last executing test programs: 7m4.427800201s ago: executing program 32 (id=1268): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) (async) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="0fa937e131d1ca9a9d8cc128c9c7d96404c78fd423f79537ed755eac738e4fa94684b3dba38c2275a024b43918a8a10450a8ebc94f7324c66f24f8959b1d31023e98cf96eb3fc908de09f09359dcfbae258c3b7e0a1d4840301a7514735da356fbc18ac1942e908d565c43fb917c94f60f3e50882ddda008c5a242c23ceaec0ac5896eceda287d84d87a8a239da7f83b4219930ec34a7407d9e9c0d9404387d8058759532130564f4933d6befec7ff1779a91908418f0ef31b6b243632e8c37d1c9ed748fdebf85202cb3195db2fe6cd38d3d6a67367f5a867ea70e32f34377a52850842f6675c8811f7f2cee0e7c9a9ee7c6b690a5ffdfec3", 0xf9}, {&(0x7f0000000240)="4ce1262087e3b9e618cee39a0638a29c88272f71384fd2afdadd7318dc9dc425292e19d8bc00a0168d5459983efab75e3ece4236e53fc0ead224f9757407655dbca852a6d0a42ab10bded353e3ea09808cfca6044c2ec3eaa9501b2ec309bce227a7d1ffa246acd6800590fd4d7a2893b01f5541fe60687d2a9bfb8b830223e6c1d76339e97ce22c667a7120e8c043288f962a6d625f3a8b844bd6124c9ba251e1df967ca97103a993abd65b136fb6aa9b23307948174d9f9363", 0xba}, {&(0x7f0000000300)="ec8bc914f1f82e56643520b9530308fa24af07e9f3e412c6f5fd8554ebe10209f171d88a26884baf65baacfbd1463526f22c1d44fc4593c7d8980c2c45242a160f883a49afcc5743ec01fa800502832fad977c109977c1e128af5b1bfbe1e76def70d81f5ca236909772a9fa0f7ef8e7e7f90c114da0a93f23a7a7a9547d97cd4ab08037c87579b99069d59ad216df7f60ba6a73d8bb59173864fc68167a1c86c5896d6215f5b6ad8410", 0xaa}], 0x3, &(0x7f00000003c0)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x57e5}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xfffffff9}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18}], 0xa8, 0x8c0}, 0x4000001) syz_emit_vhci(&(0x7f0000001100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_write_link_policy={{}, {0xcf, 0xc8}}}}, 0x9) syz_emit_ethernet(0xdf, &(0x7f0000000540)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@mpls_uc={0x8847, {[{0x9}, {0xffff9}], @llc={@snap={0x1, 0xaa, '@H', "08009e", 0x19, "199167007264f525f9733598d0d9ae521a064c99f9423dd01f7dca4bb181552862119491862e057f34ead12e8bc85580ab5bb4c2dac9d66848a82428ad7b782909666a6437addb869c0d3003c285a21595f8e4e109ac580c86511073de24cc4e61e3dbebc5e597c81c9f76e67c17bfd81e57a4fedd3002b5bb6f1357d939819e1b34495e80788ca350047dc9af750e5dd4a9f3a9e1d1844ed353dd6f7a4489ee6576811c436109d7c1482385e4bc551fe5f7ee17ff0a3b68ec0829cdcbec8fd5"}}}}}}, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0xd, 0x0, 0x10, 0xfd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xff, 0xff}) (async) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYRES8, @ANYRES16=r1, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0) 5m40.900468878s ago: executing program 3 (id=2332): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x402, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000500), &(0x7f0000000340)=0x8) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001140)=ANY=[@ANYBLOB="2400000009060104000000ff5766f4ef906a95ccff0b5cdbbeed469a9f163c0000400300"/55], 0x24}, 0x1, 0x0, 0x0, 0x885}, 0x44) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fd5b4a26", @ANYRES16=r5, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe8000000000000000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090039000000060002001100000008000b007369700008000800000000000600040001150000"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000370400000000ffdbdf2500000000", @ANYRES32=r7, @ANYBLOB="8345050000000000340012800900010069706970000000002400028006000f000100000008000300ac1414000600100003"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty}}}], 0x20}}], 0x1, 0x80) syz_io_uring_setup(0x5357, &(0x7f0000000080)={0x0, 0xccf8, 0x40, 0x1, 0x11c, 0x0, r0}, &(0x7f0000000000), &(0x7f0000000180)) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/4096) r8 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000640)={{0x20000009, 0x5, 0x5, 0x10000, 'syz0\x00', 0x8}, 0x6, 0x19f7ba3a855f099f, 0x9, 0x0, 0x0, 0xb, 'syz0\x00', 0x0}) socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000001180)=0xc) setregid(0xffffffffffffffff, r9) r10 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) pread64(r10, &(0x7f0000002240)=""/237, 0xfecf, 0x4eb) socket$nl_sock_diag(0x10, 0x3, 0x4) r11 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet6_int(r11, 0x29, 0x10, 0x0, &(0x7f0000000140)) 5m40.758489783s ago: executing program 3 (id=2334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a0102000000000000000008000440000000000900010073797a30000000000800034000000002140000001100010000000000000000000000000a"], 0x64}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) read$snapshot(r2, 0x0, 0xffffffbf) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000301112800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000020027000000000008000a00a8", @ANYRES64=r3], 0x6c}}, 0x0) 5m40.649900766s ago: executing program 3 (id=2336): io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0xfffefffe, 0x2, 0x3, 0x4800020}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000040)={&(0x7f0000001800)=[{0x8, 0x2800, 0x18, &(0x7f0000000180)="6a76c1b175920a71f6191f9737343e385b6d1ff480e12dd6"}], 0x1}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x1, 0x1, 0x1}}, {{0x3, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x1}}], 0x18) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x0) 5m40.384801951s ago: executing program 3 (id=2339): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) chdir(&(0x7f0000000340)='./file0\x00') (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) (async) 5m40.050079525s ago: executing program 3 (id=2343): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000280)=0x3) waitid$P_PIDFD(0x3, r1, 0x0, 0x8, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x3, 0x4, 0x1, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_ethernet(0x55, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x47, 0xfffc, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x14, 0x0, 0x0, @remote, "53f683785c5b987df5ff06000000007ee410f074b2c89256c505b9fc63538d19dba32efd618d4756028ea9"}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r3, &(0x7f0000000d40), 0x0}, 0x20) 5m39.80933393s ago: executing program 3 (id=2349): r0 = socket(0x10, 0x80002, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a280000000c0a010200000000000000000200000308000440000000010900020073797a310000000030000000000a01080000000000000000050000090900010073797a3000000000040006000900010073797a3100000000140000000c0a020200000000000000000200000620000000000a01030000000000000000010000080900010073797a310000000030000000160a01040000000000000000050000090900010073797a310000000004000380090002"], 0x104}, 0x1, 0x0, 0x0, 0x40}, 0xc840) (async) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001580), 0x40, 0x0) ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x3) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 5m39.758227308s ago: executing program 33 (id=2349): r0 = socket(0x10, 0x80002, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a280000000c0a010200000000000000000200000308000440000000010900020073797a310000000030000000000a01080000000000000000050000090900010073797a3000000000040006000900010073797a3100000000140000000c0a020200000000000000000200000620000000000a01030000000000000000010000080900010073797a310000000030000000160a01040000000000000000050000090900010073797a310000000004000380090002"], 0x104}, 0x1, 0x0, 0x0, 0x40}, 0xc840) (async) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001580), 0x40, 0x0) ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x3) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 5m9.803071137s ago: executing program 5 (id=2708): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r0, 0x4010e501, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r4) ioctl$KVM_CHECK_EXTENSION(r5, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) close_range(r2, 0xffffffffffffffff, 0x400000000000000) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r6 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000003540)={0x0, 0x0, 0x0}, 0x34000041) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0x8, &(0x7f0000002000)={0x7, 0x9}, 0x0) r7 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r7, 0xb) (async) shmctl$SHM_LOCK(r7, 0xb) open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) (async) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) r9 = openat$incfs(r8, &(0x7f0000000000)='.log\x00', 0x80000, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x64, 0x4, 0x3c8, 0xffffffff, 0x0, 0x1d0, 0x100, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d4], 0x6d, 0x2, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@loopback, @loopback, [0xffffffff, 0xffffffff, 0xffffff00], [0xff, 0xffffff00, 0xff000000], 'vlan1\x00', 'gretap0\x00', {}, {}, 0x73, 0x10, 0x4}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [0xff000000, 0x0, 0x0, 0xffffffff], [], 'vlan1\x00', 'bridge0\x00', {}, {}, 0x3b, 0xf8}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x8, 0x1}}, @common=@inet=@dccp={{0x30}, {[0x4e23, 0x4e24], [0x4e23, 0x4e23], 0x0, 0x1, 0x8, 0x5}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x400}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) (async) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x64, 0x4, 0x3c8, 0xffffffff, 0x0, 0x1d0, 0x100, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d4], 0x6d, 0x2, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@loopback, @loopback, [0xffffffff, 0xffffffff, 0xffffff00], [0xff, 0xffffff00, 0xff000000], 'vlan1\x00', 'gretap0\x00', {}, {}, 0x73, 0x10, 0x4}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [0xff000000, 0x0, 0x0, 0xffffffff], [], 'vlan1\x00', 'bridge0\x00', {}, {}, 0x3b, 0xf8}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x8, 0x1}}, @common=@inet=@dccp={{0x30}, {[0x4e23, 0x4e24], [0x4e23, 0x4e23], 0x0, 0x1, 0x8, 0x5}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x400}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 5m9.364184892s ago: executing program 5 (id=2712): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001280)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8044) socket(0x21, 0x2, 0x7) 5m9.338274928s ago: executing program 5 (id=2713): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x4}, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x10000000, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x0) 5m9.244477065s ago: executing program 5 (id=2715): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x15, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20000046}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x100, r2, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x4d}}}}, [@NL80211_ATTR_IFTYPE={0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_IFTYPE={0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ecb07b8261c22c6b58ee7ee821968d1fafb950099b80fd97"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d4541d63231a6b2b3266b115ae49b4e3adb49d8df709605c"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "87a869a4bf044724000000000203831c47f7e982644441c9"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x200000c5) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2, 0x989, 0x0, 0x10}, 0x9c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80c00, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r5, 0x29, 0x4b, 0x0, &(0x7f00000023c0)) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r6 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x100) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000280)={'veth0_to_bond\x00', 0x600}) close(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) 5m9.062693809s ago: executing program 5 (id=2718): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vxcan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000140)='veth1_to_hsr\x00', 0x10) r8 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYBLOB="010000000000000000000c000000280005801400f48004000200000000000800010000000000080001"], 0x3c}}, 0x0) r9 = socket$inet6(0x10, 0x3, 0xffffffff) sendto$inet6(r9, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r10, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r10, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000040), 0x2, 0x0, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r10, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[0x0], &(0x7f0000000040), &(0x7f00000000c0)=[r11], &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0], 0x4, 0x4, 0x1, 0x2}) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0xfffffffffffffffe, {0x3, 0x0, 0x4}}, 0x18) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0xfffffffffffffffc}, 0x18, &(0x7f0000000180)={&(0x7f0000000480)="87a05e8c3f62483dbab766f5f64caf9c8b78a779c6d10ef4d472449f27d816ccf24c2f550d7fdb55874a5787837859c952376e07f2041ecaf8da4611c4638cba0664dbd87b758cb0dfe3758c77ccd2d90985d5a7a11d35058003a009000000", 0x5f}, 0x1, 0x0, 0x0, 0x4000010}, 0xee) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f80)=@newtfilter={0x3d50, 0x11, 0x1, 0x70bd28, 0x100000, {0x0, 0x0, 0x74, r2, {0xfff3, 0xb}, {0x4, 0x10}, {0xffe0, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x2}}, @filter_kind_options=@f_flow={{0x9}, {0x3cdc, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x7}, @TCA_FLOW_ACT={0x3cb8, 0x9, 0x0, 0x1, [@m_gact={0xec, 0x1, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x18f1, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000000, 0xa, 0x8, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x80000001, 0x6, 0x5, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x389, 0xffffffffffffffff}}]}, {0x76, 0x6, "20765842b9f9e3d8518b57b0a420a3000aeff2d9c82e74d75e81a7afb28338727c450fee3925b6289504cb31bfafb6a710138d1e695d99a7895862755799eb0cf34bcd1b9bad741eed037c90520da274a9ad175e8f861be67c86f13053705b67dd476ff52008c05472ebd7185f14194fde52"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0xd8, 0x5, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0xfffffff7, 0x10000000, 0x8, 0x5}, 0x1}}]}, {0x90, 0x6, "8abe659519253c22e8d96e1a170352855d108417fde897160726ac378a7ec13599a0e09dad1827f86b7a21fc3786fc3579f0edd982da5eccee0de3b1f3b01a896992422eb47df8264de9148fdcf6ef26719b7bbb9523ddd2bd28adbd869e3385f1b2c05166842b661cfc953b5943595ee3102ea3a8eebe9b17748ca5e970d2d11fa8bfe89db34151e47691a8"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_pedit={0x3ab8, 0x7, 0x0, 0x0, {{0xa}, {0x39fc, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x0, 0x9, 0x0, 0xf5, 0x7}, 0x3, 0xe, [{0x7, 0x10, 0x7, 0x95, 0x4fb, 0x2}, {0x5, 0x7c93, 0xffff, 0x7fff, 0x4, 0x3}, {0xb, 0x4, 0x5, 0x1, 0xf, 0x1bb1}, {0x0, 0x7, 0x703, 0xca, 0xffff, 0x80}]}, [{0x3ff, 0x0, 0x1, 0x9, 0x8, 0x401}, {0x1, 0xb1, 0x200, 0x5, 0xb, 0x6}, {0x9, 0x4, 0x9e4, 0x6, 0x5, 0x1800000}, {0x6, 0x4, 0x4, 0x5, 0xffff89eb, 0x5}, {0x3, 0x2, 0x800, 0x0, 0x10000000, 0x1}, {0x200, 0x5, 0x401, 0x417, 0x5, 0x7}, {0x7, 0x5, 0x6, 0xf, 0x600, 0x30}, {0xffffffff, 0x0, 0xa03, 0xfffffff8, 0x9, 0x4}, {0x9, 0x2, 0x0, 0x2, 0x80, 0x8}, {0x2, 0x81, 0x6, 0x6, 0x5, 0x4b}, {0x5, 0x280000, 0x6, 0xaf, 0xffffffff}, {0x0, 0x46, 0xb, 0xc0d, 0x80000000, 0x6}, {0xfff, 0x8, 0x7, 0x284b, 0x79e, 0x3}, {0x1000, 0x10001, 0x1, 0xc, 0x9, 0x5}, {0x6, 0x2, 0x4, 0x4, 0x10, 0x100}, {0x4, 0xd, 0x101, 0x8, 0x6, 0x8}, {0x7ff, 0x59, 0x1, 0x5, 0x3, 0x8}, {0x37b, 0x5, 0x9, 0x8, 0x3, 0x9}, {0x3, 0x2, 0x4, 0x9, 0x1, 0xa}, {0x3, 0x8, 0xfffffffb, 0xb, 0x8, 0x6}, {0x9f, 0x8, 0x3, 0x2, 0xe, 0x4}, {0x1, 0xffffffc0, 0x3, 0x1, 0x10, 0x1}, {0x6, 0x6, 0x80000000, 0xfffffe00, 0xa78}, {0xfffffffd, 0x9, 0x0, 0x101, 0xffffffff, 0x7}, {0x7, 0x1, 0x6, 0x0, 0x9, 0x7}, {0x6, 0xb, 0x6, 0x3, 0x9, 0x8}, {0xffffffff, 0x2, 0x0, 0x3, 0x1e80b00b}, {0xfffffffb, 0x1, 0x0, 0x4, 0x3536, 0x7}, {0x3, 0x7, 0x1, 0x87, 0x7}, {0x5, 0xfffffff9, 0x0, 0x5, 0x8, 0x9f62}, {0x8, 0x80, 0x8f17, 0x6561, 0x4}, {0x6, 0x7, 0x6, 0x7, 0x7, 0x9}, {0x8, 0x2fe, 0x1, 0x0, 0xff, 0x7c}, {0x7, 0x200, 0x46e1c49, 0x7, 0x7, 0x5}, {0x3, 0xa, 0x800, 0x0, 0x40, 0xb}, {0x1, 0x6, 0x24, 0x1, 0x159, 0x2}, {0x1, 0x400, 0x8, 0x5a, 0x9, 0x9}, {0x0, 0x8, 0x0, 0xe, 0xae1, 0xe}, {0xd, 0xf6a, 0xfffffffa, 0x2, 0x6, 0x10000}, {0xe, 0x8001, 0x8e, 0x42, 0x9, 0x8}, {0x5, 0x80000000, 0x1, 0x8, 0x1, 0x80000001}, {0x0, 0x0, 0xfffff9dd, 0x8000, 0x2, 0x1ff}, {0x8c, 0x100, 0x3a3, 0x1, 0x6, 0xa39}, {0x9, 0x6, 0x6, 0x10000, 0xfffffff9, 0x2}, {0x4, 0x1, 0x1, 0x2, 0x7fffffff, 0x9}, {0x7, 0x8, 0x8, 0x0, 0x3, 0xd}, {0xe1, 0x8000, 0x80000001, 0xb, 0xa, 0xfffffffa}, {0x3, 0x7, 0x400, 0x6, 0xd, 0x7}, {0x0, 0x9, 0x0, 0x80, 0x2, 0x2}, {0x3, 0x2, 0x2, 0x4, 0x8, 0x8}, {0x1, 0xd, 0x1, 0xe, 0x6, 0x1}, {0x9, 0x9, 0x4ff, 0x0, 0x7fff, 0x5}, {0x5, 0x8, 0x2d2d, 0x7f, 0x101, 0x1}, {0x7, 0x7, 0x8, 0x1000, 0xa, 0x47a52331}, {0x8001, 0x2, 0xf7c, 0x7, 0xa, 0x8}, {0xab2b, 0x7, 0xfffffffe, 0x4, 0x0, 0x4}, {0x1000, 0x6, 0x8, 0x64ca00, 0x7fffffff, 0x4}, {0x8, 0x9, 0x6, 0x80000001, 0x1, 0x1}, {0x6, 0x9, 0x1ff, 0x6, 0xd, 0xfffffff9}, {0x6, 0x5, 0x4f, 0x3, 0x7, 0x7ab}, {0xf, 0x0, 0xdad, 0x9, 0x3, 0x3ff}, {0x1, 0x0, 0x1, 0xa6, 0x7, 0x80000000}, {0x8, 0xb3c2, 0x52197b9c, 0x3, 0x8, 0x6}, {0x101, 0x1, 0x7fffffff, 0x5a8000, 0x400, 0x4}, {0x0, 0x5, 0x4, 0x6, 0x0, 0x5}, {0x9fd5, 0x7, 0x10, 0xfb4, 0x3, 0x3ff}, {0xb, 0x6, 0x8, 0x9, 0x2d74, 0x5}, {0x2, 0x132, 0x3, 0x1f40, 0x2, 0xed}, {0x8001, 0x10001, 0x10001, 0x4}, {0xfffffffd, 0x80, 0x8f7, 0xa63, 0x6, 0x4}, {0x8, 0xbe2, 0xb6, 0x9, 0xc087, 0x8}, {0x3, 0xc, 0xfffffeff, 0xc0a, 0x80000000, 0x8001}, {0xb00, 0x6, 0x0, 0x9, 0x80000000}, {0x1, 0xff, 0x5, 0x0, 0xffffffff}, {0xfffffe01, 0x7, 0x2, 0x280000, 0x4, 0xfffffbff}, {0x2, 0x4, 0x5, 0x7, 0xfff, 0x5}, {0x7fffffff, 0x4, 0x9, 0x10000, 0x10001, 0x1}, {0x3, 0xfffffea6, 0x2, 0x737, 0x5, 0x3}, {0x5, 0x7fff, 0x8, 0x0, 0x9, 0x3}, {0x4, 0x6, 0xbf7, 0x0, 0x3, 0x4}, {0x3ff, 0x7, 0x8, 0x0, 0x5}, {0x2, 0x6, 0x10001, 0x81, 0x3, 0x428}, {0x3, 0x400, 0x80, 0x6, 0xc, 0x10000}, {0x401, 0xffff39e9, 0x4, 0xfffffff8, 0x0, 0x401}, {0x1, 0x9, 0x9, 0x1ff, 0x7, 0xfa62}, {0x8, 0x16b, 0x3, 0x696, 0x3, 0x3ffc000}, {0x1, 0x2, 0x0, 0xffffffff, 0x1, 0x6}, {0x10, 0x6, 0x2, 0xce, 0x6, 0x4}, {0x3, 0x80, 0x4, 0x0, 0x0, 0x7}, {0x7, 0x2, 0xe74, 0x80000001, 0x6, 0xd79}, {0x7, 0x5, 0x41d0, 0x2, 0x74, 0x2}, {0x9, 0x1, 0xfa36, 0x80, 0xf2, 0x4}, {0x7fffffff, 0x0, 0x1f9c2e99, 0x1, 0x6, 0xc3}, {0xf, 0x3, 0x4, 0x3, 0xb41, 0x7}, {0xfffffe9f, 0x6, 0xff, 0x6c2, 0x0, 0x800}, {0xffff70cc, 0x2, 0x7fff, 0x5216, 0x4, 0xff}, {0x0, 0x2fef, 0xad82, 0x55, 0x2, 0x1}, {0x2, 0x3, 0xffff0000, 0x7fff, 0x9ea, 0xd4}, {0x3, 0x232, 0x6, 0x11a, 0xf60d}, {0x4, 0x4, 0x0, 0x2, 0x0, 0x7f}, {0x1, 0x7, 0x6, 0x1, 0x3, 0x7}, {0x8, 0x1, 0x3, 0x2, 0x4, 0x6}, {0x7, 0x3, 0x0, 0x80000000, 0x80000000, 0x2}, {0x2, 0x9, 0x200, 0x261c849d, 0x558}, {0x63, 0x6, 0x3, 0x1, 0x516, 0x8}, {0xf, 0x10001, 0x3ff, 0x2, 0xa, 0x18}, {0x10, 0x0, 0x4, 0x678, 0x0, 0x36}, {0x9, 0x5, 0x80, 0x1, 0x1, 0x7}, {0x5, 0xe7, 0x6, 0x9, 0x1, 0x5}, {0x5, 0x9, 0x1f81, 0x8, 0x6}, {0x1, 0xff, 0xaf, 0xffffffff, 0x3, 0x9}, {0xe94, 0x7, 0x9, 0x1, 0x200, 0x20f}, {0x4aec, 0x0, 0x2, 0x0, 0x6, 0x9f}, {0xc4, 0xc, 0x5a, 0x7f, 0x3, 0x3}, {0xf, 0x4, 0x3, 0x700000, 0xffff, 0x8000}, {0x2, 0x8, 0x7, 0x9, 0x3, 0x80000000}, {0x4, 0x70, 0x1, 0xfffffffb, 0x2, 0xc}, {0x1, 0x4, 0xfffffff7, 0x8000, 0xc, 0x3}, {0xb0, 0x2, 0x7ac, 0x6, 0x6, 0x1}, {0x80000001, 0x6, 0x2, 0x80000001, 0x7e1f, 0x3}, {0x4, 0x6, 0x3, 0x4, 0x400, 0x5}, {0x7, 0x1, 0x4, 0x82, 0x5, 0x5}, {0x40, 0x4, 0x5000, 0xffff, 0x8, 0xfffffffd}, {0x3, 0x2fc, 0x4, 0xfffffffd, 0x9, 0x1}, {0x0, 0x5ab76058, 0x8, 0x80000001, 0x4, 0x100}, {0x1, 0x0, 0x9, 0x99, 0xa736, 0x3}, {0x0, 0x9, 0xc, 0x8, 0xf8, 0x1}, {0x50, 0xfffffaaf, 0x980e, 0x401, 0xfffffffe, 0x7}], [{}, {0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x4}, {0x4}, {0x2, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x3, 0x1}, {0x1}, {0xa}, {0x4}, {0x3}, {0x0, 0x1}, {0x4}, {0x4}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x6, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x3, 0x3f7883b716dc0f7f}, {0x0, 0x1}, {0x2}, {0x1, 0x3}, {0x3}, {}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x52d1afe89fe80a42, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x1}, {0x7}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x4}, {}, {0x3}, {}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x1}, {0x4}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x0, 0x8001, 0x1, 0x8001, 0x5}, 0x6, 0x7, [{0x6, 0x7, 0x2, 0x8, 0x7, 0x3337}, {0x3, 0xc578, 0xfffffffc, 0x1, 0x5, 0x1}]}, [{0x5, 0xa0, 0x9, 0x7fff, 0x9, 0xb}, {0x1ff, 0x2, 0xfffffff7, 0x2, 0xab33, 0x7f}, {0x1, 0x2, 0xe, 0x1, 0x5, 0xe}, {0xffff, 0x2, 0x100, 0x9, 0x7fffffff, 0x9}, {0x3be, 0x7, 0xfffffff7, 0x0, 0x0, 0x9}, {0x7, 0x401, 0x80, 0xfffffffb, 0x5, 0x6}, {0x18, 0x2, 0xfffffffd, 0x3, 0x7, 0x8}, {0x9, 0x7, 0xfffffffc, 0x8, 0x1, 0x4}, {0x3, 0x70, 0xb, 0x1, 0x80000001, 0xf}, {0xfff, 0x80, 0x3, 0x8001, 0x88db, 0x10001}, {0x9, 0x3ff, 0x5, 0xe, 0xffff, 0x7cf}, {0x7, 0x87, 0x9, 0x4, 0x7f6a, 0x6}, {0xa, 0x5e, 0x2, 0x0, 0x4, 0x5}, {0x83a, 0x7f, 0xb5d4, 0x1, 0x4, 0x6}, {0xffffffc0, 0x1ff, 0x2d, 0x2, 0x10000, 0xe}, {0x7, 0x2, 0x1, 0x5, 0x7, 0x84e}, {0x6, 0x1, 0x5, 0x4, 0x2, 0x1}, {0xc, 0x1, 0xe, 0xa38, 0x3ff, 0xc}, {0x8, 0x2, 0x4, 0x8db, 0x81, 0xc9da}, {0x2, 0xe18, 0x575, 0x200, 0x5, 0x40}, {0x3, 0x0, 0xe29, 0x3, 0x491, 0x4e70}, {0x7fffffff, 0x5, 0x2, 0x300, 0x4}, {0x70, 0x1, 0x0, 0x7, 0x4, 0x4}, {0x8, 0x2, 0x1ff, 0x1, 0x7555ca1f, 0x4}, {0x9, 0x22f67003, 0x6, 0x53b9, 0x10, 0x2}, {0x7fffffff, 0x6, 0x4, 0x7, 0x2, 0x5}, {0x10000, 0x7ff, 0x0, 0x5, 0x200, 0x80000000}, {0x8, 0x6b327095, 0x6, 0x21fe3152, 0x9, 0x1}, {0x3, 0x400, 0x4, 0xec, 0x6, 0x8}, {0x69, 0x0, 0x188, 0x7fff, 0x9, 0x9}, {0x467d164f, 0xad69, 0x120, 0x4, 0x480, 0xe}, {0x80000001, 0x61, 0x6, 0x9, 0x10000, 0x1}, {0x0, 0x1, 0xe0, 0x8, 0x6, 0x5}, {0x4, 0x4, 0x4, 0xe1, 0x4, 0x4}, {0x80000000, 0x6cc6, 0x6, 0x4, 0x9, 0x400}, {0x1, 0x1, 0x3, 0x80, 0x377, 0x4}, {0x6, 0x1, 0xe23, 0x10, 0x8, 0x63d7e68a}, {0x9, 0x7, 0x5, 0x9, 0x0, 0x5}, {0x54a, 0x1, 0x5, 0x1, 0x8}, {0x3, 0x3, 0xfffffffe, 0x100, 0x4, 0x7}, {0x5, 0xd, 0x5, 0x7, 0x1, 0x2}, {0x8000, 0x8, 0x81, 0x0, 0x2, 0x9}, {0xc5, 0x9, 0xaf, 0x9, 0x4, 0x4}, {0x249713b9, 0x8, 0x2, 0x2, 0x10000, 0x5}, {0x7, 0x9, 0xbb39, 0x9, 0x6, 0xaf}, {0x10000, 0xa000000, 0x8, 0x80000000, 0x3ff, 0x8e}, {0xff, 0x2, 0x5, 0x4698f230, 0xfffff801, 0x43}, {0x7ff, 0xfffffffd, 0xd, 0xa67, 0x83}, {0x5, 0x2, 0x9, 0x2, 0x4, 0x7}, {0x0, 0x40, 0xd2, 0x139c, 0x1}, {0x7fff, 0x31, 0xfff, 0xd143, 0xd3e, 0x7}, {0x1, 0x38, 0x8, 0xf, 0xd52f, 0x80000001}, {0x0, 0xaaaef7e, 0x5, 0xffffffff, 0x81, 0x9}, {0x8, 0x400, 0x0, 0x9169, 0x5, 0xb8}, {0x6, 0x9, 0x4, 0x4, 0x7, 0xfffff4b4}, {0x800, 0x9, 0x4, 0x4, 0x9, 0x8}, {0x4, 0x4, 0x0, 0x125a2000, 0x1000, 0x7}, {0xfffffffc, 0x3, 0x3, 0x4, 0x30, 0x7f}, {0x8, 0x7, 0x2, 0xc, 0x7fff, 0x5}, {0x6, 0x401, 0x36, 0x3ff, 0x3, 0x5}, {0x106, 0x6, 0x2, 0x5, 0xa91, 0x8}, {0x1000, 0xff, 0x3, 0x80, 0x3, 0x100}, {0x4, 0x4, 0xa, 0xff, 0xffff8000}, {0x10000, 0x2fb, 0x200, 0x6, 0x6, 0xfff}, {0x7fffffff, 0xccb, 0xfffffffd, 0xf0, 0x9}, {0xfffffffa, 0x1, 0x3, 0x1, 0x1, 0xd60}, {0x80000001, 0x2, 0x5, 0x8, 0x3, 0x9}, {0x1, 0x7, 0x3, 0x1, 0x7fffffff, 0x80}, {0x7, 0xb87, 0x6, 0x7, 0x1af, 0x9}, {0x9b93, 0x5, 0x3e81, 0xccb, 0x101, 0xbc9}, {0x8, 0x6, 0x200, 0x8, 0x2, 0x400}, {0x0, 0x8000, 0x4, 0x7f, 0x9, 0x3ff}, {0x1, 0x7fffffff, 0x8aef, 0x7fff, 0x3, 0x5}, {0x4, 0x0, 0x6, 0x8, 0xffffff80, 0xaa}, {0x6, 0x6, 0x1, 0x7, 0xa, 0xba00}, {0x27, 0x5, 0x7, 0x7, 0x400, 0xd3a}, {0x0, 0x0, 0x9, 0x1, 0x4, 0x1bc34835}, {0x2, 0x0, 0xffff, 0xc65, 0x8, 0xfffffff7}, {0x1000, 0x2, 0x500, 0x3, 0x6, 0x1}, {0x6, 0x3, 0x4, 0x9, 0x6, 0xfff}, {0x10001, 0x1d94, 0x7, 0x0, 0x5, 0x4}, {0x10, 0x7, 0x7fff, 0x8, 0xd4, 0x8}, {0x7, 0x0, 0x4, 0x1000, 0x1, 0x72a1}, {0x8, 0xffffffbd, 0x4c, 0x2, 0x75ad, 0x39aa45d5}, {0x7f, 0xff, 0xffffffd9, 0x9, 0xa, 0x200000}, {0x4, 0x4, 0x1, 0x3ac, 0x8001, 0xe127}, {0x7, 0x0, 0xa5, 0x8, 0x4, 0x9}, {0x8, 0x9, 0xffffff00, 0x0, 0x4, 0x37cd}, {0x5, 0xfffffff8, 0x401, 0x7, 0x5, 0xffffffff}, {0x6, 0x1, 0x8, 0x1, 0x0, 0x5}, {0x3, 0x1, 0x3, 0x8, 0x1, 0x3ff}, {0x3, 0x0, 0xfffffff3, 0x8, 0x2, 0x8}, {0x0, 0x3, 0xfffff701, 0x1, 0x7, 0xffffffb6}, {0x1, 0x8, 0x1, 0xaa73, 0x3, 0x9}, {0xfff, 0x1, 0x5, 0x8, 0x3, 0xe}, {0xfffffffb, 0x4, 0xfffffffd, 0x8, 0x5, 0x5}, {0x8, 0x9, 0x449, 0x6, 0x8, 0x40}, {0x7fff, 0xfc5, 0xc, 0x7f, 0xc70f, 0x9}, {0x7, 0x2299, 0x0, 0x10000, 0x46, 0xa}, {0xd, 0x6, 0x3, 0xa8c, 0x5, 0x6}, {0x7, 0x9, 0x7, 0x4ef3a9d6, 0x40, 0x5}, {0x76a, 0x7fff, 0x6, 0x2, 0x4cd, 0x8}, {0xb, 0xffffffff, 0x9, 0xe9a6, 0x2, 0x1}, {0x7, 0x80, 0x80000001, 0x3, 0xfffffffd, 0x3}, {0x3, 0x1a, 0x4, 0x4, 0x7ff, 0x2}, {0xfffffffe, 0x77, 0x49a8f790, 0x0, 0x4, 0x8}, {0xd7e3, 0x81, 0xd72, 0xb, 0x1, 0xaf2d}, {0x3, 0x8, 0x6, 0x4577, 0x4, 0x8d}, {0x6, 0x0, 0x8, 0x3031, 0x6117, 0x3}, {0xb, 0xa7, 0x6, 0x4f, 0x6}, {0x9, 0x7, 0x2, 0x2, 0xfffffffb, 0x9}, {0x2, 0x5, 0x2, 0x3, 0x0, 0x88d}, {0xab, 0x0, 0x2, 0x5, 0x27, 0x2}, {0x8, 0x1, 0xfc000000, 0x401, 0x100}, {0x4, 0x4, 0x4, 0x1000000, 0xfffff637, 0xffff}, {0x1083, 0x5, 0x3, 0x3, 0xbff, 0xfffffffe}, {0x3, 0x10001, 0xbd33, 0x0, 0x7, 0x80000001}, {0x0, 0x2, 0x0, 0x2, 0xffff271b, 0xf3}, {0x8, 0x5, 0x9, 0xffff, 0x6, 0x80000001}, {0x5, 0x81, 0x100, 0x8, 0xfff, 0x200}, {0x7, 0x4, 0x38d, 0xa6, 0x9, 0x8}, {0x3, 0x0, 0x7, 0x7ff, 0x7567, 0x6}, {0x235, 0x0, 0x6, 0x9, 0x0, 0x6}, {0x4, 0x1, 0x4, 0xfffffeff, 0x80000000, 0x100}, {0x2, 0xd8, 0x0, 0xd, 0xfffffff7, 0x4}, {0x6, 0x8, 0x3, 0x7, 0x2, 0x1ff}, {0xb, 0x2, 0x58bb, 0x2, 0x7, 0x1}, {0xa, 0x4, 0xa6, 0xfff, 0x3, 0xfffffff8}], [{0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x3, 0x1}, {}, {}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x58f01bbc6ebbd78b}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0xd8a963f81b605670}, {}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x2}, {0x2}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x373d5566eba433ca, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x3}, {0x3}, {0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x6}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x7}, {0x0, 0x1}, {0x5}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x80000000, 0x3, 0x0, 0x4, 0x5}, 0x7, 0x20, [{0x2, 0x3, 0x0, 0x7f, 0xfa}, {0xfffffffe, 0x8001, 0xb, 0x2, 0xfff, 0x3}, {0x4, 0x0, 0xfffffffe, 0xfffffff8, 0x8, 0x2}]}, [{0x7, 0x936, 0x7fffffff, 0x10, 0x80000000, 0x6}, {0x7, 0x8, 0x1000, 0x3, 0x647f, 0x2}, {0x8, 0x80000000, 0x2, 0x6, 0x10, 0x1ff}, {0x5, 0x100, 0x7, 0x7fffffff, 0xe, 0xe86}, {0x4, 0x6, 0x189, 0x5, 0x1, 0x5}, {0x12b, 0x3d6, 0x5, 0x0, 0x90d, 0x8}, {0x5, 0x80000000, 0x9, 0x8, 0xff, 0xfffffff7}, {0x87, 0x7dd, 0x8000, 0x2, 0x27f800, 0x6a}, {0x3, 0x1ff, 0x7, 0x6, 0x2, 0x5}, {0x6, 0x5, 0x81, 0x1b3, 0x1, 0x7ff}, {0x7, 0x5, 0x3, 0x6, 0x7, 0x80000001}, {0x9, 0x1, 0x8001, 0x0, 0x3, 0x1}, {0x1, 0x3, 0x9, 0x9, 0x10000, 0x8001}, {0x40, 0x5, 0x6, 0x2, 0x9, 0x39b}, {0xffffffff, 0x1, 0x0, 0x1, 0xa1800000, 0x1000}, {0x40, 0x7, 0x1, 0xfffffffe, 0x80000000, 0x6}, {0x8, 0x3, 0xfffffffb, 0x0, 0x10001, 0x3}, {0x5, 0x8, 0x3, 0x4, 0x1000, 0x2}, {0xfc, 0x7, 0x9, 0x1, 0x3, 0xb8}, {0x20ee, 0x0, 0x1000, 0x3, 0xc770}, {0xbe, 0x1, 0x5, 0x9, 0x5, 0x2}, {0xff, 0x4, 0x2, 0x6, 0x7fff, 0x2}, {0x3, 0xff, 0x6, 0x9, 0x5, 0x6}, {0x10000, 0xfffffff8, 0x9, 0x0, 0x0, 0x5}, {0xfffffff3, 0x7f, 0x4, 0x53f, 0x8, 0x3}, {0x9, 0xfffffffa, 0x1, 0x3ff, 0x100, 0x7fff}, {0x0, 0x900, 0x7, 0x7, 0xffff7fff, 0x7}, {0x3, 0xb0, 0x3, 0x200, 0xb21, 0x8}, {0x5, 0xfffffffc, 0x0, 0x0, 0xc, 0x40}, {0x1, 0x80, 0x3, 0x6493448f, 0xfffffff9, 0x9}, {0x1, 0x3, 0x3, 0x8001, 0xf, 0xa35}, {0x2, 0x4, 0x40, 0x4, 0x66, 0xff}, {0x9, 0x8, 0x5, 0x3800000, 0x6, 0x94}, {0x38d, 0x9, 0x4, 0xfffffff8, 0x27fe, 0x3}, {0x6, 0x3, 0x3, 0xac44, 0x6be7c3d6}, {0x1, 0x80000000, 0x0, 0xffff, 0x8, 0xc52}, {0x5, 0x7ff, 0x8, 0x5, 0xb0, 0x87e2}, {0xb, 0xfffffff7, 0x5, 0xfffffff9, 0x6, 0xcc}, {0x8, 0x10000, 0x7, 0xd, 0x7ff, 0x7f}, {0xfff, 0x5, 0x616, 0x3, 0x7, 0x1}, {0x6, 0x7, 0x5, 0x1ff, 0x10001, 0xb639eee4}, {0x8001, 0x0, 0x3, 0x664, 0x8440, 0x401}, {0x4, 0x6, 0x70, 0x401, 0x2, 0x3}, {0x8, 0x0, 0xe, 0x101, 0x7, 0x9}, {0x6, 0x8, 0xc, 0x6, 0x1000, 0x3}, {0xffffff4b, 0xc, 0x5, 0x81, 0x0, 0x8}, {0x2, 0x2, 0xd, 0x61, 0x6, 0xdc}, {0x6, 0xb, 0x8e65, 0x3, 0x0, 0x6}, {0xe, 0x1, 0x7ff, 0x5, 0xfffffffa, 0x400}, {0xffffffff, 0x7, 0x2, 0x4, 0xef, 0x8}, {0x1, 0x5, 0xfffffffb, 0xfffffff8, 0x8002, 0x7ff}, {0x7, 0x10000, 0x8, 0x3, 0x2, 0x4}, {0x99, 0x3, 0x5, 0xfff, 0xffffffff, 0x8}, {0x3, 0x6, 0x6, 0xd, 0x6, 0x8}, {0x2, 0xffffffff, 0x6, 0x9, 0x7, 0x200}, {0x9, 0x6b2, 0x8, 0x2, 0x9, 0x8}, {0xb8, 0xe3d7, 0x8, 0x10001, 0x0, 0x69a}, {0x4, 0x80, 0x8, 0x4, 0xfffffff9, 0x5}, {0x5, 0x9b, 0xfffff001, 0x6, 0x4, 0xffff8000}, {0xf4aa, 0x4, 0x10000, 0x2, 0x8000, 0x100}, {0x3, 0x5, 0x9dd, 0xc, 0x0, 0x8}, {0xb6, 0xfffffffa, 0x3, 0x3, 0x80000001, 0x81}, {0x10, 0x6, 0x1, 0x63f, 0x7, 0x69b2}, {0x5, 0xffff, 0x6, 0x8, 0xb, 0x5}, {0x3ff, 0x6, 0x10001, 0xfffff001, 0x10000000, 0x1}, {0x7, 0x6, 0x5d, 0xcf30, 0x5, 0x9e}, {0x4, 0xb1, 0xe, 0x200, 0x4, 0xff}, {0x9, 0x7, 0x3, 0x8001, 0x21, 0x3}, {0xa2f, 0x3, 0xd1, 0xc98, 0x6}, {0xfffffe01, 0x5, 0xffffffff, 0x2, 0x1, 0x8}, {0x7, 0x5, 0x8001, 0x37f, 0x7f, 0x7fffffff}, {0x101, 0x3, 0xe56, 0x810, 0x1, 0x2}, {0x9, 0x1, 0x0, 0x4, 0x9, 0x4}, {0x40, 0x9, 0x9, 0x8, 0x5, 0x10001}, {0xfb2, 0xd2cf, 0xfffffbff, 0x51276f3e, 0x800, 0x7fff}, {0x4, 0xff, 0xebdc, 0x5, 0x9, 0x3}, {0x10000, 0x0, 0xf, 0x100, 0x9, 0x8}, {0xce75, 0xffffff77, 0x3, 0x8, 0x3, 0x5}, {0x2, 0xe4fc, 0x4, 0x3, 0x7ff, 0x7}, {0x5, 0x0, 0xa7, 0x5, 0x3, 0x2}, {0x8, 0x2, 0x5, 0x100, 0x5, 0x7}, {0x7f, 0x4, 0x4af07c08, 0x0, 0x4ac, 0x7ff}, {0x8, 0x0, 0xc, 0x5, 0x8, 0x6}, {0x7fff, 0x0, 0x7fffffff, 0xfffffffa, 0x1, 0x8}, {0x45c, 0x3, 0x39, 0x0, 0x4, 0x101}, {0x5, 0x3, 0xb57, 0x7f}, {0x7ff, 0x5, 0x3, 0x4, 0xfffffff7, 0xd}, {0x8, 0x80, 0x2, 0x100, 0x6, 0x2}, {0x6, 0x80000000, 0x1, 0x2, 0x2, 0x9}, {0x71, 0x1000, 0x9, 0x9, 0x5, 0x80}, {0x1, 0x0, 0x1, 0xf, 0x9, 0x101}, {0xffff, 0x5, 0x1, 0x400, 0x8, 0x6}, {0x1, 0x0, 0x5, 0x4, 0xa, 0x3}, {0x4, 0xf7, 0x2, 0xff, 0xe, 0x5}, {0x6, 0xef, 0x1, 0x1, 0xfffffff8, 0xd}, {0x5, 0x40, 0x8, 0x6, 0x9, 0x1000}, {0x6, 0x40, 0x2, 0x2, 0x2, 0x703}, {0x57, 0x4, 0x8, 0x400, 0xa0, 0x800}, {0x4, 0x4, 0x5, 0xffffffff, 0x1, 0x4}, {0x8, 0x8, 0x8, 0x5, 0x9, 0x7}, {0x2, 0x8, 0x67b5, 0xffffffff, 0xa5, 0xc}, {0x401, 0x924, 0x200, 0x0, 0x1, 0x10000}, {0x2, 0x4000000, 0x200, 0x0, 0xfffffffd, 0x3}, {0x8, 0x7, 0x3, 0x1, 0x1000000, 0x1000}, {0x79c, 0x9, 0x4, 0x4, 0x81c, 0xfffffffc}, {0x3, 0x5, 0x1, 0x0, 0xfff, 0x68f738e2}, {0x2, 0x7056, 0x5, 0x7, 0xb, 0x6}, {0xec, 0x4, 0x8000, 0x8, 0x2, 0x8000}, {0x5, 0x0, 0x4e, 0x81, 0x8, 0x5}, {0x81, 0x3, 0x6, 0x2, 0x7, 0x2}, {0xfffff088, 0x6, 0x0, 0x8, 0x4, 0x7}, {0x6b57, 0x80, 0xfb, 0x2529, 0x40a9, 0x5}, {0x6, 0x5, 0x2, 0x200, 0x10, 0x1}, {0x7, 0xa, 0x6, 0x10, 0x1a45, 0xffffffff}, {0x530, 0xfffffff9, 0x2, 0x9, 0x6, 0x7}, {0x40000000, 0x68fa2bc4, 0x7, 0xb28c, 0x4, 0x4}, {0x9, 0x9, 0x7, 0xffe00000, 0xfff, 0xf}, {0x1, 0x1, 0x1, 0x5, 0x5c, 0x3}, {0x7f7, 0x3, 0x4, 0x5, 0xb, 0xfffffffe}, {0xfffffffa, 0x2, 0x3, 0x1, 0x4, 0x126b}, {0x2, 0xe17e, 0x1, 0xfffffffc, 0x9, 0x3ff}, {0x3, 0x6, 0x101, 0x4, 0x8, 0x3}, {0x1, 0xfffffffc, 0x1, 0xf5, 0x3, 0x696}, {0x16, 0x4, 0x6, 0x0, 0x3, 0x6}, {0xfffffffa, 0x7, 0x1ff, 0x80000001, 0x9, 0x6}, {0x800, 0x4, 0x5ee7986f, 0xfffffffb, 0x16c1, 0x6}, {0x7fffffff, 0x9, 0x800, 0x3ff, 0x2947, 0x5}, {0x3, 0x3, 0x7ff, 0xfff, 0xb}], [{0x1, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x7}, {0x6, 0x1}, {0x4}, {}, {}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x6}, {0x5}, {0x3}, {0x5, 0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {}, {}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x4, 0x1}, {0x6}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x2}, {0x5, 0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x4}, {}, {0x6}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {}, {0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x4}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x1, 0x21d0, 0x2, 0x10, 0x7}, 0x0, 0x4, [{0x60a5, 0x12ad, 0xffffff03, 0x2, 0x6, 0x3}, {0x5, 0xffffffff, 0x3c, 0x3, 0x80, 0x6}, {0x790, 0x4, 0x1, 0xffffff00, 0x5, 0x3}, {0x1, 0x4, 0xffff, 0x0, 0x8, 0xfffffffe}, {0x9, 0x6, 0x3, 0x7fff, 0x5, 0xfffffffb}]}, [{0x10, 0x68b, 0x6, 0x0, 0x5fe0, 0x8}, {0xff, 0x7cf, 0x6, 0xe, 0x8, 0x1}, {0x800, 0x10000, 0x2, 0xfff, 0x7, 0x6}, {0x1, 0x8000, 0x5, 0xd0000, 0x2, 0x4}, {0x51, 0x166, 0x7, 0x6, 0x2, 0x8}, {0x6, 0x2, 0x9, 0x6, 0xa6b}, {0x8, 0x2, 0x9, 0x8, 0x9, 0x80}, {0x6, 0x8, 0xea5, 0x80000000, 0xb4d2, 0x9}, {0x2, 0x7, 0x3, 0x4, 0x9, 0xfffff800}, {0x2, 0xfffffff8, 0x6, 0x2, 0x7, 0x2}, {0x8, 0x2, 0x0, 0x9, 0xec41, 0x7fffffff}, {0x2, 0x3, 0x6, 0x0, 0x6, 0x7}, {0xe, 0x8, 0x7ff, 0xfffffff3, 0x1, 0x84}, {0x1000, 0x7, 0x2, 0x9, 0xbc, 0x78000}, {0x9, 0x7, 0x3, 0x46, 0x78, 0x10001}, {0x1, 0x101, 0x5, 0x6, 0x2, 0x3}, {0x1, 0x0, 0xd, 0xc2b7, 0x7, 0x89}, {0x2dba, 0x4, 0x0, 0x7f, 0x7f, 0x7}, {0x6, 0x5f45, 0x7, 0x2, 0x7fff, 0x2}, {0x4c, 0x6, 0x30f1f6e, 0xeb, 0x55d6, 0x101}, {0x7ff, 0x37c, 0x0, 0x8, 0x4, 0x9}, {0x3aaa, 0x47, 0x1, 0x7, 0x7, 0x9}, {0x1, 0x7, 0x80, 0xffffffff, 0x401}, {0x9, 0x3, 0x7, 0xc00, 0x5ef5, 0x10001}, {0x0, 0x2, 0x5, 0x4, 0x2db1, 0x80000000}, {0x2, 0x5, 0x7, 0xf06, 0xc2, 0x401}, {0xfffff819, 0x9, 0x0, 0x10, 0x10, 0x2}, {0xfffff801, 0xffffffff, 0x10001, 0x7239c8e4, 0x9, 0xfffffffd}, {0x0, 0x9, 0x7fffffff, 0x80000001, 0xfffffffe, 0x5}, {0x2, 0xffff, 0x1, 0xa07, 0x3ff, 0x2}, {0x4, 0x8, 0xed, 0xff, 0x7, 0x192}, {0x4, 0x7fff, 0x528, 0x9, 0x0, 0xc}, {0x9, 0xfffff801, 0x3ff, 0x0, 0xffff5743, 0xfffffc55}, {0xdbe, 0x4, 0x8, 0x3, 0x101, 0x7}, {0xf9eb, 0x0, 0x8000, 0x7, 0x2f2, 0x6}, {0x0, 0x8000, 0x401, 0x0, 0x5, 0x8001}, {0x3, 0xbd, 0xff, 0x3, 0xee1, 0x4}, {0x40, 0x2, 0x1, 0x10000, 0x2, 0x802000}, {0x5, 0x9, 0x7fffffff, 0x2, 0x0, 0xffffffab}, {0x6, 0x40, 0x9, 0x6, 0x7f, 0x1}, {0x0, 0x9, 0x3, 0x5, 0x5, 0x4}, {0x80000000, 0x8, 0x800, 0x4, 0xa, 0x3}, {0x0, 0xbb07, 0x1, 0x1, 0x10, 0xfffffff9}, {0x5, 0x8000, 0x0, 0x3, 0x6, 0x8}, {0x81, 0x7, 0x9, 0x9, 0x2, 0x9}, {0x9, 0x0, 0x0, 0x8, 0x7, 0x80000001}, {0x7, 0x6, 0x7, 0x0, 0x3, 0x7}, {0xf, 0xffff, 0xffff, 0x1f, 0x1, 0x1}, {0x7, 0x6, 0x1, 0x2, 0xa, 0x26}, {0x81, 0x5, 0x200, 0x3, 0x3, 0x5}, {0x6, 0x7793, 0x1ff, 0x7, 0x6, 0x100}, {0x4, 0x6, 0x3b000000, 0x77698e2d, 0x2, 0x7}, {0x4, 0xb, 0x989, 0x1, 0x800, 0x9}, {0x2d, 0x7, 0x120000, 0xfff, 0x4, 0x8d45}, {0x7, 0x7, 0x2, 0xfffffffa, 0x1, 0xd1a9}, {0x5, 0x5a11d83c, 0x22, 0x9, 0x270e, 0xc}, {0x0, 0x5, 0xff, 0x5, 0x8, 0x10001}, {0x2, 0x3, 0xaaed, 0x0, 0x8000, 0x6}, {0x3, 0xd, 0x5, 0x4, 0x9, 0x5}, {0x3, 0xff, 0x6, 0xfffffff9, 0x3b43, 0x3}, {0xfffffe01, 0x80, 0x5, 0x5, 0x40000000, 0x8000}, {0xa9, 0x0, 0x4, 0x40, 0x10001, 0x81}, {0xf, 0x200, 0x7ff, 0x7, 0x6, 0x8}, {0x8001, 0x2, 0x12, 0x9, 0x5, 0x7}, {0x8, 0x17, 0x9, 0xfffffffb, 0x7, 0x6}, {0xae, 0x6, 0x17, 0x2, 0x8, 0x86}, {0xb190, 0x3ff, 0x2, 0x3, 0x659, 0x2}, {0x3, 0x2cfe, 0x3, 0x6, 0x3, 0x8}, {0xfffff001, 0x3, 0x7, 0x80000001, 0x6, 0xfff}, {0x1b8, 0x8, 0x6, 0xff, 0x2, 0x3cfc}, {0xffffff77, 0x6, 0xfffffffd, 0x5, 0x0, 0x8000}, {0x8, 0xaaf, 0x9, 0xb54c, 0x10, 0x4}, {0x9, 0x2, 0x7, 0x1, 0x8, 0x9d8}, {0xc90, 0x200, 0x8, 0x9, 0x1, 0x8}, {0x1, 0x4, 0x1, 0x7f, 0xffff, 0x3}, {0x5, 0x8001, 0x1, 0xfffffffa, 0xfffffff7, 0x7}, {0xfffff801, 0x4a391d8c, 0x8, 0x8, 0x80000000, 0x6}, {0x8, 0x7ff, 0x6, 0x5, 0x1, 0xe}, {0xe34c, 0xfff, 0x101, 0x40, 0x2, 0x5}, {0x2, 0x8, 0x0, 0x7, 0x8, 0x2}, {0x6, 0x5, 0x6, 0x4, 0x5, 0xfffff384}, {0x3, 0x0, 0x6657, 0x7, 0x7, 0x9}, {0x1, 0x2, 0x7, 0x7, 0x8c5, 0x9}, {0x4, 0x4, 0x6, 0x7, 0xf, 0x4}, {0x15e7, 0x1, 0xffffffff, 0x6, 0x8000, 0x8}, {0x40d, 0x5, 0x3, 0x3, 0x8402, 0x2f18}, {0x7, 0x0, 0x61e, 0xffffffff, 0xff, 0x2}, {0x1, 0x4, 0x73, 0x2, 0x7, 0x3}, {0x5, 0x7, 0x1, 0x5, 0x7, 0xa56}, {0xe1, 0x100, 0x0, 0x7ff, 0x7, 0x8}, {0x2, 0x4, 0xfffffff6}, {0x2e8c, 0xfffffffe, 0x6f489d87, 0x6, 0x0, 0x800}, {0x8, 0x80000001, 0xdbf, 0xffff, 0xe, 0x2}, {0x8, 0x5, 0xfffffffb, 0x6, 0x3, 0x6}, {0x5, 0x4, 0x3ff, 0x6, 0x5, 0x5}, {0x5, 0x5285, 0x100, 0x10000, 0x4, 0x66}, {0x40, 0x3, 0xcb7, 0xffff, 0x4, 0x8}, {0x3, 0x0, 0x4, 0xc, 0x5, 0xb8b}, {0x0, 0xf, 0x740, 0x9, 0xfffffff9, 0x1c2}, {0x8, 0xb, 0xbd7, 0x80, 0xff, 0x1}, {0x874, 0x9, 0x6, 0xc57874a, 0x5, 0x2}, {0x3, 0x5, 0x401, 0x4, 0x7f, 0x7f}, {0x44b, 0x7f, 0xc65, 0xa, 0x5, 0x3}, {0xffffcdde, 0x0, 0x100, 0x3, 0x3, 0x3}, {0x666, 0x81, 0x2, 0x6, 0x3, 0x2}, {0x3575, 0x1ff, 0x4, 0x1, 0xff}, {0x4, 0x4, 0xf059, 0x1, 0x8}, {0x4, 0x9, 0x3, 0x1, 0x10000000, 0x3}, {0x6, 0x80, 0x7b9, 0x6, 0x4, 0x4}, {0x0, 0x4, 0xf, 0x4, 0x7, 0x2}, {0x3, 0x73, 0x0, 0xf, 0x400, 0xa12}, {0x0, 0x4, 0x9, 0x7, 0x400, 0x9b2f}, {0xd5, 0xffff, 0x6, 0x80000000, 0x8, 0x9c6}, {0x400, 0x4, 0x3ff, 0x9, 0x4446, 0xdf}, {0x4, 0x6f0, 0x80000000, 0xfffff801, 0x81, 0xdf}, {0xffffff01, 0x200, 0x65828dad, 0xd2900000, 0x9, 0xa16a}, {0xc622, 0x6, 0x2, 0x4, 0x3, 0x1}, {0x9b, 0x1, 0xfc54, 0x7ff, 0x2, 0x8000}, {0x2d6, 0x9, 0x4, 0xf, 0x8, 0x80000001}, {0x1, 0x647a, 0x7, 0x7fffffff, 0x4, 0xab31}, {0x900000, 0x0, 0x3, 0x5, 0x401, 0x2}, {0x5, 0x1, 0x400, 0x1, 0x0, 0x4}, {0x0, 0x11c6a984, 0x5, 0x5, 0x9, 0x1}, {0x24000000, 0x6, 0x28b7ac98, 0xffffffff, 0x9, 0xba}, {0x9, 0x5, 0x9, 0x7ff, 0x9, 0x101}, {0xffff, 0x5, 0x450, 0x72, 0x4, 0xc76e}, {0x8000, 0x7f, 0x5, 0x80, 0x4, 0x73d0}, {0x7fffffff, 0x4, 0x4, 0x7, 0x9, 0xffffffff}], [{0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x1}, {0x2}, {0x2}, {0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x3a46a9d1a929119}, {}, {0x1}, {0x3}, {0x1, 0x1}, {0x6, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x2}, {0x4, 0x1}, {0x3}, {0x5}, {0xab3dfa735956a3c9, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x2, 0x4d2344b22b7ed367}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {}, {0x3}, {0x5}, {0x6}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0xdac82df833bfbd4a}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {0x3}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x2}]}}]}, {0x92, 0x6, "c8e715d9dc11e4a57890008c17b46806dcf886fcd636a1f559760c12b9444f354a47c12c8952036add9868b69a97e4b50a0d1b9049c6f43e295be9100471cf2b75207cb59a8bd9df185021d989d6d729273d8f0a88e022513ee87ce244afbc7576601f8116ab4e567c79c1e802ce25e0da89b91ac01a1ae0a324d12eed926f3ca41d1b7e9b3850bdc2484025abb8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x38, 0x9, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb83}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7a}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1ce56}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x7fff}]}}, @filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4d2, 0x3, 0x5}, {0x5, 0x9b7, 0x81, 0x1}}}]}]}]}}]}, 0x3d50}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 5m8.744969662s ago: executing program 2 (id=2721): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$read(0xb, r0, &(0x7f00000003c0)=""/240, 0xf0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x5, 0x1}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r3) r5 = socket(0x22, 0x2, 0x3) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x4000) ioctl$KVM_CHECK_EXTENSION(r4, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bff000/0x400000)=nil) r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000040)={0x8080000, 0x399000, 0x8}) 5m2.616668105s ago: executing program 2 (id=2726): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000340)="390000001300034700bb65e1c3e4ffff01000000010000005600000002000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000240)={0x11, @multicast1, 0x4e1f, 0x0, 'lblc\x00', 0x0, 0x0, 0x4}, 0x2c) 5m2.280404614s ago: executing program 0 (id=2727): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r0, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') statfs(&(0x7f0000000000)='./bus\x00', 0x0) linkat(r3, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./bus\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x0) 5m2.162611199s ago: executing program 2 (id=2728): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88c42, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r4, r2, 0x0) io_uring_enter(r2, 0x5217, 0x8057, 0x46, &(0x7f0000000040)={[0x6]}, 0x8) close(r0) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xdff9, 0x800, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) 5m1.894376812s ago: executing program 2 (id=2729): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\b\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3, @ANYRESDEC=r0], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x44) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000c818010040"]) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000bc0)=@deltclass={0x8c8, 0x29, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x6, 0xb}, {0x1, 0xffe0}, {0x3, 0x7}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xd}}}, @c_atm={{0x8}, {0x38, 0x2, [@TCA_ATM_HDR={0x21, 0x3, "d265538f40113c484e33ffb43f54e6c6fc129f1029577c72089169f116"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xe, 0xffe0}}, @TCA_ATM_FD={0x8, 0x1, r0}]}}, @c_cbq={{0x8}, {0x844, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x4, 0x7, 0xf9, 0x8, 0xca4c, 0x7}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x9, 0x2, 0x7}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xc, 0x7, 0x5a66796b, 0x0, 0x8, 0x40, 0x1, 0x3, 0x0, 0xb, 0x0, 0x7, 0x8, 0xf, 0x8, 0x4ab, 0xfffffffc, 0x5, 0x6, 0xc2, 0x9, 0x1000, 0x545, 0x7, 0x9, 0x8, 0xd6, 0x3, 0xff, 0x11b, 0x1, 0x2, 0x3, 0x1, 0x0, 0x1, 0x5, 0xfffffff5, 0x61, 0x5, 0xfffffffc, 0x3, 0x6, 0x8, 0x7d024b24, 0xe670, 0x3, 0x5, 0xa74, 0x8001, 0x2, 0x5, 0x10000, 0x2, 0xa4, 0x8, 0xe, 0x53, 0x2, 0x7fffffff, 0x9, 0x6, 0x4, 0x9d1, 0xfffffff3, 0x40, 0x0, 0x40, 0x9, 0x1, 0x8, 0x81, 0x9, 0x753e368e, 0x2, 0xfff, 0x8, 0x7fffffff, 0x0, 0xffff, 0x100, 0x1, 0x8000, 0x0, 0x5, 0x7, 0x24, 0x3, 0xfffffffa, 0x5, 0x4, 0x5, 0x9, 0x6, 0x0, 0x4, 0x17, 0x6, 0xfffffffc, 0x0, 0x0, 0x78d2, 0x1, 0x6, 0x73c7, 0x80, 0x100, 0x1, 0xfffffff9, 0x3ff, 0x0, 0x5, 0x9, 0x101, 0x971, 0xe, 0x7, 0x0, 0x0, 0x9, 0x4, 0x298, 0xcbba, 0x1, 0x5, 0x4, 0x774, 0x10001, 0x0, 0xfffffffa, 0xbf, 0x400, 0x5, 0x1ff, 0xc5, 0x5, 0x3, 0x2, 0x6, 0xc, 0x5, 0x5, 0x5, 0x5, 0xffff0001, 0xde, 0x5, 0x1ff, 0x3, 0x3ff, 0x60b, 0x10000000, 0x1, 0x3, 0xe, 0x4cd3, 0x7, 0x8, 0x2, 0x8, 0x3, 0x10, 0xa7, 0xb1, 0x0, 0xfa, 0x5, 0x4, 0x9, 0x3ff, 0x1000, 0x100, 0x6, 0xfffffff8, 0xffffffff, 0x9, 0x8, 0xa, 0x2, 0xfffffff8, 0x7, 0xa, 0x154, 0x511, 0x9, 0x10000, 0x2, 0x1, 0x0, 0xe9, 0xd8, 0x5, 0x6, 0x8, 0x7f, 0x3, 0x4, 0xed2c, 0x200, 0x9, 0x7ff, 0x0, 0x3, 0x401, 0xfffffffe, 0x80000001, 0x7, 0x6, 0xfff, 0x0, 0xe80d, 0x5, 0xff8, 0x400, 0x9, 0x6, 0xe, 0x401, 0x2, 0x3, 0x74000000, 0x8001, 0x2, 0xc3e, 0x6d3, 0x2, 0x0, 0xf, 0x3, 0xfffffff3, 0x1, 0x8, 0x400, 0xd, 0x8, 0x8, 0x3, 0x4, 0xc, 0x0, 0x8, 0xdf5, 0x6, 0x200000, 0x1, 0x40, 0x8, 0x0, 0x7, 0x1, 0x1, 0x1000, 0xffffce9a, 0x800, 0x7fffffff, 0x4]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x9, 0x2, 0x7fffffff, 0x5bd, 0x7d, 0x3496d11b, 0x2, 0x9b, 0x3, 0x7fffffff, 0x5, 0x2, 0x45, 0x2, 0x6, 0x0, 0x9, 0x6, 0x7, 0x2, 0x1, 0x3, 0x7, 0xffffff80, 0x6, 0xa1, 0x2, 0x0, 0x4, 0x8, 0x0, 0x8000, 0x100, 0x8, 0xe9, 0x80000001, 0x1, 0xfffff579, 0x9, 0x17980000, 0x6, 0x4, 0x2, 0x6, 0x3, 0x6, 0x113843e7, 0x5, 0x5, 0xe, 0x74fc72cb, 0x2, 0x8, 0x8, 0x7, 0x1, 0x2, 0x4, 0x200, 0x7, 0xfffffffb, 0x2, 0x1, 0x2, 0x5, 0x1, 0x5, 0xffffffff, 0x5, 0x1, 0x800, 0x8, 0x272, 0x1, 0x8, 0x2, 0x4, 0x89bb, 0x8, 0x4, 0x3, 0xfffffffe, 0x9d, 0xffff8001, 0x8, 0xedb, 0x4, 0x1, 0x3, 0x0, 0xbbe2, 0x7f, 0x465c, 0x0, 0x6, 0x400, 0xf, 0x2138, 0x7, 0x9, 0x6, 0x0, 0xfffffffc, 0x1, 0x8, 0x7, 0x3e, 0x3, 0x7fffffff, 0xfe2f29bb, 0x6, 0x2, 0x8, 0x100, 0xffff8001, 0x3, 0x80000001, 0x31e5, 0x10, 0x2, 0x1c0000, 0x9, 0x1, 0x4, 0x7e7d, 0x4762, 0x7fffffff, 0x6, 0x0, 0x2, 0xd3ef, 0xd, 0x4, 0x8, 0x5, 0x725, 0x1707, 0x60, 0xe5, 0xffffffff, 0x1, 0xfff, 0xfffffffb, 0x8, 0x20, 0x2, 0x100, 0x1, 0x2, 0x5, 0x9, 0x9, 0x319, 0x200, 0x6, 0x2, 0xfc, 0x8, 0x3, 0xd5b, 0x9, 0x1, 0x7, 0x7, 0x7fff, 0x50000, 0x7fffffff, 0x5, 0xc, 0x8001, 0x5, 0x7f, 0x9de, 0x8, 0x7b2c23cd, 0x118a, 0x9, 0xcf, 0x5, 0xffffffff, 0x0, 0x401, 0x0, 0x2, 0x3, 0x6, 0x3, 0xd38, 0xffffffff, 0x9f, 0xbd3, 0x5, 0xab7, 0xa4, 0xaae, 0x0, 0x1, 0x5, 0xffffffff, 0x4, 0xfff, 0xfffffff8, 0x4, 0x3, 0x401, 0xfff, 0x6, 0x7, 0x9, 0x8, 0x1, 0x5, 0x5a57, 0x1, 0x8, 0x6, 0x4, 0x3, 0x56d, 0x4, 0xe50, 0x0, 0x3, 0x5b9, 0x10000, 0x8d, 0x8, 0x2, 0x8001, 0x5, 0x8, 0x401, 0x1, 0x4, 0x0, 0x7, 0x2, 0x9, 0x4, 0xa12, 0x4, 0x800, 0x82, 0x9, 0x0, 0x1, 0x8, 0xff, 0x7, 0x5dcb0e06, 0xfffffffe, 0x8, 0xfffffffa, 0x4, 0x7f, 0xa0ec]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x1, 0x1, 0xe, 0x2, 0x0, 0x5af4, 0x8, 0x1}}]}}]}, 0x8c8}, 0x1, 0x0, 0x0, 0x20}, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x22) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r10 = accept4(r9, 0x0, 0x0, 0x80000) recvmsg$can_raw(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/243, 0xf3}, {&(0x7f0000000300)=""/115, 0x73}], 0x2}, 0x0) sendmsg$xdp(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef729d308e08ed3e683813c1dcac50bf343bc65be49dbd852caf9a2d0656abc82adf0651c4ac76bf558a3179de6c947fb553be50db8ba2860b2483934d5d39cbcc8bc393eb926dbdb8de385f7d627982072679d9853515e79", 0xea}, {&(0x7f00000005c0)="63311794932b42fa800fe297013ca7feab7756ef7824de8a320ce51a7d2a8f9354bbec77c836bc975b39c022940880a890aff150d32e9641e2ec516273f54e5b972dfa3ba0ce3d330c754f50784dd3d120ebfa42481477f49fb6de051c98a3aff4f0cb9f1ea7841c11fe0f25b2dd3f90d203d9c390a2031dffeb947bd6", 0x7d}], 0x2, 0x0, 0x0, 0x20000080}, 0x440000d0) write$P9_RVERSION(r8, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r11 = dup(r8) write$FUSE_BMAP(r11, &(0x7f0000000100)={0x18}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000640)) write$FUSE_DIRENTPLUS(r11, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x88, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB=',access=any,access=client,cache=mmap']) r12 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) capset(&(0x7f0000001b00)={0x20071026, 0xffffffffffffffff}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r12, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x9, 0x0, &(0x7f0000000040), 0x0, 0x0}}) syz_emit_ethernet(0xe6, &(0x7f0000000780)={@remote, @random="5bc5da2efa97", @void, {@ipv4={0x88fb, @udp={{0xf, 0x4, 0x3, 0x8, 0xd8, 0x66, 0x0, 0x3e, 0x11, 0x0, @local, @empty, {[@cipso={0x86, 0x26, 0xffffffffffffffff, [{0x0, 0x12, "daf18ed1530eb9fbee680ed6c36047d2"}, {0x6, 0xe, "4aa8a4624cea11ebc6d6662b"}]}]}}, {0x4e22, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x7, "fa4a3ce0b97f4771a65fd964af59bc0c368b50194e0295f63fc1edbe273bfd57", "9f9779acf65ac3e9e10e4bb5cc5f2d56903d45d7682db463933db70b147dadf3422bfea84f00", "fa30644cea0599be9a732ca077ed34bce38c8ef23b40cb09517ec17f", {"af9e368e2c4aca57af54f52ef0a4d7c5", "eeca4526b2bcb5f1253199435030f8e4"}}}}}}}, 0x0) 5m1.490697301s ago: executing program 0 (id=2730): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000040)) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000100)=0x3, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={'\x00', 0x5, 0x2, 0xffff0ee4, 0x6b, 0x5, r2}) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000200), &(0x7f0000000240)=0x8) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000280)={0xc029, 0x3}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f00000002c0)={0x6, [[0x8, 0x7, 0x4, 0x6, 0x6, 0x2, 0x0, 0x6], [0x9, 0x0, 0x7, 0x0, 0x6a8ee488, 0x2, 0x5, 0x49aa0], [0x15, 0x1, 0x6, 0x1, 0xb5, 0x75, 0x7, 0x7fffffff]], '\x00', [{0xfffffaa2, 0x6b, 0x1, 0x0, 0x0, 0x1}, {0x12e, 0x80, 0x1, 0x1}, {0xffffff00, 0xfff, 0x1, 0x1, 0x1, 0x1}, {0x9, 0x5, 0x1, 0x1}, {0x47, 0x963, 0x1, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xe1f, 0x4, 0x1}, {0xf, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8000, 0x4, 0x0, 0x1, 0x0, 0x1}, {0x7fffffff, 0xfffff14a, 0x1, 0x1, 0x0, 0x1}, {0xcf, 0xc, 0x0, 0x1, 0x1, 0x1}, {0x6, 0x6, 0x1, 0x1, 0x0, 0x1}], '\x00', 0x1000}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000540)) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000005c0)=0x101, 0x4) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000600)={0x32, @multicast1, 0x4e24, 0x3, 'wlc\x00', 0x12, 0xfffffff8, 0x30}, 0x2c) timer_create(0x2, &(0x7f0000000640)={0x0, 0xa, 0x1, @tid=r2}, &(0x7f0000000680)=0x0) timer_settime(r4, 0x0, &(0x7f00000006c0)={{0x77359400}}, 0x0) fcntl$setown(r1, 0x8, r2) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000700)=0xfffff152, 0x4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000740)={0x1, 0x8, 0x4}) r5 = syz_open_dev$loop(&(0x7f0000000780), 0x7adbb4d0, 0xc400) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) openat$cgroup_ro(r0, &(0x7f00000007c0)='cpu.stat\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000800)=0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r7, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000980)=0x6) timer_gettime(r4, &(0x7f00000009c0)) 5m1.031228711s ago: executing program 0 (id=2731): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000100)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb4102000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb9108656d82", 0xbd, 0x4040004, 0x0, 0x0) shutdown(r0, 0x1) getsockopt$inet_buf(r0, 0x0, 0xb, &(0x7f0000000080)=""/144, &(0x7f0000000180)=0x90) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5m0.914352687s ago: executing program 0 (id=2732): socket$kcm(0x10, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4f, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) setreuid(0xee01, 0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x8001) r4 = getpgid(0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x2, r4}) sendmmsg$unix(r2, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x20040001) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) eventfd(0x6) eventfd(0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x0, 0x0) pipe(&(0x7f0000000180)) socket$kcm(0x10, 0x2, 0x10) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r5], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, 0x0, 0x0) 4m56.205702916s ago: executing program 2 (id=2734): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000180)={0x14, r1, 0x311, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x2004c890) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000040)={0x7, 0x28, [0xe, 0x7, 0x0, 0xea9e], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 4m56.179334328s ago: executing program 5 (id=2735): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000340)=0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x72, 0x0, 0x3) r4 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x40084149, &(0x7f0000000000)=0xd) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f00000001c0)={0x10, 0x0, 0xa03, 0x200}, 0xc) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r12, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) 4m55.580407321s ago: executing program 2 (id=2736): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x37]}}]}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000031006"], 0x4a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x503, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) 4m54.873908334s ago: executing program 0 (id=2737): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) statx(r1, &(0x7f0000000280)='./file0\x00', 0x100, 0x800, &(0x7f0000000640)) 4m54.758698868s ago: executing program 0 (id=2738): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x7800, 0x1, 0x10, 0x19, {{0xe, 0x4, 0x0, 0x33, 0x38, 0x64, 0x0, 0x80, 0x6, 0x0, @private=0xa010101, @loopback, {[@lsrr={0x83, 0x23, 0xbc, [@empty, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1a}, @empty, @empty, @multicast1, @multicast1, @empty]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @loopback}, &(0x7f0000000180)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@private2, 0x0}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0xc004) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000005500000427bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="c565b0a6", @ANYRES32=0x0, @ANYBLOB="00010400fe8000000000000000000000000000aa0800000020000100", @ANYRES32=r3, @ANYBLOB="01000100ac1e000100000000000000000000000086dd000020000100", @ANYRES32=r4, @ANYBLOB="010300007f0000010000000000000000000000000000000020000100", @ANYRES32=r5, @ANYBLOB="0105040000000000000000000000ffff640101021000000020000100", @ANYRES32=r6, @ANYBLOB="00030000fe88000000000000000000000000000108000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7000000fc000000bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000000f040000000000001d4002000000000065040000000000000f030000000000001d440000000000007a0a00fe000000000f00000000000000b5000000000000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b1100886475923906f88b53987ad0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d64360f56e24e6d2105bd901128c7e0ec82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7dfcb59b854e9d5a17f48a7382f1b3fa4526650ea6cef13d000000225d85ae49cee383f936ad657b303ab841dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c1070bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c22ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fd03000000022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b884114f244a9bf93f04bf072f0861f5c0b000000004000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99705cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0706a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2811e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96735600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922923806ca84d69ea370db27a5ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca311a28ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da7418fd3aa81cff202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c829aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0d0274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f4441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbf34c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cbf5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d9436220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd9000000000000f05fe239d3d6dafc367f12689b6700000000bd4990d9dc174a69aadffdea5445fd3c13350af85d308caee689736c06417b52541eb5871d820b850dcb00877bbe2ed19d911564f11adeb52ec3047cfdcac8a8bab6ee365941cf792155f589226758e9c8bec8289b3012ca74bfe210e0315b384ce982e16f93f3e0b1385cfaab63bd36b141dfbc7f96ee549b8b52c311e5c657943f2a5d177f03e10b3595ed13458472a2eab1ea987a0668e52fff5c716fb5950852186649ce7362b45225f050c1c37327b6833025cc1dff2d57df674be03bab30901188386d248370"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], 0x24}}, 0x0) 4m40.314260352s ago: executing program 34 (id=2736): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x37]}}]}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000031006"], 0x4a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x503, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) 4m39.925313602s ago: executing program 35 (id=2735): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000340)=0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x72, 0x0, 0x3) r4 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x40084149, &(0x7f0000000000)=0xd) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f00000001c0)={0x10, 0x0, 0xa03, 0x200}, 0xc) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r12, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) 4m38.492800456s ago: executing program 36 (id=2738): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x7800, 0x1, 0x10, 0x19, {{0xe, 0x4, 0x0, 0x33, 0x38, 0x64, 0x0, 0x80, 0x6, 0x0, @private=0xa010101, @loopback, {[@lsrr={0x83, 0x23, 0xbc, [@empty, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1a}, @empty, @empty, @multicast1, @multicast1, @empty]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @loopback}, &(0x7f0000000180)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@private2, 0x0}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0xc004) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000005500000427bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="c565b0a6", @ANYRES32=0x0, @ANYBLOB="00010400fe8000000000000000000000000000aa0800000020000100", @ANYRES32=r3, @ANYBLOB="01000100ac1e000100000000000000000000000086dd000020000100", @ANYRES32=r4, @ANYBLOB="010300007f0000010000000000000000000000000000000020000100", @ANYRES32=r5, @ANYBLOB="0105040000000000000000000000ffff640101021000000020000100", @ANYRES32=r6, @ANYBLOB="00030000fe88000000000000000000000000000108000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], 0x24}}, 0x0) 3m44.182281269s ago: executing program 4 (id=2757): r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x1) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x101001, 0x90, 0x34}, 0x18) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000380)=0xfffffffffffffff2) (async) r3 = openat$cgroup_ro(r1, &(0x7f0000000400)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$P9_RXATTRCREATE(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f0000000080)={0xd7, &(0x7f0000000280)="c3ebcc61a34ecd4a9f8ce6435a6bc0fa75fea211f8202480bb6e6770cf64399612bd2bc09d5c81009ef617f6bf4dce4dcc68399327325b0f53518b2e6c3620ae3228795dbb428da6a7eddc1dd201fc7b3714817dcaf091307d6a11df93437c4cccfca25617caba3a83bf00faef016068e906e3e71887f379b2c06915ede35481e9114e48fe83b99eb81cf85563cb865e403424a842c371fcad1fcd313a901f3e4104f2a4b78d9c19025211bda8b5c549b5bbe8050eaef869cfc80b66b2c1eab0b95706fc57eeef9b9aa0095fe2f8a85e68edb7fb7687a9"}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d58000000000000140003006970766d616e310000000000000000001c0012800b29e3740001006970766c616e00000c000280060002000259364a08c591e715533a2d80619e6d2ca7a83976daa336c6f24fd1218b616b8749264b79315d3a760a93345cc29b3fd05071a73718b3b1e21b718c9ab2953d20e97c46fae7f5469e94156759e9d2e1707bb8aa69c0a36efa1e6039a85c79a46f461f188cf5f8ffa041e3e790c0809bd573"], 0x50}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) 3m42.459769248s ago: executing program 4 (id=2758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2f, 0x0, &(0x7f0000000040)=0x700) r3 = socket(0x400000000010, 0x3, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) (async) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r7, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r8, 0x0, 0x81, 0xf80, &(0x7f0000000700)="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", 0x4}) (async) r9 = socket$unix(0x1, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'dvmrp0\x00', 0x4000}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xff80, 0xf}}]}}]}, 0x5b}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000001013c3b1c25000000400000020000256d000100ac1414bb08000200e00000010c000280050001003a000000c70a4b76952577250004000006400340000400"/83], 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x20000004) 3m34.408563443s ago: executing program 4 (id=2759): socketpair(0x26, 0xa, 0x9, &(0x7f0000000000)) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@bridge_delneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0xf2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10000) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e20, @remote}, {0x2, 0x4, @empty}, 0xac0dbb44ff9018f5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) (async) r4 = fsopen(&(0x7f0000000000)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async, rerun: 64) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) (async, rerun: 64) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 3m33.95819037s ago: executing program 4 (id=2760): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x4}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe0000010000000014000f00"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009c9000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000005, 0x4c831, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m32.991058522s ago: executing program 4 (id=2761): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090002", 0x17}], 0x1}, 0x24044880) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="480d73d93d00"}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="480d73d93d00"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x800}, [@map_fd={0x18, 0x0, 0x1, 0x0, r3}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xea, &(0x7f0000000340)=""/234, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x77) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x800}, [@map_fd={0x18, 0x0, 0x1, 0x0, r3}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xea, &(0x7f0000000340)=""/234, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x77) 3m25.971227198s ago: executing program 4 (id=2762): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000480)='mem_connect\x00', r0, 0x0, 0x100}, 0x18) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000003c0)={'rose0\x00', 0x112}) 3m10.779300905s ago: executing program 37 (id=2762): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000480)='mem_connect\x00', r0, 0x0, 0x100}, 0x18) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000003c0)={'rose0\x00', 0x112}) 54.203289685s ago: executing program 9 (id=3621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010800000000000010000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r2 = socket(0x22, 0x2, 0x3) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x111, 0x4) write(r3, &(0x7f0000000440)="b1118e4ef6a4e608ff08000098ff93da14cd992576d7b365020000000000000067faa180669e4d00", 0x28) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000140)={r2, 0x10000, 0xffffffffffffffff, 0x5}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = dup(r5) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, &(0x7f00000000c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000001c0)="b8c7000f00d0f3a50f090fc7313e67360f01d1b8a2000f00d8f3af2ef30f015e00660f3266b9800000c00f326635010000000f30", 0x34}], 0x1, 0x11, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000340)={0x5, 0x6, 0x1, 'queue1\x00', 0xd1c4}) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x203, 0x4) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000002b000b00000000000000000008000000040003000c000180060000008848000008000200c459eb635a48f7712c66352ade50698d33384eee3046f638e0ed4380d971f53415c8f5128517d9b80a9af9680b3100c0e94a00c5b3ea4c5ac095bf10281bb4c5bf9cf60219021543153ab1132659a33dbf977eea98687a0111066d1d27e35a7891f03b938ce02f4c94dd5c27e1a1e390f10c7981e5606e10e6c45665aa2b3ab0c19cc265d41c5257e8e4b21306c8404b3a169268cdae50dfb9862ae6f5ae93e7e20c2625774f4058cc0b7b3d", @ANYRES32, @ANYBLOB], 0x2c}}, 0x0) 53.540975378s ago: executing program 9 (id=3629): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x24, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1084}, [@IFLA_PROP_LIST={0x4}]}, 0x24}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x7, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x3c, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x448600, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{0x64, 0x0, 0x3, 0x1}, {0x6, 0x0, 0x0, 0x7ffffffd}]}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0xd0, 0x268, 0x311, 0x0, 0x268, 0x1e0, 0x460, 0x460, 0x1e0, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0xa8, 0xd0, 0x0, {0x9401}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xd0, 0x110, 0xe4030000, {}, [@common=@ipv6header={{0x28}, {0x0, 0x0, 0x5}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9, 0x3, 0x1, 0x3, 0x2, 0x8, 0x1, 0x2]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r6, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) syz_genetlink_get_family_id$nbd(0x0, r5) connect$802154_dgram(r1, &(0x7f0000000340)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1) 53.493256566s ago: executing program 9 (id=3631): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000000180)=""/217, 0xd9, 0x0, &(0x7f0000000280)=""/163, 0xa3}}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='sched\x00') getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000500)={@private1, 0x0}, &(0x7f0000000540)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) fcntl$getown(r0, 0x9) accept(r0, 0x0, 0x0) 53.49275593s ago: executing program 9 (id=3633): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x951c76319bb019a4, 0x706, 0x4, 0x4, {{0x18, 0x4, 0x0, 0x4, 0x60, 0x65, 0x0, 0x0, 0x0, 0x0, @broadcast, @empty, {[@rr={0x7, 0x17, 0x17, [@private=0xa010102, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010100]}, @ssrr={0x89, 0x13, 0x8f, [@multicast2, @local, @private=0xa010100, @rand_addr=0x64010100]}, @rr={0x7, 0x7, 0xc5, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x86, 0x3, 'D'}, @end, @noop, @end, @generic={0x12, 0xb, "60d06cf7ebd167fc69"}, @lsrr={0x83, 0x7, 0x68, [@local]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="20013300", @ANYRES16=r1, @ANYBLOB="200029bd7000ffdbdf25060000006c00018014000200636169663000000000000000000000000800030002000000140002006970365f76746930000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f766c616e0000000000001400020073797a6b616c6c65723000000000000008000300010000002800018008000300030000001400020065727370616e3000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="480001801400020067656e65766530000000000000000000140002006e6574706369300000000000000000001400020076657468315f766c616e000000000000080003000200000030000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="1400020073797a5f74756e0000000000000000000800030000000000"], 0x120}, 0x1, 0x0, 0x0, 0x20000802}, 0x24040814) 53.492249177s ago: executing program 9 (id=3634): r0 = socket(0x8, 0x803, 0xfffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000280)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x303, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x9362, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x8000000, 0x0, {{}, {@val={0x7}, @void}}}, 0x1c}}, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) linkat(r2, &(0x7f0000000240)='.\x00', r2, &(0x7f0000000300)='./file1\x00', 0x400) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x134, r4, 0x2, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "7c65015359dcba452aaa513ac7f485fc7f86966c51ebfc57e5"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "f6eb0eef1ee1a6ab4553d4cdc1c849209b1d2a1c3814c0732e522cd8"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x10}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x19}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x8, 0x803, 0xfffffffd) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000280)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f00000000c0)='./file1\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x303, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x9362, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async) read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) (async) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x8000000, 0x0, {{}, {@val={0x7}, @void}}}, 0x1c}}, 0x0) (async) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$selinux_load(r3, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) (async) linkat(r2, &(0x7f0000000240)='.\x00', r2, &(0x7f0000000300)='./file1\x00', 0x400) (async) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x134, r4, 0x2, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "7c65015359dcba452aaa513ac7f485fc7f86966c51ebfc57e5"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "f6eb0eef1ee1a6ab4553d4cdc1c849209b1d2a1c3814c0732e522cd8"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x19}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 53.366678161s ago: executing program 9 (id=3637): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x28002) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x20, 0x3, 0x300, 0x3, 0x0, 0x0, 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, [@hopopts={0x2c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4}]}]}}}}}}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000000)={0x3, 0x1, {0xffffffffffffffff, 0x0, 0x400, 0x3, 0xe}, 0xa1}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b00)={0x4c4, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4b1, 0x0, 0x0, 0x1, [@nested={0x3bc, 0x4, 0x0, 0x1, [@typed={0xc, 0xd4, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0xf7, 0x0, 0x0, @u32=0x7}, @nested={0xf1, 0x2d, 0x0, 0x1, [@nested={0x4, 0x5b}, @nested={0x4, 0x8f}, @nested={0x4, 0x8c}, @nested={0x4, 0xf5}, @nested={0x4, 0xae}, @generic="0c459046c0362fe2fe6793da0d9d4a6df8e4b876ca4de8169c1ff0741fd85ea5e6fec9e3ce86aaf9c878", @typed={0x4, 0xe9}, @generic="f1d76358ac28193327e1e33ca5c96fdae0860d517e4a30cc9f45ccb9d8e23cd1c54f60af8148576b42a247cfb745e3bfd81089df5c773900704fc54beb9103e7e09632b74b17c30f47a74c3690642d33f3e16f22bf8846757da03b84621c39af880c604ac955144ac0b8baae02085394b473bd304dfec6f1979275f33e30159e02d5a5ed6237251b2e2527ca149df4b82ab015a780c9a310394a89ef63b28568bc6ea46bbb0fe33dd363ee"]}, @nested={0x298, 0xa5, 0x0, 0x1, [@generic="873bb05e639076f1f9a609b7d6995dac0e57287c7007d2b2e64027f7176b605bdbb5256689bf6b219a2271bdab0cc1e823bc992e40b2d1fd7089639c86a986ef9e13a7b4dd75c26646fcdd46a4f863f1e47c16f872bef5b8297bfa1d5b054e8c7aa4ea4b2b66dab8d3582880af16", @generic="7c43a525030cb9db991db8143b9c7d3e0895809c008aa18aaaa66f0fdc4586b5196d59f68baa053787df4886c1e4087a85ffb23de6bb7c790151add5830360353e3eab3a6bb817e646f093598e7403ff2c62a9d1726492f62f5622176f5ff33da9775b9891683e4df0e2a10121dad24d79e16a526e8e5eb745beae2af33700d5c19885a3f75f94830a2d415be42ec6d4fd2dd9d0100fa1e09db9c3df0146dada2ced8804a0367d512f0b264d533b963d83251cf6dc79e133157271c46735c511", @nested={0x4, 0x2c}, @nested={0x4, 0x13e}, @nested={0x4, 0xad}, @nested={0x4, 0x7d}, @generic="3afba20544e23fe902fdb9c1ba548be84cf40d7ff8e976d4d39d8bcef2ce982c88e6b0f1627d83a8f2b7a57dec3fbe3564f5719cb606b8c0e3dcab2625d8a7356b15610b44bc4f38d21e6aafc02cc267ad77556586c08f6406ad45a096798e5ce69c07038e0beaed006e528892da2945b9e6bf057232b1cfdccbf69fa6e7635af1f725890e8e4fdd7f025c3889ee38b23f00806dc2d9752d16a52cc25ee9ae55533a854aa5e6edc1b5a8cecae5fc09e6361969", @generic="005e0d68d1354b38d33f77ef782fc22ef1036ea26d5d304d1868d98bf5add5319e5d4385444fbcfbb4cae74a790adc76244629146792aec360f4ede43fec4c2e0a630ee2f2d9a87e23e1fe417f7203a46edfccd454577190a332c192241f754cb5f1d04225b0d925b4e7c301197408b754976ef50f497afe8f80504580de31154f81197c1b410395c5aed3779d26792cc91f07dfbaf1cb", @typed={0xc, 0xd1, 0x0, 0x0, @u64=0x6}]}, @nested={0x4, 0xe2}, @nested={0x14, 0xe6, 0x0, 0x1, [@typed={0x8, 0x21, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x136, 0x0, 0x0, @fd=r2}]}]}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x4c4}], 0x1}, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r5, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="3e660f71f50066b8010000000f01c1c06c00ed0f01df0fc722260f013ee800ded1dde40f8e37003e43", 0x29}], 0x1, 0x44, &(0x7f0000000140), 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x508, 0x368, 0x8, 0x7f02ae, 0x0, 0x200, 0x438, 0x2e8, 0x2e8, 0x438, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv4=@remote, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) 38.350300931s ago: executing program 38 (id=3637): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x28002) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x20, 0x3, 0x300, 0x3, 0x0, 0x0, 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, [@hopopts={0x2c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4}]}]}}}}}}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000000)={0x3, 0x1, {0xffffffffffffffff, 0x0, 0x400, 0x3, 0xe}, 0xa1}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b00)={0x4c4, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4b1, 0x0, 0x0, 0x1, [@nested={0x3bc, 0x4, 0x0, 0x1, [@typed={0xc, 0xd4, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0xf7, 0x0, 0x0, @u32=0x7}, @nested={0xf1, 0x2d, 0x0, 0x1, [@nested={0x4, 0x5b}, @nested={0x4, 0x8f}, @nested={0x4, 0x8c}, @nested={0x4, 0xf5}, @nested={0x4, 0xae}, @generic="0c459046c0362fe2fe6793da0d9d4a6df8e4b876ca4de8169c1ff0741fd85ea5e6fec9e3ce86aaf9c878", @typed={0x4, 0xe9}, @generic="f1d76358ac28193327e1e33ca5c96fdae0860d517e4a30cc9f45ccb9d8e23cd1c54f60af8148576b42a247cfb745e3bfd81089df5c773900704fc54beb9103e7e09632b74b17c30f47a74c3690642d33f3e16f22bf8846757da03b84621c39af880c604ac955144ac0b8baae02085394b473bd304dfec6f1979275f33e30159e02d5a5ed6237251b2e2527ca149df4b82ab015a780c9a310394a89ef63b28568bc6ea46bbb0fe33dd363ee"]}, @nested={0x298, 0xa5, 0x0, 0x1, [@generic="873bb05e639076f1f9a609b7d6995dac0e57287c7007d2b2e64027f7176b605bdbb5256689bf6b219a2271bdab0cc1e823bc992e40b2d1fd7089639c86a986ef9e13a7b4dd75c26646fcdd46a4f863f1e47c16f872bef5b8297bfa1d5b054e8c7aa4ea4b2b66dab8d3582880af16", @generic="7c43a525030cb9db991db8143b9c7d3e0895809c008aa18aaaa66f0fdc4586b5196d59f68baa053787df4886c1e4087a85ffb23de6bb7c790151add5830360353e3eab3a6bb817e646f093598e7403ff2c62a9d1726492f62f5622176f5ff33da9775b9891683e4df0e2a10121dad24d79e16a526e8e5eb745beae2af33700d5c19885a3f75f94830a2d415be42ec6d4fd2dd9d0100fa1e09db9c3df0146dada2ced8804a0367d512f0b264d533b963d83251cf6dc79e133157271c46735c511", @nested={0x4, 0x2c}, @nested={0x4, 0x13e}, @nested={0x4, 0xad}, @nested={0x4, 0x7d}, @generic="3afba20544e23fe902fdb9c1ba548be84cf40d7ff8e976d4d39d8bcef2ce982c88e6b0f1627d83a8f2b7a57dec3fbe3564f5719cb606b8c0e3dcab2625d8a7356b15610b44bc4f38d21e6aafc02cc267ad77556586c08f6406ad45a096798e5ce69c07038e0beaed006e528892da2945b9e6bf057232b1cfdccbf69fa6e7635af1f725890e8e4fdd7f025c3889ee38b23f00806dc2d9752d16a52cc25ee9ae55533a854aa5e6edc1b5a8cecae5fc09e6361969", @generic="005e0d68d1354b38d33f77ef782fc22ef1036ea26d5d304d1868d98bf5add5319e5d4385444fbcfbb4cae74a790adc76244629146792aec360f4ede43fec4c2e0a630ee2f2d9a87e23e1fe417f7203a46edfccd454577190a332c192241f754cb5f1d04225b0d925b4e7c301197408b754976ef50f497afe8f80504580de31154f81197c1b410395c5aed3779d26792cc91f07dfbaf1cb", @typed={0xc, 0xd1, 0x0, 0x0, @u64=0x6}]}, @nested={0x4, 0xe2}, @nested={0x14, 0xe6, 0x0, 0x1, [@typed={0x8, 0x21, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x136, 0x0, 0x0, @fd=r2}]}]}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x4c4}], 0x1}, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r5, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="3e660f71f50066b8010000000f01c1c06c00ed0f01df0fc722260f013ee800ded1dde40f8e37003e43", 0x29}], 0x1, 0x44, &(0x7f0000000140), 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x508, 0x368, 0x8, 0x7f02ae, 0x0, 0x200, 0x438, 0x2e8, 0x2e8, 0x438, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv4=@remote, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) 1.394927315s ago: executing program 1 (id=4366): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x108) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r3, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x7d, 0x9b, 0x4, 0x5, 0x3, 0x3, 0x2eef5e15, 0x25d, 0x38, 0x30b, 0x7, 0x9, 0x20, 0x1, 0x1, 0x87, 0x400}, [{0x6474e551, 0x1, 0xdc, 0x4, 0x6, 0x6, 0x7fffffff, 0x8}]}, 0x58) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x12, &(0x7f00000000c0)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}], &(0x7f0000000000)='syzkaller\x00', 0x81, 0x44, &(0x7f0000000180)=""/68, 0x41100, 0x20, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000300)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000380)=[{0x1, 0x4, 0xf, 0x1}, {0x4, 0x5, 0x7, 0x8}, {0x5, 0x1, 0x8, 0x2}], 0x10, 0x4, @void, @value}, 0x94) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) 1.276983087s ago: executing program 1 (id=4368): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0xdf9e, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000080)}}, 0x10) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000240)={0x5, 0x7, 0x0, 0xfffffff9, 0x3, [0x2, 0x80000000, 0x5, 0x3]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x5, 0x4}) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000003c0)=0x83d3) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000400)="b03c7fcf80a710509789a52742") r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440)=[@mss={0x2, 0x7}, @sack_perm, @sack_perm, @sack_perm, @sack_perm], 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r4 = syz_open_dev$hiddev(&(0x7f00000005c0), 0x3, 0x101900) ioctl$HIDIOCGFIELDINFO(r4, 0xc038480a, &(0x7f0000000600)={0x2, 0xb8e7009b09a16db9, 0xe, 0x2, 0x40, 0x4, 0xe8e, 0x10, 0xfffff001, 0x8, 0x4, 0x7, 0x10000, 0x2}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x101280, 0x0) setsockopt$netrom_NETROM_T4(r5, 0x103, 0x6, &(0x7f0000000680)=0x5d69, 0x4) r6 = openat$cgroup_ro(r5, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r6, 0x810c9365, &(0x7f0000000700)={{0x5, 0x3ff}, 0x100, './file0\x00'}) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r7, &(0x7f0000000840)="1f8d307f8bf3d06b8d729f93436d8e90a5041d1219f0145738a4d0fe96936d52d45c6d0720212c0fe0514a24cabf2b7a3589c515654b6e9310ec0a0994f22f4d7303e6a83657dffadb655323a9a20e9d45a057ffd4af850bd14f2aac2cb103052dc95e9fe83f9b7eaa9a0c0c9e165d8916b0fb5dd501235d8dc73e365d6c9bb254ef0b69d28abd24a78ddf337eac78df3acf91c3026f8267340c36b0d38c4b4521a9e72657ad03afd262009f3138cb3c", 0xb0, 0x20040801, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000980)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000940)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f00000009c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000900), 0x0, {0xa, 0x4e24, 0x6475, @mcast2, 0xa5b1}, r8}}, 0x38) recvfrom$inet_nvme(r6, &(0x7f0000000a00)=""/4096, 0x1000, 0x40000022, &(0x7f0000001a00)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) recvfrom$inet_nvme(r6, &(0x7f0000001a80)=""/111, 0x6f, 0x2120, &(0x7f0000001b00)=@generic={0x1a, "10dcd52e4458165bb1e122b3acf2e6217253f477b4ebd6cee07c860f0df3a4d8e03b0909550cc92152b011f62f1107072d61985a2a54eec9e4d415d0e95be00b1879eb0fccda58671d9dd524185993659971b2f52f5b3a0020a10d3e5bcb8a8ee8a0790f0ab9e3a21d6ee61c1b87be05a708a8440428b9e249d478a508ac"}, 0x80) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000001b80)={0x0, 0x0}, &(0x7f0000001bc0)=0xc) quotactl_fd$Q_SETQUOTA(r0, 0x0, r9, &(0x7f0000001c00)={0x200, 0x6, 0x81, 0x5, 0x4, 0x7f, 0x2, 0x3, 0xffff1661}) pipe(&(0x7f0000001c80)={0xffffffffffffffff}) write$UHID_CREATE2(r10, &(0x7f0000001cc0)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0xa4, 0xc, 0x9, 0x9, 0x3, 0x5, "9cbb263d7ef341888837009ce13d14580e17fca2586c49c570461bceb1ba35a6945abf8d9f20c7476d224003d32c7be8e6a7025fdab588b3ddee08ce0a2c04e4ac17f2526a795184c07c3be25632da8d495d2f81b72884bc546c67067a182417016c56f108627b73d64876e75aa4d0cf1e91e2af2a0b8a7498fb8073186d1c1e2587eaf3b334e070559f82bccb3c57db3590494962ca702b26a9b77ed70eb03d681836cf"}}, 0x1bc) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000001e80)={0x4e96, 0x0, 0x3, 0x200, 0x1b, "b0b00a43ff62e3bc343b1dd61b8450791c5985"}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x48010, r5, 0xfe38000) 1.146533989s ago: executing program 8 (id=4370): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r1, 0x2) listen(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000200)={[{@size={'size', 0x3d, [0x65]}}]}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0x500}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) 1.049672549s ago: executing program 8 (id=4371): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) (async) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r2, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) syz_emit_ethernet(0x82, &(0x7f00000005c0)={@random="856b934629fa", @local, @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @private0={0xfc, 0x3}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88f7}}}}}}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x6b, 0x60000000}, 0x2c) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=@updpolicy={0x20c, 0x19, 0x8, 0x70bd27, 0x25dfdbfe, {{@in6=@empty, @in=@multicast1, 0x4e24, 0x5, 0x4e21, 0x7, 0xa, 0x80, 0x80, 0x3a, 0x0, 0xee00}, {0x98, 0xb17, 0x95c, 0x800, 0x5ceb, 0xfffffffffffff0be, 0x80, 0x26}, {0x5, 0x10, 0x696a, 0x2}, 0x2, 0x6e6bb9, 0x0, 0x0, 0x3, 0x2}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x800}, @coaddr={0x14, 0xe, @in6=@dev={0xfe, 0x80, '\x00', 0x3c}}, @algo_auth_trunc={0xf9, 0x14, {{'cbcmac(arc4-generic)\x00'}, 0x568, 0x0, "aba94091f58f96a8c3ba9aa8d23376c33683b0574d6a983a513e8b5fe4aaa4af9f2413419bab5dc9e0855b864082473aa8ce4bb5107e6fc6d7bb4b73a1253d437f1d3e00f1bdb5d2dd4e614eb0b521ad7b0d73184391e8799a5eaaa920a73dec67bb43a1034a0e7e11eae191d47dddf3a9ba1f9f1beaf03db9962d221e6c89d3e5ef7bae7bcc03ab79bac0c561bbb410def0e200c79ad0d137e59d82759b857dc7c635534c2d5ec2e5046fddee"}}, @replay_thresh={0x8, 0xb, 0xbd5f}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x5}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010102, @in=@remote, 0x0, 0xa}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x800}, 0x4000814) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0xffffffffffffffff, r0, 0x0, 0x7ff}, 0x18) 965.700288ms ago: executing program 8 (id=4372): r0 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaafbbbbbbbbbbb86dd60000000000000000000000000000000fe8800000000000000aa000040010040000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5001000990780000"], 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'nicvf0\x00', &(0x7f0000000000)=@ethtool_channels={0x24, 0x0, 0x2, 0xfffffffe, 0x6, 0x1, 0x2}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x2}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0xcdc}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000990000/0x1000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000f0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r5}, &(0x7f0000000180), &(0x7f0000000100)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r5, &(0x7f0000000040), 0x0}, 0x20) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000000140)={0x1, 0x5}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000140)={[0x100000000, 0x80, 0x2, 0x4, 0xfffffffffffffffd, 0x7, 0x3e, 0xf6, 0x0, 0x40000, 0x5, 0xfdb, 0x10000000009, 0x1, 0x1, 0x1002], 0x1, 0x3e45c7}) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)=ANY=[], 0x32c}], 0x1}, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @pic={0x7, 0x80, 0xe8, 0x5, 0x7, 0x0, 0x49, 0x80, 0x9, 0xaf, 0x1, 0x68, 0x5, 0x6, 0x4, 0xf}}) fsetxattr(0xffffffffffffffff, &(0x7f0000000540)=@known='user.incfs.id\x00', 0x0, 0x0, 0x3) mq_open(&(0x7f00000000c0)='\x00', 0x40, 0x4, &(0x7f0000000100)={0x1ffc0000, 0x6, 0xaf63, 0xc}) r10 = syz_open_dev$evdev(&(0x7f0000000280), 0x7, 0x1c0) ioctl$EVIOCGNAME(r10, 0x80404506, &(0x7f0000000300)=""/165) 636.260631ms ago: executing program 6 (id=4375): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)}}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) r4 = accept4$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @rose}, [@null, @remote, @null, @remote, @default, @default, @netrom, @default]}, &(0x7f0000000000)=0x48, 0x80000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x5c}}, 0x0) ioctl$sock_netrom_SIOCDELRT(r4, 0x890c, &(0x7f00000001c0)={0x1, @default, @rose={'rose', 0x0}, 0x4, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, 0x1, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}) 579.756016ms ago: executing program 6 (id=4377): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r1, @ANYBLOB="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"], 0x11c}}, 0x8800) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xf, &(0x7f00000005c0)=@raw=[@jmp={0x5, 0x1, 0x2, 0x13, 0x4, 0xc4, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @alu={0x7, 0x1, 0xa, 0xb, 0xf, 0x50}], &(0x7f0000000400)='GPL\x00', 0x4, 0xb0, &(0x7f0000000640)=""/176, 0x41000, 0x6e, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000700)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0x2, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000780)=[r3, r3, r3, r3], &(0x7f00000007c0)=[{0x0, 0x4, 0x10, 0x1}], 0x10, 0x3, @void, @value}, 0x94) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="6a9d66d8b0aa91812b8c019c9bdf1206649f120470ef7567320610dfbd4fec570f6ba1c92f5cd2225fd993b3426ed424becfe1abe630fa082b9500000100e19adf8e274c8f1192c4ff71af47f867a577996b02d2d9172735b316a1fcfb515d33ad424fcc7e2425b2fc1e36d82dc49209dfc02406344350d9", @ANYRES16=r7, @ANYBLOB="010029bd7000fddbdf250c00000008000300", @ANYRES32=r8, @ANYBLOB="0800508004000400"], 0x24}}, 0x20004000) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') preadv(r9, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/181, 0xb5}], 0x1, 0x0, 0x0) r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r10, 0xc018643a, &(0x7f0000000080)={0x4000000, 0xd85, 0x40003}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000080)={0x1d, r11}, 0x10) r12 = landlock_create_ruleset(&(0x7f0000000380)={0x9008, 0x1, 0x2}, 0x18, 0x0) landlock_restrict_self(r12, 0x0) r13 = fsmount(r4, 0x0, 0x0) r14 = openat$cgroup_procs(r13, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000001c0)=0x4, 0x4) open_by_handle_at(r14, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00010004"], 0x408100) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) r15 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r15, &(0x7f0000000280)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) 474.127507ms ago: executing program 8 (id=4378): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x19, 0x0, &(0x7f0000000100)) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x3, [@enum={0x5, 0x7, 0x0, 0x6, 0x4, [{0x7, 0xb9}, {0x4, 0xfffffffa}, {0xb, 0x8}, {0xd, 0x6}, {0x1, 0x101}, {0x0, 0x1}, {0xc, 0x2}]}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x3, 0x1}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x61]}}, &(0x7f0000000200)=""/252, 0x7b, 0xfc, 0x0, 0x7, 0x0, @void, @value}, 0x28) r2 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r2, 0x0) (async) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000009c0), 0x40000, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000e40)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x3, 0x3, 0x0, @local, @empty, 0x10, 0x7, 0xbc, 0x3}}) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@gettclass={0x24, 0x2a, 0x800, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfff3, 0xf}, {0x8, 0xf}, {0xfff3, 0xfff3}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x40004040) ftruncate(r2, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xdbb2daa70d17772e, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x10, 0x0, @value=r2}, 0x94) 407.59806ms ago: executing program 6 (id=4379): r0 = openat$mixer(0xffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000000080)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000000c0)={{0xffffffffffffffff, 0x0, 0x42, 0x2, 0xd93e}, 0xb, 0x2, 'id1\x00', 'timer1\x00', 0x0, 0x10000, 0x1, 0x2, 0x4}) 406.566912ms ago: executing program 8 (id=4380): openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x3808c, &(0x7f00000002c0)={[{@redirect_dir_nofollow}, {@verity_off}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xdb) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000ffffffff000000000000000000000000000000000000000000000000000000010004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac1e000100"/67], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000006c0)={0x3, 0x0, [{0x0, 0x6e, &(0x7f00000001c0)=""/110}, {0xeeef0000, 0x97, &(0x7f0000000580)=""/151}, {0x4, 0x1000, &(0x7f0000001600)=""/4096}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x40012141) recvmsg$unix(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/114, 0x72}], 0x1}, 0x40002042) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES32=r5, @ANYRESDEC=r6, @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x95}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x80, &(0x7f0000000040)={0x11, 0x9, r5, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x14) fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0x3, 0x4}, 0x6) 405.748315ms ago: executing program 7 (id=4381): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r3, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x4, 0x8000}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x6, r3, 0x0, r4}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r5, 0x0, 0x81, 0x5, &(0x7f0000000700)="85653f4534", 0x1}) 323.269025ms ago: executing program 6 (id=4382): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async, rerun: 32) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 32) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) (async) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$sock_qrtr_TIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) 323.026739ms ago: executing program 7 (id=4383): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x400}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001140)=ANY=[@ANYBLOB="2c00000012009703000000000000000007"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x9) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000080)={0x10200, 0x5, 0xffff1000, 0x1000, &(0x7f0000006000/0x1000)=nil}) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) 322.743811ms ago: executing program 1 (id=4384): recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000000)=""/18, 0x12, 0x2100, &(0x7f0000000400), 0x20) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r2, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000280)={0x20, r5, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f0000000300)={0x8, r5}) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f0000000340)={0x8, r4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$IOMMU_GET_HW_INFO(r1, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r3, 0x1c, &(0x7f00000003c0)=""/28}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f00000001c0)={0x28, 0x0, r3, 0x0, 0x0}) 242.760831ms ago: executing program 6 (id=4385): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) get_mempolicy(&(0x7f0000000100), 0x0, 0x7, &(0x7f00007d3000/0x4000)=nil, 0x4) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x2000000) setuid(0xee00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) setresuid(0xffffffffffffffff, r2, 0xee01) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {0x1, 0x1}, [{0x2, 0x1, r2}, {0x2, 0x2, r2}], {0x4, 0x5}, [], {0x10, 0x2}}, 0x34, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x200) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000240)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x4, 0x3730, 0x1b2e, 0x7ff, 0xfffffffe, 0x7, "6055df0b"}}, 0x11c) close(r7) fcntl$getflags(r4, 0x401) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, &(0x7f0000000000)=0xd) 242.39437ms ago: executing program 8 (id=4386): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) connect$netrom(r0, &(0x7f0000000300)={{0x6, @null, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) getpeername$netrom(r0, &(0x7f0000000000)={{0x3, @null}, [@bcast, @default, @rose, @rose, @rose, @bcast, @rose, @netrom]}, &(0x7f0000000080)=0x48) 227.689112ms ago: executing program 6 (id=4387): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x24040084) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000040)=@id, 0x10) shutdown(r4, 0x2) getsockopt$MRT6(r4, 0x29, 0xd0, &(0x7f0000000000), &(0x7f0000000080)=0x4) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000003300), r3) sendmsg$NFC_CMD_ENABLE_SE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fcdbdf25070000000800150002000004080001"], 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000000) r6 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r9, 0x54a1) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r10, 0x8400ae8e, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000180)=0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = getpid() fcntl$setownex(r13, 0xf, &(0x7f0000000100)={0x2, r14}) ioctl$sock_FIOGETOWN(r13, 0x8903, &(0x7f00000001c0)=0x0) wait4(r15, 0x0, 0x80000000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000001c0)) sendmsg$NFC_CMD_DEP_LINK_UP(r11, &(0x7f00000002c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r5, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xfffffffe}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000001}, 0x24000811) read$FUSE(r6, &(0x7f0000004440)={0x2020}, 0x2020) 216.652057ms ago: executing program 7 (id=4388): execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={[&(0x7f00000000c0)='/dev/i2c-#\x00', &(0x7f0000000100)='/dev/i2c-#\x00', &(0x7f0000000140)='!\x00', &(0x7f0000000180)='){\xe2\'\'\x00', &(0x7f00000001c0)='-,\x00']}, &(0x7f0000000280)={[&(0x7f0000000240)='\x00']}) r0 = syz_open_dev$I2C(&(0x7f0000001000), 0x33, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x1, 0x20, 0x8, &(0x7f0000000000)={0xb, "ac7f8ead0895a9403aad24e2f8fc9c437eb6e520af96dc8e82da102ee4d02e8165"}}) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000010c0)={0x0, 0x7, 0x8, &(0x7f0000001040)={0x0, "fa6f394d6eec98aaf370535ac95977c05edbebb84734f1da4145d7dbc01de97db4"}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x1, 0x10, 0xa0, 0x6, {{0x38, 0x4, 0x3, 0x0, 0xe0, 0x67, 0x0, 0x2, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x50, 0x0, [{0x1, 0xe, "4d2a343774254bcddea345ef"}, {0x7, 0x6, "ab27100a"}, {0x2, 0x6, "76c57f2d"}, {0x0, 0x9, "bb360de6af20d6"}, {0x0, 0x10, "72a758d736c0451133292d9de307"}, {0x7, 0x12, "558ee9a3bab3b407553eda2c801e53a9"}, {0x5, 0x5, "f7dba7"}]}, @ssrr={0x89, 0x1b, 0x8a, [@dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010102, @local, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast1, @multicast1]}, @lsrr={0x83, 0x1b, 0x77, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2, @private=0xa010101, @loopback]}, @cipso={0x86, 0x33, 0x2, [{0x0, 0x7, "d934188119"}, {0x2, 0x6, "839313bf"}, {0x2, 0x4, "0571"}, {0x2, 0x10, "5c59a53d835d32a405eb7686699b"}, {0x7, 0xc, "5a8cf7d608513d3d09f2"}]}, @noop, @generic={0x89, 0x10, "c2f7673b89826d1f2f62e09c879a"}]}}}}}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r3, 0x0, 0x20003, 0xfffffffffffffffe}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r3, 0x0, &(0x7f00007fd000/0x800000)=nil, 0x800000, 0x8}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000500)=@arm64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@newtclass={0x34, 0x28, 0x2, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xd, 0x1}, {0xe, 0xffff}, {0x9, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xf7, 0xfc}}, @tclass_kind_options=@c_sfq={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={[&(0x7f00000000c0)='/dev/i2c-#\x00', &(0x7f0000000100)='/dev/i2c-#\x00', &(0x7f0000000140)='!\x00', &(0x7f0000000180)='){\xe2\'\'\x00', &(0x7f00000001c0)='-,\x00']}, &(0x7f0000000280)={[&(0x7f0000000240)='\x00']}) (async) syz_open_dev$I2C(&(0x7f0000001000), 0x33, 0x0) (async) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x1, 0x20, 0x8, &(0x7f0000000000)={0xb, "ac7f8ead0895a9403aad24e2f8fc9c437eb6e520af96dc8e82da102ee4d02e8165"}}) (async) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000010c0)={0x0, 0x7, 0x8, &(0x7f0000001040)={0x0, "fa6f394d6eec98aaf370535ac95977c05edbebb84734f1da4145d7dbc01de97db4"}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x1, 0x10, 0xa0, 0x6, {{0x38, 0x4, 0x3, 0x0, 0xe0, 0x67, 0x0, 0x2, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x50, 0x0, [{0x1, 0xe, "4d2a343774254bcddea345ef"}, {0x7, 0x6, "ab27100a"}, {0x2, 0x6, "76c57f2d"}, {0x0, 0x9, "bb360de6af20d6"}, {0x0, 0x10, "72a758d736c0451133292d9de307"}, {0x7, 0x12, "558ee9a3bab3b407553eda2c801e53a9"}, {0x5, 0x5, "f7dba7"}]}, @ssrr={0x89, 0x1b, 0x8a, [@dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010102, @local, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast1, @multicast1]}, @lsrr={0x83, 0x1b, 0x77, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2, @private=0xa010101, @loopback]}, @cipso={0x86, 0x33, 0x2, [{0x0, 0x7, "d934188119"}, {0x2, 0x6, "839313bf"}, {0x2, 0x4, "0571"}, {0x2, 0x10, "5c59a53d835d32a405eb7686699b"}, {0x7, 0xc, "5a8cf7d608513d3d09f2"}]}, @noop, @generic={0x89, 0x10, "c2f7673b89826d1f2f62e09c879a"}]}}}}}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r3, 0x0, 0x20003, 0xfffffffffffffffe}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r3, 0x0, &(0x7f00007fd000/0x800000)=nil, 0x800000, 0x8}) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000500)=@arm64) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@newtclass={0x34, 0x28, 0x2, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xd, 0x1}, {0xe, 0xffff}, {0x9, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xf7, 0xfc}}, @tclass_kind_options=@c_sfq={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) 100.777834ms ago: executing program 1 (id=4389): bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000340)={&(0x7f0000000300)=[0x0], 0x1}) r1 = socket$inet(0x2, 0x1, 0xfffffffe) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000cab000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r1], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000400)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0}}], 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000380)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000280)="fd72c91726872af17284cbbecb2360cff1988314f6cc09c4c07f0b44d9c16a610f294283b780b506b765d798ca8ab5adc7424057689ee5685dc17105c83aa4ed88bbfc7fef38b630105a17b9c6febfaef81e3242f4b460a05490dce8fd165641538fff4d4f46f9e24217a754881ce31e40b204d9126e3103f7aedd9c3194c82a62744ab6"}, {&(0x7f00000000c0)="6eafae9268cbdef2c4610d53e85605490ed6ed506c0b5fbe97b851b9277a5dac0ab88672b8ac5b883cff936f9216ae43f0061ee6421eade3910dc65d94f385486c94"}], 0x100000000000000b, &(0x7f0000000040), 0x4c4dbc2f6118216a}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a1400"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_emit_ethernet(0xce, &(0x7f0000000440)={@random="940144055da3", @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x1, 0x0, 0xac, 0x0, @gue={{0x2}, "01b132c43e0a659ba16a8d4f2c50fabed4a62936efc2fadf3f321f566c2a7f54ea3143ea1c2b7dbe206897b85d25923eda74df2b91a591f5845f274e8c862d38f5791803c70665321783a49403c42172ba6fb634bc64b542bb5862d35f3061ecd24e9eadf86f603e3121e89a801e38f98953544be9738ffd83198d22a54202505235020f3d35c671ad9824314bde2700"/156}}}}}}, 0x0) 100.492994ms ago: executing program 7 (id=4390): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, r0, 0x0, 0x46) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.79608ms ago: executing program 1 (id=4391): r0 = socket$nl_rdma(0x10, 0x3, 0x14) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, 0x0, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r1, &(0x7f0000000040)={&(0x7f00000000c0)=@caif=@rfm={0x25, 0x5, "da8215d34c48f028502f15960099eb43"}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4bdb14a71881685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x24044000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001714010025bd7000fedbff250900020073797a310000f3ff9301e267080005007369770014"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) 16.483185ms ago: executing program 7 (id=4392): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000080)={{r1}, "77c77e088e79d6f1d662ccaf5202faae8533f1d83a2fab0068bc195a46d79eea682775ee2f51d628914e08951c2c6de83f1d498cbdef7529a8ba07ebeaef50df1c9b2bba0f34518dc7d45b3d519e0ef6f0415826f9b2dcdbd7943feae15aed52b275adf501e5fe3969cb7c3ad6a5173df7bf5ee9800807099763d876fb2fc3c08818e7c29cb5075e4abba2a0d26bec0a4f43108d9b26035c7483456358fb7868893ee7c3ecf73552ba3c5ef7c2176d586e57dc62156a21fa5478a0526d9c753c48bc6e7647d72a06a8b35fea32562a7da25b93130c8cfcfc9c4ffa52a6a4ebe2946a16d449f6999a0575b1deabdea703e22c384033f7966d0f200f78dd8581db24c2c827dae4dab6f33b0ec97700489a60e4675367ae1d061163cfb31157c2d3ea652299033c9be2715ceee16ed507c0dd933e250931acc717b87f4a3d213ca1069cb4668df5ebab57a951304c54f32863d29aa72ed268609b2e62f37d26c5c146581ddb922c8bdf3c19c0e978b913928251a4b351fb9305a430f22e703e2369cfd24c2091482189157ea7bd4535fcea3039488d2650486fc1f3baa73b7183e8f075304168de3f2c893e7e064bf2b59b95d1f4b78be2e2d030a4940071c924c5db2ac290f3802c9576ddc363c84f19789d8fd53434f244174a0b5cc9eb6687b7b6f4c28ed836511978cb6e9b93706d50ca9c6d1adbdbe72a7ef4c27bb24f5e8b4bd6c2f1e5c3ef88ddc7000f1c6f29fb3881248f2e9bcef20f0eefe6aa0b92723942721b3539e124832578d4931ed3c2fde4c3caa0d504b95230cb4377d284660ab2a4736ef781a0d90d9fbd53a77f85488e1226eeefd6ae8c3d62889a20936bf0e1da282005c33ec367deb5f577d54af53830570b3d2cf49c567307c116a47cbaf83fd30427232454adc50e5add266286185e090f0772ca431d6a91ac961518865cf458c278dd10431d310b464a68732a499b29f444b917c1c92960603944681043c7f69c891b4b9badde6ba689071c8439134398fa89c4f84f54bf938c0fa291845272ea3c508fd3edac2f35d770d6fac7825db4dc93c59cbd2fc6960bd8f78eb2605a12102da266ddec85921fa7cce22839d85b07be43007d196eac92ab71b8a6f86b6659a276a66ef8223dd48934cdcc557ea831367e747d781f797f00672c13b80dc039700a2e040f77221ed6679242f3d76a056490c0e9867c43d583a44810b6ec0ac9a5c9ea9b06d989e3bbf350573542d73e0bd4a2921af00db84bbfb018d13493a6209e508a37e1dcc8d7810ff91d4805b1ee3bdcd3f7022f977f2dff3a7febfefbb2c974954db6e5a0bf79ea2003222a2ad8783ea610ae320c0caecc48242e567f24f53081b3a11974ccc7b9b5f618f12f8fc07b8ddb4faacaf2d6eed05aa58bba849e43a00c9af48f7740dbd91278c232ab12828d95e8a0b8c0604b2a08eb3bf4081d041bc47ab84ca76ec98369eb3cf5e05e46fbde5d4fb7e583f6a5b82c58889c3421c4e1e2bdc60a48018ddb2c5dab71ed820237e388c48c40298f5a2eb5f94bae4ae2180b8fe7cfcb04992e93e8a863eefef17fc1c680aa213d5534d89b5a8d4158c1f9a2ec6cd1bb256c9fe588d9bbb5d7d981b0e51b55f435c2736a7cb9638efa1a67ae0ee07a48a374e27109985f72ce1cceaeb4612fe134b36c8c408651c8497c914baaae1dc7bc11616edbd4a93f07d61de8d7790caf5bc5492428ee699ce01d5c0526075701e7fd9f306c8274c14ca48874b7bdf086bff988fb401553e46e419b362cd02d79ef4cda6aadfe85c8bcad31b9300aa8fd9ccf31d4f1a042ef2fb399dc33092ceaaae754fd30f50bc9e62d7b25b4fdb4b8b19079057558407c0c256784e756d369bd0ae85126e14c95837583746fcd689bcd5300c569ae3a44da2f316dbbf89a8707abed0f0a48bee76c79a8af1768de5e7d64f440a4164acacbeb7612e16d4d8c4a772d8fdf5a9d8ebf7130a63598de89621dd8063e2a506223cffbbe856f4f23c18b411b9cb238d80c7239e12e0f48a65c5c81a3aa79a38e77de93f0cd8ac8c224278bd791a41711b2cff9d4202d5265d772fd6c37819e93da0db0a6cb926c5c079108216333c30c2efb0d69bd71c70719b83133d68c20c44c8386653d8e3fff80dd428eac2f5030b86544cbceabfd2cb46e38d8655fc8f95d0a64165af083931ea0f25cffc91981954061cce83fb8f833cf15aa7d54eb3c4a9ace949980c46e6da8a96b350518bc09e774114fd92cc23a17b0740cab809035900f7804e60d4475dfccc3f714c1bcd27017d2257b59e5b1109628031266c30230f461fcbed6a7e1e7503036857591c6aa48c5c9c7f1433202a386187c8ebe53a053ee6c3fe1df173e4a36b1af17d2645bb3848212af79b21cbaf615e76082ba257dc9c8fdda4c408af06a4b0e68a280f69f597177ac0617580027321ee66fd3ab72e541f1e978d276578645f336766d5cbe96c22186a21f7afc84dbc7c2bd2695aa1c4a37ba6b7cfc2a3acc36ffefe11a313ac66c7074b3ed698214fef799ad4ab1ee79eb72ba3e16dd13ad0f9fcfd07bf23b8f679fdf5868c51a4b6865f99ef14587d440419ff5d2ff822df11637e1d30e865289078368f6a3e98089e986fda51ea1e17c531b0f15815d7291733c3d664a4083ade4aa14a7b3bd643a03f0706c4c4bdb516603cd060ec71e0fdc4df07d55a95eb17687385bedc688760181b72d2f2f1c9d31ae4d1a53ca6764111234d715c3bbd5dbae331703b4e4ecf3f20296c86e7c1c99b7249f2bc53fd4cfccfc63d49431a65c58b134cb948096d9348df60881c7be04f67d45e8df81cfada5e00352a77e1f7a4b96aa7d96b095555946691b44051144482e61969837139fce2f6076d82b92de16c7fd9fd5b46fc576cd740bffc58e2f949c3ec4fb272b10a969a61fd11bcc504a2c3b8214944ca379dd8122bdcdfcc4a7706189294e0f7494f5ac5b03f99b485a582606d60e4eb662ba67384b1492898760aa844f18d1baa1ec4270ec4ddfa9088a47eee7bc3a8ad146a17da5300740034a0704b3877dbb9930d138358a934a99d2e3b18b1b094c26e7be12ee29221fe32fe1c622cba1330b692b3f7e09485f6bc5fd8e5f75e8f547a3434f19a9c819518dffdafbc8a5a9c6621969ede9d5024bc7bbc82fd8a697d1fdf1c4d053084e3d3f01640119f527a0ded6bcd148b90136f920cb005c108e004634f1bee75fff9189e1e02e45c868bab4f9ed9d56b58af764e858ab7f97965af3ad293fd606de1ea1b768ebe41c12456c6dce7c76719447ed9c65f7190d9be355db8c60c3044422c184c2c807cac210d69c17e4df549fe3216ce564f010cc9b2a9fc9a53bb306c4578261d30d0d3d977ceca2ffb785063c74ca2c994e106a67ec9e30ead7c099e71e675a9bf75c095b4c39dc0d0cd0e6996b10224f1ced775a8a76590d76cb333f6cd265de7d32412dfaf544657831a688d9d3cb46abb42831b087cd20fa5d646e80475b00f1e82532aeee83d3c78e722df841bd3e36cc961932af65443f50d9cf51d682e73eb4f3874f529a2381c98f86992cc7ed781a76dfce0d06d86e79674f504dea33656d23c2d75bf7ac93c20d32a98d95c51b39ba6a507c686abaef6caf9790ae977f4e6493bdc7425be5325f90526d4be882be519f3c75ef963a7a68128cd57ce6c6c7b37be6a7820a803e50dacd3e1a735e5c24087af1e01df6239ccd44b8041c7890defcfca177f53719cacec2f7581543d2830b0c88ec678de71aa27a39c554c45ebad40e0b6f4cb6280ac622a07cefe79ad5e7dc6ef6aa0ad07757faf53a705f91816d06e67952a9be268b6673a8732c3394fc94334059f701b907335d23e4176656157321741a00a365efb56f2f183b7bb96cd42b93b4da0791bd34fdf544bcf165c7eb6be5f0d889e9acb203619ef18adbda456241c446a1adbf685f4f938fab25e00a0d8c1021cee52d4ddeac5f1c5ab4c6062775a174ad139b3184895e6ac4ff1d84b96a5140bd3b346b60bf863e162061848298956333709f92b76e65dea95e2f75f946374f3cb0613258d5d8f655c7fab0d76669697fd0dabcae6d5f3bc616d802688f36d3811b01b69c6384b40fead1aa25e04dfb16376b852ae33c325518f078db0462d9222e073ee030df615f4110af9a6c3351fb4bcb4ae56983baaaabac83f452d6fea9b399c3e05a2a802c2cac0cd08bb406b0837e0ec746b5816acb11e93632f8dffe3d2dd160f671f482cd42b3a40b4cda9a8a8357100a267444d705a5b1399f84c1a1fdce574d1132344bf03d45785bbc0cc9557e18e2ded032b7d6d08ac8b9f6ed2a879333a6fb47b8dcd668d82e866d863c6675a8df9e48418d62b48afa3c2fe7da0cddefc3bf2a00de32cde9fea9a1198d8d0aed47fd3b319d70b41fa61a5ff3ba09cb5aa5e77f55882d3d7cd2b5b1b78c01ae1d8c3a4519179e55a883f92c77b1796851738899f63167556ad249263f30b2916434e2d319a2a799ec81c6805ba68ad8d11365fa83f4556568713fdd4134bbdcbac6f7a615db27b732a5ec71a2d619096558c7e0deb2259d631248fa9b76f851c8fcd2ba5f28284d84c5c3ced07e457666dc89880475d799d59ec0dff9a0b86797b4bbcfaf56dc4e23f0c275e561ad24d300f2c14a2bb3749c5b436ffc189bf208c7aca2b4a152d6b798211ae3972fc8278b0f12652e4c0910e4bfbaaff45de5b617be619ecd50f8dcf32f2ad275f2d5a4c11a1a02ad618e483ed544c1a40f09d23380b190c7ca9db3dad7338bc640906c8c3888160ce3d3f5e3ecbb0cb322691aed3492a535933ac98cf38397e4d9e05b7ca895fae01dc5cb49f8a74012e3fdf1afdd4d9914b620bfbc120762749b1350eb72f9f47b272a3282e4faf0fa39414736f10f59b36a4faca0c17b8ea36713b193bd4c6d0f8cfe1d9b0f6b417c92c776c4938ef6b7b58e2c9ae5c9159c2d95b44db1e1a431d34e2ed1c1da053b037059a20edea1f5eeb39e3777e30e00df989776161b10bf0677ba5642bdc0b0ac938d57ba9c6cf6afa8c67259ec2395dc7b4c3248d8cf60ae22626b9ed19d61a5f60fdd0d79dd7618823c09c3bef8dcc6bddb270c412fe080f40329cdc9b556cd03e0cb355ff1085212c7e7c396e5be726656e365b4fc80050f150e96e3fce14558724a5c6b3fecdc6e9baed9d9e69346560f1634ec6f7c9d6c6950f979c0fe5982bff9c5e9225d95a7c00879df814cefd2c0b0dade2bcbe1a01f685e2c94ef7f895a4e26a497652f46d04ce1d8b4fac593e72eb6469886f0e621615178078f5284a0ecd8d7630c65348217c8861dbbe4e43aff5e89c05d0c1f6076c125fac82d92ca9721ca844ccbbfd0f4511c819014d483be9d92d3f75a5624dd15b918c9dc9a5e8f1c2bf73876381ca6c8e493d9ba11eb5537994f929412ba0f6cf4631ce6a4781feda801f8ae32e825396e50e2d70cd2986511efb510ed20fde9bc5eb0445d7197f7bb980b2ea4e4c69eb32b637ba103d38c7f8ba57cee6d0b57bfae80b07a2e038619564f57bca73728797b2baa6ce4815dc1998cf6ed525b6989ce4379fc6dce77d2babf747a5f987bccefb2d4fd43da13c79783ebdde6954c3a849156c20641616aa6f568957af69be9f2d57feb1593d63db07a38252abd08ee8bd763e0801bc15b7c2cc1ba7214e5e95ce16fad014881d3b781d1317e7abe089801b9d693184cf79d767ecbdb727e239a96db7e7d3d911645ab76fd41b4ef4216bad25c0a74cdf6453d46"}) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000001080), &(0x7f00000010c0)=0x4) (async) pipe2$watch_queue(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000001140)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000011c0), r1) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x240080}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x24, r4, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x48080) (async) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) (async) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000012c0), 0x800, 0x0) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000001300)={0x0, 0x10000}, &(0x7f0000001340)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000001380)={r6, 0x0, 0x30, 0x1ff, 0x330}, &(0x7f00000013c0)=0x18) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000001400)={0x5, 0xc0a3, 0x2e7b3f8ec9570b61, 0x1ff, 0xe5, 0x5, 0x9, 0xfffffffb, r6}, 0x20) (async) r8 = signalfd4(r3, &(0x7f0000001440)={[0x80]}, 0x8, 0x80000) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000014c0)={0x5, &(0x7f0000001480)=[{0x1ff, 0xfa, 0xe, 0x4}, {0x5, 0xd, 0xfa, 0x9}, {0x5, 0x7, 0x7c, 0x7c548eb7}, {0x3, 0xbc, 0x1, 0x9}, {0x8, 0x3, 0xdb, 0x7fff}]}, 0x10) (async) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000001500)={0x0, 0xd, "df983e", 0x2, 0x7}) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe) (async) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) (async) io_uring_enter(r1, 0x2e2e, 0x447e, 0x2, &(0x7f0000001540)={[0x7]}, 0x8) mmap$snddsp_status(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x1000005, 0x100010, r1, 0x82000000) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r9, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x18040400}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x50, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000080}, 0x8000) (async) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000016c0), &(0x7f0000001700)=0x4) (async) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001740)='/sys/kernel/uevent_helper', 0x8000, 0x14) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r10, 0x84, 0xc, &(0x7f0000001780)=0x6, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000017c0)={r7, 0xb6, "5985c5faa023b14634cbdabfc2a044648aa85678f74e6efff78e3accb797bd65afa61f9d8b80005020fc91f1bf926475e52dee0270ce6c4ab1517151489df2fa3250f21551143cfea4c5372524b65c3b0e717d2042c05cb3bed0efb953b72ad6ca58f047b047c34872aab8a16d68edc915843ba7c7ba0a1f8b876e1f9b4194e9a813b483de7df4512a69fb020bf21a70a6d104cbf9a00af7eafa0b2d8eacfad206f8a20be9f5ee2631a75c3a92c9a479895c0b459aec"}, &(0x7f0000001880)=0xbe) (async) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f00000018c0)) (async) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000001900)=0x80, 0x1) 341.445µs ago: executing program 1 (id=4393): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x9, &(0x7f0000000000)=0x4, 0x4) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0), 0x5acaf572b6c42570}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000080)="45e969ab09d7473dd6e491", 0xb}) (async, rerun: 32) close_range(r0, r0, 0x0) (rerun: 32) 0s ago: executing program 7 (id=4394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000091) kernel console output (not intermixed with test programs): _u:object_r:unlabeled_t tclass=peer permissive=1 [ 482.970798][T17088] xt_hashlimit: size too large, truncated to 1048576 [ 483.071949][T15370] usb 11-1: config index 0 descriptor too short (expected 1307, got 27) [ 483.075009][T15370] usb 11-1: config 0 has an invalid interface number: 0 but max is -1 [ 483.077583][T15370] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 483.086285][T15370] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 483.089581][T15370] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 483.094611][T15370] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 483.097848][T15370] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 483.113945][T15370] usb 11-1: string descriptor 0 read error: -22 [ 483.115964][T15370] usb 11-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 483.119131][T15370] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.129164][T15370] usb 11-1: config 0 descriptor?? [ 483.135258][T17081] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 483.139134][T15370] hub 11-1:0.0: bad descriptor, ignoring hub [ 483.142363][T15370] hub 11-1:0.0: probe with driver hub failed with error -5 [ 483.149264][T15370] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input43 [ 483.199227][T15370] libceph: connect (1)[c::]:6789 error -101 [ 483.201328][T15370] libceph: mon0 (1)[c::]:6789 connect error [ 483.248395][T17098] ceph: No mds server is up or the cluster is laggy [ 483.330282][ T5983] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 483.439926][ T24] usb 11-1: USB disconnect, device number 9 [ 483.517054][ T5983] usb 14-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 483.522189][ T5983] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.526537][ T5983] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.530559][ T5983] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 483.538890][ T5983] usb 14-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 483.542672][ T5983] usb 14-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 483.545811][ T5983] usb 14-1: Manufacturer: syz [ 483.551395][ T5983] usb 14-1: config 0 descriptor?? [ 483.739173][T17124] netlink: 'syz.7.3250': attribute type 29 has an invalid length. [ 483.742641][T17125] netlink: 'syz.7.3250': attribute type 29 has an invalid length. [ 483.969299][ T5983] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 483.975682][ T5983] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 483.985502][T17134] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3253'. [ 483.987557][ T5983] appleir 0003:05AC:8243.0009: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 483.988540][T17134] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3253'. [ 484.249227][T17151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.253845][T17151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.262654][T17094] fuse: root generation should be zero [ 484.450151][T17160] binder: 17159:17160 ioctl 4018620d 0 returned -22 [ 484.454904][ T6439] usb 14-1: USB disconnect, device number 9 [ 484.607873][T17162] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3260'. [ 484.700133][ T6003] usb 13-1: new full-speed USB device number 3 using dummy_hcd [ 484.840338][ T6003] usb 13-1: device descriptor read/64, error -71 [ 485.023411][T17176] bpf: Bad value for 'uid' [ 485.110169][ T6003] usb 13-1: new full-speed USB device number 4 using dummy_hcd [ 485.250326][ T6003] usb 13-1: device descriptor read/64, error -71 [ 485.350086][T15369] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 485.362809][ T6003] usb usb13-port1: attempt power cycle [ 485.510076][T15369] usb 11-1: Using ep0 maxpacket: 8 [ 485.516842][T15369] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 485.520385][T15369] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 485.523469][T15369] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 485.526568][T15369] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 485.529707][T15369] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.533882][T15369] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 485.536767][T15369] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.591059][T17206] netlink: 'syz.9.3275': attribute type 4 has an invalid length. [ 485.710129][ T6003] usb 13-1: new full-speed USB device number 5 using dummy_hcd [ 485.733661][ T6003] usb 13-1: device descriptor read/8, error -71 [ 485.758169][T15369] usb 11-1: usb_control_msg returned -32 [ 485.760067][T15369] usbtmc 11-1:16.0: can't read capabilities [ 485.942188][T17220] xt_recent: Unsupported userspace flags (000000c7) [ 485.970175][ T6003] usb 13-1: new full-speed USB device number 6 using dummy_hcd [ 485.992506][ T6003] usb 13-1: device descriptor read/8, error -71 [ 486.028929][T17225] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3282'. [ 486.101597][ T6003] usb usb13-port1: unable to enumerate USB device [ 486.117523][T17226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.121560][T17226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.225748][T17229] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3283'. [ 486.235616][T17227] netlink: 'syz.7.3282': attribute type 4 has an invalid length. [ 486.244829][T17229] 9pnet_fd: Insufficient options for proto=fd [ 486.391747][T17232] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3284'. [ 486.397173][T17232] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3284'. [ 487.012885][T17237] kAFS: unparsable volume name [ 487.239364][T17242] netlink: 236 bytes leftover after parsing attributes in process `syz.9.3288'. [ 487.288792][T17242] overlayfs: missing 'workdir' [ 487.300973][T17242] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 487.562915][T17261] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 487.565185][T17261] macvtap1: entered allmulticast mode [ 487.566797][T17261] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 487.569984][T17261] batman_adv: batadv0: Adding interface: macvtap1 [ 487.574546][T17261] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.582414][T17261] batman_adv: batadv0: Interface activated: macvtap1 [ 487.720807][T17275] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3297'. [ 487.723631][T17275] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3297'. [ 487.847447][ T40] kauditd_printk_skb: 1573 callbacks suppressed [ 487.847496][ T40] audit: type=1400 audit(1750598378.745:543597): avc: denied { recv } for pid=5855 comm="syz-executor" saddr=127.0.0.1 src=54054 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 487.859483][ T40] audit: type=1400 audit(1750598378.755:543598): avc: denied { read write } for pid=15380 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 487.870366][ T40] audit: type=1400 audit(1750598378.755:543599): avc: denied { read write open } for pid=15380 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 487.878269][ T40] audit: type=1400 audit(1750598378.755:543600): avc: denied { ioctl } for pid=15380 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 487.886553][ T40] audit: type=1400 audit(1750598378.765:543601): avc: denied { recv } for pid=15380 comm="syz-executor" saddr=10.0.2.2 src=37598 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 487.902107][ T40] audit: type=1400 audit(1750598378.765:543602): avc: denied { create } for pid=17282 comm="syz.9.3302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 487.908959][ T40] audit: type=1400 audit(1750598378.765:543603): avc: denied { ioctl } for pid=17282 comm="syz.9.3302" path="socket:[83365]" dev="sockfs" ino=83365 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 487.918970][ T40] audit: type=1400 audit(1750598378.795:543604): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54054 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 487.927079][ T40] audit: type=1400 audit(1750598378.795:543605): avc: denied { read write } for pid=15383 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 487.934580][ T40] audit: type=1400 audit(1750598378.795:543606): avc: denied { create } for pid=17284 comm="syz.7.3303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 488.052635][T17293] random: crng reseeded on system resumption [ 488.065299][T17293] Restarting kernel threads ... [ 488.067137][T17293] Done restarting kernel threads. [ 488.108256][ T6021] usb 11-1: USB disconnect, device number 10 [ 488.634725][T15245] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 488.790099][T15245] usb 14-1: Using ep0 maxpacket: 32 [ 488.796532][T15245] usb 14-1: config 0 has no interfaces? [ 488.798292][T15245] usb 14-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 488.804384][T15245] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.811485][T15245] usb 14-1: config 0 descriptor?? [ 488.859621][T17328] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3318'. [ 488.865722][T17328] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 488.868849][T17328] batadv_slave_1: entered promiscuous mode [ 489.021091][ T6439] usb 14-1: USB disconnect, device number 10 [ 489.091284][T17330] pim6reg1: entered promiscuous mode [ 489.093015][T17330] pim6reg1: entered allmulticast mode [ 489.457882][T17339] kvm: pic: non byte write [ 489.461525][T17339] kvm: vcpu 0: requested 80 ns lapic timer period limited to 200000 ns [ 489.482257][T17339] Invalid source name [ 489.483889][T17339] UBIFS error (pid: 17339): cannot open "/dev/sg0", error -22 [ 489.510121][ T6439] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 489.670616][ T6439] usb 11-1: Using ep0 maxpacket: 16 [ 489.683705][ T6439] usb 11-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 32 [ 489.688427][ T6439] usb 11-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 489.696664][ T6439] usb 11-1: config 1 interface 0 has no altsetting 0 [ 489.712913][ T6439] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 489.716840][ T6439] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.719434][ T6439] usb 11-1: Product: 堀떓ê½ïœšæ‘‰ïŸ£å±µî°™åµƒå›¢ïŸ°ì¦·å©¬ë®‘㢃Ꭺᗇꊗæï³ éƒ·ì‹šï©ëŽî ’Èꭚ쬫钋먚﫠濻埊쮄൪çºë¬—瞈崓áä„î¥î‘ªïµ–æšç¤†æ€›é£³ï™ã¨“ƾⷰဈé‘腣஻ⶖ鞪舊癞텼䷔庭á”㸕듗棬ë¸è°¼á­¯é§é°¾à¿’á•ᣊ [ 489.730919][ T6439] usb 11-1: Manufacturer: ј [ 489.732518][ T6439] usb 11-1: SerialNumber: syz [ 489.745011][T17335] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 489.748574][T17335] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 489.830146][T17355] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 489.853251][T17355] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 489.857095][T17355] overlayfs: missing 'lowerdir' [ 489.965635][ T6439] usb 11-1: USB disconnect, device number 11 [ 490.518622][T17371] kvm: kvm [17369]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x3620202020202020 [ 490.630602][T15245] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 490.787258][T17384] netlink: 116 bytes leftover after parsing attributes in process `syz.6.3337'. [ 490.815074][T15245] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 490.819990][T15245] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 490.824314][T15245] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 490.831063][T15245] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.845446][T17366] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 490.852519][T15245] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 490.881892][T17388] input: syz1 as /devices/virtual/input/input44 [ 490.924074][T17388] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 491.080619][ T5983] usb 13-1: USB disconnect, device number 7 [ 491.111462][T17402] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3343'. [ 491.115481][T17402] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3343'. [ 491.221132][T17409] bpq0: left promiscuous mode [ 491.222756][T17409] bpq0: left allmulticast mode [ 491.237184][T17409] SELinux: truncated policydb string identifier [ 491.239239][T17409] SELinux: failed to load policy [ 491.254069][T17415] overlayfs: failed to resolve './file0': -2 [ 491.257708][T17409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.266973][T17409] bond0: (slave rose0): Enslaving as an active interface with an up link [ 491.303529][T17410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.372207][T17425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.374889][T17425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.396931][T17428] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3348'. [ 491.589252][T17425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.592209][T17425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.610120][ T5983] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 491.674028][T17440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3352'. [ 491.674046][T17439] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3352'. [ 491.750087][ T5983] usb 14-1: device descriptor read/64, error -71 [ 492.000226][ T5983] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 492.122447][T17452] xt_hashlimit: max too large, truncated to 1048576 [ 492.125966][T17452] xt_bpf: check failed: parse error [ 492.142477][ T5983] usb 14-1: device descriptor read/64, error -71 [ 492.250533][ T5983] usb usb14-port1: attempt power cycle [ 492.305196][T17467] batman_adv: batadv0: Adding interface: veth0_macvtap [ 492.307446][T17467] batman_adv: batadv0: The MTU of interface veth0_macvtap is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.310865][T17468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=17468 comm=syz.8.3361 [ 492.315484][T17467] batman_adv: batadv0: Interface activated: veth0_macvtap [ 492.596740][ T5983] usb 14-1: new high-speed USB device number 13 using dummy_hcd [ 492.618724][T17483] bridge0: port 2(syz_tun) entered blocking state [ 492.620922][T17483] bridge0: port 2(syz_tun) entered disabled state [ 492.622991][T17483] syz_tun: entered allmulticast mode [ 492.625311][T17483] syz_tun: entered promiscuous mode [ 492.627117][T17483] bridge0: port 2(syz_tun) entered blocking state [ 492.629088][T17483] bridge0: port 2(syz_tun) entered forwarding state [ 492.632170][ T5983] usb 14-1: device descriptor read/8, error -71 [ 492.853549][ T40] kauditd_printk_skb: 1495 callbacks suppressed [ 492.853560][ T40] audit: type=1400 audit(1750598383.755:545102): avc: denied { create } for pid=17487 comm="syz.6.3370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 492.866040][ T40] audit: type=1400 audit(1750598383.765:545103): avc: denied { create } for pid=17487 comm="syz.6.3370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 492.874490][ T40] audit: type=1400 audit(1750598383.765:545104): avc: denied { ioctl } for pid=17487 comm="syz.6.3370" path="socket:[85219]" dev="sockfs" ino=85219 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 492.883542][ T40] audit: type=1400 audit(1750598383.765:545105): avc: denied { create } for pid=17487 comm="syz.6.3370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 492.889913][ T40] audit: type=1400 audit(1750598383.785:545106): avc: denied { recv } for pid=5855 comm="syz-executor" saddr=127.0.0.1 src=54054 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 492.900288][ T40] audit: type=1400 audit(1750598383.795:545107): avc: denied { recv } for pid=5854 comm="sshd-session" saddr=10.0.2.2 src=37598 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 492.902426][ T5983] usb 14-1: new high-speed USB device number 14 using dummy_hcd [ 492.907949][ T40] audit: type=1400 audit(1750598383.805:545108): avc: denied { read write } for pid=15378 comm="syz-executor" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 492.918179][ T40] audit: type=1400 audit(1750598383.805:545109): avc: denied { read write open } for pid=15378 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 492.926018][ T40] audit: type=1400 audit(1750598383.805:545110): avc: denied { ioctl } for pid=15378 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 492.934114][ T40] audit: type=1400 audit(1750598383.835:545111): avc: denied { recv } for pid=0 comm="swapper/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54054 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 492.943032][ T5983] usb 14-1: device descriptor read/8, error -71 [ 493.061914][ T5983] usb usb14-port1: unable to enumerate USB device [ 493.288299][T17499] sch_fq: defrate 0 ignored. [ 493.366514][T17499] sp0: Synchronizing with TNC [ 493.789304][T17515] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3379'. [ 493.973170][T17534] syz_tun: entered promiscuous mode [ 493.975422][T17534] batadv_slave_0: entered promiscuous mode [ 493.977809][T17534] hsr2: entered allmulticast mode [ 493.979628][T17534] syz_tun: entered allmulticast mode [ 493.983275][T17534] batadv_slave_0: entered allmulticast mode [ 494.017045][T17542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.348266][T17560] nfs: Unknown parameter '$ÿÿÿÿs•' [ 494.515179][T17574] afs: Unknown parameter '' [ 494.632083][T17569] could not allocate digest TFM handle cryptd(blake2b-160) [ 494.936815][T17602] netlink: 'syz.7.3407': attribute type 2 has an invalid length. [ 494.941472][ T94] Bluetooth: Error in BCSP hdr checksum [ 495.040360][T17616] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 495.121590][T17623] overlayfs: failed to resolve './file1': -2 [ 495.126713][T17623] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3413'. [ 495.138148][T17623] xt_hashlimit: size too large, truncated to 1048576 [ 495.141646][T17622] Trying to write to read-only block-device nullb0 [ 495.149361][T17623] Cannot find del_set index 4 as target [ 495.327057][T17641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17641 comm=syz.6.3418 [ 496.192435][T17698] loop4: detected capacity change from 0 to 7 [ 496.195131][T17698] Dev loop4: unable to read RDB block 7 [ 496.197483][T17698] loop4: unable to read partition table [ 496.199643][T17698] loop4: partition table beyond EOD, truncated [ 496.202273][T17698] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 496.483549][T17704] program syz.6.3437 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 497.010179][T15974] Bluetooth: hci0: command 0x1003 tx timeout [ 497.010658][T15818] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 497.286248][T17738] 8021q: VLANs not supported on nr0 [ 497.662183][T17417] usb 14-1: new high-speed USB device number 15 using dummy_hcd [ 497.833570][T15818] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 497.839616][T17417] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 497.842680][T17417] usb 14-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 497.845924][T17417] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 497.850996][T17417] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 497.855897][T17417] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 497.863010][ T40] kauditd_printk_skb: 1699 callbacks suppressed [ 497.863024][ T40] audit: type=1400 audit(1750598388.765:546811): avc: denied { ioctl } for pid=17740 comm="syz.9.3450" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 497.874894][T17417] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 497.877183][ T40] audit: type=1400 audit(1750598388.765:546812): avc: denied { ioctl } for pid=17740 comm="syz.9.3450" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 497.878641][T17417] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 497.888919][T17417] usb 14-1: Product: syz [ 497.891207][ T40] audit: type=1400 audit(1750598388.765:546813): avc: denied { ioctl } for pid=17740 comm="syz.9.3450" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 497.891235][ T40] audit: type=1400 audit(1750598388.765:546814): avc: denied { ioctl } for pid=17740 comm="syz.9.3450" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 497.891259][ T40] audit: type=1400 audit(1750598388.765:546815): avc: denied { ioctl } for pid=17740 comm="syz.9.3450" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 497.891281][ T40] audit: type=1400 audit(1750598388.775:546816): avc: denied { ioctl } for pid=17740 comm="syz.9.3450" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 497.891305][ T40] audit: type=1400 audit(1750598388.775:546817): avc: denied { recv } for pid=5855 comm="syz-executor" saddr=127.0.0.1 src=54054 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 497.891327][ T40] audit: type=1400 audit(1750598388.785:546818): avc: denied { recv } for pid=5854 comm="sshd-session" saddr=10.0.2.2 src=37598 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 497.893752][ T40] audit: type=1400 audit(1750598388.795:546819): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 497.903202][T17417] usb 14-1: Manufacturer: syz [ 497.912984][ T40] audit: type=1400 audit(1750598388.795:546820): avc: denied { sendto } for pid=23 comm="ksoftirqd/2" saddr=fe80::1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 497.929545][T17417] cdc_wdm 14-1:1.0: skipping garbage [ 497.956712][T17417] cdc_wdm 14-1:1.0: skipping garbage [ 497.960726][T17417] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 497.963201][T17417] cdc_wdm 14-1:1.0: Unknown control protocol [ 498.132428][T15369] usb 14-1: USB disconnect, device number 15 [ 498.278745][T17789] netlink: 236 bytes leftover after parsing attributes in process `syz.8.3462'. [ 498.645653][T17796] netlink: 666 bytes leftover after parsing attributes in process `syz.6.3464'. [ 499.228455][T17824] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 499.343179][T17828] netlink: 'syz.8.3472': attribute type 6 has an invalid length. [ 499.345829][T17828] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.3472'. [ 499.416652][T17837] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 246 [ 499.572474][T17842] max out of range [ 499.579210][T17842] max out of range [ 500.385932][T17865] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3486'. [ 500.437107][T17868] netlink: 'syz.6.3487': attribute type 2 has an invalid length. [ 500.440717][T17868] netlink: 1184 bytes leftover after parsing attributes in process `syz.6.3487'. [ 500.458586][T17869] vcan1: entered allmulticast mode [ 500.600166][T15369] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 500.605602][T17880] FAULT_INJECTION: forcing a failure. [ 500.605602][T17880] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 500.609510][T17880] CPU: 3 UID: 0 PID: 17880 Comm: syz.6.3490 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 500.609525][T17880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 500.609532][T17880] Call Trace: [ 500.609536][T17880] [ 500.609540][T17880] dump_stack_lvl+0x16c/0x1f0 [ 500.609575][T17880] should_fail_ex+0x512/0x640 [ 500.609595][T17880] _copy_to_user+0x32/0xd0 [ 500.609611][T17880] snd_ctl_ioctl+0xe95/0x1320 [ 500.609625][T17880] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 500.609641][T17880] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 500.609658][T17880] ? hook_file_ioctl_common+0x145/0x410 [ 500.609678][T17880] ? selinux_file_ioctl+0x180/0x270 [ 500.609691][T17880] ? selinux_file_ioctl+0xb4/0x270 [ 500.609705][T17880] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 500.609719][T17880] __x64_sys_ioctl+0x18e/0x210 [ 500.609733][T17880] do_syscall_64+0xcd/0x4c0 [ 500.609749][T17880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.609759][T17880] RIP: 0033:0x7f2531f8e929 [ 500.609768][T17880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.609778][T17880] RSP: 002b:00007f2532e50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 500.609788][T17880] RAX: ffffffffffffffda RBX: 00007f25321b5fa0 RCX: 00007f2531f8e929 [ 500.609794][T17880] RDX: 0000200000000540 RSI: 00000000c4c85512 RDI: 0000000000000004 [ 500.609800][T17880] RBP: 00007f2532e50090 R08: 0000000000000000 R09: 0000000000000000 [ 500.609806][T17880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.609812][T17880] R13: 0000000000000000 R14: 00007f25321b5fa0 R15: 00007ffee6e53f88 [ 500.609824][T17880] [ 500.709988][T17884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.775458][T15369] usb 13-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 500.778295][T15369] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.790084][T15369] usb 13-1: Product: syz [ 500.791443][T15369] usb 13-1: Manufacturer: syz [ 500.793033][T15369] usb 13-1: SerialNumber: syz [ 500.809449][T15369] usb 13-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 500.862011][T15369] usb 13-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 500.975249][T17892] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.065402][ T6021] usb 13-1: USB disconnect, device number 8 [ 501.095512][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.288240][T17908] FAULT_INJECTION: forcing a failure. [ 501.288240][T17908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.292981][T17908] CPU: 3 UID: 0 PID: 17908 Comm: syz.6.3499 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 501.292997][T17908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 501.293003][T17908] Call Trace: [ 501.293008][T17908] [ 501.293012][T17908] dump_stack_lvl+0x16c/0x1f0 [ 501.293031][T17908] should_fail_ex+0x512/0x640 [ 501.293047][T17908] _copy_to_user+0x32/0xd0 [ 501.293062][T17908] simple_read_from_buffer+0xcb/0x170 [ 501.293077][T17908] proc_fail_nth_read+0x197/0x270 [ 501.293091][T17908] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 501.293104][T17908] ? rw_verify_area+0xcf/0x680 [ 501.293116][T17908] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 501.293128][T17908] vfs_read+0x1e4/0xc60 [ 501.293143][T17908] ? __pfx___mutex_lock+0x10/0x10 [ 501.293158][T17908] ? __pfx_vfs_read+0x10/0x10 [ 501.293174][T17908] ? __fget_files+0x20e/0x3c0 [ 501.293191][T17908] ksys_read+0x12a/0x250 [ 501.293203][T17908] ? __pfx_ksys_read+0x10/0x10 [ 501.293216][T17908] ? fput+0x70/0xf0 [ 501.293233][T17908] do_syscall_64+0xcd/0x4c0 [ 501.293249][T17908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.293260][T17908] RIP: 0033:0x7f2531f8d33c [ 501.293269][T17908] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 501.293279][T17908] RSP: 002b:00007f2532e50030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 501.293295][T17908] RAX: ffffffffffffffda RBX: 00007f25321b5fa0 RCX: 00007f2531f8d33c [ 501.293301][T17908] RDX: 000000000000000f RSI: 00007f2532e500a0 RDI: 0000000000000005 [ 501.293307][T17908] RBP: 00007f2532e50090 R08: 0000000000000000 R09: 0000000000000000 [ 501.293313][T17908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.293319][T17908] R13: 0000000000000000 R14: 00007f25321b5fa0 R15: 00007ffee6e53f88 [ 501.293332][T17908] [ 501.527615][T15818] Bluetooth: hci2: unexpected event for opcode 0x080d [ 501.534764][T17912] serio: Serial port ptm0 [ 501.699685][T17917] netlink: 'syz.7.3501': attribute type 10 has an invalid length. [ 501.710422][T17917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.716377][T17917] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 501.754084][T17917] bond0: (slave batadv0): Releasing backup interface [ 501.823272][T17919] 9pnet_fd: Insufficient options for proto=fd [ 501.890131][T15369] ath9k_htc 13-1:1.0: ath9k_htc: Target is unresponsive [ 501.893030][T15369] ath9k_htc: Failed to initialize the device [ 501.896024][ T6021] usb 13-1: ath9k_htc: USB layer deinitialized [ 502.143713][T17947] xt_l2tp: v2 tid > 0xffff: 150994944 [ 502.163871][T17950] xt_l2tp: v2 tid > 0xffff: 150994944 [ 502.431167][T17963] kvm: pic: non byte write [ 502.474470][T17985] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 502.481465][T17988] netlink: 14560 bytes leftover after parsing attributes in process `syz.9.3524'. [ 502.670329][T17993] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3526'. [ 502.674859][T17993] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3526'. [ 502.874704][ T40] kauditd_printk_skb: 1538 callbacks suppressed [ 502.874714][ T40] audit: type=1400 audit(1750598393.775:548359): avc: denied { create } for pid=18007 comm="syz.8.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 502.890115][ T40] audit: type=1400 audit(1750598393.785:548360): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=54054 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 502.898475][ T40] audit: type=1400 audit(1750598393.785:548361): avc: denied { create } for pid=18007 comm="syz.8.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 502.910791][ T40] audit: type=1400 audit(1750598393.785:548362): avc: denied { write } for pid=18007 comm="syz.8.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 502.930091][ T40] audit: type=1400 audit(1750598393.785:548363): avc: denied { read } for pid=18007 comm="syz.8.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 502.936475][ T40] audit: type=1400 audit(1750598393.785:548364): avc: denied { read } for pid=18007 comm="syz.8.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 502.950087][ T40] audit: type=1400 audit(1750598393.785:548365): avc: denied { getopt } for pid=18007 comm="syz.8.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 502.970086][ T40] audit: type=1400 audit(1750598393.785:548366): avc: denied { write } for pid=18007 comm="syz.8.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 502.976457][ T40] audit: type=1400 audit(1750598393.785:548367): avc: denied { write } for pid=18007 comm="syz.8.3531" path="socket:[87438]" dev="sockfs" ino=87438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 502.984667][ T40] audit: type=1400 audit(1750598393.795:548368): avc: denied { write } for pid=18007 comm="syz.8.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 503.193938][T18026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.197523][T18026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.227647][T18030] tmpfs: Bad value for 'mpol' [ 503.430109][ T24] usb 11-1: new full-speed USB device number 12 using dummy_hcd [ 503.465161][T18041] Can't find ip_set type bitmap:ip [ 503.603899][ T24] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 503.608432][ T24] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 503.619119][T18057] netlink: 'syz.8.3546': attribute type 21 has an invalid length. [ 503.623204][ T24] usb 11-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 503.628684][T18057] netlink: 156 bytes leftover after parsing attributes in process `syz.8.3546'. [ 503.639205][ T24] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 503.643047][ T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 503.646213][ T24] usb 11-1: SerialNumber: syz [ 503.656592][T18027] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 503.663751][T18060] overlayfs: missing 'lowerdir' [ 503.670607][ T24] cdc_ether 11-1:1.0: probe with driver cdc_ether failed with error -22 [ 503.760053][T18066] netlink: 'syz.7.3550': attribute type 16 has an invalid length. [ 503.762462][T18066] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.3550'. [ 503.878794][T18026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18026 comm=syz.6.3538 [ 503.884659][ T6021] usb 11-1: USB disconnect, device number 12 [ 503.892058][T18070] IPVS: length: 184 != 55320 [ 504.102097][T18090] binder: 18082:18090 ioctl c0306201 0 returned -14 [ 504.569692][T18106] netlink: 'syz.9.3564': attribute type 11 has an invalid length. [ 504.573118][T18106] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.3564'. [ 504.578712][T18106] netlink: 'syz.9.3564': attribute type 10 has an invalid length. [ 504.603492][T18106] team0: Port device wlan1 added [ 504.609243][T18106] netlink: 212376 bytes leftover after parsing attributes in process `syz.9.3564'. [ 504.628657][T18104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.007608][T18120] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.3569'. [ 505.017020][T18122] openvswitch: netlink: Duplicate or invalid key (type 0). [ 505.019349][T18122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.104400][T18127] sp0: Synchronizing with TNC [ 505.254124][T18132] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3572'. [ 505.346957][T18147] random: crng reseeded on system resumption [ 505.347121][T15818] block nbd8: Receive control failed (result -32) [ 505.354772][T18138] block nbd8: shutting down sockets [ 505.399144][T18148] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3576'. [ 505.429770][T15818] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 505.590377][T15818] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 505.594557][T15818] Bluetooth: hci2: Injecting HCI hardware error event [ 505.601188][T15974] Bluetooth: hci2: hardware error 0x00 [ 505.681942][T18166] netlink: 'syz.6.3581': attribute type 1 has an invalid length. [ 505.684334][T18166] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3581'. [ 505.888841][T18186] tmpfs: Bad value for 'mpol' [ 506.128627][T18195] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3589'. [ 506.265588][T18200] xt_hashlimit: size too large, truncated to 1048576 [ 506.509683][T18190] delete_channel: no stack [ 506.524768][T18213] ipvlan0: entered promiscuous mode [ 506.527407][T18213] bridge0: port 3(ipvlan0) entered blocking state [ 506.529507][T18213] bridge0: port 3(ipvlan0) entered disabled state [ 506.537670][T18213] ipvlan0: entered allmulticast mode [ 506.539321][T18213] bridge0: entered allmulticast mode [ 506.546970][T18213] ipvlan0: left allmulticast mode [ 506.548550][T18213] bridge0: left allmulticast mode [ 506.824215][T18229] netlink: 'syz.7.3596': attribute type 142 has an invalid length. [ 506.861650][T18234] netlink: 'syz.9.3598': attribute type 10 has an invalid length. [ 506.863908][T18234] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3598'. [ 506.875015][T18234] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 506.877746][T18234] team0: Failed to send options change via netlink (err -105) [ 506.879914][T18234] team0: Port device geneve0 added [ 507.024126][T18245] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3601'. [ 507.091509][T18249] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 507.095608][T18249] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 507.313686][T18253] netlink: 'syz.7.3604': attribute type 1 has an invalid length. [ 507.316433][T18253] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3604'. [ 507.355718][T18262] usb usb8: usbfs: process 18262 (syz.9.3607) did not claim interface 0 before use [ 507.499326][ T60] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 507.650218][T15974] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 507.885256][ T40] kauditd_printk_skb: 2631 callbacks suppressed [ 507.885273][ T40] audit: type=1400 audit(1750598398.775:550625): avc: denied { read open } for pid=18282 comm="syz.8.3613" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 507.901177][ T40] audit: type=1400 audit(1750598398.775:550626): avc: denied { ioctl } for pid=18282 comm="syz.8.3613" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 507.908619][ T40] audit: type=1400 audit(1750598398.775:550627): avc: denied { recv } for pid=5854 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54054 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 507.916440][ T40] audit: type=1400 audit(1750598398.775:550628): avc: denied { read write } for pid=15380 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 507.923888][ T40] audit: type=1400 audit(1750598398.775:550629): avc: denied { read write open } for pid=15380 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 507.932991][ T40] audit: type=1400 audit(1750598398.785:550630): avc: denied { recv } for pid=5854 comm="sshd-session" saddr=127.0.0.1 src=54054 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 507.942073][ T40] audit: type=1400 audit(1750598398.785:550631): avc: denied { read write open } for pid=15378 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 507.949704][ T40] audit: type=1400 audit(1750598398.785:550632): avc: denied { ioctl } for pid=15378 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 507.958524][ T40] audit: type=1400 audit(1750598398.795:550633): avc: denied { ioctl } for pid=15380 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 507.968215][ T40] audit: type=1400 audit(1750598398.795:550634): avc: denied { recv } for pid=5854 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54054 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 508.195164][T18299] kvm: kvm [18296]: vcpu2, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x60000000000 [ 508.512424][T18311] batadv_slave_1 (unregistering): left promiscuous mode [ 508.807116][T18319] netlink: 'syz.9.3621': attribute type 1 has an invalid length. [ 508.828261][T18323] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=18323 comm=syz.8.3622 [ 509.025681][T18336] xt_NFQUEUE: number of total queues is 0 [ 509.326853][T18355] SELinux: security policydb version 18 (MLS) not backwards compatible [ 509.329300][T18355] SELinux: failed to load policy [ 509.564447][T18367] netlink: 'syz.7.3639': attribute type 4 has an invalid length. [ 509.573356][T18367] netlink: 'syz.7.3639': attribute type 4 has an invalid length. [ 509.712247][T18373] Cannot find del_set index 1 as target [ 509.777731][T18378] kAFS: unparsable volume name [ 509.944703][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.947940][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.986912][T18385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.996655][T18385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.006625][T18389] netlink: 'syz.7.3647': attribute type 1 has an invalid length. [ 510.006919][T18390] netlink: 'syz.7.3647': attribute type 1 has an invalid length. [ 510.048990][T18389] 8021q: adding VLAN 0 to HW filter on device bond2 [ 510.052294][T18389] bond1: (slave bond2): making interface the new active one [ 510.055127][T18389] bond1: (slave bond2): Enslaving as an active interface with an up link [ 510.325041][T18395] __nla_validate_parse: 6 callbacks suppressed [ 510.325052][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3648'. [ 510.664929][T18406] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3652'. [ 510.856497][T18412] sg_write: data in/out 327644/10 bytes for SCSI command 0xfd-- guessing data in; [ 510.856497][T18412] program syz.8.3653 not setting count and/or reply_len properly [ 511.030602][T18420] netlink: 'syz.8.3656': attribute type 1 has an invalid length. [ 511.033851][T18421] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 511.068381][T18420] 8021q: adding VLAN 0 to HW filter on device bond2 [ 511.100600][T18424] sctp: [Deprecated]: syz.7.3657 (pid 18424) Use of struct sctp_assoc_value in delayed_ack socket option. [ 511.100600][T18424] Use struct sctp_sack_info instead [ 511.322596][T18427] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 511.421663][T18439] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3660'. [ 511.427001][T18439] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3660'. [ 511.594973][ T1142] nci: nci_ntf_packet: unknown ntf opcode 0xa08 [ 511.663883][T18456] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3662'. [ 511.877100][T18456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.885476][T18456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.890275][T18456] bond0 (unregistering): Released all slaves [ 512.692754][T18477] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.895794][ T40] kauditd_printk_skb: 1939 callbacks suppressed [ 512.895809][ T40] audit: type=1400 audit(1750598403.795:552523): avc: denied { create } for pid=18490 comm="syz.7.3674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 512.907787][ T40] audit: type=1400 audit(1750598403.805:552524): avc: denied { recv } for pid=5855 comm="syz-executor" saddr=127.0.0.1 src=54054 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 512.917865][ T40] audit: type=1400 audit(1750598403.805:552525): avc: denied { recv } for pid=18490 comm="syz.7.3674" saddr=10.0.2.2 src=37598 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 512.929305][ T40] audit: type=1400 audit(1750598403.805:552526): avc: denied { read write } for pid=15383 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 512.933719][T18484] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3672'. [ 512.939597][ T40] audit: type=1400 audit(1750598403.805:552527): avc: denied { read write open } for pid=15383 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 512.949290][ T40] audit: type=1400 audit(1750598403.805:552528): avc: denied { ioctl } for pid=15383 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 512.958384][ T40] audit: type=1400 audit(1750598403.815:552529): avc: denied { prog_load } for pid=18490 comm="syz.7.3674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 512.976552][ T40] audit: type=1400 audit(1750598403.815:552530): avc: denied { bpf } for pid=18490 comm="syz.7.3674" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 512.986458][ T40] audit: type=1400 audit(1750598403.815:552531): avc: denied { perfmon } for pid=18490 comm="syz.7.3674" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 512.991437][T18495] audit: audit_backlog=65 > audit_backlog_limit=64 [ 513.024797][T18497] netlink: 'syz.7.3676': attribute type 1 has an invalid length. [ 513.027207][T18497] netlink: 208 bytes leftover after parsing attributes in process `syz.7.3676'. [ 513.030239][T18497] netlink: 'syz.7.3676': attribute type 1 has an invalid length. [ 513.032661][T18497] netlink: 'syz.7.3676': attribute type 2 has an invalid length. [ 513.035473][T18498] netlink: 'syz.7.3676': attribute type 1 has an invalid length. [ 513.037921][T18498] netlink: 208 bytes leftover after parsing attributes in process `syz.7.3676'. [ 513.040881][T18498] netlink: 'syz.7.3676': attribute type 1 has an invalid length. [ 513.043913][T18498] netlink: 'syz.7.3676': attribute type 2 has an invalid length. [ 513.261474][T18507] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 513.268638][T18505] lo: entered promiscuous mode [ 513.274627][T18505] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3679'. [ 513.277845][T18505] tunl0: entered promiscuous mode [ 513.281950][T18505] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3679'. [ 513.285050][T18505] gre0: entered promiscuous mode [ 513.296789][T18505] gretap0: entered promiscuous mode [ 513.300860][T18505] erspan0: entered promiscuous mode [ 513.305860][T18505] ip_vti0: entered promiscuous mode [ 513.310973][T18505] ip6_vti0: entered promiscuous mode [ 513.316928][T18505] sit0: entered promiscuous mode [ 513.326381][T18505] ip6tnl0: entered promiscuous mode [ 513.331947][T18505] ip6gre0: entered promiscuous mode [ 513.347030][T18505] ip6gretap0: entered promiscuous mode [ 513.356408][T18505] bridge0: entered promiscuous mode [ 513.364728][T18505] vcan0: entered promiscuous mode [ 513.370436][T18505] bond0: entered promiscuous mode [ 513.377289][T18505] tipc: Resetting bearer [ 513.383572][T18505] team0: entered promiscuous mode [ 513.393291][T18505] dummy0: entered promiscuous mode [ 513.403884][T18505] nlmon0: entered promiscuous mode [ 513.413740][T18505] vxcan0: entered promiscuous mode [ 513.421397][T18505] vxcan1: entered promiscuous mode [ 513.433566][T18505] veth0: entered promiscuous mode [ 513.442294][T18505] veth1: entered promiscuous mode [ 513.454052][T18505] wg0: entered promiscuous mode [ 513.458765][T18505] wg1: left allmulticast mode [ 513.464727][T18505] wg2: entered promiscuous mode [ 513.471295][T18505] veth0_to_bridge: entered promiscuous mode [ 513.479115][T18505] bridge_slave_0: entered promiscuous mode [ 513.485915][T18505] veth1_to_bridge: entered promiscuous mode [ 513.495947][T18505] bridge_slave_1: entered promiscuous mode [ 513.501448][T18505] veth0_to_bond: entered promiscuous mode [ 513.507895][T18505] bond_slave_0: entered promiscuous mode [ 513.515027][T18505] veth1_to_bond: entered promiscuous mode [ 513.519591][T18505] bond_slave_1: entered promiscuous mode [ 513.523982][T18505] veth0_to_team: entered promiscuous mode [ 513.536762][T18505] team_slave_0: entered promiscuous mode [ 513.542730][T18505] veth1_to_team: entered promiscuous mode [ 513.551802][T18505] team_slave_1: entered promiscuous mode [ 513.556215][T18505] veth0_to_batadv: entered promiscuous mode [ 513.573199][T18505] xfrm0: entered promiscuous mode [ 513.579738][T18505] veth0_to_hsr: entered promiscuous mode [ 513.593514][T18505] veth1_to_hsr: entered promiscuous mode [ 513.606203][T18505] hsr0: entered promiscuous mode [ 513.614174][T18505] veth1_virt_wifi: entered promiscuous mode [ 513.622545][T18505] veth0_virt_wifi: entered promiscuous mode [ 513.628638][T18505] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 513.645201][T18505] vlan1: entered promiscuous mode [ 513.648759][T18505] macvlan0: entered promiscuous mode [ 513.654962][T18505] macvlan1: entered promiscuous mode [ 513.662249][T18505] ipvlan0: entered promiscuous mode [ 513.664123][T18505] ipvlan1: entered promiscuous mode [ 513.681164][T18505] macvtap0: entered promiscuous mode [ 513.686625][T18505] macsec0: entered promiscuous mode [ 513.708361][T18505] geneve0: entered promiscuous mode [ 513.727465][T18505] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.730703][T18505] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.733628][T18505] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.736552][T18505] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.741829][T18505] geneve1: entered promiscuous mode [ 513.756183][T18505] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 513.770301][T18505] netdevsim netdevsim7 netdevsim1: entered promiscuous mode [ 513.785087][T18505] netdevsim netdevsim7 netdevsim2: entered promiscuous mode [ 513.797097][T18505] netdevsim netdevsim7 netdevsim3: entered promiscuous mode [ 513.863795][T18505] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode [ 513.867582][T18505] gtp0: entered promiscuous mode [ 513.869230][T18505] hsr1: entered promiscuous mode [ 513.873020][T18505] hsr2: entered promiscuous mode [ 513.874544][T18505] hsr2: left allmulticast mode [ 513.876003][T18505] syz_tun: left allmulticast mode [ 513.877540][T18505] batadv_slave_0: left allmulticast mode [ 513.881475][T18505] bridge1: entered promiscuous mode [ 513.883176][T18505] bridge2: entered promiscuous mode [ 513.885173][T18505] vcan1: entered promiscuous mode [ 513.886772][T18505] vcan1: left allmulticast mode [ 513.889284][T18505] syztnl0: entered promiscuous mode [ 513.895540][T18505] gtp1: entered promiscuous mode [ 513.905669][T18505] vlan2: entered promiscuous mode [ 513.908046][T18505] vxlan0: entered promiscuous mode [ 513.910562][T18505] veth1_vlan.0002: entered promiscuous mode [ 513.913352][T18505] erspan1: entered promiscuous mode [ 513.915596][T18505] bond1: entered promiscuous mode [ 513.917668][T18505] bond2: entered promiscuous mode [ 514.164355][T18527] program syz.6.3684 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 514.179242][T18527] wg1: entered promiscuous mode [ 514.180956][T18527] wg1: entered allmulticast mode [ 514.398892][T18535] FAULT_INJECTION: forcing a failure. [ 514.398892][T18535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.406752][T18535] CPU: 1 UID: 0 PID: 18535 Comm: syz.6.3689 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 514.406769][T18535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 514.406776][T18535] Call Trace: [ 514.406780][T18535] [ 514.406784][T18535] dump_stack_lvl+0x16c/0x1f0 [ 514.406820][T18535] should_fail_ex+0x512/0x640 [ 514.406840][T18535] _copy_from_iter+0x29f/0x16f0 [ 514.406857][T18535] ? __pfx__copy_from_iter+0x10/0x10 [ 514.406873][T18535] ? _kstrtoull+0x145/0x200 [ 514.406883][T18535] ? __pfx__kstrtoull+0x10/0x10 [ 514.406896][T18535] tun_get_user+0x240/0x3b80 [ 514.406917][T18535] ? __pfx_tun_get_user+0x10/0x10 [ 514.406931][T18535] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 514.406949][T18535] ? find_held_lock+0x2b/0x80 [ 514.406962][T18535] ? tun_get+0x191/0x370 [ 514.406978][T18535] tun_chr_write_iter+0xdc/0x210 [ 514.406993][T18535] vfs_write+0x6c7/0x1150 [ 514.407007][T18535] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 514.407023][T18535] ? __pfx_vfs_write+0x10/0x10 [ 514.407034][T18535] ? find_held_lock+0x2b/0x80 [ 514.407054][T18535] ksys_write+0x12a/0x250 [ 514.407066][T18535] ? __pfx_ksys_write+0x10/0x10 [ 514.407079][T18535] ? fput+0x70/0xf0 [ 514.407096][T18535] do_syscall_64+0xcd/0x4c0 [ 514.407112][T18535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.407127][T18535] RIP: 0033:0x7f2531f8e929 [ 514.407137][T18535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.407146][T18535] RSP: 002b:00007f2532e50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 514.407156][T18535] RAX: ffffffffffffffda RBX: 00007f25321b5fa0 RCX: 00007f2531f8e929 [ 514.407163][T18535] RDX: 0000000000000fce RSI: 0000200000002200 RDI: 0000000000000003 [ 514.407169][T18535] RBP: 00007f2532e50090 R08: 0000000000000000 R09: 0000000000000000 [ 514.407174][T18535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.407180][T18535] R13: 0000000000000000 R14: 00007f25321b5fa0 R15: 00007ffee6e53f88 [ 514.407193][T18535] [ 516.673318][T18587] netlink: 'syz.6.3704': attribute type 21 has an invalid length. [ 516.681284][T18589] netlink: 'syz.6.3704': attribute type 21 has an invalid length. [ 517.113923][T18603] tipc: Enabled bearer , priority 0 [ 517.121850][T18605] nbd: must specify a size in bytes for the device [ 517.122327][T18603] syzkaller0: MTU too low for tipc bearer [ 517.125843][T18603] tipc: Disabling bearer [ 517.901079][ T40] kauditd_printk_skb: 2047 callbacks suppressed [ 517.901094][ T40] audit: type=1400 audit(517.799:554574): avc: denied { ioctl } for pid=18620 comm="syz.8.3715" path="/dev/video1" dev="devtmpfs" ino=956 ioctlcmd=0x565a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 517.902725][T18622] xt_l2tp: v2 tid > 0xffff: 150994944 [ 517.910231][ T40] audit: type=1400 audit(517.799:554575): avc: denied { recv } for pid=5855 comm="syz-executor" saddr=127.0.0.1 src=54054 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 517.923132][ T40] audit: type=1400 audit(517.799:554576): avc: denied { recv } for pid=5854 comm="sshd-session" saddr=10.0.2.2 src=37598 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 517.931908][ T40] audit: type=1400 audit(517.829:554577): avc: denied { read write } for pid=15380 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 517.939649][ T40] audit: type=1400 audit(517.829:554578): avc: denied { read write open } for pid=15380 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 517.961782][ T40] audit: type=1400 audit(517.829:554579): avc: denied { ioctl } for pid=15380 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 517.974102][ T40] audit: type=1400 audit(517.859:554580): avc: denied { recv } for pid=5328 comm="syslogd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54054 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 517.984052][ T40] audit: type=1400 audit(517.859:554581): avc: denied { recv } for pid=5328 comm="syslogd" saddr=127.0.0.1 src=54054 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 517.994114][ T40] audit: type=1400 audit(517.859:554582): avc: denied { read } for pid=18620 comm="syz.8.3715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 518.002219][ T40] audit: type=1400 audit(517.859:554583): avc: denied { read } for pid=18620 comm="syz.8.3715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 518.185894][T18635] input: syz1 as /devices/virtual/input/input46 [ 518.232005][T18635] __nla_validate_parse: 82 callbacks suppressed [ 518.232013][T18635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3719'. [ 518.239973][T18635] bond0: entered promiscuous mode [ 518.243036][T18635] bond_slave_0: entered promiscuous mode [ 518.244957][T18635] bond_slave_1: entered promiscuous mode [ 518.254348][T18635] bond0: left promiscuous mode [ 518.257754][T18635] bond_slave_0: left promiscuous mode [ 518.260284][T18635] bond_slave_1: left promiscuous mode [ 518.261082][T18630] ip6t_srh: unknown srh invflags 7863 [ 518.606219][T18644] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3722'. [ 518.660808][T18646] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3723'. [ 518.664352][T18646] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3723'. [ 518.678005][T18646] xt_policy: output policy not valid in PREROUTING and INPUT [ 518.702812][T18648] xt_hashlimit: size too large, truncated to 1048576 [ 518.758992][T18651] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3724'. [ 518.787028][T18652] tipc: Started in network mode [ 518.788635][T18652] tipc: Node identity 2, cluster identity 4711 [ 518.792206][T18652] tipc: Node number set to 2 [ 519.423169][T18674] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3729'. [ 519.427683][T18680] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3729'. [ 519.430877][T18674] SET target dimension over the limit! [ 519.699609][T18688] xt_NFQUEUE: number of total queues is 0 [ 520.119098][T18701] ptrace attach of "/syz-executor exec"[15383] was attempted by "e6áõŽ!EÌX—{­·d•Ч> 0  ì\x0d ±S¼­=¶Ö(sÏ‚dWeC\x0cû$ZÛã3{P2°÷0 ”h{ì½+h†:O+Óß\x0dTËòÛĹn*…Ì|u’Xš@T?¦kÿªn@ŠE—fç¤sKÍ\x0c¶_ý(ð·ÚÝãýÁXåÇ–J†]á9¾ùf\x07;ZðO¨ìM0ÀJ_D3|y}MôŠ¿¶þ¢l˜–ªÓS’‡É{ˆÈcœQÜå|—nn+ï2fµÝo~œ…uðî›Y2k‰úŸ&>SÀÄ÷`õÅ ·Ù¨ålg†ž2L‹ôÖò˜ initial count (200000 ns). Using initial count to start timer. [ 520.890720][T18737] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3751'. [ 521.439092][T18764] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 521.443112][T18764] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 521.445839][T18764] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 521.448559][T18764] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 521.454378][T18766] overlayfs: conflicting options: nfs_export=on,index=off [ 522.462830][T18783] netlink: 'syz.8.3768': attribute type 4 has an invalid length. [ 522.466113][T18782] netlink: 'syz.8.3768': attribute type 4 has an invalid length. [ 522.847806][T18801] dlm: non-version read from control device 0 [ 522.938344][ T40] kauditd_printk_skb: 2057 callbacks suppressed [ 522.938361][ T40] audit: type=1400 audit(522.829:556641): avc: denied { sys_module } for pid=18798 comm="syz.8.3775" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 522.949705][ T40] audit: type=1400 audit(522.829:556642): avc: denied { module_request } for pid=18798 comm="syz.8.3775" kmod="syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 522.956634][ T40] audit: type=1400 audit(522.849:556643): avc: denied { execmem } for pid=18790 comm="syz.7.3771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 522.962526][ T40] audit: type=1400 audit(522.859:556644): avc: denied { create } for pid=18790 comm="syz.7.3771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 522.968655][ T40] audit: type=1400 audit(522.859:556645): avc: denied { write } for pid=18790 comm="syz.7.3771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 522.973899][T18792] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3771'. [ 522.975032][ T40] audit: type=1400 audit(522.859:556646): avc: denied { read } for pid=18790 comm="syz.7.3771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 522.983733][ T40] audit: type=1400 audit(522.859:556647): avc: denied { read } for pid=18790 comm="syz.7.3771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 522.989832][ T40] audit: type=1400 audit(522.869:556648): avc: denied { write } for pid=18790 comm="syz.7.3771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 522.998378][ T40] audit: type=1400 audit(522.889:556649): avc: denied { recv } for pid=5855 comm="syz-executor" saddr=127.0.0.1 src=54054 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 523.010986][ T40] audit: type=1400 audit(522.909:556650): avc: denied { recv } for pid=40 comm="kauditd" saddr=10.0.2.2 src=37598 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 523.165619][T15974] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 523.386839][T18828] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3783'. [ 523.648227][T18844] delete_channel: no stack [ 523.693359][T18847] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3789'. [ 523.697360][T18847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18847 comm=syz.8.3789 [ 523.977546][T18856] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3792'. [ 524.043400][T18859] netfs: Couldn't get user pages (rc=-14) [ 524.098286][T18861] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3794'. [ 524.105052][T18861] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3794'. [ 524.232672][T18864] netlink: 3696 bytes leftover after parsing attributes in process `syz.6.3797'. [ 524.235495][T18864] netlink: 3696 bytes leftover after parsing attributes in process `syz.6.3797'. [ 524.238355][T18866] netlink: 3696 bytes leftover after parsing attributes in process `syz.6.3797'. [ 524.243298][T18866] netlink: 3696 bytes leftover after parsing attributes in process `syz.6.3797'. [ 524.267514][T18864] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3797'. [ 524.506120][T18879] binder: 18877:18879 ioctl 400c620e 200000001580 returned -22 [ 524.616011][T15818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 524.626950][T15818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 524.631337][T15818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 524.634265][T15818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 524.637644][T15818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 524.862563][T18886] chnl_net:caif_netlink_parms(): no params data found [ 524.946039][T18886] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.948690][T18886] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.951821][T18886] bridge_slave_0: entered allmulticast mode [ 524.955097][T18886] bridge_slave_0: entered promiscuous mode [ 524.960336][T18886] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.961939][T18903] binder: 18902:18903 ioctl c0046209 0 returned -22 [ 524.962873][T18886] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.969818][T18886] bridge_slave_1: entered allmulticast mode [ 524.974569][T18886] bridge_slave_1: entered promiscuous mode [ 525.009565][T18886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.016579][T18886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.135769][T18916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=18916 comm=syz.7.3811 [ 525.184850][T18886] team0: Port device team_slave_0 added [ 525.192690][T18886] team0: Port device team_slave_1 added [ 525.236785][T18886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.239044][T18886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.248060][T18886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.253630][T18886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.255850][T18886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.264585][T18886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.308987][T18886] hsr_slave_0: entered promiscuous mode [ 525.312664][T18886] hsr_slave_1: entered promiscuous mode [ 525.314723][T18886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 525.317660][T18886] Cannot create hsr debugfs directory [ 525.722881][T18886] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 525.728319][T18886] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 525.742728][ T34] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 525.743732][T18886] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 525.754589][T18886] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 525.913252][ T34] usb 12-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 525.916372][ T34] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.918850][ T34] usb 12-1: Product: syz [ 525.920909][ T34] usb 12-1: Manufacturer: syz [ 525.922397][ T34] usb 12-1: SerialNumber: syz [ 525.934328][ T34] usb 12-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 525.972130][ T34] usb 12-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 526.084931][T18886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.104060][T18886] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.114492][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.116731][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.139531][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.141837][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.196970][ T6021] usb 12-1: USB disconnect, device number 5 [ 526.489708][T18886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.539700][T18886] veth0_vlan: entered promiscuous mode [ 526.554717][T18886] veth1_vlan: entered promiscuous mode [ 526.594674][T18886] veth0_macvtap: entered promiscuous mode [ 526.609828][T18886] veth1_macvtap: entered promiscuous mode [ 526.631984][T18886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.643207][T18886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.651854][T18886] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.654590][T18886] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.657419][T18886] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.660635][T18886] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.690438][T15974] Bluetooth: hci0: command tx timeout [ 526.817878][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.821173][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.853333][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.856050][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.021569][ T34] ath9k_htc 12-1:1.0: ath9k_htc: Target is unresponsive [ 527.024589][ T34] ath9k_htc: Failed to initialize the device [ 527.027422][ T6021] usb 12-1: ath9k_htc: USB layer deinitialized [ 527.208040][T19004] l2tp_mt_check: 21 callbacks suppressed [ 527.208051][T19004] xt_l2tp: invalid flags combination: c [ 527.943617][ T40] kauditd_printk_skb: 2074 callbacks suppressed [ 527.943627][ T40] audit: type=1400 audit(527.839:558725): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54054 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 527.967794][ T40] audit: type=1400 audit(527.839:558726): avc: denied { read write } for pid=15380 comm="syz-executor" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 527.975146][ T40] audit: type=1400 audit(527.839:558727): avc: denied { read write open } for pid=15380 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 527.982680][ T40] audit: type=1400 audit(527.839:558728): avc: denied { ioctl } for pid=15380 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=665 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 527.991274][ T40] audit: type=1400 audit(527.839:558729): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=54054 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 528.000575][ T40] audit: type=1400 audit(527.849:558730): avc: denied { recv } for pid=5854 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54054 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 528.007883][ T40] audit: type=1400 audit(527.849:558731): avc: denied { recv } for pid=5854 comm="sshd-session" saddr=10.0.2.2 src=37598 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 528.017253][ T40] audit: type=1400 audit(527.849:558732): avc: denied { recv } for pid=5854 comm="sshd-session" saddr=10.0.2.2 src=37598 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 528.028998][ T40] audit: type=1400 audit(527.859:558733): avc: denied { recv } for pid=5854 comm="sshd-session" saddr=10.0.2.2 src=37598 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 528.037430][ T40] audit: type=1400 audit(527.859:558734): avc: denied { recv } for pid=5854 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54054 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 528.128733][T19060] binder: Bad value for 'max' [ 528.771857][T15974] Bluetooth: hci0: command tx timeout [ 529.083551][T19102] netlink: 'syz.7.3869': attribute type 1 has an invalid length. [ 529.086008][T19102] netlink: 'syz.7.3869': attribute type 4 has an invalid length. [ 529.088412][T19102] __nla_validate_parse: 6 callbacks suppressed [ 529.088419][T19102] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.3869'. [ 529.252654][T19113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3871'. [ 529.445621][T19113] bond0: (slave bond_slave_1): Releasing backup interface [ 529.618689][T19135] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3877'. [ 529.708774][T19145] CIFS mount error: No usable UNC path provided in device string! [ 529.708774][T19145] [ 529.708811][T19147] netdevsim netdevsim7 ªªªªªª: renamed from netdevsim0 [ 529.712024][T19145] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 529.719236][T19144] Cannot find del_set index 128 as target [ 530.049564][T19167] program syz.7.3888 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 530.055193][T19167] program syz.7.3888 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 530.089395][T19171] input: syz1 as /devices/virtual/input/input47 [ 530.157752][T19176] netlink: 'syz.6.3889': attribute type 28 has an invalid length. [ 530.160479][T19176] netlink: 'syz.6.3889': attribute type 3 has an invalid length. [ 530.162991][T19176] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3889'. [ 530.167349][T19171] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3886'. [ 530.171087][T19171] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3886'. [ 530.369687][T19181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3891'. [ 530.381762][T19181] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.384842][T19181] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.387561][T19181] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.390396][T19181] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.395761][T19181] vxlan0: entered promiscuous mode [ 530.522212][T19188] openvswitch: netlink: Missing key (keys=40, expected=80) [ 530.850954][T15974] Bluetooth: hci0: command tx timeout [ 531.028894][T19211] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 531.032176][T19211] tipc: Enabled bearer , priority 10 [ 531.307107][T19220] trusted_key: encrypted_key: insufficient parameters specified [ 531.427477][T19231] SELinux: policydb version 759576698 does not match my version range 15-34 [ 531.430993][T19231] SELinux: failed to load policy [ 531.660187][T19241] SELinux: failed to load policy [ 531.690470][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 531.859316][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 531.876248][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 531.890544][ T24] usb 6-1: New USB device found, idVendor=093a, idProduct=8003, bcdDevice= 0.40 [ 531.896677][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.899995][ T24] usb 6-1: Product: syz [ 531.901853][ T24] usb 6-1: Manufacturer: syz [ 531.906443][ T24] usb 6-1: SerialNumber: syz [ 532.143693][T19259] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3916'. [ 532.148783][T19260] nfs: Unknown parameter '/dev/iommu' [ 532.156368][ T24] usbhid 6-1:1.0: can't add hid device: -71 [ 532.158365][ T24] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 532.163724][ T24] usb 6-1: USB disconnect, device number 14 [ 532.168988][T19263] nfs: Unknown parameter '' [ 532.557904][T19283] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3923'. [ 532.562245][T19284] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3923'. [ 533.014977][T15974] Bluetooth: hci0: command tx timeout [ 533.049398][ T40] kauditd_printk_skb: 2296 callbacks suppressed [ 533.049408][ T40] audit: type=1400 audit(1049116.862:560935): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54054 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 533.065131][ T40] audit: type=1400 audit(1049116.862:560936): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=54054 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 533.076101][ T40] audit: type=1400 audit(1049116.881:560937): avc: denied { recv } for pid=5854 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54054 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 533.086532][ T40] audit: type=1400 audit(1049116.881:560938): avc: denied { recv } for pid=19296 comm="syz.8.3926" saddr=10.0.2.2 src=37598 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 533.095555][ T40] audit: type=1400 audit(1049116.881:560939): avc: denied { recv } for pid=19296 comm="syz.8.3926" saddr=10.0.2.2 src=37598 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 533.107463][ T40] audit: type=1400 audit(1049116.881:560940): avc: denied { recv } for pid=5854 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54054 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 533.124797][ T40] audit: type=1400 audit(1049116.890:560941): avc: denied { recv } for pid=5855 comm="syz-executor" saddr=127.0.0.1 src=54054 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 533.133646][ T40] audit: type=1400 audit(1049116.890:560942): avc: denied { recv } for pid=19296 comm="syz.8.3926" saddr=10.0.2.2 src=37598 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 533.141257][ T40] audit: type=1400 audit(1049116.890:560943): avc: denied { create } for pid=19299 comm="syz.6.3927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 533.152157][ T40] audit: type=1400 audit(1049116.900:560944): avc: denied { create } for pid=19299 comm="syz.6.3927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 533.487353][T19329] tipc: New replicast peer: 0.0.0.0 [ 533.498594][T19329] tipc: Enabled bearer , priority 10 [ 533.500502][T19329] netlink: 'syz.6.3936': attribute type 4 has an invalid length. [ 533.532392][T19329] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 533.824583][T19350] ieee802154 phy0 wpan0: encryption failed: -22 [ 534.542101][T19379] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 534.606308][T19381] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 534.947976][T19389] cgroup: noprefix used incorrectly [ 535.051315][T19393] binder: BINDER_SET_CONTEXT_MGR already set [ 535.053226][T19393] binder: 19392:19393 ioctl 4018620d 200000000040 returned -16 [ 535.056665][T19393] binder: 19392:19393 ioctl c0306201 200000000240 returned -11 [ 535.106225][T19398] ref_ctr_offset mismatch. inode: 0x9c offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 535.252056][T19408] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 535.540438][T19430] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 535.542913][T19430] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 535.545317][T19430] __nla_validate_parse: 1 callbacks suppressed [ 535.545326][T19430] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3970'. [ 535.546450][T19428] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 535.563018][T19430] bridge1: entered promiscuous mode [ 535.893019][T19454] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3975'. [ 535.895854][T19454] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3975'. [ 535.903056][T19454] netlink: 'syz.8.3975': attribute type 19 has an invalid length. [ 535.945395][T19456] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3978'. [ 535.948336][T19456] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3978'. [ 536.140262][T19461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3981'. [ 536.218649][T19468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3983'. [ 536.366687][T19476] x_tables: duplicate underflow at hook 2 [ 536.414090][T19476] netlink: 'syz.7.3986': attribute type 23 has an invalid length. [ 536.827265][T19487] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3990'. [ 536.835417][T19487] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3990'. [ 536.842131][T19485] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3990'. [ 536.845901][T19485] openvswitch: netlink: Unknown nsh attribute 0 [ 536.848204][T19485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.135322][T19499] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.139126][T19499] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.142913][T19499] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.146429][T19499] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.195518][T15974] Bluetooth: hci5: unexpected event for opcode 0x0c38 [ 537.328997][T19507] ip6gretap2: entered promiscuous mode [ 537.330794][T19507] ip6gretap2: entered allmulticast mode [ 537.661381][T19523] 9pnet_fd: Insufficient options for proto=fd [ 537.742762][T19523] Bluetooth: MGMT ver 1.23 [ 537.747501][T19523] tipc: Started in network mode [ 537.749095][T19523] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 537.756030][T19523] tipc: Enabled bearer , priority 10 [ 537.969981][T19537] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 538.061273][ T24] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 538.142202][T19543] macsec1: entered promiscuous mode [ 538.145038][T19543] bridge0: port 1(macsec1) entered blocking state [ 538.149945][T19543] bridge0: port 1(macsec1) entered disabled state [ 538.152780][T19543] macsec1: entered allmulticast mode [ 538.155000][T19543] bridge0: entered allmulticast mode [ 538.159360][T19543] macsec1: left allmulticast mode [ 538.161000][T19543] bridge0: left allmulticast mode [ 538.252934][ T24] usb 11-1: Using ep0 maxpacket: 16 [ 538.264541][ T24] usb 11-1: config 1 has an invalid interface number: 6 but max is 2 [ 538.268806][ T24] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 538.273053][ T24] usb 11-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 538.280246][ T24] usb 11-1: config 1 has no interface number 1 [ 538.282832][ T24] usb 11-1: config 1 interface 6 altsetting 148 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 538.288335][ T24] usb 11-1: config 1 interface 6 has no altsetting 0 [ 538.303655][ T24] usb 11-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 538.307909][ T24] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.311781][ T24] usb 11-1: Product: á [ 538.313618][ T24] usb 11-1: Manufacturer: 〠[ 538.315625][ T24] usb 11-1: SerialNumber: Ñ [ 538.403290][ T40] kauditd_printk_skb: 2222 callbacks suppressed [ 538.403301][ T40] audit: type=1400 audit(1049121.876:563167): avc: denied { recv } for pid=5854 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54054 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 538.412906][ T40] audit: type=1400 audit(1049121.876:563168): avc: denied { recv } for pid=5855 comm="syz-executor" saddr=127.0.0.1 src=54054 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 538.413773][T19551] openvswitch: netlink: nsh attr 0 has unexpected len 4 expected 0 [ 538.420675][ T40] audit: type=1400 audit(1049121.876:563169): avc: denied { create } for pid=19550 comm="syz.1.4009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 538.423973][T19551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.430159][ T40] audit: type=1400 audit(1049121.885:563170): avc: denied { write } for pid=19550 comm="syz.1.4009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 538.451309][ T40] audit: type=1400 audit(1049121.913:563171): avc: denied { read } for pid=19550 comm="syz.1.4009" name="media1" dev="devtmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 538.459147][ T40] audit: type=1400 audit(1049121.923:563172): avc: denied { read open } for pid=19550 comm="syz.1.4009" path="/dev/media1" dev="devtmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 538.467274][ T40] audit: type=1400 audit(1049121.923:563173): avc: denied { ioctl } for pid=19550 comm="syz.1.4009" path="/dev/media1" dev="devtmpfs" ino=958 ioctlcmd=0x7c05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 538.559074][ T24] usb 11-1: 0:2 : does not exist [ 538.569139][ T40] audit: type=1400 audit(1049122.026:563174): avc: denied { recv } for pid=5855 comm="syz-executor" saddr=127.0.0.1 src=54054 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 538.573956][ T24] usb 11-1: USB disconnect, device number 13 [ 538.583584][ T40] audit: type=1400 audit(1049122.026:563175): avc: denied { recv } for pid=5854 comm="sshd-session" saddr=10.0.2.2 src=37598 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 538.594143][ T40] audit: type=1400 audit(1049122.035:563176): avc: denied { read write } for pid=18886 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 538.829800][ T10] tipc: Node number set to 4269801488 [ 539.448864][T19579] binder: 19578:19579 ioctl c0306201 200000000240 returned -14 [ 539.464933][T19579] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 540.076911][T19622] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19622 comm=syz.7.4028 [ 540.231119][T19634] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 540.236646][T19634] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 540.240661][ C0] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 540.248469][T19634] openvswitch: netlink: IP tunnel dst address not specified [ 540.356373][ T94] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 540.362551][T19639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 540.383982][T19648] tmpfs: Bad value for 'huge' [ 540.535947][T19658] loop6: detected capacity change from 0 to 63 [ 540.566102][T19658] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 540.568758][T19658] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 540.571398][T19658] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 540.577469][T19658] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 540.580415][T19658] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 540.585702][T19658] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 540.588390][T19658] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 540.591639][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 540.614189][T19658] ipvlan2: entered promiscuous mode [ 540.616893][T19658] bridge0: port 3(ipvlan2) entered blocking state [ 540.618954][T19658] bridge0: port 3(ipvlan2) entered disabled state [ 540.621078][T19658] ipvlan2: entered allmulticast mode [ 540.622729][T19658] bridge0: entered allmulticast mode [ 540.625365][T19658] ipvlan2: left allmulticast mode [ 540.631030][T19658] bridge0: left allmulticast mode [ 541.032327][T19683] netlink: 'syz.1.4045': attribute type 2 has an invalid length. [ 541.035823][T19683] __nla_validate_parse: 5 callbacks suppressed [ 541.035831][T19683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4045'. [ 541.462612][T19718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4056'. [ 541.467789][T19718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4056'. [ 541.470944][T15974] Bluetooth: hci5: Malformed HCI Event [ 541.471676][T19718] netlink: 'syz.1.4056': attribute type 13 has an invalid length. [ 541.591482][T15974] Bluetooth: hci6: ACL packet for unknown connection handle 1 [ 541.605425][T19724] ptrace attach of "/syz-executor exec"[19729] was attempted by "/syz-executor exec"[19724] [ 541.612240][T19724] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4059'. [ 541.654231][T19724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19724 comm=syz.8.4059 [ 541.655963][T19726] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4058'. [ 542.167229][T19749] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4066'. [ 542.402575][T19758] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4069'. [ 542.405537][T19758] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4069'. [ 542.636627][T19772] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 542.721216][T19776] syz.1.4074: attempt to access beyond end of device [ 542.721216][T19776] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 542.725216][T19776] (syz.1.4074,19776,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 542.727655][T19776] (syz.1.4074,19776,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 542.729862][T19776] (syz.1.4074,19776,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 542.732656][T19776] (syz.1.4074,19776,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 542.825676][T19778] overlay: Unknown parameter 'fsname' [ 542.899838][T19782] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4077'. [ 542.910388][T19782] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4077'. [ 543.242972][T19793] vlan0: entered promiscuous mode [ 543.245322][T19793] bridge0: entered promiscuous mode [ 543.247374][T19793] vlan0: entered allmulticast mode [ 543.249264][T19793] bridge0: entered allmulticast mode [ 543.252524][T19794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 543.512664][T19804] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 543.676490][T19817] netlink: 'syz.6.4090': attribute type 11 has an invalid length. [ 543.727001][T19818] netlink: 'syz.6.4090': attribute type 11 has an invalid length. [ 543.774877][ T40] kauditd_printk_skb: 2236 callbacks suppressed [ 543.774888][ T40] audit: type=1400 audit(1049126.899:565413): avc: denied { recv } for pid=15378 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54054 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 543.787852][ T40] audit: type=1400 audit(1049126.899:565414): avc: denied { recv } for pid=15378 comm="syz-executor" saddr=127.0.0.1 src=54054 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 543.796670][ T40] audit: type=1400 audit(1049126.899:565415): avc: denied { prog_load } for pid=19821 comm="syz.1.4092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 543.803345][ T40] audit: type=1400 audit(1049126.899:565416): avc: denied { bpf } for pid=19821 comm="syz.1.4092" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 543.809675][ T40] audit: type=1400 audit(1049126.899:565417): avc: denied { recv } for pid=5854 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54054 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 543.818002][ T40] audit: type=1400 audit(1049126.899:565418): avc: denied { perfmon } for pid=19821 comm="syz.1.4092" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 543.824573][ T40] audit: type=1400 audit(1049126.899:565419): avc: denied { perfmon } for pid=19821 comm="syz.1.4092" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 543.830895][ T40] audit: type=1400 audit(1049126.899:565420): avc: denied { perfmon } for pid=19821 comm="syz.1.4092" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 543.838698][ T40] audit: type=1400 audit(1049126.899:565421): avc: denied { recv } for pid=15380 comm="syz-executor" saddr=10.0.2.2 src=37598 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 543.846298][ T40] audit: type=1400 audit(1049126.899:565422): avc: denied { perfmon } for pid=19821 comm="syz.1.4092" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 543.911389][T19833] netlink: 'syz.8.4095': attribute type 10 has an invalid length. [ 543.996063][T15974] Bluetooth: hci5: unexpected event for opcode 0x0c24 [ 544.129681][T19854] netlink: 'syz.1.4102': attribute type 2 has an invalid length. [ 544.327656][T19867] openvswitch: netlink: Flow actions attr not present in new flow. [ 544.367201][T19867] syzkaller0: entered promiscuous mode [ 544.368969][T19867] syzkaller0: entered allmulticast mode [ 544.413350][T15974] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 544.859320][T19895] overlayfs: failed to resolve './bus': -2 [ 545.260615][T19912] loop6: detected capacity change from 0 to 63 [ 545.296556][T19912] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 545.299289][T19912] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 545.301925][T19912] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 546.936523][T19912] ipvlan2: entered promiscuous mode [ 546.938971][T19912] bridge0: port 3(ipvlan2) entered blocking state [ 546.941169][T19912] bridge0: port 3(ipvlan2) entered disabled state [ 546.943273][T19912] ipvlan2: entered allmulticast mode [ 546.945834][T19912] bridge0: entered allmulticast mode [ 546.948429][T19912] ipvlan2: left allmulticast mode [ 546.950125][T19912] bridge0: left allmulticast mode [ 547.098134][T19945] __nla_validate_parse: 38 callbacks suppressed [ 547.098146][T19945] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4132'. [ 547.406028][T19961] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4136'. [ 547.464776][T19961] bond1: entered promiscuous mode [ 547.466910][T19961] bond1: entered allmulticast mode [ 547.478134][T19961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 547.778061][T20014] overlayfs: failed to clone upperpath [ 547.860981][T20034] syzkaller1: entered promiscuous mode [ 547.863405][T20034] syzkaller1: entered allmulticast mode [ 547.898647][T20036] nfs: Bad value for 'source' [ 548.066297][ T5943] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 548.106309][T20051] TCP: out of memory -- consider tuning tcp_mem [ 548.168585][T20058] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4154'. [ 548.239187][ T5943] usb 13-1: Using ep0 maxpacket: 16 [ 548.253756][ T5943] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 548.258042][ T5943] usb 13-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 548.276431][ T5943] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 548.290749][ T5943] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 548.296894][ T5943] usb 13-1: SerialNumber: syz [ 548.338653][T20075] 9pnet_fd: Insufficient options for proto=fd [ 548.397668][T20079] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 548.400179][T20024] Bluetooth: hci1: Frame reassembly failed (-84) [ 548.484943][T20075] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 548.489881][T20075] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 548.577246][ T5943] usb 13-1: USB disconnect, device number 9 [ 548.652046][T20099] xfrm0 speed is unknown, defaulting to 1000 [ 548.654853][T20099] xfrm0 speed is unknown, defaulting to 1000 [ 548.658695][T20099] xfrm0 speed is unknown, defaulting to 1000 [ 548.662317][T20099] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 548.671152][T20099] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 548.687987][T20099] xfrm0 speed is unknown, defaulting to 1000 [ 548.699024][T20099] xfrm0 speed is unknown, defaulting to 1000 [ 548.701835][T20099] xfrm0 speed is unknown, defaulting to 1000 [ 548.704226][T20099] xfrm0 speed is unknown, defaulting to 1000 [ 548.707005][T20099] xfrm0 speed is unknown, defaulting to 1000 [ 548.713647][T20104] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4167'. [ 549.127776][ T40] kauditd_printk_skb: 2021 callbacks suppressed [ 549.127788][ T40] audit: type=1400 audit(1049131.904:567333): avc: denied { create } for pid=20126 comm="syz.7.4175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 549.140488][ T40] audit: type=1400 audit(1049131.904:567334): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54054 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 549.148503][ T40] audit: type=1400 audit(1049131.904:567335): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=54054 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 549.157403][ T40] audit: type=1400 audit(1049131.913:567336): avc: denied { recv } for pid=5854 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54054 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 549.167719][ T40] audit: type=1400 audit(1049131.913:567337): avc: denied { recv } for pid=19968 comm="syz.8.4137" saddr=10.0.2.2 src=37598 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 549.176215][ T40] audit: type=1400 audit(1049131.913:567338): avc: denied { recv } for pid=19968 comm="syz.8.4137" saddr=10.0.2.2 src=37598 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 549.184499][ T40] audit: type=1400 audit(1049131.932:567339): avc: denied { recv } for pid=5855 comm="syz-executor" saddr=127.0.0.1 src=54054 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 549.195435][ T40] audit: type=1400 audit(1049131.932:567340): avc: denied { recv } for pid=5854 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54054 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 549.205813][ T40] audit: type=1400 audit(1049131.932:567341): avc: denied { connect } for pid=20126 comm="syz.7.4175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 549.213535][ T40] audit: type=1400 audit(1049131.932:567342): avc: denied { recv } for pid=5855 comm="syz-executor" saddr=10.0.2.2 src=37598 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 549.247198][T20129] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4176'. [ 549.291974][T15818] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 549.301332][T15818] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 549.411314][T20140] netlink: 'syz.8.4179': attribute type 10 has an invalid length. [ 549.473972][T20145] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4182'. [ 549.722616][T20157] IPv6: NLM_F_CREATE should be specified when creating new route [ 549.738968][T20157] overlayfs: missing 'lowerdir' [ 550.481918][T20178] Process accounting resumed [ 550.546445][T15974] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 550.548172][T15818] Bluetooth: hci1: command 0x1003 tx timeout [ 550.643090][T20187] netlink: 'syz.8.4196': attribute type 4 has an invalid length. [ 550.914162][T20200] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 551.087140][T20206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4202'. [ 551.101329][T20206] bridge1: port 1(ip6gretap1) entered blocking state [ 551.104093][T20206] bridge1: port 1(ip6gretap1) entered disabled state [ 551.106887][T20206] ip6gretap1: entered allmulticast mode [ 551.110584][T20206] ip6gretap1: entered promiscuous mode [ 551.160381][T20206] veth3: entered promiscuous mode [ 551.162223][T20206] bridge1: port 2(veth3) entered blocking state [ 551.164347][T20206] bridge1: port 2(veth3) entered disabled state [ 551.166786][T20206] veth3: entered allmulticast mode [ 551.635559][T20228] bridge0: entered promiscuous mode [ 551.651023][T20228] macvlan2: entered promiscuous mode [ 551.727074][ T10] IPVS: starting estimator thread 0... [ 551.818603][T20238] IPVS: using max 49 ests per chain, 117600 per kthread [ 551.910788][T20248] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4216'. [ 551.987446][T20254] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4219'. [ 552.037332][T20254] team0: No ports can be present during mode change [ 552.066390][T20258] SELinux: Context Ü is not valid (left unmapped). [ 552.153969][T20266] geneve2: entered promiscuous mode [ 552.155659][T20266] geneve2: entered allmulticast mode [ 552.338446][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.342300][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.352485][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.357373][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.360893][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.371329][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.376384][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.381988][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.385495][ T10] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 552.388608][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.393775][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.400404][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.404280][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.410453][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.418349][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.424397][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.432820][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.437637][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.444930][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.448609][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.452469][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.455867][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.459587][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.465669][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.469323][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.473307][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.476591][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.480137][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.484053][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.487612][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.491178][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.493540][T20287] xt_cgroup: invalid path, errno=-2 [ 552.498210][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.501399][T20288] xt_cgroup: invalid path, errno=-2 [ 552.508118][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.514373][T20281] overlayfs: unescaped trailing colons in lowerdir mount option. [ 552.545555][ T10] usb 12-1: Using ep0 maxpacket: 32 [ 552.558136][ T10] usb 12-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 552.560985][ T10] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.577985][ T10] usb 12-1: config 0 descriptor?? [ 552.585514][ T10] as10x_usb: device has been detected [ 552.587733][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 552.625158][ T10] usb 12-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 552.647018][ T10] as10x_usb: error during firmware upload part1 [ 552.649256][ T10] Registered device nBox DVB-T Dongle [ 552.681676][T20298] vxcan1 speed is unknown, defaulting to 1000 [ 552.687760][T20298] vxcan1 speed is unknown, defaulting to 1000 [ 552.690116][T20298] vxcan1 speed is unknown, defaulting to 1000 [ 552.741904][T20300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4233'. [ 552.773825][T20298] infiniband syz2: set down [ 552.775330][T15370] vxcan1 speed is unknown, defaulting to 1000 [ 552.777160][T15370] syz2: Port: 1 Link DOWN [ 552.778900][T20298] infiniband syz2: added vxcan1 [ 552.796426][T20298] RDS/IB: syz2: added [ 552.797764][T20298] smc: adding ib device syz2 with port count 1 [ 552.799651][T20298] smc: ib device syz2 port 1 has pnetid [ 552.803543][T15370] vxcan1 speed is unknown, defaulting to 1000 [ 552.805933][T20298] vxcan1 speed is unknown, defaulting to 1000 [ 552.833374][T20264] team0: Port device vlan0 removed [ 552.888176][T20298] vxcan1 speed is unknown, defaulting to 1000 [ 552.927800][T20307] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 552.937379][T20309] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 552.967193][T20298] vxcan1 speed is unknown, defaulting to 1000 [ 553.046819][T20298] vxcan1 speed is unknown, defaulting to 1000 [ 553.075203][ T24] usb 12-1: USB disconnect, device number 6 [ 553.095077][ T24] Unregistered device nBox DVB-T Dongle [ 553.099161][ T24] as10x_usb: device has been disconnected [ 553.131542][T20316] SELinux: policydb magic number 0x6e720026 does not match expected magic number 0xf97cff8c [ 553.136018][T20316] SELinux: failed to load policy [ 553.138430][T20298] vxcan1 speed is unknown, defaulting to 1000 [ 553.443190][T20324] Bluetooth: hci0: load_link_keys: too big key_count value 12148 [ 554.074773][T20018] smc: removing ib device syz2 [ 554.105649][T20363] xt_hashlimit: size too large, truncated to 1048576 [ 554.414600][T20385] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4260'. [ 554.425833][T20385] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4260'. [ 554.429627][T20385] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4260'. [ 554.475315][T20389] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 554.477416][T20389] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 554.481184][T20389] vhci_hcd vhci_hcd.0: Device attached [ 554.483830][T20390] vhci_hcd: connection closed [ 554.483970][ T40] kauditd_printk_skb: 2380 callbacks suppressed [ 554.483979][ T40] audit: type=1400 audit(1049136.917:569723): avc: denied { recv } for pid=5335 comm="klogd" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54054 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 554.486892][T20019] vhci_hcd: stop threads [ 554.487780][ T40] audit: type=1400 audit(1049136.917:569724): avc: denied { recv } for pid=5335 comm="klogd" saddr=127.0.0.1 src=54054 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 554.504715][T20019] vhci_hcd: release socket [ 554.507627][T20019] vhci_hcd: disconnect device [ 554.511958][ T40] audit: type=1400 audit(1049136.927:569725): avc: denied { recv } for pid=5854 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54054 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 554.522348][ T40] audit: type=1400 audit(1049136.936:569726): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=37598 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 554.537315][ T40] audit: type=1400 audit(1049136.936:569727): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=37598 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 554.545182][ T40] audit: type=1400 audit(1049136.936:569728): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=10.0.2.2 src=37598 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 554.552624][ T40] audit: type=1400 audit(1049136.945:569729): avc: denied { recv } for pid=5854 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54054 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 554.563894][ T40] audit: type=1400 audit(1049136.955:569730): avc: denied { mounton } for pid=20392 comm="syz.8.4262" path="/418/file0" dev="tmpfs" ino=2277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 554.571538][ T40] audit: type=1400 audit(1049136.964:569731): avc: denied { remount } for pid=20392 comm="syz.8.4262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 554.578524][ T40] audit: type=1400 audit(1049136.964:569732): avc: denied { mount } for pid=20392 comm="syz.8.4262" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 554.697229][T20405] xfrm0 speed is unknown, defaulting to 1000 [ 554.717381][T20406] geneve3: entered promiscuous mode [ 554.719408][T20406] geneve3: entered allmulticast mode [ 555.099002][T20425] fuse: Bad value for 'fd' [ 555.106169][T20425] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4271'. [ 555.117596][T20425] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4271'. [ 555.158005][T20429] tmpfs: Bad value for 'mpol' [ 555.274587][T20436] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4274'. [ 555.336929][T15369] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 555.528283][T15369] usb 13-1: Using ep0 maxpacket: 8 [ 555.542833][T15369] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 555.546240][T15369] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 555.558794][T15369] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 555.582184][T15369] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 555.585483][T15369] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 555.589637][T15369] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 555.596163][T15369] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.708868][T20465] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 555.711020][T20465] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 555.715981][T20465] vhci_hcd vhci_hcd.0: Device attached [ 555.763043][T20469] CIFS mount error: No usable UNC path provided in device string! [ 555.763043][T20469] [ 555.769699][T20469] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 555.832640][T15369] usb 13-1: usb_control_msg returned -32 [ 555.834508][T15369] usbtmc 13-1:16.0: can't read capabilities [ 555.966613][ T34] usb 51-1: new high-speed USB device number 2 using vhci_hcd [ 556.040047][T20477] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4289'. [ 556.106068][T20018] wlan0: Trigger new scan to find an IBSS to join [ 556.348440][T20491] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 556.351485][T20491] overlayfs: missing 'lowerdir' [ 556.502102][T20466] vhci_hcd: connection reset by peer [ 556.507093][T20019] vhci_hcd: stop threads [ 556.508487][T20019] vhci_hcd: release socket [ 556.510368][T20019] vhci_hcd: disconnect device [ 557.372256][T20510] netlink: 172 bytes leftover after parsing attributes in process `syz.6.4298'. [ 557.723403][T20522] netlink: 'syz.7.4301': attribute type 29 has an invalid length. [ 557.726466][T20522] netlink: 'syz.7.4301': attribute type 29 has an invalid length. [ 557.812967][T20524] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4302'. [ 557.814715][T20525] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 557.826975][T20525] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 558.089853][T20538] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 558.242799][T20550] __nla_validate_parse: 2 callbacks suppressed [ 558.242810][T20550] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4309'. [ 558.251630][T20550] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4309'. [ 558.255825][T20550] netlink: 'syz.7.4309': attribute type 18 has an invalid length. [ 558.342312][T20552] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 558.367774][ T6021] usb 13-1: USB disconnect, device number 10 [ 558.679007][T20566] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4315'. [ 558.732190][T20568] netlink: 'syz.6.4317': attribute type 4 has an invalid length. [ 558.744501][T20568] netlink: 'syz.6.4317': attribute type 4 has an invalid length. [ 558.814592][T20574] netlink: 'syz.6.4319': attribute type 10 has an invalid length. [ 558.817555][T20574] bridge_slave_1: left allmulticast mode [ 558.819363][T20574] bridge_slave_1: left promiscuous mode [ 558.824685][T20574] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.853537][T20574] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 559.007847][T20590] geneve2: entered promiscuous mode [ 559.010197][T20590] geneve2: entered allmulticast mode [ 559.028032][T20584] 9pnet: Unknown protocol version 9p20\++} [ 559.881305][ T40] kauditd_printk_skb: 1398 callbacks suppressed [ 559.881317][ T40] audit: type=1400 audit(1049141.968:571131): avc: denied { recv } for pid=5855 comm="syz-executor" saddr=127.0.0.1 src=54054 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 559.894514][ T40] audit: type=1400 audit(1049141.978:571132): avc: denied { recv } for pid=5854 comm="sshd-session" saddr=10.0.2.2 src=37598 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 559.919642][ T40] audit: type=1400 audit(1049141.996:571133): avc: denied { read write } for pid=15383 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 559.929373][ T40] audit: type=1400 audit(1049141.996:571134): avc: denied { read write open } for pid=15383 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 559.945101][ T40] audit: type=1400 audit(1049141.996:571135): avc: denied { ioctl } for pid=15383 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 559.952751][ T40] audit: type=1400 audit(1049142.006:571136): avc: denied { create } for pid=20636 comm="syz.6.4337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 559.964884][ T40] audit: type=1400 audit(1049142.006:571137): avc: denied { write } for pid=20636 comm="syz.6.4337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 559.971588][ T40] audit: type=1400 audit(1049142.015:571138): avc: denied { read } for pid=20636 comm="syz.6.4337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 559.979549][ T40] audit: type=1400 audit(1049142.015:571139): avc: denied { recv } for pid=15383 comm="syz-executor" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=54054 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 559.988331][ T40] audit: type=1400 audit(1049142.015:571140): avc: denied { read } for pid=20636 comm="syz.6.4337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 560.079906][T20645] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 560.083646][T20645] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 560.116255][T20644] 9pnet_virtio: no channels available for device /dev/sr0 [ 560.278706][T20655] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4342'. [ 560.379621][T20662] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4345'. [ 560.789562][T20698] netlink: 328 bytes leftover after parsing attributes in process `syz.7.4356'. [ 561.202638][T20724] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4364'. [ 561.205563][T20724] netem: unknown loss type 13 [ 561.207759][T20724] netem: change failed [ 561.213037][T20724] netlink: 'syz.7.4364': attribute type 21 has an invalid length. [ 561.215746][T20724] netlink: 'syz.7.4364': attribute type 6 has an invalid length. [ 561.218116][T20724] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4364'. [ 561.221762][T20724] netlink: 'syz.7.4364': attribute type 21 has an invalid length. [ 561.224231][T20724] netlink: 'syz.7.4364': attribute type 6 has an invalid length. [ 561.227069][T20724] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4364'. [ 561.230563][T20724] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4364'. [ 561.246584][T20723] xt_hashlimit: size too large, truncated to 1048576 [ 561.357748][T20723] xt_hashlimit: size too large, truncated to 1048576 [ 561.397679][ T34] vhci_hcd: vhci_device speed not set [ 561.473884][T20723] xt_hashlimit: size too large, truncated to 1048576 [ 561.603812][T20723] xt_hashlimit: size too large, truncated to 1048576 [ 561.631394][T20747] hugetlbfs: Bad value 'e' for mount option 'size' [ 561.631394][T20747] [ 561.701199][T20723] xt_hashlimit: size too large, truncated to 1048576 [ 561.831179][T20723] xt_hashlimit: size too large, truncated to 1048576 [ 561.941275][T20723] xt_hashlimit: size too large, truncated to 1048576 [ 562.831473][T20826] ------------[ cut here ]------------ [ 562.833248][T20826] WARNING: CPU: 0 PID: 20826 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 562.836474][T20826] Modules linked in: [ 562.837889][T20826] CPU: 0 UID: 0 PID: 20826 Comm: syz.1.4393 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 562.843651][T20826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 562.846973][T20826] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 562.849176][T20826] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 8f f0 6c 09 83 fe 0a 0f 86 0a fe ff ff 80 3d c3 68 7a 0e 00 75 0b c6 05 ba 68 7a 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 562.855660][T20826] RSP: 0018:ffffc9000eb57878 EFLAGS: 00010246 [ 562.857564][T20826] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 562.860031][T20826] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 562.862614][T20826] RBP: 00000002db1095c0 R08: 0000000000000005 R09: 0000000000000000 [ 562.865196][T20826] R10: 00000000b6c42570 R11: 0000000000000001 R12: 0000000000000016 [ 562.867607][T20826] R13: 1ffff92001d6af24 R14: 00000002db1095c0 R15: 0000000000000016 [ 562.870060][T20826] FS: 00007ff8aea906c0(0000) GS:ffff8880d6753000(0000) knlGS:0000000000000000 [ 562.873196][T20826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 562.875310][T20826] CR2: 00007ff8adb726e0 CR3: 00000000251f9000 CR4: 0000000000352ef0 [ 562.877816][T20826] DR0: 0000000000000040 DR1: 0000000000000004 DR2: 0000000000000003 [ 562.880273][T20826] DR3: 00000000000010e3 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 562.882861][T20826] Call Trace: [ 562.884085][T20826] [ 562.885030][T20826] ? kmem_cache_free+0x2d1/0x4d0 [ 562.886578][T20826] ? lockdep_hardirqs_on+0x7c/0x110 [ 562.888217][T20826] ? audit_log_end+0x14a/0x2b0 [ 562.889749][T20826] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 562.891650][T20826] ? audit_log_end+0x14a/0x2b0 [ 562.893178][T20826] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 562.895189][T20826] ? __pfx_common_lsm_audit+0x10/0x10 [ 562.896894][T20826] ? slow_avc_audit+0x18b/0x210 [ 562.898426][T20826] ? __pfx_slow_avc_audit+0x10/0x10 [ 562.900130][T20826] ? drm_syncobj_array_find+0x35/0x3c0 [ 562.901842][T20826] __alloc_pages_noprof+0xb/0x1b0 [ 562.903433][T20826] ___kmalloc_large_node+0x84/0x1e0 [ 562.905255][T20826] ? drm_syncobj_array_find+0x35/0x3c0 [ 562.906968][T20826] __kmalloc_large_node_noprof+0x1c/0x70 [ 562.908776][T20826] __kmalloc_noprof.cold+0xc/0x61 [ 562.910396][T20826] ? __lock_acquire+0xb8a/0x1c90 [ 562.912023][T20826] drm_syncobj_array_find+0x35/0x3c0 [ 562.913696][T20826] drm_syncobj_signal_ioctl+0x20c/0x450 [ 562.915526][T20826] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 562.917424][T20826] ? drm_dev_exit+0x41/0x60 [ 562.918861][T20826] drm_ioctl_kernel+0x1f4/0x3e0 [ 562.920455][T20826] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 562.922439][T20826] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 562.924140][T20826] drm_ioctl+0x5c9/0xc30 [ 562.925475][T20826] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 562.927938][T20826] ? __pfx_drm_ioctl+0x10/0x10 [ 562.929795][T20826] ? selinux_file_ioctl+0x180/0x270 [ 562.931464][T20826] ? selinux_file_ioctl+0xb4/0x270 [ 562.933104][T20826] ? __pfx_drm_ioctl+0x10/0x10 [ 562.934615][T20826] __x64_sys_ioctl+0x18e/0x210 [ 562.936186][T20826] do_syscall_64+0xcd/0x4c0 [ 562.937681][T20826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.939565][T20826] RIP: 0033:0x7ff8adb8e929 [ 562.940983][T20826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.946957][T20826] RSP: 002b:00007ff8aea90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 562.949612][T20826] RAX: ffffffffffffffda RBX: 00007ff8addb5fa0 RCX: 00007ff8adb8e929 [ 562.952104][T20826] RDX: 0000200000000100 RSI: 00000000c01064c5 RDI: 0000000000000003 [ 562.954742][T20826] RBP: 00007ff8adc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 562.957199][T20826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.959832][T20826] R13: 0000000000000000 R14: 00007ff8addb5fa0 R15: 00007ffd09622e28 [ 562.962334][T20826] [ 562.963401][T20826] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 562.965657][T20826] CPU: 0 UID: 0 PID: 20826 Comm: syz.1.4393 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 562.969348][T20826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 562.972670][T20826] Call Trace: [ 562.973733][T20826] [ 562.974675][T20826] dump_stack_lvl+0x3d/0x1f0 [ 562.976145][T20826] panic+0x71c/0x800 [ 562.977389][T20826] ? __pfx_panic+0x10/0x10 [ 562.978803][T20826] ? show_trace_log_lvl+0x29b/0x3e0 [ 562.980466][T20826] ? check_panic_on_warn+0x1f/0xb0 [ 562.982075][T20826] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 562.983999][T20826] check_panic_on_warn+0xab/0xb0 [ 562.985558][T20826] __warn+0xf6/0x3c0 [ 562.986813][T20826] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 562.988712][T20826] report_bug+0x3c3/0x580 [ 562.990083][T20826] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 562.992027][T20826] handle_bug+0x184/0x210 [ 562.993400][T20826] exc_invalid_op+0x17/0x50 [ 562.994843][T20826] asm_exc_invalid_op+0x1a/0x20 [ 562.996372][T20826] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 562.998442][T20826] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 8f f0 6c 09 83 fe 0a 0f 86 0a fe ff ff 80 3d c3 68 7a 0e 00 75 0b c6 05 ba 68 7a 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 563.004306][T20826] RSP: 0018:ffffc9000eb57878 EFLAGS: 00010246 [ 563.006272][T20826] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 563.008749][T20826] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 563.011159][T20826] RBP: 00000002db1095c0 R08: 0000000000000005 R09: 0000000000000000 [ 563.013654][T20826] R10: 00000000b6c42570 R11: 0000000000000001 R12: 0000000000000016 [ 563.016206][T20826] R13: 1ffff92001d6af24 R14: 00000002db1095c0 R15: 0000000000000016 [ 563.018675][T20826] ? kmem_cache_free+0x2d1/0x4d0 [ 563.020280][T20826] ? lockdep_hardirqs_on+0x7c/0x110 [ 563.021921][T20826] ? audit_log_end+0x14a/0x2b0 [ 563.023434][T20826] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 563.025314][T20826] ? audit_log_end+0x14a/0x2b0 [ 563.026827][T20826] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 563.028825][T20826] ? __pfx_common_lsm_audit+0x10/0x10 [ 563.030598][T20826] ? slow_avc_audit+0x18b/0x210 [ 563.032159][T20826] ? __pfx_slow_avc_audit+0x10/0x10 [ 563.033813][T20826] ? drm_syncobj_array_find+0x35/0x3c0 [ 563.035526][T20826] __alloc_pages_noprof+0xb/0x1b0 [ 563.037135][T20826] ___kmalloc_large_node+0x84/0x1e0 [ 563.038789][T20826] ? drm_syncobj_array_find+0x35/0x3c0 [ 563.040538][T20826] __kmalloc_large_node_noprof+0x1c/0x70 [ 563.042295][T20826] __kmalloc_noprof.cold+0xc/0x61 [ 563.044081][T20826] ? __lock_acquire+0xb8a/0x1c90 [ 563.046053][T20826] drm_syncobj_array_find+0x35/0x3c0 [ 563.048198][T20826] drm_syncobj_signal_ioctl+0x20c/0x450 [ 563.050209][T20826] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 563.052132][T20826] ? drm_dev_exit+0x41/0x60 [ 563.053589][T20826] drm_ioctl_kernel+0x1f4/0x3e0 [ 563.055143][T20826] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 563.057062][T20826] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 563.058757][T20826] drm_ioctl+0x5c9/0xc30 [ 563.060130][T20826] ? __pfx_drm_syncobj_signal_ioctl+0x10/0x10 [ 563.062035][T20826] ? __pfx_drm_ioctl+0x10/0x10 [ 563.063567][T20826] ? selinux_file_ioctl+0x180/0x270 [ 563.065216][T20826] ? selinux_file_ioctl+0xb4/0x270 [ 563.066829][T20826] ? __pfx_drm_ioctl+0x10/0x10 [ 563.068344][T20826] __x64_sys_ioctl+0x18e/0x210 [ 563.069891][T20826] do_syscall_64+0xcd/0x4c0 [ 563.071320][T20826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.073109][T20826] RIP: 0033:0x7ff8adb8e929 [ 563.074527][T20826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.080378][T20826] RSP: 002b:00007ff8aea90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 563.083016][T20826] RAX: ffffffffffffffda RBX: 00007ff8addb5fa0 RCX: 00007ff8adb8e929 [ 563.085384][T20826] RDX: 0000200000000100 RSI: 00000000c01064c5 RDI: 0000000000000003 [ 563.087836][T20826] RBP: 00007ff8adc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 563.090551][T20826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.093060][T20826] R13: 0000000000000000 R14: 00007ff8addb5fa0 R15: 00007ffd09622e28 [ 563.095527][T20826] [ 563.097574][T20826] Kernel Offset: disabled [ 563.098953][T20826] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:20:53 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b80d5 RDI=ffffffff9b087320 RBP=ffffffff9b0872e0 RSP=ffffc9000eb571e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b0872e0 R15=ffffffff855b8070 RIP=ffffffff855b80ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff8aea906c0 ffffffff 00c00000 GS =0000 ffff8880d6753000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff8adb726e0 CR3=00000000251f9000 CR4=00352ef0 DR0=0000000000000040 DR1=0000000000000004 DR2=0000000000000003 DR3=00000000000010e3 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffc000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff8adc11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff8adc11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff8adc11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff8adc11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff8adc11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff8adc11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000032647261632f 6972642f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000011475142400c 4a51470c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000008a90fb RBX=0000000000000001 RCX=ffffffff8b800c19 RDX=0000000000000000 RSI=ffffffff8de19d08 RDI=ffffffff8c1578a0 RBP=ffffed1003c53488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6645 R10=ffff88806a53322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801e29a440 R14=ffffffff90a80f50 R15=0000000000000000 RIP=ffffffff8b7ff77f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6853000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff8aea4df98 CR3=000000003dd6e000 CR4=00352ef0 DR0=0000000000000040 DR1=0000000000000004 DR2=0000000000000003 DR3=00000000000010e3 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100080400000200 1500080000000725 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2532011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2532011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2532011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2532011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2532011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2532011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2532ced100 00007f2532184440 00007f2532180004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2532184498 00007f2532184490 00007f2532184488 00007f2532184480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 00000000000000c4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=ffff888027a52720 RCX=ffffffff84c7556b RDX=ffff88803135c880 RSI=ffffffff8c12ef00 RDI=0000000000000000 RBP=ffffffff8c12ef00 RSP=ffffc9000440f1c0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffffc9000440f2b8 R15=dffffc0000000000 RIP=ffffffff81bc1806 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa5d5598300 ffffffff 00c00000 GS =0000 ffff8880d6953000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000559f0087cf40 CR3=00000000247b6000 CR4=00352ef0 DR0=ffffffffffffffff DR1=0000000000000047 DR2=0000000000000005 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=d6d59cff1c011469 838d197973b6d60b d6d59cff1c011469 838d197973b6d60b d6d59cff1c011469 838d197973b6d60b d6d59cff1c011469 838d197973b6d60b ZMM18=38618d5265f8da06 bca8595becc5f088 38618d5265f8da06 bca8595becc5f088 38618d5265f8da06 bca8595becc5f088 38618d5265f8da06 bca8595becc5f088 ZMM19=4913000000000000 0000000000000004 4913000000000000 0000000000000003 4913000000000000 0000000000000002 4913000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030000000000005f 0000000c0000000a 00040008000f0010 000a0000000003e6 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000800040000 000a000800000020 0000004400000002 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000182 0000000002faf080 0000001800000020 0000000e0014000c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffff9080380 030031656c69662f 2e01ffffffffffff ffffef0802800300 ZMM25=bca8595bbca8595b bca8595bbca8595b bca8595bbca8595b bca8595bbca8595b bca8595bbca8595b bca8595bbca8595b bca8595bbca8595b bca8595bbca8595b ZMM26=65f8da0665f8da06 65f8da0665f8da06 65f8da0665f8da06 65f8da0665f8da06 65f8da0665f8da06 65f8da0665f8da06 65f8da0665f8da06 65f8da0665f8da06 ZMM27=38618d5238618d52 38618d5238618d52 38618d5238618d52 38618d5238618d52 38618d5238618d52 38618d5238618d52 38618d5238618d52 38618d5238618d52 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=4713000047130000 4713000047130000 4713000047130000 4713000047130000 4713000047130000 4713000047130000 4713000047130000 4713000047130000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=ffffffff8e5c4880 RCX=000000000650bcfd RDX=0000000000000000 RSI=ffffffff8ddf4833 RDI=ffffffff8c1578a0 RBP=0000000000000002 RSP=ffffc900006f8748 R8 =cb2aa741ff8f4b09 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b8013c5 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555580716500 ffffffff 00c00000 GS =0000 ffff8880d6a53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555807315c8 CR3=000000004ae72000 CR4=00352ef0 DR0=0000000000000040 DR1=0000000000000004 DR2=0000000000000003 DR3=00000000000010e3 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff39095050 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd09211b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd09211b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd09211b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd09211b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd09211bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd09211c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000