6407 comm=syz.3.105 [ 64.750550][ T6409] netlink: 'syz.0.99': attribute type 1 has an invalid length. [ 64.809318][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.99'. [ 64.812448][ T6413] netlink: 28 bytes leftover after parsing attributes in process `syz.0.99'. [ 64.900259][ T6424] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.110'. [ 64.933731][ T6427] netlink: 'syz.0.111': attribute type 1 has an invalid length. [ 64.936368][ T6427] netlink: 144 bytes leftover after parsing attributes in process `syz.0.111'. [ 64.939245][ T6427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.111'. [ 64.943410][ T6427] tipc: Started in network mode [ 64.944907][ T6427] tipc: Node identity 2000007, cluster identity 4711 [ 64.947258][ T6427] tipc: Node number set to 33554439 [ 64.980040][ T6430] netlink: 44 bytes leftover after parsing attributes in process `syz.2.106'. [ 64.982842][ T6430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.106'. [ 64.986677][ T6432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.112'. [ 65.083990][ T6438] overlay: Unknown parameter 'uid<18446744073709551615' [ 65.296576][ T6453] trusted_key: syz.3.116 sent an empty control message without MSG_MORE. [ 65.324375][ T6457] netlink: 96 bytes leftover after parsing attributes in process `syz.3.118'. [ 65.667347][ T6465] PM: Enabling pm_trace changes system date and time during resume. [ 65.667347][ T6465] PM: Correct system time has to be restored manually after resume. [ 65.844522][ T6474] tipc: Started in network mode [ 65.846102][ T6474] tipc: Node identity 7e3b1b068ff7, cluster identity 4711 [ 65.848793][ T6474] tipc: Enabled bearer , priority 10 [ 65.873766][ T6474] tipc: Resetting bearer [ 65.878491][ T6474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=6474 comm=syz.2.122 [ 65.883495][ T6474] Zero length message leads to an empty skb [ 65.886282][ T6474] netlink: 'syz.2.122': attribute type 1 has an invalid length. [ 65.889519][ T6474] dummy0: entered promiscuous mode [ 65.896945][ T6473] tipc: Resetting bearer [ 66.562211][ T6473] tipc: Disabling bearer [ 66.705486][ T6500] overlayfs: failed to decode file handle (len=6, type=65535, flags=0, err=-22) [ 66.797775][ T5962] udevd[5962]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 67.078311][ T6568] program syz.0.140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.085070][ T6567] uprobe: syz.0.140:6567 failed to unregister, leaking uprobe [ 67.136525][ T6577] BIDI support in bsg has been removed. [ 67.138664][ T6577] syz.3.142: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 67.292869][ T6614] mmap: syz.3.146 (6614) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 67.537704][ T6634] capability: warning: `syz.3.153' uses deprecated v2 capabilities in a way that may be insecure [ 67.568731][ T6636] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 67.569659][ T6638] overlayfs: missing 'workdir' [ 67.623703][ T6643] netlink: zone id is out of range [ 67.625515][ T6643] netlink: zone id is out of range [ 67.627301][ T6643] netlink: zone id is out of range [ 67.629067][ T6643] netlink: zone id is out of range [ 67.630736][ T6643] netlink: zone id is out of range [ 67.632354][ T6643] netlink: zone id is out of range [ 67.634456][ T6643] netlink: zone id is out of range [ 67.636654][ T6643] netlink: zone id is out of range [ 67.643185][ T6643] netlink: set zone limit has 4 unknown bytes [ 67.688621][ T6648] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 67.691427][ T6648] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.696869][ T6648] vhci_hcd vhci_hcd.0: Device attached [ 67.699424][ T6651] vhci_hcd: unknown pdu 1 [ 67.703957][ T46] vhci_hcd: stop threads [ 67.705589][ T46] vhci_hcd: release socket [ 67.707323][ T46] vhci_hcd: disconnect device [ 67.834955][ T6667] usb usb8: usbfs: process 6667 (syz.3.163) did not claim interface 0 before use [ 68.147939][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.150805][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.404153][ T40] kauditd_printk_skb: 93 callbacks suppressed [ 68.404168][ T40] audit: type=1400 audit(1751828787.445:338): avc: denied { write } for pid=6705 comm="syz.2.174" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 68.404804][ T6706] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 68.422097][ T40] audit: type=1400 audit(1751828787.455:339): avc: denied { write } for pid=6705 comm="syz.2.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.464478][ T6714] geneve2: entered promiscuous mode [ 68.466192][ T6714] geneve2: entered allmulticast mode [ 68.502394][ T6716] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 68.504464][ T6716] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 68.507533][ T6716] vhci_hcd vhci_hcd.0: Device attached [ 68.513157][ T6717] vhci_hcd: connection closed [ 68.514161][ T1142] vhci_hcd: stop threads [ 68.518574][ T1142] vhci_hcd: release socket [ 68.520470][ T1142] vhci_hcd: disconnect device [ 68.552728][ T40] audit: type=1400 audit(1751828787.585:340): avc: denied { bind } for pid=6719 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.793129][ T6174] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 68.953139][ T6174] usb 8-1: Using ep0 maxpacket: 32 [ 68.956754][ T6174] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 68.960120][ T6174] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 68.964473][ T6174] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 68.968504][ T6174] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 68.973863][ T6174] usb 8-1: config 0 interface 0 has no altsetting 0 [ 68.979088][ T6174] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 68.981916][ T6174] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 68.984578][ T6174] usb 8-1: Product: syz [ 68.986006][ T6174] usb 8-1: Manufacturer: syz [ 68.987798][ T6174] usb 8-1: SerialNumber: syz [ 68.991109][ T6174] usb 8-1: config 0 descriptor?? [ 68.995270][ T6174] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 69.001404][ T6174] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 69.094480][ T40] audit: type=1400 audit(1751828788.135:341): avc: denied { create } for pid=6725 comm="syz.2.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 69.135179][ T6727] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 69.194854][ T9] usb 8-1: USB disconnect, device number 2 [ 69.195276][ T6720] ldusb 8-1:0.0: Couldn't submit interrupt_in_urb -19 [ 69.203398][ T9] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 69.332105][ T40] audit: type=1400 audit(1751828788.365:342): avc: denied { unmount } for pid=5950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 69.408132][ T6751] __nla_validate_parse: 6 callbacks suppressed [ 69.408143][ T6751] netlink: 24 bytes leftover after parsing attributes in process `syz.0.187'. [ 69.413756][ T6751] netlink: 33 bytes leftover after parsing attributes in process `syz.0.187'. [ 69.522231][ T6758] netlink: 'syz.0.190': attribute type 10 has an invalid length. [ 69.530099][ T6758] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 69.536506][ T6758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6758 comm=syz.0.190 [ 70.195271][ T6783] can0: slcan on ttyS3. [ 70.273816][ T6783] can0 (unregistered): slcan off ttyS3. [ 70.458771][ T6787] netlink: 'syz.3.199': attribute type 1 has an invalid length. [ 70.461313][ T6787] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.199'. [ 71.115997][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.118166][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.399187][ T6800] sctp: [Deprecated]: syz.3.203 (pid 6800) Use of int in maxseg socket option. [ 71.399187][ T6800] Use struct sctp_assoc_value instead [ 71.576071][ T40] audit: type=1400 audit(1751828790.615:343): avc: denied { write } for pid=6811 comm="syz.3.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 71.585294][ T40] audit: type=1400 audit(1751828790.625:344): avc: denied { ioctl } for pid=6811 comm="syz.3.207" path="socket:[10204]" dev="sockfs" ino=10204 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 71.609094][ T6815] netlink: 84 bytes leftover after parsing attributes in process `syz.3.208'. [ 71.664947][ T6819] netlink: 'syz.3.210': attribute type 9 has an invalid length. [ 71.667500][ T6819] netlink: 'syz.3.210': attribute type 6 has an invalid length. [ 71.669960][ T6819] netlink: 'syz.3.210': attribute type 9 has an invalid length. [ 71.672278][ T6819] netlink: 'syz.3.210': attribute type 6 has an invalid length. [ 71.673303][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 71.675332][ T5960] Bluetooth: hci4: command 0x1003 tx timeout [ 71.679556][ T6820] afs: Bad value for 'flock' [ 71.681417][ T6820] afs: Bad value for 'flock' [ 71.683288][ T6820] afs: Bad value for 'flock' [ 71.684846][ T6820] afs: Bad value for 'flock' [ 71.686406][ T6820] afs: Bad value for 'flock' [ 71.688102][ T6820] afs: Bad value for 'flock' [ 71.689630][ T6820] afs: Bad value for 'flock' [ 71.731135][ T6828] netlink: 'syz.3.213': attribute type 13 has an invalid length. [ 71.731224][ T40] audit: type=1400 audit(1751828790.765:345): avc: denied { ioctl } for pid=6827 comm="syz.3.213" path="socket:[14062]" dev="sockfs" ino=14062 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.734150][ T6828] netlink: 100 bytes leftover after parsing attributes in process `syz.3.213'. [ 71.755718][ T40] audit: type=1400 audit(1751828790.795:346): avc: denied { setopt } for pid=6834 comm="syz.0.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.766185][ T40] audit: type=1400 audit(1751828790.795:347): avc: denied { connect } for pid=6834 comm="syz.0.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.819284][ T6848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.219'. [ 72.074840][ T6883] tmpfs: Unknown parameter 'usrquotaN' [ 72.076265][ T6869] could not allocate digest TFM handle blake2s-224-arm [ 72.114994][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.231'. [ 72.190570][ T6900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.235'. [ 72.383033][ T6919] netlink: 48 bytes leftover after parsing attributes in process `syz.3.239'. [ 72.463070][ T837] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 72.634441][ T837] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.637572][ T837] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 72.640178][ T837] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 72.643813][ T837] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 72.647135][ T837] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 72.650367][ T837] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 72.653256][ T837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.658165][ T6905] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 72.661870][ T837] hub 5-1:1.0: bad descriptor, ignoring hub [ 72.664187][ T837] hub 5-1:1.0: probe with driver hub failed with error -5 [ 72.666624][ T837] cdc_wdm 5-1:1.0: skipping garbage [ 72.668209][ T837] cdc_wdm 5-1:1.0: skipping garbage [ 72.672362][ T837] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 72.674426][ T837] cdc_wdm 5-1:1.0: Unknown control protocol [ 73.382876][ T34] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 73.415186][ T6905] usb 5-1: reset low-speed USB device number 3 using dummy_hcd [ 73.552851][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 73.554495][ T34] usb 7-1: config 228 has an invalid interface number: 114 but max is 2 [ 73.558137][ T34] usb 7-1: config 228 has an invalid interface number: 154 but max is 2 [ 73.561112][ T34] usb 7-1: config 228 has an invalid interface number: 21 but max is 2 [ 73.563636][ T34] usb 7-1: config 228 has no interface number 0 [ 73.565540][ T34] usb 7-1: config 228 has no interface number 1 [ 73.567412][ T34] usb 7-1: config 228 has no interface number 2 [ 73.569355][ T34] usb 7-1: config 228 interface 114 altsetting 3 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 73.573474][ T34] usb 7-1: config 228 interface 114 altsetting 3 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 73.576807][ T34] usb 7-1: config 228 interface 114 altsetting 3 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 73.580446][ T34] usb 7-1: config 228 interface 114 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 73.584638][ T34] usb 7-1: config 228 interface 114 altsetting 3 endpoint 0x8 has invalid maxpacket 1032, setting to 64 [ 73.588302][ T34] usb 7-1: config 228 interface 114 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 73.591899][ T34] usb 7-1: config 228 interface 114 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 73.595464][ T34] usb 7-1: config 228 interface 154 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 73.598735][ T34] usb 7-1: config 228 interface 154 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 73.601992][ T34] usb 7-1: config 228 interface 154 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 73.605268][ T34] usb 7-1: config 228 interface 154 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 73.608650][ T34] usb 7-1: config 228 interface 154 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 73.612049][ T34] usb 7-1: config 228 interface 21 altsetting 7 has a duplicate endpoint with address 0x86, skipping [ 73.615404][ T34] usb 7-1: config 228 interface 21 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 73.618705][ T34] usb 7-1: config 228 interface 21 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 73.621909][ T34] usb 7-1: config 228 interface 21 altsetting 7 has an endpoint descriptor with address 0xB4, changing to 0x84 [ 73.625484][ T34] usb 7-1: config 228 interface 21 altsetting 7 endpoint 0x84 has an invalid bInterval 152, changing to 7 [ 73.628978][ T34] usb 7-1: config 228 interface 21 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 73.632176][ T34] usb 7-1: config 228 interface 21 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 73.635389][ T34] usb 7-1: config 228 interface 21 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 73.638674][ T34] usb 7-1: config 228 interface 21 altsetting 7 has an endpoint descriptor with address 0xF5, changing to 0x85 [ 73.642211][ T34] usb 7-1: config 228 interface 21 altsetting 7 endpoint 0x85 has invalid wMaxPacketSize 0 [ 73.645184][ T34] usb 7-1: config 228 interface 21 altsetting 7 has a duplicate endpoint with address 0x8E, skipping [ 73.648458][ T34] usb 7-1: config 228 interface 21 altsetting 7 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 73.652676][ T34] usb 7-1: config 228 interface 114 has no altsetting 0 [ 73.654838][ T34] usb 7-1: config 228 interface 154 has no altsetting 0 [ 73.656912][ T34] usb 7-1: config 228 interface 21 has no altsetting 0 [ 73.660857][ T34] usb 7-1: Dual-Role OTG device on HNP port [ 73.663968][ T34] usb 7-1: New USB device found, idVendor=19d2, idProduct=0057, bcdDevice=31.d9 [ 73.666696][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.669329][ T34] usb 7-1: Product: syz [ 73.670698][ T34] usb 7-1: Manufacturer: syz [ 73.672160][ T34] usb 7-1: SerialNumber: syz [ 75.520341][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 75.520355][ T40] audit: type=1400 audit(1751828794.555:358): avc: denied { map } for pid=6940 comm="syz.3.242" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 75.802932][ T6015] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 75.954566][ T6015] usb 8-1: config 1 interface 0 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 64 [ 75.957718][ T6015] usb 8-1: config 1 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 1023 [ 75.960782][ T6015] usb 8-1: config 1 interface 0 has no altsetting 0 [ 75.965501][ T6015] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.968273][ T6015] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.970721][ T6015] usb 8-1: Product: syz [ 75.972058][ T6015] usb 8-1: Manufacturer: ã°Š [ 75.973586][ T6015] usb 8-1: SerialNumber: syz [ 75.977213][ T6946] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 75.979495][ T6946] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 76.038206][ T40] audit: type=1326 audit(1751828795.075:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6930 comm="syz.2.240" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bcbb8e929 code=0x7fc00000 [ 76.386827][ T6015] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 76.393090][ T6015] usb 8-1: USB disconnect, device number 3 [ 76.917841][ T6950] netlink: 28 bytes leftover after parsing attributes in process `syz.3.244'. [ 76.920543][ T6950] netlink: 'syz.3.244': attribute type 7 has an invalid length. [ 76.922888][ T6950] netlink: 'syz.3.244': attribute type 8 has an invalid length. [ 76.925972][ T6950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.244'. [ 76.930730][ T6950] fuse: Unknown parameter 'grdup_id' [ 76.933601][ T40] audit: type=1400 audit(1751828795.975:360): avc: denied { read write } for pid=6949 comm="syz.3.244" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 76.942941][ T40] audit: type=1400 audit(1751828795.975:361): avc: denied { open } for pid=6949 comm="syz.3.244" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 76.977896][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 77.016323][ T40] audit: type=1400 audit(1751828796.055:362): avc: denied { map } for pid=6954 comm="syz.3.245" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 77.023402][ T40] audit: type=1400 audit(1751828796.055:363): avc: denied { execute } for pid=6954 comm="syz.3.245" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 77.052342][ T40] audit: type=1400 audit(1751828796.085:364): avc: denied { append } for pid=6958 comm="syz.3.246" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 77.190418][ T6964] team0: Device gtp0 is of different type [ 77.284388][ T6964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.247'. [ 77.287163][ T6964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.247'. [ 77.290662][ T6964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.247'. [ 77.293558][ T6964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.247'. [ 77.452885][ T6973] ======================================================= [ 77.452885][ T6973] WARNING: The mand mount option has been deprecated and [ 77.452885][ T6973] and is ignored by this kernel. Remove the mand [ 77.452885][ T6973] option from the mount to silence this warning. [ 77.452885][ T6973] ======================================================= [ 77.463355][ T6973] ecryptfs: Unknown parameter 'nocase' [ 77.470501][ T40] audit: type=1400 audit(1751828796.505:365): avc: denied { mounton } for pid=6972 comm="syz.3.249" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 77.522024][ T40] audit: type=1400 audit(1751828796.555:366): avc: denied { read } for pid=6972 comm="syz.3.249" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 77.529477][ T40] audit: type=1400 audit(1751828796.555:367): avc: denied { open } for pid=6972 comm="syz.3.249" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 77.754485][ T6973] /dev/sr0: Can't open blockdev [ 78.230722][ T6984] netlink: 20 bytes leftover after parsing attributes in process `syz.3.252'. [ 78.716859][ T34] option 7-1:228.114: GSM modem (1-port) converter detected [ 78.752894][ T6905] usb 5-1: device descriptor read/64, error -110 [ 79.142893][ T6905] usb 5-1: reset low-speed USB device number 3 using dummy_hcd [ 79.146460][ T6999] netlink: 'syz.3.255': attribute type 1 has an invalid length. [ 79.158083][ T6999] bond1: entered promiscuous mode [ 79.159712][ T6999] bond1: entered allmulticast mode [ 79.223830][ T80] Bluetooth: Error in BCSP hdr checksum [ 79.234030][ T7005] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.257'. [ 79.423292][ T6905] usb 5-1: device descriptor read/64, error -32 [ 79.813421][ T6905] usb 5-1: reset low-speed USB device number 3 using dummy_hcd [ 79.833424][ T6905] usb 5-1: device descriptor read/8, error -32 [ 80.153258][ T6905] raw-gadget.0 gadget.0: failed to queue resume event [ 80.212967][ T6905] usb 5-1: reset low-speed USB device number 3 using dummy_hcd [ 80.235351][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 80.237626][ T6905] usb 5-1: device descriptor read/8, error -32 [ 80.353268][ T6905] raw-gadget.0 gadget.0: failed to queue suspend event [ 80.356432][ T6905] cdc_wdm 5-1:1.0: Error autopm - -16 [ 80.358320][ T6934] cdc_wdm 5-1:1.0: Error autopm - -16 [ 80.362849][ T9] usb 5-1: USB disconnect, device number 3 [ 80.368760][ T6905] raw-gadget.0 gadget.0: failed to queue disconnect event [ 80.374529][ T837] usb 7-1: USB disconnect, device number 2 [ 80.387153][ T7007] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 80.394895][ T837] option 7-1:228.114: device disconnected [ 80.397900][ T7008] cgroup2: Unknown parameter 'euid' [ 80.400659][ T7007] cgroup2: Unknown parameter 'euid' [ 80.462584][ T7017] netlink: 68 bytes leftover after parsing attributes in process `syz.2.260'. [ 80.497878][ T7019] netlink: 'syz.0.262': attribute type 1 has an invalid length. [ 80.500102][ T7019] netlink: 'syz.0.262': attribute type 4 has an invalid length. [ 80.533306][ T5959] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 80.538380][ T5959] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 80.541566][ T5959] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 80.544007][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 80.544015][ T40] audit: type=1400 audit(1751828799.585:376): avc: denied { setopt } for pid=7024 comm="syz.0.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.545857][ T5959] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 80.548260][ T40] audit: type=1400 audit(1751828799.585:377): avc: denied { create } for pid=7024 comm="syz.0.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.553866][ T5959] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 80.555123][ T40] audit: type=1400 audit(1751828799.585:378): avc: denied { write } for pid=7024 comm="syz.0.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.700831][ T7022] chnl_net:caif_netlink_parms(): no params data found [ 80.790713][ T7022] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.793669][ T7022] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.796631][ T7022] bridge_slave_0: entered allmulticast mode [ 80.799967][ T7022] bridge_slave_0: entered promiscuous mode [ 80.803528][ T7022] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.806145][ T7022] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.808600][ T7022] bridge_slave_1: entered allmulticast mode [ 80.811985][ T7022] bridge_slave_1: entered promiscuous mode [ 80.869700][ T7022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.876985][ T7022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.925969][ T7022] team0: Port device team_slave_0 added [ 80.929592][ T7022] team0: Port device team_slave_1 added [ 80.961855][ T7022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.964830][ T7022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.973007][ T7022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.977017][ T7022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.979122][ T7022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.986741][ T7022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.024539][ T7022] hsr_slave_0: entered promiscuous mode [ 81.026799][ T7022] hsr_slave_1: entered promiscuous mode [ 81.028961][ T7022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.031183][ T7022] Cannot create hsr debugfs directory [ 81.037392][ T40] audit: type=1400 audit(1751828800.075:379): avc: denied { watch } for pid=7045 comm="syz.0.267" path="/80/file1" dev="tmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.145931][ T7022] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.150636][ T7022] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.155350][ T7022] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.159094][ T7022] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.177078][ T7022] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.180223][ T7022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.183298][ T7022] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.186581][ T7022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.217787][ T7022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.226703][ T6592] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.229741][ T6592] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.240605][ T7022] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.254790][ T6592] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.257020][ T6592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.262331][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.264614][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.272964][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 81.273023][ T5959] Bluetooth: hci4: command 0x1003 tx timeout [ 81.354959][ T40] audit: type=1400 audit(1751828800.395:380): avc: denied { bind } for pid=7058 comm="syz.2.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.355321][ T53] cfg80211: failed to load regulatory.db [ 81.362703][ T40] audit: type=1400 audit(1751828800.395:381): avc: denied { setopt } for pid=7058 comm="syz.2.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.397698][ T7022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.424100][ T7071] SELinux: truncated policydb string identifier [ 81.426320][ T40] audit: type=1400 audit(1751828800.465:382): avc: denied { load_policy } for pid=7069 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 81.426732][ T7071] SELinux: failed to load policy [ 81.435692][ T40] audit: type=1400 audit(1751828800.475:383): avc: denied { setopt } for pid=7069 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 81.442381][ T40] audit: type=1400 audit(1751828800.475:384): avc: denied { connect } for pid=7069 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 81.560668][ T7022] veth0_vlan: entered promiscuous mode [ 81.566114][ T7022] veth1_vlan: entered promiscuous mode [ 81.579846][ T7087] syz.3.275: attempt to access beyond end of device [ 81.579846][ T7087] nbd3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 81.580018][ T7022] veth0_macvtap: entered promiscuous mode [ 81.585818][ T7087] EXT4-fs (nbd3): unable to read superblock [ 81.591456][ T7022] veth1_macvtap: entered promiscuous mode [ 81.601390][ T7022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.614774][ T7022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.619101][ T7022] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.621750][ T7022] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.625072][ T7022] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.625879][ T7088] overlayfs: failed to get inode (-116) [ 81.627664][ T7022] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.633526][ T7088] overlayfs: failed to get inode (-116) [ 81.654199][ T7092] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 81.667142][ T6585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.669531][ T6585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.707283][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.709618][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.719271][ T7102] syz.3.279: attempt to access beyond end of device [ 81.719271][ T7102] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 81.724873][ T7102] syz.3.279: attempt to access beyond end of device [ 81.724873][ T7102] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 81.729616][ T7102] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 81.733270][ T7102] syz.3.279: attempt to access beyond end of device [ 81.733270][ T7102] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 81.737885][ T7102] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 81.747711][ T7102] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 81.750244][ T7102] UDF-fs: Scanning with blocksize 512 failed [ 81.754628][ T7102] syz.3.279: attempt to access beyond end of device [ 81.754628][ T7102] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 81.759363][ T7102] syz.3.279: attempt to access beyond end of device [ 81.759363][ T7102] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 81.765526][ T7102] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 81.768592][ T7102] syz.3.279: attempt to access beyond end of device [ 81.768592][ T7102] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 81.773451][ T7102] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 81.776933][ T7102] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 81.779191][ T7102] UDF-fs: Scanning with blocksize 1024 failed [ 81.781707][ T7102] syz.3.279: attempt to access beyond end of device [ 81.781707][ T7102] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 81.786592][ T7102] syz.3.279: attempt to access beyond end of device [ 81.786592][ T7102] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 81.790597][ T7102] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 81.794252][ T7102] syz.3.279: attempt to access beyond end of device [ 81.794252][ T7102] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 81.798328][ T7102] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 81.801218][ T7102] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 81.803891][ T7102] UDF-fs: Scanning with blocksize 2048 failed [ 81.806572][ T7102] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 81.811682][ T7102] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 81.815406][ T7102] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 81.818121][ T7102] UDF-fs: Scanning with blocksize 4096 failed [ 81.820272][ T7102] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 82.103874][ T40] audit: type=1400 audit(1751828801.145:385): avc: denied { checkpoint_restore } for pid=7113 comm="syz.3.283" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 82.113800][ T7120] cgroup: Unknown subsys name 'cpuset' [ 82.293250][ T7129] i2c i2c-1: Invalid block write size 34 [ 82.441712][ T7136] __nla_validate_parse: 3 callbacks suppressed [ 82.441723][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.288'. [ 82.634844][ T63] Bluetooth: hci5: command tx timeout [ 82.663004][ T7163] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (8), value rounded to 0 ms [ 82.667992][ T7159] qnx4: no qnx4 filesystem (no root dir). [ 82.678512][ T7158] qnx4: no qnx4 filesystem (no root dir). [ 82.731071][ T7170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.300'. [ 82.737920][ T7171] syzkaller1: entered promiscuous mode [ 82.739600][ T7171] syzkaller1: entered allmulticast mode [ 82.876107][ T7188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7188 comm=syz.2.307 [ 82.881654][ T7188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=7188 comm=syz.2.307 [ 82.962325][ T7208] netlink: 'syz.2.312': attribute type 10 has an invalid length. [ 82.979352][ T7208] netlink: 40 bytes leftover after parsing attributes in process `syz.2.312'. [ 83.135087][ T7223] netlink: 156 bytes leftover after parsing attributes in process `syz.2.316'. [ 83.483300][ T7254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.322'. [ 84.033513][ T7271] netlink: 16 bytes leftover after parsing attributes in process `syz.0.328'. [ 84.151114][ T7277] fuse: Unknown parameter 'grou00000000000000000000' [ 84.235138][ T7281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7281 comm=syz.2.330 [ 84.420672][ T7289] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 84.546960][ T7304] Process accounting resumed [ 84.669545][ T7311] mac80211_hwsim hwsim16 `ëÿÿÀ: renamed from wlan1 (while UP) [ 84.713342][ T63] Bluetooth: hci5: command tx timeout [ 84.797915][ T7324] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 84.799131][ T7323] netlink: 248 bytes leftover after parsing attributes in process `syz.4.343'. [ 84.832680][ T7323] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 84.836233][ T7323] ref_ctr increment failed for inode: 0x45 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88802a7935c0 [ 84.975332][ T7327] netfs: Duplicate cookie detected [ 84.977221][ T7327] netfs: O-cookie c=00000003 [fl=4008 na=0 nA=0 s=-] [ 84.979507][ T7327] netfs: O-cookie V=00000001 [9p,syz,] [ 84.981391][ T7327] netfs: O-key=[8] 'd600240200000000' [ 84.983217][ T7327] netfs: N-cookie c=00000004 [fl=8 na=0 nA=0 s=-] [ 84.985353][ T7327] netfs: N-cookie V=00000001 [9p,syz,] [ 84.987079][ T7327] netfs: N-key=[8] 'd600240200000000' [ 85.045524][ T7334] netlink: 'syz.3.347': attribute type 58 has an invalid length. [ 85.111203][ T7341] program syz.3.348 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.193956][ T7348] netlink: 'syz.3.352': attribute type 5 has an invalid length. [ 85.210476][ T7348] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 85.213216][ T7349] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 85.240338][ T7355] bond0: Error: Cannot enslave bond to itself. [ 85.250999][ T7356] overlayfs: failed to resolve './file1': -2 [ 85.343138][ T836] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 85.495957][ T836] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.499481][ T836] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.502412][ T836] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.507876][ T836] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.510634][ T836] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.521160][ T836] usb 9-1: config 0 descriptor?? [ 85.552919][ T40] kauditd_printk_skb: 9876 callbacks suppressed [ 85.552935][ T40] audit: type=1326 audit(1751828804.585:10262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7294 comm="syz.0.337" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da9f8e929 code=0x7ff00000 [ 85.563649][ T40] audit: type=1326 audit(1751828804.595:10263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7294 comm="syz.0.337" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da9f8e929 code=0x7ff00000 [ 85.570483][ T40] audit: type=1326 audit(1751828804.595:10264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7294 comm="syz.0.337" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da9f8e929 code=0x7ff00000 [ 85.577673][ T40] audit: type=1326 audit(1751828804.595:10265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7294 comm="syz.0.337" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da9f8e929 code=0x7ff00000 [ 85.585493][ T40] audit: type=1326 audit(1751828804.595:10266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7294 comm="syz.0.337" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da9f8e929 code=0x7ff00000 [ 85.592597][ T40] audit: type=1326 audit(1751828804.595:10267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7294 comm="syz.0.337" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da9f8e929 code=0x7ff00000 [ 85.600301][ T40] audit: type=1326 audit(1751828804.595:10268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7294 comm="syz.0.337" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da9f8e929 code=0x7ff00000 [ 85.608730][ T40] audit: type=1326 audit(1751828804.595:10269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7294 comm="syz.0.337" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da9f8e929 code=0x7ff00000 [ 85.619255][ T40] audit: type=1326 audit(1751828804.595:10270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7294 comm="syz.0.337" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da9f8e929 code=0x7ff00000 [ 85.626890][ T40] audit: type=1326 audit(1751828804.595:10271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7294 comm="syz.0.337" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da9f8e929 code=0x7ff00000 [ 85.928305][ T836] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.932814][ T6002] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 85.942119][ T836] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.944548][ T836] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.946840][ T836] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.949158][ T836] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.951416][ T836] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.956209][ T836] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.958631][ T836] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.960905][ T836] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.964636][ T836] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.966939][ T836] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.969466][ T836] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.971688][ T836] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.974992][ T836] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.977306][ T836] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 85.994189][ T7379] SELinux: policydb version 1402900228 does not match my version range 15-34 [ 85.996529][ T836] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 85.999778][ T7379] SELinux: failed to load policy [ 86.082838][ T6002] usb 7-1: Using ep0 maxpacket: 8 [ 86.090180][ T6002] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 86.093003][ T6002] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.093828][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.361'. [ 86.096003][ T6002] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 86.098762][ T7384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.361'. [ 86.102182][ T6002] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.107750][ T6002] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.112066][ T6002] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 86.115860][ T6002] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.153680][ T7386] bond3: entered promiscuous mode [ 86.155305][ T7386] bond3: entered allmulticast mode [ 86.157048][ T7386] 8021q: adding VLAN 0 to HW filter on device bond3 [ 86.322424][ T6002] usb 7-1: usb_control_msg returned -32 [ 86.325121][ T6002] usbtmc 7-1:16.0: can't read capabilities [ 86.346989][ T7392] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 86.792871][ T63] Bluetooth: hci5: command tx timeout [ 87.116214][ T7397] tipc: Enabling of bearer rejected, failed to enable media [ 87.125153][ T7397] xt_socket: unknown flags 0x8 [ 87.140603][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.364'. [ 87.273267][ T34] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 87.475749][ T7408] xt_hashlimit: max too large, truncated to 1048576 [ 87.724045][ T7421] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 87.728942][ T7421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.371'. [ 87.732223][ T7421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.371'. [ 88.294936][ T7427] netlink: 28 bytes leftover after parsing attributes in process `syz.4.374'. [ 88.301237][ T7427] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.568051][ T7441] syzkaller1: entered promiscuous mode [ 88.569810][ T7441] syzkaller1: entered allmulticast mode [ 88.687173][ T9] usb 7-1: USB disconnect, device number 3 [ 88.873146][ T63] Bluetooth: hci5: command tx timeout [ 89.005964][ T6015] usb 9-1: USB disconnect, device number 2 [ 89.083993][ T838] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 89.202681][ T7465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.837139][ T6174] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 89.994281][ T6174] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 89.998205][ T6174] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.003239][ T6174] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 90.006156][ T6174] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 90.009291][ T6174] usb 9-1: Manufacturer: syz [ 90.018924][ T6174] usb 9-1: config 0 descriptor?? [ 90.062914][ T6174] rc_core: IR keymap rc-hauppauge not found [ 90.066247][ T6174] Registered IR keymap rc-empty [ 90.070703][ T6174] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 90.075583][ T6174] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input12 [ 90.220625][ T7483] veth0: entered promiscuous mode [ 90.222485][ T7482] veth0: left promiscuous mode [ 90.228340][ T7471] program syz.4.388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.278260][ T7471] program syz.4.388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.284970][ T9] usb 9-1: USB disconnect, device number 3 [ 90.406383][ T7492] sctp: [Deprecated]: syz.3.394 (pid 7492) Use of int in maxseg socket option. [ 90.406383][ T7492] Use struct sctp_assoc_value instead [ 90.553461][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.396'. [ 90.565793][ T40] kauditd_printk_skb: 18474 callbacks suppressed [ 90.565804][ T40] audit: type=1400 audit(1751828809.605:28746): avc: granted { setsecparam } for pid=7497 comm="syz.3.396" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 90.809644][ T7514] netlink: 'syz.0.401': attribute type 39 has an invalid length. [ 91.003082][ T7526] block device autoloading is deprecated and will be removed. [ 91.009166][ T7526] bio_check_eod: 3 callbacks suppressed [ 91.009174][ T7526] syz.3.405: attempt to access beyond end of device [ 91.009174][ T7526] loop3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 91.016660][ T7526] qnx6: unable to read the first superblock [ 91.018621][ T7526] syz.3.405: attempt to access beyond end of device [ 91.018621][ T7526] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 91.022477][ T7526] qnx6: unable to read the first superblock [ 91.024592][ T7526] qnx6: unable to read the first superblock [ 91.058836][ T40] audit: type=1804 audit(1751828810.095:28747): pid=7530 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.406" name="/newroot/137/file0" dev="tmpfs" ino=752 res=1 errno=0 [ 91.069114][ T40] audit: type=1800 audit(1751828810.095:28748): pid=7530 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.406" name="file0" dev="tmpfs" ino=752 res=0 errno=0 [ 91.078439][ T40] audit: type=1804 audit(1751828810.095:28749): pid=7529 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.406" name="/newroot/137/file0" dev="tmpfs" ino=752 res=1 errno=0 [ 91.088175][ T40] audit: type=1400 audit(1751828810.125:28750): avc: denied { module_request } for pid=7531 comm="syz.4.407" kmod="netdev-wlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 91.166042][ T7537] bridge1: entered promiscuous mode [ 91.207819][ T7543] netlink: 32 bytes leftover after parsing attributes in process `syz.4.411'. [ 91.210787][ T7543] netlink: 32 bytes leftover after parsing attributes in process `syz.4.411'. [ 91.216317][ T7543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.411'. [ 91.219178][ T7543] netlink: 'syz.4.411': attribute type 7 has an invalid length. [ 91.221697][ T7543] netlink: 'syz.4.411': attribute type 8 has an invalid length. [ 91.224532][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.411'. [ 91.230277][ T7543] syz_tun: entered promiscuous mode [ 91.232700][ T7543] batadv_slave_1: entered promiscuous mode [ 91.235754][ T7543] syz_tun: left promiscuous mode [ 91.238166][ T7543] batadv_slave_1: left promiscuous mode [ 91.285361][ T7546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7546 comm=syz.4.411 [ 91.319916][ T7548] netlink: 20 bytes leftover after parsing attributes in process `syz.0.412'. [ 91.327123][ T40] audit: type=1400 audit(1751828810.365:28751): avc: denied { setopt } for pid=7549 comm="syz.4.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.455576][ T7562] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.416'. [ 91.575816][ T7572] netlink: 'syz.0.419': attribute type 21 has an invalid length. [ 91.622921][ T6002] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 91.776123][ T6002] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 91.779477][ T6002] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.783598][ T6002] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 91.787033][ T6002] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 91.790364][ T6002] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.796493][ T6002] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 91.799280][ T6002] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.801737][ T6002] usb 9-1: Product: syz [ 91.803278][ T6002] usb 9-1: Manufacturer: syz [ 91.804882][ T6002] usb 9-1: SerialNumber: syz [ 91.808641][ T6002] usb 9-1: config 0 descriptor?? [ 91.810707][ T7555] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 91.816625][ T6002] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input14 [ 91.846036][ T40] audit: type=1400 audit(1751828810.885:28752): avc: denied { accept } for pid=7581 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 92.011299][ T7590] overlay: filesystem on ./bus not supported as upperdir [ 92.017101][ T7590] overlay: filesystem on ./bus not supported as upperdir [ 92.021295][ T7590] overlay: filesystem on ./bus not supported as upperdir [ 92.026189][ T7590] overlay: filesystem on ./bus not supported as upperdir [ 92.028711][ T7590] overlay: filesystem on ./bus not supported as upperdir [ 92.032506][ T7590] overlay: filesystem on ./bus not supported as upperdir [ 92.036900][ T7590] overlay: filesystem on ./bus not supported as upperdir [ 92.039435][ T7590] overlay: filesystem on ./bus not supported as upperdir [ 92.041905][ T7590] overlay: filesystem on ./bus not supported as upperdir [ 92.045059][ T7590] overlay: filesystem on ./bus not supported as upperdir [ 92.047889][ T7590] overlay: filesystem on ./bus not supported as upperdir [ 92.050415][ T7590] overlay: filesystem on ./bus not supported as upperdir [ 92.052891][ T7590] overlay: filesystem on ./bus not supported as upperdir [ 92.055322][ T7590] overlay: filesystem on ./bus not supported as upperdir [ 92.057925][ T7590] overlay: filesystem on ./bus not supported as upperdir [ 92.095617][ T837] usb 9-1: USB disconnect, device number 4 [ 92.118648][ T40] audit: type=1400 audit(1751828811.155:28753): avc: denied { ioctl } for pid=7598 comm="syz.0.427" path="pid:[4026532877]" dev="nsfs" ino=4026532877 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 92.160869][ T40] audit: type=1400 audit(1751828811.195:28754): avc: denied { map } for pid=7603 comm="syz.0.428" path="/dev/comedi0" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.168559][ T40] audit: type=1400 audit(1751828811.195:28755): avc: denied { execute } for pid=7603 comm="syz.0.428" path="/dev/comedi0" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.252091][ T7612] fuse: Unknown parameter 'group_id00000000000000000000' [ 92.313456][ T7616] program syz.2.433 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.434593][ T7625] openvswitch: netlink: Flow key attribute not present in set flow. [ 92.623553][ T7628] netlink: 'syz.4.437': attribute type 1 has an invalid length. [ 92.626133][ T7628] netlink: 'syz.4.437': attribute type 1 has an invalid length. [ 92.628708][ T7628] netlink: 'syz.4.437': attribute type 1 has an invalid length. [ 92.631432][ T7628] netlink: 'syz.4.437': attribute type 1 has an invalid length. [ 92.634202][ T7628] netlink: 'syz.4.437': attribute type 1 has an invalid length. [ 92.636728][ T7628] netlink: 'syz.4.437': attribute type 1 has an invalid length. [ 92.683024][ T6002] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 92.834689][ T6002] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 92.839178][ T6002] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 92.845598][ T6002] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 92.849421][ T6002] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.860778][ T7625] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 92.870985][ T6002] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 93.066612][ T7643] __nla_validate_parse: 67 callbacks suppressed [ 93.066622][ T7643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.441'. [ 93.070350][ T6002] usb 7-1: USB disconnect, device number 4 [ 93.170616][ T7647] fuse: Unknown parameter 'group_id00000000000000000000' [ 93.199864][ T7651] netlink: 196 bytes leftover after parsing attributes in process `syz.3.444'. [ 93.227390][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.445'. [ 93.233290][ T7653] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.274754][ T7649] openvswitch: netlink: Tunnel attr 14 has unexpected len 2 expected 0 [ 93.307087][ T7665] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 93.345998][ T7670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.452'. [ 93.354621][ T7670] xfrm1: entered promiscuous mode [ 93.356687][ T7670] xfrm1: entered allmulticast mode [ 93.403813][ T7674] fuse: Bad value for 'user_id' [ 93.405855][ T7674] fuse: Bad value for 'user_id' [ 93.508149][ T7685] xt_hashlimit: size too large, truncated to 1048576 [ 93.550050][ T7693] netlink: 64 bytes leftover after parsing attributes in process `syz.3.459'. [ 93.672155][ T7703] fuse: Bad value for 'group_id' [ 93.673926][ T7703] fuse: Bad value for 'group_id' [ 93.702553][ T7710] fuse: Bad value for 'user_id' [ 93.704437][ T7710] fuse: Bad value for 'user_id' [ 93.725920][ T7712] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 93.767235][ T7715] netlink: 52 bytes leftover after parsing attributes in process `syz.3.466'. [ 93.771002][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.466'. [ 93.775159][ T7715] tipc: MTU too low for tipc bearer [ 93.809074][ T7718] mkiss: ax0: crc mode is auto. [ 93.938582][ T7736] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 94.014048][ T7744] fuse: Bad value for 'user_id' [ 94.015618][ T7744] fuse: Bad value for 'user_id' [ 94.023901][ T7746] fuse: Bad value for 'user_id' [ 94.025602][ T7746] fuse: Bad value for 'user_id' [ 94.230790][ T7758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.482'. [ 94.234975][ T6002] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 94.382928][ T6002] usb 8-1: Using ep0 maxpacket: 8 [ 94.388980][ T6002] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 94.391745][ T6002] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 94.395948][ T6002] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 94.398919][ T6002] usb 8-1: config 250 has no interface number 0 [ 94.401061][ T6002] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 94.405094][ T6002] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 94.409267][ T6002] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 94.412627][ T6002] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 94.416712][ T6002] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 94.420989][ T6002] usb 8-1: config 250 interface 228 has no altsetting 0 [ 94.424647][ T6002] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 94.427997][ T6002] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 94.430610][ T6002] usb 8-1: Product: syz [ 94.432256][ T6002] usb 8-1: SerialNumber: syz [ 94.440814][ T6002] hub 8-1:250.228: bad descriptor, ignoring hub [ 94.443044][ T6002] hub 8-1:250.228: probe with driver hub failed with error -5 [ 94.516676][ T7779] netlink: 16 bytes leftover after parsing attributes in process `syz.4.489'. [ 94.576430][ T7788] netlink: 96 bytes leftover after parsing attributes in process `syz.2.492'. [ 94.581466][ T7789] tc_dump_action: action bad kind [ 94.618988][ T7794] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.622096][ T7794] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.625029][ T7794] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.627736][ T7794] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.641544][ T6002] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 94.769601][ T7805] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 94.778396][ T7805] CIFS mount error: No usable UNC path provided in device string! [ 94.778396][ T7805] [ 94.781689][ T7805] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 94.790986][ T7811] fuseblk: Bad value for 'fd' [ 94.808710][ T7813] macsec1: entered allmulticast mode [ 94.903612][ T7818] overlayfs: failed to resolve './file0': -2 [ 95.072290][ T7837] fuse: Bad value for 'fd' [ 95.168753][ T7838] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 95.260298][ T7739] usb 8-1: reset high-speed USB device number 4 using dummy_hcd [ 95.923666][ T1336] usb 8-1: USB disconnect, device number 4 [ 95.931322][ T1336] usblp0: removed [ 95.959137][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 95.959154][ T40] audit: type=1400 audit(1751828814.995:28787): avc: denied { read } for pid=7846 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.970120][ T40] audit: type=1400 audit(1751828815.005:28788): avc: denied { listen } for pid=7846 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 96.124548][ T7854] SELinux: syz.0.511 (7854) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 96.136103][ T40] audit: type=1400 audit(1751828815.175:28789): avc: denied { map } for pid=7852 comm="syz.4.512" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 96.382889][ T24] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 96.415305][ T5959] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.419242][ T5959] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.424959][ T5959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.429121][ T5959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.432865][ T5959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.547292][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 96.554368][ T7853] loop2: detected capacity change from 0 to 7 [ 96.562167][ T5962] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 96.567681][ T5962] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 96.570387][ T5962] Dev loop2: unable to read RDB block 7 [ 96.572625][ T5962] loop2: unable to read partition table [ 96.575591][ T5962] loop2: partition table beyond EOD, truncated [ 96.582367][ T7853] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 96.588606][ T7853] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 96.591384][ T7853] Dev loop2: unable to read RDB block 7 [ 96.593133][ T7859] chnl_net:caif_netlink_parms(): no params data found [ 96.593868][ T7853] loop2: unable to read partition table [ 96.598910][ T7853] loop2: partition table beyond EOD, truncated [ 96.601509][ T7853] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 96.624344][ T7865] validate_nla: 59 callbacks suppressed [ 96.624355][ T7865] netlink: 'syz.3.516': attribute type 21 has an invalid length. [ 96.687312][ T24] usb 9-1: unable to get BOS descriptor or descriptor too short [ 96.689745][ T24] usb 9-1: too many configurations: 105, using maximum allowed: 8 [ 96.693594][ T24] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 96.695969][ T24] usb 9-1: can't read configurations, error -71 [ 96.726080][ T7859] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.729249][ T7859] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.732325][ T7859] bridge_slave_0: entered allmulticast mode [ 96.737008][ T7859] bridge_slave_0: entered promiscuous mode [ 96.740848][ T7865] netlink: 'syz.3.516': attribute type 4 has an invalid length. [ 96.747108][ T7859] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.750135][ T7859] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.753741][ T7859] bridge_slave_1: entered allmulticast mode [ 96.756520][ T7859] bridge_slave_1: entered promiscuous mode [ 96.800102][ T7859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.806565][ T7859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.846522][ T7859] team0: Port device team_slave_0 added [ 96.850281][ T7859] team0: Port device team_slave_1 added [ 96.899568][ T7859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.901781][ T7859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.910051][ T7859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.919116][ T7859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.922118][ T7859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.939213][ T7859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.001865][ T7876] fuse: Bad value for 'fd' [ 97.009107][ T7859] hsr_slave_0: entered promiscuous mode [ 97.011645][ T7859] hsr_slave_1: entered promiscuous mode [ 97.013806][ T7859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.016515][ T7859] Cannot create hsr debugfs directory [ 97.130168][ T7881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.177069][ T7859] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.180929][ T7859] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.185126][ T7859] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.189151][ T7859] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.231790][ T7859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.243840][ T7859] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.249170][ T6588] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.251422][ T6588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.258661][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.261532][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.309307][ T40] audit: type=1400 audit(1751828816.345:28790): avc: denied { read } for pid=7895 comm="syz.4.522" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 97.320086][ T40] audit: type=1400 audit(1751828816.345:28791): avc: denied { open } for pid=7895 comm="syz.4.522" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 97.327455][ T40] audit: type=1400 audit(1751828816.365:28792): avc: denied { map } for pid=7895 comm="syz.4.522" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 97.362983][ T1466] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 97.393887][ T7859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.525767][ T7859] veth0_vlan: entered promiscuous mode [ 97.531078][ T7859] veth1_vlan: entered promiscuous mode [ 97.532916][ T1466] usb 8-1: Using ep0 maxpacket: 16 [ 97.538388][ T1466] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.542054][ T1466] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.547518][ T7859] veth0_macvtap: entered promiscuous mode [ 97.550444][ T1466] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 97.551573][ T7859] veth1_macvtap: entered promiscuous mode [ 97.561629][ T1466] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 97.564773][ T1466] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.564974][ T7859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.573184][ T7859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.573235][ T1466] usb 8-1: config 0 descriptor?? [ 97.576776][ T7859] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.579675][ T7859] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.582326][ T7859] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.586302][ T7859] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.646370][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.649529][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.666676][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.670617][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.684963][ T40] audit: type=1400 audit(1751828816.725:28793): avc: denied { mounton } for pid=7859 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 97.778589][ T40] audit: type=1400 audit(1751828816.815:28794): avc: denied { read write } for pid=7880 comm="syz.3.520" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 97.787496][ T7883] random: crng reseeded on system resumption [ 97.791773][ T40] audit: type=1400 audit(1751828816.825:28795): avc: denied { ioctl open } for pid=7880 comm="syz.3.520" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 97.799419][ T7882] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 97.808298][ T7917] kvm: pic: single mode not supported [ 97.808413][ T7917] kvm: pic: level sensitive irq not supported [ 97.811363][ T7917] kvm: pic: non byte read [ 97.817504][ T7917] kvm: pic: non byte read [ 97.821128][ T7917] kvm: pic: non byte read [ 97.826013][ T7917] kvm: pic: non byte read [ 97.829361][ T7917] kvm: pic: non byte read [ 97.832506][ T7917] kvm: pic: non byte read [ 97.835644][ T7917] kvm: pic: non byte read [ 97.838197][ T7917] kvm: pic: non byte read [ 97.840696][ T7917] kvm: pic: non byte read [ 97.846810][ T7920] netlink: 'syz.0.527': attribute type 142 has an invalid length. [ 97.956961][ T7931] netlink: 'syz.5.530': attribute type 5 has an invalid length. [ 98.016557][ T40] audit: type=1400 audit(1751828817.055:28796): avc: denied { create } for pid=7937 comm="syz.4.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.086130][ T7945] fuse: Bad value for 'fd' [ 98.205925][ T7953] veth0: entered promiscuous mode [ 98.324812][ T7962] Bluetooth: MGMT ver 1.23 [ 98.429362][ T7971] IPv6: NLM_F_CREATE should be specified when creating new route [ 98.435243][ T7971] netlink: 'syz.5.542': attribute type 1 has an invalid length. [ 98.457640][ T7971] geneve2: entered allmulticast mode [ 98.483060][ T5959] Bluetooth: hci0: command tx timeout [ 98.503210][ T7974] __nla_validate_parse: 7 callbacks suppressed [ 98.503222][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.5.542'. [ 98.636637][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.545'. [ 98.836370][ T7982] netlink: zone id is out of range [ 98.838754][ T7982] netlink: zone id is out of range [ 98.841040][ T7982] netlink: zone id is out of range [ 98.843887][ T7982] netlink: zone id is out of range [ 98.845605][ T7982] netlink: zone id is out of range [ 98.847236][ T7982] netlink: zone id is out of range [ 98.848880][ T7982] netlink: zone id is out of range [ 98.850527][ T7982] netlink: zone id is out of range [ 98.852487][ T7982] netlink: zone id is out of range [ 98.920008][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.548'. [ 98.924739][ T7988] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 98.968584][ T7946] veth0: left promiscuous mode [ 99.239968][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'. [ 99.407144][ T8007] netlink: 'syz.5.553': attribute type 4 has an invalid length. [ 99.417973][ T8007] netlink: 'syz.5.553': attribute type 4 has an invalid length. [ 99.819219][ T8022] IPVS: Scheduler module ip_vs_sip not found [ 99.988014][ T8029] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 100.356250][ T6002] IPVS: starting estimator thread 0... [ 100.452914][ T8053] IPVS: using max 44 ests per chain, 105600 per kthread [ 100.552909][ T5959] Bluetooth: hci0: command tx timeout [ 100.936525][ T8060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.570'. [ 100.939289][ T8060] nbd: illegal input index 1879048192 [ 100.975197][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 100.975844][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 100.975854][ T40] audit: type=1400 audit(1751828820.015:28811): avc: denied { write } for pid=8063 comm="syz.4.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 100.977923][ T8067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.573'. [ 101.102118][ T8083] netlink: 20 bytes leftover after parsing attributes in process `syz.4.579'. [ 101.298970][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.586'. [ 101.341990][ T8108] binder: BINDER_SET_CONTEXT_MGR already set [ 101.346591][ T8108] binder: 8106:8108 ioctl 4018620d 2000000000c0 returned -16 [ 101.372839][ T6002] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 101.403765][ T40] audit: type=1400 audit(1751828820.445:28812): avc: denied { call } for pid=8106 comm="syz.0.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 101.524807][ T6002] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.528966][ T6002] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.532823][ T6002] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.538387][ T6002] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.541843][ T6002] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.547196][ T6002] usb 9-1: config 0 descriptor?? [ 101.953580][ T6002] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 101.958533][ T40] audit: type=1400 audit(1751828820.995:28813): avc: denied { append } for pid=8086 comm="syz.4.581" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 101.961281][ T6002] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 101.967330][ T53] Process accounting resumed [ 101.987726][ T837] usb 9-1: USB disconnect, device number 7 [ 102.008231][ T8131] fido_id[8131]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb9/report_descriptor': No such file or directory [ 102.187088][ T8141] bridge1: entered promiscuous mode [ 102.207592][ T40] audit: type=1326 audit(1751828821.245:28814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.4.598" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f638d58e929 code=0x0 [ 102.211236][ T8145] fuse: Bad value for 'user_id' [ 102.218179][ T8145] fuse: Bad value for 'user_id' [ 102.366123][ T8148] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 102.368851][ T8148] overlayfs: failed to set xattr on upper [ 102.370961][ T8148] overlayfs: ...falling back to redirect_dir=nofollow. [ 102.374152][ T8148] overlayfs: ...falling back to index=off. [ 102.376358][ T8148] overlayfs: ...falling back to uuid=null. [ 102.378474][ T8148] overlayfs: ...falling back to xino=off. [ 102.380442][ T8148] overlayfs: conflicting lowerdir path [ 102.481118][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.601'. [ 102.485069][ T40] audit: type=1400 audit(1752353109.525:28815): avc: denied { ioctl } for pid=8156 comm="syz.0.601" path="socket:[22169]" dev="sockfs" ino=22169 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 102.642900][ T5959] Bluetooth: hci0: command tx timeout [ 102.805264][ T1466] usbhid 8-1:0.0: can't add hid device: -32 [ 102.807276][ T1466] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 102.826707][ T6002] usb 8-1: USB disconnect, device number 5 [ 102.846108][ T40] audit: type=1326 audit(1752353109.885:28816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.3.602" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d658e929 code=0x7fc00000 [ 103.039373][ T40] audit: type=1400 audit(1752353110.073:28817): avc: denied { watch } for pid=8169 comm="syz.3.604" path="/167/file1" dev="autofs" ino=22210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 103.110474][ T8178] Cannot find add_set index 0 as target [ 103.184837][ T40] audit: type=1400 audit(1752353110.219:28818): avc: denied { shutdown } for pid=8182 comm="syz.5.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.196671][ T8177] FAULT_INJECTION: forcing a failure. [ 103.196671][ T8177] name failslab, interval 1, probability 0, space 0, times 1 [ 103.200786][ T8177] CPU: 2 UID: 0 PID: 8177 Comm: syz.4.608 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 103.200801][ T8177] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.200808][ T8177] Call Trace: [ 103.200812][ T8177] [ 103.200816][ T8177] dump_stack_lvl+0x16c/0x1f0 [ 103.200852][ T8177] should_fail_ex+0x512/0x640 [ 103.200871][ T8177] ? fs_reclaim_acquire+0xae/0x150 [ 103.200884][ T8177] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 103.200901][ T8177] should_failslab+0xc2/0x120 [ 103.200918][ T8177] __kmalloc_noprof+0xd2/0x510 [ 103.200936][ T8177] tomoyo_realpath_from_path+0xc2/0x6e0 [ 103.200954][ T8177] ? tomoyo_profile+0x47/0x60 [ 103.200966][ T8177] tomoyo_path_number_perm+0x245/0x580 [ 103.200979][ T8177] ? tomoyo_path_number_perm+0x237/0x580 [ 103.200994][ T8177] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 103.201009][ T8177] ? find_held_lock+0x2b/0x80 [ 103.201036][ T8177] ? find_held_lock+0x2b/0x80 [ 103.201049][ T8177] ? hook_file_ioctl_common+0x145/0x410 [ 103.201063][ T8177] ? __fget_files+0x20e/0x3c0 [ 103.201082][ T8177] security_file_ioctl+0x9b/0x240 [ 103.201099][ T8177] __x64_sys_ioctl+0xb7/0x210 [ 103.201113][ T8177] do_syscall_64+0xcd/0x4c0 [ 103.201131][ T8177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.201143][ T8177] RIP: 0033:0x7f638d58e929 [ 103.201152][ T8177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.201162][ T8177] RSP: 002b:00007f638e440038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.201173][ T8177] RAX: ffffffffffffffda RBX: 00007f638d7b5fa0 RCX: 00007f638d58e929 [ 103.201180][ T8177] RDX: 0000200000000100 RSI: 00000000c020aa07 RDI: 0000000000000003 [ 103.201186][ T8177] RBP: 00007f638e440090 R08: 0000000000000000 R09: 0000000000000000 [ 103.201192][ T8177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.201198][ T8177] R13: 0000000000000000 R14: 00007f638d7b5fa0 R15: 00007ffcd10c86a8 [ 103.201212][ T8177] [ 103.201216][ T8177] ERROR: Out of memory at tomoyo_realpath_from_path. [ 103.342035][ T8193] tun0: tun_chr_ioctl cmd 1074025676 [ 103.342639][ T8191] fuse: Invalid rootmode [ 103.343597][ T8193] tun0: owner set to 0 [ 103.430387][ T40] audit: type=1400 audit(1752353110.461:28819): avc: denied { setattr } for pid=8195 comm="syz.4.614" name="" dev="pipefs" ino=22233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 103.678593][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.616'. [ 103.721262][ T40] audit: type=1400 audit(1752353110.732:28820): avc: denied { connect } for pid=8197 comm="syz.0.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.770834][ T8206] net_ratelimit: 113 callbacks suppressed [ 103.770851][ T8206] openvswitch: netlink: Duplicate or invalid key (type 0). [ 103.776177][ T8206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.897099][ T8213] loop6: detected capacity change from 0 to 7 [ 103.901600][ T8213] Dev loop6: unable to read RDB block 7 [ 103.903514][ T8213] loop6: unable to read partition table [ 103.905385][ T8213] loop6: partition table beyond EOD, truncated [ 103.907341][ T8213] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 103.996779][ T8215] FAULT_INJECTION: forcing a failure. [ 103.996779][ T8215] name failslab, interval 1, probability 0, space 0, times 0 [ 104.000839][ T8215] CPU: 3 UID: 0 PID: 8215 Comm: syz.0.620 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 104.000854][ T8215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.000861][ T8215] Call Trace: [ 104.000865][ T8215] [ 104.000869][ T8215] dump_stack_lvl+0x16c/0x1f0 [ 104.000889][ T8215] should_fail_ex+0x512/0x640 [ 104.000905][ T8215] ? fs_reclaim_acquire+0xae/0x150 [ 104.000919][ T8215] ? tomoyo_encode2+0x100/0x3e0 [ 104.000934][ T8215] should_failslab+0xc2/0x120 [ 104.000951][ T8215] __kmalloc_noprof+0xd2/0x510 [ 104.000969][ T8215] tomoyo_encode2+0x100/0x3e0 [ 104.000987][ T8215] tomoyo_encode+0x29/0x50 [ 104.001007][ T8215] tomoyo_realpath_from_path+0x18f/0x6e0 [ 104.001025][ T8215] ? tomoyo_profile+0x47/0x60 [ 104.001036][ T8215] tomoyo_path_number_perm+0x245/0x580 [ 104.001050][ T8215] ? tomoyo_path_number_perm+0x237/0x580 [ 104.001065][ T8215] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 104.001079][ T8215] ? find_held_lock+0x2b/0x80 [ 104.001106][ T8215] ? find_held_lock+0x2b/0x80 [ 104.001119][ T8215] ? hook_file_ioctl_common+0x145/0x410 [ 104.001137][ T8215] ? __fget_files+0x20e/0x3c0 [ 104.001155][ T8215] security_file_ioctl+0x9b/0x240 [ 104.001172][ T8215] __x64_sys_ioctl+0xb7/0x210 [ 104.001191][ T8215] do_syscall_64+0xcd/0x4c0 [ 104.001208][ T8215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.001219][ T8215] RIP: 0033:0x7f1da9f8e929 [ 104.001229][ T8215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.001240][ T8215] RSP: 002b:00007f1daad56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.001250][ T8215] RAX: ffffffffffffffda RBX: 00007f1daa1b5fa0 RCX: 00007f1da9f8e929 [ 104.001257][ T8215] RDX: 0000200000000100 RSI: 00000000c020aa07 RDI: 0000000000000003 [ 104.001264][ T8215] RBP: 00007f1daad56090 R08: 0000000000000000 R09: 0000000000000000 [ 104.001270][ T8215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.001276][ T8215] R13: 0000000000000000 R14: 00007f1daa1b5fa0 R15: 00007ffde445ba38 [ 104.001290][ T8215] [ 104.001300][ T8215] ERROR: Out of memory at tomoyo_realpath_from_path. [ 104.479437][ T836] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 104.493655][ T8229] fuse: Bad value for 'user_id' [ 104.495208][ T8229] fuse: Bad value for 'user_id' [ 104.676258][ T836] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 104.679358][ T836] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 104.682427][ T836] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.689421][ T836] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 104.693253][ T836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.696908][ T836] usb 5-1: Product: syz [ 104.698386][ T836] usb 5-1: Manufacturer: syz [ 104.701093][ T836] usb 5-1: SerialNumber: syz [ 104.714837][ T836] hub 5-1:1.0: bad descriptor, ignoring hub [ 104.717430][ T836] hub 5-1:1.0: probe with driver hub failed with error -5 [ 104.768986][ T5959] Bluetooth: hci0: command tx timeout [ 104.919565][ T8244] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 121 [ 104.930374][ T836] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 105.150360][ T8267] kAFS: unparsable volume name [ 105.225949][ T8276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.296425][ T8279] syz.4.640: attempt to access beyond end of device [ 105.296425][ T8279] loop4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 105.300602][ T8279] gfs2: error -5 reading superblock [ 105.488019][ T24] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 105.664080][ T24] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 105.667505][ T24] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 105.671101][ T24] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 105.674932][ T24] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 105.679443][ T24] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 105.685598][ T24] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 105.689331][ T24] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 105.692745][ T24] usb 10-1: Product: syz [ 105.694636][ T24] usb 10-1: Manufacturer: syz [ 105.704082][ T24] cdc_wdm 10-1:1.0: skipping garbage [ 105.706257][ T24] cdc_wdm 10-1:1.0: skipping garbage [ 105.837697][ T8224] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 105.912689][ T8289] netlink: 104 bytes leftover after parsing attributes in process `syz.3.643'. [ 105.971253][ T8224] usb 5-1: device descriptor read/64, error -71 [ 106.104153][ T8291] program syz.3.644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.133132][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'. [ 106.136229][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.645'. [ 106.141046][ T8293] netlink: 'syz.3.645': attribute type 7 has an invalid length. [ 106.218667][ T8224] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 106.233897][ T8299] cgroup: subsys name conflicts with all [ 106.351251][ T8224] usb 5-1: device descriptor read/64, error -71 [ 106.596297][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 106.596307][ T40] audit: type=1400 audit(1752353113.531:28828): avc: denied { ioctl } for pid=8318 comm="syz.3.654" path="socket:[22441]" dev="sockfs" ino=22441 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 106.599927][ T8224] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 106.639492][ T8224] usb 5-1: device descriptor read/8, error -71 [ 106.786545][ T8336] netlink: 28 bytes leftover after parsing attributes in process `syz.3.658'. [ 106.895306][ T8224] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 106.897013][ T8336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.900781][ T8338] netlink: 28 bytes leftover after parsing attributes in process `syz.3.658'. [ 106.916445][ T8224] usb 5-1: device descriptor read/8, error -71 [ 107.031262][ T837] usb 5-1: USB disconnect, device number 5 [ 107.036197][ T24] cdc_wdm 10-1:1.0: cdc-wdm1: USB WDM device [ 107.039313][ T837] usblp0: removed [ 107.041979][ T24] cdc_wdm 10-1:1.0: Unknown control protocol [ 107.051661][ T24] usb 10-1: USB disconnect, device number 2 [ 107.192679][ T837] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 107.266775][ T40] audit: type=1400 audit(1752353114.184:28829): avc: denied { map } for pid=8353 comm="syz.4.664" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 107.325897][ T837] usb 5-1: device descriptor read/64, error -71 [ 107.367630][ T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 107.390312][ T8362] fuse: Unknown parameter '00000000000000000000' [ 107.427798][ T40] audit: type=1326 audit(1752353114.340:28830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8363 comm="syz.4.666" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f638d58e929 code=0x0 [ 107.532181][ T8365] netlink: 20 bytes leftover after parsing attributes in process `syz.4.666'. [ 107.532843][ T24] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 107.538933][ T24] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 107.543245][ T24] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 107.546531][ T24] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 107.549981][ T24] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 107.555240][ T24] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 107.558170][ T24] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 107.560721][ T24] usb 10-1: Product: syz [ 107.562710][ T24] usb 10-1: Manufacturer: syz [ 107.570007][ T24] cdc_wdm 10-1:1.0: skipping garbage [ 107.571920][ T24] cdc_wdm 10-1:1.0: skipping garbage [ 107.574325][ T24] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 107.576294][ T24] cdc_wdm 10-1:1.0: Unknown control protocol [ 107.774811][ T40] audit: type=1400 audit(1752353114.672:28831): avc: denied { read } for pid=8275 comm="syz.5.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 107.785074][ T24] usb 10-1: USB disconnect, device number 3 [ 108.138259][ T8371] CIFS mount error: No usable UNC path provided in device string! [ 108.138259][ T8371] [ 108.142335][ T8371] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 108.148779][ T40] audit: type=1400 audit(1752353115.043:28832): avc: denied { setopt } for pid=8368 comm="syz.3.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 108.149800][ T8370] netlink: 68 bytes leftover after parsing attributes in process `syz.3.668'. [ 108.252961][ T40] audit: type=1400 audit(1752353115.150:28833): avc: denied { write } for pid=8377 comm="syz.0.670" name="usbmon2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.260834][ T40] audit: type=1400 audit(1752353115.160:28834): avc: denied { ioctl } for pid=8377 comm="syz.0.670" path="/dev/usbmon2" dev="devtmpfs" ino=743 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.333281][ T40] audit: type=1400 audit(1752353115.228:28835): avc: denied { write } for pid=8379 comm="syz.4.671" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 108.342391][ T8382] bridge3: entered promiscuous mode [ 108.344967][ T40] audit: type=1400 audit(1752353115.228:28836): avc: denied { open } for pid=8379 comm="syz.4.671" path="/117/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 108.354885][ T40] audit: type=1400 audit(1752353115.228:28837): avc: denied { mounton } for pid=8379 comm="syz.4.671" path="/117/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 108.491632][ T8407] netlink: 9 bytes leftover after parsing attributes in process `syz.0.678'. [ 108.491656][ T8406] netlink: 9 bytes leftover after parsing attributes in process `syz.0.678'. [ 108.495169][ T8407] 0·: renamed from hsr0 (while UP) [ 108.500287][ T8407] 0·: entered allmulticast mode [ 108.501865][ T8407] hsr_slave_0: entered allmulticast mode [ 108.505258][ T8407] hsr_slave_1: entered allmulticast mode [ 108.507267][ T8407] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 108.512125][ T8406] 1·: renamed from 70· (while UP) [ 108.512229][ T8407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48428 sclass=netlink_route_socket pid=8407 comm=syz.0.678 [ 108.519147][ T8406] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 108.657184][ T53] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 108.759275][ T8424] bridge_slave_1: left allmulticast mode [ 108.761783][ T8424] bridge_slave_1: left promiscuous mode [ 108.764213][ T8424] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.769036][ T8424] bridge_slave_0: left allmulticast mode [ 108.771556][ T8424] bridge_slave_0: left promiscuous mode [ 108.773486][ T8424] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.824685][ T53] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.828028][ T53] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 108.830837][ T53] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.836419][ T53] usb 10-1: config 0 descriptor?? [ 108.869262][ T8430] __nla_validate_parse: 1 callbacks suppressed [ 108.869274][ T8430] netlink: 129704 bytes leftover after parsing attributes in process `syz.3.685'. [ 108.958785][ T8434] fuse: Bad value for 'user_id' [ 108.960766][ T8434] fuse: Bad value for 'user_id' [ 109.203368][ T8447] fuse: Unknown parameter 'user00000000000000000000' [ 109.207109][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.692'. [ 109.259658][ T8396] netlink: 36 bytes leftover after parsing attributes in process `syz.5.675'. [ 109.267610][ T53] usbhid 10-1:0.0: can't add hid device: -71 [ 109.269978][ T53] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 109.276068][ T53] usb 10-1: USB disconnect, device number 4 [ 109.303450][ T8456] random: crng reseeded on system resumption [ 109.311767][ T1466] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 109.485450][ T1466] usb 5-1: Using ep0 maxpacket: 16 [ 109.503834][ T1466] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 109.511201][ T1466] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 109.514828][ T1466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.518114][ T1466] usb 5-1: Product: syz [ 109.519632][ T1466] usb 5-1: Manufacturer: syz [ 109.521361][ T1466] usb 5-1: SerialNumber: syz [ 109.524210][ T1466] usb 5-1: config 0 descriptor?? [ 109.533470][ T1466] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 109.536867][ T1466] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 109.610509][ T8466] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 109.792293][ T1466] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 109.818975][ T8469] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 109.854647][ T8471] fuse: Bad value for 'user_id' [ 109.856192][ T8471] fuse: Bad value for 'user_id' [ 109.875577][ T1466] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 109.878233][ T1466] em28xx 5-1:0.0: board has no eeprom [ 109.932714][ T8475] input: syz1 as /devices/virtual/input/input17 [ 109.935362][ T1466] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 109.939120][ T1466] em28xx 5-1:0.0: dvb set to bulk mode. [ 109.945909][ T53] em28xx 5-1:0.0: Binding DVB extension [ 109.965651][ T1466] usb 5-1: USB disconnect, device number 8 [ 109.973835][ T1466] em28xx 5-1:0.0: Disconnecting em28xx [ 109.999454][ T53] em28xx 5-1:0.0: Registering input extension [ 110.002136][ T1466] em28xx 5-1:0.0: Closing input extension [ 110.027594][ T1466] em28xx 5-1:0.0: Freeing device [ 110.073500][ T8481] SELinux: ebitmap: truncated map [ 110.083438][ T8481] SELinux: failed to load policy [ 110.369669][ T8487] vlan0: entered promiscuous mode [ 110.371472][ T8487] vlan0: entered allmulticast mode [ 110.373222][ T8487] hsr_slave_1: entered allmulticast mode [ 110.378090][ T8487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=8487 comm=syz.3.703 [ 110.531018][ T8502] fuseblk: Unknown parameter 'g¤¸˜A2] [ 110.531018][ T8502] £âR¼¯mÔ›‚œgâhÊ00000000000000000000' [ 110.659776][ T8508] fuse: Bad value for 'user_id' [ 110.661357][ T8508] fuse: Bad value for 'user_id' [ 110.766205][ T8512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48423 sclass=netlink_route_socket pid=8512 comm=syz.5.709 [ 110.831258][ T8516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46102 sclass=netlink_route_socket pid=8516 comm=syz.0.711 [ 111.186946][ T8539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.191561][ T8539] bond0: (slave rose0): Enslaving as an active interface with an up link [ 111.209763][ T8545] sctp: [Deprecated]: syz.5.717 (pid 8545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.209763][ T8545] Use struct sctp_sack_info instead [ 111.527710][ T8557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.866735][ T8567] netlink: 76 bytes leftover after parsing attributes in process `syz.0.724'. [ 112.111796][ T8598] fuse: Unknown parameter 'user_id00000000000000000000' [ 112.115226][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 112.115234][ T40] audit: type=1400 audit(1752353118.931:28842): avc: denied { ioctl } for pid=8600 comm="syz.3.733" path="socket:[26703]" dev="sockfs" ino=26703 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 112.125539][ T40] audit: type=1400 audit(1752353118.931:28843): avc: denied { connect } for pid=8600 comm="syz.3.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 112.175015][ T8612] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=82 sclass=netlink_tcpdiag_socket pid=8612 comm=syz.4.735 [ 112.286315][ T8627] netlink: 92 bytes leftover after parsing attributes in process `syz.3.739'. [ 112.291126][ T8628] netlink: 92 bytes leftover after parsing attributes in process `syz.3.739'. [ 112.389432][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.744'. [ 112.631584][ T8657] netlink: 20 bytes leftover after parsing attributes in process `syz.4.749'. [ 112.676037][ T8659] netlink: 32 bytes leftover after parsing attributes in process `syz.4.750'. [ 112.897689][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 112.901815][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 112.904926][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 112.908387][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 112.914141][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.970189][ T8675] random: crng reseeded on system resumption [ 113.006264][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.5.757'. [ 113.064844][ T8669] chnl_net:caif_netlink_parms(): no params data found [ 113.135727][ T8669] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.138073][ T8669] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.140478][ T8669] bridge_slave_0: entered allmulticast mode [ 113.146068][ T8669] bridge_slave_0: entered promiscuous mode [ 113.150170][ T8669] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.152425][ T8669] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.154933][ T8669] bridge_slave_1: entered allmulticast mode [ 113.159169][ T8669] bridge_slave_1: entered promiscuous mode [ 113.193489][ T8669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.198399][ T8669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.240636][ T8669] team0: Port device team_slave_0 added [ 113.244927][ T8669] team0: Port device team_slave_1 added [ 113.276050][ T8669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.280264][ T8669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.288146][ T8669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.292332][ T8669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.294513][ T8669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.302893][ T8669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.348882][ T8669] hsr_slave_0: entered promiscuous mode [ 113.351442][ T8669] hsr_slave_1: entered promiscuous mode [ 113.353509][ T8669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.355822][ T8669] Cannot create hsr debugfs directory [ 113.859769][ T8688] netlink: 'syz.5.757': attribute type 23 has an invalid length. [ 113.888629][ T8669] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 113.894846][ T8669] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 113.900465][ T8669] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 113.906538][ T8669] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 113.936252][ T8669] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.938575][ T8669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.941095][ T8669] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.943365][ T8669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.007034][ T8669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.016370][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.023052][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.039779][ T8669] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.104150][ T6592] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.106480][ T6592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.110081][ T6592] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.112305][ T6592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.215802][ T8669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.325212][ T1336] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 114.343269][ T8730] SET target dimension over the limit! [ 114.350574][ T8669] veth0_vlan: entered promiscuous mode [ 114.356873][ T8669] veth1_vlan: entered promiscuous mode [ 114.381644][ T40] audit: type=1400 audit(1752353121.153:28844): avc: denied { setattr } for pid=8731 comm="syz.3.767" path="socket:[23418]" dev="sockfs" ino=23418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.384308][ T8669] veth0_macvtap: entered promiscuous mode [ 114.392519][ T40] audit: type=1400 audit(1752353121.162:28845): avc: denied { name_connect } for pid=8731 comm="syz.3.767" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 114.399593][ T8669] veth1_macvtap: entered promiscuous mode [ 114.411403][ T8669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.419224][ T8669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.424797][ T8669] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.427734][ T8669] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.430512][ T8669] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.433253][ T8669] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.476275][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.477116][ T1336] usb 9-1: Using ep0 maxpacket: 32 [ 114.487303][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.488452][ T1336] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 114.496742][ T1336] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 114.497959][ T40] audit: type=1400 audit(1752353121.281:28846): avc: denied { write } for pid=8735 comm="syz.3.769" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 114.506803][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.507007][ T1336] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 114.507025][ T1336] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 114.507039][ T1336] usb 9-1: config 0 interface 0 has no altsetting 0 [ 114.509593][ T1336] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 114.510862][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.527879][ T1336] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 114.530505][ T1336] usb 9-1: Product: syz [ 114.531821][ T1336] usb 9-1: Manufacturer: syz [ 114.533299][ T1336] usb 9-1: SerialNumber: syz [ 114.541083][ T1336] usb 9-1: config 0 descriptor?? [ 114.545132][ T1336] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 114.548787][ T1336] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 114.590937][ T8742] bridge0: port 3(vlan2) entered blocking state [ 114.593308][ T8742] bridge0: port 3(vlan2) entered disabled state [ 114.595899][ T8742] vlan2: entered allmulticast mode [ 114.598112][ T8742] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 114.604663][ T8742] vlan2: entered promiscuous mode [ 114.606343][ T8742] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 114.609644][ T8741] netlink: 'syz.5.770': attribute type 4 has an invalid length. [ 114.617618][ T8744] misc userio: No port type given on /dev/userio [ 114.682516][ T8747] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 114.709613][ T40] audit: type=1400 audit(1752353121.478:28847): avc: denied { execmod } for pid=8749 comm="syz.6.773" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=26588 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 114.755916][ T8754] __nla_validate_parse: 1 callbacks suppressed [ 114.755927][ T8754] netlink: 20 bytes leftover after parsing attributes in process `syz.5.774'. [ 114.782840][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 114.783190][ T8762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.776'. [ 114.785675][ T8761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.776'. [ 114.785693][ T8761] netlink: 'syz.3.776': attribute type 18 has an invalid length. [ 114.988971][ T8775] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 114.995359][ T5959] Bluetooth: hci3: command tx timeout [ 115.006862][ T8778] mmap: syz.6.780 (8778): VmData 37523456 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 115.090943][ T8785] Illegal XDP return value 4294967274 on prog (id 148) dev syz_tun, expect packet loss! [ 115.098482][ T8784] netlink: 16 bytes leftover after parsing attributes in process `syz.6.782'. [ 115.639914][ T8810] xt_hashlimit: size too large, truncated to 1048576 [ 115.669819][ T8808] netlink: 'syz.3.788': attribute type 1 has an invalid length. [ 115.672524][ T40] audit: type=1400 audit(1752353122.423:28848): avc: denied { mount } for pid=8805 comm="syz.3.788" name="/" dev="configfs" ino=1165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 115.672897][ T8808] netlink: 224 bytes leftover after parsing attributes in process `syz.3.788'. [ 115.681268][ T8813] netlink: 16 bytes leftover after parsing attributes in process `syz.6.790'. [ 115.686075][ T8814] netlink: 16 bytes leftover after parsing attributes in process `syz.6.790'. [ 115.702482][ T40] audit: type=1400 audit(1752353122.453:28849): avc: denied { unmount } for pid=6116 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 115.725126][ T8822] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 115.730194][ T8822] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 115.738929][ T8828] 9pnet: Found fid 0 not clunked [ 115.748746][ T8830] fuse: Bad value for 'user_id' [ 115.750566][ T8830] fuse: Bad value for 'user_id' [ 115.771941][ T8834] netlink: 28 bytes leftover after parsing attributes in process `syz.6.794'. [ 115.795566][ T8828] 9pnet: Found fid 0 not clunked [ 115.798720][ T40] audit: type=1400 audit(1752353122.561:28850): avc: denied { read } for pid=8820 comm="syz.3.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.885117][ T8844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.897488][ T8842] netlink: 'syz.6.796': attribute type 10 has an invalid length. [ 115.909660][ T8842] hsr0: entered promiscuous mode [ 115.913171][ T8842] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 115.916403][ T8842] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 115.920229][ T8842] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 115.928172][ T8849] netlink: 20 bytes leftover after parsing attributes in process `syz.5.798'. [ 115.931593][ T8849] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 115.934107][ T8849] IPv6: NLM_F_CREATE should be set when creating new route [ 115.970382][ T8851] fuse: Unknown parameter '0x000000000000000a' [ 115.983383][ T8854] netlink: 'syz.5.801': attribute type 1 has an invalid length. [ 116.026072][ T40] audit: type=1400 audit(1752353122.778:28851): avc: denied { ioctl } for pid=8859 comm="syz.6.802" path="socket:[29881]" dev="sockfs" ino=29881 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 116.084547][ T8872] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8872 comm=syz.5.803 [ 116.103361][ T8864] binder: 8862:8864 ioctl c0306201 200000000040 returned -22 [ 116.129798][ T8877] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 116.239056][ T8886] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.241823][ T8886] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.244762][ T8886] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.247564][ T8886] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.316368][ T8894] fuse: Unknown parameter '0x000000000000000a' [ 116.372563][ T8898] sp0: Synchronizing with TNC [ 116.695027][ T8922] tmpfs: Bad value for 'mpol' [ 116.714528][ T8924] fuse: Unknown parameter '0x000000000000000a' [ 116.721412][ T8926] futex_wake_op: syz.3.823 tries to shift op by 32; fix this program [ 117.095111][ T5959] Bluetooth: hci3: command tx timeout [ 117.194795][ T8942] netlink: 'syz.6.828': attribute type 4 has an invalid length. [ 117.234620][ T8944] netlink: 'syz.6.829': attribute type 1 has an invalid length. [ 117.268411][ T8944] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.280984][ T8944] fuse: Bad value for 'user_id' [ 117.282551][ T8944] fuse: Bad value for 'user_id' [ 117.328969][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 117.328980][ T40] audit: type=1326 audit(1752353124.070:28857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8946 comm="syz.3.830" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f78d658e929 code=0x0 [ 117.337482][ T8950] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input19 [ 117.849625][ T40] audit: type=1400 audit(1752353124.574:28858): avc: denied { ioctl } for pid=8957 comm="syz.5.834" path="socket:[28996]" dev="sockfs" ino=28996 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 118.390338][ T8985] overlayfs: missing 'lowerdir' [ 118.393127][ T8985] overlayfs: missing 'lowerdir' [ 118.450723][ T8988] ntfs3(nbd5): try to read out of volume at offset 0x0 [ 118.462536][ T8987] ntfs3(nbd5): try to read out of volume at offset 0x0 [ 118.765737][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 118.918725][ T9] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 118.922353][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 118.925719][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 118.929096][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.933046][ T9] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.935833][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.939845][ T9] usb 10-1: config 0 descriptor?? [ 119.026445][ T8996] vxfs: WRONG superblock magic 00000000 at 1 [ 119.031736][ T8996] vxfs: WRONG superblock magic 00000000 at 8 [ 119.034164][ T8996] vxfs: can't find superblock. [ 119.201073][ T5959] Bluetooth: hci3: command tx timeout [ 119.289133][ T40] audit: type=1400 audit(1752353125.996:28859): avc: denied { create } for pid=9018 comm="syz.3.853" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 119.297855][ T40] audit: type=1400 audit(1752353125.996:28860): avc: denied { write } for pid=9018 comm="syz.3.853" name="file0" dev="tmpfs" ino=1324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 119.309523][ T40] audit: type=1400 audit(1752353126.006:28861): avc: denied { open } for pid=9018 comm="syz.3.853" path="/244/file0" dev="tmpfs" ino=1324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 119.325247][ T40] audit: type=1400 audit(1752353126.036:28862): avc: denied { ioctl } for pid=9018 comm="syz.3.853" path="/244/file0" dev="tmpfs" ino=1324 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 119.351605][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 119.354355][ T9] usbhid 10-1:0.0: can't add hid device: -71 [ 119.356317][ T9] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 119.360142][ T9] usb 10-1: USB disconnect, device number 5 [ 119.407125][ T40] audit: type=1400 audit(1752353126.115:28863): avc: denied { unlink } for pid=6116 comm="syz-executor" name="file0" dev="tmpfs" ino=1324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 119.858584][ T8718] ldusb 9-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 119.873468][ T1336] usb 9-1: USB disconnect, device number 8 [ 119.883357][ T1336] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 119.921887][ T9049] netlink: 'syz.4.860': attribute type 1 has an invalid length. [ 120.001345][ T9063] __nla_validate_parse: 10 callbacks suppressed [ 120.001356][ T9063] netlink: 36 bytes leftover after parsing attributes in process `syz.4.864'. [ 120.002325][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.864'. [ 120.167445][ T9088] FAULT_INJECTION: forcing a failure. [ 120.167445][ T9088] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 120.171767][ T9088] CPU: 3 UID: 0 PID: 9088 Comm: syz.6.871 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 120.171799][ T9088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.171806][ T9088] Call Trace: [ 120.171810][ T9088] [ 120.171814][ T9088] dump_stack_lvl+0x16c/0x1f0 [ 120.171849][ T9088] should_fail_ex+0x512/0x640 [ 120.171870][ T9088] _copy_from_user+0x2e/0xd0 [ 120.171888][ T9088] copy_msghdr_from_user+0x98/0x160 [ 120.171905][ T9088] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 120.171927][ T9088] ___sys_sendmsg+0xfe/0x1d0 [ 120.171943][ T9088] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.171957][ T9088] ? __lock_acquire+0x622/0x1c90 [ 120.171984][ T9088] __sys_sendmsg+0x16d/0x220 [ 120.172000][ T9088] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.172024][ T9088] do_syscall_64+0xcd/0x4c0 [ 120.172041][ T9088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.172059][ T9088] RIP: 0033:0x7f242178e929 [ 120.172068][ T9088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.172079][ T9088] RSP: 002b:00007f2422598038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.172089][ T9088] RAX: ffffffffffffffda RBX: 00007f24219b5fa0 RCX: 00007f242178e929 [ 120.172097][ T9088] RDX: 0000000000000000 RSI: 0000200000002f80 RDI: 0000000000000003 [ 120.172103][ T9088] RBP: 00007f2422598090 R08: 0000000000000000 R09: 0000000000000000 [ 120.172109][ T9088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.172115][ T9088] R13: 0000000000000000 R14: 00007f24219b5fa0 R15: 00007ffd2f80e3c8 [ 120.172128][ T9088] [ 120.213616][ T9092] netlink: 12 bytes leftover after parsing attributes in process `syz.6.872'. [ 120.269927][ T9097] fuse: Unknown parameter 'fd0x000000000000000a' [ 120.274975][ T40] audit: type=1400 audit(1752353126.965:28864): avc: denied { mount } for pid=9099 comm="syz.5.875" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 120.281704][ T40] audit: type=1400 audit(1752353126.975:28865): avc: denied { map } for pid=9100 comm="syz.6.876" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 120.307285][ T40] audit: type=1400 audit(1752353127.005:28866): avc: denied { unmount } for pid=7859 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 120.328159][ T9112] netlink: 16 bytes leftover after parsing attributes in process `syz.5.878'. [ 120.331239][ T9112] netlink: 16 bytes leftover after parsing attributes in process `syz.5.878'. [ 120.378487][ T9122] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 120.380564][ T9122] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 120.385451][ T9122] vhci_hcd vhci_hcd.0: Device attached [ 120.392817][ T9127] FAULT_INJECTION: forcing a failure. [ 120.392817][ T9127] name failslab, interval 1, probability 0, space 0, times 0 [ 120.394184][ T9122] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 120.399039][ T9127] CPU: 0 UID: 0 PID: 9127 Comm: syz.5.881 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 120.399056][ T9127] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.399064][ T9127] Call Trace: [ 120.399068][ T9127] [ 120.399072][ T9127] dump_stack_lvl+0x16c/0x1f0 [ 120.399094][ T9127] should_fail_ex+0x512/0x640 [ 120.399110][ T9127] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 120.399129][ T9127] should_failslab+0xc2/0x120 [ 120.399162][ T9127] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 120.399179][ T9127] ? __alloc_skb+0x2b2/0x380 [ 120.399197][ T9127] __alloc_skb+0x2b2/0x380 [ 120.399212][ T9127] ? __pfx___alloc_skb+0x10/0x10 [ 120.399229][ T9127] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 120.399244][ T9127] netlink_alloc_large_skb+0x69/0x130 [ 120.399257][ T9127] netlink_sendmsg+0x6a1/0xdd0 [ 120.399272][ T9127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.399289][ T9127] ____sys_sendmsg+0xa95/0xc70 [ 120.399302][ T9127] ? copy_msghdr_from_user+0x10a/0x160 [ 120.399319][ T9127] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.399338][ T9127] ___sys_sendmsg+0x134/0x1d0 [ 120.399355][ T9127] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.399370][ T9127] ? __lock_acquire+0x622/0x1c90 [ 120.399400][ T9127] __sys_sendmsg+0x16d/0x220 [ 120.399416][ T9127] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.399443][ T9127] do_syscall_64+0xcd/0x4c0 [ 120.399461][ T9127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.399473][ T9127] RIP: 0033:0x7fb31798e929 [ 120.399483][ T9127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.399495][ T9127] RSP: 002b:00007fb3157f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.399506][ T9127] RAX: ffffffffffffffda RBX: 00007fb317bb5fa0 RCX: 00007fb31798e929 [ 120.399513][ T9127] RDX: 0000000000000000 RSI: 0000200000002f80 RDI: 0000000000000003 [ 120.399520][ T9127] RBP: 00007fb3157f6090 R08: 0000000000000000 R09: 0000000000000000 [ 120.399527][ T9127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.399533][ T9127] R13: 0000000000000000 R14: 00007fb317bb5fa0 R15: 00007ffcadaad4b8 [ 120.399548][ T9127] [ 120.444163][ T9130] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 120.626622][ T34] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 121.086302][ T9146] vivid-001: ================= START STATUS ================= [ 121.089021][ T9146] vivid-001: Radio HW Seek Mode: Bounded [ 121.091795][ T9146] vivid-001: Radio Programmable HW Seek: false [ 121.093748][ T9146] vivid-001: RDS Rx I/O Mode: Block I/O [ 121.095496][ T9146] vivid-001: Generate RBDS Instead of RDS: false [ 121.097485][ T9146] vivid-001: RDS Reception: true [ 121.099043][ T9146] vivid-001: RDS Program Type: 0 inactive [ 121.100834][ T9146] vivid-001: RDS PS Name: inactive [ 121.103089][ T9146] vivid-001: RDS Radio Text: inactive [ 121.104841][ T9146] vivid-001: RDS Traffic Announcement: false inactive [ 121.106946][ T9146] vivid-001: RDS Traffic Program: false inactive [ 121.108925][ T9146] vivid-001: RDS Music: false inactive [ 121.110637][ T9146] vivid-001: ================== END STATUS ================== [ 121.113470][ T9146] .: renamed from bond0 (while UP) [ 121.159403][ T9123] vhci_hcd: connection reset by peer [ 121.162232][ T1142] vhci_hcd: stop threads [ 121.163643][ T1142] vhci_hcd: release socket [ 121.166174][ T1142] vhci_hcd: disconnect device [ 121.303728][ T5959] Bluetooth: hci3: command tx timeout [ 121.644783][ T9169] random: crng reseeded on system resumption [ 121.710313][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'. [ 121.714383][ T9171] netlink: 'syz.3.898': attribute type 6 has an invalid length. [ 121.717677][ T9171] netlink: 'syz.3.898': attribute type 39 has an invalid length. [ 121.755583][ T9177] kvm: kvm [9167]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000007) [ 121.946827][ T8533] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 121.951311][ T8533] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 121.955802][ T8533] CPU: 3 UID: 0 PID: 8533 Comm: kbnepd bnep0 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 121.960451][ T8533] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 121.964640][ T8533] RIP: 0010:klist_put+0x4d/0x1b0 [ 121.966592][ T8533] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 ac 20 0d [ 121.974007][ T8533] RSP: 0018:ffffc9000385f950 EFLAGS: 00010202 [ 121.976384][ T8533] RAX: dffffc0000000000 RBX: ffff888054350860 RCX: ffffffff8261928d [ 121.979453][ T8533] RDX: 000000000000000b RSI: ffffffff8b7dc035 RDI: 0000000000000058 [ 121.982529][ T8533] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 121.985592][ T8533] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 121.988655][ T8533] R13: 0000000000000001 R14: ffffc9000385fb38 R15: 0000000000000000 [ 121.991865][ T8533] FS: 0000000000000000(0000) GS:ffff8880d6a15000(0000) knlGS:0000000000000000 [ 121.995318][ T8533] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.997898][ T8533] CR2: 00007f78d739cd58 CR3: 000000006044a000 CR4: 0000000000352ef0 [ 122.001017][ T8533] Call Trace: [ 122.002309][ T8533] [ 122.003434][ T8533] device_del+0x1d8/0x9f0 [ 122.005090][ T8533] ? __pfx_device_del+0x10/0x10 [ 122.006928][ T8533] ? netdev_unregister_kobject+0x2da/0x540 [ 122.009138][ T8533] unregister_netdevice_many_notify+0x1903/0x2700 [ 122.011600][ T8533] ? rcu_is_watching+0x12/0xc0 [ 122.013429][ T8533] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 122.015986][ T8533] ? rtnl_net_dev_lock+0x146/0x360 [ 122.017914][ T8533] ? __pfx___mutex_lock+0x10/0x10 [ 122.019843][ T8533] unregister_netdevice_queue+0x305/0x3f0 [ 122.021980][ T8533] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 122.024350][ T8533] ? rtnl_net_dev_lock+0x28/0x360 [ 122.026345][ T8533] ? rtnl_net_dev_lock+0x146/0x360 [ 122.028349][ T8533] ? rtnl_lock+0x9/0x20 [ 122.029986][ T8533] ? rtnl_net_dev_lock+0x146/0x360 [ 122.032025][ T8533] unregister_netdev+0x1f/0x60 [ 122.033898][ T8533] bnep_session+0x224e/0x2d80 [ 122.035789][ T8533] ? __pfx_bnep_session+0x10/0x10 [ 122.037779][ T8533] ? do_raw_spin_lock+0x12c/0x2b0 [ 122.039744][ T8533] ? __pfx_woken_wake_function+0x10/0x10 [ 122.041955][ T8533] ? rcu_is_watching+0x12/0xc0 [ 122.043831][ T8533] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 122.046105][ T8533] ? lockdep_hardirqs_on+0x7c/0x110 [ 122.048138][ T8533] ? __kthread_parkme+0x19e/0x250 [ 122.050110][ T8533] ? __pfx_bnep_session+0x10/0x10 [ 122.052066][ T8533] kthread+0x3c2/0x780 [ 122.053688][ T8533] ? __pfx_kthread+0x10/0x10 [ 122.055505][ T8533] ? rcu_is_watching+0x12/0xc0 [ 122.057403][ T8533] ? __pfx_kthread+0x10/0x10 [ 122.059213][ T8533] ret_from_fork+0x5d4/0x6f0 [ 122.061032][ T8533] ? __pfx_kthread+0x10/0x10 [ 122.062831][ T8533] ret_from_fork_asm+0x1a/0x30 [ 122.064727][ T8533] [ 122.065952][ T8533] Modules linked in: [ 122.068462][ T8533] ---[ end trace 0000000000000000 ]--- [ 122.072566][ T8533] RIP: 0010:klist_put+0x4d/0x1b0 [ 122.072714][ T9192] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 122.074575][ T8533] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 ac 20 0d [ 122.074594][ T8533] RSP: 0018:ffffc9000385f950 EFLAGS: 00010202 [ 122.074609][ T8533] RAX: dffffc0000000000 RBX: ffff888054350860 RCX: ffffffff8261928d [ 122.074620][ T8533] RDX: 000000000000000b RSI: ffffffff8b7dc035 RDI: 0000000000000058 [ 122.074628][ T8533] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 122.096096][ T8533] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 122.099156][ T8533] R13: 0000000000000001 R14: ffffc9000385fb38 R15: 0000000000000000 [ 122.102313][ T8533] FS: 0000000000000000(0000) GS:ffff8880d6a15000(0000) knlGS:0000000000000000 [ 122.105735][ T8533] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.108280][ T8533] CR2: 00007f78d739cd58 CR3: 000000002c841000 CR4: 0000000000352ef0 [ 122.111330][ T8533] Kernel panic - not syncing: Fatal exception [ 122.114406][ T8533] Kernel Offset: disabled [ 122.116033][ T8533] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:07:21 Registers: info registers vcpu 0 CPU#0 RAX=00000000000a6fec RBX=0000000000000000 RCX=ffffffff8b884c69 RDX=ffffed100d486646 RSI=ffffffff8c158820 RDI=ffffffff8191fc61 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a97650 R15=0000000000000000 RIP=ffffffff8b8837cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6715000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f78d73bdd58 CR3=000000002493b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=0000000000000000 Opmask02=000000007ffeffff Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f869f3d430 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f869d02390 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcf0b7f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373268b1a8002f3 7373268b1a877b83 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737312 7373268e450cb866 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772f766564752f6e 75722f00646c6f2e 68637461772f7665 64752f6e75722f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6963682f68746f6f 7465756c622f6c61 75747269762f7365 63697665642f7379 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5341494c41444f4d 0000000000000021 0000003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88806a742080 RCX=ffffffff81b001dd RDX=ffff88803c69a440 RSI=ffffffff81b001b9 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc9000318f4e8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed100d4e8411 R15=ffff88806a53b580 RIP=ffffffff81b001bf RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6815000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8a330e7d60 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000030003 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8a325856a3 00007f8a325856a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea5d36fb0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555d41be7d 000055555d41bc80 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555d4266bf 000055555d426450 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03bc0310040003b8 0312020003b60300 020003b403040400 03b00300080003a8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01001000088b8004 0100000208060601 6890000800088be0 03001000088bd003 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 001000088bc00302 1000088bb0035810 0001900308020003 d00318040003cc03 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a040003c8030608 0003c00312040003 bc0310040003b803 12020003b6030002 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0003b40304040003 b00300080003a803 00040003a4030002 0003a2030e020003 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000092 RCX=ffffffff81890e81 RDX=0000000000000000 RSI=1ffff92000030fc6 RDI=ffffffff8df3fdb0 RBP=ffff88801de8c880 RSP=ffffc90000187ec8 R8 =0000000000000000 R9 =fffffbfff2152eca R10=ffffffff90a97657 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8192031a RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6915000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f638e2e56c0 CR3=000000004a181000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb317a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb317a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb317a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb317a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb317a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb317a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000002c03000000 4002000800000000 307a797300010009 00000002d5ff1a5e ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100110000001400 000000327a797300 0300090000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000200000000ff e6000003010a0300 00002c0300000040 0200080000000030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bed55 RDI=ffffffff9b0c52e0 RBP=ffffffff9b0c52a0 RSP=ffffc9000385f350 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000066 R14=ffffffff9b0c52a0 R15=ffffffff855becf0 RIP=ffffffff855bed7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a15000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f78d739cd58 CR3=000000006044a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78d6611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78d6611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78d6611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78d6611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78d6611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78d6611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78d6785488 00007f78d6785480 00007f78d6785478 00007f78d6785450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78d72ed100 00007f78d6785440 00007f78d6785458 00007f78d67854a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f78d6785498 00007f78d6785490 00007f78d6785488 00007f78d6785480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000