last executing test programs: 1m12.760365348s ago: executing program 3 (id=498): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000840)=0x473e, 0x4) timer_create(0x4, &(0x7f0000001880)={0x0, 0x3d, 0x0, @thr={&(0x7f0000000000)="c16b04d1cb98dd7fe53593dba59ae718c294bb64", &(0x7f0000000880)="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"}}, &(0x7f00000018c0)) getsockname$packet(r0, &(0x7f0000001900)={0x11, 0x0, 0x0}, &(0x7f0000001940)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a00)={'syztnl1\x00', &(0x7f0000001980)={'syztnl0\x00', 0x0, 0x0, 0x1, 0xfff, 0x9, {{0xd, 0x4, 0x2, 0x6, 0x34, 0x65, 0x0, 0x0, 0x29, 0x0, @multicast2, @multicast1, {[@cipso={0x86, 0x14, 0x3, [{0x0, 0xe, "e33ff294c4af1e59f36a46ff"}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x6e, [@remote]}]}}}}}) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000140)="628bfa23f14186e9eb7492e5a4a46ff5690ed1ca729a684253cc9677492c2ad2c0b09282949e47e652d5dd7d03f7810de663c619d66484a0aef2402e3597e208d7e2c6e3a0a7a66f1f57b97d9649b42e40eda7d877013f5aaa5e6b9211a388d742f6dee4234bc3ddf133595171dc9aaf848a7f36fce0337a869989741d1ca303b5b684716a26370f3966f9179f8f7ff2008d4950820b2840b2414c9879c6e262bd93e115e650588f87a9affd3c64ee33f09677ea0bc915bc892a18ba668f02fbfaff37690dfb052bb2798c39335db06c565ba2262f5f76fc9dee5ed83fa617942987c078d00c740ad9381132c47a3eda23d378e4", 0xfffffcbe}, {&(0x7f0000000240)="29b69fa59ce23dd165bbfbeeea31ffe84bcfdb6171c684ab8111f73098dee400e179d5c84bc73aa3e6fc83a812014ca6608ba3b4edd50d2ec4befc7a880094c60675", 0x42}, {&(0x7f00000002c0)="7c7a0b8e07127e492cbb9bee89f2725c3e193d8aa33cfa080953ce66882056c9d87590df27be7743cd073e5e6da15845d64b4cc146a95de998d1f2c3ae62fc047f28b997b83ac4f74820600fa1ad0d5278d6a7482933e70a054f2559b41a42c23130318ed01e83ff1aa175e3a77674d4180ecc95e604b9d8b9f7362563f5cc7546085c66b5f994aa71b9116e19de95511b4ddef327dd03d23231a84211512b1fce34960dcded932263580ab8245fdb91fb4e78d374efbbe5987c8d8b6bfbfb6d108551d25bddf7f67be96d6d5762a322c8b678d6b69f160e245b8adb569edf0c788b41de17a6f6f543ba934a78dbb826c4c24df6c52eb8ef25e7da3a6a76", 0xfe}], 0x3, &(0x7f0000000400)}}, {{&(0x7f0000000440)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000480)="434eeeb8b777e3e15e288e06e7f0c9c1510ea0169d5fec4a903cb9db1b06fb6d476bfaedf988", 0x26}, {&(0x7f00000004c0)="49912a0319a271001e0d71d82bf187dfb844988cdffffb0135a0fb7f549a5bcdc10e01e2dc42ea5bde7e2af01788b1acbe44b06e98d8", 0x36}, {&(0x7f0000000500)}, {&(0x7f0000000540)="f7fa0059fc1f4212098678a0e60f8cc4e8dd237cd42758bd463e52e0b8e1f1342f908aa5339808a352b26ebf5093aaab4e6df96941e1a80b68caaf4d26979b163d162d8c98bdf971f75557ddb136675504a136f10b14341bf837d1feb84169d3c802c091a6f798701c0ab2cbb172d5ed0924092a863d55e2", 0x78}, {&(0x7f00000005c0)="29f79739bacd2554bab73138d7b3f7ccdb56777d85a789fb99f2b3727ca9fee11586912196b93d581d139adab48ba758f7a90ae9a7a1a9e3c9aaf8696859b74e6dd21f9747363dd04b71b68ea366ce35102d677d960c8a378497d435dff0eeb09fc5dc0aec602c854d", 0x69}, {&(0x7f0000000640)="bd8a5c7a068f3db379c88156f7bb4b01733f1b5c27e682bb25f820dc7f1347650737704e9bc58630f3bbc5013fb769c19b57e0d2c5622cb8e9ae81af1640838a55c1c5660c77711cb62b78b1eab4d54515f6cb8916087ac792b654bc1ec2f6fbebcd99fae1dcf7b51e1658b8a3703f336e460f632473973a212ebd986d166f0a01913f3f2e656d3bfd7d3abbd100c0d52dc1375890bfd950d9c03b56b16c988e8002a6460037c585cddc317d5f72dc901468af4645afcb66396b3f0689245eaf6ee9ba8332e7e16e188d3526c68b6bfd7ed7545ed0ce5fa900b5c6046da400964874d1", 0xe3}, {&(0x7f0000000740)="eac68e3c79f86495ea9146c92b908306f2963685317211bf024b6f46c79b1eede4b1f72f3c156a89f51da8d7b19fc9f548f42a5da9e07f85c232f23d016c6ac8fc1f1a1143b11839ee626b", 0x4b}], 0x7, &(0x7f0000001cc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x54, 0x0, 0x7, {[@noop, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @noop, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x88, 0x0, 0x0, [0xd7, 0x9]}, @ssrr={0x89, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x29}, @remote, @multicast2, @remote]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010100, @rand_addr=0x64010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x498dcb42}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x64, 0x0, 0x8, [0x0]}, @cipso={0x86, 0x2d, 0x3, [{0x6, 0x12, "89891f0f43a34db225bef08babf9e36e"}, {0x1, 0x12, "93b39033b095cdc1453e9606e7fa8478"}, {0x2, 0x3, '~'}]}, @cipso={0x86, 0xf, 0xffffffffffffffff, [{0x6, 0x9, "0563a9a9502fa9"}]}, @timestamp={0x44, 0x10, 0x8b, 0x0, 0x9, [0xfffff5df, 0xa2, 0x8]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @dev={0xac, 0x14, 0x14, 0x17}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @local}}}], 0x1a0}}], 0x3, 0x4000800) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}, 0x75}, {{0x0, 0x0, 0x0}, 0x7ff}], 0x2, 0x2100, 0x0) 1m12.759750011s ago: executing program 3 (id=499): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001b80)={0x34, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x4008000) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xd, 0x9}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x5c, 0x7ffffffe, 0xfffffff8, 0x893}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x83}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4c890) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3c, &(0x7f0000000100)}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x6, &(0x7f0000000080)=0x4) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='jfs\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) socket(0x10, 0x803, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$unix(0x1, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001b80)={0x34, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x4008000) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xd, 0x9}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x5c, 0x7ffffffe, 0xfffffff8, 0x893}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x83}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4c890) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3c, &(0x7f0000000100)}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) getsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000000)=0x6, &(0x7f0000000080)=0x4) (async) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) (async) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='jfs\x00', 0x0, 0x0) (async) 1m12.568009354s ago: executing program 3 (id=500): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4fc22dd8}]}]}], {0x14}}, 0x74}}, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x100, 0x4) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8']) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x401}, 0x4) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) 1m12.566798375s ago: executing program 3 (id=502): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300), 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = syz_open_dev$dvb_demux(&(0x7f00000005c0), 0x95a, 0x800) ioctl$DVB_DEMUX_DMX_EXPBUF(r4, 0xc00c6f3e, &(0x7f0000000600)={0x0, 0x0, r1}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_channels={0x3d, 0x7fff, 0x31, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1}}) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4205, r7, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4204, r8, 0x201, &(0x7f00000001c0)={0x0}) r9 = syz_clone(0x14000200, &(0x7f00000001c0)="b9a435d972a45ab09c7af31d9ce37734a33410b7008199a3187020a65abb74e5157dd4889f5bfde2def7ca3c2d6dbbe968a4f60e930b76918cd372b61b94c0eb371fb4eade83baa1907b9f0cefa05962250b2a0bce0ca85587da24", 0x5b, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="d6bd0b2b570b02d5a26d0996f53d41384ec88a867eb0bee893a9987d186c7dcd501f55f6081aa43159c0402359ccff7c122f6b91629889085b85e165b6f98e9716045e371a92f5ad4098cac9d36a681cd3528bb75bb6a68451fff14200ab79d35ccc594a2242da5a265159820956ccd4b3a7907c741090404148a851231d86bae171fb0a21e24ad70f5957a5b6ad11b5261e7d12159b90b65cb527fbb1b19a5a299ba9a4b5bf32e03328e0e1b260031c800b01ca07fc6684b63f224818924be62954f427c686e686bf66f026e8d1f2fb7240e64a3896654ca2f11b29327e3ab2dd296047b86fed5eed0d6f8705b2c6e964c2846bba9f10") r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfffa}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x1, 0x2, {0x3, 0xbc}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x15}, 0x4040010) waitid(0x2, r8, &(0x7f0000000480), 0x40000000, &(0x7f0000000500)) r12 = memfd_secret(0x0) syz_clone3(&(0x7f0000000400)={0x4000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x14}, &(0x7f00000000c0)=""/60, 0x3c, &(0x7f0000000100)=""/22, &(0x7f00000003c0)=[r3, r6, r7, r8, r9], 0x5, {r12}}, 0x58) 1m12.218188384s ago: executing program 3 (id=505): r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x60}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000895}, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="081500000005110400d7fa9de500000001000005540201"], 0x1508}, 0x1, 0x0, 0x0, 0x2}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x20, &(0x7f00000008c0)={0x0, 0x0, 0x0, &(0x7f00000007c0)=""/231, 0xe7}}, 0x10) writev(r1, &(0x7f0000000040), 0x2) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e24, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000001}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x74, @dev={0xfe, 0x80, '\x00', 0x18}, 0x4}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000012002df8001c00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x28}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x20000, 0x4) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000680)={r7, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x7fdffffc, 0x0, 0x0, 0x4], [0x10, 0x1001000, 0x1e1ac000], [0xfffffffe, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8, r9, 0x0, r9], [0x2b8], [0x0, 0x1]}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r11 = socket(0x27, 0x3, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r11, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004051}, 0x8000) 1m11.850626318s ago: executing program 3 (id=514): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000440)="ebe3a0e9796cfd1647e299f4e376fdba12", 0x11}], 0x2, &(0x7f0000000940)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x28044854}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1400faff50e7581893ef6caf12f9a29a7d80878f11ebd0538480d4c5780b8b470b5311da711e0dc621ca166f0e588e031c7952e0ecb54dd6638dcffdc5a6266227c192410e89847edd37ab74f64a74bf741193206a1a9344643957cb7cfa8883dbe12695cf6f5eceff9a4667adb71a64aac4b4b94403bd4da3b0d371140927f1fa57fea99d282a4286421c1eeb26b5f99d18f3a96acae38e264a84d24263a3ae349727742632f12e829acb742ab0f7baadfeb15e4f7b353d79e19c47735bd1241ab8d7973f51e64637734388c37c8a04c743837f3a0ba00285288082c9a20bf27fbfedd72800fa827657e40246adeb5ed7", @ANYBLOB="41cb10b1c40fcd037b6cb9597fb5d3bf8b20edf6b625254ad47eff7263da9644fa00110f2f65d2561d5f0c3de4eb90bc6c7d7593c18b3c84f6f1a73cf565c2a8166c34f3f657c95f0600ca342f8da57699a143e4a204e34718d4a3b8f2baf0a25a131c2bcc8c6f41b1a6b6c260f9b8f8a13cb1449493e9ba799a3823ca2282600fc50383a6f854377c8f475b2590b26cbc44fc842b42230eea0d1f066bbdf71fc7c9611c3603cc2799892e23dcd9ca9679fd4691dc37b7874c28eb1f13516d83eae1e76ac9", @ANYBLOB="01002bbd7000fedbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x7) syz_usb_connect(0x6, 0x24, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES64=r3, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac14140900000a003c7ff207cebfb98b22c0e85af5655738a695eaa033", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x27, 0xa, 0x8) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r8, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000006b80)=@delchain={0x20a4, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x1f7c, 0x2, [@TCA_BASIC_EMATCHES={0x440, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x0, 0x8, 0xb82}, {0x3, 0x0, 0x4}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x4, 0x2, 0xff87}, {0x5, 0x3, 0x0, "5efddf"}}}]}, @TCA_EMATCH_TREE_LIST={0x18c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc0, 0x3, 0x0, 0x0, {{0xd, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x9b, 0x5, "8f429edc722d43fa652bd5be2499d9f840638d10f1455f787186ba63d6e2bc643963583fa8c4db2abddd11884db619c3206b0feb4b989294f627afbf4c4251a73f5263d78580e0b0234e127d54f90e4b99656fce8bfdff5576c183395089bcd9a3ddb09ab7b1cadd28c12e089bb5d9943df51197d98c9e098f5680fb61a5cab2624511b2838e1e08256addbf4ae7f0629201d5d21be830"}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x5, 0x2, 0x81}, {0x5, 0x6, 0x1, "3cf4a9e6bc94"}}}, @TCF_EM_META={0x60, 0x1, 0x0, 0x0, {{0x1, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xfffc}, {0x8001, 0xc5, 0x2}}}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_VAR="85f1", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="f5dce0ecd840a636"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x1}, {0x4, 0x4}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0xb, 0x1}, {0x4, 0x3, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x80, 0x2}, {0x3, 0x3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1000, 0x8b}, {0x7f, 0x33, 0x1}}}]}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x9, 0x2, 0xb}, {0xffff}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xd, 0x3, 0x7}, {0x5, 0x1, 0x5, 0x7}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x8, 0x8, 0xb5}, {0x0, 0x2, 0x4}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x1988}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0xe, 0x2, 0x5}, {0x5, 0x7, 0x0, "6c2de50e6ac8ec"}}}]}, @TCA_EMATCH_TREE_LIST={0xb4, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x348c}, {{0x2, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0x84, 0x2, 0x0, 0x0, {{0x8000, 0x0, 0xff}, "a97e1d181e7f599b1ff4e2ef7ee83bc64f63b019cdb8fa5356c83b118c705f022ded20f3951350814befdced62f863dd04efc56943984e7d2adddd07d797c3daef8a15ae552e948e0f2318a0d9877b2b4fd5ee19a5dc585b5ecac79f42124eed45ae24378e80851593a4d36f77384f659318e39611a1"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xcb5, 0x1, 0x3cd4}, {0xd, 0x7, 0x2, 0x2, 0x5, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x14c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0xf608, 0x9, 0x6}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}, @TCF_EM_META={0x58, 0x2, 0x0, 0x0, {{0x1ff, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0x1e, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="8e80d289e3d62613b17d", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="1e88dca772d495b0", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x5}, {0x400, 0x0, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xb}, {0x9, 0xfc, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x4, 0x2}, {0x7299, 0x4}}}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x3, 0x8, 0x4}, {0x1, 0x4, 0x2}}}, @TCF_EM_CONTAINER={0xb0, 0x2, 0x0, 0x0, {{0x8001, 0x0, 0x2}, "41c82d95c40f7308db3e5a7ca696b17e8c49e7179032d9ea354ef86f78e6242d793067691b213d26c7e7d526e6f978e109345ae032a449b562ee7a8c796b54b096da6e62ce7c99620eab91ab099cbb438b1869d7050383734e8c68b2c292a153e8d2031b569afcd5b50d7bb3383d8701beeff7aead336bfdbe5716905426a3526aa77cd51198104def6baaf619a3793c9adda073e0b47a2faa50bf96526515f6580c5884"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0xdab8}, {{0x4, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x40, 0x1, 0x3}, {0xd7, 0x5, 0x6, 0x4, 0xa, 0x0, 0x1}}}, @TCF_EM_META={0x14, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x3}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x4]}]}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x92d, 0x2, 0x9}, {0xc71d, 0x9, 0x2, "ba4f12116747d2af86"}}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0xf, 0x9, 0x3}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}]}, @TCA_BASIC_ACT={0x4}, @TCA_BASIC_EMATCHES={0x14cc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1280, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xff, 0x4, 0xf330}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x7}, {0xad0, 0x80}}}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9, 0x3, 0x6}, {0x7, 0x3, 0x0, 0x2}}}, @TCF_EM_META={0x30, 0x2, 0x0, 0x0, {{0x1, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xff83}, {0xb086, 0x80, 0x6}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x3}, {0x2, 0x6}}}, @TCA_EM_META_RVALUE={0xa, 0x3, [@TCF_META_TYPE_VAR="5f5f5ee26fb1"]}]}}, @TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0x7, 0x9, 0x200}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x10, 0x3, 0x5a26}, {0x3, 0x9, 0x10}}}, @TCF_EM_IPT={0xa0, 0x2, 0x0, 0x0, {{0x6, 0x9, 0x3}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xa}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_DATA={0x54, 0x5, "e809b99f15345dd9c1db3d19107d398fc96f73cacfbc6bc14f66575d0cac562ac9f7d7e8b08aa91d251781918f4badafbd1afc3b62eb301ff599d2cef8d57977b85362cef12ac84359166b96291a4518"}]}}, @TCF_EM_IPT={0x12c, 0x1, 0x0, 0x0, {{0x7fff, 0x9, 0x7ff}, [@TCA_EM_IPT_MATCH_DATA={0x1f, 0x5, "5cab0538277c90b0a77ba6c2e998e6283a28294037584d0fcfd5a1"}, @TCA_EM_IPT_MATCH_DATA={0xfd, 0x5, "2fc1cd8260340c3414f069ff5d551851288191ec5af08ba783323b9230118c0d4526fd749c9359520f4c2c6efefae18b17cba460d2155e8cc452b1cc444d769680b60f92c70b6e55be377a7a83a51529bea4d84a36abc81f2d5f0f8105bc4588fc2b1a7356c7e3ce51adea5b67cea7da0c4318218ef40f93e52020235f5b56829bb822a1e157a6841026f11f06431139287274bab84ea4daaf5f2efd38717ec207055937e187615ac28b2698f93a38c56a3419b260871df3515750f2ddf8385e33cd806e0a5ed680324b91961677966892e047c73223c9e55e95d4b7a7c2dc465e191a8e9267f101a5980de974b6a20be354bb8d5ba7639f79"}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x400, 0x2, 0x7fff}, {0x0, 0x7, 0x0, "f3b057ff34bab4"}}}, @TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0x800, 0x0, 0xa}, "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"}}]}, @TCA_EMATCH_TREE_LIST={0x1e8, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x1, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x4, 0x1}, {0x5, 0x7, 0x2}}}]}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x101, 0x2, 0x8}, {0x7, 0x9, 0x1, "546fa7bc57decc0ac9"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1, 0x8, 0x200}, {0x2, 0x3, 0x1}}}, @TCF_EM_IPT={0x6c, 0x3, 0x0, 0x0, {{0x3, 0x9, 0x1200}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0xb, 0x5, "cd73f53ce02e27"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_DATA={0x1e, 0x5, "4c4defa979f0517839ea8017c396c5feb1a104a606a3e9d72ea8"}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x2fb, 0x7, 0x7f}, {{0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x91e8, 0x1, 0x3}, {0x2, 0x80000001, 0x40, 0x1, 0x7, 0x1, 0x2}}}, @TCF_EM_IPT={0x38, 0x2, 0x0, 0x0, {{0xc4ab}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}, @TCF_EM_CONTAINER={0xb8, 0x2, 0x0, 0x0, {{0x6, 0x0, 0x401}, "16c81c9796bcfb12de06423acb0be2a5c77d154d1eba854cfc06482d4520e74488c2bd379379bfc444b6de6e43b1ecc395daa85cf546b0c133a9bb18ddd6653e84571e9d57be96e86e38b1be3a52e2bd47d766df64a25f0c365a4d4df725d5690f45dbe76abf523598c63a3687536af632a189faa5edaf77e8e160badb7171f93c36d32f92148df34528d8281910308409e91573266b57338685c7778330615d4fba42a4b9525db8aaa7"}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0xffff, 0x2, 0x2}, {0x0, 0x7, 0x2, "bcd53055df6771"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x18, 0x3, 0x0, 0x0, {{0x6, 0x0, 0x5}, "32c5acec2cd60e47ad"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x8}, {0x6, 0x86b, 0xf, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff5, 0xfff2}}, @TCA_BASIC_POLICE={0x4}, @TCA_BASIC_EMATCHES={0x428, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0xffc, 0x2, 0xae6}, {0x7f, 0x9, 0xd010534b5d3ec2f5, "f9bfc6ef17dc02979e"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0xd}, {0xe841, 0x9, 0x9, 0x6, 0x9, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0xa4, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x5e2a, 0x8, 0xf463}, {0x3, 0x2}}}, @TCF_EM_META={0x38, 0x2, 0x0, 0x0, {{0x3}, [@TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="fab95ab3c4d816c16efe", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x4, 0x2, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_VAR="904eb95bc1e1c2", @TCF_META_TYPE_INT=0xa]}]}}, @TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0xad0, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xff28, 0x5, 0x2}, {0xa, 0x5}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x8, 0x1}, {0x6, 0x1, 0x1}}}]}}, @TCF_EM_IPT={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x9, 0xfff}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3a}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x4f, 0x2, 0xf000}, {0x5, 0x7, 0x0, "d4f9772df3f539"}}}]}, @TCA_EMATCH_TREE_LIST={0x188, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0xfffe, 0x2, 0xa}, {0x8, 0xa, 0x0, "6d787bac03d8e5116d06"}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x2d, 0x2, 0x6}, {0x3ff, 0x6, 0x2, "4c13fbe3db9c"}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5e91, 0x7, 0x4}, {{0x4, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x9, 0x2, 0x9}, {0xdc0e, 0x6, 0x1, "8133f3d1affa"}}}, @TCF_EM_IPT={0xf8, 0x1, 0x0, 0x0, {{0x7, 0x9, 0x9}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_DATA={0xb6, 0x5, "d3be7413ca6efd274b4e2886c38f953ce7c1e2245a03bbdc7645cf7d54c9e21d5e6320dbbf1d16f3279f19f48258fa21c8e50667e04b5e2497af660bcff8e9e42c96a4bc657f9265cde7ec411fc469a270f9f7f4bf0a689d402247f538cf74a553602c566f96c3404ff9d5b465faa42014f37fac6ae87279838daffae4cdef7f565cd9730b10ccf2431acb58995cf988e407b123de50701e87db8d9e6c8ca98ff092a8b21811bc958d35744f6b710a09b93c"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xc7}, @TCA_EM_IPT_MATCH_DATA={0x1a, 0x5, "48ae219904b98850ffb0776dd52925de8a9ee38182c0"}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0xd}, {{0x3, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0x9}, {0xfffffc00, 0x1, 0x7f, 0x1, 0x1, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x104, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x98, 0x1, 0x0, 0x0, {{0x7, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_DATA={0x3a, 0x5, "2f81ef4435cf8dc211b799c34539d11508fc61c9191f291d298a4918607091b5806ce1a2218b17aa8aee17fbc149432ae04ffe555c2b"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x62}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x800}, {0xfffffff9, 0x6, 0x1, 0x2, 0x3, 0x2, 0x2}}}, @TCF_EM_META={0x50, 0x1, 0x0, 0x0, {{0x7, 0x4, 0xb40}, [@TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="1d", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x6, 0x2}, {0x80, 0x3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xf}, {0x3, 0x6b, 0x1}}}, @TCA_EM_META_LVALUE={0xb, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR='+F\'']}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0x3}, {{0x3, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x5, 0x2, 0x58a2}, {0xc7, 0x8, 0x0, "63c88733694a16d0"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x80, 0x3, 0x7}, {0x5, 0x1, 0x2, 0xfffffff9}}}]}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x27, 0x7, 0x7}, {{0x1, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0xf8, 0x2, 0x8}, {0x0, 0xa, 0x2, "717ff88cbae122d96593"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3}, {0x6, 0x8686, 0x1, 0x1}}}]}]}, @TCA_BASIC_EMATCHES={0x12c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x128, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x2, 0x0, 0x0, {{0x3ff, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xff}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_IPT={0x30, 0x1, 0x0, 0x0, {{0x1, 0x9, 0x9}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xd1}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CONTAINER={0x98, 0x3, 0x0, 0x0, {{0x6, 0x0, 0x8c1}, "f6d16d637977cd462107c10ccc31101f689ead92133e467290088b5c0ea66362c4fcb845a66ba7d74c60b3aa56063742f8dbff8f35c15023d2fb870171cb7636e515b55c1163981102fa1531d67d334433d87a973dbdaed6341743151996ac2a7e1dbb41daac3a97da5268cc9d0c64cf66d252fc8283005b478d05a8fa629da57b7cf67f85c439bc8b"}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x8, 0x2, 0xe7}, {0x7, 0x7, 0x0, "17e201f0bd95e3"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x8, 0x1, 0x6}, {0x7fff, 0x8, 0x4, 0x3, 0x7}}}]}]}, @TCA_BASIC_EMATCHES={0x108, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x9c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x48, 0x7, 0x6}, {{0x1, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x68, 0x8, 0x11e3}, {0x3, 0x0, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x2, 0x4}, {0xff, 0x9, 0x0, "ecd2b73417eb9bc7d7"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0x3}, {0x2, 0x2}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x89e}, {0x9, 0x8001, 0x7, 0xb}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0xfff, 0x2, 0x9}, {0x8001, 0x6, 0x1, "9d9df0148f6d"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x680, 0x7, 0xba3}, {{0x1, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6f1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0xf, 0x0, 0x0, {{0x7e, 0x1, 0x800}, {0x5, 0x3, 0xf837, 0x0, 0x3, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x25, 0x1, 0x6}, {0x7, 0xa, 0x3, 0x6, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7ff}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0xac, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x2c}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "78368535c2437a2104eaf88b54e949ac"}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3b}, @TCA_FLOWER_KEY_ENC_OPTS={0x40, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x3c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x81}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xe1}]}]}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x80}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @broadcast}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "844fa5e430ec4f4511fc16a0926679a8"}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x4, 0x93}}, @TCA_RATE={0x6, 0x5, {0x9, 0xe}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x474a}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x20a4}}, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xffffff24) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r11, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001400020028bd7000fcdbdf25022041c8", @ANYRES32=r11, @ANYBLOB="08000200ac147479"], 0x20}}, 0x40000c0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000000180000ffffffffff2ab01e8c", @ANYRES32=0x0, @ANYBLOB="00600000061800001800128008000100767469000c00028008000100", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB], 0x40}}, 0x440b0) 1m11.824799184s ago: executing program 32 (id=514): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000440)="ebe3a0e9796cfd1647e299f4e376fdba12", 0x11}], 0x2, &(0x7f0000000940)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x28044854}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1400faff50e7581893ef6caf12f9a29a7d80878f11ebd0538480d4c5780b8b470b5311da711e0dc621ca166f0e588e031c7952e0ecb54dd6638dcffdc5a6266227c192410e89847edd37ab74f64a74bf741193206a1a9344643957cb7cfa8883dbe12695cf6f5eceff9a4667adb71a64aac4b4b94403bd4da3b0d371140927f1fa57fea99d282a4286421c1eeb26b5f99d18f3a96acae38e264a84d24263a3ae349727742632f12e829acb742ab0f7baadfeb15e4f7b353d79e19c47735bd1241ab8d7973f51e64637734388c37c8a04c743837f3a0ba00285288082c9a20bf27fbfedd72800fa827657e40246adeb5ed7", @ANYBLOB="41cb10b1c40fcd037b6cb9597fb5d3bf8b20edf6b625254ad47eff7263da9644fa00110f2f65d2561d5f0c3de4eb90bc6c7d7593c18b3c84f6f1a73cf565c2a8166c34f3f657c95f0600ca342f8da57699a143e4a204e34718d4a3b8f2baf0a25a131c2bcc8c6f41b1a6b6c260f9b8f8a13cb1449493e9ba799a3823ca2282600fc50383a6f854377c8f475b2590b26cbc44fc842b42230eea0d1f066bbdf71fc7c9611c3603cc2799892e23dcd9ca9679fd4691dc37b7874c28eb1f13516d83eae1e76ac9", @ANYBLOB="01002bbd7000fedbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x7) syz_usb_connect(0x6, 0x24, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES64=r3, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac14140900000a003c7ff207cebfb98b22c0e85af5655738a695eaa033", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x27, 0xa, 0x8) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r8, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000006b80)=@delchain={0x20a4, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x1f7c, 0x2, [@TCA_BASIC_EMATCHES={0x440, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x0, 0x8, 0xb82}, {0x3, 0x0, 0x4}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x4, 0x2, 0xff87}, {0x5, 0x3, 0x0, "5efddf"}}}]}, @TCA_EMATCH_TREE_LIST={0x18c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc0, 0x3, 0x0, 0x0, {{0xd, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x9b, 0x5, "8f429edc722d43fa652bd5be2499d9f840638d10f1455f787186ba63d6e2bc643963583fa8c4db2abddd11884db619c3206b0feb4b989294f627afbf4c4251a73f5263d78580e0b0234e127d54f90e4b99656fce8bfdff5576c183395089bcd9a3ddb09ab7b1cadd28c12e089bb5d9943df51197d98c9e098f5680fb61a5cab2624511b2838e1e08256addbf4ae7f0629201d5d21be830"}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x5, 0x2, 0x81}, {0x5, 0x6, 0x1, "3cf4a9e6bc94"}}}, @TCF_EM_META={0x60, 0x1, 0x0, 0x0, {{0x1, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xfffc}, {0x8001, 0xc5, 0x2}}}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_VAR="85f1", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="f5dce0ecd840a636"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x1}, {0x4, 0x4}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0xb, 0x1}, {0x4, 0x3, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x80, 0x2}, {0x3, 0x3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1000, 0x8b}, {0x7f, 0x33, 0x1}}}]}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x9, 0x2, 0xb}, {0xffff}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xd, 0x3, 0x7}, {0x5, 0x1, 0x5, 0x7}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x8, 0x8, 0xb5}, {0x0, 0x2, 0x4}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x1988}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0xe, 0x2, 0x5}, {0x5, 0x7, 0x0, "6c2de50e6ac8ec"}}}]}, @TCA_EMATCH_TREE_LIST={0xb4, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x348c}, {{0x2, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0x84, 0x2, 0x0, 0x0, {{0x8000, 0x0, 0xff}, "a97e1d181e7f599b1ff4e2ef7ee83bc64f63b019cdb8fa5356c83b118c705f022ded20f3951350814befdced62f863dd04efc56943984e7d2adddd07d797c3daef8a15ae552e948e0f2318a0d9877b2b4fd5ee19a5dc585b5ecac79f42124eed45ae24378e80851593a4d36f77384f659318e39611a1"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xcb5, 0x1, 0x3cd4}, {0xd, 0x7, 0x2, 0x2, 0x5, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x14c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0xf608, 0x9, 0x6}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}, @TCF_EM_META={0x58, 0x2, 0x0, 0x0, {{0x1ff, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0x1e, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="8e80d289e3d62613b17d", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="1e88dca772d495b0", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x5}, {0x400, 0x0, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xb}, {0x9, 0xfc, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x4, 0x2}, {0x7299, 0x4}}}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x3, 0x8, 0x4}, {0x1, 0x4, 0x2}}}, @TCF_EM_CONTAINER={0xb0, 0x2, 0x0, 0x0, {{0x8001, 0x0, 0x2}, "41c82d95c40f7308db3e5a7ca696b17e8c49e7179032d9ea354ef86f78e6242d793067691b213d26c7e7d526e6f978e109345ae032a449b562ee7a8c796b54b096da6e62ce7c99620eab91ab099cbb438b1869d7050383734e8c68b2c292a153e8d2031b569afcd5b50d7bb3383d8701beeff7aead336bfdbe5716905426a3526aa77cd51198104def6baaf619a3793c9adda073e0b47a2faa50bf96526515f6580c5884"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0xdab8}, {{0x4, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x40, 0x1, 0x3}, {0xd7, 0x5, 0x6, 0x4, 0xa, 0x0, 0x1}}}, @TCF_EM_META={0x14, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x3}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x4]}]}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x92d, 0x2, 0x9}, {0xc71d, 0x9, 0x2, "ba4f12116747d2af86"}}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0xf, 0x9, 0x3}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}]}, @TCA_BASIC_ACT={0x4}, @TCA_BASIC_EMATCHES={0x14cc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1280, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xff, 0x4, 0xf330}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x7}, {0xad0, 0x80}}}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9, 0x3, 0x6}, {0x7, 0x3, 0x0, 0x2}}}, @TCF_EM_META={0x30, 0x2, 0x0, 0x0, {{0x1, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xff83}, {0xb086, 0x80, 0x6}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x3}, {0x2, 0x6}}}, @TCA_EM_META_RVALUE={0xa, 0x3, [@TCF_META_TYPE_VAR="5f5f5ee26fb1"]}]}}, @TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0x7, 0x9, 0x200}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x10, 0x3, 0x5a26}, {0x3, 0x9, 0x10}}}, @TCF_EM_IPT={0xa0, 0x2, 0x0, 0x0, {{0x6, 0x9, 0x3}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xa}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_DATA={0x54, 0x5, "e809b99f15345dd9c1db3d19107d398fc96f73cacfbc6bc14f66575d0cac562ac9f7d7e8b08aa91d251781918f4badafbd1afc3b62eb301ff599d2cef8d57977b85362cef12ac84359166b96291a4518"}]}}, @TCF_EM_IPT={0x12c, 0x1, 0x0, 0x0, {{0x7fff, 0x9, 0x7ff}, [@TCA_EM_IPT_MATCH_DATA={0x1f, 0x5, "5cab0538277c90b0a77ba6c2e998e6283a28294037584d0fcfd5a1"}, @TCA_EM_IPT_MATCH_DATA={0xfd, 0x5, "2fc1cd8260340c3414f069ff5d551851288191ec5af08ba783323b9230118c0d4526fd749c9359520f4c2c6efefae18b17cba460d2155e8cc452b1cc444d769680b60f92c70b6e55be377a7a83a51529bea4d84a36abc81f2d5f0f8105bc4588fc2b1a7356c7e3ce51adea5b67cea7da0c4318218ef40f93e52020235f5b56829bb822a1e157a6841026f11f06431139287274bab84ea4daaf5f2efd38717ec207055937e187615ac28b2698f93a38c56a3419b260871df3515750f2ddf8385e33cd806e0a5ed680324b91961677966892e047c73223c9e55e95d4b7a7c2dc465e191a8e9267f101a5980de974b6a20be354bb8d5ba7639f79"}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x400, 0x2, 0x7fff}, {0x0, 0x7, 0x0, "f3b057ff34bab4"}}}, @TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0x800, 0x0, 0xa}, "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"}}]}, @TCA_EMATCH_TREE_LIST={0x1e8, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x1, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x4, 0x1}, {0x5, 0x7, 0x2}}}]}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x101, 0x2, 0x8}, {0x7, 0x9, 0x1, "546fa7bc57decc0ac9"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1, 0x8, 0x200}, {0x2, 0x3, 0x1}}}, @TCF_EM_IPT={0x6c, 0x3, 0x0, 0x0, {{0x3, 0x9, 0x1200}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0xb, 0x5, "cd73f53ce02e27"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_DATA={0x1e, 0x5, "4c4defa979f0517839ea8017c396c5feb1a104a606a3e9d72ea8"}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x2fb, 0x7, 0x7f}, {{0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x91e8, 0x1, 0x3}, {0x2, 0x80000001, 0x40, 0x1, 0x7, 0x1, 0x2}}}, @TCF_EM_IPT={0x38, 0x2, 0x0, 0x0, {{0xc4ab}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}, @TCF_EM_CONTAINER={0xb8, 0x2, 0x0, 0x0, {{0x6, 0x0, 0x401}, "16c81c9796bcfb12de06423acb0be2a5c77d154d1eba854cfc06482d4520e74488c2bd379379bfc444b6de6e43b1ecc395daa85cf546b0c133a9bb18ddd6653e84571e9d57be96e86e38b1be3a52e2bd47d766df64a25f0c365a4d4df725d5690f45dbe76abf523598c63a3687536af632a189faa5edaf77e8e160badb7171f93c36d32f92148df34528d8281910308409e91573266b57338685c7778330615d4fba42a4b9525db8aaa7"}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0xffff, 0x2, 0x2}, {0x0, 0x7, 0x2, "bcd53055df6771"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x18, 0x3, 0x0, 0x0, {{0x6, 0x0, 0x5}, "32c5acec2cd60e47ad"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x8}, {0x6, 0x86b, 0xf, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff5, 0xfff2}}, @TCA_BASIC_POLICE={0x4}, @TCA_BASIC_EMATCHES={0x428, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0xffc, 0x2, 0xae6}, {0x7f, 0x9, 0xd010534b5d3ec2f5, "f9bfc6ef17dc02979e"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0xd}, {0xe841, 0x9, 0x9, 0x6, 0x9, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0xa4, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x5e2a, 0x8, 0xf463}, {0x3, 0x2}}}, @TCF_EM_META={0x38, 0x2, 0x0, 0x0, {{0x3}, [@TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="fab95ab3c4d816c16efe", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x4, 0x2, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_VAR="904eb95bc1e1c2", @TCF_META_TYPE_INT=0xa]}]}}, @TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0xad0, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xff28, 0x5, 0x2}, {0xa, 0x5}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x8, 0x1}, {0x6, 0x1, 0x1}}}]}}, @TCF_EM_IPT={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x9, 0xfff}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3a}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x4f, 0x2, 0xf000}, {0x5, 0x7, 0x0, "d4f9772df3f539"}}}]}, @TCA_EMATCH_TREE_LIST={0x188, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0xfffe, 0x2, 0xa}, {0x8, 0xa, 0x0, "6d787bac03d8e5116d06"}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x2d, 0x2, 0x6}, {0x3ff, 0x6, 0x2, "4c13fbe3db9c"}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5e91, 0x7, 0x4}, {{0x4, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x9, 0x2, 0x9}, {0xdc0e, 0x6, 0x1, "8133f3d1affa"}}}, @TCF_EM_IPT={0xf8, 0x1, 0x0, 0x0, {{0x7, 0x9, 0x9}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_DATA={0xb6, 0x5, "d3be7413ca6efd274b4e2886c38f953ce7c1e2245a03bbdc7645cf7d54c9e21d5e6320dbbf1d16f3279f19f48258fa21c8e50667e04b5e2497af660bcff8e9e42c96a4bc657f9265cde7ec411fc469a270f9f7f4bf0a689d402247f538cf74a553602c566f96c3404ff9d5b465faa42014f37fac6ae87279838daffae4cdef7f565cd9730b10ccf2431acb58995cf988e407b123de50701e87db8d9e6c8ca98ff092a8b21811bc958d35744f6b710a09b93c"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xc7}, @TCA_EM_IPT_MATCH_DATA={0x1a, 0x5, "48ae219904b98850ffb0776dd52925de8a9ee38182c0"}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0xd}, {{0x3, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0x9}, {0xfffffc00, 0x1, 0x7f, 0x1, 0x1, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x104, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x98, 0x1, 0x0, 0x0, {{0x7, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_DATA={0x3a, 0x5, "2f81ef4435cf8dc211b799c34539d11508fc61c9191f291d298a4918607091b5806ce1a2218b17aa8aee17fbc149432ae04ffe555c2b"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x62}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x800}, {0xfffffff9, 0x6, 0x1, 0x2, 0x3, 0x2, 0x2}}}, @TCF_EM_META={0x50, 0x1, 0x0, 0x0, {{0x7, 0x4, 0xb40}, [@TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="1d", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x6, 0x2}, {0x80, 0x3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xf}, {0x3, 0x6b, 0x1}}}, @TCA_EM_META_LVALUE={0xb, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR='+F\'']}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0x3}, {{0x3, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x5, 0x2, 0x58a2}, {0xc7, 0x8, 0x0, "63c88733694a16d0"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x80, 0x3, 0x7}, {0x5, 0x1, 0x2, 0xfffffff9}}}]}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x27, 0x7, 0x7}, {{0x1, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0xf8, 0x2, 0x8}, {0x0, 0xa, 0x2, "717ff88cbae122d96593"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3}, {0x6, 0x8686, 0x1, 0x1}}}]}]}, @TCA_BASIC_EMATCHES={0x12c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x128, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x2, 0x0, 0x0, {{0x3ff, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xff}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_IPT={0x30, 0x1, 0x0, 0x0, {{0x1, 0x9, 0x9}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xd1}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CONTAINER={0x98, 0x3, 0x0, 0x0, {{0x6, 0x0, 0x8c1}, "f6d16d637977cd462107c10ccc31101f689ead92133e467290088b5c0ea66362c4fcb845a66ba7d74c60b3aa56063742f8dbff8f35c15023d2fb870171cb7636e515b55c1163981102fa1531d67d334433d87a973dbdaed6341743151996ac2a7e1dbb41daac3a97da5268cc9d0c64cf66d252fc8283005b478d05a8fa629da57b7cf67f85c439bc8b"}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x8, 0x2, 0xe7}, {0x7, 0x7, 0x0, "17e201f0bd95e3"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x8, 0x1, 0x6}, {0x7fff, 0x8, 0x4, 0x3, 0x7}}}]}]}, @TCA_BASIC_EMATCHES={0x108, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x9c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x48, 0x7, 0x6}, {{0x1, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x68, 0x8, 0x11e3}, {0x3, 0x0, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x2, 0x4}, {0xff, 0x9, 0x0, "ecd2b73417eb9bc7d7"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0x3}, {0x2, 0x2}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x89e}, {0x9, 0x8001, 0x7, 0xb}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0xfff, 0x2, 0x9}, {0x8001, 0x6, 0x1, "9d9df0148f6d"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x680, 0x7, 0xba3}, {{0x1, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6f1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0xf, 0x0, 0x0, {{0x7e, 0x1, 0x800}, {0x5, 0x3, 0xf837, 0x0, 0x3, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x25, 0x1, 0x6}, {0x7, 0xa, 0x3, 0x6, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7ff}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0xac, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x2c}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "78368535c2437a2104eaf88b54e949ac"}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3b}, @TCA_FLOWER_KEY_ENC_OPTS={0x40, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x3c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x81}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xe1}]}]}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x80}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @broadcast}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "844fa5e430ec4f4511fc16a0926679a8"}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x4, 0x93}}, @TCA_RATE={0x6, 0x5, {0x9, 0xe}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x474a}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x20a4}}, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xffffff24) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r11, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001400020028bd7000fcdbdf25022041c8", @ANYRES32=r11, @ANYBLOB="08000200ac147479"], 0x20}}, 0x40000c0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000000180000ffffffffff2ab01e8c", @ANYRES32=0x0, @ANYBLOB="00600000061800001800128008000100767469000c00028008000100", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB], 0x40}}, 0x440b0) 1m3.572959654s ago: executing program 1 (id=606): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/power/pm_freeze_timeout', 0x42, 0x0) sendfile(r0, r0, 0x0, 0xa) syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x20, 0x4, 0x2, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) write$usbip_server(0xffffffffffffffff, &(0x7f0000002200)=ANY=[], 0x321c) socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffff", 0x9) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) syz_emit_ethernet(0x195, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"/507], 0x0) 1m2.324169893s ago: executing program 1 (id=626): r0 = fanotify_init(0x10, 0x101000) write$binfmt_elf64(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="7f454c462200001c"], 0x40) r1 = socket$netlink(0x10, 0x3, 0xb) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8']) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf251400000008000300", @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x40801}, 0x4040) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r4, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x4000090) sendto$packet(r2, &(0x7f0000000200)="05178100", 0x4, 0x50, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) r8 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff) keyctl$revoke(0x3, r8) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_TMR_START(r9, 0x5402) ioctl$SNDCTL_SEQ_OUTOFBAND(r9, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x5, 0x6, 0x0, @generic=0xfffffffe}) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0x9, &(0x7f0000000080), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x5, &(0x7f00000003c0)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x34}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="050427bd7000fedbdf2501000000110001003088bcef3a5eaf3204c8d25d6af48ae4ca682bf9517f9848855fd130778c706f0a407fd4e2ae2c4ebbafe5d84936b2571dbb820196517a13323999282f5c482ad5e7cbd263829cf0241deaeefcd48002ed4a4bc004924894b7cad50c009a3a1ebdf7d2", @ANYRES32=r13, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b757000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) 1m2.059952153s ago: executing program 1 (id=635): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000009000000000000000000008300"], 0x0, 0x51}, 0x28) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000000)={0x2, 0x100000000, 0xa1, 0x2, 0x9, 0x4, 0x5}) 1m2.059412454s ago: executing program 1 (id=636): syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0xa1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./file0\x00') symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) write$P9_RLINK(r0, &(0x7f0000000180)={0x7, 0x47, 0x1}, 0x7) 1m1.997147623s ago: executing program 1 (id=639): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, 0x0, 0x40000100) (async) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x139c2000) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) (async) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x15, 0x300, 0x70bd29, 0x25dfdbfb, {0xf, 0xd6}, [@INET_DIAG_REQ_BYTECODE={0xf, 0x1, "3202879930cf92e4be2156"}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4000801) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m1.630906433s ago: executing program 1 (id=646): nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) recvfrom$l2tp6(r0, &(0x7f00000004c0)=""/22, 0x16, 0x100, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0x10) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYRES32], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000005c0), 0x4a3, 0x258602) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) pselect6(0x40, &(0x7f0000000180)={0xc, 0x4, 0x8, 0x2, 0x0, 0xc, 0x3, 0x8000000000000001}, &(0x7f0000000200)={0x5, 0x0, 0x8, 0x376, 0xc, 0x6, 0x4, 0x9}, &(0x7f00000002c0)={0x6, 0xc53, 0x0, 0xe1, 0x3ff, 0x472f4429, 0x80008, 0xf}, &(0x7f0000000380)={0x77359400}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x7ffffffe]}, 0x8}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @private, @broadcast}, &(0x7f0000000580)=0xc) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xf}, {0x9, 0x1}, {0x6c2cdf7bf4b92640, 0xc}}, [{0x8, 0xb, 0xf30a}, {0x8, 0xb, 0x8}, {0x8}]}, 0x3c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0xfffffffffffffe1c, &(0x7f0000000540)={&(0x7f0000000440)=@gettfilter={0x0, 0x2e, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xfff2, 0xffe0}, {0xffff, 0x7}, {0xb, 0xffff}}, [{0x0, 0xb, 0xc6dd}, {0x0, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x240440dc}, 0x20000000) r9 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r9, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 1m1.584527057s ago: executing program 33 (id=646): nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) recvfrom$l2tp6(r0, &(0x7f00000004c0)=""/22, 0x16, 0x100, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0x10) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYRES32], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000005c0), 0x4a3, 0x258602) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) pselect6(0x40, &(0x7f0000000180)={0xc, 0x4, 0x8, 0x2, 0x0, 0xc, 0x3, 0x8000000000000001}, &(0x7f0000000200)={0x5, 0x0, 0x8, 0x376, 0xc, 0x6, 0x4, 0x9}, &(0x7f00000002c0)={0x6, 0xc53, 0x0, 0xe1, 0x3ff, 0x472f4429, 0x80008, 0xf}, &(0x7f0000000380)={0x77359400}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x7ffffffe]}, 0x8}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @private, @broadcast}, &(0x7f0000000580)=0xc) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xf}, {0x9, 0x1}, {0x6c2cdf7bf4b92640, 0xc}}, [{0x8, 0xb, 0xf30a}, {0x8, 0xb, 0x8}, {0x8}]}, 0x3c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0xfffffffffffffe1c, &(0x7f0000000540)={&(0x7f0000000440)=@gettfilter={0x0, 0x2e, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xfff2, 0xffe0}, {0xffff, 0x7}, {0xb, 0xffff}}, [{0x0, 0xb, 0xc6dd}, {0x0, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x240440dc}, 0x20000000) r9 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r9, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 11.655291835s ago: executing program 0 (id=1017): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca", 0x21}], 0x1}, 0x4) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) (async) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f0000000180)='./file1\x00') (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x0, 0x2, 0x3, 0x1, 0x6, 0x7fffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007800800124000000000050015"], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) 11.595085909s ago: executing program 0 (id=1019): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x0, 0x2, 0x2, 0x9, 0xfffe}, 0x20) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ftruncate(r3, 0x4a8e) (async) write$selinux_load(r3, &(0x7f0000000400)={0xf97cff8c, 0x8}, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x9}) (async) ioctl(r2, 0x8b32, &(0x7f0000000040)) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@newsa={0x184, 0x10, 0x1, 0x8000000, 0x0, {{@in=@private=0xa010101, @in6=@empty, 0x0, 0x0, 0x4e24, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x4000000000, 0x0, 0x0, 0x0, 0x8000000000000}, {0x0, 0x6}, {0x10, 0xd29}, 0x0, 0x0, 0xa, 0x1}, [@algo_aead={0x4c, 0x12, {{'morus1280-avx2\x00'}, 0x0, 0x180}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x184}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r7, 0x0, &(0x7f00000001c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11.440437642s ago: executing program 0 (id=1021): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents64(r1, &(0x7f0000000000)=""/166, 0xfb) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x814) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r8 = fanotify_init(0xf00, 0x2) fanotify_mark(r8, 0x105, 0x8971, r7, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x14b145, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f00000003c0)={0xd8}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x800, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffffeff, 0x9, 0xffffff01, 0x0, 0x8}}]}]}}}]}, 0x68}}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) sendto$packet(r3, &(0x7f00000002c0)="44c30100000000000000c0c288a8", 0xe, 0x4004831, &(0x7f0000000440)={0x11, 0x8100, r6, 0x1, 0x2, 0x6, @remote}, 0x14) connect$can_j1939(r1, &(0x7f0000000100)={0x1d, r6, 0x3, {0x0, 0x0, 0x4}, 0x81e30397f9712549}, 0x18) r10 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r11, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r10, 0xc06864ce, &(0x7f0000000780)={r12, 0xfffffffd, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x400, 0x9], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r13}) r14 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r14, 0x5600, &(0x7f0000001040)) close_range(r0, 0xffffffffffffffff, 0x0) 11.145920188s ago: executing program 0 (id=1027): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000400000791090000000000069010a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @flow_dissector}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x80000006, 0x185801) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180050001"], 0xa4}}, 0x40) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x7e}) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r7 = syz_open_dev$loop(&(0x7f0000000180), 0x3, 0xa8503) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x48401) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r8, 0xc008551c, &(0x7f0000000340)=ANY=[@ANYBLOB='\r\x00\x00\x00\b']) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001280)={r4, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "0500000000000000d1f8a0e91ddaaca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r3) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0xb, @mcast2, 0x9}, 0x1c) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r5, 0xc0106450, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r5, 0xc0106450, &(0x7f0000000200)={r10, 0x1, 0x1}) 10.917752298s ago: executing program 0 (id=1031): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x18, 0x50}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x28) 10.869453919s ago: executing program 0 (id=1032): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x2e, 0x0, &(0x7f00000064c0)) (async) r1 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r1, &(0x7f0000001e80)=""/96, 0x60) socket$unix(0x1, 0x5, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) setresgid(0xee00, 0xee01, 0x0) (async) setgroups(0x0, 0x0) setuid(0xee00) (async) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) (async) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000040)={0x3}, 0x1) (async) sendto$inet6(r4, &(0x7f0000000340)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r5) ioctl$PPPIOCDISCONN(r5, 0x7439) (async) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b00000004400010029bd7000040000000200000004004880900001"], 0xb0}, 0x1, 0x0, 0x0, 0x801}, 0x4008094) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x130, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x100, 0x2, {{0x6, 0xfffffff8, 0xb, 0x9, 0x81}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xffffffffffffffff}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_RATE64={0xc, 0x8, 0xde1371c0fabddd3}, @TCA_NETEM_REORDER={0xc, 0x3, {0x1, 0x5}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2f93efb7c9bfc43b}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x100000001}, @TCA_NETEM_LOSS={0x6c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x9, 0xffffffff, 0xb4}}, @NETEM_LOSS_GE={0x14, 0x2, {0x1000, 0x1ff, 0x4, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x2, 0x400, 0xa51, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffffff00, 0x6118, 0x200, 0x58f6}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x6, 0xfffffffb, 0x5}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0xd61, 0x5, 0x3, 0xe, 0x8}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x130}}, 0x20000000) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000040)=0x80000001, 0x4) 3.980439907s ago: executing program 4 (id=1118): close(0x3) (async) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x2400, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0], 0x1, 0x9, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000004c0)={&(0x7f0000000300)=[0x0, 0x0], 0x2, r1}) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x1) (async) syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x4, 0x1001}, 0x4) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x3, 0x0, &(0x7f00000001c0)) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = open(&(0x7f00009e1000)='./file1\x00', 0x400000, 0x100) (async) socket$netlink(0x10, 0x3, 0x12) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) rmdir(&(0x7f0000000040)='./file2\x00') (async) chdir(&(0x7f0000000140)='./file0\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000305fcffffff0000040000000000", @ANYRES32=0x0, @ANYBLOB="1111020031000000280012800b0001006d61637365630000180002800c0004000300000100c280000800050058a3cacc08000500", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0xc8d4}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff0100000003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES64=r7], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) sendmsg$IPSET_CMD_SWAP(r6, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB="6800feff05060102000000000000008000000006050001000700000005000100070000000900020073797a31000000000900020073797a31000800000900030073797a32000000000900030073797a31000000000500010007000000090001f8ffff7a3200000000"], 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x4080) (async) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x3c) 3.900140246s ago: executing program 4 (id=1120): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x17, 0x1, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,privport,']) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=0x1, 0x17, 0x1, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22,privport,']) (async) 3.897546455s ago: executing program 4 (id=1122): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000000100"/20, @ANYRES32=0x0, @ANYBLOB="8040010000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x24040010) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$sock(r0, &(0x7f0000002500)={&(0x7f0000002300)=@nfc_llcp={0x27, r5, 0x1, 0x5, 0x7, 0x9, "e80c1a312e5fc9f3fcb8ecc28fcdc7e2a5db6939d882c49ca963e5a9ca377e207360c8d43e24ebeb66648d49239d8407d7fcc1748fc28793e01e143b9154a0", 0x28}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002380)="6940837915edbb218894b9cfef14a0a491f7409295e62ac41c336b26d95bd0617e544e8f9c6e01c1caa16ba43006e391e36e34", 0x33}, {&(0x7f00000023c0)="92159b1f72fd2bc154163c4e7e7090b830ce2ef98c7dad75bee6753d19800aceaeafdc539d0d091825b5db4a85e6da973e14ee990953064c742422e8f75a73b362e6adae7d34f61727034e8546d7c1129f39e963fcef19e4ae841f14ac0fde3d967ad1f69990616c4c5a42769b15352b2078efe22dbf272d31ffe2fc94404e6adfc203252310625f4b26137cbfb0ea45e86d24d12df9e669b4c3f7e494ac7c786a2e26f8bc746e060900c059f6995ce002c336aa40bd9e3d28dbca5dd1c1a6f49c7ea785c326da4e72ada7c6aaae01c4be67b06afbcbdae106ee68449b4ef9da48f2bf51a024bb1901cd660fd67aa0837fb9342f8df6123c", 0xf8}], 0x2}, 0x20000001) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x3, 0x3}}, 0x10) bind$tipc(r6, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, 0x0, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000080), &(0x7f0000000300)=r8}, 0x20) r9 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r9, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f00000000c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="7400000000f34c49204106142c6163636573733d198d45488fbedc9d6e4076d7392ef3428944ef3f88121e21d497b6309aeb22d9c10d277439bcaddf60dd32d5cc43a34681702aa442ff51a4464b26f23dd6b9ec04004da5b455ee201ae4ae5b5e9611d661cf56785ebc954e", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') 3.719933987s ago: executing program 2 (id=1124): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000000001010400000000000000000a0000009351e0fc93622a0b207ec04129a5879ec26fb5855dceceee5b8fa169eab36e7243ff03de1c9c0948b77f0e47526a2e6daa085f46fdd14a174fdec22df4b2b370dfbe4e79e7b00b3d3c2c5cf55697aa156505bbe815a9c65ae9604a8207f29adc601d95b974bec6c88002ab0d8dd0f1e7ed5612e131f1ae945ca10280c275fe6723a5ba545fe0229ccaf00503"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 3.530078149s ago: executing program 2 (id=1126): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x6, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000140)) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x9c, 0x30, 0x48b, 0xfffffffe, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x3ffe, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2}, @multicast2, @rand_addr=0x64010102}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x4004010) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@host}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@host, 0xffffff01}, 0x1}) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0xfffffffe}}, 0x2e) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet_mtu(r6, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) (async) mkdir(&(0x7f0000000040)='./bus\x00', 0x49) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$overlay(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) 3.529684167s ago: executing program 2 (id=1127): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) (async, rerun: 64) r1 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) (rerun: 64) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x13, r1, 0x81000000) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000000)={'comedi_bond\x00', [0x3, 0x2, 0x7fffffff, 0x8, 0x2f, 0x9, 0xed, 0x890, 0x80ffa, 0x4, 0x8, 0x8501, 0x1031, 0x1000004, 0xf, 0x40000009, 0xfff7ffa6, 0x7ffffffd, 0x1ff, 0x9ea, 0x3, 0xb, 0x8, 0x7, 0x1, 0x8, 0x5, 0x8, 0xf, 0x2000006, 0x77fd]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) (async) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x8140, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r4, 0x7b0, &(0x7f00000000c0)={@any, 0x7}) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8917, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4e24, @rand_addr=0xac14141d}}) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000500)={0x44, r3, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#/-}\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004801}, 0x40800) 809.778332ms ago: executing program 2 (id=1128): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000102000000000000fc00"/24], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x201, 0x4, {}, {}, {}, 0x1, @can={{}, 0x3, 0x4, 0x0, 0x0, "140400"}}, 0x48}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async) unlink(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) sendmsg(r0, &(0x7f0000000d00)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x631, @remote, 0xff31}, 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)="8f036a71ce710b449ddb19930c062b79c908669883a5f8d0e3466a270843fbdc58ca5399d8ce5d17202ce73929", 0x2d}, {&(0x7f0000000540)="11b115e64176711f6286e41af2542384ca056834240349f6cb3ad27668c751e3a16dc316a8901420", 0x28}], 0x2, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x508}, 0x855) (async) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000400)="e970d6ea0600000000284b6819cd4222f0cc540000007a12e5cdb79f49f1aed79adc3252825a86a526a3501fb1dd8dff3e90d6f5", 0x34}], 0x1) (async) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000015) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x40015b0b, &(0x7f0000000040)) (async) readv(r3, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) (async, rerun: 32) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async, rerun: 32) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x9, 0x2}, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (rerun: 32) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x4, 0x22, 0x0, 0x0, 0x8, 0x1, 0x9, 0x81, 0x6, 0x0}) r6 = signalfd4(r2, &(0x7f0000000640)={[0x5c]}, 0x8, 0x80000) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000600)={0x0, 0x8001, "a3bb63", 0x81, 0x6}) (async, rerun: 32) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x4010, r0, 0xdc3c0000) (async, rerun: 32) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x72, 0x160341) r8 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r8, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/78, 0x4e}], 0x1) (async) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000040)) (async) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000040020004000000002"], 0x50) 809.331026ms ago: executing program 5 (id=1129): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\t\x00\b\x00'/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000240012800b0001006272696467650000140002800800050001000000080001001c000000"], 0x44}}, 0x0) 808.644911ms ago: executing program 4 (id=1130): sendmmsg(0xffffffffffffffff, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000580)="f63eae8eb2c77d8e1e5208792c654302b7c4bdf7ad111f48a50e85df00bd301393313057e5b2af3ec845cdd10c335775b48592c07c328651b1060c1769bf5524a28a4f715d4b52c418e79f4e70b6d904974e84eba5c77ea18a3625e720cdd2a724bdf89a8cbb", 0x66}], 0x1, 0x0, 0x120}}], 0x1, 0x50) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB='OGAIN \''], 0xbb) close(r0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b7ec) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x140001, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0xd) write$binfmt_elf32(r1, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0x8, 0x55, 0x1, 0x3, 0x6, 0xffffff00, 0x19e, 0x38, 0x160, 0x9, 0x9, 0x20, 0x1, 0x7, 0x7, 0x101}, [{0x3, 0x3, 0x7f, 0x1, 0x6, 0x400, 0x7fff, 0x7f}]}, 0x58) close(r1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 700.176734ms ago: executing program 5 (id=1131): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x6, 0x2400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x100, 0x9, 0xfffffffc, 0x10, r1, 0x8, '\x00', r2, r3, 0x4, 0x0, 0x0, 0xc}, 0x50) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) 650.122093ms ago: executing program 5 (id=1132): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x82, 0x40007d, &(0x7f0000000000)="03020016018a9004", 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000fef000/0x10000)=nil, 0x10000, 0x0, 0x40010, r0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xffaf) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000500)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}}) (async) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}}) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x8, 0x0, 0x0, 0x101, 0x42, 0x5a, 0x42, 0x4}) (async) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x8, 0x0, 0x0, 0x101, 0x42, 0x5a, 0x42, 0x4}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) read$FUSE(r3, &(0x7f00000010c0)={0x2020}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000003100)='./file0\x00', &(0x7f0000003140), 0x4000) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000003100)='./file0\x00', &(0x7f0000003140), 0x4000) fstat(r2, &(0x7f00000031c0)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 569.788234ms ago: executing program 5 (id=1133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='hfs\x00', 0x200013, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@map=r0, 0x4, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000340)=0x80002, 0xff91) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r3, &(0x7f0000000040)="0d2bc7e48314bf370cfc1ec8bd0e32276439c51982262c56cf410930d6e02b", 0x1f) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x40, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "b335dd45aa49e7"}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "a36b"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = accept4$phonet_pipe(r2, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x0) accept4$phonet_pipe(r4, &(0x7f0000000380), &(0x7f00000003c0)=0x10, 0x80800) 490.312032ms ago: executing program 4 (id=1134): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) shutdown(r4, 0x1) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000002200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1}, @ptr={0x70742a85, 0x80000, 0x0, 0x0, 0x1, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x3a}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 489.359708ms ago: executing program 5 (id=1135): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002080)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000002180)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002280)={r2, r3, r4}, 0xc) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f00000022c0)={0x100000001, r0, 'id0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f0000002340)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x18000, 0x1000, 0x4, 0x6, 0x400, "a53f10745ce436cad28c6317ec5c954af3d3575f3f507a655005e140c1ac18d2447f260fa02aefb9c15711f2d1fda677297d63d4b399e3406617fff9589ec4046f144d12b44cbd5a0ee0a206d9d56fa31e0f19735af896240090d9eeb23e5f58f86c56900018ac499270de237e47d03326ffbf4d7a8a2added180706dd269ad5"}) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000002400)={0x62, @empty, 0x4e20, 0x1, 'sh\x00', 0x3, 0x80000001, 0x2d}, 0x2c) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000002440)=0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000002480)={0x6, 0xd, 0x1, 'queue1\x00', 0x6}) mount(&(0x7f0000002540)=@loop={'/dev/loop', 0x0}, &(0x7f0000002580)='./file0\x00', &(0x7f00000025c0)='romfs\x00', 0x1, &(0x7f0000002600)='k\x00') write$sndseq(r5, &(0x7f0000002640)=[{0x58, 0x3, 0x8, 0x1, @time={0x5, 0x8}, {0x1, 0x8}, {0xf7, 0x1}, @raw8={"f3597cfa7c1c5cf2ec8aeffa"}}, {0x64, 0x1, 0x9, 0x9, @tick=0x2, {0x3, 0x2}, {0x9d, 0x4}, @quote={{0x0, 0x44}, 0x7f}}, {0x0, 0x0, 0x8, 0x0, @time={0x7f0, 0x961}, {0x40, 0xc0}, {0xfa, 0x6}, @result={0x4, 0x4}}, {0xa, 0x81, 0x0, 0x7f, @time={0x279, 0x90000000}, {0x3, 0x81}, {0x2}, @connect={{0x8e, 0x3}, {0x0, 0xf9}}}, {0x5, 0xb0, 0xd, 0x0, @time={0xab5, 0x4}, {0x2, 0xe}, {0x6d, 0x2}, @time=@time={0x9508, 0x4}}, {0x1, 0x1e, 0x40, 0x8c, @time={0x3, 0x5}, {0x5, 0x4}, {0x0, 0xfc}, @note={0x1, 0x1, 0x7, 0xf, 0x80000001}}, {0x4, 0x3, 0xe9, 0x7, @time={0x3, 0xffffffff}, {0x1, 0x6}, {0x8, 0x3}, @note={0x4, 0x5, 0x43, 0x80, 0xffff}}], 0xc4) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000002980)={{'\x00', 0x3}, {0xaa}, 0x14, 0x0, 0x0, &(0x7f0000002740)='./file0\x00', &(0x7f0000002780)='./file0/file0\x00', &(0x7f00000027c0)="380aeb3e5a1b", 0x6, 0x0, &(0x7f0000002800)={0x2, 0x74, {0x1, 0xc, 0x9, "b94f81f747b00fc7ba", 0x5e, "ddfc60c0ca6a4cbc50ee8a38e537785e08165918bf19462b9f40033931bfb82a302fd8a0ec9e04cd003f208ba77d6b551751714bcb1b3203bba9ec416ccb2d17717e0c7cfb04b9f658ba1b702074986711845034d73c3807c0f61ae3224d"}, 0xf4, "31d151ea32c04e1c2610983001ee5b116b5d03fdce081f58e835414b84636bc71cb4cdc8beec2b9be9bc96b63201f702d62a7412f9f5682766a9de15881f2c7d42922be9e2c861259597fded6e2c35b6a465ebe212cfdf0b749037e72412da19b91f6ca2990dacfea05387cf8ad41907f86fc0a5c4aa2287abbdb8557e0049328b274021d1515b946d70ec983be4783b2783f691ce9b6f0b824b456203073c82b6826f792f652ce66b94f1f9ed93b6036794538bc10a5d77bb7d4ee642d25092084071f9a71ae81fff323b767eb9bb876c0c56b27e48c6621f8096de2b76139042ff0d48799ca0ed5027c3e82f29a7f5be68bd84"}, 0x174}) write$binfmt_script(r0, &(0x7f0000002a00)={'#! ', './file0/file0', [{0x20, '*+^/\\:\'^*%@\x8c'}, {0x20, '\x00'}], 0xa, "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"}, 0x1020) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000003a40)) ioctl$IOC_PR_RELEASE(r5, 0x401070ca, &(0x7f0000003ac0)={0xfffffffffffffff7, 0xd5e, 0x1}) r6 = open_tree(r0, &(0x7f0000003b00)='./file1\x00', 0x8d180) setuid(r3) syz_io_uring_setup(0x1ab6, &(0x7f0000003b40)={0x0, 0x7fff, 0x4400, 0x1, 0x2b4, 0x0, r0}, &(0x7f0000003bc0)=0x0, &(0x7f0000003c00)=0x0, &(0x7f0000003c40)) setresgid(r4, r1, r1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003d80)={@map=r5, 0x6, 0x0, 0xfff, &(0x7f0000003c80)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000003cc0)=[0x0], &(0x7f0000003d00)=[0x0], &(0x7f0000003d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000003e00)={0x1ff, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003dc0)={@cgroup=r6, r5, 0x10, 0x203c, 0x0, @void, @void, @value=r11, @void, r10}, 0x20) r12 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000003e40), 0x4040, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000003e80)={r0, r0, 0x4, r12}, 0x10) cachestat(r5, &(0x7f0000003ec0)={0x2, 0x5}, &(0x7f0000003f00), 0x0) syz_io_uring_complete(r7, r8) ioctl$UFFDIO_POISON(r12, 0xc020aa08, &(0x7f0000003f40)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000003f80)={{r9}, 0x8000000000000001, 0xffffffff, 0x3}) socket$inet6_sctp(0xa, 0x5, 0x84) 409.342129ms ago: executing program 4 (id=1136): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x7eed1c6096b46919, 0x70bd29, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x34}, @fd={0x66642a85, 0x0, r4}, @flat=@handle={0x73682a85, 0x0, 0x1}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r6 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @loopback}, {0xa, 0xfffd, 0xfffffffd, @remote}, r10, 0xfffffffc}}, 0x48) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000140)={0x6, 0x0, r9}) ioctl$DVB_DVR_DMX_EXPBUF(r11, 0xc00c6f3e, &(0x7f0000000180)={0xffff8001, 0x80000, r7}) close_range(r7, 0xffffffffffffffff, 0x0) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r12, &(0x7f0000002fc0)={0x2020}, 0x2020) 403.236078ms ago: executing program 5 (id=1137): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$nbd(r1, &(0x7f0000000340)={0x67446698, 0x1, 0x0, 0x1, 0x3, "38abe950a9089fa7a34ece86a900eb8c99039f6d67507e97acf4ef0d977147e601f1101b013d28264a350dc2d677c10c0be69e97b9bf19f2836379f347f64f84422d9e23e66e9caed020678001453b0c0e8cdc0308e369e589226f114cf5058ccf5fefbb9159881ab0f13c9003ed1df3ae46a6f41d3d5133f84d12ee7e5dfe2429b9502c90125702703bc9e0d6482bebf03ba2b70dc8da67279d2a5d3bd5f0d7601fc156be42b7efecb5cdc971555508b04383c043f264"}, 0xc7) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r2, &(0x7f0000000000)=@known='system.posix_acl_default\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x4070bd28, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x18) read(r0, &(0x7f00000001c0)=""/83, 0x53) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0, &(0x7f0000000000)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 69.621839ms ago: executing program 2 (id=1138): ioctl$XFS_IOC_GET_RESBLKS(0xffffffffffffffff, 0x80105873, &(0x7f0000000000)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) ioctl$BLKCLOSEZONE(r0, 0x40101287, &(0x7f0000000080)={0x7, 0x7f}) r1 = signalfd(r0, &(0x7f00000000c0)={[0x3]}, 0x8) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) r2 = accept$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c) setsockopt$inet6_buf(r2, 0x29, 0xcd, &(0x7f0000000180)="6344f68bdc40cd8d2da33ca3df7c798c9254d3ff4488ce9f4a175173780023427ffeb2e3f5cef6b304faa963004fb14e163043bd83a3ef60b32b1eebaaa1078ce1d4239cc5bbadbf185d4ca95859dc4995e77bbb350e37436eb5796f0e2b5e5808ff4e2007fbe1542d09861173df42c14d1271ddbb50c79bc773fceb40231a4376ec7d6a1b3521f09cd75ad3c712291547a156", 0x93) close(r0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) flock(r2, 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000280)={0x0, 0x5}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r3, &(0x7f0000000340)=0x4) fsopen(&(0x7f0000000380)='v7\x00', 0x1) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000400)=0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000440)=0x7, 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000480)=0x800, 0x8) read$FUSE(r1, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$setown(r2, 0x8, r5) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000002580)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000025c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000003700)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000036c0)={&(0x7f0000002600)={0x10b4, r6, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0x40, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa20}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'v7\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/nullb0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80000000}, @ETHTOOL_A_LINKMODES_OURS={0x1008, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "9ccf6f0a58b484eb936138b6c6653f47c1c694cd30d320eeea661aa82c7c689e9c3fbde3933a72bd855f54a2efea52641d3fae9ee24fb085efb1e43aa31cf58d8e6c7644a285520aba743af2208b93a21964741e5a9cc2e502986a8f5f1017aac96ee1aa7ca040f1dfd21f9b23b3cc02425dfc6a6e1e8b4edc1bc0c41e52eefd91a8fea6a70327f73a06e3f264c3c860810776df5467cffdafbfbc444b6a77f64610c5d3ada71d55da7587e4a2ca8c32631d7ba1ad3fc1d62fcf30003970f9f0f9692e37bd15cfb5f8578f704dd47ba975fb6bdf5e7d234e049bb0df803d69eb50950c80b118bf9491ec647fbfc25e605eb3ba9959f828c0af954cfc6d8c651d3f9da1719d7eb8a675b60f0167366ee78bf0fc79916928642d54ae4b28a321900e5d8e07ca1b1443092edc072597989ebf8cdc953e660284e79aa6f5f9f9d0b92e90f33601991a6eb0401aa1f0ebf7c10095b246aa870261b1a339d0a47fcfad4d584ac1cd9cde177e753e98adc77ef320025902c624a88d600402218fe1aaf7f385b71b1074f0bc40d74ba282e072002e9253448fd11df1cfdd659d53ead0f540fe09ae3557cc7575d2dc8c216fd84e9c3de5c4f90fecab6ee3936875b95a0f2fe977eef18389ccab2efdfb26c732543fef77e088c7a237463041fb5ba206c7465fb1fb41130a2630954063ad72b7046e5088b060bf9fa1b83199a22fb157eeaf5c24567bb3ae6b5e5bfbbdb1d5b72e005f0a43c85252cdb6e851008741b4b64e70a6179c90bd75fedd912f31700555e963f0bb1cbca574c6b3ca029fca488c40fb992b65a53a4e3bfc8c772507012aeceab402e17cb17976b2593008dc959391709f0afb2f7295c2ea5aff36e3c69174e1267b94ee8bc87d981d6a1516651b32dee5ed3c39e22decb5a6f10be245c836a1249a6bc1f9df6e2511eebe786d006ca5d6f6cae2dcd86609d08628e78dea5ab51c644bf73dce0ddf613c9d381aa2bd7ee761643900cc7e8e7fb61b42bc9c6c2c54e50c7cd265e86cf31b4e14c5c4fd3e961ee3afbedd3d2a23a5be230388cebc3f06631111bae6ecd98cce2468fe14342335587e147a163f153c6cbce4ba0b2afdd1953d89dd3a8f5c352dabc5b0982f97c75897074a2446599fd502eb29b1b94f0494c0dfc111aebc116d9b5b56eaf6e3a2d4db5137602a3389c5fe2ba73ffa94f3248e65e9e487f9fa048a2540c88e5b51809a23273086b3c06677c320848de930742494a0ea713682a25773d5ef02e8f096a83194f75aa04302adb424a80e7323533fbdc9c892aa9febdc9b74592ad72534862faa1f88c602dab53a6d961fec817dcc438e7c9fda7405f894da42a476ea00290ebb434b780f031b2b3ba41680ae860cc761d080af0e98c639af2224486559fd39133d330e75fcc014f356508225f001a18dbba3c776908f194387d76b755d2f86868cc279fafca673043bfaf81d454429835da9a78bf6c7cb14a48318ee541f09350c378a82fc60ff05a00f0f1f8efbce4d7b6641b441dcca318963b590189fe60f5752126a8325a0caa673a74362737c0968facd623a1decda0363500fa6d2f9c445df45aad0bcb925a0d2d123a4d367d90f81873a021a2e11912aa586c13199927e7ba168f2a7ad5d38e0be04ad3c1cf748c15c3f0d4b39f520423ad8c98e8df9c5550ad0a7ec07885e0d2db9a2e5ffa65c78b8cfde6f49cbde362ae7b1f0620679d69e1158cc8a09bc69200bd98bf28c5461b68d2668365e198a03bde7683ab3167771bbf0de8e705046bfb32653dca7384e22cded69c181992d464d07cdd907978c29ef5d1d7973f9a33cb66c9bfe9466eefe163317483183235b5c574611a711dc60c3cdb2633840f968256a2784f1a20053d997c124fc43362ef3cf4dd90c779e0cffd8456498eec86918a2295acdfb31dee08fec23b4fecaa9ffc177ed92497e363a1e1fd7f8040034e64c30b03353a2157355966d5255379a2abaab1d8c1f68205c3ded44dfcbe02f3a46a0f3ab413b8d0e034efe98531c8392e0fe737d227b4a223d38f279efb4355e662f787181be4f0f5bcd2dd016ba5fad53c50d2f2c0f391f47a190cd58c7669e0b45904c77af584169cba1790ca559b6b30a20e9e6f4a4b93adb8dde6d8cae57fca5310246c1175c988c52e79a286cf33a56fdfc30ff51fc8328d758a185aec3194b5c55a772002fe8f2f8bc18708e3ce07b5641e0defd01325f52ec4703d2e1691ea8e127c0ebf8890761855d885ec222a43ac125b1764f9aacb57b4dc65c1ff570da95af3f159c8ff289eb6f593dc74829b0e68f752bdb8602f15eaef6e7ee44ebfa4b3cf1092c01ea337c7b1def89055666bd6bde2511d3559b0d616556282689f999f2601d6239071fcd42807147d92daf4afd53a51133a418a40bfb60e5065c07dc77efde853f2a12f5dd40c3dc3160f3be51c66920cb14f2cda2e8dd0380ba9f1cb1b34a3b3a75b221f7fd4d28d0a5d70fc818174ae91629da5acaaa06f3d00268aa4334b10474d0ad21a76577e5899ef7575191bf499f14b1f4c8e10ed93afc5975e9cf2f6cccf3b58ecb6c5fb37c51d62b468359fb72fcb525387b67c8d208aaa3966c236a68be6b764bc1ba49a4d2bf59997cdcd61877b1cc1c3c8516ff4b7310477e64b95c2e4ea8931464edcf787221d82e73ba0966828fab10aa6346bd16d48d8b5ff2ce3474820a533f3455920b289db4d7de64237375e3425ab08a4808bebeb7bcd3f852df449058267600957137fe60f6a79ea00d96ac99137033faab7bdc3334fd5659166fb5fb225cf4ef515bae29fca4162217f51126100de29346606639bfb6396648053c1297ae9e46be85d20f88297e557e01263894c8c351184a56271b98e7af7df6dd5d8a05664e24e4f56572eaf6eebf625606cca65efb20b6a761ec8c766f2a6b547534d4e6692969ae0816d0fc9a4b7df56978a544c8c9858387ed259cec085b7fef2e72e8bcee9f474fa7fff8472bf724a3bd5f7ba7198071f5146829ff12da381077dc13fb7b726143028c90b4cfd357572db04a2520e422071766b3c57ff21ee8f026b9889df5d28fbebe44bb7c7855ecbd5ddc37bacc13963ede3fea80fcd4a665feeb4c6db9340e516989739fa6a1af4e97509545b04d9befe8318a1067d474e13c201a8920a7b7b937eeb5080d56a33f0d57402c4265da2ae7d8939d34e59b2c66739ffe2485780d155246c8ad5b653921a838391fa2354990484c98ff736e11c1780e4f6cef675abfb08cba7857c264e70d43c614c27aa49cfcebcbff2533382c991c4ce71fc72d017f4412124957f6ef73031bdcb3e9438c831e9149cb1d3a1e7d5391e29dce71044e7746d30586e2fe75516632d3f9531bcfa669d35c9c8947fe72ff6a11313eb37cdbf4dabb47e9b1d96d70654191afcf7f46429a40b70aa901205166687b03896269ebb76d86b0c32e642b3461f6f9267caf32c7390f3561309c915348f06c5655f1b69d395abc64495e5cb43899c7ad97d81c33ba069d1d10c3b71ddfc056f84eb319bc777ed728fa37ef17ac06a9886b6338126096d895a06268c9f63cb88f0a4b0981773f4cb6ae7c5dbddc424c0567318b580682db39b7196f387f99dde73055e3459886de45bc238a2b9f2464b118c7fb6f73791f58d65e9e743ebe1fbbbe14e1dd2635401abfe07cb221df7e6668c7494f25e10695363288edec3c12c2e20120b8815fe6fd6f969ee709b86658b3cb6d2330908b494d9a355c9745e3490a8e08bfda2942e7421f29a6cbfebdb523a7474850f01cd01b02d61f6d5861ac69cbc43704b85c4f72caa5d5ee55a1a0766ac46aa79cf9997f1d03738308f5f26ea8a7576bf76fb108491c02495c58965567cbefadb036d060c5d0bef83a25576266ac738ae8b6e74230a8d925f6260abecda638a468a591b0972cc2a66ac5ee43e8db8dfe1ef4b5cc5b2f7c5f341bf8798b48dd27dd3d37021c3692cb2eabd67907d82c0854192ccefcc9bdd36f810e7140bcb7b97ac3ff60464432e3595c536621d45213b386769903a0034e68a6f74f5b48c678529cb3babe05022b2ef4d0ac3074a5b55e02aecd6f522b2235cc5b0e7a01932693215e0cbe028e4f637817e46e43c5e69477988c13aef7d63ce2e035d58e2ef21255dc038e06486ef8ff3dfa35ba90a046e090d336de8908b0e5e5cafa158f553ed7daa304ac42a35f5aef17bc3ecaf08a9b6eebe64fd76cd724c498d77b03f3f43e6e2407b32e348810d5724a42873697610f3dd12b124fa70aa59ea401ec2b9592b7079397105529808973a98513bf552cd3f5dccb8eb8a091429d76b0149c347f24515eae776ccc8b70ea30288237e44287955fd16e2b92db42ae953b9333a6712af0851aa97d2a68d0c18bfd343691a2bd37505df1398de1c8b69e3335e8eb4827d901cc964007f7b04358ddc005c4094b2f187ce14477345c0138897b289197bac73da7d1c4001cfdb0f2bf991a05d9dd8297eaa1b2b41491dedfddb73e06ed4ef72b87ecb6f6f8a1f416b2b564322d15bc7f412728ec5f67054485df71a6dc16c25c24cac51b72c7e7eab397ef3c3c467041ecb5fb09b70dba85e06e5a7bd3e8082042e71c50212e53a197562c36db818d4dae7f2cf23d337cb993927852677c1113f0986bb154737062dc05a588e40582ac688566f6c9f6f438132dafb9efabf1f84f4f97ae9300ea44cd1b0b0be6886d6e61f7d4c563e0d8b61fd6326eb5a24d661dc9a951ea3da95a09c57be98db45a985f409fa435279e67c3a29ddb2252546412045bfe7b25b0912b3253dca11582097e2bcb5b00713c8c36059d42fc0b6765aa480ff04dad63da6592cf41bd66b691fa7b41460e8d3e6daa7913dd043a23c7c9cdfa0e077bb2b232f16ac57d8651972ed6555ced47fc3ddc2a0700e6e7d4c2826d561cbc0c987ae93a3e7454aa861587470092768141e87ed92a119b480572cf3b1973219c7bfe4ac703d21460fbb7181924ff315604e2cf8a688212de0f94961d782c2f3869364a33d958e23ab3f09df94950961f6e85f232447c6288092fef0ce4c0e6e0b3320204b74b27da9240cfbc27bc732bd86648c00f4a7a0a8f219c957fe49ad52b1a3d566d947df27378786d71b3f689e2aa47345b0ea19448f1a9b569202da9d0247b83f7c9af182f20f2cba5ed40189b60a6c867d200f2733081ebf856cceaa1650e6ee9dfca916b38d4d6dbeb32fc439f6d9838416baeecd13a78a6a916d0183ba2e10bb69a3c8a81b8025adbd7be19e5e71addb2ec57881e2e6fde4d0d319fdafde2ef114c16ff50a3c7e48a78be4422f511cbd62e1be72ee64b471c8f2774018298df04ee1ddfef1382ef2e04ff7c59b688cdf1200b8b83a3ce0f1ca0256db69733bc9597cf5e51bbbe09d794357cef16bcd9b56ea596d7bb6215bc187e09211de16e80c3d2caf6e4ea169ccea16694a15d808b3330fbd528ec0c48ebc6cc70bc75f7eacb07583ea1c987bd18178fbeadb6a8d5118f066411e41ec52667ecbfb0ecbc40142341b0760fac331722e1e4512b3ce775a0107e708a7938ee2a5d687bb1d34d5a6e60d42855b05b37a4a1c13b41dc9f8117f888027e27c629dc574c64e981c6f5c6464b11da1cdbd0b438dcdd3fbd2e09efa09c851400d601875045183bf67ec86e60064afacadebe49bdd6df9b25ec1db37caa99b3b73237dc98a9b5c453893ce5ace2aa289255aacd941e7b9575e43e12e5a9bd0d91f6a9b6b2ae4b204e4a7872a3ba59f92bfd639d634ae1"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x80000001}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xfe}]}, 0x10b4}, 0x1, 0x0, 0x0, 0x4000}, 0x40018d0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000003740)) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000003840)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x1c, 0x2, 0x3, 0x600, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x28}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40480c3) r9 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) finit_module(r9, &(0x7f0000003880)='}\x00', 0x2) write$nbd(r1, &(0x7f00000038c0)={0x67446698, 0x0, 0x3, 0x3, 0x4, "e99859a155143858853bcb378b3d000c459cee2fffadae116c66862adf9dbc7e0d57b6801de163f06c4c0563a8e1ce6866d110c836a29d883b6a22ea0c2168fc077611eecfa83ac8c686c7dfefc2b4fb857e74c8c1782ca35d5d9fe676bdb454ffc0661ab1aceeebef0508b4d5c0a69ba90107daccf4160482ebda56fb51bdcd33362755e95ed6d32e1dd10469cb7f6844f629cdc9fcbb835148d1d77e96be8bf40d527565ad17d718e964ee7788730fc344330b840dfccd29c65687df035a37fa6b08eb68882cd5b79bd89abac6f89b72ebc5bbf6fbfe56a89b77b151b36a3ef5352c4536790a30"}, 0xf8) socket(0x10, 0x3, 0xbc9) 0s ago: executing program 2 (id=1139): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, &(0x7f0000000040)=0xfffffffc, 0x4) close(r0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x36, 0x0, &(0x7f0000000380)="3d6ee2e04b91ab10143d9abe86dde5b21365c1ed1785bf79e0f3eb2dba93774cc6b23d0016dd6bd64414ce22c0f77c2158222ff96093", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r3, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000500)) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000000c0)={0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x7e}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): 4): problem connecting socket to 127.0.0.1 [ 103.301037][ T7594] dvmrp0: entered allmulticast mode [ 103.597213][ T7609] syzkaller0: entered promiscuous mode [ 103.599291][ T7609] syzkaller0: entered allmulticast mode [ 103.955012][ T7619] bridge1: entered allmulticast mode [ 104.334959][ T7628] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 104.343873][ T7628] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 104.348495][ T7628] overlayfs: failed to set uuid (117/file1, err=-13); falling back to uuid=null. [ 104.358737][ C3] vxcan1: j1939_tp_rxtimer: 0xffff888057e12400: rx timeout, send abort [ 104.364836][ C3] vxcan1: j1939_xtp_rx_abort_one: 0xffff888057e12400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 104.606716][ T42] kauditd_printk_skb: 221 callbacks suppressed [ 104.606763][ T42] audit: type=1400 audit(1783371218.013:21539): avc: denied { map } for pid=7644 comm="syz.2.477" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 104.630882][ T42] audit: type=1400 audit(1783371218.023:21540): avc: denied { read write } for pid=7644 comm="syz.2.477" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 104.641882][ T7645] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 104.663877][ T42] audit: type=1400 audit(1783371218.043:21541): avc: denied { mount } for pid=7644 comm="syz.2.477" name="/" dev="9p" ino=83886173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 104.674351][ T42] audit: type=1400 audit(1783371218.053:21542): avc: denied { mac_admin } for pid=7644 comm="syz.2.477" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 104.683959][ T42] audit: type=1400 audit(1783371218.053:21543): avc: denied { relabelto } for pid=7644 comm="syz.2.477" name="120" dev="tmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 104.701570][ T42] audit: type=1400 audit(1783371218.053:21544): avc: denied { associate } for pid=7644 comm="syz.2.477" name="120" dev="tmpfs" ino=659 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dlm_control_device_t:s0" [ 104.713472][ T42] audit: type=1400 audit(1783371218.053:21545): avc: denied { create } for pid=7644 comm="syz.2.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 104.722786][ T42] audit: type=1400 audit(1783371218.053:21546): avc: denied { write } for pid=7644 comm="syz.2.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 104.732532][ T42] audit: type=1400 audit(1783371218.053:21547): avc: denied { read } for pid=7644 comm="syz.2.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 104.741899][ T42] audit: type=1400 audit(1783371218.063:21548): avc: denied { read } for pid=7644 comm="syz.2.477" dev="nsfs" ino=4026533058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 105.226038][ T7685] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 105.245785][ T7688] No control pipe specified [ 105.278157][ T7688] __nla_validate_parse: 72 callbacks suppressed [ 105.278198][ T7688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.486'. [ 105.620592][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 105.790486][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 105.796985][ T24] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 105.806320][ T24] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 105.813534][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 105.817330][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 105.826594][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 105.832134][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 105.838653][ T24] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 105.843033][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.852603][ T24] usb 5-1: config 0 descriptor?? [ 106.061311][ T24] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 106.067484][ T24] usb 5-1: USB disconnect, device number 5 [ 106.077598][ T24] usblp0: removed [ 106.426681][ T7743] Mount JFS Failure: -22 [ 106.428493][ T7743] jfs_mount failed w/return code = -22 [ 106.478239][ T7738] random: crng reseeded on system resumption [ 106.501321][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 106.660529][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 106.666476][ T24] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 106.672288][ T24] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 106.678038][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 106.681947][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 106.685194][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 106.688693][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 106.693013][ T24] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 106.696133][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.706277][ T24] usb 5-1: config 0 descriptor?? [ 106.713116][ T7763] validate_nla: 185 callbacks suppressed [ 106.713130][ T7763] netlink: 'syz.2.504': attribute type 1 has an invalid length. [ 106.739428][ T7755] kvm: kvm [7754]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 106.749289][ T7755] kvm: kvm [7754]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 106.800713][ T7763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.804686][ T7757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.502'. [ 106.824036][ T7767] bond1: (slave erspan1): making interface the new active one [ 106.830579][ T7767] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 106.938423][ T24] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 106.973546][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'. [ 107.149088][ T5744] Bluetooth: hci0: unexpected subevent 0x19 length: 24 < 28 [ 107.157516][ T34] usb 5-1: USB disconnect, device number 6 [ 107.167840][ T34] usblp0: removed [ 107.198380][ T7790] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 107.313948][ T5813] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.419553][ T7804] 9p: Bad value for 'rfdno' [ 107.422319][ T7804] fuse: Bad value for 'fd' [ 107.423759][ T5749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 107.434716][ T5749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 107.442011][ T5749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 107.448224][ T5749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 107.453271][ T5749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 107.476954][ T5813] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.624476][ T5813] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.739202][ T5813] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.915582][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 108.001701][ T7842] netlink: 36 bytes leftover after parsing attributes in process `syz.2.525'. [ 108.058768][ T5813] bridge_slave_1: left allmulticast mode [ 108.062495][ T5813] bridge_slave_1: left promiscuous mode [ 108.074353][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.079066][ T7844] XFS (nbd1): SB validate failed with error -5. [ 108.128765][ T5813] bridge_slave_0: left allmulticast mode [ 108.134732][ T5813] bridge_slave_0: left promiscuous mode [ 108.139377][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.157010][ T7843] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 108.173467][ T5813] dvmrp0: left allmulticast mode [ 108.383707][ T5813] bond1 (unregistering): (slave geneve2): Releasing active interface [ 108.420836][ T5813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.427960][ T5813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.443242][ T5813] bond0 (unregistering): Released all slaves [ 108.469913][ T5813] bond1 (unregistering): Released all slaves [ 108.482682][ T5813] bond2 (unregistering): Released all slaves [ 108.491899][ T5813] bond3 (unregistering): Released all slaves [ 108.532612][ T7857] macvlan2: entered promiscuous mode [ 108.534596][ T7857] bridge0: entered promiscuous mode [ 108.640670][ T6552] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 108.669333][ T6552] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 108.673985][ T6552] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 108.691188][ T6552] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 108.698328][ T6552] rtc rtc0: __rtc_set_alarm: err=-22 [ 108.768191][ T7883] trusted_key: syz.0.534 sent an empty control message without MSG_MORE. [ 108.906428][ T7890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7890 comm=syz.0.535 [ 108.930447][ T5444] 8021q: adding VLAN 0 to HW filter on device eth2 [ 108.968772][ T5813] hsr_slave_0: left promiscuous mode [ 108.972036][ T5813] hsr_slave_1: left promiscuous mode [ 108.974447][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.976827][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.981762][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.985438][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.993005][ T5813] veth1_macvtap: left allmulticast mode [ 108.995032][ T5813] veth1_macvtap: left promiscuous mode [ 108.997526][ T5813] veth0_macvtap: left promiscuous mode [ 108.999505][ T5813] veth1_vlan: left promiscuous mode [ 109.005228][ T5813] veth0_vlan: left promiscuous mode [ 109.147723][ T5813] team0 (unregistering): Port device team_slave_1 removed [ 109.238636][ T7803] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.242087][ T7803] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.244814][ T7803] bridge_slave_0: entered allmulticast mode [ 109.249246][ T7803] bridge_slave_0: entered promiscuous mode [ 109.254938][ T7803] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.261197][ T7803] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.264074][ T7803] bridge_slave_1: entered allmulticast mode [ 109.266951][ T7803] bridge_slave_1: entered promiscuous mode [ 109.339473][ T7903] fuse: Bad value for 'rootmode' [ 109.343607][ T7803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.357891][ T7803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.394121][ T7803] team0: Port device team_slave_0 added [ 109.399799][ T7803] team0: Port device team_slave_1 added [ 109.442994][ T7803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.445574][ T7803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.454667][ T7803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.461847][ T7803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.468418][ T7803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.481535][ T7803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.520954][ T7803] hsr_slave_0: entered promiscuous mode [ 109.524235][ T7803] hsr_slave_1: entered promiscuous mode [ 109.526760][ T7803] debugfs: 'hsr0' already exists in 'hsr' [ 109.528463][ T7803] Cannot create hsr debugfs directory [ 109.536475][ T7912] netlink: 'syz.1.540': attribute type 1 has an invalid length. [ 109.539183][ T5444] 8021q: adding VLAN 0 to HW filter on device eth3 [ 109.560755][ T5744] Bluetooth: hci2: command tx timeout [ 109.567335][ T7912] 8021q: adding VLAN 0 to HW filter on device bond6 [ 109.608641][ T7912] bond6: (slave geneve2): making interface the new active one [ 109.618020][ T42] kauditd_printk_skb: 297 callbacks suppressed [ 109.618062][ T42] audit: type=1400 audit(1783371223.023:21846): avc: denied { read } for pid=7909 comm="syz.0.539" dev="nsfs" ino=4026533016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 109.618101][ T7912] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 109.621963][ T42] audit: type=1400 audit(1783371223.033:21847): avc: denied { open } for pid=7909 comm="syz.0.539" path="net:[4026533016]" dev="nsfs" ino=4026533016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 109.654723][ T42] audit: type=1400 audit(1783371223.033:21848): avc: denied { create } for pid=7909 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.662414][ T42] audit: type=1400 audit(1783371223.063:21849): avc: denied { write } for pid=7909 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.669388][ T42] audit: type=1400 audit(1783371223.063:21850): avc: denied { module_request } for pid=7909 comm="syz.0.539" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 109.687588][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802e92d000: rx timeout, send abort [ 109.698028][ T42] audit: type=1400 audit(1783371223.103:21851): avc: denied { read } for pid=7909 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.708389][ T42] audit: type=1400 audit(1783371223.113:21852): avc: denied { read } for pid=5124 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 109.715874][ T42] audit: type=1400 audit(1783371223.113:21853): avc: denied { search } for pid=5124 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.725003][ T42] audit: type=1400 audit(1783371223.113:21854): avc: denied { append } for pid=5124 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.733954][ T42] audit: type=1400 audit(1783371223.113:21855): avc: denied { open } for pid=5124 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.861932][ T7803] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 109.872023][ T7803] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.875006][ T7803] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 109.886561][ T7803] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.892385][ T7803] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.923832][ T7803] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.931286][ T7803] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.934172][ T7926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7926 comm=syz.1.542 [ 109.943309][ T7926] netlink: 'syz.1.542': attribute type 1 has an invalid length. [ 109.944477][ T7803] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.025285][ T7934] bond7: (slave bridge3): making interface the new active one [ 110.028349][ T7934] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 110.076420][ T5444] 8021q: adding VLAN 0 to HW filter on device eth4 [ 110.166803][ T7803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.184626][ T7803] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.191072][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802e92d000: abort rx timeout. Force session deactivation [ 110.198206][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.200586][ T6007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.217640][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.220033][ T6007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.489363][ T5444] 8021q: adding VLAN 0 to HW filter on device eth5 [ 110.729313][ T7803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.780711][ T50] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 110.960482][ T50] usb 7-1: Using ep0 maxpacket: 32 [ 110.967475][ T50] usb 7-1: unable to get BOS descriptor or descriptor too short [ 110.975235][ T50] usb 7-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 110.975972][ T7803] veth0_vlan: entered promiscuous mode [ 110.985700][ T50] usb 7-1: string descriptor 0 read error: -22 [ 110.988041][ T50] usb 7-1: New USB device found, idVendor=0cf4, idProduct=0102, bcdDevice=89.0e [ 110.995327][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.004027][ T7803] veth1_vlan: entered promiscuous mode [ 111.012869][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 111.024748][ T7803] veth0_macvtap: entered promiscuous mode [ 111.029810][ T7803] veth1_macvtap: entered promiscuous mode [ 111.043960][ T7803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.053098][ T7803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.065156][ T5813] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.072121][ T5813] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.081705][ T5813] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.085675][ T5813] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.201317][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 111.211198][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.218749][ T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 111.219361][ T50] usb 7-1: USB disconnect, device number 6 [ 111.224866][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.225964][ T6132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.232967][ T6132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.268010][ T24] usb 6-1: config 0 descriptor?? [ 111.282438][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.282994][ T8000] binder: 7999:8000 ioctl c0306201 200000000080 returned -14 [ 111.287580][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.293930][ T8000] binder: 7999:8000 ioctl c0306201 2000000003c0 returned -14 [ 111.479733][ T24] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 111.630725][ T5744] Bluetooth: hci2: command tx timeout [ 111.779772][ T8018] netlink: 240 bytes leftover after parsing attributes in process `syz.4.557'. [ 111.858927][ T8020] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 111.931115][ T7991] netlink: 20 bytes leftover after parsing attributes in process `syz.1.553'. [ 111.938477][ T7991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.553'. [ 111.946559][ T29] usb 6-1: USB disconnect, device number 9 [ 111.997307][ T8029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=8029 comm=syz.4.561 [ 112.011903][ T8029] EXT4-fs (nbd4): unable to read superblock [ 112.022751][ T8029] afs: Unknown parameter 'smackfsdef' [ 112.026167][ T8029] xt_ipcomp: unknown flags 1D [ 112.527870][ T8057] netlink: 'syz.0.568': attribute type 1 has an invalid length. [ 112.567289][ T8057] 8021q: adding VLAN 0 to HW filter on device bond4 [ 112.574452][ T8060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.569'. [ 112.578685][ T8057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8057 comm=syz.0.568 [ 112.605235][ T8057] 8021q: adding VLAN 0 to HW filter on device bond4 [ 112.608007][ T8057] bond4: (slave wireguard1): The slave device specified does not support setting the MAC address [ 112.612993][ T8057] bond4: (slave wireguard1): Error -95 calling set_mac_address [ 112.639186][ T8060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.569'. [ 112.642193][ T8064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.568'. [ 112.646758][ T8064] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 113.047793][ T8088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.133489][ T8086] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 113.155703][ T8031] syz.4.561 (8031) used greatest stack depth: 19608 bytes left [ 113.162271][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 113.165289][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.578'. [ 113.168359][ T8092] netlink: 'syz.1.578': attribute type 6 has an invalid length. [ 113.176903][ T8092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.200239][ T8092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.226410][ T8095] ip_vti0: entered promiscuous mode [ 113.230271][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 113.428283][ T8113] netlink: 28 bytes leftover after parsing attributes in process `syz.1.585'. [ 113.439218][ T8113] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.445491][ T8113] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.710630][ T5749] Bluetooth: hci2: command tx timeout [ 113.781108][ T8130] netlink: 'syz.4.589': attribute type 12 has an invalid length. [ 113.797066][ T8131] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 4, id = 0 [ 114.282537][ T8144] netlink: 'syz.4.593': attribute type 1 has an invalid length. [ 114.514778][ T8161] netlink: 'syz.0.598': attribute type 10 has an invalid length. [ 114.560902][ T8166] fuse: Unknown parameter '000000000000000000000040x0000000000000000' [ 114.840868][ T50] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 115.010912][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 115.015977][ T50] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 115.020296][ T50] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 115.024175][ T50] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.027474][ T50] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.031881][ T50] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.035362][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.254362][ T50] usb 5-1: GET_CAPABILITIES returned 0 [ 115.256578][ T50] usbtmc 5-1:16.0: can't read capabilities [ 115.364735][ T42] kauditd_printk_skb: 296 callbacks suppressed [ 115.364780][ T42] audit: type=1400 audit(1783371228.773:22152): avc: denied { create } for pid=8175 comm="syz.1.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.377397][ T42] audit: type=1400 audit(1783371228.773:22153): avc: denied { bind } for pid=8175 comm="syz.1.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.387220][ T42] audit: type=1400 audit(1783371228.773:22154): avc: denied { setopt } for pid=8175 comm="syz.1.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.394067][ T5749] Bluetooth: hci4: command 0x1003 tx timeout [ 115.397418][ T42] audit: type=1400 audit(1783371228.773:22155): avc: denied { read write } for pid=8175 comm="syz.1.601" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 115.397450][ T42] audit: type=1400 audit(1783371228.773:22156): avc: denied { open } for pid=8175 comm="syz.1.601" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 115.397474][ T42] audit: type=1400 audit(1783371228.773:22157): avc: denied { accept } for pid=8175 comm="syz.1.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.397496][ T42] audit: type=1400 audit(1783371228.773:22158): avc: denied { read } for pid=8175 comm="syz.1.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.397517][ T42] audit: type=1400 audit(1783371228.773:22159): avc: denied { write } for pid=8175 comm="syz.1.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.397540][ T42] audit: type=1400 audit(1783371228.793:22160): avc: denied { ioctl } for pid=8175 comm="syz.1.601" path="socket:[27671]" dev="sockfs" ino=27671 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 115.398236][ T5744] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 115.407273][ T42] audit: type=1400 audit(1783371228.813:22161): avc: denied { create } for pid=8179 comm="syz.4.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 115.471525][ T4931] usb 5-1: USB disconnect, device number 7 [ 115.720340][ T8206] hugetlbfs: syz.2.609 (8206): Using mlock ulimits for SHM_HUGETLB is obsolete [ 115.782166][ T8208] netlink: 'syz.2.610': attribute type 7 has an invalid length. [ 115.784879][ T8208] netlink: 'syz.2.610': attribute type 8 has an invalid length. [ 115.791734][ T8208] ip6gretap0: entered promiscuous mode [ 115.795821][ T8208] syz_tun: entered promiscuous mode [ 115.798829][ T8208] ip6gretap0: left promiscuous mode [ 115.801068][ T5744] Bluetooth: hci2: command tx timeout [ 115.804139][ T8208] syz_tun: left promiscuous mode [ 115.840536][ T50] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 115.992526][ T50] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 115.996149][ T50] usb 6-1: config 1 has no interface number 0 [ 115.999230][ T50] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 116.004999][ T50] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 116.008507][ T50] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 32 [ 116.012260][ T50] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.018933][ T50] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 116.022405][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.025974][ T50] usb 6-1: Product: syz [ 116.027728][ T50] usb 6-1: Manufacturer: syz [ 116.029772][ T50] usb 6-1: SerialNumber: syz [ 116.037603][ T8219] syzkaller0: entered promiscuous mode [ 116.039841][ T8196] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 116.043024][ T8219] syzkaller0: entered allmulticast mode [ 116.043575][ T8196] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 116.265160][ T50] usb 6-1: Error in usbnet_get_endpoints (-71) [ 116.273911][ T50] usb 6-1: USB disconnect, device number 10 [ 116.404783][ T8232] befs: (nullb0): No write support. Marking filesystem read-only [ 116.412645][ T8232] befs: (nullb0): invalid magic header [ 116.459927][ T8234] syzkaller0: entered promiscuous mode [ 116.463164][ T8234] syzkaller0: entered allmulticast mode [ 116.491840][ T8234] tipc: Started in network mode [ 116.494117][ T8234] tipc: Node identity 76d05b6e72a9, cluster identity 4711 [ 116.497732][ T8234] tipc: Enabled bearer , priority 0 [ 116.541002][ T8233] tipc: Resetting bearer [ 116.555422][ T8242] binder: 8241:8242 ioctl c0306201 2000000003c0 returned -14 [ 116.568705][ T8233] tipc: Disabling bearer [ 116.569929][ T8242] binder: 8241:8242 ioctl c0306201 200000000480 returned -14 [ 116.667788][ T8250] sg_write: data in/out 58332/226 bytes for SCSI command 0x0-- guessing data in; [ 116.667788][ T8250] program syz.4.621 not setting count and/or reply_len properly [ 116.719462][ T8258] batadv_slave_0: Caught tx_queue_len zero misconfig [ 116.732623][ T8255] netlink: 'syz.4.623': attribute type 1 has an invalid length. [ 116.841470][ T8271] __nla_validate_parse: 12 callbacks suppressed [ 116.841482][ T8271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.626'. [ 116.925754][ T8287] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 117.009322][ T8271] netlink: 'syz.1.626': attribute type 1 has an invalid length. [ 117.009338][ T8298] efs: device does not support 512 byte blocks [ 117.014304][ T8271] netlink: 60 bytes leftover after parsing attributes in process `syz.1.626'. [ 117.015487][ T8298] device does not support 512 byte blocks [ 117.015487][ T8298] [ 117.067287][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.627'. [ 117.141883][ T8310] netlink: 28 bytes leftover after parsing attributes in process `syz.4.637'. [ 117.167216][ T5736] overlayfs: failed lookup in lower (newroot/167, name='file0', err=-40): overlapping layers [ 117.184262][ T5736] overlayfs: failed lookup in lower (newroot/167, name='file0', err=-40): overlapping layers [ 117.199224][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.640'. [ 117.206691][ T8316] netlink: 'syz.4.640': attribute type 30 has an invalid length. [ 117.212340][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.640'. [ 117.234285][ T5820] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 117.240944][ T8316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8316 comm=syz.4.640 [ 117.246265][ T5820] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 117.250524][ T5820] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 117.254844][ T5820] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 117.257402][ T5820] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 117.259817][ T5820] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 117.263011][ T5820] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 117.266551][ T5820] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 117.270705][ T5820] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 117.273223][ T5820] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 117.304569][ T5820] hid-generic 0004:FFFFFFFF:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 117.359016][ T8324] fido_id[8324]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 117.452349][ T8333] gtp0: entered promiscuous mode [ 117.454071][ T8333] gtp0: entered allmulticast mode [ 117.526750][ T5812] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.583082][ T8341] netlink: 28 bytes leftover after parsing attributes in process `syz.0.647'. [ 117.607400][ T8345] netlink: 'syz.4.648': attribute type 30 has an invalid length. [ 117.672238][ T8345] netlink: 'syz.4.648': attribute type 11 has an invalid length. [ 117.700241][ T5812] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.707593][ T5749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 117.721856][ T5749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 117.725038][ T5749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 117.732658][ T5749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 117.738391][ T5749] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 117.793715][ T8370] loop5: detected capacity change from 0 to 7 [ 117.805012][ T8370] Buffer I/O error on dev loop5, logical block 0, async page read [ 117.807914][ T8370] Buffer I/O error on dev loop5, logical block 0, async page read [ 117.813272][ T8370] Buffer I/O error on dev loop5, logical block 0, async page read [ 117.820911][ T8370] Buffer I/O error on dev loop5, logical block 0, async page read [ 117.824056][ T8370] Buffer I/O error on dev loop5, logical block 0, async page read [ 117.827032][ T8370] Buffer I/O error on dev loop5, logical block 0, async page read [ 117.829724][ T8370] Buffer I/O error on dev loop5, logical block 0, async page read [ 117.834306][ T8370] ldm_validate_partition_table(): Disk read failed. [ 117.839503][ T8370] Buffer I/O error on dev loop5, logical block 0, async page read [ 117.873047][ T5812] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.897951][ T8370] Buffer I/O error on dev loop5, logical block 0, async page read [ 117.912334][ T8370] Buffer I/O error on dev loop5, logical block 0, async page read [ 117.918274][ T8370] Dev loop5: unable to read RDB block 0 [ 117.921168][ T8370] loop5: unable to read partition table [ 117.924361][ T8370] loop5: partition table beyond EOD, truncated [ 117.927720][ T8370] loop_reread_partitions: partition scan of loop5 (”º@`uÃàx‡é� [ 117.927720][ T8370] †Ãt¸®[Aè!ë(j"k$]°vÍ·JÏV±_í²b=-,4[L°µ³àÃÎáA' [ 117.927720][ T8370] ‘î†) failed (rc=-5) [ 117.983265][ C0] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.989296][ C0] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.058820][ T5812] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.076966][ C2] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.080963][ C2] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.086896][ C2] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.090266][ C2] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.094360][ C2] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.098153][ C2] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.103832][ C2] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.107081][ C2] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.213587][ T8397] openvswitch: netlink: Actions may not be safe on all matching packets [ 118.322877][ T8407] fuse: Unknown parameter 'fdÙ~' [ 118.411608][ T8414] zonefs (loop4) ERROR: Not a zoned block device [ 118.451777][ T5812] bridge_slave_1: left allmulticast mode [ 118.453677][ T5812] bridge_slave_1: left promiscuous mode [ 118.456097][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.462206][ T5812] bridge_slave_0: left allmulticast mode [ 118.465895][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.523184][ T8407] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.527003][ T8407] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 118.530052][ T5812] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 118.561122][ T8407] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 118.568206][ T8407] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 118.570619][ T8407] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 118.577971][ T5812] bond1 (unregistering): (slave vti0): Releasing backup interface [ 118.589401][ T8407] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 118.625439][ T8407] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 118.628027][ T8407] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 118.648737][ T8407] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 118.669565][ T5812] bond6 (unregistering): (slave geneve2): Releasing active interface [ 118.762608][ T5812] bond7 (unregistering): (slave bridge3): Releasing active interface [ 118.782637][ T5812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.807414][ T5812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.813420][ T5812] bond0 (unregistering): Released all slaves [ 118.825460][ T5812] bond1 (unregistering): Released all slaves [ 118.827094][ T8420] netlink: 'syz.4.664': attribute type 39 has an invalid length. [ 118.869543][ T5812] bond2 (unregistering): Released all slaves [ 118.870591][ T8429] syz.0.667: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 118.878748][ T5812] bond3 (unregistering): Released all slaves [ 118.885017][ T8429] CPU: 0 UID: 0 PID: 8429 Comm: syz.0.667 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.885075][ T8429] Tainted: [L]=SOFTLOCKUP [ 118.885084][ T8429] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.885141][ T8429] Call Trace: [ 118.885150][ T8429] [ 118.885159][ T8429] dump_stack_lvl+0x100/0x190 [ 118.885275][ T8429] warn_alloc.cold+0x94/0xa8 [ 118.885326][ T8429] ? __pfx_warn_alloc+0x10/0x10 [ 118.885392][ T8429] ? kasan_save_stack+0x3f/0x50 [ 118.885449][ T8429] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 118.885480][ T8429] ? xskq_create+0x52/0x1d0 [ 118.885564][ T8429] ? xsk_setsockopt+0x743/0xab0 [ 118.885589][ T8429] ? do_sock_setsockopt+0xf3/0x1d0 [ 118.885643][ T8429] ? __sys_setsockopt+0x195/0x220 [ 118.885675][ T8429] ? __x64_sys_setsockopt+0xbd/0x160 [ 118.885709][ T8429] ? do_syscall_64+0x115/0x870 [ 118.885764][ T8429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.885793][ T8429] ? xskq_create+0xfb/0x1d0 [ 118.885821][ T8429] __vmalloc_node_range_noprof+0x136c/0x1630 [ 118.885859][ T8429] ? xskq_create+0xfb/0x1d0 [ 118.885890][ T8429] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 118.885921][ T8429] ? kasan_save_track+0x14/0x30 [ 118.885943][ T8429] ? __kasan_kmalloc+0xaa/0xb0 [ 118.885961][ T8429] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 118.885989][ T8429] ? xskq_create+0xfb/0x1d0 [ 118.886023][ T8429] vmalloc_user_noprof+0x9e/0xe0 [ 118.886049][ T8429] ? xskq_create+0xfb/0x1d0 [ 118.886075][ T8429] xskq_create+0xfb/0x1d0 [ 118.886101][ T8429] xsk_setsockopt+0x743/0xab0 [ 118.886125][ T8429] ? __pfx_xsk_setsockopt+0x10/0x10 [ 118.886148][ T8429] ? find_held_lock+0x2b/0x80 [ 118.886208][ T8429] ? __fget_files+0x215/0x3d0 [ 118.886275][ T8429] ? selinux_socket_setsockopt+0x6a/0x80 [ 118.886333][ T8429] ? __pfx_xsk_setsockopt+0x10/0x10 [ 118.886355][ T8429] do_sock_setsockopt+0xf3/0x1d0 [ 118.886382][ T8429] __sys_setsockopt+0x195/0x220 [ 118.886425][ T8429] __x64_sys_setsockopt+0xbd/0x160 [ 118.886460][ T8429] ? do_syscall_64+0x90/0x870 [ 118.886489][ T8429] ? lockdep_hardirqs_on+0x78/0x100 [ 118.886518][ T8429] do_syscall_64+0x115/0x870 [ 118.886543][ T8429] ? clear_bhb_loop+0x40/0x90 [ 118.886568][ T8429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.886588][ T8429] RIP: 0033:0x7fea9719de59 [ 118.886608][ T8429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.886626][ T8429] RSP: 002b:00007fea98105028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 118.886656][ T8429] RAX: ffffffffffffffda RBX: 00007fea97425fa0 RCX: 00007fea9719de59 [ 118.886672][ T8429] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 118.886683][ T8429] RBP: 00007fea97233e6f R08: 0000000000000029 R09: 0000000000000000 [ 118.886695][ T8429] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.886708][ T8429] R13: 00007fea97426038 R14: 00007fea97425fa0 R15: 00007ffc430d67c8 [ 118.886733][ T8429] [ 118.887379][ T8429] Mem-Info: [ 118.899284][ T5812] bond4 (unregistering): Released all slaves [ 118.901613][ T8429] active_anon:9001 inactive_anon:18165 isolated_anon:0 [ 118.901613][ T8429] active_file:1553 inactive_file:22218 isolated_file:0 [ 118.901613][ T8429] unevictable:1768 dirty:76 writeback:0 [ 118.901613][ T8429] slab_reclaimable:8992 slab_unreclaimable:69108 [ 118.901613][ T8429] mapped:26356 shmem:19862 pagetables:8340 [ 118.901613][ T8429] sec_pagetables:297 bounce:0 [ 118.901613][ T8429] kernel_misc_reclaimable:0 [ 118.901613][ T8429] free:457736 free_pcp:17363 free_cma:0 [ 118.914735][ T5812] bond5 (unregistering): Released all slaves [ 118.936001][ T5812] bond6 (unregistering): Released all slaves [ 118.943272][ T8429] Node 0 active_anon:33836kB inactive_anon:72464kB active_file:6212kB inactive_file:74736kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:105296kB dirty:292kB writeback:0kB shmem:75692kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15424kB pagetables:9932kB sec_pagetables:1188kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 118.964496][ T5812] bond7 (unregistering): Released all slaves [ 118.966548][ T8429] Node 1 active_anon:2292kB inactive_anon:196kB active_file:0kB inactive_file:14136kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:128kB dirty:12kB writeback:0kB shmem:3756kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:416kB pagetables:23428kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 119.077762][ T8429] Node 0 DMA free:12908kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:12kB free_cma:0kB [ 119.093843][ T8429] lowmem_reserve[]: 0 1226 1226 1226 1226 [ 119.096875][ T8429] Node 0 DMA32 free:250840kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33756kB inactive_anon:72464kB active_file:6212kB inactive_file:74732kB unevictable:3536kB writepending:380kB zspages:0kB present:2080628kB managed:1255452kB mlocked:0kB bounce:0kB free_pcp:46028kB local_pcp:11632kB free_cma:0kB [ 119.112474][ T8429] lowmem_reserve[]: 0 0 0 0 0 [ 119.114214][ T8429] Node 1 Normal free:1567344kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2292kB inactive_anon:196kB active_file:0kB inactive_file:14136kB unevictable:3536kB writepending:12kB zspages:5284kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:24060kB local_pcp:32kB free_cma:0kB [ 119.126370][ T8429] lowmem_reserve[]: 0 0 0 0 0 [ 119.128318][ T8429] Node 0 DMA: 15*4kB (U) 26*8kB (U) 22*16kB (U) 28*32kB (U) 22*64kB (U) 12*128kB (U) 5*256kB (U) 4*512kB (U) 3*1024kB (U) 1*2048kB (M) 0*4096kB = 12908kB [ 119.139351][ T8429] Node 0 DMA32: 9*4kB (UME) 486*8kB (UE) 855*16kB (UME) 397*32kB (UE) 419*64kB (UME) 205*128kB (UE) 196*256kB (UE) 109*512kB (UME) 38*1024kB (UM) 1*2048kB (M) 5*4096kB (UM) = 250788kB [ 119.146264][ T8429] Node 1 Normal: 943*4kB (UME) 803*8kB (UME) 758*16kB (UME) 745*32kB (UME) 724*64kB (UME) 635*128kB (UME) 444*256kB (UME) 442*512kB (UM) 259*1024kB (UM) 35*2048kB (UME) 175*4096kB (UM) = 1567444kB [ 119.155315][ T8429] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 119.158573][ T8429] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 119.162017][ T8429] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 119.165212][ T8429] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 119.168580][ T8429] 43844 total pagecache pages [ 119.170143][ T8429] 183 pages in swap cache [ 119.171996][ T8429] Free swap = 109804kB [ 119.173611][ T8429] Total swap = 124996kB [ 119.175124][ T8429] 1048443 pages RAM [ 119.176407][ T8429] 0 pages HighMem/MovableOnly [ 119.192476][ T8429] 285269 pages reserved [ 119.193927][ T8429] 0 pages cma reserved [ 119.304052][ T8449] netlink: 28 bytes leftover after parsing attributes in process `syz.0.671'. [ 119.438779][ T8451] netlink: 28 bytes leftover after parsing attributes in process `syz.0.671'. [ 119.585739][ T5812] IPVS: stopping master sync thread 8131 ... [ 119.790518][ T5749] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 119.870658][ T5749] Bluetooth: hci0: command 0x0c1a tx timeout [ 119.975085][ T5749] Bluetooth: hci3: unexpected event for opcode 0x2010 [ 119.977456][ T5444] 8021q: adding VLAN 0 to HW filter on device eth6 [ 120.066025][ T8454] nfs: Unknown parameter '„' [ 120.139649][ T8358] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.154243][ T8358] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.158821][ T8358] bridge_slave_0: entered allmulticast mode [ 120.171754][ T8358] bridge_slave_0: entered promiscuous mode [ 120.175668][ T8358] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.178493][ T8358] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.185061][ T8358] bridge_slave_1: entered allmulticast mode [ 120.188603][ T8358] bridge_slave_1: entered promiscuous mode [ 120.241316][ T8358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.249276][ T8358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.276019][ T8358] team0: Port device team_slave_0 added [ 120.281728][ T8358] team0: Port device team_slave_1 added [ 120.297553][ T8358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.299719][ T8358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.311899][ T8358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.316387][ T8358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.319285][ T8358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.322986][ T8470] sd 0:0:0:0: PR command failed: 1026 [ 120.328886][ T8358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.334885][ T8470] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 120.338863][ T5444] 8021q: adding VLAN 0 to HW filter on device eth7 [ 120.341947][ T8470] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 120.376931][ T5812] hsr_slave_0: left promiscuous mode [ 120.379815][ T5812] hsr_slave_1: left promiscuous mode [ 120.382434][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.385473][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.389129][ T42] kauditd_printk_skb: 377 callbacks suppressed [ 120.389146][ T42] audit: type=1400 audit(1783371233.793:22539): avc: denied { prog_load } for pid=8475 comm="syz.0.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 120.413248][ T5812] veth1_macvtap: left promiscuous mode [ 120.415780][ T5812] veth0_macvtap: left promiscuous mode [ 120.417931][ T5812] veth1_vlan: left promiscuous mode [ 120.420180][ T5812] veth0_vlan: left promiscuous mode [ 120.438263][ T42] audit: type=1400 audit(1783371233.843:22540): avc: denied { read } for pid=8477 comm="syz.0.677" name="v4l-subdev5" dev="devtmpfs" ino=971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.458920][ T42] audit: type=1400 audit(1783371233.843:22541): avc: denied { open } for pid=8477 comm="syz.0.677" path="/dev/v4l-subdev5" dev="devtmpfs" ino=971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.470093][ T42] audit: type=1400 audit(1783371233.843:22542): avc: denied { ioctl } for pid=8477 comm="syz.0.677" path="/dev/v4l-subdev5" dev="devtmpfs" ino=971 ioctlcmd=0x5616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.481580][ T42] audit: type=1400 audit(1783371233.853:22543): avc: denied { create } for pid=8477 comm="syz.0.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 120.491062][ T42] audit: type=1400 audit(1783371233.853:22544): avc: denied { write } for pid=8477 comm="syz.0.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 120.600886][ T5749] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.671073][ T5749] Bluetooth: hci1: command 0x041b tx timeout [ 120.674861][ T8358] hsr_slave_0: entered promiscuous mode [ 120.679706][ T8358] hsr_slave_1: entered promiscuous mode [ 120.692165][ T42] audit: type=1400 audit(1783371234.103:22545): avc: denied { map_create } for pid=8487 comm="syz.0.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 120.706364][ T42] audit: type=1400 audit(1783371234.103:22546): avc: denied { perfmon } for pid=8487 comm="syz.0.679" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 120.715358][ T42] audit: type=1400 audit(1783371234.103:22547): avc: denied { map_read map_write } for pid=8487 comm="syz.0.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 120.725094][ T42] audit: type=1400 audit(1783371234.113:22548): avc: denied { bpf } for pid=8487 comm="syz.0.679" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.002903][ T8508] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 121.019659][ T24] IPVS: starting estimator thread 0... [ 121.032551][ T5444] 8021q: adding VLAN 0 to HW filter on device eth8 [ 121.110507][ T8509] IPVS: using max 44 ests per chain, 105600 per kthread [ 121.140489][ T8358] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 121.148420][ T8358] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 121.151993][ T8358] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 121.159868][ T8358] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 121.164032][ T8358] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 121.172718][ T8358] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 121.177204][ T8358] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 121.185961][ T8358] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 121.249167][ T8358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.262643][ T8358] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.271151][ T8535] openvswitch: netlink: IP tunnel dst address not specified [ 121.277391][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.279727][ T6007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.291739][ T8535] xt_hashlimit: invalid rate [ 121.293842][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.690'. [ 121.296997][ T8535] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 121.298997][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.302109][ T6007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.333669][ T5444] 8021q: adding VLAN 0 to HW filter on device eth9 [ 121.626121][ T8358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.777331][ T8581] program syz.2.695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.807945][ T8358] veth0_vlan: entered promiscuous mode [ 121.823228][ T8358] veth1_vlan: entered promiscuous mode [ 121.827290][ T8584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.854311][ T8358] veth0_macvtap: entered promiscuous mode [ 121.859146][ T8358] veth1_macvtap: entered promiscuous mode [ 121.870216][ T8358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.878328][ T8358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.889777][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.893798][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.901371][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.904725][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.909349][ T8585] netlink: 'syz.2.696': attribute type 12 has an invalid length. [ 122.091209][ T6016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.095164][ T6016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.116786][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.119324][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.592785][ T8626] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=514 sclass=netlink_tcpdiag_socket pid=8626 comm=syz.4.704 [ 122.670622][ T5749] Bluetooth: hci2: command 0x0c1a tx timeout [ 122.693262][ T8633] __nla_validate_parse: 1 callbacks suppressed [ 122.693281][ T8633] netlink: 24 bytes leftover after parsing attributes in process `syz.2.705'. [ 122.750695][ T5749] Bluetooth: hci1: command 0x041b tx timeout [ 122.906356][ T8643] overlayfs: overlapping lowerdir path [ 122.970576][ T5836] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 123.047242][ T6007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.050485][ T6007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.076801][ T8655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.133750][ T5836] usb 9-1: Using ep0 maxpacket: 8 [ 123.138721][ T5836] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 123.143003][ T5836] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 123.148696][ T5836] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 123.153184][ T5836] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.157631][ T5836] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 123.163730][ T5836] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 123.170317][ T5836] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 123.179062][ T5836] usb 9-1: config 168 interface 0 has no altsetting 0 [ 123.182824][ T5836] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 123.185367][ T5836] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 123.189128][ T5836] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 123.193357][ T5836] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.197578][ T5836] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 123.201502][ T5836] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 123.205545][ T5836] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 123.210477][ T5836] usb 9-1: config 168 interface 0 has no altsetting 0 [ 123.213517][ T5836] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 123.216368][ T5836] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 123.220301][ T5836] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 123.225486][ T5836] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.229570][ T5836] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 123.233769][ T5836] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 123.238138][ T5836] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 123.242628][ T5836] usb 9-1: config 168 interface 0 has no altsetting 0 [ 123.247072][ T5836] usb 9-1: string descriptor 0 read error: -22 [ 123.249507][ T5836] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 123.252913][ T5836] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.276906][ T5836] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 123.728836][ T24] usb 9-1: USB disconnect, device number 2 [ 124.194586][ T8713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'. [ 124.271623][ T8719] netlink: 4376 bytes leftover after parsing attributes in process `syz.4.729'. [ 124.279497][ T8719] netlink: 4376 bytes leftover after parsing attributes in process `syz.4.729'. [ 124.366740][ T8722] fuse: fd is not a fuse device [ 124.377384][ T8722] bpf: Bad value for 'gid' [ 124.394273][ T8722] tmpfs: Bad value for 'mpol' [ 124.555354][ T8738] netlink: 'syz.2.734': attribute type 1 has an invalid length. [ 124.577384][ T8738] bond2: entered promiscuous mode [ 124.579922][ T8738] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.593780][ T8738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'. [ 124.607181][ T8738] bond2 (unregistering): Released all slaves [ 124.702583][ T8743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.735'. [ 124.750575][ T5749] Bluetooth: hci2: command 0x0c1a tx timeout [ 124.841074][ T5749] Bluetooth: hci1: command 0x041b tx timeout [ 125.331169][ T8772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.744'. [ 125.347694][ T8772] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.361064][ T8772] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 125.381911][ T8772] netlink: 28 bytes leftover after parsing attributes in process `syz.4.744'. [ 125.637459][ T42] kauditd_printk_skb: 383 callbacks suppressed [ 125.637505][ T42] audit: type=1326 audit(1783371239.043:22932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8779 comm="syz.0.746" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea9719de59 code=0x0 [ 125.693243][ T42] audit: type=1400 audit(1783371239.103:22933): avc: denied { mount } for pid=8673 comm="syz.5.718" name="/" dev="9p" ino=83886173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 125.740937][ T42] audit: type=1400 audit(1783371239.153:22934): avc: denied { unmount } for pid=8358 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 125.788130][ T8785] autofs: Unknown parameter '–^Òó¸ßœ+uÜM>%®«ö5CüjínsoÞ‚OÝ$æÓ¡ÝÒ§£ü¢54%m *¤Ø?šÊ@¥ºaˆ!µø¼BóëFD¸yéïü®q4ž•#ÿÆÉç¼¢' [ 125.866830][ T8787] xt_l2tp: v2 doesn't support IP mode [ 125.903029][ T42] audit: type=1400 audit(1783371239.313:22935): avc: denied { module_request } for pid=8786 comm="syz.0.749" kmod="crypto-echainiv(authencesn(cmac(aes),cbc(aes)))" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 125.943772][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.749'. [ 125.949190][ T8790] netlink: del zone limit has 8 unknown bytes [ 125.954657][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.749'. [ 126.110264][ T42] audit: type=1400 audit(1783371239.513:22936): avc: denied { read write } for pid=8795 comm="syz.0.750" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 126.118245][ T8796] tmpfs: Unknown parameter 'usrquotae' [ 126.125202][ T42] audit: type=1400 audit(1783371239.513:22937): avc: denied { open } for pid=8795 comm="syz.0.750" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 126.141221][ T42] audit: type=1400 audit(1783371239.553:22938): avc: denied { create } for pid=8797 comm="syz.5.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 126.153451][ T42] audit: type=1400 audit(1783371239.553:22939): avc: denied { bind } for pid=8797 comm="syz.5.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 126.168211][ T42] audit: type=1400 audit(1783371239.573:22940): avc: denied { unmount } for pid=5746 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 126.204812][ T8801] nbd: must specify an index to disconnect [ 126.213651][ T42] audit: type=1400 audit(1783371239.623:22941): avc: denied { setopt } for pid=8797 comm="syz.5.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 126.217318][ T8805] random: crng reseeded on system resumption [ 126.234888][ T8805] fuse: Bad value for 'fd' [ 126.459227][ T8821] loop4: detected capacity change from 0 to 2640 [ 126.473088][ T8824] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 126.487547][ T8823] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 126.540770][ T8821] support for cryptoloop has been removed. Use dm-crypt instead. [ 126.579806][ T6436] buffer_io_error: 24 callbacks suppressed [ 126.579826][ T6436] Buffer I/O error on dev loop4, logical block 0, async page read [ 126.599460][ T6436] Buffer I/O error on dev loop4, logical block 0, async page read [ 126.605349][ T6436] Buffer I/O error on dev loop4, logical block 0, async page read [ 126.608958][ T6436] Buffer I/O error on dev loop4, logical block 0, async page read [ 126.613728][ T6436] Buffer I/O error on dev loop4, logical block 0, async page read [ 126.639757][ T8816] fuse: Unknown parameter '000000000000000000000070xffffffffffffffff' [ 126.910675][ T5749] Bluetooth: hci1: command 0x041b tx timeout [ 126.915648][ T8843] cdrom: dropping to single frame dma [ 127.040457][ T8848] syzkaller0: entered promiscuous mode [ 127.042859][ T8848] syzkaller0: entered allmulticast mode [ 127.287511][ T8868] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 127.307708][ T8871] /dev/nullb0: Can't open blockdev [ 127.407387][ T8878] tmpfs: Unknown parameter 'siÔ4ÉòÕÐze' [ 127.418821][ T8878] overlayfs: failed to resolve '/ë“]=cyÁùd�[£º;M~': -2 [ 127.496801][ T8887] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 127.507416][ T8887] Cannot find add_set index 0 as target [ 127.539523][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.542939][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.554681][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.557985][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.573311][ T8893] syzkaller0: linktype set to 776 [ 127.628965][ T8895] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 127.647970][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.650090][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.659562][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.670438][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.676647][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.681054][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.684727][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.687482][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.689677][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.695088][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.699289][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.703758][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.708087][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.712870][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.714954][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.730792][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.733893][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.738559][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.746877][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.748961][ T8904] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 127.753090][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.755822][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.757738][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.759994][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.763702][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.765652][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.771359][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.779312][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.787493][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.796994][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.806907][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.810945][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.813403][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.815613][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.819329][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.821431][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.830331][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.832294][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.838549][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.845170][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.851241][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.859813][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.861912][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.864245][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.867066][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.869191][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.874851][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.877088][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.878992][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.882501][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.885039][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.887262][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.889832][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.892364][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.894379][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.896530][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.899268][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.902239][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.904586][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.907012][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.908908][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.912415][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.914728][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.916775][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.919659][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.922078][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.924124][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.926615][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.929339][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.932057][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.934097][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.936828][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.938909][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.943271][ T8886] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 127.946803][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.950233][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.953579][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.956485][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.958906][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.958989][ T8914] __nla_validate_parse: 4 callbacks suppressed [ 127.959004][ T8914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.785'. [ 127.961338][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.969403][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.972001][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.975830][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.977843][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.980801][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.983109][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.987033][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.989662][ T8914] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 127.992638][ T8893] syzkaller0: Linktype set failed because interface is up [ 127.995719][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 127.997903][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.000897][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.003050][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.005825][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.007816][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.012821][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.014845][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.017487][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.019671][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.022589][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.024606][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.026918][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.029126][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.033039][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.035370][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.037692][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.039562][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.042493][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.044758][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.048032][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.049987][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.054226][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.056308][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.060669][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.063002][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.065175][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.066771][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.069170][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.070975][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.073586][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.075379][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.077431][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.079560][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.081974][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.083996][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.086663][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.088592][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.090936][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.092658][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.094891][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.096603][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.098757][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.100877][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.103430][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.105372][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.107441][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.109115][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.112679][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.114607][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.117166][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.119033][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.121251][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.122907][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.124778][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.126459][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.128673][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.130695][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.134029][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.136071][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.138751][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.140738][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.145591][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.149846][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.151384][ T8925] netlink: 20 bytes leftover after parsing attributes in process `syz.4.788'. [ 128.154789][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.160909][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.173500][ T8925] bond0: (slave bond_slave_0): Releasing backup interface [ 128.235230][ T8930] program syz.2.790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.299786][ T8925] bond_slave_0: entered promiscuous mode [ 128.306843][ T8925] bond_slave_0: entered allmulticast mode [ 128.320211][ T8893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.323939][ T8893] syzkaller0: Linktype set failed because interface is up [ 128.535728][ T8943] xt_connbytes: Forcing CT accounting to be enabled [ 129.000946][ T5749] Bluetooth: hci1: command 0x041b tx timeout [ 130.658294][ T42] kauditd_printk_skb: 168 callbacks suppressed [ 130.658314][ T42] audit: type=1400 audit(1783371244.063:23110): avc: denied { read } for pid=5444 comm="dhcpcd" name="n43" dev="tmpfs" ino=5959 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 130.681108][ T42] audit: type=1400 audit(1783371244.083:23111): avc: denied { open } for pid=5444 comm="dhcpcd" path="/run/udev/data/n43" dev="tmpfs" ino=5959 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 130.697637][ T42] audit: type=1400 audit(1783371244.083:23112): avc: denied { getattr } for pid=5444 comm="dhcpcd" path="/run/udev/data/n43" dev="tmpfs" ino=5959 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 130.707782][ T42] audit: type=1400 audit(1783371244.083:23113): avc: denied { read } for pid=8954 comm="syz.5.798" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 130.719473][ T42] audit: type=1400 audit(1783371244.083:23114): avc: denied { open } for pid=8954 comm="syz.5.798" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 130.728796][ T42] audit: type=1400 audit(1783371244.083:23115): avc: denied { ioctl } for pid=8954 comm="syz.5.798" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0x6e83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 130.760481][ T42] audit: type=1400 audit(1783371244.163:23116): avc: denied { search } for pid=8958 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.785047][ T42] audit: type=1400 audit(1783371244.163:23117): avc: denied { search } for pid=8958 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.793051][ T42] audit: type=1400 audit(1783371244.163:23118): avc: denied { search } for pid=8958 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.802247][ T42] audit: type=1400 audit(1783371244.163:23119): avc: denied { search } for pid=8958 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.996485][ T8979] binder: BINDER_SET_CONTEXT_MGR already set [ 131.000488][ T8979] binder: 8977:8979 ioctl 4018620d 200000000100 returned -16 [ 131.001362][ T8980] binder: 8977:8980 ioctl c0306201 2000000004c0 returned -22 [ 131.004356][ T8979] binder: BINDER_SET_CONTEXT_MGR already set [ 131.011324][ T8979] binder: 8977:8979 ioctl 4018620d 200000000100 returned -16 [ 131.070805][ T5749] Bluetooth: hci1: command 0x041b tx timeout [ 131.232328][ T8989] bridge2: entered promiscuous mode [ 131.234635][ T8989] bridge2: entered allmulticast mode [ 131.250563][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 131.422041][ T9] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 131.428741][ T9] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 131.432351][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 131.435232][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 131.438612][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 131.443855][ T9] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 131.446924][ T9] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 131.449504][ T9] usb 9-1: Product: syz [ 131.451401][ T9] usb 9-1: Manufacturer: syz [ 131.461261][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 131.463211][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 131.466541][ T9] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 131.468534][ T9] cdc_wdm 9-1:1.0: Unknown control protocol [ 131.711371][ T8992] netlink: 16 bytes leftover after parsing attributes in process `syz.5.806'. [ 131.998205][ T8982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.123525][ T942] usb 9-1: USB disconnect, device number 3 [ 132.166601][ T9009] xt_policy: output policy not valid in PREROUTING and INPUT [ 132.504690][ T9021] bond2: Removing last arp target with arp_interval on [ 132.697463][ T9032] syz.4.818 (9032): attempted to duplicate a private mapping with mremap. This is not supported. [ 133.057318][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 133.068630][ T9053] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.290154][ T9075] syzkaller0: entered promiscuous mode [ 133.294793][ T9075] syzkaller0: entered allmulticast mode [ 133.358146][ T9082] netlink: 276 bytes leftover after parsing attributes in process `syz.4.832'. [ 133.733638][ T9098] netlink: 'syz.4.838': attribute type 11 has an invalid length. [ 133.895355][ T9104] overlayfs: failed lookup in lower (newroot/228, name='file1', err=-40): overlapping layers [ 134.643277][ T9148] netlink: 228 bytes leftover after parsing attributes in process `syz.4.849'. [ 134.724473][ T9159] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 134.915878][ T9173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.856'. [ 135.112988][ T8946] syz.0.794 (8946) used greatest stack depth: 18824 bytes left [ 135.219634][ T9176] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 135.390739][ T9187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.861'. [ 135.454670][ T9187] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 135.882390][ T5949] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 135.949728][ T42] kauditd_printk_skb: 317 callbacks suppressed [ 135.949773][ T42] audit: type=1400 audit(1783371249.353:23437): avc: denied { create } for pid=9205 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 135.959754][ T42] audit: type=1400 audit(1783371249.363:23438): avc: denied { bind } for pid=9205 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 135.966820][ T42] audit: type=1400 audit(1783371249.373:23439): avc: denied { setopt } for pid=9205 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 135.973779][ T42] audit: type=1400 audit(1783371249.373:23440): avc: denied { read } for pid=9205 comm="syz.4.866" dev="nsfs" ino=4026533297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 135.980778][ T42] audit: type=1400 audit(1783371249.373:23441): avc: denied { open } for pid=9205 comm="syz.4.866" path="net:[4026533297]" dev="nsfs" ino=4026533297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 135.997447][ T42] audit: type=1400 audit(1783371249.383:23442): avc: denied { accept } for pid=9205 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 136.006650][ T42] audit: type=1400 audit(1783371249.383:23443): avc: denied { write } for pid=9205 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 136.017106][ T42] audit: type=1400 audit(1783371249.383:23444): avc: denied { read } for pid=9205 comm="syz.4.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 136.027182][ T42] audit: type=1400 audit(1783371249.433:23445): avc: denied { create } for pid=9207 comm="syz.4.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.037308][ T42] audit: type=1400 audit(1783371249.433:23446): avc: denied { setopt } for pid=9207 comm="syz.4.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.048106][ T5949] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.053239][ T5949] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.057648][ T5949] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.063968][ T5949] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.067581][ T5949] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.073697][ T5949] usb 7-1: config 0 descriptor?? [ 136.515815][ T5949] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 136.602741][ T7997] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 136.796424][ T9223] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 136.853516][ T7997] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 136.857358][ T7997] usb 9-1: can't read configurations, error -71 [ 137.086920][ T9229] cgroup: fork rejected by pids controller in /syz0 [ 137.795052][ C0] plantronics 0003:047F:FFFF.0007: usb_submit_urb(ctrl) failed: -1 [ 138.273049][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.591794][ T5836] usb 7-1: USB disconnect, device number 7 [ 142.356993][ T42] kauditd_printk_skb: 31 callbacks suppressed [ 142.357010][ T42] audit: type=1400 audit(1783371255.763:23478): avc: denied { search } for pid=9266 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.367522][ T42] audit: type=1400 audit(1783371255.773:23479): avc: denied { search } for pid=9266 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.376424][ T42] audit: type=1400 audit(1783371255.773:23480): avc: denied { search } for pid=9266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.386945][ T42] audit: type=1400 audit(1783371255.773:23481): avc: denied { search } for pid=9266 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.394962][ T42] audit: type=1400 audit(1783371255.773:23482): avc: denied { read } for pid=9267 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.404985][ T42] audit: type=1400 audit(1783371255.773:23483): avc: denied { read open } for pid=9267 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.414140][ T42] audit: type=1400 audit(1783371255.773:23484): avc: denied { getattr } for pid=9267 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.422722][ T42] audit: type=1400 audit(1783371255.793:23485): avc: denied { write } for pid=9266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.431885][ T42] audit: type=1400 audit(1783371255.793:23486): avc: denied { add_name } for pid=9266 comm="dhcpcd-run-hook" name="resolv.conf.bond_slave_0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.441985][ T42] audit: type=1400 audit(1783371255.793:23487): avc: denied { create } for pid=9266 comm="dhcpcd-run-hook" name="resolv.conf.bond_slave_0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 156.875569][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 156.875591][ T42] audit: type=1400 audit(1783371270.283:23497): avc: denied { create } for pid=9282 comm="syz.4.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 156.876423][ T9284] netlink: 'syz.4.877': attribute type 9 has an invalid length. [ 156.878466][ T42] audit: type=1400 audit(1783371270.283:23498): avc: denied { write } for pid=9282 comm="syz.4.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 156.917073][ T42] audit: type=1400 audit(1783371270.323:23499): avc: denied { create } for pid=9283 comm="syz.2.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.925892][ T42] audit: type=1400 audit(1783371270.323:23500): avc: denied { bind } for pid=9283 comm="syz.2.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.933920][ T42] audit: type=1400 audit(1783371270.323:23501): avc: denied { create } for pid=9283 comm="syz.2.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.943474][ T42] audit: type=1400 audit(1783371270.323:23502): avc: denied { write } for pid=9283 comm="syz.2.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.951781][ T42] audit: type=1400 audit(1783371270.333:23503): avc: denied { read write } for pid=8358 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 156.962321][ T42] audit: type=1400 audit(1783371270.333:23504): avc: denied { open } for pid=8358 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 156.973050][ T42] audit: type=1400 audit(1783371270.333:23505): avc: denied { ioctl } for pid=8358 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 156.983642][ T42] audit: type=1400 audit(1783371270.353:23506): avc: denied { prog_load } for pid=9290 comm="syz.5.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 157.041332][ T9295] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 157.098709][ T9301] kvm: kvm [9300]: vcpu0, guest rIP: 0x540a3 Unhandled RDMSR(0x40000075) [ 157.279261][ T9309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9309 comm=syz.5.884 [ 157.650228][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.889'. [ 157.653877][ T9325] netlink: 20 bytes leftover after parsing attributes in process `syz.5.889'. [ 157.665177][ T6910] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.665185][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.889'. [ 157.665324][ T6910] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.668092][ T9325] netlink: 20 bytes leftover after parsing attributes in process `syz.5.889'. [ 157.671145][ T6910] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.681427][ T6910] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.744974][ T9327] syz.0.890: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 158.317801][ T9336] fuse: blksize only supported for fuseblk [ 158.564831][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.899'. [ 158.598455][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.899'. [ 158.648274][ T9360] random: crng reseeded on system resumption [ 158.746852][ T9369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9369 comm=syz.4.902 [ 158.750525][ T9368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9368 comm=syz.4.902 [ 158.831309][ T9377] netlink: 16 bytes leftover after parsing attributes in process `syz.5.906'. [ 158.912301][ T5749] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 158.912430][ T5744] Bluetooth: hci4: command 0x1003 tx timeout syzkaller syzkaller login: [ 159.049035][ T9383] overlayfs: conflicting options: nfs_export=on,index=off [ 159.070600][ T24] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 159.222071][ T24] usb 9-1: config 0 has an invalid interface number: 55 but max is -1 [ 159.225292][ T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 159.228687][ T24] usb 9-1: config 0 has no interface number 0 [ 159.231505][ T24] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 159.236657][ T24] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 159.241983][ T24] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 159.246497][ T24] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 159.249209][ T9394] /dev/nullb0: Can't open blockdev [ 159.250929][ T24] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 159.258561][ T24] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 159.262979][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.272518][ T24] usb 9-1: config 0 descriptor?? [ 159.276213][ T9375] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 159.284093][ T24] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 159.319398][ T9395] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 159.400288][ T9397] /dev/sg0: Can't lookup blockdev [ 159.547533][ T9399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.913'. [ 159.594189][ T5820] usb 9-1: USB disconnect, device number 6 [ 159.612780][ T5820] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 160.490493][ T24] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 160.662328][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 160.667063][ T24] usb 10-1: unable to get BOS descriptor or descriptor too short [ 160.673443][ T9433] netlink: 'syz.2.923': attribute type 12 has an invalid length. [ 160.682013][ T24] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 54688, setting to 64 [ 160.688442][ T24] usb 10-1: New USB device found, idVendor=0582, idProduct=0027, bcdDevice= 0.40 [ 160.693540][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.696923][ T24] usb 10-1: Product: syz [ 160.698980][ T24] usb 10-1: Manufacturer: syz [ 160.702664][ T24] usb 10-1: SerialNumber: syz [ 160.864496][ T9445] netlink: 36 bytes leftover after parsing attributes in process `syz.0.928'. [ 160.920905][ T9426] netlink: 328 bytes leftover after parsing attributes in process `syz.5.921'. [ 160.986550][ T24] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 161.117450][ T24] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 161.123381][ T24] usb 10-1: USB disconnect, device number 2 [ 161.140824][ T9288] udevd[9288]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.862347][ T5749] Bluetooth: hci1: Unable to find connection for big 0x00 [ 161.884928][ T9464] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 161.892808][ T9464] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 161.898804][ T9464] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 161.921170][ T9464] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.922018][ T42] kauditd_printk_skb: 219 callbacks suppressed [ 161.922033][ T42] audit: type=1400 audit(1783371275.333:23726): avc: denied { write } for pid=9482 comm="syz.5.937" name="if_inet6" dev="proc" ino=4026533404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 161.924748][ T9464] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.934284][ T9485] netlink: 'syz.5.937': attribute type 1 has an invalid length. [ 161.940443][ T9464] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.961348][ T42] audit: type=1400 audit(1783371275.373:23727): avc: denied { create } for pid=9473 comm="syz.2.935" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 161.969740][ T42] audit: type=1400 audit(1783371275.373:23728): avc: denied { create } for pid=9488 comm="syz.0.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.981549][ T42] audit: type=1400 audit(1783371275.373:23729): avc: denied { map } for pid=9473 comm="syz.2.935" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=34692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 161.991846][ T9485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.997424][ T42] audit: type=1400 audit(1783371275.373:23730): avc: denied { read write } for pid=9473 comm="syz.2.935" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=34692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 162.007338][ T9491] input: syz1 as /devices/virtual/input/input13 [ 162.010556][ T42] audit: type=1400 audit(1783371275.373:23731): avc: denied { getopt } for pid=9488 comm="syz.0.938" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 162.019225][ T42] audit: type=1400 audit(1783371275.393:23732): avc: denied { read write } for pid=9490 comm="syz.4.939" name="uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 162.028415][ T42] audit: type=1400 audit(1783371275.393:23733): avc: denied { open } for pid=9490 comm="syz.4.939" path="/dev/uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 162.037157][ T42] audit: type=1400 audit(1783371275.393:23734): avc: denied { setopt } for pid=9490 comm="syz.4.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 162.044206][ T42] audit: type=1400 audit(1783371275.393:23735): avc: denied { ioctl } for pid=9488 comm="syz.0.938" path="socket:[35609]" dev="sockfs" ino=35609 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 162.730839][ T34] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 162.880498][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 162.886640][ T34] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.891560][ T34] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.895705][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 162.898342][ T34] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 162.901781][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.906287][ T34] usb 7-1: config 0 descriptor?? [ 163.114995][ T34] hid_parser_main: 22 callbacks suppressed [ 163.115010][ T34] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 163.119134][ T34] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 163.123342][ T34] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 163.126110][ T34] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 163.128491][ T34] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 163.132569][ T34] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 163.160646][ T5749] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.220635][ T5836] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 163.361079][ T5836] usb 10-1: device descriptor read/64, error -71 [ 163.473617][ T34] usb 7-1: USB disconnect, device number 9 [ 163.487595][ T9556] lo: Caught tx_queue_len zero misconfig [ 163.610537][ T5836] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 163.740790][ T5836] usb 10-1: device descriptor read/64, error -71 [ 163.851003][ T5836] usb usb10-port1: attempt power cycle [ 163.950811][ T5749] Bluetooth: hci1: command 0x041b tx timeout [ 163.960833][ T5744] Bluetooth: hci3: command 0x0c1a tx timeout [ 163.964486][ T5749] Bluetooth: hci2: command 0x0c1a tx timeout [ 164.083434][ T9562] nbd: must specify an index to disconnect [ 164.085859][ T9562] __nla_validate_parse: 1 callbacks suppressed [ 164.085898][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.959'. [ 164.092742][ T9562] netlink: 'syz.4.959': attribute type 30 has an invalid length. [ 164.108989][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.113292][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.116231][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.959'. [ 164.119113][ T9562] netlink: 'syz.4.959': attribute type 30 has an invalid length. [ 164.124532][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.128353][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.201185][ T5836] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 164.241545][ T5836] usb 10-1: device descriptor read/8, error -71 [ 164.510547][ T5836] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 164.541201][ T5836] usb 10-1: device descriptor read/8, error -71 [ 164.654348][ T5836] usb usb10-port1: unable to enumerate USB device [ 164.883534][ T9573] netlink: 56 bytes leftover after parsing attributes in process `syz.2.962'. [ 165.092088][ T9580] netlink: 24 bytes leftover after parsing attributes in process `syz.4.964'. [ 165.240810][ T5744] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.313884][ T9597] misc userio: Invalid payload size [ 165.396412][ T9604] netlink: 'syz.4.974': attribute type 2 has an invalid length. [ 165.753305][ T9616] overlayfs: failed to resolve './file0': -2 [ 166.040914][ T5744] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.198309][ T9654] netlink: 156 bytes leftover after parsing attributes in process `syz.4.991'. [ 166.398036][ T9665] tipc: Enabled bearer , priority 0 [ 166.449969][ T9664] tipc: Disabling bearer [ 166.510571][ T9686] overlayfs: failed to resolve '/ÿ': -2 [ 166.820947][ T9703] SELinux: policydb version 1783371280 does not match my version range 15-35 [ 166.826688][ T9703] SELinux: failed to load policy [ 166.950919][ T42] kauditd_printk_skb: 328 callbacks suppressed [ 166.950957][ T42] audit: type=1400 audit(1783371280.363:24064): avc: denied { ioctl } for pid=9709 comm="syz.4.1009" path="socket:[37251]" dev="sockfs" ino=37251 ioctlcmd=0x583d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.962359][ T42] audit: type=1400 audit(1783371280.363:24065): avc: denied { getopt } for pid=9709 comm="syz.4.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.969922][ T42] audit: type=1400 audit(1783371280.363:24066): avc: denied { create } for pid=9709 comm="syz.4.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 166.976828][ T42] audit: type=1400 audit(1783371280.363:24067): avc: denied { write } for pid=9709 comm="syz.4.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 166.984561][ T42] audit: type=1400 audit(1783371280.373:24068): avc: denied { write } for pid=9709 comm="syz.4.1009" dev="sockfs" ino=37251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.999017][ T42] audit: type=1400 audit(1783371280.373:24069): avc: denied { setattr } for pid=9709 comm="syz.4.1009" name="CAN_RAW" dev="sockfs" ino=37251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 167.011001][ T42] audit: type=1400 audit(1783371280.373:24070): avc: denied { create } for pid=9709 comm="syz.4.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 167.019164][ T42] audit: type=1400 audit(1783371280.373:24071): avc: denied { setopt } for pid=9709 comm="syz.4.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 167.026823][ T42] audit: type=1400 audit(1783371280.373:24072): avc: denied { create } for pid=9709 comm="syz.4.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.034775][ T42] audit: type=1400 audit(1783371280.373:24073): avc: denied { write } for pid=9709 comm="syz.4.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.311225][ T5744] Bluetooth: hci0: command 0x0c1a tx timeout [ 167.450644][ T5836] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 167.488005][ T9725] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1016'. [ 167.529513][ T9731] bond0: entered allmulticast mode [ 167.532481][ T9731] bond_slave_0: entered allmulticast mode [ 167.535153][ T9731] bond_slave_1: entered allmulticast mode [ 167.617185][ T5836] usb 10-1: config index 0 descriptor too short (expected 1307, got 27) [ 167.620240][ T5836] usb 10-1: config 0 has an invalid interface number: 0 but max is -1 [ 167.623613][ T5836] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 167.627055][ T5836] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 167.633821][ T5836] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 167.639381][ T5836] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 167.645918][ T5836] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 167.656048][ T5836] usb 10-1: string descriptor 0 read error: -22 [ 167.659119][ T5836] usb 10-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 167.664289][ T5836] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.677242][ T5836] usb 10-1: config 0 descriptor?? [ 167.686485][ T5836] hub 10-1:0.0: bad descriptor, ignoring hub [ 167.691172][ T5836] hub 10-1:0.0: probe with driver hub failed with error -5 [ 167.702144][ T5836] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input14 [ 167.730243][ T9742] SELinux: ebitmap: truncated map [ 167.732495][ T9742] SELinux: invalid class [ 167.763839][ T9742] SELinux: failed to load policy [ 167.780310][ T9741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.904523][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1021'. [ 167.938881][ T9761] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1013'. [ 167.953055][ T9719] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1013'. [ 167.964835][ T24] usb 10-1: USB disconnect, device number 7 [ 168.121145][ T5744] Bluetooth: hci3: command 0x0c1a tx timeout [ 168.757325][ T9794] input: syz1 as /devices/virtual/input/input15 [ 168.875273][ T9801] netlink: 'syz.5.1038': attribute type 21 has an invalid length. [ 168.883723][ T9804] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 168.912864][ T9802] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1038'. [ 168.928824][ T9801] bond2: peer notification delay (2365) is not a multiple of miimon (704), value rounded to 2112 ms [ 168.933166][ T9802] bond2: peer notification delay (2365) is not a multiple of miimon (704), value rounded to 2112 ms [ 169.034078][ T9813] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 169.116908][ T9815] __nla_validate_parse: 1 callbacks suppressed [ 169.116920][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1041'. [ 169.175583][ T9821] netlink: 'syz.5.1042': attribute type 1 has an invalid length. [ 169.577800][ T9845] smc: net device wlan0 applied user defined pnetid SYZ0 [ 169.636533][ T9852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9852 comm=syz.4.1049 [ 169.941961][ T9876] program syz.2.1057 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.162493][ T9878] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 170.179202][ T6145] Bluetooth: hci4: Frame reassembly failed (-84) [ 170.226837][ T40] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 170.394802][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 170.405485][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 170.408874][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 170.420124][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 170.426366][ T40] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 170.429566][ T40] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.432257][ T40] usb 7-1: Product: syz [ 170.433835][ T40] usb 7-1: Manufacturer: syz [ 170.437164][ T40] usb 7-1: SerialNumber: syz [ 170.451831][ T40] usb 7-1: config 0 descriptor?? [ 170.452362][ T9894] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1062'. [ 170.670595][ T40] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 170.697014][ T9900] bond3 (unregistering): Released all slaves [ 170.717484][ T9902] team0: No ports can be present during mode change [ 170.802929][ T9898] IPVS: persistence engine module ip_vs_pe_s not found [ 170.882938][ T9880] overlay: ./cgroup.net/cgroup.procs is not a directory [ 170.891834][ T40] usb 7-1: USB disconnect, device number 10 [ 170.968238][ T9907] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1066'. [ 171.386017][ T9935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1074'. [ 171.404642][ T9935] ip6gre1: entered promiscuous mode [ 171.406364][ T9935] ip6gre1: entered allmulticast mode [ 171.411768][ T5812] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.413720][ T9935] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.418216][ T5812] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.441014][ T5820] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.510772][ T5820] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 171.619820][ T9946] affs: No valid root block on device nullb0 [ 171.750091][ T9958] cgroup: Name too long [ 171.983123][ T42] kauditd_printk_skb: 402 callbacks suppressed [ 171.983191][ T42] audit: type=1400 audit(1783371285.393:24476): avc: denied { create } for pid=9971 comm="syz.2.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 171.993288][ T42] audit: type=1400 audit(1783371285.393:24477): avc: denied { ioctl } for pid=9971 comm="syz.2.1085" path="socket:[37805]" dev="sockfs" ino=37805 ioctlcmd=0x48df scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 172.001911][ T42] audit: type=1400 audit(1783371285.393:24478): avc: denied { read write } for pid=9971 comm="syz.2.1085" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 172.011769][ T42] audit: type=1400 audit(1783371285.403:24479): avc: denied { open } for pid=9971 comm="syz.2.1085" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 172.019173][ T42] audit: type=1400 audit(1783371285.403:24480): avc: denied { write } for pid=9971 comm="syz.2.1085" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 172.029839][ T42] audit: type=1400 audit(1783371285.403:24481): avc: denied { read write } for pid=9971 comm="syz.2.1085" name="video7" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 172.038581][ T42] audit: type=1400 audit(1783371285.403:24482): avc: denied { open } for pid=9971 comm="syz.2.1085" path="/dev/video7" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 172.048707][ T42] audit: type=1400 audit(1783371285.403:24483): avc: denied { ioctl } for pid=9971 comm="syz.2.1085" path="/dev/video7" dev="devtmpfs" ino=975 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 172.060564][ T42] audit: type=1400 audit(1783371285.413:24484): avc: denied { map } for pid=9971 comm="syz.2.1085" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 172.071573][ T42] audit: type=1400 audit(1783371285.413:24485): avc: denied { execmem } for pid=9971 comm="syz.2.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 172.193971][ T5749] Bluetooth: hci4: command 0x1003 tx timeout [ 172.194059][ T5744] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 172.270726][ T5820] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.322924][ T9993] netlink: 'syz.4.1093': attribute type 4 has an invalid length. [ 172.345040][ T9993] netlink: 'syz.4.1093': attribute type 4 has an invalid length. [ 172.472083][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1094'. [ 172.472140][ T9997] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 172.500181][ T9983] hid-generic 0003:0627:0001.0001: pid 9983 passed too large report [ 172.550726][ T5820] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 172.568274][T10002] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 172.700557][ T5820] usb 10-1: Using ep0 maxpacket: 32 [ 172.704128][ T5820] usb 10-1: config 0 has an invalid interface number: 119 but max is 0 [ 172.707122][ T5820] usb 10-1: config 0 has no interface number 0 [ 172.709457][ T5820] usb 10-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 172.713774][ T5820] usb 10-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 172.717684][ T5820] usb 10-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 7 [ 172.722084][ T5820] usb 10-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 25972, setting to 1024 [ 172.726243][ T5820] usb 10-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 172.733993][ T5820] usb 10-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 172.737540][ T5820] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.740605][ T5820] usb 10-1: Product: syz [ 172.742011][ T5820] usb 10-1: Manufacturer: syz [ 172.743698][ T5820] usb 10-1: SerialNumber: syz [ 172.748541][ T5820] usb 10-1: config 0 descriptor?? [ 172.755169][ T5820] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.119/input/input17 [ 172.831411][ T7997] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 172.955059][ T5827] usb 10-1: USB disconnect, device number 8 [ 172.990770][ T7997] usb 7-1: Using ep0 maxpacket: 8 [ 172.994284][ T7997] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 172.998382][ T7997] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 173.003354][ T7997] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.009212][ T7997] usb 7-1: config 0 descriptor?? [ 173.222036][ T7997] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 173.422707][ T5827] usb 7-1: USB disconnect, device number 11 [ 174.030654][ T7997] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 174.192289][ T7997] usb 10-1: Using ep0 maxpacket: 8 [ 174.196310][ T7997] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 174.200147][ T7997] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 174.204884][ T7997] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 174.209242][ T7997] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.214669][ T7997] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 174.218486][ T7997] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.341973][T10056] binder: 10055:10056 ioctl 80049370 2000000001c0 returned -22 [ 174.429213][ T7997] usb 10-1: GET_CAPABILITIES returned 0 [ 174.432677][ T7997] usbtmc 10-1:16.0: can't read capabilities [ 174.637163][ T7997] usb 10-1: USB disconnect, device number 9 [ 174.648596][T10064] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 174.652890][T10064] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 174.656379][T10064] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 174.659381][T10064] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 174.662017][T10064] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 174.664832][T10064] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 174.667468][T10064] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 174.670016][T10064] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 174.672779][T10064] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 174.779870][ T5744] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 175.226259][T10087] 9pnet_fd: p9_fd_create_tcp (10087): problem binding to privport [ 175.230469][T10087] 9pnet_fd: p9_fd_create_tcp (10087): problem binding to privport [ 175.266678][T10091] netlink: 'syz.5.1121': attribute type 1 has an invalid length. [ 175.334716][T10091] bond3: entered promiscuous mode [ 175.335149][T10091] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.368109][T10091] bond3: (slave bridge1): making interface the new active one [ 175.373670][T10091] bridge1: entered promiscuous mode [ 175.377419][T10091] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 175.433189][T10104] tipc: Can't bind to reserved service type 2 [ 175.451507][T10107] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1124'. [ 175.672912][T10116] comedi comedi0: Minor 2147483647 is invalid! [ 175.680657][ T24] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 175.800628][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.841906][ T24] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 133 [ 175.845474][ T24] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.853519][ T24] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 175.857011][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 175.860151][ T24] usb 9-1: Product: syz [ 175.862007][ T24] usb 9-1: Manufacturer: syz [ 175.863755][ T24] usb 9-1: SerialNumber: syz [ 175.872519][T10104] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 176.086445][ T24] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 178.263191][T10092] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 178.302314][ T24] usb 9-1: USB disconnect, device number 7 [ 178.319884][ T42] kauditd_printk_skb: 176 callbacks suppressed [ 178.319900][ T42] audit: type=1400 audit(1783371291.723:24662): avc: denied { unmount } for pid=7803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 178.329394][ T42] audit: type=1400 audit(1783371291.733:24663): avc: denied { create } for pid=10122 comm="syz.5.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 178.337450][ T42] audit: type=1400 audit(1783371291.733:24664): avc: denied { create } for pid=10122 comm="syz.5.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.346936][ T42] audit: type=1400 audit(1783371291.733:24665): avc: denied { read } for pid=10122 comm="syz.5.1129" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 178.375142][ C3] sr 2:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 178.375890][ T42] audit: type=1400 audit(1783371291.733:24666): avc: denied { open } for pid=10122 comm="syz.5.1129" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 178.379615][ C3] sr 2:0:0:0: [sr0] tag#0 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 178.391117][ T42] audit: type=1400 audit(1783371291.733:24667): avc: denied { ioctl } for pid=10122 comm="syz.5.1129" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 178.395111][ T24] usblp0: removed [ 178.407686][ T42] audit: type=1400 audit(1783371291.743:24668): avc: denied { connect } for pid=10123 comm="syz.2.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.415833][ T42] audit: type=1400 audit(1783371291.743:24669): avc: denied { write } for pid=10123 comm="syz.2.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.425056][ T42] audit: type=1400 audit(1783371291.743:24670): avc: denied { write } for pid=10123 comm="syz.2.1128" name="001" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 178.435888][ T42] audit: type=1400 audit(1783371291.763:24671): avc: denied { read write } for pid=10123 comm="syz.2.1128" name="sg1" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 178.493991][T10130] SELinux: policydb magic number 0x16000203 does not match expected magic number 0xf97cff8c [ 178.497823][T10130] SELinux: failed to load policy [ 178.599172][T10134] hfs: can't find a HFS filesystem on dev sr0 [ 178.611737][ T34] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 178.760596][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 178.766081][ T34] usb 7-1: config 16 has an invalid interface number: 23 but max is 0 [ 178.768957][ T34] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 178.772781][ T34] usb 7-1: config 16 has no interface number 0 [ 178.774871][ T34] usb 7-1: config 16 interface 23 has no altsetting 0 [ 178.778125][ T34] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 178.781767][ T34] usb 7-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 178.785206][ T34] usb 7-1: Manufacturer: syz [ 178.990683][ T5949] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 179.026894][ T34] usb 7-1: USB disconnect, device number 12 [ 179.141285][ T5949] usb 9-1: Using ep0 maxpacket: 8 [ 179.144852][ T5949] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 179.148363][ T5949] usb 9-1: config 179 has no interface number 0 [ 179.152988][ T5949] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 179.156880][ T5949] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 179.161468][ T5949] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 179.165118][ T5949] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 179.169181][ T5949] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 179.177243][ T5949] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 179.180581][ T5949] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.189224][T10143] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 179.465992][ C3] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 179.465993][ T5827] usb 9-1: USB disconnect, device number 8 [ 179.470773][ C3] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 179.474501][ C3] ================================================================== [ 179.477191][ C3] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23b/0x260 [ 179.480272][ C3] Read of size 4 at addr ffff88803db9f85c by task kworker/3:0/34 [ 179.484132][ C3] [ 179.485992][ C3] CPU: 3 UID: 0 PID: 34 Comm: kworker/3:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.486351][ C3] Tainted: [L]=SOFTLOCKUP [ 179.486356][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.486389][ C3] Workqueue: 0x0 (events) [ 179.486424][ C3] Call Trace: [ 179.486449][ C3] [ 179.486453][ C3] dump_stack_lvl+0x100/0x190 [ 179.486491][ C3] print_report+0x13d/0x4b0 [ 179.486526][ C3] ? __virt_addr_valid+0x239/0x430 [ 179.486562][ C3] ? do_raw_spin_lock+0x23b/0x260 [ 179.486577][ C3] kasan_report+0xdf/0x1c0 [ 179.486610][ C3] ? do_raw_spin_lock+0x23b/0x260 [ 179.486626][ C3] do_raw_spin_lock+0x23b/0x260 [ 179.486641][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 179.486656][ C3] ? kcov_remote_stop+0x201/0x540 [ 179.486688][ C3] ? kcov_remote_stop+0x201/0x540 [ 179.486700][ C3] _raw_spin_lock_irqsave+0x42/0x60 [ 179.486745][ C3] ? __wake_up+0x1c/0x60 [ 179.486783][ C3] __wake_up+0x1c/0x60 [ 179.486800][ C3] usb_anchor_resume_wakeups+0xc7/0xf0 [ 179.486844][ C3] __usb_hcd_giveback_urb+0x3d6/0x610 [ 179.486858][ C3] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 179.486872][ C3] dummy_timer+0xda1/0x36c0 [ 179.486908][ C3] ? find_held_lock+0x2b/0x80 [ 179.486926][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 179.486941][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 179.486976][ C3] ? __pfx_debug_object_deactivate+0x10/0x10 [ 179.486989][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 179.487003][ C3] ? rcu_is_watching+0x12/0xc0 [ 179.487020][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 179.487034][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 179.487049][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 179.487101][ C3] hrtimer_run_softirq+0x17d/0x2c0 [ 179.487118][ C3] handle_softirqs+0x1ea/0x9b0 [ 179.487133][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 179.487146][ C3] ? _raw_spin_unlock+0x28/0x50 [ 179.487159][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 179.487177][ C3] __irq_exit_rcu+0x162/0x210 [ 179.487189][ C3] irq_exit_rcu+0x9/0x30 [ 179.487202][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 179.487219][ C3] [ 179.487223][ C3] [ 179.487227][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 179.487241][ C3] RIP: 0010:finish_task_switch.isra.0+0x2cd/0x10c0 [ 179.487257][ C3] Code: ab 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7f 48 e8 30 34 e6 09 e8 eb ac 3c 00 fb 48 8d bb f8 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 179.487269][ C3] RSP: 0018:ffffc900006dfbc0 EFLAGS: 00000206 [ 179.487279][ C3] RAX: 000000000003dfdd RBX: ffff88801f6f2540 RCX: 0000000000000000 [ 179.487286][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a29fc RDI: ffff88801f6f3c38 [ 179.487294][ C3] RBP: ffffc900006dfc18 R08: 0000000000000001 R09: 0000000000000000 [ 179.487300][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802986ca80 [ 179.487307][ C3] R13: 0000000000000000 R14: ffffffff91225964 R15: ffff88806a73b4c0 [ 179.487319][ C3] __schedule+0x1264/0x6730 [ 179.487337][ C3] ? __pfx___schedule+0x10/0x10 [ 179.487350][ C3] ? find_held_lock+0x2b/0x80 [ 179.487366][ C3] ? schedule+0x225/0x2c0 [ 179.487380][ C3] schedule+0xdd/0x2c0 [ 179.487392][ C3] ? worker_thread+0x4c0/0xe50 [ 179.487422][ C3] worker_thread+0x53b/0xe50 [ 179.487435][ C3] ? kthread+0x13a/0x450 [ 179.487452][ C3] ? __pfx_worker_thread+0x10/0x10 [ 179.487462][ C3] kthread+0x370/0x450 [ 179.487478][ C3] ? __pfx_kthread+0x10/0x10 [ 179.487495][ C3] ret_from_fork+0x72b/0xd50 [ 179.487556][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 179.487571][ C3] ? __switch_to+0x800/0x10f0 [ 179.487612][ C3] ? __pfx_kthread+0x10/0x10 [ 179.487629][ C3] ret_from_fork_asm+0x1a/0x30 [ 179.487648][ C3] [ 179.487652][ C3] [ 179.613368][ C3] Allocated by task 5949: [ 179.614939][ C3] kasan_save_stack+0x30/0x50 [ 179.616479][ C3] kasan_save_track+0x14/0x30 [ 179.617986][ C3] __kasan_kmalloc+0xaa/0xb0 [ 179.619455][ C3] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 179.621257][ C3] xpad_probe+0x28e/0x1f60 [ 179.622711][ C3] usb_probe_interface+0x303/0x8f0 [ 179.624413][ C3] really_probe+0x241/0xa60 [ 179.625910][ C3] __driver_probe_device+0x20e/0x450 [ 179.627818][ C3] driver_probe_device+0x4a/0x140 [ 179.629596][ C3] __device_attach_driver+0x1df/0x320 [ 179.631409][ C3] bus_for_each_drv+0x159/0x1e0 [ 179.633057][ C3] __device_attach+0x1e4/0x4d0 [ 179.634590][ C3] device_initial_probe+0xaf/0xd0 [ 179.636244][ C3] bus_probe_device+0x64/0x160 [ 179.637766][ C3] device_add+0x121d/0x1970 [ 179.639197][ C3] usb_set_configuration+0xd97/0x1c60 [ 179.640917][ C3] usb_generic_driver_probe+0xa1/0xe0 [ 179.642620][ C3] usb_probe_device+0xef/0x400 [ 179.644471][ C3] really_probe+0x241/0xa60 [ 179.646442][ C3] __driver_probe_device+0x20e/0x450 [ 179.648696][ C3] driver_probe_device+0x4a/0x140 [ 179.650597][ C3] __device_attach_driver+0x1df/0x320 [ 179.652306][ C3] bus_for_each_drv+0x159/0x1e0 [ 179.653900][ C3] __device_attach+0x1e4/0x4d0 [ 179.655416][ C3] device_initial_probe+0xaf/0xd0 [ 179.657064][ C3] bus_probe_device+0x64/0x160 [ 179.658583][ C3] device_add+0x121d/0x1970 [ 179.660044][ C3] usb_new_device.cold+0x685/0x115c [ 179.661698][ C3] hub_event+0x314d/0x4af0 [ 179.663124][ C3] process_one_work+0xa23/0x1940 [ 179.664694][ C3] worker_thread+0x5ef/0xe50 [ 179.666235][ C3] kthread+0x370/0x450 [ 179.667587][ C3] ret_from_fork+0x72b/0xd50 [ 179.669234][ C3] ret_from_fork_asm+0x1a/0x30 [ 179.670974][ C3] [ 179.671816][ C3] Freed by task 5827: [ 179.673332][ C3] kasan_save_stack+0x30/0x50 [ 179.675223][ C3] kasan_save_track+0x14/0x30 [ 179.676806][ C3] kasan_save_free_info+0x3b/0x70 [ 179.678486][ C3] __kasan_slab_free+0x5f/0x80 [ 179.680065][ C3] kfree+0x22b/0x6c0 [ 179.681415][ C3] xpad_disconnect+0x1cf/0x530 [ 179.683106][ C3] usb_unbind_interface+0x1dd/0x9e0 [ 179.685136][ C3] device_remove+0x12a/0x180 [ 179.686824][ C3] device_release_driver_internal+0x44e/0x620 [ 179.688946][ C3] bus_remove_device+0x2bc/0x560 [ 179.690550][ C3] device_del+0x376/0x9b0 [ 179.691946][ C3] usb_disable_device+0x367/0x810 [ 179.693547][ C3] usb_disconnect+0x2e2/0x9a0 [ 179.695164][ C3] hub_event+0x1d0c/0x4af0 [ 179.696724][ C3] process_one_work+0xa23/0x1940 [ 179.698602][ C3] worker_thread+0x5ef/0xe50 [ 179.700264][ C3] kthread+0x370/0x450 [ 179.701647][ C3] ret_from_fork+0x72b/0xd50 [ 179.703151][ C3] ret_from_fork_asm+0x1a/0x30 [ 179.704668][ C3] [ 179.705422][ C3] The buggy address belongs to the object at ffff88803db9f800 [ 179.705422][ C3] which belongs to the cache kmalloc-1k of size 1024 [ 179.709659][ C3] The buggy address is located 92 bytes inside of [ 179.709659][ C3] freed 1024-byte region [ffff88803db9f800, ffff88803db9fc00) [ 179.714489][ C3] [ 179.715406][ C3] The buggy address belongs to the physical page: [ 179.717797][ C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3db98 [ 179.720704][ C3] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 179.723292][ C3] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 179.725647][ C3] page_type: f5(slab) [ 179.726938][ C3] raw: 00fff00000000040 ffff88801bc42dc0 dead000000000100 dead000000000122 [ 179.729557][ C3] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 179.732318][ C3] head: 00fff00000000040 ffff88801bc42dc0 dead000000000100 dead000000000122 [ 179.735254][ C3] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 179.738764][ C3] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 179.741963][ C3] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 179.744720][ C3] page dumped because: kasan: bad access detected [ 179.746771][ C3] page_owner tracks the page as allocated [ 179.748567][ C3] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5444, tgid 5444 (dhcpcd), ts 37275342975, free_ts 36243010052 [ 179.755182][ C3] post_alloc_hook+0xfd/0x120 [ 179.756859][ C3] get_page_from_freelist+0xf48/0x3530 [ 179.758752][ C3] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 179.760891][ C3] new_slab+0xa2/0x650 [ 179.762205][ C3] refill_objects+0xe3/0x410 [ 179.763789][ C3] __pcs_replace_empty_main+0x376/0x680 [ 179.765534][ C3] __kmalloc_node_noprof+0x681/0x830 [ 179.767220][ C3] qdisc_alloc+0xbb/0xb30 [ 179.768697][ C3] qdisc_create_dflt+0x93/0x490 [ 179.770320][ C3] dev_activate+0x64f/0xce0 [ 179.771965][ C3] __dev_open+0x490/0x8f0 [ 179.773568][ C3] __dev_change_flags+0x596/0x850 [ 179.775268][ C3] netif_change_flags+0x8d/0x160 [ 179.776909][ C3] dev_change_flags+0xba/0x260 [ 179.778429][ C3] devinet_ioctl+0x110b/0x1f10 [ 179.779983][ C3] inet_ioctl+0x3aa/0x3f0 [ 179.781386][ C3] page last free pid 5482 tgid 5482 stack trace: [ 179.783468][ C3] __free_frozen_pages+0x79f/0x1090 [ 179.785204][ C3] qlist_free_all+0x47/0xf0 [ 179.786783][ C3] kasan_quarantine_reduce+0x1a0/0x1f0 [ 179.788670][ C3] __kasan_slab_alloc+0x69/0x90 [ 179.790331][ C3] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 179.792115][ C3] mas_preallocate+0x1105/0x14a0 [ 179.793764][ C3] commit_merge+0x3e3/0xbd0 [ 179.795252][ C3] vma_expand+0xac5/0xea0 [ 179.796654][ C3] vma_merge_new_range+0x516/0xc00 [ 179.798333][ C3] __mmap_region+0xa86/0x2db0 [ 179.799862][ C3] mmap_region+0x35d/0x620 [ 179.801434][ C3] do_mmap+0xc63/0x12f0 [ 179.803136][ C3] vm_mmap_pgoff+0x29e/0x470 [ 179.804996][ C3] ksys_mmap_pgoff+0x3cb/0x610 [ 179.806821][ C3] __x64_sys_mmap+0x125/0x190 [ 179.808502][ C3] do_syscall_64+0x115/0x870 [ 179.809974][ C3] [ 179.810753][ C3] Memory state around the buggy address: [ 179.812553][ C3] ffff88803db9f700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 179.815124][ C3] ffff88803db9f780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 179.817668][ C3] >ffff88803db9f800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 179.820166][ C3] ^ [ 179.822371][ C3] ffff88803db9f880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 179.825304][ C3] ffff88803db9f900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 179.828073][ C3] ================================================================== [ 179.830638][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 179.832947][ C3] CPU: 3 UID: 0 PID: 34 Comm: kworker/3:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.836608][ C3] Tainted: [L]=SOFTLOCKUP [ 179.838495][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.842836][ C3] Workqueue: 0x0 (events) [ 179.844641][ C3] Call Trace: [ 179.845753][ C3] [ 179.846684][ C3] dump_stack_lvl+0x100/0x190 [ 179.848237][ C3] vpanic+0x552/0x970 [ 179.849532][ C3] ? __pfx_vpanic+0x10/0x10 [ 179.850989][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 179.852606][ C3] ? do_raw_spin_lock+0x23b/0x260 [ 179.854257][ C3] panic+0xd1/0xe0 [ 179.855463][ C3] ? __pfx_panic+0x10/0x10 [ 179.856900][ C3] ? end_report.part.0+0x23/0x90 [ 179.858479][ C3] ? rcu_is_watching+0x12/0xc0 [ 179.860014][ C3] ? end_report.part.0+0x23/0x90 [ 179.861802][ C3] ? check_panic_on_warn+0x1f/0x90 [ 179.863784][ C3] check_panic_on_warn.cold+0x19/0x34 [ 179.865834][ C3] end_report.part.0+0x3a/0x90 [ 179.867434][ C3] kasan_report.cold+0xe/0x18 [ 179.868946][ C3] ? do_raw_spin_lock+0x23b/0x260 [ 179.870553][ C3] do_raw_spin_lock+0x23b/0x260 [ 179.872136][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 179.873893][ C3] ? kcov_remote_stop+0x201/0x540 [ 179.875520][ C3] ? kcov_remote_stop+0x201/0x540 [ 179.877132][ C3] _raw_spin_lock_irqsave+0x42/0x60 [ 179.878949][ C3] ? __wake_up+0x1c/0x60 [ 179.880481][ C3] __wake_up+0x1c/0x60 [ 179.882047][ C3] usb_anchor_resume_wakeups+0xc7/0xf0 [ 179.883996][ C3] __usb_hcd_giveback_urb+0x3d6/0x610 [ 179.885712][ C3] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 179.887368][ C3] dummy_timer+0xda1/0x36c0 [ 179.888834][ C3] ? find_held_lock+0x2b/0x80 [ 179.890362][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 179.892229][ C3] ? debug_object_deactivate+0x2e4/0x3b0 [ 179.894041][ C3] ? __pfx_debug_object_deactivate+0x10/0x10 [ 179.896029][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 179.897878][ C3] ? rcu_is_watching+0x12/0xc0 [ 179.899688][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 179.901777][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 179.903393][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 179.905121][ C3] hrtimer_run_softirq+0x17d/0x2c0 [ 179.906748][ C3] handle_softirqs+0x1ea/0x9b0 [ 179.908357][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 179.910114][ C3] ? _raw_spin_unlock+0x28/0x50 [ 179.911771][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 179.913580][ C3] __irq_exit_rcu+0x162/0x210 [ 179.915055][ C3] irq_exit_rcu+0x9/0x30 [ 179.916418][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 179.918271][ C3] [ 179.919365][ C3] [ 179.920518][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 179.922789][ C3] RIP: 0010:finish_task_switch.isra.0+0x2cd/0x10c0 [ 179.924947][ C3] Code: ab 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7f 48 e8 30 34 e6 09 e8 eb ac 3c 00 fb 48 8d bb f8 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 179.930968][ C3] RSP: 0018:ffffc900006dfbc0 EFLAGS: 00000206 [ 179.932961][ C3] RAX: 000000000003dfdd RBX: ffff88801f6f2540 RCX: 0000000000000000 [ 179.935497][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a29fc RDI: ffff88801f6f3c38 [ 179.938181][ C3] RBP: ffffc900006dfc18 R08: 0000000000000001 R09: 0000000000000000 [ 179.941036][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802986ca80 [ 179.943688][ C3] R13: 0000000000000000 R14: ffffffff91225964 R15: ffff88806a73b4c0 [ 179.946217][ C3] __schedule+0x1264/0x6730 [ 179.947687][ C3] ? __pfx___schedule+0x10/0x10 [ 179.949229][ C3] ? find_held_lock+0x2b/0x80 [ 179.950737][ C3] ? schedule+0x225/0x2c0 [ 179.952155][ C3] schedule+0xdd/0x2c0 [ 179.953589][ C3] ? worker_thread+0x4c0/0xe50 [ 179.955195][ C3] worker_thread+0x53b/0xe50 [ 179.957010][ C3] ? kthread+0x13a/0x450 [ 179.958677][ C3] ? __pfx_worker_thread+0x10/0x10 [ 179.960475][ C3] kthread+0x370/0x450 [ 179.961857][ C3] ? __pfx_kthread+0x10/0x10 [ 179.963369][ C3] ret_from_fork+0x72b/0xd50 [ 179.964849][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 179.966453][ C3] ? __switch_to+0x800/0x10f0 [ 179.967964][ C3] ? __pfx_kthread+0x10/0x10 [ 179.969432][ C3] ret_from_fork_asm+0x1a/0x30 [ 179.970990][ C3] [ 179.973057][ C3] Kernel Offset: disabled [ 179.974575][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:50:37 Registers: info registers vcpu 0 CPU#0 RAX=00007f9289a13c78 RBX=00007f9289a131b8 RCX=ffffffff89ceb171 RDX=ffffffff89cd9dc9 RSI=00007f9289a13c78 RDI=00007f9289a13a58 RBP=00007f9289a12858 RSP=00007ffe1d0a21b0 R8 =00007f928a210000 R9 =00007f928a226038 R10=0000000000000003 R11=0000000000000016 R12=00007f9289a14c58 R13=0000000000000015 R14=0000000000000480 R15=0000000000000003 RIP=00007f9289e6e308 RFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555bbf7500 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000ffe000 CR3=000000003de9e000 CR4=00352ef0 DR0=0000000000000008 DR1=0000000000000007 DR2=0000000000000004 DR3=0000000000000008 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff89cd9017 ffffffff89d9585d ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 006d635f616d6472 ffffffff89cd9017 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1d0a2706 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1d0a2706 00007ffe1d0a270c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f928a034452 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f928a034492 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f928a0345f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f928a034484 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff820a5ca8 ffffffff820a5c58 ffffffff820a476d ffffffff820a4615 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff820a5ca8 ffffffff820a5c58 ffffffff820a476d ffffffff820a4615 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000058 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffffff8ebe6100 RCX=ffffffff91ba6e82 RDX=0000000000000000 RSI=ffffffff8c400c00 RDI=0000000000000000 RBP=ffffffff81b7d6be RSP=ffffc90020d875f0 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=0000000000000001 R12=ffff8880329b8000 R13=ffffc90020d876a8 R14=ffffc90020d87f48 R15=0000000020d88001 RIP=ffffffff81e566a5 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fce4a5016c0 ffffffff 00c00000 GS =0000 ffff8880d5eec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000ffe000 CR3=000000003fdd2000 CR4=00352ef0 DR0=0000000000000008 DR1=0000000000000007 DR2=0000000000000004 DR3=0000000000000008 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc18513c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc18513c6 00007ffcc18513cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce49634452 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce49634492 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce496345f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce49634484 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce497f05f8 00007fce497f05c8 00007fce497f0600 00007fce497f05e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=0000000000000003 RCX=ffffffff81fd3abd RDX=0000000000000001 RSI=0000000000000000 RDI=0000000000000005 RBP=ffff88806a743500 RSP=ffffc9000062fa28 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100d4e86a1 R14=0000000000000001 R15=ffff88806a63c880 RIP=ffffffff8209c900 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0cda9eb540 CR3=000000003d6fc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8175ec58 ffffffff8175ec13 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe44f48256 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe44f48256 00007ffe44f4825c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0cdaa34452 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0cdaa34492 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0cdaa345f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0cdaa34484 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9360f92f2258217c f7c022ce1444d66b dd16003db2c64c77 93ba2debf3e079bf ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000e01bcb8dcf51 2505c948f84d1ad4 f5706573060283a0 2a7516e439af0f52 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7a1d66851e08646a a4d297b316b93e5d 905023465d82bd96 8e8e187725eb0000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 12b1c1a166dd1660 49a12d2ac5a669bf 64e57a0a35a27a10 bebe63ecc2126bd1 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b8808b7d19075c75 b3cec8b77ba64d0f 666c22320483433e 801159164fe91864 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9b5dd17619cb87cc 16275a7a1d66851e 08646aa4d297b316 b93e5d905023465d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 82bd968e8e187725 eb00000000e01bcb 8dcf512505c948f8 4d1ad4f570657306 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=ffffffff8eaf2140 RCX=ffffffff81e8b302 RDX=ffff88801f6f2540 RSI=ffffffff8bd0b880 RDI=0000000000000002 RBP=ffffffff8bd0b880 RSP=ffffc900006f8270 R8 =0000000000000001 R9 =fffff520000df064 R10=ffffc900006f8327 R11=20666f2064616552 R12=0000000000000002 R13=fffffffffffdada0 R14=0000000000000002 R15=ffffffff8eaf2188 RIP=ffffffff8209cb26 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d60ec000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000003d6fc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1d0a2706 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe1d0a2706 00007ffe1d0a270c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f928a034452 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f928a034492 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f928a0345f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f928a034484 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000