last executing test programs: 20.969876886s ago: executing program 1 (id=486): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x0, 0xff, 0x0, 0x1, 0x5}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x59, 0x0, 0x1}, {0x5}]}}]}, 0x3c}}, 0x40000) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=prefer=statiF:0']) 20.896649779s ago: executing program 1 (id=489): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x1458}, 0x20048811) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r6, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) shutdown(r6, 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f0000000080)=[{0x6, 0xc0, 0x0, 0x6}]}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0) 20.010388311s ago: executing program 1 (id=506): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x5}}, {{0xa, 0x2, 0x4, @mcast1}}}, 0x108) (async) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e28, 0xfffffffd, @mcast1={0xff, 0x7}, 0xfe}}, {{0xa, 0x4001, 0x0, @mcast1, 0x2}}}, 0x108) close_range(r3, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef66bafc0cb000ee0fde460b0f0130670f01c28fe868cfe20a", 0x3b}], 0x1, 0x11, 0x0, 0x0) (async) syz_open_dev$mtd(&(0x7f0000000080), 0xfffffffffffffffd, 0x40000) (async) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 19.790688927s ago: executing program 1 (id=509): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000002c0), 0x510001, 0x0) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000300)={@msf={0x8, 0x10, 0x5}, 0x0, 0x4}) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext4\x00', 0x200000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r1, &(0x7f0000000640)=[{&(0x7f0000000140)='1', 0x1}, {&(0x7f0000002000)="c2", 0x1}], 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/file0\x00', 0x40, 0x8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4(r3, 0x0, 0x0, 0x80800) syz_emit_vhci(&(0x7f0000000880)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "b8e21d", 0x1}}}, 0xd) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0xff, 0x41c}}}, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc, 0x2, 0x0, 0x0, 0x40000000}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff6e, 0x0, 0x0, 0x0}, 0x94) getdents64(r2, &(0x7f0000000180)=""/164, 0xa4) 19.720813492s ago: executing program 1 (id=511): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x2}) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffee6, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x75507}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20008010) 16.461913835s ago: executing program 1 (id=528): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000480)=""/14, 0xe}, {&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f00000004c0)=""/4111, 0x100f}, {&(0x7f0000001500)=""/4093, 0xffd}], 0x4) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x109001, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000440)=0x1) 16.396769711s ago: executing program 32 (id=528): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000480)=""/14, 0xe}, {&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f00000004c0)=""/4111, 0x100f}, {&(0x7f0000001500)=""/4093, 0xffd}], 0x4) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x109001, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000440)=0x1) 15.911286457s ago: executing program 0 (id=537): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@dellink={0x44, 0x10, 0xc03, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010101}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000004900)={0x0, 0x0, &(0x7f00000048c0)={&(0x7f0000003600)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x800) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000004) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r7, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) ioctl$KVM_XEN_HVM_CONFIG(r7, 0x4038ae7a, &(0x7f0000000180)={0x82, 0x0, 0x0, 0x0}) sendto$inet(r5, &(0x7f0000000080)="988866c864709f02cf56a575f7390ca73ae2a92d2338b11d975e79510a64999199fd62f829f7b24099e324a0fc6b7be46a632253354cf9c83c26d08b2e7055a3433eefdbdb5070d44c3224a055eba48cc9ce5dff6c35c4dd72231e3381117da7af98e0290701d1748a100823290923118eb60555d3f9ea9803d035407128e26c", 0x80, 0x20004080, &(0x7f0000000140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x3, 0x0}}, 0x10) 15.621673223s ago: executing program 0 (id=538): r0 = socket(0x10, 0x80002, 0x0) clock_getres(0x0, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e50e2abd7000ffffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01020600e000000100000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x40084c0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000200)='btrfs\x00', 0x0, &(0x7f0000000380)='acl') socket(0x10, 0x80002, 0x0) (async) clock_getres(0x0, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e50e2abd7000ffffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01020600e000000100000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x40084c0) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) (async) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000200)='btrfs\x00', 0x0, &(0x7f0000000380)='acl') (async) 15.530910031s ago: executing program 0 (id=539): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0xfff, 0x20403) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYRES32=r2], 0x1c}], 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000300)={0x6, 0x1f, 0x6}) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) utimensat(0xffffffffffffff9c, &(0x7f0000002240)='.\x00', 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) (async, rerun: 64) close_range(r1, r0, 0x2) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x2db, 0x5, 0xb}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0xffffffff, 0x5, 0x40003}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x40, 0x4, 0xc}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x7, 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80000000, 0x800e09a, 0x3}) (async) fcntl$addseals(r1, 0x409, 0x5) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000140027800900010076657468000000000500028008000a00", @ANYRES32=r8, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) (async) socket(0x1, 0x803, 0x0) 15.466072571s ago: executing program 0 (id=540): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="180000005620010028bd7000ffdbdf2507000000", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000800) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000300)={0x10}, 0x10) (async) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r1, &(0x7f0000000600)="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", 0x4d7) (async) write$UHID_INPUT(r1, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x4006]}, 0x8) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) (async) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 15.46568468s ago: executing program 0 (id=542): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x3fe) (async, rerun: 32) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) (rerun: 32) 14.722048795s ago: executing program 0 (id=548): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000480)) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) 14.633533437s ago: executing program 33 (id=548): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000480)) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) 11.840962092s ago: executing program 4 (id=561): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000540)={0x0, 0x0, @pic={0x3, 0x7, 0x81, 0x81, 0x9, 0xf9, 0x40, 0x42, 0x6, 0x81, 0xc, 0x0, 0xf3, 0x4, 0xfc, 0x38}}) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000200)={0x5, 0x1000}) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x2}, &(0x7f0000000100)=0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000013014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000776782ec0500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c000440000000000000000714000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mysys/module/loop/parameters/max_loop\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112240000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r8, 0x80106f53, &(0x7f0000000000)={0x22, &(0x7f0000000140)=[{0x3, '\x00', @data=0x7, 0x40}, {0xa, '\x00', @st={0x4, [{0x3, @svalue=0x9}, {0x1, @uvalue=0x2}, {0x2, @svalue=0xa}, {0x0, @svalue=0xee}]}, 0x7b3}, {0x1a, '\x00', @buffer={"6ec190283a8cc61aa9c9e87940989ce36c189075f1513b6faea3f510efe03f93", 0x20}, 0x40}, {0x1e, '\x00', @data=0x4d55, 0x745}, {0x38, '\x00', @st={0x4, [{0x2, @uvalue=0xfff}, {0x0, @uvalue=0x1ff}, {0x3, @uvalue=0xfffffffffffffffb}, {0x0, @svalue=0x47b6cc5d}]}, 0x9}, {0x2b, '\x00', @data=0x4, 0xbd}, {0x32, '\x00', @buffer={"36a4a4255f9fb936e2c4f2de7e5e3ad7880ad29ce682ab12e13758f94ea4656b", 0x20}, 0x3034}, {0x2e, '\x00', @data=0x9, 0x9}, {0x3a, '\x00', @data=0x8, 0x10000}]}) read(r7, &(0x7f0000000500), 0x64) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000440)=r7, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x2e8, 0xa, 0xd0e0000, 0x2e8, 0x100, 0x3c0, 0x1d8, 0x1d8, 0x3c0, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2c8, 0x2e8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x35, 0x0, [{0xe, 0x5}, {0x7, 0xae, 0xe, 0x3}, {0x5, 0x6, 0x1, 0x8}, {0x50, 0xc0, 0x0, 0x9}, {0x8, 0x7, 0x3, 0x91}, {0xd, 0x10, 0x21, 0x6}, {0x8001, 0x1, 0xff, 0x401}, {0x0, 0x8d, 0x9, 0x9fc}, {0xfffe, 0x0, 0xc1, 0xfffffff7}, {0x10, 0x59, 0x6, 0x2}, {0x400, 0x7, 0x6a, 0x2}, {0x8, 0xb6, 0xf, 0x6}, {0x6, 0x9, 0x4, 0xc}, {0x7, 0x80, 0x1, 0x3}, {0x1ff, 0xe, 0x5}, {0x100, 0x0, 0x4}, {0x1, 0x3, 0x6e, 0xc}, {0x2ff, 0x8, 0x80, 0x3}, {0xcc, 0x3, 0x10, 0x80}, {0x401, 0xfe, 0xfb, 0xfffff386}, {0x5, 0x9, 0x4, 0x8001}, {0x584, 0xfc, 0x6, 0x3}, {0x4695, 0xa, 0xc5, 0x3}, {0x2, 0x8, 0x80, 0x4}, {0x7, 0x23, 0x6, 0x400}, {0x2, 0x7, 0x0, 0xfffffffd}, {0x3, 0xf, 0x0, 0x8b}, {0xa36c, 0x9, 0x8, 0x2}, {0x5, 0x56, 0x0, 0x8}, {0x1, 0x4, 0x10, 0xbe6}, {0x3, 0xea, 0x1c, 0x6}, {0xf8, 0x4, 0x0, 0x200}, {0x2, 0x40, 0x5, 0xac6}, {0x1, 0x4, 0x4, 0x80000001}, {0x7, 0x2, 0x0, 0x6ffb}, {0xa, 0xf0, 0x7a, 0xc}, {0x5, 0x2, 0x70, 0x7f}, {0x8, 0x5, 0x4, 0x3}, {0x1, 0x2c, 0x9, 0x1}, {0x3ff, 0x97, 0x2, 0x9}, {0xff, 0x2, 0x2, 0x4}, {0x9, 0x4, 0xf, 0xf5}, {0x9, 0x8, 0x1, 0x9}, {0xf, 0x6, 0x7f, 0x80000000}, {0x1ff, 0x1, 0x8, 0x3}, {0x5, 0x4, 0x0, 0x5}, {0x6, 0x4, 0x3, 0x400}, {0x8, 0x2, 0x10, 0x1}, {0xfff9, 0x9, 0x5, 0x80}, {0xfffc, 0x0, 0x6, 0x7}, {0xa4, 0x7, 0x1, 0x10}, {0x8, 0xd, 0x1, 0xfffff40b}, {0xfff, 0x46, 0xf5, 0x8}, {0xd4d4, 0x1, 0x1, 0x8}, {0xfff8, 0x4, 0x9, 0x5}, {0x3, 0x8, 0x1, 0x7}, {0x2, 0x4, 0xd5, 0xaf0}, {0x0, 0x3, 0x3, 0x5}, {0x8, 0x4, 0xb, 0x200}, {0x9b5, 0x4, 0x8, 0x1000}, {0x8001, 0x7, 0x4, 0x3}, {0x1, 0xe, 0xf9, 0xde7}, {0xd, 0x4, 0xe5}, {0x8001, 0x5, 0x80, 0xa4}], {0x2}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'veth1_to_hsr\x00', 'syzkaller0\x00', {}, {0xff}, 0xc, 0x2, 0x1}, 0x3202, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x68f, 0x6, 0x101, '\x00', 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) 11.708833539s ago: executing program 4 (id=562): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r1, &(0x7f00000000c0), 0x0) (async) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f046}) (async) r2 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"]) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYRES16=r0], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) (async) r8 = dup3(r7, r6, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r8, r5, 0x25, 0x9, @val=@uprobe_multi={&(0x7f0000000380)='./file0/file1\x00', &(0x7f0000000440)=[0x3], &(0x7f00000004c0)=[0x2, 0x1, 0x0, 0x3, 0x4], 0x2, 0x1, 0x1, 0xffffffffffffffff}}, 0x40) (async) writev(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)="1c5a6754bbf09684b5d2c358a0501b53408471e466e5634f1b35d4e027ee364eeef61186d91fe81e83fd03391f2f3315dd9618fe7b8330960d089506abc80d7446baf778f22005627d232540cbaa7fca3edc0b105e917b9161bf65c78d0b673eccde893ff6139b36535f7e4c3a4066c36a6411d8041fc6dabb46367fc373fedfdd95e2e189ee2443054a56de7eb3758e7cc302efca5afb9680b54942347822f1b9263026ac0c2e", 0xfffffe33}, {&(0x7f0000000180)="a438f89151f6c9daec85f6dbe1e5a9f89cb985d67399", 0x16}, {&(0x7f00000001c0)="8abc884b5efaa61e85d3af60d82c4afd982768761f7b91663d11c24a1404dfccd3574017943cc5f18de1ad6febc7a4b82aa24ed071aa1898356822df459ffe2a60dc35f165801f292454115540e8a7302b1366e8880aa3bdbee0cda750d568666b7715317a25e2db1e4aace78bdd87e9cd15b60f0faf30d8a639c333dc00a4774be39357f2d5668a190c14726a7364c17a75d4fef06e2fc5000000000000", 0x9e}], 0x3) (async) r9 = fsmount(r0, 0x0, 0x0) fchdir(r9) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) 11.630338072s ago: executing program 4 (id=565): socket$kcm(0x10, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) (async) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000640)=[@set_irq_handler={0xc8, 0x20, {0x9e}}, @nested_load_syzos={0x136, 0x188, {0x3, 0x3, [@nested_amd_inject_event={0x180, 0x38, {0x0, 0x1a, 0x1, 0x3, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x56, 0x1}}, @wr_crn={0x67, 0x20, {0x8, 0x1}}, @wrmsr={0x65, 0x20, {0xad9, 0x7}}, @nested_load_syzos={0x136, 0x50, {0x0, 0x4, [@wr_drn={0x68, 0x20, {0x2, 0x32cb}}, @nested_amd_clgi={0x17f, 0x10}]}}, @nested_amd_invlpga={0x17d, 0x20, {0x2000, 0xd261}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @wr_crn={0x67, 0x20, {0x4, 0x6}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_clgi={0x17f, 0x10}]}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0x92d0, 0xb, 0x8}}, @nested_load_code={0x12e, 0x6e, {0x2, "0f005f00c7442400ed000000c74424024ffa0000ff1c240f019c99abe9959566bad004b80d000000ef66b874008ed866baf80cb8b461458aef66bafc0cb8c8068b02ef450f01c2a9000000804d0fc76fbe65410f01d1"}}, @wrmsr={0x65, 0x20, {0xcd, 0x800}}, @code={0xa, 0x66, {"c744240007000000c744240218640000c7442406000000000f011c24b9800000c00f3235000800000f30673e410f009a00300000650f070f01360fc7b49f0000c0feb9570200000f32420f205c420f01cf0f68630d"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host_nat=0x6c02, 0x1, 0x2}}, @nested_load_syzos={0x136, 0x20, {0x2, 0x7}}, @nested_create_vm={0x12d, 0x18, 0x2}, @wrmsr={0x65, 0x20, {0x976, 0x1}}], 0x39c}) (async) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) io_uring_enter(r3, 0x8ae, 0x6933, 0xf, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) (async) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0) unshare(0x60000600) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="07002f600f5998feac2b7c950467605c2d57cfa2d3fc9cb7a4e47a85d3e3f519f89a64d509d6d6cb10adb6400260ea826da7cc786fd037f00a2e9193383f0287d23c5ac6a4"], 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x5, 0x3, 0x5, 0x72dc, 0x3, 0x1, {0x0, 0x9, 0x7, 0x1, 0x89, 0xd615, 0x1, 0x4, 0x80000001, 0x8000, 0x2, 0x0, 0x0, 0x3, 0x1}}, {0x0, 0x13}}}, 0xa0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001000010028bd03000000df2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40881}, 0x4000000) (async) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) r7 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}], 0x1, 0x400c404) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f00000055c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x4, 0x1, 0x31237648, 0x1, 0x0, 0x1}]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.530207796s ago: executing program 4 (id=566): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) stat(&(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)) (async) write(r0, &(0x7f00000001c0)='1', 0x1) 11.251423853s ago: executing program 4 (id=569): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x1, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x1d}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f00000001c0)=0xc, 0x4) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) unlink(&(0x7f0000000000)='./sys\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206010200000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a0000000c0007a008001140000000010c000300686173683a697000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$nl_route_sched_retired(r5, &(0x7f0000005400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000053c0)={&(0x7f0000005440)=@newtfilter={0x422c, 0x2c, 0x300, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xb}, {0xc, 0xfff1}, {0xe, 0xffff}}, [@f_rsvp={{0x9}, {0x2f50, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @empty}, @TCA_RSVP_POLICE={0xb8, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3ff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8cdc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7ff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x4, 0x8, 0xffffffff, 0xe1, {0xdd, 0x0, 0xc92, 0xcd4, 0x8, 0x7}, {0x2, 0x2, 0x5e9, 0x6, 0xc1, 0x7}, 0x8000, 0x4, 0x2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffff3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x7, 0x2, 0x87d, 0x4d407097, {0x8, 0x0, 0x100, 0xbddd, 0x10, 0x5a}, {0x5, 0x0, 0x1, 0x4, 0x8}, 0x5, 0x80000001, 0xfffffff8}}]}, @TCA_RSVP_SRC={0x8, 0x3, @multicast2}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xdf, 0x5, 0xfffffffe}, {0x8, 0xb, 0x6}, 0xff, 0x9, 0x2}}, @TCA_RSVP_DST={0x8, 0x2, @loopback}, @TCA_RSVP_SRC={0x8, 0x3, @multicast2}, @TCA_RSVP_POLICE={0x1c38, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x100, 0x40, 0x1, 0xb8f, 0xffff, 0x7, 0x6, 0x7f, 0x0, 0x3, 0x6, 0x5, 0x20000, 0x40, 0x9, 0x407, 0xffffc686, 0x0, 0x7, 0x2, 0xe, 0x6, 0x4, 0x40, 0xfffffff8, 0x2, 0xe11, 0x2, 0x7, 0x8, 0x4, 0x97ee, 0xffff7fff, 0xadde, 0xb, 0x8, 0x8000, 0x800, 0x4, 0x7, 0x5, 0x2, 0x9, 0x7, 0x7f, 0x4, 0x449, 0x81, 0x6, 0x3, 0x9, 0x9, 0x7, 0x2, 0x2, 0xf, 0x6, 0x81, 0x6, 0x4a4, 0x7, 0xeab0, 0xd, 0x4, 0x401, 0x8, 0x10000, 0x7ff, 0x62fd, 0x1, 0x0, 0x5, 0x3, 0xfff, 0xe2, 0x666b, 0x3, 0x2, 0x8, 0x10, 0x7, 0x6, 0x3, 0x3, 0xffff, 0x2, 0x8, 0xb, 0x5, 0x1, 0x254f4d47, 0x0, 0x3, 0xe332, 0xe05, 0x9, 0x328, 0xd, 0xff, 0xfffff800, 0x9, 0x1, 0x4, 0xd, 0x4a97, 0x0, 0x5, 0x81, 0x2, 0x6, 0xe5e, 0x5d, 0x3ff, 0x3, 0x6, 0x10000, 0x1, 0x2, 0x6, 0x4, 0xfffffffa, 0x51, 0x8, 0x4, 0x8, 0xa, 0xfffffff8, 0x1, 0x5, 0x6, 0xd, 0x6, 0xe, 0x2, 0x7, 0x8001, 0x5, 0x59a, 0x0, 0x3ff, 0x0, 0x59, 0xc6d, 0x1, 0x3, 0x7ff, 0x80000001, 0x1, 0x3, 0x2, 0xb2, 0x9, 0xff, 0x0, 0x3d51, 0x9, 0x44, 0x0, 0x3, 0x3, 0x8, 0x1, 0x5, 0x100, 0xc, 0x9, 0x9, 0xc, 0x9, 0x3, 0x8, 0x40, 0x1ade, 0x1ff, 0x2, 0x10, 0x9, 0x2, 0x80000000, 0xc, 0xfffffffb, 0xfffffff7, 0xb, 0x7, 0xff, 0x0, 0x8, 0x4, 0x438, 0x5, 0x7f, 0x8, 0x6, 0x2, 0x3, 0x1, 0x80, 0x5, 0x3ff, 0x1000100, 0xfffffffa, 0x7, 0x1, 0x3, 0x9, 0x8001, 0x3, 0x7, 0x1, 0x89, 0x8, 0x1, 0x6, 0x6, 0x8, 0x7ff, 0xe2a1638, 0xd6c, 0xdf, 0x1, 0x4, 0x800, 0x52b, 0x6, 0xf1f, 0x2, 0x9, 0xffffffff, 0x9, 0x0, 0x7fff, 0x4, 0x2, 0x80, 0xffffffcf, 0x2, 0x5, 0xd9, 0x80000001, 0x5, 0x1, 0x8, 0x5, 0x9, 0x6, 0x9, 0x9, 0x3, 0x0, 0x2, 0x5, 0x0, 0x8, 0x5, 0xaa, 0x10000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x7, 0x0, 0xffff0000, 0xb, 0x2, 0x6, 0x2, 0x2, 0x1, 0xfff, 0x8, 0x1, 0x4, 0x800, 0xbdb, 0x0, 0x0, 0x2, 0x5, 0x9, 0x1, 0xbc754faa, 0x2, 0xfffffffb, 0x1, 0xff, 0x3, 0x8001, 0x6, 0xee, 0x0, 0xfffffffc, 0x9, 0x3ff, 0x8, 0x6, 0x95, 0xa, 0x5, 0xfffffffe, 0x6, 0x4, 0x6a, 0x5, 0x2de5, 0x8, 0x3, 0x8, 0x0, 0x3, 0x19, 0x8000, 0x7fffffff, 0x4, 0x1, 0x5947, 0x8000, 0xc, 0x6, 0x8, 0x3, 0x7, 0x6598c8b3, 0x9, 0xfffffffc, 0x58d7a5ff, 0x3000000, 0x401, 0x1, 0x3ff, 0x6, 0x3b04, 0x3, 0x10000000, 0x616, 0x8000, 0x4, 0xfb9, 0x52d3, 0x4, 0x7, 0x1, 0xfffffff9, 0x2, 0x1, 0x9, 0x6, 0xffffffff, 0x200, 0x9f60, 0x401, 0xf, 0x7, 0x1, 0x8001, 0xc00000, 0xfffffff9, 0x7, 0x100, 0x2, 0x2, 0x3, 0xe, 0x0, 0xa68, 0x5, 0x7f, 0x7, 0x7, 0x4, 0xc, 0x7fffffff, 0xfffffffe, 0x4, 0x7ff, 0x80, 0xff, 0x800, 0x7f, 0x8000, 0x7, 0x6e, 0x5, 0x4, 0x6, 0x8, 0x800, 0x400, 0xa3, 0x6, 0xf6, 0x5, 0x4, 0x7, 0x6, 0x0, 0x4, 0x2, 0x40, 0x401, 0x3ff, 0x3, 0xaa, 0xc, 0x4, 0x0, 0x1, 0x6, 0x7, 0x200, 0x0, 0x3, 0x3, 0x8001, 0x6, 0x931a, 0x9, 0x40, 0x1086, 0x4, 0x10001, 0xa5d0, 0x2, 0x1000, 0x2, 0x2, 0x4, 0x2, 0x2, 0x6, 0xfffffffb, 0x1, 0x3, 0x2, 0x8000000, 0x1, 0x4, 0x2, 0x8, 0x6, 0x8, 0x6, 0x2, 0x8, 0xffffffff, 0x12dc481c, 0xfffffb8e, 0x8, 0x28a, 0x2, 0xffff, 0x3, 0xfffffffc, 0xce, 0x9, 0x6, 0x4, 0x0, 0x7, 0x1f48, 0xffff, 0x3c, 0x4, 0x4, 0x78c, 0x1, 0x80, 0x7, 0x40, 0xfffffffc, 0x3, 0x2, 0x3e, 0x8, 0x1, 0x81, 0xfffffff7, 0x4000000, 0xbcf9, 0x1, 0xff, 0xc, 0xfffffa50, 0x539, 0x5, 0xfffffffb, 0x8001, 0x2, 0x3ff, 0x6, 0x3ff, 0x8, 0xfffffff9, 0x7, 0x6, 0xffffb063, 0x0, 0x1, 0x7, 0xa, 0x1000, 0x0, 0xcc4, 0x6, 0x2, 0x7, 0xd, 0x100, 0x4, 0x1, 0x0, 0x4, 0x800, 0x4, 0x19]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80f}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x0, 0x5, 0x5, 0x6, 0x0, 0x352, 0x8001, 0x7, 0x8a, 0x8, 0x3, 0x2, 0xb30, 0x4, 0xe452, 0x6a1, 0xfffffffa, 0x89, 0x401, 0x7, 0x6, 0x7, 0x7000000, 0xfffffffd, 0x81, 0x0, 0xc91d, 0x24, 0x0, 0x7, 0x0, 0x1, 0xfffff801, 0x0, 0xffffff99, 0x5, 0x3, 0x401, 0x2, 0x401, 0x0, 0x0, 0x4, 0x9, 0xfffffffa, 0x7deda108, 0x7, 0x1, 0x9, 0x7fffffff, 0x3, 0x80, 0xffffffff, 0x3, 0x6, 0xc9, 0x7fffffff, 0xfffffff9, 0x8001, 0x8, 0x5, 0x8, 0x7, 0x0, 0x9, 0x1f9, 0x9, 0x6, 0x80000001, 0xbdc, 0x5, 0x8, 0x1, 0x401, 0x6, 0x9, 0x6, 0x1, 0x10, 0x6, 0x6, 0x400, 0x40, 0x43b, 0xffffffff, 0x7, 0x4af, 0x7, 0x2, 0x2, 0x4, 0x5, 0x48000000, 0x3, 0x9, 0x3, 0xa, 0x3, 0x5, 0x8, 0x10001, 0x300, 0xb18f, 0x6, 0x0, 0xb5, 0x4, 0xb, 0x8b42, 0x6, 0x7, 0xc, 0x4, 0x2, 0x2, 0xdc41, 0xb, 0x81, 0x5, 0x9, 0x3, 0x1, 0x1, 0x22a, 0x3, 0xd10, 0xffffff50, 0x80000001, 0x9, 0x80000001, 0x8, 0x0, 0x38f8, 0x101, 0x0, 0x5, 0xfffffffe, 0x8, 0x6, 0x6, 0x200, 0xfffffffd, 0x6, 0x72ef3f96, 0x3, 0x9, 0x8, 0x9, 0xbb, 0x1, 0x2, 0x5, 0x5, 0x8, 0x1, 0x6, 0xfffffff8, 0x355, 0xffffff77, 0x7, 0x80000000, 0x2, 0x9, 0x0, 0x26a, 0xfffff488, 0x3, 0xd17e, 0x0, 0x87, 0x0, 0x40, 0x7, 0x8, 0x8, 0x67a87863, 0x1, 0xffff, 0x4, 0x8, 0x101, 0x4, 0x8, 0x680728af, 0x6, 0x0, 0x200, 0x1, 0x6, 0x401, 0x1, 0xfffffffb, 0x4, 0x5, 0x6, 0x4, 0x7, 0xdb6, 0x6, 0xb170, 0x8, 0x10000, 0x4, 0x5, 0xfa, 0xffffff41, 0x10000, 0x8001, 0x1000, 0x1000, 0x9, 0x4, 0xfff, 0xa, 0xfffffc00, 0x1ff, 0x566, 0x0, 0x2, 0x0, 0x0, 0x7, 0x7, 0x400, 0x3, 0x95aa, 0xfffffff8, 0x9, 0x7, 0x7fffffff, 0x3, 0xfff, 0x7, 0x6, 0x3, 0x6, 0xc5b, 0x80, 0x2, 0x81, 0x100, 0x8, 0x7ffffffb, 0x7, 0x8, 0x8000, 0x6, 0x2, 0x9, 0x8000, 0x37a, 0xffffff06, 0x7, 0x4, 0xf]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xfffff01a, 0x8, 0x3, 0x8c, 0x280000, 0x5, 0x1, 0x7, 0xfffffa20, 0x7, 0x5, 0xc31, 0x7, 0x8, 0x7fff, 0xfffffeff, 0x9, 0x5, 0x9, 0x200, 0x10001, 0x6ce99db7, 0x401, 0x1fc7, 0x6, 0x9, 0x3, 0x80000000, 0x137, 0x800000, 0x6, 0x3, 0x7, 0x9, 0x9, 0x7, 0x9, 0x6, 0x2, 0x8, 0xf9d, 0xb, 0x1, 0x10000, 0x1, 0x1, 0x7, 0x2, 0x78ab84d4, 0xb1e845d8, 0x7f, 0x3, 0x4d9c, 0x9, 0xee01, 0x2, 0xfffffffe, 0x7, 0x5, 0x1be554d4, 0x0, 0x3, 0x1ff, 0x400, 0x3, 0x1ff, 0x5, 0x2, 0x2, 0x9, 0x101, 0x0, 0x10001, 0x8, 0x6, 0x6, 0x7fff, 0x6, 0x50f, 0x6, 0x3e4, 0x1, 0x800, 0xfffffff9, 0x1ff, 0x1000, 0x33, 0x10001, 0x7, 0x2, 0x6, 0x101, 0x8, 0x6, 0x1ff, 0x4, 0xffffffff, 0x9, 0x0, 0xe, 0x9, 0x3, 0x7, 0x6, 0x444, 0x5, 0xa0d3e06, 0x14a7, 0x9, 0x9, 0x1, 0x6, 0x5, 0xfffffff8, 0x6, 0x4, 0x4, 0x5, 0x3, 0x0, 0xffff, 0x81, 0x5, 0x20000000, 0x292, 0x3, 0x3, 0x10, 0x6, 0x315b, 0x81, 0xba, 0x80000000, 0x2b86, 0x9, 0x274, 0x80, 0x8, 0xffffffff, 0x2, 0x4, 0x7, 0x80000000, 0x9, 0xf, 0x200, 0x8, 0xe4, 0x4, 0x4, 0x7, 0x81, 0xdc, 0x4, 0x5, 0xd21, 0xa9, 0x7, 0x8000, 0xffffffff, 0x0, 0xfff, 0x0, 0x5, 0xeb4, 0x5, 0x7, 0x3, 0x8, 0x1, 0x400, 0xf4, 0x5, 0x7, 0x27b, 0xb, 0x200, 0x78, 0x2, 0x9, 0x7f, 0x7, 0x9, 0x401, 0x2, 0x0, 0x4, 0xffff8000, 0x24f, 0x3, 0x10000, 0xc00, 0xc1, 0x4, 0x5, 0x62, 0x29, 0x8, 0x98cc, 0xe, 0x5, 0x8001, 0x9, 0xfffffffc, 0xab78, 0x3, 0x1, 0x100, 0xfff, 0x400, 0x3, 0x7, 0x2, 0xb1, 0x3, 0x5, 0xda9a, 0x4c, 0x32d8, 0xfffffff8, 0xfffffffc, 0x7, 0x0, 0x0, 0x9, 0x8, 0x200, 0xffffff11, 0x3, 0x0, 0xb4, 0x4be, 0x7, 0x6, 0xb, 0x3, 0x2, 0x5, 0x4a5, 0x10000, 0x3ff, 0xf, 0x3, 0xce, 0x7ff, 0x400, 0xe, 0xb7, 0x3, 0x0, 0x80000000, 0x400, 0x10001, 0x7503, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x10, 0x8, 0x3, 0x4b5f9dd9, 0x5, 0xe, 0x0, 0x8, 0x3, 0x2, 0x544, 0x9, 0x9, 0x7, 0x9, 0x659, 0x5, 0x5, 0xfffffff8, 0x5, 0x8, 0x6, 0x0, 0x5, 0x10000, 0xe, 0x773d, 0xc, 0x9, 0x4, 0x100, 0x1, 0x7f, 0x2, 0xfffffff4, 0x101, 0x3, 0x80000001, 0x703, 0x5, 0x9e, 0x9, 0xffff, 0x1, 0x6, 0x7, 0x2, 0x1ff, 0x9, 0xfffffff9, 0x5, 0x4, 0x0, 0x7fffffff, 0x7f, 0xffff, 0x7, 0x6, 0x9, 0x2, 0x0, 0x0, 0x5f87b5f2, 0x80000000, 0x40, 0x958e, 0x40, 0x2, 0x4, 0x0, 0x7ff, 0x9, 0x3ff, 0x8001, 0x7, 0x8, 0x8, 0xfffffff7, 0x1000, 0xffffff80, 0xc8a7, 0x4, 0xfffffffe, 0x6, 0x2, 0x8000, 0x6, 0x3, 0x4, 0x7, 0x4, 0xda9, 0x3, 0xf, 0x5, 0x2, 0x3e3, 0x5414, 0xf5, 0x7, 0x8000, 0x8, 0x0, 0xb, 0x1, 0x322, 0x4, 0xfffffffb, 0x9, 0x7ff, 0x3, 0x7, 0x2, 0x4, 0x0, 0x7a4, 0x7aa, 0x1, 0x5, 0x247, 0xffff, 0x6, 0x3, 0xfffffff9, 0x6, 0x0, 0x7f, 0xcdf0, 0x3, 0x3, 0x5, 0xfffffff6, 0x6, 0xa, 0x7ac, 0x9, 0x7ff, 0x111, 0x7fff, 0x0, 0xb, 0x620, 0x5, 0xc0000, 0x7, 0x2, 0x5, 0x81, 0x0, 0xff, 0x7fffffff, 0xfff, 0xfff, 0x0, 0x4, 0xb, 0x5, 0xffffffff, 0x3, 0x100, 0x400, 0x40, 0x2f2c, 0x3, 0xd, 0xf, 0x4, 0x91f, 0x2, 0x200000, 0x8001, 0x193a, 0x7f, 0x3, 0x3, 0x3, 0xa, 0x6, 0x10, 0x2, 0x26, 0x7, 0xbd16, 0x6a1, 0x0, 0xf354, 0xffffffff, 0x2, 0x5d, 0x6, 0x41, 0x1, 0x9, 0x0, 0x2, 0x0, 0x6, 0x4b6, 0x4, 0x1000, 0x4, 0x6, 0xfff, 0x1, 0xf, 0x40, 0x3, 0x6, 0x0, 0x187, 0x1219da31, 0x3ff, 0x7, 0x8, 0xdf54, 0x3, 0x10, 0xff, 0x7, 0x7, 0x3e, 0x9, 0x2a2, 0x3ff, 0x4, 0x4, 0x5, 0x9, 0xff, 0x3, 0x4, 0xe9, 0x1, 0x5, 0x6, 0x1, 0x8, 0x8, 0x1, 0x7, 0x81, 0x7, 0x6, 0x81, 0xfffff884, 0x6, 0x6, 0x6, 0x8, 0xc, 0x1, 0x2c3a, 0xea, 0x0, 0x6, 0x8001]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x3000000, 0x8, 0x55, 0x20000000, 0x7, 0x2, 0x0, 0x9, 0x0, 0x4, 0xffff, 0x9, 0x1ff, 0x96, 0x8, 0x7b4, 0x6, 0x0, 0x4, 0xf7a6, 0x7, 0x10000, 0x2, 0x200, 0xffffffb2, 0x7, 0x1ff, 0x6, 0x400, 0x3, 0xfffffffe, 0x1, 0x7, 0x7ff, 0xcb, 0xfffffffd, 0x0, 0x41, 0xffffffff, 0x5, 0x5a, 0x400, 0xfffffc01, 0x1, 0x0, 0x6, 0x80, 0x6, 0x5, 0x0, 0x4, 0xffff881e, 0x4, 0x2, 0x9, 0x7c5, 0x9, 0xde, 0xe, 0x81, 0x7f27, 0x1, 0x3040, 0x3, 0x5, 0x0, 0x3, 0x7fff, 0x7, 0x41, 0xe673, 0x7fff, 0x2b, 0x8, 0x5, 0xf, 0x1, 0x1000, 0x1, 0x6b, 0x7, 0x7, 0x1c6, 0x93, 0x7, 0xfffffff7, 0x10, 0x6, 0x8, 0x8001, 0x1, 0x2, 0x9, 0x7fffffff, 0x6, 0x5, 0x0, 0x0, 0x588a1154, 0x1, 0x82, 0x7, 0x3, 0x8, 0x4, 0x7, 0x4, 0x0, 0x9, 0x1, 0x6, 0x1, 0xe7, 0x8, 0xc07, 0x400000, 0x400000, 0x1ff, 0x100, 0x2, 0x7fff, 0x2, 0x6, 0x5, 0x7, 0x0, 0x6, 0x42e3, 0x3ff, 0x71, 0xff, 0x5, 0xf, 0xcc6, 0xfffffffc, 0xf4, 0x8, 0x400, 0x3, 0xff, 0x4, 0x800, 0x69, 0x1, 0x6, 0x8, 0x40000, 0x5, 0x49, 0x63, 0x3, 0x3, 0x3, 0x0, 0x3ae6, 0x9, 0x3, 0x40, 0x0, 0x9, 0x80000000, 0x0, 0x80000000, 0x4, 0x1, 0x200, 0x80000001, 0xdb, 0x0, 0xd, 0x200, 0x99a, 0xc, 0x1ff, 0xd, 0x5, 0x2, 0x1, 0x5, 0x7, 0xfff, 0x7ff, 0x9, 0x80000000, 0x5, 0x3, 0x10001, 0xfffffe00, 0x3, 0x6, 0x85, 0x0, 0xbd6, 0x7, 0x7, 0x8829, 0x7fff, 0x8, 0xc, 0x5, 0x7, 0x1f78, 0xfffff001, 0x0, 0x8, 0x7, 0x1, 0xa284, 0x3, 0x5, 0x8, 0x9, 0x2, 0x5, 0x3, 0xb, 0x80, 0x2888, 0x4, 0x5, 0xdc5d, 0x7, 0x2, 0x0, 0x8, 0x4, 0xffff, 0x5, 0xe, 0x7, 0x401, 0x8000, 0x200, 0x7, 0x8, 0x10, 0x5, 0x6, 0x7, 0x10, 0x6, 0x6, 0x8, 0x356, 0xbe, 0x4, 0x8, 0x2, 0x9, 0x5, 0x6, 0x3800, 0x7f, 0x2, 0x800]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x56, 0x3, 0x81, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x1ff, 0x8, 0x7fff, 0x8, 0x0, 0x0, 0x9, 0x2, 0x5, 0x1, 0x1fd, 0x1, 0x2, 0x20, 0x3, 0x10001, 0x7, 0x9, 0xffff000, 0x0, 0x2, 0x48000000, 0x8, 0x20000006, 0x2, 0x9d, 0x5, 0x3, 0x5, 0x5, 0x1, 0x80000001, 0xfff, 0x0, 0x3, 0x54, 0xad, 0x3, 0x1800000, 0x6b4, 0x7, 0xa, 0x7fff, 0x10000, 0xb, 0x8, 0x401, 0x20, 0xffffffff, 0x8, 0xb6d, 0x8001, 0x3, 0x4, 0x1, 0x0, 0x7, 0x9, 0x0, 0xffffac28, 0xfffffff9, 0x9, 0x2, 0xe, 0xcc, 0x6, 0xfffffffc, 0x1, 0x1, 0xa0, 0x3, 0x9, 0x9, 0x200, 0x6, 0x1dc, 0x2ef, 0xfffffffb, 0x6, 0x100, 0x2, 0x2, 0x7, 0x2, 0x81, 0x5, 0x9, 0x9, 0x4, 0x0, 0x1, 0x101, 0x7, 0xfffffff7, 0x1000, 0x2, 0x9, 0x4, 0x8001, 0x0, 0xa, 0x5, 0x4, 0x0, 0x74c, 0x6, 0x3, 0x800, 0x3062, 0x8, 0x800, 0x4, 0x0, 0x1, 0x5749, 0x9, 0x5, 0x1, 0x8, 0x4, 0x1, 0x4, 0x3, 0xffffffff, 0x35, 0x100, 0x5, 0x1, 0x0, 0xe, 0xd, 0x4, 0x8, 0x4, 0x8, 0x1, 0x1000, 0x0, 0x1, 0x5, 0x1, 0x8, 0xffffffa8, 0x8, 0x7ff, 0xfffffbff, 0x5, 0x8, 0xa, 0xe530, 0x8, 0x400, 0x2, 0x1, 0x0, 0x8, 0x80000001, 0x6, 0x3, 0x8, 0x80000001, 0x2, 0x10001, 0x3b31, 0x325, 0x9, 0x7, 0x0, 0x800, 0x8, 0x9, 0x84, 0x7, 0x8, 0x0, 0xfff, 0x5, 0xff, 0x3, 0x76, 0x3, 0x429, 0x3, 0x7, 0x80, 0x1, 0x8, 0x40, 0x3, 0x101, 0x8a46, 0xffffffff, 0x8, 0x0, 0x673b, 0x4, 0x7, 0x1f7, 0x6, 0x1, 0x3, 0x8522, 0x1ff, 0x1b1, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0xf416, 0x200, 0x4, 0x8, 0xfffffff8, 0x9, 0x401, 0x3, 0x0, 0x8001, 0xf, 0x6, 0x8, 0x0, 0x26, 0xc, 0x9, 0x8, 0x8, 0xfffffffb, 0x2, 0x6, 0xa, 0x80000001, 0x9, 0x2, 0x6, 0xf, 0x1, 0x4831, 0x5, 0x81, 0x8, 0x5, 0x1, 0x55, 0x79]}]}, @TCA_RSVP_ACT={0x1214, 0x6, [@m_mpls={0x154, 0x4, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8035}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x4, 0xffffffffffffffff, 0x1, 0x1ff00}, 0x1}}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_LABEL={0x8, 0x5, 0x3cf2e}, @TCA_MPLS_LABEL={0x8, 0x5, 0x240ab}]}, {0xec, 0x6, "9dbe274567ea0e37909b1b326de3c46e7fb7d9e3ea587aa0f9396be717b61dbce2147e69309576a1181b67b21c7c96a3a17f3db4ade1dd11e55106677cda00689bf61a0fe01dbed422ba770b62fdeb191fbafb4f5c7a2e28ac2c6231748ae63c65506622a85b46eb77f1c90534b11fb2edb9b036a349e1eb651dae85059162438cb6d682367f984999a4d34da406844a72538c236e9dd6c44a68316c531205706de5f11f1fc89c86c1aa7a891eee2f71ecd03b8511b9d4766ae7dd7e75e6afc302c827530efc27f6aa54c96976d594770c6097257b55a4cd05a09e3112260d7f1a8f21ad494f6aae"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_vlan={0x10bc, 0xc, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcca}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x800, 0xea95, 0x5, 0x2, 0xb}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x100, 0x8, 0x4d7c, 0x6}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa81}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x6e2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0xd2, 0x2, 0x8}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8d5}]}, {0x1004, 0x6, "1b6dd743de173f2525b4371180db10716129bec675434157e026ca79e107698ccd1021bfec7d99a8e1d3f0ed2b717ddb60567d85be6390511f0a1ef8bd3db94367725de3b10d00233b82753a0df7a37298a66b30118a8c1e0a5fbba2b241d00ae04b4091635095cd94405f8d4c9ccf2ab280156d5c556fb97a55f3a8ecd622ac06f9772b0e55f4723422523ed326ec92fcad7cb9fb86b78d2553b6f54ce345616d032eea60126617443234467637f77ac223ae0d47edf73fe19d2fbe4bb7e6af85acafa9741c9d7d27eb5114b6814c61bab25b7c19519483d6978a26040a77b36304a885320889362d6f7c6ffd96f059dab331c25fe0b61749812e260c6706ac2cb507d169deb8ecf0984e88daed2f91a63b8c9fe064d8ea9fafd32640f2c7e1ace73b789becad28345f9cb128a40932b4211f1ee7e328ee714b49c682a37dde7386d2d3298b6831ef511d44063c58496515bcac4d602c52af0c60c3bafedfa8741eeacb9b4c70f4eab675abdb3edcb73bb3b5ea0883422a64b7827113077b82c1a5b05dfbcb584c496435b0510721cb1d2fc4ace6db23594ead05c35ac664acb64f0aa223e9a7605d786ea7a2d4abc4883fe6804cc522c1d02b2be879e2c333284571ccec654d19c6a7c4986140e4fc3c584064a4aee5d8b8afa1bb1f330090adde37401a8c0e351d4f4dcacae63ac6336c88a805f84554ef99e54bca813e0426c93d4a98e44b48e40ae1ccee01f163ff5bfbfbc2baa371c87a67936fec40c044c70ef2bc71716a4014932baf3aa496e6e838589cb46b979f11faef15cba73b2df7e7b63b5a585c7891d2665adb430f77a719eb41ad4a942c65279a07b2f173b73c589ac48d855107e61de19ecb7041d233e45f0fdca4501bb53056b245cbaac85c73a267a12b23fe55a5aee290e2dbd93f2a6ec08c1c7856675cf2ee0b4a893e7a1276bae7ff5fdcc3e712bbfe39fd52227f1c2cb008b1c0181a20e972de8c10c9d049d1e293b7022fb87885480d76b33eb2cd215b1fc86fba50b16e83edeaf6b4834eb998211afb0aed75e10cc6fd3d299733c6d2193488d44599ad0f47a8ca6156e9ba6b108a8623df5c82c1fb0028d5d684388f242ce514c92c83d4b1770fae046f175f38ca5c198f1d15bc4dfb739f44274451f54801cb3a973627ed079a8e6d6b6026eb99071b80f786062481ef5eba4797f271a2dda6b7dfcd618770c57e7982c9f9993b2c7bed0187374398ae43dc38ff9d782501db0d5ed366ac1d280dac7f4cbd04d8afb76759fbbb777fcbe77b5a86908f9d6f471b2751606e5661ac1354f929be0bc973ac632f4655af9efb2760d6e639ae6b3d86a2119ba6ae1b3cee1a699da5f36835c3f65fc52a1a3fc6b3d8cc130cf86e84a0cb7f00cbce1b649bad987aa8692ca46aa1b8904f0a1aba616a2addf26fc701ce483c46b87d4c48ccbb1c6e3276acf77be86e59d4d0e7b0e2a3afdd2ce0b5b20b583f46f4244599a1c3ea85a9ead4aaac2a6d68d1edcf4f12a81dfc38f07afed4ae51164cfad9aadf5fb3538712984e96047e71ed217323377364a57adb32ed664b79c40b4a4b2ca9522be23a56acbe72a5e0bfc487cbc0793b3d6c6a61b6940e5cedc7f78860bc3699aa7107b9399407bc9977fc930660654934b855a4eaaaa77c24a2f7a477b39eb6b4dfec072e42ae75029570e6fd7a97540143bdea71f00db41521b90cecf696ecee5c384195891e256d82dc78e1ff9cfdf70deec0a8988c753b2a70f276b2691b7af7360a4d1333835c62dba50e45d25b39b5f2fed1889658ad03198d852d301b51293ccf32af14894675430a9fcc65f96b2520f28ec618655a4de5e49ab8fab38543942e106d2a91a14cbca862f867c31f0a4d18a4245b1bad5a53c7a2529ecb413e1633fa6774b6ba18138a2471dea631cd870fe7dde84414c619b883ca0df1de742f01fe1149e90d74c5331f22b1e2e24f0f206a75ebf67a9136d435d02f919b7637c77b45b224193bc36a27a4e47aeb9fb90985742c3de3867e972273ccc56f20515cbf6ba12d834824e60332fa36a92681c9aee6217cd68a05356476fd614d9a7fea655ef295eb59b96750c82f968967813a1da2e7f28b1a9f04868e7fe9bafbe69e770ff18731b3aa3bdaf10defab0995a652683b84e4cbb83d512199cb84f7c0bc727eecc69f02b2b788ad8e07028bd8a70db8512524ed235e468de7cf961018882852bd772b856725ab4d91c6c6923b03b3b139a9916d1bd70cfda5003dc7737abc0fc514abfc656d8103bcc9a834adde35c8afb0fc729560d3f12cfb156344330763c5579de8970168656ebccf0a55e5b30a6a883001990bcdc1e59c688b39e3ca179f585e4c7f052347794d8dd366b2c550f4043a65359c15070498ce72b251581b79abaed1a8f2ba59e6306beafb834926b61bf28e927013ac852519e47c2d87208c023b9b11d1f6deb23bceb8fc357e74bbe05de3e119248762da079121bbce245f806987ada565ecd7b4a20fa0d0481e8c152a295822ee78a8c2ce9711c4e800de3e1a54b1b5b7e9769a0f42e231ad803202e7580e9fae1f997d633bcd6d302bddbea70166055ee38bdedd84d1c021b4c8f9a19b78ded814690bbefd9c8816e635950b6c13291cde59dfb530c6440353677217c58aea9bb21f0ef2e503e08d4952f6263f7d352c39ea98203556d2fa1fc820a483cc31ba6319f3ff63396553dd9b0cd5ecaafb03348405a7b5a3de0826324cb3b1132158c213ba8ba40761193a07ae1c4df05a0df4ae356555829a2f415f8d71c8892bbdc84bc5a59bebfa959310c38fb7c1b292c58e67752904e7a373170793726f47a225704db1067f777b3099d41b204e09be08014d7ac09aa62ffb614207e81ecf1931b247d4f36b603cea4c0f5d4f105b54e8af52e85061bfaa097db5c9208a162cb54ac3358e2c48909f151e5ba0c05e68deb522e5e575ea10181d68d84705ec93ddcc45dac32248d0123cf9ac4bd652d0e504141553a3eff1526b1960c4aa654bb6aaddd775ed39c3ef190675ca7c12982ab92199cb8c1198df6e77e34a9ec4c2140880a838be7f25b796f3a60ba8787e4b29e0853b66ec168c872c7af0c4b7f8a934c2cc1a3060edce3ade49181f9525148bbcef39823c2ac9ea0321b1aec44b3aefc399a98889fdf498fc7508c9f2912b841acffb819e04001c40c529c28e747862f6f3af0dcffe43cb76531377938e1b73fe2118b845c86f34d33a51bc6411c2a1cfc02d12f3c1a9a70f14b0dbd92800621d31d077b586f2053e9df0bf2408da0ec836657ee8e0370bb951dbf180f5def0197b31c3abbd4b8073023dbae5e5cab8bcb306a0440e6f9987f086ec6ad86b916e557a946a675d286722046dc4cb79a7d2ac27188bf0d090856e1279614ec150b920baa79ab9f5f1005f83692b3231a71c5d6639bd3c769d1678494ffca74ef2e60479f9df34edb0388e1eea808ce757e7de22c37dd34b2293998d19e1965189e9f3925f33b4554052a4d303bb4744237ea1f31910857dc011439ee6dbfe35d20ff9f07c82a9c6153c7f42398355aa1f847e0961d47b9f0df12d6f24c6c3f87d09ac978d15f531907f286735cf55a2d6fea2287ad27fcf1e51212aacca58c0f7062542c74134203618d79ddb99a173c507b91cca0d4897b695f55fa352e9974283f13b4c215bf83e9f2bc02294a6652ca21ffba93fdb561f9b93514778ede718337d4eacd0406fb2a1700e55069b8ab36662c0dad054b36c85b6335fc2ad7acb90220de6c3956d8659a5f828a617998486474c02383acf144da120e2d109e7548c02d25049d65adf765e7d35e3da7393cca927c2c9f170e75c836471ba6590fc6d3b8111b5d03e65825743f36497402f615fe0cc2222ce5bb61c21e69be50066bc4a2e04b2eff4f4a35be263a9ef07b67b47b76fa2393fb9bb4827bab8cf7f8aa4bfe4f6786002cc87e1f1271d70f8bb4a24ddf77ae33010d99747fc5ae4e15ec5382565a59c6ad34002cfeff704478391b0adccc536cc1dab21a1906cc4268d95033abacf0e64d87bbeb8ed17cb4c8e3532fe0a4b64276e92b2a253b1af19634dbbd74171af102959ed4fb5593a8eb7d86090416d79e77fc6514be87e06fea8e436da7661c359f10a767657679cbb4301f5a0f6c7faa126d73497791d8508b200b70bf7bf83ba42168b5b05c89cc2a30893a2175fb86fe2cffd4be80e4f6be2e8473e912a2619d70a60f1293c330d63a994530d018660c3d395d1a54126e8f94f1b077b861814cfbb39864c18cd8d1dc42383eb41298d0b6decabde0af7e1edbbf54096a38fea7748da32a847a0276768c78362c9c482966515fad2bd6ff9e1aedc8410accf2482b4ac9b03449f075fffb95235eb225c7c17dfe9aaed2dd6577c812d30758b4c089cee5b25e617e3ab0c9e640f366e1b5506ebe27fb11049563bccc013007cf5a696f9e772a9538618057636aac040cd624b84991a0e193295dd1b27d1758eb00056642de489f2cb05620101e8bef97aefe7691ac941ffde3f353d42c252bf39405197572b1f83b1abd2fc614ad315a256d667d3d4f2b0b4f521563f7357cf6b1052de5251849902d244a9220fe6dd939f8e3dc0b4d6b7fe9e86b67b16a36f0cba68ccbd77bcdbaa6e419c1d3fb5552c6170db1c5856ff211a1f9674ccc19b08046aea228eb87e8bae97e2b70a88147746fbac4bec0dd89d94a2ead83933072905eda9085f69fd9f5a418fa9a6327a2bda9fd69237e94406c4a92ebd0424df16ffd7f942939af4e4529e34f1cf6ab5440851c4a914f465a1886bf095dc6f393aa337f71200efa9cc937b18c43bf7308dce3edef642578ab14c512bdbdb462b140d651a73911e569dc3468ae7ec0841ab5c22f7f599a9b08061099dbcd0f623d2f6ad9f5732948d8d147133488d27792ecbf3f4eb08db39e6fe66aa3dd2f9e43ffc43261d2c0e81688d55b198aded3e4e31629ec6d1578242e7081f1f83d340cf9d160494285092fb009427ad43114495e3efff45dbfcc48eab254c94dcc3709842eccce0e5f419a329adc2add385317ed801b5d331de246174f6d574e231a2ec81a7edd688201b3c4629f6f8dabf93cafd9abe4e4a8551f7ee75490a2fbf4749e7142523aa047662cae82d19fe2db2eb84ec82d84d8b7be19f47dfca955f542d8ce2836cf0b41ccc0a4fee535ea0f2cfa0b931cad06fe88b7b70ff28700a1bb3427adae23ae25feab105a360c6fda2a72bec4ec561bef5ad1a4574ba5c77544a484a7d1ddbb08d5b8c006dacf33f1178d8e1901e0842dee4c8e0324748091c20c4c5da67955b6152ec749d54fe13c7468a80dd402b46411745a87d820d3b9d3ea4968f8350c32388a5e80a07de7d4d2fb60630cdd5272fd1303dd6eaff034b84e77b462b655ead6f60a7869767f266c76eaabfa0d396a90ec480ec3605a2f042d0b7530657cae0f6a61d18e55ac0c4427abf68a1ac3f1ebac3fda40d9c49cb4e33c958360b2630bf388b9389bf84eba8b9c2317d79aa269082615cfadb9a36b6556e0e1190cb162a7881ffe953a9d69b29392d707ac951b06ff528288665caf8bd49c19134cd0e43cc0a19a65bea36f553180d11cb7fe92394dfc2a785a614a17f242fe26056a2474c4e37442412bc5c9b0cf39212405215c67d954a1c2c79b5afd0f4900db10f715fe0a46d3e7997ea5ea3bb1dbf200dada31750789a2927d5aba5f46e5f82e3055ed08f6a8b4fe7f9619c8b292c0143859142a4dafd014f43dc565d626263"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_RSVP_DST={0x8, 0x2, @multicast2}]}}, @f_rsvp6={{0xa}, {0x1090, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @local}, @TCA_RSVP_POLICE={0xc24, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x8, 0x2, 0x8f0f, 0x200, 0x1000, 0x10001, 0x6, 0x10, 0x2, 0x7, 0x0, 0x7, 0x80000001, 0xfff, 0x0, 0x0, 0x1, 0x1, 0x3, 0x7fffffff, 0x629, 0x4, 0x7, 0x3, 0x2, 0x10000, 0x8, 0x10, 0x1, 0x9, 0x0, 0xd158493, 0x3, 0x80, 0x8f, 0xbee6, 0x0, 0x7, 0x5, 0x7, 0x97, 0x101, 0xffffffff, 0x0, 0xce, 0xb3, 0x6, 0x3, 0x200, 0x5, 0x6, 0x7a, 0x0, 0xb, 0x4, 0x0, 0x1, 0x1, 0x6, 0x2296, 0x7ff, 0xfffffffa, 0x2, 0x1, 0x9, 0x4, 0x7, 0xfffffff8, 0x8594, 0xbade, 0x4, 0x9, 0xb, 0xfffffffe, 0x3, 0xb6, 0xbac, 0x80000000, 0xbc3, 0x400000, 0x2, 0x5, 0x1, 0x8, 0x2, 0x7, 0x4, 0x1c, 0x7fff, 0x6, 0x800, 0x4001, 0x4, 0x9, 0x1, 0x4, 0x9, 0x1, 0x4, 0x400, 0x4, 0x0, 0x1, 0x4, 0x3, 0x0, 0x4000000, 0xf, 0x1, 0x4, 0x3, 0x3, 0xfffffffe, 0x1, 0xd7f, 0x7, 0x6, 0x6, 0x5, 0x5c, 0x401, 0x2, 0x4, 0x400, 0x10, 0x6, 0x20, 0xae, 0x5, 0xf265, 0x5, 0x80, 0x5, 0x400, 0x4, 0xfffffffe, 0xd, 0x2, 0x2, 0x8, 0x219c17d1, 0x751, 0x2, 0x0, 0x0, 0x9, 0x80, 0x7, 0x6, 0x7, 0x7, 0x80, 0x5, 0x850, 0x10001, 0xf73f, 0x1, 0x8, 0x71e3, 0x8, 0x1, 0x3, 0x7, 0x5, 0x1, 0x4, 0x7, 0x89, 0x5, 0xb, 0xa55, 0x9, 0x80, 0x1, 0x7, 0x8, 0x1, 0xca89, 0x100, 0x2, 0xfffffffe, 0xfffffffc, 0x9, 0x100, 0x4, 0x7, 0x3, 0x3, 0xbb, 0x2, 0x6, 0x4137553, 0x7, 0x7, 0x101, 0x0, 0xfffffffb, 0xf2, 0xe, 0xd, 0xb292, 0x1ef771d, 0x3, 0x9e, 0xffffffff, 0xd, 0x8, 0x2, 0x2f, 0x8, 0x5, 0x2, 0xa, 0x2, 0xfffffffb, 0xee, 0x1ff, 0x9, 0x2, 0x329, 0x7, 0x7, 0x0, 0x5, 0x37, 0x0, 0x7, 0x400, 0x6, 0x0, 0x8, 0x34, 0x1c8a, 0x9, 0x3fc, 0x4, 0x8, 0x7, 0x8e2, 0x4, 0xe23f, 0x500c, 0x7, 0x975, 0x5, 0x6, 0x8, 0xd, 0xdbf3, 0x6, 0x6, 0x70000, 0xfffffff8, 0x6, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xff}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x7, 0x7ff, 0x5, 0x6, 0x80000000, 0x8, 0x4, 0xfffffffa, 0x7ff, 0xf, 0x3, 0x6, 0x0, 0x96d, 0x4, 0xd, 0x7, 0x2b3e62db, 0x8, 0x7, 0x1992, 0x5, 0x2, 0x8, 0x5, 0x3114, 0x80, 0x6f1, 0xfffffff9, 0xff, 0x2, 0x16200, 0x2, 0x2, 0x7, 0x9, 0xfffff001, 0xd, 0x2, 0x0, 0x4687, 0x7ff, 0x2, 0x5, 0x100, 0x8, 0x8, 0x6, 0xffff2fef, 0x1, 0x0, 0x8, 0x5, 0x8, 0x8, 0xfffffffc, 0x401, 0x9, 0x81, 0x6, 0xbec, 0x8, 0x10001, 0x1ff, 0xfde5, 0xa98, 0x800, 0x0, 0x6, 0xffffffff, 0xe6f, 0x401, 0x1, 0xfffff0ff, 0xffff, 0x80000001, 0x7fffffff, 0x3, 0x7, 0x0, 0x8, 0xfffffffe, 0x80000001, 0x0, 0x4, 0x8000, 0x3, 0x7, 0x152, 0x9, 0xfffffff7, 0x1, 0x400, 0x7, 0x5, 0x0, 0x5df, 0x101, 0x200, 0x4, 0x2, 0x1ff, 0x3, 0xfffffff7, 0x1, 0x1, 0xff, 0x8, 0xff, 0xb4, 0xfffffff9, 0x8, 0x500, 0x4fc, 0xea, 0x8, 0x9, 0x4, 0x0, 0xf, 0x9, 0x4, 0xc2f, 0x200, 0x81, 0x7fffffff, 0x8, 0x1, 0x1000, 0xfffff001, 0xe000000, 0x1, 0x9475, 0xb683, 0xf, 0x9, 0x80, 0x5, 0x0, 0x4, 0x6, 0x7, 0xff, 0x1, 0x8, 0x7f, 0x80000001, 0x80000000, 0xfffffff8, 0x5, 0x80000000, 0x401, 0x8, 0x7, 0xea5, 0x8, 0x2, 0x2, 0xf63, 0x3, 0xffffffff, 0x5, 0x8, 0xc, 0xfff, 0x4, 0x10, 0x9, 0x101, 0x1, 0x10001, 0x1, 0x525, 0x2, 0xffff, 0x101, 0xa, 0x8, 0x0, 0x0, 0xf225, 0x6, 0x0, 0xffffffff, 0x0, 0x520880be, 0x1, 0x0, 0x2, 0x800, 0x4e, 0x2, 0x1, 0x8, 0x0, 0x2, 0x2757, 0x7fff, 0x8000, 0x200, 0x0, 0x5, 0x9, 0x0, 0xff, 0x15c4, 0x8f, 0x7, 0x10000, 0x40000, 0x81, 0x86d2, 0x9, 0xfffffffd, 0x6, 0x93, 0x5, 0x2, 0x5, 0xe605, 0x7ff, 0x618, 0x5, 0x4, 0x1000, 0xec, 0x2, 0x5, 0xffff, 0x9, 0x9, 0x1, 0xffffffff, 0x1, 0x7, 0x9, 0x3, 0x7, 0x80, 0x6, 0x80, 0x52, 0xf337, 0xd444, 0x1, 0x2, 0x5, 0x5, 0x80000000, 0x2, 0x8, 0xffffffff, 0x2, 0x4, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x6, 0xc10c, 0x10001, 0x25, 0x2, 0x4, 0x5, 0x6, 0x101, 0x2, 0x80000000, 0xff, 0x1, 0x100, 0x6, 0x1, 0x57, 0x0, 0x9, 0x1, 0x8, 0x8, 0xe, 0x0, 0xfa, 0xa, 0x10000000, 0x2bea, 0x7, 0x5, 0x4, 0x6, 0x5, 0x2, 0x3, 0x9, 0xd, 0x1, 0x5, 0x4, 0x359, 0x3, 0x2, 0x9, 0x7fffffff, 0x3, 0x9, 0x4, 0x8, 0x2, 0x5, 0x7fff, 0xc, 0x4, 0x2f, 0x28, 0x39dcf09e, 0x9, 0x10001, 0x3, 0x1000, 0x9, 0xe, 0x6, 0x2, 0x1, 0xcd26, 0x4, 0x8, 0x0, 0x2, 0x8, 0x5bd5, 0xffffffff, 0x6, 0x4, 0xfffffffd, 0x3ff, 0xffff, 0x10000, 0x9, 0x81, 0x5, 0x0, 0x5, 0x6, 0x7, 0x4, 0x80000000, 0x2, 0x6, 0x6, 0xe7b6, 0x0, 0x3, 0x0, 0xfa11, 0x2, 0x0, 0x4, 0x5, 0x65, 0x1, 0xfffffffb, 0x9, 0x3, 0x25, 0x2, 0x3, 0x4, 0x80000000, 0x5, 0x4, 0x8, 0x4, 0x3, 0x4, 0x7, 0xffff, 0x3, 0x40, 0xdc, 0x6, 0x2ec, 0x3, 0x51, 0x80, 0x8, 0x7, 0x6, 0x5, 0xd751, 0x8, 0xfffffffe, 0x80, 0x8, 0x1, 0x8, 0xff, 0x5, 0x16b, 0xe, 0x8, 0x6, 0x40, 0x6, 0x0, 0x0, 0x3, 0x8, 0x2, 0x21, 0xf, 0x2, 0x4f1, 0x6, 0x0, 0x7f, 0x6, 0xfff, 0x7, 0x0, 0xca40, 0x2, 0x3, 0x80, 0x0, 0x7, 0x8, 0x7, 0x0, 0x7d2b, 0x0, 0xffff, 0x3, 0x5, 0x1, 0x7ff, 0x10000, 0x1, 0xbe, 0xff, 0x6, 0x5, 0x9, 0x4, 0x9, 0xade, 0x1, 0x1ff, 0x6, 0xa, 0x7, 0x4, 0x4, 0x80000001, 0x7bc, 0x0, 0x6, 0x1, 0xfff, 0x6, 0x9, 0x5, 0x18000, 0x3, 0x7d, 0x699, 0x7, 0x8, 0x7, 0x9, 0x5, 0x100, 0x6, 0x2, 0x401, 0x7fffffff, 0xbdd, 0xe9c0, 0xefac, 0x2, 0x0, 0x6, 0x6, 0x3ff, 0x1, 0xa, 0x4, 0x71, 0x207e3b8b, 0x0, 0x7, 0x6, 0xe35, 0xffffffff, 0xfff, 0x100, 0x5, 0xffffffff, 0x3, 0x9, 0x4, 0xdf, 0xf40, 0x1000, 0x8, 0x2, 0x1, 0xba68, 0x5, 0x8, 0x7, 0x8, 0x3]}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xd, 0x7}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xffe0, 0x10}}, @TCA_RSVP_SRC={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_RSVP_SRC={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffa, 0xf35d, 0x5, 0x7f, 0x3, 0x9, 0x4, 0x5, 0x5, 0x3, 0x4, 0x2, 0x3, 0x3, 0x2, 0xe2, 0x9, 0x81, 0x4, 0x0, 0x7ff, 0x4, 0x5, 0x9, 0x8, 0x6, 0xffffff77, 0x0, 0xd, 0x3, 0xffff, 0x8001, 0x800, 0x3, 0x4c8, 0x10, 0x80000000, 0xffffffff, 0x89e, 0x3fd, 0xd44, 0x7, 0x27, 0x6, 0x4, 0x80000000, 0x6143958d, 0x52f, 0x6, 0x4, 0x0, 0x100, 0x2, 0x2, 0xc, 0x8, 0x245, 0x80, 0x1ff, 0x7, 0x5, 0x91a, 0xffff, 0x3a, 0x8001, 0x2, 0x3, 0x0, 0x0, 0xa, 0x1, 0x0, 0x1, 0x2, 0x6, 0x9, 0x4, 0x6, 0x6, 0x8, 0x1, 0xffffffff, 0x7, 0x60, 0x5, 0x1, 0x7, 0x100, 0xa, 0xc6, 0x0, 0x0, 0xa65, 0x6, 0xfffffffe, 0x4, 0x1, 0x5, 0x7, 0x0, 0x0, 0x80000000, 0x5, 0x1, 0x1, 0x6, 0x400, 0x8, 0x1, 0x3b, 0x68e976ea, 0x401, 0x3, 0x8, 0x0, 0x3, 0x3, 0x7, 0x9, 0x1c000000, 0x8001, 0x9f, 0x3ff, 0x8, 0x6, 0x0, 0x33, 0x8, 0xfff, 0x43e9, 0x80000001, 0x6a5, 0x7f, 0x2, 0x1, 0x0, 0x800, 0x5, 0x6, 0x2, 0x0, 0x8000, 0x785, 0xb, 0x9, 0x7fffffff, 0xc, 0x8001, 0x3, 0x7, 0x9, 0x8, 0x8, 0x4, 0x0, 0x2, 0x2, 0x2, 0x1, 0x0, 0x7ff0000, 0x1, 0xd4a, 0x7e3f, 0xfffffffb, 0x0, 0x3, 0x1, 0x190455d8, 0xffffffff, 0x0, 0x2, 0xbf59, 0x6, 0x1, 0x7, 0x80000000, 0x9, 0xfffffff7, 0x3800000, 0x3, 0x7ff, 0xb, 0x2, 0x6, 0x800, 0x1, 0xf, 0x1, 0x7c, 0xe1, 0xb, 0xe, 0xfffffff8, 0x9, 0x1ff000, 0x8000, 0x4, 0x7, 0x10000, 0x0, 0x1, 0xff1, 0x0, 0x7, 0x401, 0x4, 0x2, 0x8, 0x2, 0x9, 0xf, 0xfffffde3, 0x27984fea, 0x3, 0x3, 0x4, 0x7fffffff, 0xff, 0x0, 0x7, 0x437, 0x444d, 0xfffffff8, 0x27, 0x10, 0x3e6, 0x4, 0x3, 0x8000, 0xd0, 0x6, 0x46007d96, 0xf, 0xfff, 0x0, 0x0, 0x0, 0x45a0, 0x6, 0x48a, 0x7, 0xfffff87e, 0xcc8, 0xbfa, 0x8, 0x2, 0x5, 0xfff, 0x3, 0xf42, 0xfffffffb, 0x6, 0x5, 0x9, 0xd]}]}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}, @f_rsvp={{0x9}, {0x1b4, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xa, 0xfff2}}, @TCA_RSVP_POLICE={0x30, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0xb}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc94}, @TCA_POLICE_RATE64={0xc, 0x8, 0xff}, @TCA_POLICE_RATE64={0xc, 0x8, 0xecda}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x3, 0x5, 0x400}, {0xf6, 0x80000001, 0x1}, 0x89, 0x9, 0x9}}, @TCA_RSVP_ACT={0xb8, 0x6, [@m_simple={0xb4, 0x9, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '$\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x0, 0x8, 0x7, 0x609}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x78c878c0, 0x4, 0xb, 0x1000}}, @TCA_DEF_DATA={0xc, 0x3, '/!+-!{%\x00'}]}, {0x44, 0x6, "100ce72ab63d2fde41b282107c31a707c65b24c0c92a90e4b8154a90a0bdfaf6a31528e678302d0f1b05462abd7a740d3e34170b2497c60852a39b511980084f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_RSVP_POLICE={0x98, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0xd, 0x5, 0x8000, 0x400, 0xff, {0x40, 0x1, 0xff, 0x787, 0x5, 0x5}, {0x6, 0x1, 0x6, 0x2, 0x7ff}, 0xf8e, 0x3, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x3, 0x9, 0xfffffff7, 0xd83, {0xc, 0x1, 0x6, 0x6d1a, 0x7a, 0x6}, {0xc, 0x2, 0x4, 0xf, 0x401, 0x6}, 0x2, 0xffffffbe, 0x8}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x74}, @TCA_POLICE_RATE64={0xc, 0x8, 0x212a}]}, @TCA_RSVP_SRC={0x8, 0x3, @private=0xa010100}]}}, @f_rsvp6={{0xa}, {0xc, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xb, 0xc}}]}}, @f_tcindex={{0xc}, {0x4}}, @f_tcindex={{0xc}, {0x1c, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x513a}, @TCA_TCINDEX_MASK={0x6}]}}]}, 0x422c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4011) write(r5, &(0x7f0000000400)='dummy_udc.0', 0xb) lseek(r0, 0x1, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$rds(r6, &(0x7f0000000880)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)=""/85, 0x55}, {&(0x7f0000000100)=""/20, 0x14}], 0x2, &(0x7f00000006c0)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000003c0)=""/218, 0xda}, &(0x7f00000004c0), 0x7c}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1c3, 0x1}, &(0x7f0000000540)=0xbf3e, &(0x7f0000000580)=0x5, 0xe, 0x2, 0x3, 0x6000000000000, 0x4, 0x82}}, @mask_fadd={0x58, 0x114, 0x8, {{0xffffffff, 0x5}, &(0x7f00000005c0)=0xff1b, &(0x7f0000000600)=0x9, 0xf7, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x8000000000000000}}, @rdma_dest={0x18, 0x114, 0x2, {0x3093, 0xf}}, @mask_cswp={0x58, 0x114, 0x9, {{0xfffffffe, 0x7}, &(0x7f0000000640)=0xfffffffffffffc00, &(0x7f0000000680)=0xffffffffffffff80, 0x4, 0x4, 0x9, 0x1ff, 0x0, 0x10001}}], 0x150, 0x20000004}, 0x80) r10 = semget(0x1, 0x4, 0x39c) semop(r10, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x0, 0x5b7a, 0x800}], 0x2) semctl$IPC_RMID(r10, 0x0, 0x0) sendmsg$rds(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x8, 0x4}, {0x0}, &(0x7f0000000500)=[{&(0x7f0000000300)=""/135, 0x87}], 0x1, 0x35c2543b674a04d1, 0x6}}], 0x48, 0x8000}, 0x4000000) 11.100949274s ago: executing program 4 (id=574): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xd, 0xc}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x498d0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000040)={0x7, 'veth1_to_bond\x00', {0x45a}, 0x9}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 3.460705171s ago: executing program 3 (id=677): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) capset(&(0x7f0000000240)={0x20071026, 0xffffffffffffffff}, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x1) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) (async) r3 = dup(r2) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x44, 0x8, 0x7f, '\x00', 0x8}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r4, 0x107, 0xf, 0x0, &(0x7f00000000c0)=0xffffffffffffffa2) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r6, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r8, r9, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r10, &(0x7f00000000c0)='lp\x00', 0xfffffdef) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410019012bbd700000000000047c00000400c2800c00018006000600843b00000c000280080017"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) dup2(r10, r6) (async) io_uring_register$IORING_REGISTER_IOWQ_AFF(r10, 0x11, &(0x7f0000000000)="4aff740e343dfd3e93c84096f1e34ef936e2094a55d5b8aa4672b2f6c83c901af2b02cd8aafebd271b797558f696f2791fd33b869d54609f345d5fc5983c57c767b45b74442a94b40654f24f90979417fd4d866e764e86da3d632275866312086b600c2c9b21db5e6cd83f9d931b4266a5f8cd8ac7e4cbc0da2abb923ee1ab47659975a624f9c25659b5eeff98", 0x8d) 3.309740775s ago: executing program 3 (id=679): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x24}}, 0x20040800) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) 3.308585984s ago: executing program 3 (id=682): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@uuid_auto}, {@index_on, 0x3a}], [], 0x2f}) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000080)='./cgroup\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) 3.201496596s ago: executing program 3 (id=683): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000300000300000000feffe258a663a3d8918b5232c39c807ede4933ded945e6"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000300000300000000feffe258a663a3d8918b5232c39c807ede4933ded945e6"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, 0x0}, 0x4) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, 0x0}, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x1, 0x20002f7}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000180)="14", 0x1}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000270001032dbd7000fcdbdf250b"], 0x14}, 0x1, 0x0, 0x0, 0x404c0d4}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000270001032dbd7000fcdbdf250b"], 0x14}, 0x1, 0x0, 0x0, 0x404c0d4}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x2020) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(r2, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x1000) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000240)="3e66366466420f388152ea65d38aa6e67fa6420f0666b89d000f00d8c4820993a46b5c1e0000660f231cb8010000000f01d942c1d20d2e653ef623b805000000b9feffffff0f01d9", 0x48}], 0x1, 0x18, 0x0, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000240)=ANY=[], 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) 1.576948699s ago: executing program 2 (id=692): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x8, 0x4b2}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) mbind(&(0x7f0000554000/0x1000)=nil, 0x1000, 0x2, &(0x7f00000003c0)=0x6, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000953bcc"], 0x0, 0x5}, 0x94) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}], [{@smackfsroot}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@pcr={'pcr', 0x3d, 0xc}}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x8000000, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10000}, 0x4004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x30, r8, 0x1, 0xffffbffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}]}, 0x30}}, 0x20000010) syz_emit_ethernet(0x42, &(0x7f0000000300)={@empty, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x9, 0x20, 0x67, 0x0, 0x6, 0x6, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2d}, {[@timestamp={0x44, 0x4, 0xc3, 0x0, 0x9}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}, {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x20, 0x0, 0x0, 0x4}}}}}}, 0x0) 1.156454739s ago: executing program 5 (id=695): mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', &(0x7f00000004c0), 0x200000, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYBLOB="eb44affc18f58d6615b29c1c3119e4e9358df4c9c6475bced93b84f66c4b6a0e743ba394a979ef3676a3d1783b72131b13c8934b3c3adcbb91be40fff7d165fb0c1b577a5f43526dd56da2302739d983eb4f7786a8bdb110c86d7e55a7342cfbeb26b2e5d7a3884ec11d8f259f91af7e00f6f94f8e8bc7fe365d6e684cd154591232362bdc082f620bbd1e8b0d3d6761e5d9b453e6e8fc62bd6db4ab48877718575c5f582aacb2119190b24cc04c422368044b0fbf2839aa47480c04468efad61a82b19ac126048ab4a5955863ed87727faa45aceb7144"]) chdir(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') creat(&(0x7f0000000200)='./file0\x00', 0x8) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/128, 0x80}], 0x1, 0x131, 0x0) symlinkat(&(0x7f0000000140)='\x00', r0, &(0x7f0000000180)='./file1\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) 1.154632407s ago: executing program 5 (id=696): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703260000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r3, 0x25, 0x0, @void}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000002780)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb8, r6, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1b}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4814}, 0xc0) fstat(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000002ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002840)=@acquire={0x224, 0x17, 0x8, 0x70bd28, 0x25dfdbfb, {{@in=@local, 0x4d2, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {@in=@remote, @in6=@mcast2, 0x4e21, 0x437, 0x4e23, 0x0, 0xa, 0x20, 0x100, 0x2f, r3, r4}, {{@in=@dev={0xac, 0x14, 0x14, 0x34}, @in=@multicast2, 0x4e24, 0x4, 0x4e22, 0x2, 0x2, 0x20, 0x20, 0xc, r5, r8}, {0x9, 0x8, 0x8, 0xf5c6, 0x6, 0x8cd, 0x0, 0x8}, {0x10000, 0x3, 0x5, 0x4}, 0x6, 0x6e6bbf, 0x2, 0x1, 0x1, 0x2}, 0xe7, 0x0, 0x7, 0x70bd29}, [@policy_type={0xa, 0x10, {0x1}}, @XFRMA_SET_MARK_MASK={0x8}, @extra_flags={0x8, 0x18, 0x6}, @policy_type={0xa, 0x10, {0x1}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @tmpl={0x84, 0x5, [{{@in=@loopback, 0x4d4}, 0x2, @in=@multicast1, 0x3501, 0x0, 0x1, 0x8, 0xaa, 0xe7a, 0x8}, {{@in=@loopback, 0x4d6, 0x2b}, 0x0, @in=@remote, 0x34ff, 0x1, 0x3, 0x3, 0xc, 0x2, 0x7fffffff}]}, @extra_flags={0x8, 0x18, 0xb}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4e22, @in6=@ipv4={'\x00', '\xff\xff', @empty}}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e21, @in6=@private0}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x224}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) 1.034985738s ago: executing program 2 (id=697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xb}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x43, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4040054) 1.034483149s ago: executing program 5 (id=698): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', 'trusted:', 0x20, 0x40}, 0x32, 0xfffffffffffffffc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="a6512c64b011f6aba97f875cd7073b6c5697d5b2b0f836b441d2097f2e8f8e8794e825094cc670a081c52f71f49ca7dad8e5cafec0726d8e64521bd9ca8d5dd7a788ca1ebe9e21cf3c13099d9f14458706eabe32def2e2b0aa6a34d01c2caa2fa63426666058d476da846f7f8ac3202cc7f8775cd9d40ccf51ca9fca830fa66e835508b2f8c9e2d687aeae6b492b315e20e8498c74c5c2", 0x97, r1) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x871a15abc695fb3d, 0x0, 0x1, {}, [{0x80, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="14200c000000000000001c000000000000000000c5f20000be3714caed79571a2ecd548790afb63a23"], 0x14}], 0x1}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', 'trusted:', 0x20, 0x40}, 0x32, 0xfffffffffffffffc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) (async) add_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="a6512c64b011f6aba97f875cd7073b6c5697d5b2b0f836b441d2097f2e8f8e8794e825094cc670a081c52f71f49ca7dad8e5cafec0726d8e64521bd9ca8d5dd7a788ca1ebe9e21cf3c13099d9f14458706eabe32def2e2b0aa6a34d01c2caa2fa63426666058d476da846f7f8ac3202cc7f8775cd9d40ccf51ca9fca830fa66e835508b2f8c9e2d687aeae6b492b315e20e8498c74c5c2", 0x97, r1) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x871a15abc695fb3d, 0x0, 0x1, {}, [{0x80, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="14200c000000000000001c000000000000000000c5f20000be3714caed79571a2ecd548790afb63a23"], 0x14}], 0x1}, 0x0) (async) 921.8721ms ago: executing program 5 (id=699): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67100000000000560602000fff00006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdedb2150e1918c30b6301f0212feb0cff9fc67357d81b2cc1a9e37d7b75c020b070000003eb22062bafaca036d9ec7db6671573e202e0a92ee4ba12b064981cc32d1ac0b9ecc8f604dca20563e1c1e7624cc3b88b330ad416c4c1d8c60589b6445a4ffff50df4d34bc5847bebb943a84cb56956931ba9cc39c4a9deea5d77aa843240000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@d, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 921.191761ms ago: executing program 3 (id=700): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000780)=""/199, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x42) close(r1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000340)="b9cd14", 0x3}, {0x0}], 0x2}}], 0x1, 0x20008000) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0fe010000400015900c2ba87c7e733b0c5d8bf40fccf7d358a000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$int_in(r3, 0x5452, &(0x7f0000000440)=0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/179, 0x33fe0}], 0x1, 0x0, 0x2b}, 0x100) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r6, 0x0, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x3fdd, @broadcast, 'vlan0\x00'}}, 0x1e) syz_emit_ethernet(0x14, &(0x7f0000001500)={@local, @broadcast, @void, {@generic={0x8863, "5aa7dd3f7902"}}}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x24004) 831.746884ms ago: executing program 5 (id=701): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x40000022, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r7, &(0x7f0000000200)='m', 0x1) (async) write$dsp(r7, &(0x7f0000000200)='m', 0x1) r8 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000100)) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000100)) r9 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r9, 0x40084146, &(0x7f0000000140)=0xfff) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f00000005c0)={0x0, 0x0, r4, 0x0, 0xf8, 0x8, 0x7ff, 0x3, {0x8, 0x8, 0x0, 0x5, 0x0, 0x2, 0x1, 0x1, 0x0, 0xffff, 0x8, 0x7c0, 0xffffffff, 0x77, "ba9a42184edc4097e01b52f22e2cbb318719fb31f6699332292cc81f89f07580"}}) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}]}, @NFT_MSG_NEWCHAIN={0xfc, 0x3, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5a9fc57e}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip_vti0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x33dd79e0}, @NFTA_HOOK_DEV={0x14, 0x3, 'vcan0\x00'}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000000}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0xe8, 0x6, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xab, 0x7, 0x1, 0x0, "065f72d6c992744b2e12355afe2c26b690e9df7baa704532fcd29f8d482df4091e14c9006c1f431b8fc34ddfe62270d1a500835f8bffc99188cb6b8cc0d79b8cc3bd0f0e46aba7e455250e610e696c16f5820346a7af5435e0145cd0912a3da7a9525ebff5069ebfd61991f2fdd1ca08daffd4a64d23dd88947a5d24c0c5658627c91fade68b148c1dad9bded0538a85e59ca89dc722ea1b131a871e4ef1cf430d39fd4b8071fe"}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88ca}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x280}, 0x1, 0x0, 0x0, 0x400c5}, 0x8000) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'wg0\x00', @ifru_mtu=0x8}) (async) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'wg0\x00', @ifru_mtu=0x8}) ioctl$sock_netdev_private(r0, 0x40089f9, &(0x7f0000000000)) (async) ioctl$sock_netdev_private(r0, 0x40089f9, &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) 719.819495ms ago: executing program 2 (id=702): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x29, 0xa4, 0xf1, 0x7, 0xa, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x20, 0x64e, 0x8000}}) sendmsg$inet(r0, &(0x7f0000000940)={&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000600)=[{&(0x7f00000000c0)="fed939741b65c77e050e95995291f224f02feff38ad1b991d066fc27603b8d1818dade1ce5ef9707dad6f9e7ce01ee6e5b2337632a8bfbda040528a51959a17cb24590d910f4ce9f", 0x48}, {&(0x7f0000000200)="cfc8ff275f4f61a463fd2ba57ba35cfdee15e6c36cc68e902ae1ab", 0x1b}, {&(0x7f0000000340)="d4ca29557426b09c1940803d0c991d45639b49f84b086ff8ded4181231d638667528c11972defafd2d61e9106e533e5f68dc1542e718c4fdafaebead6bddaceeb3074cd363e622f186c1c6aab0af54f21a7f1abdc0c0daa5273d5d93a592bf5368817fb89723c3b1b4c74978584ce1f47eb74f40451c5f015de3e833449365e8ec203e2c1bf827ccff0b87d9238bb16bfa083562a8cbe7f653cecf1bceb7def9a2381388ac1c68603404d635ce5cae78b7ade71704eaed01f06be2adf9562361c2d2bb7f977f4a2099bac4b07e0c171ecbf065c757c615f8d9cfd5b5ef5caa3a92b9d0734d8a7460e574ab669209b7a3bb15", 0xf2}, {&(0x7f0000000440)="63a15f173858fbe5a2b70b", 0xb}, {&(0x7f0000000480)="5adfdaf7a76b9d438831ce9d426a18a73f0d527cfb01721fc9c18d7040ef2f9f4bcb669585526b10ae2808413363e9385b5a7054b96c13f07f6a50aac2d06dafbc83392eb2be38d5f21a7e45d562a71e5595a4eea4c8554d977a7c8a53e926d66a3a6fa7f946aae6ef7a8a4c2a02c6dcae69a18e1610d4b886d645af5d5677ca5c8ff872c1916a20a4c9e7dc9993b8146360294d21810605d007897f0b341a84d84535e3d7cf3477bf1a86fb41f9fc5a85b1547b1c25fdd26b40dc783dac40b03cb70f1f423d61546281c9d65ff87531a0ede5b1722b6b174ac756e8669534032c9f1934961b4d814dd5f98bb10e9f3a46bf96884d995990102e11", 0xfb}, {&(0x7f0000000580)="54689b9f3053d14f0bc32ab577731d07883037e7f7f2d1868783331f39a8733b52e6a92d7cae9f33649dabc59c9275699548f8ed4819da16", 0x38}, {&(0x7f00000005c0)="7dc86f1c", 0x4}], 0x7, &(0x7f0000000740)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6b}}, @ip_retopts={{0x28, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x48, [@local]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x7f, 0x1, 0xa, [{@local, 0x5}]}]}}}, @ip_retopts={{0x90, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0xd4, 0x0, 0x9, [0x4, 0x1, 0x7c, 0xd3a]}, @cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x0, 0x10, "4a831bd3e347b0b6805b7c998a4e"}, {0x7, 0x4, "2cc8"}]}, @timestamp_addr={0x44, 0x34, 0xdc, 0x1, 0x3, [{@private=0xa010102, 0x2}, {@broadcast, 0xffff}, {@broadcast}, {@local, 0x100}, {@multicast1, 0xfffffffb}, {@loopback, 0x5}]}, @cipso={0x86, 0x1b, 0x3, [{0x1, 0x11, "27e66327f6bd52708e5e6cdd89c673"}, {0x2, 0x4, '=1'}]}, @end]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x23, 0x94, [@broadcast, @broadcast, @empty, @multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x16}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xb, 0x77, [@local, @broadcast]}, @timestamp_addr={0x44, 0xc, 0x91, 0x1, 0x4, [{@empty, 0x9}]}, @noop, @ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0xa1, [@dev={0xac, 0x14, 0x14, 0x44}, @remote, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x33}]}]}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@rr={0x7, 0xf, 0xc9, [@dev={0xac, 0x14, 0x14, 0x3a}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf}}], 0x1e0}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010001fff2dbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00800080000000232000128008000100677265001400028008000700e000000208001400f7ffffffb00a6a525e20f13c5eed627b62f8120c4fb25562900d3cbb96a34933abcbf325340e54fab406fa482d66f359c8207ca2e28c17efd8e1a9efffb84362ff59227128a8"], 0x40}}, 0x800) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010001fff2dbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00800080000000232000128008000100677265001400028008000700e000000208001400f7ffffffb00a6a525e20f13c5eed627b62f8120c4fb25562900d3cbb96a34933abcbf325340e54fab406fa482d66f359c8207ca2e28c17efd8e1a9efffb84362ff59227128a8"], 0x40}}, 0x800) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0xe882) 716.904488ms ago: executing program 2 (id=703): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0x1, 0x2000}, 0x50) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x200000000}) fcntl$lock(r4, 0x24, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="c009a50f01c3c401fa2d6bfe66ba2100b00dee65660f388003b9800000c00f3235010000000f30b9800000c00f3235000400000f3067f30f09f3f00fab9000000000670f01c8", 0x46}], 0x1, 0x40, &(0x7f0000000140), 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) write$binfmt_elf64(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) close(r7) r8 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) write$binfmt_elf64(r7, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x0, 0x0, 0xfe, 0x1, 0x3, 0x3e, 0x1, 0x225, 0x40, 0x205, 0x7fffffff, 0x5, 0x38, 0x1, 0x800, 0x4, 0x7}, [{0x2, 0x8, 0xa567, 0x8, 0x4, 0x10, 0x0, 0x3}]}, 0x78) close(r8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYRES16=r1], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r9, r0}, 0xc) 600.525641ms ago: executing program 2 (id=704): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf}}) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x46882) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f000000a840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f000000a880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f000000a940)={0x0, 0x0, &(0x7f000000a900)={&(0x7f0000000080)={0x74, r4, 0x1, 0x70bd2e, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x3}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x2}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xf}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x10}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x70}]}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x88b8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8010}, 0x40832) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r6, 0x0, 0x18, 0x0, &(0x7f00000001c0)) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) 599.636649ms ago: executing program 2 (id=705): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x7fffffff, '\x00', @p_u8=&(0x7f0000000080)}}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0xfffe, @any, 0x0, 0x1}, 0xe) listen(r1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000001) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, 0x0, 0x82020000) set_mempolicy(0x3, &(0x7f0000000140)=0x7, 0x8) syz_open_dev$tty20(0xc, 0x4, 0x0) clock_gettime(0x2, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={r2, r3/1000+60000}, 0x10) accept4(r1, 0x0, 0x0, 0x80800) 251.970868ms ago: executing program 5 (id=706): syz_usb_connect$uac1(0x3, 0xaa, 0x0, 0x0) r0 = socket(0x28, 0x801, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000004c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080), &(0x7f0000000040)='system_u:object_r:tmpfs_t:s0\x00', 0x1d, 0x4) r2 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r2, 0x82000000) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) 0s ago: executing program 3 (id=707): mkdir(&(0x7f0000000000)='config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000280)={0xc780000000000000, 0x5000, 0x6, 0x2}) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000100)={0xc680000000000000, 0xf7e83000, 0x3ff}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffcc9, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ee14c5000000bb000000000000", @ANYRES16=r1, @ANYRES16=r4], 0x1c}, 0x1, 0x0, 0x0, 0x8011}, 0x44004) mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) readv(r5, &(0x7f0000003040), 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r5, 0x0, r6, 0x0, 0x40000004, 0xb) r7 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x8c\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x1, 0x0) mq_notify(r7, &(0x7f0000000200)={0x0, 0x16}) mq_timedsend(r7, 0x0, 0x0, 0x9, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) write(r8, &(0x7f0000000700)='44100,48000,96000\x00', 0x11) lremovexattr(&(0x7f0000000340)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', &(0x7f0000000380)=@known='trusted.overlay.upper\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000800)='config/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0xffffffffffffff01, 0x8) write(r9, &(0x7f0000000d40)="343431301d4434383030302c393630303000b86e0484d7d827d3b9a91aed13fd06639e0ca6b206125fd78be687d55ce0d767f54f6f280a3700806c263bccc3fb66076e31ca486fe3822341671ac47abf010a3fe2c280815c5d4470f0c8cf3842020000000000000042da90088a4116ce6c3df607b4aa8279c55000041c0fc1dee2b808000000ead0182d51e8c76a74a1cbc22f9831d6df8c2652ef67436e4b10462abecb66e298e8b8ffb211dcf0ab6f5740162d6feac523e95080f6d7d5471990ea9dcfaa11ee90e46dbb558b2fe4d60016924a1b34df811717489bad20a009ca0d2d7157738048562ed2daed3146f59d14e700"/257, 0x101) symlink(&(0x7f0000000a00)='config/usb_gadget/g1/functions/uac2.usb0\x00', &(0x7f0000000b00)='config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r10 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r10, &(0x7f0000000d00)='dummy_udc.0\x00', 0xb) kernel console output (not intermixed with test programs): sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 52.653502][ T42] audit: type=1400 audit(1784987028.996:277): avc: denied { read write } for pid=6056 comm="syz.3.39" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 52.663154][ T42] audit: type=1400 audit(1784987028.996:278): avc: denied { mmap_zero } for pid=6056 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 52.710753][ T6057] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.778789][ T6061] syzkaller1: entered promiscuous mode [ 52.780617][ T6061] syzkaller1: entered allmulticast mode [ 52.792130][ T42] audit: type=1400 audit(1784987029.146:279): avc: denied { connect } for pid=6056 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.799723][ T42] audit: type=1400 audit(1784987029.146:280): avc: denied { setopt } for pid=6056 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.621231][ T64] Bluetooth: hci3: command tx timeout [ 53.623279][ T5091] Bluetooth: hci2: command tx timeout [ 53.624538][ T5742] Bluetooth: hci1: command tx timeout [ 53.701459][ T5742] Bluetooth: hci0: command tx timeout [ 53.742159][ T6073] trusted_key: encrypted_key: insufficient parameters specified [ 53.747561][ T6073] process 'syz.0.44' launched './file0' with NULL argv: empty string added [ 53.834232][ T6062] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.907967][ T6062] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.980516][ T6062] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.075185][ T5783] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.083525][ T5783] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.090651][ T5783] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.099801][ T5783] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.159187][ T6092] netlink: 'syz.1.49': attribute type 2 has an invalid length. [ 54.167932][ T6092] : entered promiscuous mode [ 54.171824][ T6092] netlink: 'syz.1.49': attribute type 11 has an invalid length. [ 54.174201][ T6092] netlink: 132 bytes leftover after parsing attributes in process `syz.1.49'. [ 54.214000][ T6094] syzkaller0: entered promiscuous mode [ 54.215683][ T6094] syzkaller0: entered allmulticast mode [ 54.323547][ T6096] netlink: 60 bytes leftover after parsing attributes in process `syz.1.51'. [ 54.546849][ T6107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.551922][ T6107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 55.109390][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.58'. [ 55.114233][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.58'. [ 55.160774][ T6115] macsec0: entered promiscuous mode [ 55.162596][ T6115] macsec0: entered allmulticast mode [ 55.164280][ T6115] veth1_macvtap: entered allmulticast mode [ 55.167337][ T6115] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 55.472279][ T5842] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 55.641077][ T5842] usb 6-1: Using ep0 maxpacket: 8 [ 55.644638][ T5842] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 55.648572][ T5842] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 55.652942][ T5842] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 55.657004][ T5842] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 55.662506][ T5842] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 55.666210][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.702271][ T5742] Bluetooth: hci3: command tx timeout [ 55.703965][ T64] Bluetooth: hci2: command tx timeout [ 55.706991][ T6131] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 55.711572][ T5742] Bluetooth: hci1: command tx timeout [ 55.781711][ T5742] Bluetooth: hci0: command tx timeout [ 55.874916][ T5842] usb 6-1: GET_CAPABILITIES returned 0 [ 55.877314][ T5842] usbtmc 6-1:16.0: can't read capabilities [ 55.898619][ T5789] usb 6-1: USB disconnect, device number 3 [ 55.907283][ T6141] macvlan2: entered promiscuous mode [ 56.241072][ T5789] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 56.371200][ T5789] usb 6-1: device descriptor read/64, error -71 [ 56.611156][ T5789] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 56.717473][ T6148] binder: 6145:6148 ioctl 5423 200000000000 returned -22 [ 56.717649][ T6146] binder: 6145:6146 unknown command 4 [ 56.722776][ T6146] binder: 6145:6146 ioctl c0306201 2000000003c0 returned -22 [ 56.743725][ T5789] usb 6-1: device descriptor read/64, error -71 [ 56.815629][ T6157] Bluetooth: MGMT ver 1.23 [ 56.852780][ T5789] usb usb6-port1: attempt power cycle [ 56.915959][ T6169] netlink: 'syz.3.75': attribute type 1 has an invalid length. [ 57.083488][ T6204] evm: overlay not supported [ 57.087065][ T6204] capability: warning: `syz.3.79' uses deprecated v2 capabilities in a way that may be insecure [ 57.115202][ T6205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.80'. [ 57.191113][ T5789] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 57.211781][ T5789] usb 6-1: device descriptor read/8, error -71 [ 57.366916][ T6215] netlink: 40 bytes leftover after parsing attributes in process `syz.0.82'. [ 57.451156][ T5789] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 57.473542][ T5789] usb 6-1: device descriptor read/8, error -71 [ 57.476509][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'. [ 57.476538][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'. [ 57.495460][ T6220] veth0_to_bond: entered allmulticast mode [ 57.508844][ T6216] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 57.514722][ T42] kauditd_printk_skb: 73 callbacks suppressed [ 57.514737][ T42] audit: type=1400 audit(1784987033.866:354): avc: denied { setopt } for pid=6214 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.581366][ T5789] usb usb6-port1: unable to enumerate USB device [ 57.791138][ T5742] Bluetooth: hci3: command tx timeout [ 58.248777][ T42] audit: type=1400 audit(1784987034.596:355): avc: denied { setopt } for pid=6221 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.307175][ T6223] netlink: 28 bytes leftover after parsing attributes in process `syz.0.86'. [ 58.362156][ T6226] netlink: 'syz.0.87': attribute type 1 has an invalid length. [ 58.384470][ T6226] bond1: entered promiscuous mode [ 58.387024][ T6226] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.394131][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.87'. [ 58.398324][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.87'. [ 58.421835][ T6226] bond1: (slave bridge1): making interface the new active one [ 58.424960][ T6226] bridge1: entered promiscuous mode [ 58.429768][ T6226] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 58.469605][ T6231] openvswitch: netlink: Actions may not be safe on all matching packets [ 58.526374][ T42] audit: type=1400 audit(1784987034.876:356): avc: denied { read } for pid=6239 comm="syz.0.92" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 58.535236][ T42] audit: type=1400 audit(1784987034.876:357): avc: denied { open } for pid=6239 comm="syz.0.92" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 58.545746][ T42] audit: type=1400 audit(1784987034.886:358): avc: denied { ioctl } for pid=6239 comm="syz.0.92" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x4808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 58.578618][ T42] audit: type=1400 audit(1784987034.926:359): avc: denied { ioctl } for pid=6246 comm="syz.0.94" path="socket:[9692]" dev="sockfs" ino=9692 ioctlcmd=0x6686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.692208][ T6257] netlink: 'syz.0.95': attribute type 1 has an invalid length. [ 58.706005][ T6257] 8021q: adding VLAN 0 to HW filter on device bond2 [ 58.727241][ T6257] 8021q: adding VLAN 0 to HW filter on device bond2 [ 58.729831][ T6257] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 58.733900][ T6257] bond2: (slave gre1): Error -95 calling set_mac_address [ 58.775648][ T6259] gretap1: entered promiscuous mode [ 58.779079][ T6259] bond2: (slave gretap1): making interface the new active one [ 58.781933][ T6259] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 58.811784][ T6257] macvlan2: entered promiscuous mode [ 58.813813][ T6257] macvlan2: entered allmulticast mode [ 58.815906][ T6257] bond2: entered promiscuous mode [ 58.819214][ T6257] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 58.824599][ T6257] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 58.828474][ T6257] bond2: left promiscuous mode [ 58.854622][ T42] audit: type=1400 audit(1784987035.206:360): avc: denied { map } for pid=6260 comm="syz.3.96" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 58.861616][ T42] audit: type=1400 audit(1784987035.206:361): avc: denied { call } for pid=6260 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 58.862952][ T6262] binder: BINDER_SET_CONTEXT_MGR already set [ 58.868761][ T6262] binder: 6260:6262 ioctl 4018620d 200000000240 returned -16 [ 58.922083][ T42] audit: type=1400 audit(1784987035.276:362): avc: denied { bind } for pid=6267 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.930801][ T42] audit: type=1400 audit(1784987035.276:363): avc: denied { name_bind } for pid=6267 comm="syz.3.98" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 58.933785][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.98'. [ 58.942044][ T6268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.98'. [ 58.955573][ T5783] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.955595][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.98'. [ 58.962319][ T5783] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.966066][ T5783] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.966100][ T6268] Zero length message leads to an empty skb [ 58.969212][ T6271] l2tp_ppp: sess 2/0: no socket in recv [ 58.975847][ T5783] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.992838][ T6271] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 58.998645][ T6273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2590 sclass=netlink_route_socket pid=6273 comm=syz.0.99 [ 59.129358][ T6295] loop5: detected capacity change from 0 to 7 [ 59.138008][ T6295] loop5: p3 p4 [ 59.139996][ T6295] loop5: partition table partially beyond EOD, truncated [ 59.148052][ T6290] 9p: Could not find request transport: v}B [ 59.193767][ T6298] program syz.0.107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.194378][ T5735] udevd[5735]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 59.195881][ T6039] udevd[6039]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 59.197633][ T6298] ata1.00: invalid transfer count 0 [ 59.301094][ T6307] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=6307 comm=syz.1.110 [ 59.460668][ T6317] ip6tnl1: entered promiscuous mode [ 59.547802][ T6317] macvtap0: entered allmulticast mode [ 59.549984][ T6317] veth0_macvtap: entered allmulticast mode [ 59.645452][ T6333] ieee802154 phy1 wpan1: encryption failed: -22 [ 60.001187][ T5789] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 60.152499][ T5789] usb 6-1: config 0 has an invalid interface number: 213 but max is 0 [ 60.155843][ T5789] usb 6-1: config 0 has no interface number 0 [ 60.158255][ T5789] usb 6-1: too many endpoints for config 0 interface 213 altsetting 216: 231, using maximum allowed: 30 [ 60.160004][ T6353] netlink: 'syz.3.125': attribute type 12 has an invalid length. [ 60.163108][ T5789] usb 6-1: config 0 interface 213 altsetting 216 has 0 endpoint descriptors, different from the interface descriptor's value: 231 [ 60.163126][ T5789] usb 6-1: config 0 interface 213 has no altsetting 0 [ 60.165978][ T5789] usb 6-1: config 0 has an invalid interface number: 213 but max is 0 [ 60.177219][ T5789] usb 6-1: config 0 has no interface number 0 [ 60.179263][ T5789] usb 6-1: too many endpoints for config 0 interface 213 altsetting 216: 231, using maximum allowed: 30 [ 60.182944][ T5789] usb 6-1: config 0 interface 213 altsetting 216 has 0 endpoint descriptors, different from the interface descriptor's value: 231 [ 60.187126][ T5789] usb 6-1: config 0 interface 213 has no altsetting 0 [ 60.190126][ T5789] usb 6-1: config 0 has an invalid interface number: 213 but max is 0 [ 60.193135][ T5789] usb 6-1: config 0 has no interface number 0 [ 60.195280][ T5789] usb 6-1: too many endpoints for config 0 interface 213 altsetting 216: 231, using maximum allowed: 30 [ 60.196300][ T6358] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 60.198867][ T5789] usb 6-1: config 0 interface 213 altsetting 216 has 0 endpoint descriptors, different from the interface descriptor's value: 231 [ 60.198884][ T5789] usb 6-1: config 0 interface 213 has no altsetting 0 [ 60.200428][ T5789] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 60.212384][ T5789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 60.215171][ T5789] usb 6-1: Product: syz [ 60.216590][ T5789] usb 6-1: Manufacturer: syz [ 60.218087][ T5789] usb 6-1: SerialNumber: syz [ 60.221077][ T5789] usb 6-1: config 0 descriptor?? [ 60.433715][ T5789] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 60.436758][ T5789] dvb-usb: bulk message failed: -22 (2/0) [ 60.442749][ T5789] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 60.446622][ T5789] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 60.450724][ T5789] usb 6-1: media controller created [ 60.462928][ T5789] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 60.473503][ T5789] cxusb: set interface failed [ 60.475032][ T5789] dvb-usb: bulk message failed: -22 (1/0) [ 60.494571][ T5789] DVB: Unable to find symbol mt352_attach() [ 60.495613][ T6367] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 60.496832][ T5789] dvb-usb: bulk message failed: -22 (5/0) [ 60.501509][ T5789] zl10353_read_register: readreg error (reg=127, ret==-121) [ 60.503927][ T5789] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 60.551103][ T5789] rc_core: IR keymap rc-dvico-mce not found [ 60.553055][ T5789] Registered IR keymap rc-empty [ 60.557652][ T5789] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 60.562433][ T5789] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input5 [ 60.570196][ T5789] dvb-usb: schedule remote query interval to 100 msecs. [ 60.572696][ T5789] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 60.582474][ T5789] usb 6-1: USB disconnect, device number 8 [ 60.609841][ T6370] netlink: 'syz.3.130': attribute type 83 has an invalid length. [ 60.649228][ T5789] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 60.650771][ T6372] xt_l2tp: unknown flags: ff [ 60.658829][ T6376] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 60.817255][ T6382] xt_cgroup: xt_cgroup: no path or classid specified [ 61.471710][ T6410] Bluetooth: MGMT ver 1.23 [ 61.852281][ T6424] xt_hashlimit: size too large, truncated to 1048576 [ 61.867553][ T6422] cdrom: dropping to single frame dma [ 61.875305][ T6425] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 61.885126][ T6425] usb usb8: usbfs: process 6425 (syz.0.145) did not claim interface 0 before use [ 62.006995][ T6431] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 62.049513][ T6434] program syz.0.148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.136881][ T6437] __nla_validate_parse: 8 callbacks suppressed [ 62.136895][ T6437] netlink: 32 bytes leftover after parsing attributes in process `syz.3.149'. [ 62.361065][ T5789] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.521038][ T5789] usb 5-1: Using ep0 maxpacket: 8 [ 62.530112][ T5789] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 62.535506][ T5789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.547668][ T5789] pvrusb2: Hardware description: Terratec Grabster AV400 [ 62.552271][ T5789] pvrusb2: ********** [ 62.553552][ T5789] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 62.556703][ T5789] pvrusb2: Important functionality might not be entirely working. [ 62.559092][ T5789] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 62.563454][ T5789] pvrusb2: ********** [ 62.579584][ T42] kauditd_printk_skb: 45 callbacks suppressed [ 62.579595][ T42] audit: type=1400 audit(1784987038.926:409): avc: denied { write } for pid=6452 comm="syz.3.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.628942][ T42] audit: type=1400 audit(1784987038.976:410): avc: denied { setopt } for pid=6463 comm="syz.2.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.725351][ T42] audit: type=1400 audit(1784987039.076:411): avc: denied { create } for pid=6474 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 62.731638][ T42] audit: type=1400 audit(1784987039.076:412): avc: denied { ioctl } for pid=6474 comm="syz.1.160" path="socket:[13435]" dev="sockfs" ino=13435 ioctlcmd=0x8992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 62.748409][ T2516] pvrusb2: Invalid write control endpoint [ 62.758768][ T6475] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 62.764274][ T42] audit: type=1400 audit(1784987039.116:413): avc: denied { read } for pid=6474 comm="syz.1.160" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 62.773462][ T42] audit: type=1400 audit(1784987039.116:414): avc: denied { open } for pid=6474 comm="syz.1.160" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 62.785726][ T2516] pvrusb2: Invalid write control endpoint [ 62.787857][ T2516] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 62.792233][ T2516] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 62.795550][ T2516] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 62.798889][ T2516] pvrusb2: Device being rendered inoperable [ 62.802768][ T2516] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 62.805644][ T2516] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 62.812678][ T2516] pvrusb2: Attached sub-driver cx25840 [ 62.816290][ T2516] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 62.820476][ T2516] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 62.931220][ T5814] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 62.948177][ T6439] pvrusb2: Attempted to execute control transfer when device not ok [ 63.101073][ T5814] usb 7-1: Using ep0 maxpacket: 16 [ 63.108631][ T5814] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 63.116412][ T5814] usb 7-1: config 0 interface 0 has no altsetting 0 [ 63.121584][ T5814] usb 7-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 63.125038][ T5814] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.127830][ T5814] usb 7-1: Product: syz [ 63.129596][ T5814] usb 7-1: Manufacturer: syz [ 63.131931][ T5814] usb 7-1: SerialNumber: syz [ 63.136637][ T5814] usb 7-1: config 0 descriptor?? [ 63.219232][ T42] audit: type=1400 audit(1784987039.566:415): avc: denied { setopt } for pid=6484 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.351312][ C0] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 63.362264][ T5814] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input6 [ 63.386038][ T5814] imon:send_packet: packet tx failed (-71) [ 63.401087][ T5814] imon 7-1:0.0: panel buttons/knobs setup failed [ 63.441252][ T6493] ======================================================= [ 63.441252][ T6493] WARNING: The mand mount option has been deprecated and [ 63.441252][ T6493] and is ignored by this kernel. Remove the mand [ 63.441252][ T6493] option from the mount to silence this warning. [ 63.441252][ T6493] ======================================================= [ 63.451671][ T6494] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 63.452697][ T42] audit: type=1400 audit(1784987039.806:416): avc: denied { mount } for pid=6492 comm="syz.3.165" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 63.461857][ T5814] rc_core: IR keymap rc-imon-pad not found [ 63.461878][ T5814] Registered IR keymap rc-empty [ 63.461914][ T5814] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 63.461923][ T5814] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 63.463139][ T5814] imon:send_packet: packet tx failed (-71) [ 63.481116][ T5814] imon 7-1:0.0: remote input dev register failed [ 63.488134][ T5814] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 63.489628][ T42] audit: type=1400 audit(1784987039.836:417): avc: denied { unmount } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 63.532765][ T5814] imon 7-1:0.0: unable to initialize intf0, err 0 [ 63.535363][ T5814] imon:imon_probe: failed to initialize context! [ 63.537446][ T5814] imon 7-1:0.0: unable to register, err -19 [ 63.538054][ T42] audit: type=1400 audit(1784987039.886:418): avc: denied { unmount } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 63.554811][ T5814] usb 7-1: USB disconnect, device number 3 [ 63.574482][ T6475] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 63.580734][ T6475] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 63.602128][ T6475] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 63.608660][ T6475] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 63.612122][ T6475] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 63.620315][ T6475] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 63.630662][ T6475] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 63.637066][ T6475] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 63.644524][ T6475] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 63.738102][ T6518] netlink: 20 bytes leftover after parsing attributes in process `syz.1.170'. [ 63.744563][ T6518] netlink: 20 bytes leftover after parsing attributes in process `syz.1.170'. [ 63.981106][ T5814] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 64.153621][ T5814] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 64.157685][ T5814] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 64.161849][ T5814] usb 7-1: config 0 interface 0 has no altsetting 0 [ 64.165745][ T5814] usb 7-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 64.168744][ T5814] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.171834][ T5814] usb 7-1: Product: syz [ 64.173301][ T5814] usb 7-1: Manufacturer: syz [ 64.174840][ T5814] usb 7-1: SerialNumber: syz [ 64.182670][ T5814] usb 7-1: config 0 descriptor?? [ 64.185601][ T6473] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 64.395538][ C0] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 64.401543][ T5814] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input8 [ 64.481074][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 64.632938][ T9] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 64.635827][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.641354][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 64.647413][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.651281][ T5814] rc_core: IR keymap rc-imon-pad not found [ 64.653307][ T5814] Registered IR keymap rc-empty [ 64.655877][ T5814] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 64.660248][ T5814] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 64.666338][ T9] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 64.670459][ T9] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 64.674137][ T9] usb 8-1: Product: syz [ 64.675878][ T9] usb 8-1: Manufacturer: syz [ 64.686753][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 64.689500][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 64.696689][ T9] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 64.699244][ T9] cdc_wdm 8-1:1.0: Unknown control protocol [ 64.715578][ T6544] netlink: 16 bytes leftover after parsing attributes in process `syz.1.176'. [ 64.718688][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'. [ 64.813134][ T5814] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 64.820311][ T5814] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input9 [ 64.830654][ T5814] imon 7-1:0.0: iMON device (15c2:0045, intf0) on usb<7:4> initialized [ 64.901164][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 64.913539][ T6553] befs: (nullb0): No write support. Marking filesystem read-only [ 64.917230][ T6553] befs: (nullb0): invalid magic header [ 64.947148][ T5742] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 64.953012][ T29] usb 8-1: USB disconnect, device number 2 [ 64.981081][ T6439] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 64.995904][ T5835] usb 7-1: USB disconnect, device number 4 [ 65.460677][ T6565] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 65.584176][ T6573] overlayfs: empty lowerdir [ 65.621213][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout [ 65.711140][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout [ 65.858783][ T6584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.007155][ T61] usb 5-1: USB disconnect, device number 2 [ 66.087255][ T6597] syz.0.190 uses obsolete (PF_INET,SOCK_PACKET) [ 66.195634][ T6603] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=6603 comm=syz.2.191 [ 66.201701][ T6603] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5137 sclass=netlink_tcpdiag_socket pid=6603 comm=syz.2.191 [ 66.545224][ T6640] openvswitch: netlink: ct_state flags 0001010a unsupported [ 66.774651][ T6677] netlink: 88 bytes leftover after parsing attributes in process `syz.2.204'. [ 66.794877][ T6680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.205'. [ 66.833882][ T6687] 9pnet_virtio: no channels available for device syz [ 66.841546][ T6687] netlink: 'syz.2.207': attribute type 20 has an invalid length. [ 66.850527][ T6688] btrfs: Unknown parameter 'discardfo' [ 66.981165][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 66.987155][ T6704] netlink: 'syz.0.213': attribute type 1 has an invalid length. [ 66.987811][ T6705] netlink: 'syz.0.213': attribute type 1 has an invalid length. [ 67.151357][ T29] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 67.289117][ T6725] netlink: 'syz.0.218': attribute type 64 has an invalid length. [ 67.309192][ T6725] kernel profiling enabled (shift: 63) [ 67.311101][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 67.312575][ T6725] profiling shift: 63 too large [ 67.317081][ T29] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 67.320292][ T29] usb 6-1: config 0 has no interface number 0 [ 67.323989][ T29] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 67.328901][ T29] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 67.332927][ T29] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 67.337696][ T29] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 67.342310][ T29] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.445340][ T6734] netlink: 60 bytes leftover after parsing attributes in process `syz.3.222'. [ 67.460426][ T29] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 67.463869][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.465515][ T6188] Bluetooth: (null): Invalid header checksum [ 67.466755][ T29] usb 6-1: Product: syz [ 67.470508][ T29] usb 6-1: Manufacturer: syz [ 67.472509][ T29] usb 6-1: SerialNumber: syz [ 67.479145][ T29] usb 6-1: config 0 descriptor?? [ 67.572321][ T36] Bluetooth: (null): Too short H5 packet [ 67.574196][ T36] Bluetooth: (null): Invalid header checksum [ 67.681412][ T36] Bluetooth: (null): Invalid header checksum [ 67.690515][ T29] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 67.711169][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout [ 67.781150][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout [ 67.791333][ T1172] Bluetooth: (null): Invalid header checksum [ 67.896305][ T5835] usb 6-1: USB disconnect, device number 9 [ 67.911632][ T36] Bluetooth: (null): Invalid header checksum [ 68.033397][ T36] Bluetooth: (null): Invalid header checksum [ 68.106426][ T6739] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 68.148978][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 68.148997][ T42] audit: type=1400 audit(1784987044.496:456): avc: denied { getopt } for pid=6740 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.149338][ T6741] netlink: 104 bytes leftover after parsing attributes in process `syz.3.225'. [ 68.152109][ T42] audit: type=1400 audit(1784987044.496:457): avc: denied { nlmsg_read } for pid=6740 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.157970][ T1172] Bluetooth: (null): Invalid header checksum [ 68.158064][ T6742] netlink: 104 bytes leftover after parsing attributes in process `syz.3.225'. [ 68.194971][ T42] audit: type=1326 audit(1784987044.546:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6743 comm="syz.3.226" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd6cb9de99 code=0x0 [ 68.301369][ T6753] xt_hashlimit: size too large, truncated to 1048576 [ 68.364160][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.227'. [ 68.406500][ T42] audit: type=1400 audit(1784987044.756:459): avc: denied { ioctl } for pid=6756 comm="syz.0.228" path="socket:[16627]" dev="sockfs" ino=16627 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.446455][ T42] audit: type=1400 audit(1784987044.796:460): avc: denied { nlmsg_write } for pid=6760 comm="syz.0.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 68.497151][ T6767] IPv6: NLM_F_CREATE should be specified when creating new route [ 68.500449][ T6767] IPv6: Can't replace route, no match found [ 68.609884][ T6782] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 68.615091][ T6782] syzkaller1: Linktype set failed because interface is up [ 68.630234][ T42] audit: type=1400 audit(1784987044.976:461): avc: denied { map } for pid=6785 comm="syz.2.237" path="socket:[13786]" dev="sockfs" ino=13786 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.642075][ T42] audit: type=1400 audit(1784987044.976:462): avc: denied { read } for pid=6785 comm="syz.2.237" path="socket:[13786]" dev="sockfs" ino=13786 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.810730][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.241'. [ 68.813686][ T42] audit: type=1400 audit(1784987045.166:463): avc: denied { create } for pid=6796 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.814102][ T42] audit: type=1400 audit(1784987045.166:464): avc: denied { getopt } for pid=6796 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.823646][ T6797] bridge0: port 3(macvlan2) entered blocking state [ 68.828170][ T42] audit: type=1400 audit(1784987045.166:465): avc: denied { connect } for pid=6796 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.829276][ T6797] bridge0: port 3(macvlan2) entered disabled state [ 68.839015][ T6797] macvlan2: entered allmulticast mode [ 68.840787][ T6800] program syz.2.242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.845630][ T6797] macvlan2: left allmulticast mode [ 68.984613][ T6808] befs: (nbd2): unable to read superblock [ 68.999569][ T6813] loop4: detected capacity change from 0 to 2640 [ 69.006072][ T6813] Buffer I/O error on dev loop4, logical block 0, async page read [ 69.009991][ T6813] Buffer I/O error on dev loop4, logical block 0, async page read [ 69.018934][ T6813] Buffer I/O error on dev loop4, logical block 0, async page read [ 69.021600][ T6813] Buffer I/O error on dev loop4, logical block 0, async page read [ 69.024203][ T6813] Buffer I/O error on dev loop4, logical block 0, async page read [ 69.027373][ T6813] Buffer I/O error on dev loop4, logical block 0, async page read [ 69.029925][ T6813] Buffer I/O error on dev loop4, logical block 0, async page read [ 69.032524][ T6813] Buffer I/O error on dev loop4, logical block 0, async page read [ 69.035027][ T6813] ldm_validate_partition_table(): Disk read failed. [ 69.036956][ T6813] Buffer I/O error on dev loop4, logical block 0, async page read [ 69.039363][ T6813] Buffer I/O error on dev loop4, logical block 0, async page read [ 69.043526][ T6813] Dev loop4: unable to read RDB block 0 [ 69.046455][ T6813] loop4: unable to read partition table [ 69.051539][ T6813] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 69.071121][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 69.127442][ T5142] ldm_validate_partition_table(): Disk read failed. [ 69.129536][ T5142] Dev loop4: unable to read RDB block 0 [ 69.131575][ T5142] loop4: unable to read partition table [ 69.144292][ T6820] xt_CT: No such helper "netbios-ns" [ 69.195748][ T6188] Bluetooth: hci4: Frame reassembly failed (-84) [ 69.308172][ T6818] syzkaller1: entered promiscuous mode [ 69.309963][ T6818] syzkaller1: entered allmulticast mode [ 69.425950][ T6848] netlink: 'syz.0.253': attribute type 5 has an invalid length. [ 69.535454][ T6863] netlink: 'syz.1.259': attribute type 4 has an invalid length. [ 69.537824][ T6863] netlink: 152 bytes leftover after parsing attributes in process `syz.1.259'. [ 69.546297][ T6863] .`: renamed from bond0 (while UP) [ 69.583596][ T64] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 69.697240][ T6885] tmpfs: Cannot enable quota on remount [ 69.733663][ T6886] netlink: 36 bytes leftover after parsing attributes in process `syz.0.265'. [ 69.772515][ T6888] netlink: 16 bytes leftover after parsing attributes in process `syz.1.267'. [ 69.791111][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 69.861416][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 69.879008][ T6898] dlm: no local IP address has been set [ 69.882172][ T6898] dlm: cannot start dlm midcomms -107 [ 69.914785][ T6902] use of bytesused == 0 is deprecated and will be removed in the future, [ 69.918569][ T6902] use the actual size instead. [ 70.309724][ T6917] syz.1.277 (6917) used greatest stack depth: 19304 bytes left [ 70.472513][ T6928] set match dimension is over the limit! [ 70.520695][ T6934] netlink: 'syz.3.283': attribute type 1 has an invalid length. [ 70.533263][ T6934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.691881][ T6943] vxfs: unable to read disk superblock at 1 [ 70.694916][ T6943] vxfs: unable to read disk superblock at 8 [ 70.696821][ T6943] vxfs: can't find superblock. [ 70.729975][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'. [ 71.061062][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.145189][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.211053][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 71.213970][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 71.216490][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 71.219444][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 71.222384][ T5742] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 71.222397][ T64] Bluetooth: hci4: command 0xfc11 tx timeout [ 71.222634][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 71.230709][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.234810][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 71.237592][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.352894][ T6956] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 71.358560][ T6956] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 71.444128][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 71.446281][ T9] usbtmc 5-1:16.0: can't read capabilities [ 71.495886][ T6958] wireguard0: entered promiscuous mode [ 71.652046][ T9] usb 5-1: USB disconnect, device number 3 [ 71.831216][ T6976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.298'. [ 71.834457][ T6976] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 71.838350][ T6976] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 71.948714][ T6988] veth1_macvtap: left allmulticast mode [ 71.950564][ T6988] veth1_macvtap: left promiscuous mode [ 72.081882][ T6995] netlink: 'syz.1.304': attribute type 1 has an invalid length. [ 72.097915][ T6995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.109392][ T6995] bond0: (slave gretap1): making interface the new active one [ 72.116457][ T6995] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 72.121104][ T6995] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6995 comm=syz.1.304 [ 72.133502][ T29] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 72.196405][ T5444] veth1_macvtap: entered promiscuous mode [ 72.198533][ T5444] veth1_macvtap: entered allmulticast mode [ 72.242015][ T7007] vlan2: entered promiscuous mode [ 72.243857][ T7007] hsr0: entered promiscuous mode [ 72.246056][ T7007] vlan2: entered allmulticast mode [ 72.247803][ T7007] hsr0: entered allmulticast mode [ 72.249936][ T7007] hsr_slave_0: entered allmulticast mode [ 72.252518][ T7007] hsr_slave_1: entered allmulticast mode [ 72.267179][ T7007] hsr_slave_0: left promiscuous mode [ 72.272724][ T7007] hsr_slave_1: left promiscuous mode [ 72.291562][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 72.294960][ T29] usb 7-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 72.298795][ T29] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 72.303969][ T29] usb 7-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 72.307476][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.315326][ T29] usb 7-1: config 0 descriptor?? [ 72.348273][ T7013] random: crng reseeded on system resumption [ 72.356471][ T7013] team0: No ports can be present during mode change [ 72.414318][ T7017] xt_hashlimit: overflow, rate too high: 0 [ 72.518999][ T6981] autofs: Unknown parameter '/dev/audio' [ 72.531744][ T29] usb 7-1: USB disconnect, device number 5 [ 72.831073][ T5835] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 72.991185][ T5835] usb 6-1: Using ep0 maxpacket: 8 [ 72.995236][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 72.998877][ T5835] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 73.003664][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.008057][ T5835] usb 6-1: config 0 descriptor?? [ 73.068310][ T7088] __nla_validate_parse: 1 callbacks suppressed [ 73.068321][ T7088] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.319'. [ 73.079185][ T7088] veth0_to_bond: default FDB implementation only supports local addresses [ 73.212332][ T5835] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 73.228330][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 73.228343][ T42] audit: type=1400 audit(1784987049.576:503): avc: denied { append } for pid=7110 comm="syz.2.324" name="frontend0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 73.247444][ T7112] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 73.250644][ T7112] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 73.255540][ T7112] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 73.258156][ T7112] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 73.288528][ T7117] binder: 7116:7117 ioctl c0306201 200000000080 returned -14 [ 73.294835][ T7117] bond0: (slave veth1_vlan): Error: Device is in use and cannot be enslaved [ 73.297956][ T7117] binder: 7116:7117 ioctl c0306201 2000000003c0 returned -14 [ 73.312351][ T9] usb 6-1: USB disconnect, device number 10 [ 73.379309][ T7124] netlink: 52 bytes leftover after parsing attributes in process `syz.2.326'. [ 73.556854][ T42] audit: type=1400 audit(1784987049.906:504): avc: denied { setopt } for pid=7142 comm="syz.2.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 73.564347][ T42] audit: type=1400 audit(1784987049.916:505): avc: denied { listen } for pid=7142 comm="syz.2.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 73.570200][ T42] audit: type=1400 audit(1784987049.916:506): avc: denied { accept } for pid=7142 comm="syz.2.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 73.671062][ T9] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 73.801091][ T9] usb 6-1: device descriptor read/64, error -71 [ 74.041110][ T9] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 74.043559][ T5814] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 74.171149][ T9] usb 6-1: device descriptor read/64, error -71 [ 74.191066][ T5814] usb 8-1: Using ep0 maxpacket: 32 [ 74.194674][ T5814] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 74.197859][ T5814] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 74.201595][ T5814] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 74.204587][ T5814] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 74.207431][ T5814] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 74.210943][ T5814] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 74.215455][ T5814] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 74.218890][ T5814] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.224728][ T5814] usb 8-1: config 0 descriptor?? [ 74.281651][ T9] usb usb6-port1: attempt power cycle [ 74.342471][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.331'. [ 74.346693][ T7162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.331'. [ 74.438686][ T5814] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 74.442620][ T7168] netlink: 128 bytes leftover after parsing attributes in process `syz.0.333'. [ 74.496847][ T7173] netlink: 'syz.0.335': attribute type 27 has an invalid length. [ 74.499343][ T7172] netlink: 'syz.0.335': attribute type 27 has an invalid length. [ 74.513455][ T7173] bond0: (slave bond_slave_1): Releasing backup interface [ 74.622523][ T9] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 74.629222][ T42] audit: type=1400 audit(1784987050.976:508): avc: denied { open } for pid=7176 comm="syz.0.337" path="/dev/ptyq4" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 74.640207][ T42] audit: type=1400 audit(1784987050.976:507): avc: denied { open } for pid=7176 comm="syz.0.337" path="/dev/ptyq4" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 74.643243][ T5789] usb 8-1: USB disconnect, device number 3 [ 74.649664][ C3] usblp0: nonzero read bulk status received: -71 [ 74.649867][ T9] usb 6-1: device descriptor read/8, error -71 [ 74.655483][ T42] audit: type=1400 audit(1784987050.986:509): avc: denied { ioctl } for pid=7176 comm="syz.0.337" path="/dev/ptyq4" dev="devtmpfs" ino=131 ioctlcmd=0x5436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 74.664470][ T42] audit: type=1400 audit(1784987050.986:510): avc: denied { ioctl } for pid=7176 comm="syz.0.337" path="socket:[14281]" dev="sockfs" ino=14281 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 74.675302][ T42] audit: type=1400 audit(1784987050.986:511): avc: denied { read write } for pid=7158 comm="syz.3.330" name="lp0" dev="devtmpfs" ino=2957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 74.685738][ T42] audit: type=1400 audit(1784987050.986:512): avc: denied { open } for pid=7158 comm="syz.3.330" path="/dev/usb/lp0" dev="devtmpfs" ino=2957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 74.758677][ T60] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 74.763339][ T60] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 74.790350][ T7183] fido_id[7183]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 74.827910][ T7185] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 74.832190][ T7185] SELinux: failed to load policy [ 74.881166][ T9] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 74.901659][ T9] usb 6-1: device descriptor read/8, error -71 [ 74.918889][ T7185] macvlan0: entered promiscuous mode [ 74.921806][ T7185] netlink: 'syz.0.339': attribute type 1 has an invalid length. [ 74.924858][ T7185] netlink: 'syz.0.339': attribute type 2 has an invalid length. [ 75.012126][ T9] usb usb6-port1: unable to enumerate USB device [ 75.032375][ T7191] syzkaller1: entered promiscuous mode [ 75.034941][ T7191] syzkaller1: entered allmulticast mode [ 75.039443][ T7191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.341'. [ 75.081129][ T5814] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 75.201160][ T7198] uhci_hcd 0000:00:1d.0: remove, state 4 [ 75.204043][ T7198] usb usb2: USB disconnect, device number 1 [ 75.220839][ T7198] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 75.231310][ T5814] usb 8-1: Invalid ep0 maxpacket: 32 [ 75.253955][ T7199] ehci-pci 0000:00:1d.7: remove, state 1 [ 75.261071][ T7199] usb usb1: USB disconnect, device number 1 [ 75.264447][ T7199] usb 1-1: USB disconnect, device number 2 [ 75.340147][ T7199] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 75.361076][ T5814] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 75.482740][ T7198] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 75.492920][ T7198] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 75.498437][ T7198] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 75.511111][ T5814] usb 8-1: Invalid ep0 maxpacket: 32 [ 75.511280][ T7198] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 75.513458][ T5814] usb usb8-port1: attempt power cycle [ 75.519924][ T7198] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 75.523140][ T7198] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 75.525682][ T7198] usb usb1: Product: EHCI Host Controller [ 75.527523][ T7198] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 75.529644][ T7198] usb usb1: SerialNumber: 0000:00:1d.7 [ 75.541117][ T7198] hub 1-0:1.0: USB hub found [ 75.545253][ T7198] hub 1-0:1.0: 6 ports detected [ 75.594623][ T7198] hub 3-0:1.0: USB hub found [ 75.597908][ T7198] hub 3-0:1.0: 2 ports detected [ 75.634078][ T7198] hub 4-0:1.0: USB hub found [ 75.637071][ T7198] hub 4-0:1.0: 2 ports detected [ 75.692307][ T7201] netlink: 68 bytes leftover after parsing attributes in process `syz.0.345'. [ 75.823354][ T10] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 75.853431][ T5814] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 75.876713][ T5814] usb 8-1: Invalid ep0 maxpacket: 32 [ 75.917419][ T7225] gfs2: error -5 reading superblock [ 75.955824][ T7228] tmpfs: Bad value for 'mpol' [ 75.955936][ T7229] tmpfs: Bad value for 'mpol' [ 76.001582][ T5814] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 76.018626][ T10] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 76.021996][ T10] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 76.024952][ T10] usb 1-1: Product: QEMU USB Tablet [ 76.026780][ T10] usb 1-1: Manufacturer: QEMU [ 76.026914][ T5814] usb 8-1: Invalid ep0 maxpacket: 32 [ 76.030810][ T10] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 76.033020][ T5814] usb usb8-port1: unable to enumerate USB device [ 76.061694][ T10] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0003/input/input11 [ 76.131506][ T10] hid-generic 0003:0627:0001.0003: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 76.155195][ T7234] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 76.166276][ T7234] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 76.174240][ T7235] xt_NFQUEUE: number of total queues is 0 [ 76.335964][ T7242] XFS (nbd0): SB validate failed with error -5. [ 76.690203][ T7257] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 76.781223][ T10] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 76.807903][ T7159] usblp0: removed [ 76.843207][ T7263] netlink: 24 bytes leftover after parsing attributes in process `syz.3.355'. [ 76.914966][ T7267] netlink: 60 bytes leftover after parsing attributes in process `syz.0.357'. [ 76.944348][ T7251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.951381][ T7251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.955207][ T7270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.958959][ T7270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.963276][ T7251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.966144][ T7251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.975630][ T7273] binder: 7271:7273 ioctl 2202 0 returned -22 [ 77.047053][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 77.050819][ T10] usb 6-1: can't read configurations, error -71 [ 77.092582][ T1170] Bluetooth: hci4: Frame reassembly failed (-84) [ 77.136682][ T7283] Bluetooth: hci4: Frame reassembly failed (-84) [ 77.658985][ T64] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 77.660744][ T7334] IPv6: Can't replace route, no match found [ 77.670363][ T7336] trusted_key: encrypted_key: insufficient parameters specified [ 77.886101][ T7344] xt_hashlimit: size too large, truncated to 1048576 [ 77.888057][ T7350] netlink: 'syz.2.374': attribute type 1 has an invalid length. [ 77.909521][ T7350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.929341][ T7350] vlan2: entered allmulticast mode [ 77.931532][ T7350] macsec0: entered allmulticast mode [ 77.933669][ T7350] veth1_macvtap: entered allmulticast mode [ 77.964674][ T7355] netlink: 'syz.3.375': attribute type 10 has an invalid length. [ 77.975311][ T7355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.978706][ T7355] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 77.984637][ T7355] tipc: Started in network mode [ 77.986214][ T7355] tipc: Node identity ac14140f, cluster identity 4711 [ 77.990053][ T7355] tipc: New replicast peer: 255.255.255.255 [ 77.992568][ T7355] tipc: Enabled bearer , priority 10 [ 77.997988][ T7355] lo speed is unknown, defaulting to 1000 [ 78.000654][ T7355] lo speed is unknown, defaulting to 1000 [ 78.004083][ T7355] lo speed is unknown, defaulting to 1000 [ 78.006716][ T7355] smbdirect: ib_dev[sy2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 78.011991][ T7355] smbdirect: ib_dev[sy2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 78.019493][ T7355] smbdirect: ib_dev[sy2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 78.027465][ T7355] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 78.038730][ T7355] infiniband sy2: RDMA CMA: cma_listen_on_dev, error -98 [ 78.047778][ T7362] : renamed from lo (while UP) [ 78.059966][ T7355] speed is unknown, defaulting to 1000 [ 78.064716][ T7355] speed is unknown, defaulting to 1000 [ 78.068518][ T7355] speed is unknown, defaulting to 1000 [ 78.072266][ T7355] speed is unknown, defaulting to 1000 [ 78.091660][ T7363] overlayfs: missing 'lowerdir' [ 78.290787][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 78.290798][ T42] audit: type=1400 audit(1784987054.636:539): avc: denied { write } for pid=7366 comm="syz.1.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 78.877730][ T7385] tipc: Enabling of bearer rejected, failed to enable media [ 78.993721][ T60] tipc: Node number set to 2886997007 [ 79.060082][ T7402] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 79.091377][ T29] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 79.151285][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 79.153469][ T5742] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 79.153497][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 79.164021][ T7410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.391'. [ 79.237144][ T7413] netlink: 'syz.1.392': attribute type 58 has an invalid length. [ 79.254051][ T7413] overlayfs: failed lookup in lower (newroot/118, name='bus', err=-40): overlapping layers [ 79.271200][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 79.276873][ T29] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 79.281245][ T29] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 79.284581][ T29] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 79.288291][ T29] usb 8-1: config 250 has no interface number 0 [ 79.291281][ T29] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 79.296028][ T29] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 79.300357][ T29] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 79.315152][ T29] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 79.324279][ T10] usb 7-1: config 0 has no interfaces? [ 79.326034][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 79.326049][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 79.326059][ T10] usb 7-1: Product: syz [ 79.326066][ T10] usb 7-1: Manufacturer: syz [ 79.326074][ T10] usb 7-1: SerialNumber: syz [ 79.328253][ T10] usb 7-1: config 0 descriptor?? [ 79.356494][ T29] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 79.362129][ T29] usb 8-1: config 250 interface 228 has no altsetting 0 [ 79.366531][ T29] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 79.370323][ T29] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 79.374003][ T29] usb 8-1: Product: syz [ 79.375772][ T29] usb 8-1: SerialNumber: syz [ 79.384591][ T29] hub 8-1:250.228: bad descriptor, ignoring hub [ 79.387321][ T29] hub 8-1:250.228: probe with driver hub failed with error -5 [ 79.404350][ T5842] IPVS: starting estimator thread 0... [ 79.473804][ T7430] siw: device registration error -23 [ 79.476397][ T7430] : renamed from lo (while UP) [ 79.480435][ T42] audit: type=1326 audit(1784987055.826:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.0.398" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08e619de99 code=0x0 [ 79.501181][ T7422] IPVS: using max 44 ests per chain, 105600 per kthread [ 79.542195][ T7439] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 79.544234][ T7439] syzkaller1: group set to 0 [ 79.588800][ T29] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 8 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 79.690679][ T7445] hfsplus: unable to find HFS+ superblock [ 79.768317][ T42] audit: type=1400 audit(1784987056.116:541): avc: denied { mounton } for pid=7447 comm="syz.1.404" path="/126/file0" dev="tmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 79.768427][ T7449] 9p: Bad value for 'rfdno' [ 79.885038][ T61] usb 8-1: USB disconnect, device number 8 [ 79.889927][ T61] usblp0: removed [ 80.378234][ T42] audit: type=1400 audit(1784987056.726:542): avc: denied { view } for pid=7450 comm="syz.0.405" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 80.511570][ T42] audit: type=1400 audit(1784987056.866:543): avc: denied { append } for pid=7458 comm="syz.3.407" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 80.621048][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 80.631663][ T7468] team0: No ports can be present during mode change [ 80.716455][ T42] audit: type=1400 audit(1784987057.066:544): avc: denied { setopt } for pid=7472 comm="syz.1.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.735470][ T42] audit: type=1400 audit(1784987057.086:545): avc: denied { read write } for pid=7475 comm="syz.3.412" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 80.745640][ T42] audit: type=1400 audit(1784987057.086:546): avc: denied { open } for pid=7475 comm="syz.3.412" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 80.755144][ T42] audit: type=1400 audit(1784987057.086:547): avc: denied { ioctl } for pid=7475 comm="syz.3.412" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x586d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 80.791135][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 80.796133][ T10] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 80.798910][ T10] usb 5-1: config 179 has no interface number 0 [ 80.801078][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 80.804654][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 80.805685][ T42] audit: type=1400 audit(1784987057.156:548): avc: denied { write } for pid=7475 comm="syz.3.412" name="/" dev="9p" ino=79691813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.808376][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 80.824014][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 80.827717][ T10] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 80.831959][ T10] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 80.834861][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.840666][ T7451] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 80.875042][ T7484] ip6gre1: entered promiscuous mode [ 80.880262][ T7484] ip6gre1: entered allmulticast mode [ 81.011778][ T7487] ip6gretap1: entered promiscuous mode [ 81.014105][ T7487] ip6gretap1: entered allmulticast mode [ 81.051325][ T7492] [U] V3Fپ"S/4:XTZWTLW= [ 81.059540][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input12 [ 81.094264][ T7495] [U] J"E:" [ 81.109859][ T5742] Bluetooth: hci1: unknown advertising packet type: 0x82 [ 81.109895][ T5742] Bluetooth: hci1: Dropping invalid advertising data [ 81.117906][ T5742] Bluetooth: hci1: Malformed LE Event: 0x02 [ 81.178392][ T7504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.421'. [ 81.261456][ T60] usb 5-1: USB disconnect, device number 4 [ 81.261454][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 81.261495][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 81.380328][ T7509] Bluetooth: hci4: Frame reassembly failed (-84) [ 81.385368][ T6191] Bluetooth: hci4: Frame reassembly failed (-84) [ 81.396277][ T41] cfg80211: failed to load regulatory.db [ 81.471527][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 81.498175][ T60] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 81.507506][ T60] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 81.547837][ T7522] fido_id[7522]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 81.594685][ T7524] mmap: syz.1.425 (7524) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 81.612737][ T9] usb 8-1: device descriptor read/64, error -71 [ 81.861062][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 81.922434][ T41] usb 7-1: USB disconnect, device number 6 [ 82.001070][ T9] usb 8-1: device descriptor read/64, error -71 [ 82.063379][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'. [ 82.063860][ T7541] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 82.067725][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.431'. [ 82.070902][ T7541] overlay: Bad value for 'workdir' [ 82.073347][ T7540] netlink: 'syz.1.431': attribute type 12 has an invalid length. [ 82.083408][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'. [ 82.083438][ T5783] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.086123][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.431'. [ 82.086142][ T7540] netlink: 'syz.1.431': attribute type 12 has an invalid length. [ 82.097368][ T5783] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.102364][ T5783] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.105884][ T5783] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.121270][ T9] usb usb8-port1: attempt power cycle [ 82.142663][ T7543] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 82.221164][ T7549] program syz.1.436 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.348535][ T7552] netlink: 'syz.2.434': attribute type 11 has an invalid length. [ 82.471147][ T9] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 82.491866][ T9] usb 8-1: device descriptor read/8, error -71 [ 82.741145][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 82.761533][ T9] usb 8-1: device descriptor read/8, error -71 [ 82.861142][ T60] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 82.871418][ T9] usb usb8-port1: unable to enumerate USB device [ 83.044821][ T60] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 83.048587][ T60] usb 6-1: config 0 has no interface number 0 [ 83.051366][ T60] usb 6-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 83.056309][ T60] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 83.057134][ T7563] netlink: 40 bytes leftover after parsing attributes in process `syz.2.441'. [ 83.060838][ T60] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 83.064949][ T7567] openvswitch: netlink: Actions may not be safe on all matching packets [ 83.068186][ T60] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 83.075872][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.083741][ T60] usb 6-1: config 0 descriptor?? [ 83.096509][ T60] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.120/input/input13 [ 83.190075][ T7571] XFS (nbd2): SB validate failed with error -5. [ 83.270095][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'. [ 83.273242][ T7579] netlink: 'syz.2.444': attribute type 10 has an invalid length. [ 83.276176][ T7579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.444'. [ 83.282479][ T7579] geneve2: entered promiscuous mode [ 83.284183][ T7579] geneve2: entered allmulticast mode [ 83.299771][ T5789] usb 6-1: USB disconnect, device number 17 [ 83.378538][ T7585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.446'. [ 83.394193][ T5742] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 83.557248][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 83.557263][ T42] audit: type=1400 audit(1784987059.906:570): avc: denied { getopt } for pid=7588 comm="syz.0.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 83.557500][ T7593] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 83.676214][ T42] audit: type=1400 audit(1784987060.026:571): avc: denied { bind } for pid=7596 comm="syz.2.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.690617][ T42] audit: type=1400 audit(1784987060.036:572): avc: denied { checkpoint_restore } for pid=7596 comm="syz.2.449" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.992100][ T42] audit: type=1400 audit(1784987060.346:573): avc: denied { write } for pid=7613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.034052][ T42] audit: type=1400 audit(1784987060.386:574): avc: denied { write } for pid=7618 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.126922][ T7622] x_tables: duplicate underflow at hook 2 [ 84.198360][ T7626] __nla_validate_parse: 2 callbacks suppressed [ 84.198376][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'. [ 84.241548][ T60] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 84.246808][ T42] audit: type=1400 audit(1784987060.596:575): avc: denied { append } for pid=7632 comm="syz.2.458" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 84.328257][ T7641] netlink: 'syz.2.461': attribute type 1 has an invalid length. [ 84.330809][ T42] audit: type=1400 audit(1784987060.676:576): avc: denied { write } for pid=7637 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.349468][ T7641] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.353004][ T7641] dummy0: entered promiscuous mode [ 84.368435][ T7641] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 84.373825][ T7641] netlink: 'syz.2.461': attribute type 10 has an invalid length. [ 84.376280][ T7641] netlink: 40 bytes leftover after parsing attributes in process `syz.2.461'. [ 84.381895][ T7641] bond2: (slave dummy0): Releasing backup interface [ 84.395182][ T7641] netlink: 'syz.2.461': attribute type 1 has an invalid length. [ 84.399174][ T42] audit: type=1400 audit(1784987060.746:577): avc: denied { write } for pid=7649 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.407856][ T60] usb 6-1: Using ep0 maxpacket: 8 [ 84.410637][ T60] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 84.413692][ T60] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.417416][ T60] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 84.420666][ T60] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 84.428394][ T60] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.435564][ T60] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 84.440591][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.465005][ T7659] netlink: 40 bytes leftover after parsing attributes in process `syz.2.462'. [ 84.470352][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'. [ 84.554150][ T42] audit: type=1400 audit(1784987060.906:578): avc: denied { getopt } for pid=7672 comm="syz.2.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 84.654178][ T60] usb 6-1: usb_control_msg returned -32 [ 84.655957][ T60] usbtmc 6-1:16.0: can't read capabilities [ 84.706579][ T7689] dwc3 pcspkr: missing memory resource [ 84.832577][ T42] audit: type=1400 audit(1784987061.186:579): avc: denied { mounton } for pid=7688 comm="syz.0.468" path="/121/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 84.840001][ T7694] overlay: ./file0 is not a directory [ 84.843560][ T7694] netlink: 'syz.0.468': attribute type 58 has an invalid length. [ 85.010698][ T7709] usbtmc 6-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 85.099805][ T7714] netlink: 64 bytes leftover after parsing attributes in process `syz.3.469'. [ 85.212471][ T5842] usb 6-1: USB disconnect, device number 18 [ 85.262994][ T7726] configfs-gadget.g1 gadget.0: HOST MAC a2:7e:96:e7:3d:a2 [ 85.265927][ T7726] configfs-gadget.g1 gadget.0: MAC 82:e4:b4:0a:04:6a [ 85.513019][ T5789] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 85.523932][ T7741] ntfs3(sr0): Primary boot signature is not NTFS. [ 85.527995][ T7741] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 85.589134][ T7749] netlink: 7 bytes leftover after parsing attributes in process `syz.3.476'. [ 85.619825][ T7751] netlink: 'syz.0.477': attribute type 1 has an invalid length. [ 85.634803][ T7751] 8021q: adding VLAN 0 to HW filter on device bond3 [ 85.649167][ T7755] /dev/nullb0: Can't open blockdev [ 85.682384][ T5789] usb 5-1: Dual-Role OTG device on HNP port [ 85.692061][ T5789] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 85.696108][ T5789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.724068][ T7762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.480'. [ 85.727117][ T7762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'. [ 85.735685][ T7747] macvlan2: entered promiscuous mode [ 85.737513][ T7747] macvlan2: entered allmulticast mode [ 85.738021][ T7763] input: syz0 as /devices/virtual/input/input15 [ 85.739334][ T7747] team0: Device macvlan2 is already an upper device of the team interface [ 85.770754][ T5789] cdc_ncm 5-1:1.0: MAC-Address: a2:7e:96:e7:3d:a2 [ 85.856888][ T5789] cdc_ncm 5-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), a2:7e:96:e7:3d:a2 [ 85.867135][ T7782] netlink: 40 bytes leftover after parsing attributes in process `syz.0.485'. [ 85.927509][ T7788] tmpfs: Bad value for 'mpol' [ 85.955558][ T5742] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 86.025424][ T7803] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 86.066356][ T7807] Driver unsupported XDP return value 0 on prog (id 57) dev N/A, expect packet loss! [ 86.155931][ T7818] dwc3 pcspkr: missing memory resource [ 86.200426][ T7823] overlayfs: conflicting options: userxattr,metacopy=on [ 86.487028][ T7849] bond2: (slave batadv0): Device is not our slave [ 86.489033][ T7849] bond2: option active_slave: invalid value (batadv0) [ 86.497440][ T7849] bond2 (unregistering): Released all slaves [ 86.561207][ T60] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 86.634934][ T7867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.657654][ T7867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.744053][ T60] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.747635][ T60] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 86.750588][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.754413][ T7875] kvm: Disabled LAPIC found during irq injection [ 86.757088][ T60] usb 7-1: config 0 descriptor?? [ 86.963132][ T60] usbhid 7-1:0.0: can't add hid device: -71 [ 86.970209][ T60] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 86.980832][ T60] usb 7-1: USB disconnect, device number 7 [ 87.033806][ T9] [drm:virtio_gpu_dequeue_ctrl_func] *ERROR* response 0x1205 (command 0x105) [ 87.042216][ T7903] netlink: 104 bytes leftover after parsing attributes in process `syz.3.508'. [ 87.072847][ T7909] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 87.084674][ T7909] syz.1.509 (7909): /proc/7908/oom_adj is deprecated, please use /proc/7908/oom_score_adj instead. [ 87.095199][ T5742] Bluetooth: hci2: unexpected event for opcode 0x041c [ 87.388917][ T7939] program syz.3.519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.392378][ T7939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7939 comm=syz.3.519 [ 87.418641][ T7943] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 87.423556][ T7943] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 87.431158][ T60] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 87.479106][ T7948] speed is unknown, defaulting to 1000 [ 87.555619][ T7953] binder: 7936:7953 ioctl c0306201 200000000180 returned -14 [ 87.611099][ T60] usb 7-1: Using ep0 maxpacket: 32 [ 87.614396][ T60] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.617907][ T60] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 87.620727][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.630472][ T60] usb 7-1: config 0 descriptor?? [ 87.635317][ T60] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 87.640175][ T60] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 87.861184][ C3] ldusb 7-1:0.0: Ring buffer overflow, 8 bytes dropped [ 87.941154][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.944618][ T61] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 87.948247][ T61] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 88.191921][ C0] ldusb 7-1:0.0: Ring buffer overflow, 8 bytes dropped [ 89.221294][ T7769] usb 7-1: USB disconnect, device number 8 [ 89.231565][ T7769] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 89.255480][ T7978] erspan0: entered promiscuous mode [ 89.260294][ T7978] erspan0: left promiscuous mode [ 89.287217][ T42] kauditd_printk_skb: 41 callbacks suppressed [ 89.287234][ T42] audit: type=1400 audit(1784987065.636:621): avc: denied { ioctl } for pid=7977 comm="syz.2.523" path="socket:[22655]" dev="sockfs" ino=22655 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.297839][ T5789] usb 5-1: USB disconnect, device number 5 [ 89.299195][ T42] audit: type=1400 audit(1784987065.646:622): avc: denied { write } for pid=7977 comm="syz.2.523" name="c.1" dev="configfs" ino=18222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.303680][ T5789] cdc_ncm 5-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 89.317814][ T7978] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 90.021060][ T61] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 90.023502][ T61] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 90.204519][ T7958] netlink: 'syz.3.522': attribute type 1 has an invalid length. [ 90.207998][ T7958] netlink: 232 bytes leftover after parsing attributes in process `syz.3.522'. [ 90.211883][ T7958] netlink: 'syz.3.522': attribute type 1 has an invalid length. [ 90.240595][ T7986] bridge_slave_0: left allmulticast mode [ 90.242684][ T7986] bridge_slave_0: left promiscuous mode [ 90.247870][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.248045][ T42] audit: type=1400 audit(1784987066.596:623): avc: denied { write } for pid=7984 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.280906][ T7986] bridge_slave_1: left allmulticast mode [ 90.284987][ T7986] bridge_slave_1: left promiscuous mode [ 90.287424][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.299020][ T42] audit: type=1400 audit(1784987066.646:624): avc: denied { write } for pid=7989 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.305756][ T7995] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 90.308155][ T7986] bond0: (slave bond_slave_0): Releasing backup interface [ 90.313736][ T7995] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 90.318464][ T7995] overlayfs: missing 'lowerdir' [ 90.336143][ T7986] team0: Port device team_slave_0 removed [ 90.345656][ T7986] team0: Port device team_slave_1 removed [ 90.348880][ T7986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.352626][ T7986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.356121][ T42] audit: type=1400 audit(1784987066.706:625): avc: denied { unmount } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 90.357024][ T7986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.367615][ T7986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.379708][ T7986] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 90.398769][ T7992] team0: Port device xfrm0 added [ 90.407657][ T42] audit: type=1400 audit(1784987066.756:626): avc: denied { setopt } for pid=7990 comm="syz.3.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.417444][ T7996] tipc: Started in network mode [ 90.419469][ T7996] tipc: Node identity 3ee30fd57ef5, cluster identity 4711 [ 90.422663][ T7996] tipc: Enabled bearer , priority 0 [ 90.453607][ T42] audit: type=1400 audit(1784987066.796:627): avc: denied { write } for pid=7998 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.474665][ T42] audit: type=1400 audit(1784987066.816:628): avc: denied { execute } for pid=8001 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 90.495426][ T42] audit: type=1400 audit(1784987066.816:629): avc: denied { execute_no_trans } for pid=8001 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 90.510814][ T5813] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.514856][ T5813] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.534607][ T42] audit: type=1400 audit(1784987066.886:630): avc: denied { write } for pid=8006 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.576091][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.590686][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.604201][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.618378][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.626834][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.662984][ T5742] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.663065][ T8023] loop6: detected capacity change from 0 to 128 [ 90.668159][ T5742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.670189][ T8023] ehci-pci 0000:00:1d.7: remove, state 1 [ 90.674752][ T5742] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.679646][ T8023] usb usb1: USB disconnect, device number 1 [ 90.687864][ T5742] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.693838][ T5742] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.704772][ T8023] usb 1-1: USB disconnect, device number 2 [ 90.723571][ T5813] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.729074][ T5813] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.891761][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.536'. [ 90.909101][ T5813] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.914731][ T5813] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.957171][ T8023] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 90.974401][ T8043] netlink: 'syz.0.537': attribute type 10 has an invalid length. [ 90.978389][ T8043] netlink: 40 bytes leftover after parsing attributes in process `syz.0.537'. [ 91.000319][ T8043] batadv0: entered promiscuous mode [ 91.006549][ T8043] batadv0: entered allmulticast mode [ 91.009422][ T8043] bridge0: port 1(batadv0) entered blocking state [ 91.011967][ T8043] bridge0: port 1(batadv0) entered disabled state [ 91.017411][ T8043] bridge0: port 1(batadv0) entered blocking state [ 91.019995][ T8043] bridge0: port 1(batadv0) entered forwarding state [ 91.025224][ T8012] speed is unknown, defaulting to 1000 [ 91.061996][ T5813] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.065225][ T5813] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.197385][ T8009] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 91.219942][ T8009] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 91.240005][ T8009] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 91.261138][ T8009] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 91.266386][ T8009] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 91.269920][ T8009] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 91.272750][ T8009] usb usb1: Product: EHCI Host Controller [ 91.274687][ T8009] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 91.277905][ T8009] usb usb1: SerialNumber: 0000:00:1d.7 [ 91.318607][ T8009] hub 1-0:1.0: USB hub found [ 91.326505][ T8009] hub 1-0:1.0: 6 ports detected [ 91.359022][ T8072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8278 sclass=netlink_route_socket pid=8072 comm=syz.0.540 [ 91.408732][ T5813] bridge_slave_1: left allmulticast mode [ 91.411751][ T5813] bridge_slave_1: left promiscuous mode [ 91.417745][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.424770][ T8009] hub 3-0:1.0: USB hub found [ 91.428463][ T5813] bridge_slave_0: left allmulticast mode [ 91.430539][ T5813] bridge_slave_0: left promiscuous mode [ 91.430640][ T8009] hub 3-0:1.0: 2 ports detected [ 91.435755][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.501236][ T5783] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 91.505959][ T5783] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 91.511748][ T8009] hub 4-0:1.0: USB hub found [ 91.518923][ T8009] hub 4-0:1.0: 2 ports detected [ 91.642637][ T61] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 91.717850][ T5813] bond0 (unregistering): (slave gretap1): Releasing active interface [ 91.753963][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.543'. [ 91.794913][ T5813] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.801237][ T5813] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.806049][ T5813] .` (unregistering): Released all slaves [ 91.813725][ T5813] bond0 (unregistering): Released all slaves [ 91.822904][ T5813] bond1 (unregistering): Released all slaves [ 91.854658][ T5835] tipc: Node number set to 1075187669 [ 91.856643][ T61] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 91.859546][ T61] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 91.862257][ T61] usb 1-1: Product: QEMU USB Tablet [ 91.864072][ T61] usb 1-1: Manufacturer: QEMU [ 91.865621][ T61] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 91.920307][ T5813] : left promiscuous mode [ 91.926796][ T61] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0005/input/input16 [ 91.967740][ T8012] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.970097][ T8012] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.974233][ T8012] bridge_slave_0: entered allmulticast mode [ 91.977491][ T8012] bridge_slave_0: entered promiscuous mode [ 91.981679][ T8012] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.984130][ T8012] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.986781][ T8012] bridge_slave_1: entered allmulticast mode [ 91.989895][ T8012] bridge_slave_1: entered promiscuous mode [ 92.018233][ T8012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.024838][ T8012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.031758][ T61] hid-generic 0003:0627:0001.0005: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 92.076703][ T8012] team0: Port device team_slave_0 added [ 92.082015][ T8094] pim6reg: entered allmulticast mode [ 92.097519][ T8012] team0: Port device team_slave_1 added [ 92.104332][ T8094] pim6reg: left allmulticast mode [ 92.209589][ T5444] 8021q: adding VLAN 0 to HW filter on device eth2 [ 92.213933][ T8012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.216943][ T8012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.242970][ T8012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.256003][ T8012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.259810][ T8012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.271098][ T8012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.309358][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.315972][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.325243][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.342832][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.353227][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.374466][ T8012] hsr_slave_0: entered promiscuous mode [ 92.375300][ T8012] hsr_slave_1: entered promiscuous mode [ 92.376016][ T8012] debugfs: 'hsr0' already exists in 'hsr' [ 92.376036][ T8012] Cannot create hsr debugfs directory [ 92.524398][ T8129] overlay: filesystem on ./file0 is read-only [ 92.539338][ T8129] netlink: 16 bytes leftover after parsing attributes in process `syz.3.553'. [ 92.633332][ T8012] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.646066][ T8012] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.659282][ T5444] 8021q: adding VLAN 0 to HW filter on device eth3 [ 92.671256][ T8012] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.676301][ T8012] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.679690][ T8111] speed is unknown, defaulting to 1000 [ 92.680716][ T8012] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.689821][ T8012] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.699621][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.702723][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.705720][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.708443][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.725065][ T5813] veth0_macvtap: left promiscuous mode [ 92.726964][ T5813] veth1_vlan: left promiscuous mode [ 92.729266][ T5813] veth0_vlan: left promiscuous mode [ 92.742096][ T64] Bluetooth: hci2: command tx timeout [ 92.814733][ T5813] veth1_macvtap (unregistering): left allmulticast mode [ 92.861112][ T5814] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 93.031115][ T5814] usb 8-1: Using ep0 maxpacket: 32 [ 93.035589][ T5814] usb 8-1: unable to get BOS descriptor or descriptor too short [ 93.039820][ T5814] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 5 [ 93.042924][ T5814] usb 8-1: can't read configurations, error -22 [ 93.063979][ T5813] team0 (unregistering): Port device team_slave_1 removed [ 93.075526][ T5813] team0 (unregistering): Port device team_slave_0 removed [ 93.096327][ T8145] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 93.171098][ T5814] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 93.195222][ T8012] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.200034][ T8012] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.331227][ T5814] usb 8-1: Using ep0 maxpacket: 32 [ 93.336999][ T5814] usb 8-1: unable to get BOS descriptor or descriptor too short [ 93.344250][ T5814] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 5 [ 93.347497][ T5814] usb 8-1: can't read configurations, error -22 [ 93.350679][ T5814] usb usb8-port1: attempt power cycle [ 93.364181][ T5444] 8021q: adding VLAN 0 to HW filter on device eth4 [ 93.414468][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 93.415233][ T8012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.482121][ T8012] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.504571][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.507332][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.513729][ T8111] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.516427][ T8111] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.518765][ T8111] bridge_slave_0: entered allmulticast mode [ 93.521699][ T8111] bridge_slave_0: entered promiscuous mode [ 93.525863][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.528318][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.533470][ T8111] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.535831][ T8111] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.539651][ T8111] bridge_slave_1: entered allmulticast mode [ 93.548528][ T8111] bridge_slave_1: entered promiscuous mode [ 93.571186][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 93.575082][ T10] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 93.578949][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.584765][ T10] usb 7-1: config 0 descriptor?? [ 93.596674][ T8111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.600395][ T10] as10x_usb: device has been detected [ 93.605105][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 93.608374][ T5444] 8021q: adding VLAN 0 to HW filter on device eth5 [ 93.620132][ T10] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 93.621255][ T8111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.651929][ T10] as10x_usb: error during firmware upload part1 [ 93.655131][ T10] Registered device nBox DVB-T Dongle [ 93.665328][ T8111] team0: Port device team_slave_0 added [ 93.671341][ T8111] team0: Port device team_slave_1 added [ 93.694103][ T8111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.696680][ T8111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.706772][ T8111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.712459][ T5814] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 93.715840][ T5813] IPVS: stop unused estimator thread 0... [ 93.720686][ T8111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.724348][ T8111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.732690][ T8111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.741826][ T5814] usb 8-1: Using ep0 maxpacket: 32 [ 93.747916][ T5814] usb 8-1: unable to get BOS descriptor or descriptor too short [ 93.753969][ T5814] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 5 [ 93.757347][ T5814] usb 8-1: can't read configurations, error -22 [ 93.768685][ T8111] hsr_slave_0: entered promiscuous mode [ 93.770947][ T8111] hsr_slave_1: entered promiscuous mode [ 93.773787][ T8111] debugfs: 'hsr0' already exists in 'hsr' [ 93.775618][ T8111] Cannot create hsr debugfs directory [ 93.792165][ T41] usb 7-1: USB disconnect, device number 9 [ 93.834079][ T41] Unregistered device nBox DVB-T Dongle [ 93.836860][ T41] as10x_usb: device has been disconnected [ 93.905050][ T5814] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 93.932560][ T5814] usb 8-1: Using ep0 maxpacket: 32 [ 93.937225][ T5814] usb 8-1: unable to get BOS descriptor or descriptor too short [ 93.943488][ T5814] usb 8-1: invalid descriptor for config index 0: type = 0x2, length = 5 [ 93.947323][ T5814] usb 8-1: can't read configurations, error -22 [ 93.950368][ T5814] usb usb8-port1: unable to enumerate USB device [ 93.957324][ T8111] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.972356][ T8111] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.975189][ T8111] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.979484][ T8111] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.983832][ T8111] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.987886][ T8111] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.990878][ T8111] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 93.995089][ T8111] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.046933][ T8012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.066673][ T8111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.084831][ T8111] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.095069][ T6198] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.097357][ T6198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.106938][ T6198] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.109970][ T6198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.140112][ T8111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.286660][ T8012] veth0_vlan: entered promiscuous mode [ 94.297529][ T8012] veth1_vlan: entered promiscuous mode [ 94.322910][ T8012] veth0_macvtap: entered promiscuous mode [ 94.330522][ T8012] veth1_macvtap: entered promiscuous mode [ 94.343029][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 94.343047][ T42] audit: type=1400 audit(1784987070.696:668): avc: denied { write } for pid=8238 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.349721][ T8012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.360817][ T8012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.372868][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.375772][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.381306][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.385326][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.423543][ T64] Bluetooth: hci0: command tx timeout [ 94.447381][ T42] audit: type=1400 audit(1784987070.796:669): avc: denied { write } for pid=8244 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.456281][ T6191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.459707][ T6191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.479673][ T8111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.519918][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.524152][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.545566][ T42] audit: type=1400 audit(1784987070.896:670): avc: denied { write } for pid=8247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.557963][ T42] audit: type=1400 audit(1784987070.906:671): avc: denied { mounton } for pid=8012 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 94.576301][ T42] audit: type=1400 audit(1784987070.906:672): avc: denied { mounton } for pid=8012 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 94.638126][ T42] audit: type=1400 audit(1784987070.986:673): avc: denied { write } for pid=8253 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.694596][ T8111] veth0_vlan: entered promiscuous mode [ 94.710530][ T8111] veth1_vlan: entered promiscuous mode [ 94.735146][ T8111] veth0_macvtap: entered promiscuous mode [ 94.747164][ T8111] veth1_macvtap: entered promiscuous mode [ 94.755339][ T42] audit: type=1400 audit(1784987071.106:674): avc: denied { map } for pid=8259 comm="syz.4.558" path="/dev/video0" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 94.770732][ T8111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.776101][ T8111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.799645][ T8143] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.804402][ T8143] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.810925][ T8143] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.815147][ T8143] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.831149][ T64] Bluetooth: hci2: command tx timeout [ 94.918589][ T6180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.924902][ T6180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.945267][ T42] audit: type=1400 audit(1784987071.296:675): avc: denied { read } for pid=8270 comm="syz.4.560" lport=54011 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 94.955248][ T42] audit: type=1400 audit(1784987071.296:676): avc: denied { setopt } for pid=8270 comm="syz.4.560" lport=54011 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 94.965101][ T6180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.968308][ T6180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.038791][ T8277] xt_bpf: check failed: parse error [ 95.067441][ T8280] warning: `syz.5.549' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.310174][ T8298] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 95.328744][ T8298] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 95.331888][ T8298] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 95.335769][ T8298] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 95.337734][ T8298] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 95.340222][ T8298] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 95.355837][ T8298] pci 0000:00:01.0: Adding to iommu group 1 [ 95.367219][ T8298] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 95.370004][ T8298] pci 0000:00:01.0: vgaarb: bridge control possible [ 95.372619][ T8298] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 95.387655][ T8298] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 95.393625][ T8298] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 95.400282][ T8298] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 95.448103][ T8298] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 95.450314][ T8298] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 95.451664][ T8300] [U] V3Fپ"S/4:XTZWTLW= [ 95.457164][ T8298] [drm] features: -virgl +edid -resource_blob -host_visible [ 95.457177][ T8298] [drm] features: -context_init -blob_alignment [ 95.464407][ T8299] [U] J"E:" [ 95.469825][ T8298] [drm] number of scanouts: 1 [ 95.471448][ T8298] [drm] number of cap sets: 0 [ 95.508178][ T8298] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 2 [ 95.553077][ T8298] virtio-pci 0000:00:01.0: [drm] fb1: virtio_gpudrmfb frame buffer device [ 95.770693][ T42] audit: type=1400 audit(1784987072.116:677): avc: denied { read } for pid=8316 comm="syz.5.575" dev="nsfs" ino=4026533969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 95.826160][ T8319] raw_sendmsg: syz.5.575 forgot to set AF_INET. Fix it! [ 96.358965][ T8341] netlink: 28 bytes leftover after parsing attributes in process `syz.5.580'. [ 96.443429][ T8351] netlink: 36 bytes leftover after parsing attributes in process `syz.2.584'. [ 96.501275][ T64] Bluetooth: hci0: command tx timeout [ 96.524061][ T8353] speed is unknown, defaulting to 1000 [ 96.608652][ T8364] Invalid argument reading file caps for ./file0 [ 96.719783][ T8366] netlink: 348 bytes leftover after parsing attributes in process `syz.2.589'. [ 96.722355][ T60] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 96.871076][ T60] usb 10-1: Using ep0 maxpacket: 16 [ 96.877139][ T60] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 96.893245][ T60] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 96.897073][ T60] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.900405][ T60] usb 10-1: Product: syz [ 96.909298][ T60] usb 10-1: Manufacturer: syz [ 96.911426][ T60] usb 10-1: SerialNumber: syz [ 96.912275][ T64] Bluetooth: hci2: command tx timeout [ 96.924681][ T60] usb 10-1: config 0 descriptor?? [ 96.929946][ T60] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 96.935519][ T60] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 97.214865][ T60] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 97.280793][ T60] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 97.287320][ T60] em28xx 10-1:0.0: board has no eeprom [ 97.322904][ T8384] No fuse device found [ 97.351115][ T60] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 97.360076][ T60] em28xx 10-1:0.0: dvb set to bulk mode. [ 97.365271][ T34] em28xx 10-1:0.0: Binding DVB extension [ 97.393819][ T60] usb 10-1: USB disconnect, device number 2 [ 97.441807][ T60] em28xx 10-1:0.0: Disconnecting em28xx [ 97.461571][ T34] em28xx 10-1:0.0: Registering input extension [ 97.465365][ T60] em28xx 10-1:0.0: Closing input extension [ 97.506051][ T8394] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 97.570500][ T60] em28xx 10-1:0.0: Freeing device [ 97.586761][ T8399] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.595' sets config #1 [ 97.881957][ T8410] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 97.900592][ T8410] sd 0:0:0:0: PR command failed: 1026 [ 97.903452][ T8410] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 97.906285][ T8410] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 98.182249][ T8424] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 98.569490][ T8458] erspan0: entered promiscuous mode [ 98.581169][ T64] Bluetooth: hci0: command tx timeout [ 98.657346][ T8464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.613'. [ 98.685161][ T8464] team0: Port device team_slave_0 removed [ 98.968598][ T8473] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 98.981489][ T64] Bluetooth: hci2: command tx timeout [ 99.062495][ T29] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 99.222371][ T29] usb 10-1: not running at top speed; connect to a high speed hub [ 99.226755][ T29] usb 10-1: config 1 interface 0 altsetting 19 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 99.230857][ T29] usb 10-1: config 1 interface 0 has no altsetting 0 [ 99.237575][ T29] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.242029][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.245061][ T29] usb 10-1: Product: syz [ 99.246499][ T29] usb 10-1: Manufacturer: ౝ [ 99.247981][ T29] usb 10-1: SerialNumber: syz [ 99.286513][ T8467] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 99.303410][ T8497] pim6reg1: renamed from bridge_slave_1 (while UP) [ 99.313545][ T8497] bridge0: port 2(pim6reg1) entered disabled state [ 99.430705][ T5842] IPVS: starting estimator thread 0... [ 99.435626][ T8502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.625'. [ 99.505526][ T29] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 99.517743][ T29] usb 10-1: USB disconnect, device number 3 [ 99.521086][ T8503] IPVS: using max 30 ests per chain, 72000 per kthread [ 99.591086][ T41] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 99.653172][ T8509] SELinux: policydb magic number 0xf97c0001 does not match expected magic number 0xf97cff8c [ 99.656425][ T8509] SELinux: failed to load policy [ 99.771068][ T41] usb 7-1: Using ep0 maxpacket: 8 [ 99.774958][ T41] usb 7-1: config 0 has an invalid interface number: 143 but max is 0 [ 99.778287][ T41] usb 7-1: config 0 has no interface number 0 [ 99.780882][ T41] usb 7-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 99.784972][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.793883][ T41] usb 7-1: config 0 descriptor?? [ 99.901646][ T41] viperboard 7-1:0.143: version 0.00 found at bus 007 address 010 [ 99.929441][ T41] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 99.935456][ T41] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5 [ 100.046470][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 100.046488][ T42] audit: type=1400 audit(1784987076.396:701): avc: denied { set_context_mgr } for pid=8512 comm="syz.5.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 100.052449][ T8513] binder: 8512:8513 ioctl c0306201 200000000080 returned -22 [ 100.063885][ T8513] binder: 8512:8513 ioctl c0306201 200000000040 returned -22 [ 100.066427][ T8513] binder: 8512:8513 ioctl c0306201 200000000640 returned -22 [ 100.111420][ T8516] netlink: 'syz.2.624': attribute type 10 has an invalid length. [ 100.126148][ T8516] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 100.195511][ T8519] netlink: 20 bytes leftover after parsing attributes in process `syz.5.629'. [ 100.331350][ T5735] udevd[5735]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 100.544328][ T42] audit: type=1400 audit(1784987076.896:702): avc: denied { ioctl } for pid=8535 comm="syz.3.634" path="socket:[25041]" dev="sockfs" ino=25041 ioctlcmd=0x6e88 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 100.607480][ T42] audit: type=1400 audit(1784987076.956:703): avc: denied { write } for pid=8539 comm="syz.3.635" name="/" dev="9p" ino=79691813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.617655][ T42] audit: type=1400 audit(1784987076.956:704): avc: denied { create } for pid=8539 comm="syz.3.635" name="file3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 100.651475][ T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 100.661178][ T64] Bluetooth: hci0: command tx timeout [ 100.801177][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 100.807849][ T10] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 100.811988][ T10] usb 10-1: config 0 has no interface number 0 [ 100.814647][ T10] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 100.818970][ T10] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 100.826299][ T10] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.831316][ T10] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 100.835362][ T10] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 100.840532][ T10] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 100.844930][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.850896][ T10] usb 10-1: config 0 descriptor?? [ 100.860778][ T10] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 101.014122][ T61] usb 7-1: USB disconnect, device number 10 [ 101.059804][ T8534] ldusb 10-1:0.55: Couldn't submit interrupt_in_urb -90 [ 101.065061][ T10] usb 10-1: USB disconnect, device number 4 [ 101.080377][ T10] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 101.589351][ T8554] sctp: [Deprecated]: syz.2.639 (pid 8554) Use of struct sctp_assoc_value in delayed_ack socket option. [ 101.589351][ T8554] Use struct sctp_sack_info instead [ 101.676878][ T8561] FAT-fs (nbd2): unable to read boot sector [ 101.714016][ T42] audit: type=1400 audit(1784987078.066:705): avc: denied { setattr } for pid=8563 comm="syz.2.643" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 101.928758][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.647'. [ 101.934072][ T8577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.936460][ T8577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.940184][ T8577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.944774][ T8577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.106914][ T8589] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 102.115363][ T8589] netlink: 56 bytes leftover after parsing attributes in process `syz.3.646'. [ 102.250953][ T42] audit: type=1400 audit(1784987078.596:706): avc: denied { getopt } for pid=8600 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.308878][ T8607] fuse: Bad value for 'fd' [ 102.388276][ T8613] Cannot find add_set index 0 as target [ 102.572092][ T8625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.659'. [ 102.575357][ T8625] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 102.617640][ T8627] 9pnet_virtio: no channels available for device 127.0.0.1 [ 102.633098][ T8629] syz_tun: entered allmulticast mode [ 102.640405][ T8627] overlayfs: upper fs does not support file handles, falling back to index=off. [ 102.692089][ T8635] netlink: 24 bytes leftover after parsing attributes in process `syz.5.663'. [ 102.749895][ T42] audit: type=1800 audit(1784987079.096:707): pid=8638 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.664" name="file0" dev="overlay" ino=767 res=0 errno=0 [ 102.822732][ T42] audit: type=1400 audit(1784987079.176:708): avc: denied { append } for pid=8640 comm="syz.2.665" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 102.838412][ T42] audit: type=1400 audit(1784987079.186:709): avc: denied { create } for pid=8640 comm="syz.2.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 102.839932][ T8642] netlink: 'syz.2.665': attribute type 1 has an invalid length. [ 102.851055][ T42] audit: type=1400 audit(1784987079.186:710): avc: denied { bind } for pid=8640 comm="syz.2.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 102.859079][ T8642] netlink: 5120 bytes leftover after parsing attributes in process `syz.2.665'. [ 102.863856][ T8645] netlink: 'syz.2.665': attribute type 1 has an invalid length. [ 102.869416][ T8645] netlink: 5120 bytes leftover after parsing attributes in process `syz.2.665'. [ 102.992171][ T8628] syz_tun: left allmulticast mode [ 102.999924][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.669'. [ 103.019705][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.669'. [ 103.024448][ T8651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.669'. [ 103.151105][ T10] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 103.153974][ T8653] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 103.321076][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 103.323936][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 103.329309][ T10] usb 10-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 103.332295][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.335092][ T10] usb 10-1: Product: syz [ 103.336439][ T10] usb 10-1: Manufacturer: syz [ 103.337991][ T10] usb 10-1: SerialNumber: syz [ 103.341670][ T10] usb 10-1: config 0 descriptor?? [ 103.350797][ T10] hub 10-1:0.0: bad descriptor, ignoring hub [ 103.353411][ T10] hub 10-1:0.0: probe with driver hub failed with error -5 [ 103.357094][ T10] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.531416][ T8695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.679'. [ 103.577580][ T8698] syzkaller0: entered promiscuous mode [ 103.579409][ T8698] syzkaller0: entered allmulticast mode [ 103.584795][ T8700] overlay: Bad value for 'index' [ 103.618111][ T61] usb 10-1: USB disconnect, device number 5 [ 104.034243][ T8713] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 104.218751][ T8716] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 104.218751][ T8716] The task syz.5.687 (8716) triggered the difference, watch for misbehavior. [ 104.937024][ T8724] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 104.941185][ T8724] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 104.966007][ T8724] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 104.976121][ T8724] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 104.978819][ T8724] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 104.990064][ T8724] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 105.122078][ T8737] netlink: 'syz.5.690': attribute type 1 has an invalid length. [ 105.161655][ T8737] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.195014][ T8739] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 105.210959][ T8739] block device autoloading is deprecated and will be removed. [ 105.230830][ T8737] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 105.244930][ T8740] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 105.269694][ T8737] netlink: 'syz.5.690': attribute type 10 has an invalid length. [ 105.273116][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 105.298278][ T8737] dummy0: entered promiscuous mode [ 105.303063][ T13] bond1: (slave dummy0): link status up again after 0 ms [ 105.303111][ T8737] bond1: (slave dummy0): Removing an active aggregator [ 105.313159][ T8737] bond1: (slave dummy0): Releasing backup interface [ 105.498347][ T8746] bridge0: port 3(syz_tun) entered blocking state [ 105.510589][ T8746] bridge0: port 3(syz_tun) entered disabled state [ 105.513504][ T8746] syz_tun: entered allmulticast mode [ 105.518557][ T8746] syz_tun: entered promiscuous mode [ 105.522385][ T8746] bridge0: port 3(syz_tun) entered blocking state [ 105.525132][ T8746] bridge0: port 3(syz_tun) entered forwarding state [ 105.700046][ T8762] netlink: 'syz.5.696': attribute type 10 has an invalid length. [ 105.706431][ T8762] team_slave_1: entered promiscuous mode [ 105.708390][ T8762] team_slave_1: entered allmulticast mode [ 105.712929][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 105.712940][ T42] audit: type=1400 audit(1784987082.066:725): avc: denied { write } for pid=8759 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.724222][ T8762] team0: Port device team_slave_1 removed [ 105.726528][ T8762] bridge0: port 3(team_slave_1) entered blocking state [ 105.728789][ T8762] bridge0: port 3(team_slave_1) entered disabled state [ 105.778956][ T42] audit: type=1400 audit(1784987082.126:726): avc: denied { write } for pid=8765 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.862786][ T42] audit: type=1400 audit(1784987082.216:727): avc: denied { write } for pid=8776 comm="syz.5.698" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 105.870099][ T8778] trusted_key: encrypted_key: insufficient parameters specified [ 106.162578][ T8797] kAFS: unable to lookup cell '(,cL' [ 106.442128][ T42] audit: type=1400 audit(1784987082.796:728): avc: denied { write } for pid=8804 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.491443][ T42] audit: type=1400 audit(1784987082.846:729): avc: denied { write } for pid=8807 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.866251][ T42] audit: type=1400 audit(1784987083.216:730): avc: denied { write } for pid=8812 comm="syz.3.707" name="functions" dev="configfs" ino=18217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.869558][ T8813] ================================================================== [ 106.875126][ T42] audit: type=1400 audit(1784987083.216:731): avc: denied { setattr } for pid=8812 comm="syz.3.707" name="c_srate" dev="configfs" ino=26242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 106.877881][ T8813] BUG: KASAN: invalid-free in f_uac2_opts_p_srate_store+0x1d4/0x260 [ 106.877921][ T8813] Free of addr ffff888059c9488c by task syz.3.707/8813 [ 106.877936][ T8813] [ 106.877949][ T8813] CPU: 2 UID: 0 PID: 8813 Comm: syz.3.707 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.877978][ T8813] Tainted: [L]=SOFTLOCKUP [ 106.877987][ T8813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.877999][ T8813] Call Trace: [ 106.878006][ T8813] [ 106.878014][ T8813] dump_stack_lvl+0x100/0x190 [ 106.878038][ T8813] print_report+0x13d/0x4b0 [ 106.878067][ T8813] ? __virt_addr_valid+0x239/0x430 [ 106.878094][ T8813] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 106.878122][ T8813] kasan_report_invalid_free+0xb8/0x190 [ 106.878149][ T8813] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 106.878197][ T8813] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 106.878226][ T8813] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 106.878252][ T8813] check_slab_allocation+0xe1/0xf0 [ 106.878274][ T8813] ? f_uac2_opts_p_srate_store+0x1b0/0x260 [ 106.878297][ T8813] kfree+0x1b6/0x6c0 [ 106.878324][ T8813] ? __asan_memcpy+0x3c/0x60 [ 106.878345][ T8813] f_uac2_opts_p_srate_store+0x1d4/0x260 [ 106.878372][ T8813] ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10 [ 106.878398][ T8813] ? configfs_write_iter+0x388/0x4e0 [ 106.878420][ T8813] configfs_write_iter+0x302/0x4e0 [ 106.878441][ T8813] vfs_write+0x6ac/0x1050 [ 106.878469][ T8813] ? __pfx_configfs_write_iter+0x10/0x10 [ 106.878490][ T8813] ? __pfx_vfs_write+0x10/0x10 [ 106.878524][ T8813] ksys_write+0x12a/0x250 [ 106.878559][ T8813] ? __pfx_ksys_write+0x10/0x10 [ 106.878590][ T8813] do_syscall_64+0x115/0x870 [ 106.878610][ T8813] ? clear_bhb_loop+0x40/0x90 [ 106.878631][ T8813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.878649][ T8813] RIP: 0033:0x7efd6cb9de99 [ 106.878666][ T8813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.878685][ T8813] RSP: 002b:00007efd6d9ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 106.878706][ T8813] RAX: ffffffffffffffda RBX: 00007efd6ce25fa0 RCX: 00007efd6cb9de99 [ 106.878718][ T8813] RDX: 0000000000000101 RSI: 0000200000000d40 RDI: 000000000000000c [ 106.878731][ T8813] RBP: 00007efd6cc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 106.878742][ T8813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.878753][ T8813] R13: 00007efd6ce26038 R14: 00007efd6ce25fa0 R15: 00007ffcc31587b8 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 106.878771][ T8813] [ 106.878778][ T8813] [ 106.981708][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.983958][ T8813] Allocated by task 8813: [ 106.983972][ T8813] kasan_save_stack+0x30/0x50 [ 106.983997][ T8813] kasan_save_track+0x14/0x30 [ 106.984013][ T8813] __kasan_kmalloc+0xaa/0xb0 [ 106.984029][ T8813] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 106.984051][ T8813] kstrdup+0x51/0xe0 [ 106.984068][ T8813] f_uac2_opts_p_srate_store+0x113/0x260 [ 106.984092][ T8813] configfs_write_iter+0x302/0x4e0 [ 106.984110][ T8813] vfs_write+0x6ac/0x1050 [ 106.984135][ T8813] ksys_write+0x12a/0x250 [ 106.986899][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.990148][ T8813] do_syscall_64+0x115/0x870 [ 106.990195][ T8813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.990214][ T8813] [ 106.990219][ T8813] The buggy address belongs to the object at ffff888059c94880 [ 106.990219][ T8813] which belongs to the cache kmalloc-32 of size 32 [ 106.990234][ T8813] The buggy address is located 12 bytes inside of [ 106.990234][ T8813] 18-byte region [ffff888059c94880, ffff888059c94892) [ 106.990251][ T8813] [ 106.990256][ T8813] The buggy address belongs to the physical page: [ 106.990265][ T8813] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59c94 [ 106.990282][ T8813] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 106.990298][ T8813] page_type: f5(slab) [ 106.990313][ T8813] raw: 00fff00000000000 ffff88801bc42780 dead000000000100 dead000000000122 [ 106.990329][ T8813] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000 [ 106.990339][ T8813] page dumped because: kasan: bad access detected [ 106.990348][ T8813] page_owner tracks the page as allocated [ 106.990354][ T8813] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8012, tgid 8012 (syz-executor), ts 94407791589, free_ts 94401826013 [ 106.990386][ T8813] post_alloc_hook+0xfd/0x120 [ 106.990413][ T8813] get_page_from_freelist+0xf48/0x3530 [ 106.990431][ T8813] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 106.990449][ T8813] new_slab+0xa2/0x640 [ 106.990465][ T8813] refill_objects+0xe3/0x410 [ 106.990480][ T8813] __pcs_replace_empty_main+0x376/0x680 [ 106.990508][ T8813] __kmalloc_cache_noprof+0x479/0x6c0 [ 106.990541][ T8813] kmem_cache_free+0x412/0x6b0 [ 106.990558][ T8813] __fput+0x68d/0xb50 [ 106.990578][ T8813] fput_close_sync+0x118/0x250 [ 106.990599][ T8813] __x64_sys_close+0x8b/0x120 [ 106.990623][ T8813] do_syscall_64+0x115/0x870 [ 106.990641][ T8813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.990659][ T8813] page last free pid 33 tgid 33 stack trace: [ 106.990669][ T8813] __free_frozen_pages+0x79f/0x1090 [ 106.990694][ T8813] tlb_remove_table_rcu+0x2cf/0x380 [ 106.990719][ T8813] rcu_core+0x5a2/0x10d0 [ 106.990743][ T8813] handle_softirqs+0x1ea/0x9b0 [ 106.990765][ T8813] run_ksoftirqd+0x38/0x60 [ 106.990788][ T8813] smpboot_thread_fn+0x3d3/0xaa0 [ 106.990813][ T8813] kthread+0x370/0x450 [ 106.990830][ T8813] ret_from_fork+0x72b/0xd50 [ 106.990853][ T8813] ret_from_fork_asm+0x1a/0x30 [ 106.990880][ T8813] [ 106.990885][ T8813] Memory state around the buggy address: [ 106.990894][ T8813] ffff888059c94780: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 106.990907][ T8813] ffff888059c94800: 00 00 00 fc fc fc fc fc fa fb fb fb fc fc fc fc [ 106.990921][ T8813] >ffff888059c94880: 00 00 02 fc fc fc fc fc 00 00 00 fc fc fc fc fc [ 106.990932][ T8813] ^ [ 106.990941][ T8813] ffff888059c94900: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 106.990954][ T8813] ffff888059c94980: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 106.990965][ T8813] ================================================================== [ 107.014111][ T8813] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 107.014132][ T8813] CPU: 2 UID: 0 PID: 8813 Comm: syz.3.707 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.014158][ T8813] Tainted: [L]=SOFTLOCKUP [ 107.014191][ T8813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.014203][ T8813] Call Trace: [ 107.014209][ T8813] [ 107.014218][ T8813] dump_stack_lvl+0x100/0x190 [ 107.014245][ T8813] vpanic+0x552/0x970 [ 107.014261][ T8813] ? __pfx_vpanic+0x10/0x10 [ 107.014278][ T8813] ? mark_held_locks+0x40/0x70 [ 107.014304][ T8813] panic+0xd1/0xe0 [ 107.014321][ T8813] ? __pfx_panic+0x10/0x10 [ 107.014339][ T8813] ? preempt_schedule_common+0x42/0xc0 [ 107.014373][ T8813] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 107.014402][ T8813] check_panic_on_warn.cold+0x19/0x34 [ 107.014420][ T8813] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 107.014442][ T8813] end_report.part.0+0x3a/0x90 [ 107.014467][ T8813] kasan_report_invalid_free.cold+0xd/0x12 [ 107.014495][ T8813] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 107.014523][ T8813] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 107.014555][ T8813] ? f_uac2_opts_p_srate_store+0x1d4/0x260 [ 107.014579][ T8813] check_slab_allocation+0xe1/0xf0 [ 107.014602][ T8813] ? f_uac2_opts_p_srate_store+0x1b0/0x260 [ 107.014627][ T8813] kfree+0x1b6/0x6c0 [ 107.014652][ T8813] ? __asan_memcpy+0x3c/0x60 [ 107.014672][ T8813] f_uac2_opts_p_srate_store+0x1d4/0x260 [ 107.014698][ T8813] ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10 [ 107.014725][ T8813] ? configfs_write_iter+0x388/0x4e0 [ 107.014750][ T8813] configfs_write_iter+0x302/0x4e0 [ 107.014772][ T8813] vfs_write+0x6ac/0x1050 [ 107.014800][ T8813] ? __pfx_configfs_write_iter+0x10/0x10 [ 107.014823][ T8813] ? __pfx_vfs_write+0x10/0x10 [ 107.014857][ T8813] ksys_write+0x12a/0x250 [ 107.014885][ T8813] ? __pfx_ksys_write+0x10/0x10 [ 107.014916][ T8813] do_syscall_64+0x115/0x870 [ 107.014937][ T8813] ? clear_bhb_loop+0x40/0x90 [ 107.014959][ T8813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.014978][ T8813] RIP: 0033:0x7efd6cb9de99 [ 107.014994][ T8813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.213815][ T8813] RSP: 002b:00007efd6d9ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 107.216810][ T8813] RAX: ffffffffffffffda RBX: 00007efd6ce25fa0 RCX: 00007efd6cb9de99 [ 107.219644][ T8813] RDX: 0000000000000101 RSI: 0000200000000d40 RDI: 000000000000000c [ 107.222597][ T8813] RBP: 00007efd6cc33eaf R08: 0000000000000000 R09: 0000000000000000 [ 107.225412][ T8813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.228077][ T8813] R13: 00007efd6ce26038 R14: 00007efd6ce25fa0 R15: 00007ffcc31587b8 [ 107.230881][ T8813] [ 107.232626][ T8813] Kernel Offset: disabled [ 107.233957][ T8813] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:44:43 Registers: info registers vcpu 0 CPU#0 RAX=0000000000004008 RBX=ffff88805a4430e0 RCX=0000000000000200 RDX=00000000ffffbff7 RSI=00000000fffffffe RDI=00000000ffffffff RBP=ffff88805a442540 RSP=ffffc900062e76d0 R8 =00000000ffffffff R9 =0000000000000007 R10=0000000000000000 R11=0000000000000000 R12=0000000000000007 R13=0000000000000000 R14=0000000000000000 R15=0000000000020000 RIP=ffffffff81e5dce2 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f3a4be936c0 ffffffff 00c00000 GS =0000 ffff8880d5dde000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f59f595da08 CR3=0000000028f6c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000fda3b69a DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020100001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a4be92be0 0000003000000010 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff22a076e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff22a076e6 00007fff22a076ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a4b034492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a4b0344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a4b034636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a4b0344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a732520656c6261 7462650064656c69 61662029736e7465 6e28736e74657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f56000540494744 514740004140494c 4443050c564b5140 4b0d564b51405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3a4b1f05f8 00007f3a4b1f05c8 00007f3a4b1f0600 00007f3a4b1f05e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffffffff8ebe8180 RCX=ffffc90004cdfd64 RDX=0000000000000001 RSI=0000000000000001 RDI=ffffffff8c401580 RBP=ffffffff829a3c48 RSP=ffffc90004cdfd58 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff888033122540 R13=dffffc0000000000 R14=0000000000000202 R15=0000000000000001 RIP=ffffffff81e5f840 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558d579500 ffffffff 00c00000 GS =0000 ffff8880d5ede000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2f52ce CR3=0000000036b80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff208f7ff0 0000003000000018 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 347a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff208fb446 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff208fb446 00007fff208fb44c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7d9e34492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7d9e344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7d9e34636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc7d9e344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000c7c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000029 0000000000000000 0000000000000000 0000000000000c7c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a37415 RDI=ffffffff9ba05b40 RBP=ffffffff9ba05b00 RSP=ffffc9000638f5b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=7a7973203a6d6d43 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b6f8203 R15=ffffffff85a373b0 RIP=ffffffff85a3743f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007efd6d9ae6c0 ffffffff 00c00000 GS =0000 ffff8880d5fde000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007efd6cb89000 CR3=000000004e072000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff80 Opmask01=0000000001000003 Opmask02=00000000fc02fefc Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc3158ca6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc3158ca6 00007ffcc3158cac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd6cc34492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd6cc344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd6cc34636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd6cc344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd6cdf05f8 00007efd6cdf05c8 00007efd6cdf0600 00007efd6cdf05e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 00000000000001f0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000e9df9 RBX=ffff88801eed2540 RCX=ffffffff8bbaf2d5 RDX=0000000000000000 RSI=ffffffff8e1a55a5 RDI=ffffffff8c401580 RBP=ffffed1003dda4a8 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d4e678d R10=ffff88806a733c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bbad89f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60de000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f59f4beb580 CR3=0000000028f6c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000