last executing test programs: 3.533555082s ago: executing program 1 (id=106): r0 = socket(0x40000000015, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0xfe8e, 0x12) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000080)="429b9957c5948ce5a7fadf235fc6a774d1b81a6f56202e9ad48fb70300771d4ab686a8", 0x23}, {&(0x7f0000000100)="48636c8a7e79b09442f1ab447cfe2fbd66b95f56bf3de5ef0a56d6", 0x1b}, {&(0x7f00000001c0)="94567c4199a46819a9e909a6efe18ab8876740091f5870c4d2da5008c8da80fcee59e82b224cb8182558c13e929f3875ce783ad74647d301b829ed32e4b2b78625ce6dc62be1d67419cb3c96ae33469602b28a14e917e375df5f52d884010ae99a623c82c533c098a489cdfcdff96697ea0528e4693a", 0x76}, {&(0x7f0000000240)="0fa8e836f72ec2e5392df27a1cb2a97ef06841489e44f635d72c39bcaabcac05836d09043ca277a7b8266f51e5fb5133e59f9d9bca7bbf442861f3a53b5a0246f48606b42a18dcb0669e0fa9", 0x4c}, {&(0x7f00000002c0)="56436d4f2c167100ae7e7628cf7e103ea17dd6fd85f75040f75ad0b31ac03f2808c8135567d30675f05649c6430739bd7300cc517243f06d4538564dc413612a979f14a11cfa429dfaa2d20ba38e7505b6160ff703bbe690d3ca5dac5ed210b7adc7a47714be16900b1fe807b5d4736e4a6b912ecb9dce25ee8bf6be60503c98c67b45b9568db051acf5f870a78357035b06cde0a6dec2b6a6b0db2281927127dcd39d9f2afb59ebf6821c3ce199690f298ab4293f75d37b0b2d7f36e80c343529c46c71f252fec1b77389fa07afd8cc872cdcedb75185", 0xfffffffffffffdbb}, {&(0x7f00000003c0)="3b94878e9b6157332daf7d2ff336ff7032fc7e04761fd667ed1d1ab4d9b081c17b6d2eb566b63ab3c01dee935d4bf9079517336f83cc0a60b5e4e3040f78f659c254ac81f76daac939fcd23d260b2e413cde59c233b30fa7038d1cda2d8b983aa085530ef909c1155ed533ef0ec6fd7083d5fbcdd3fba570c2573db65107328787790683bfd4cb5e8be1b01d2b3cb10265323a15d6112fcb115bfebdebddab54835491344e23038d5d3d72479cfde2554556141f8d2187d1d21bb7090344a829379215109c01ed64acbdc13196491ee7bafb7bf15744012cdc667aab", 0xdc}], 0x6) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff6000/0x3000)=nil, 0x2000}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x65) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0xfffffffffffffe33) 3.356211386s ago: executing program 0 (id=109): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmmsg$inet(r1, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200040c0) close(r1) close(r2) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@private=0xa010101, 0x4908, 0x0, 0x1}}, 0x44) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r5 = socket$inet(0x2, 0x1, 0x6) connect(r5, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)='devices.allow\x00', 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000540), 0x8) write$cgroup_devices(r6, &(0x7f0000000500)={'b', ' *:* ', 'rwm\x00'}, 0xa) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r7) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x6, 0x2, 0x9, 0x42, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r9, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)='%-010d \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r10}, &(0x7f0000000780)=0x40000000, &(0x7f00000007c0)='%pS \x00', 0x2}, 0x20) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4080000000000006910280000000000de08000000000000950000000000000005ddda6f2f9bd75f35d2ed599e9d7b67a2ca9fcb72e914bd23a82421f8c5c5d7d535a9c42f4f55d02c855d3c4893e109a9463c96f306626890a007006b144e5cdad4d0bfa19f9b245868eb684b60c323ae04886888b18af300e5"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) 3.077645618s ago: executing program 0 (id=111): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0xf, 0x282880) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000040)=0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)={{0x0, 0x7fffffffffffffff, 0xbb6a, 0x8f57, 0x4aa, 0x8000, 0x401, 0x8, 0xe2c, 0x54803ec5, 0x1, 0x0, 0x9, 0x8064, 0xb618}, 0x8, [0x0]}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r4, &(0x7f0000000e80)=[{{&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000009c0)=[{&(0x7f00000006c0)="2b3dcb037cf6eefdd865abf4cb8b1d17613cba0add0fc611e8e8edeb824ba694c30ed1d75eafde7ef357f25d275ad90b0ad65c4e3181039007d9096ab1a098bbd39415dc16914bbe91674f0deb1055864e2dc88798e3b3bf82e866c36f30af92cf204c04b58ef42e2744042bb5d5af77aff174539bd796f35aedbcaef63cce67d65f3321eb7700beef47308d9fc2b6d1a18ef9b20484c097d27c0b2fc3b708c2897b9f55dd06c88b6db07b64431bff78a7eea64b1300bd6de2393e21f640e8b377e934245cd31a70d7f4823df271b235bd3d0b356a6bf5e7bd476d4ab8dd640f746dc0b90e080a494f", 0xe9}, {&(0x7f0000001640)="fd3f12b11bb32a8a76e0167a4ce0643bb98d1c07715d51090783781fefb0a7b2b3e618c882ec4d2251b83d733eb420ce93c78f2f93f899e2bf36f1c58b9703d0bab566913ef2cb5b3e51b06e5925d85e6e4fd80f16431e01f64990254de92d67902dd61b93f3006dfe188282923bb8aa3c7af13dec03b0521221868f11d0301d273e3f6730b876137c5c8491b987f8fe67e9cf64d9bc7957faffffffffffffffda1ad913d6ef97445fd9e0b8e60e9b348b28dfb7b94602580a29cfc860269444ae52956f32fa48edaa03fc8358e1815c8c44bc62e0665485bc4457e57b4d9024abfcfa4f1b321d946376f9f99a5ad5c81e9b", 0xffffffaa}, {&(0x7f0000000440)="862581263117a595cc8b4d91c81820960c318c8396349d812700e75e525fa32b7544ceb489026264e882e6b071a12ffdb5e7ff35e2e1002046d831da9a75680854fe172d076b8dc3803ff9d26d49bf4b103373dff834806016adcd95ad25f436a81a0bd5d8cdc59c4ade543b23b68110ccfd37ccc3c778d40629a5e61b0e8cd6af005f30363c40c4bca955232d75b1609cd8da8771356513bf156c823aed462a5773220cfff599bc209f5f2d7baf2ac7cb7a896eb9708cef3b8c24cb243997889d197ee8bc4ab9a5c69628751008577fcf4074fbdee3591a3a2641", 0xdb}, {&(0x7f0000000240)="1da91706353d6712a31f3550b813a7c81cf5d7fa00000082eb72878cc9c93f000088b14b884162576c5b5086f16e7753c7ce2ac6d6a11b8304a4f8f1c5c254905d116862f035fb5f35a8d7c64eb84789702036376ba6c6d9a6b3f5b88db31ad4d5b6edee77f094cab0c01a54d790b7b697fa0f856600dc19f9ef6b3644747a507a3c2f436dd2eee8a2f2dc7481e99b060bd528a28d4aa7eecf8f31e31493b0b08797dac5070039fdfb20ac17a69e63", 0xaf}, {&(0x7f0000001c40)="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", 0x2ec}], 0x5}}], 0x1, 0x40080a0) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg$inet(r4, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a01010200000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000fe80000000000000000000000000003f3c0000000535000002000a007f000001000000000000000000000000fe8000000000000000000000000000bbfc010000000000000000000000000001fc00000000000000000000000000000133040000033500000a000200"], 0xec}}, 0x0) 2.890760389s ago: executing program 1 (id=112): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f00000001c0)=0xeeef0000) semctl$SETALL(0x0, 0x0, 0x2, 0x0) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x11, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)=':27.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) r2 = accept$inet(r0, 0x0, 0x0) read(r2, &(0x7f0000000100), 0x4) syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, 0x0) read(r2, &(0x7f0000000304), 0x4) write(r2, &(0x7f0000000300), 0x100) socket$inet(0x2, 0x1, 0x6) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa) (async) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f00000001c0)=0xeeef0000) (async) semctl$SETALL(0x0, 0x0, 0x2, 0x0) (async) listen(r0, 0x5) (async) setsockopt$inet_buf(r0, 0x0, 0x11, &(0x7f0000000300)="800001000000000000000001", 0xc) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) (async) mount$nfs(&(0x7f0000000080)=':27.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) (async) accept$inet(r0, 0x0, 0x0) (async) read(r2, &(0x7f0000000100), 0x4) (async) syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, 0x0) (async) read(r2, &(0x7f0000000304), 0x4) (async) write(r2, &(0x7f0000000300), 0x100) (async) 2.63643854s ago: executing program 0 (id=113): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000000)) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003ec6269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014080ffffff05001400020000000500050002000000050001000600000043a6832d4408810b7db88878f68114370b435dba22e4c6329519981c38b91262a83d877089db6ecbdaca90487815d40f04ada149c2c13389940e000000000000006b897639187e08135c7394326abbf5a3455afc410ade766bcb67ebee0a766df5dad93130f388b8117e54ec2025bf81e656f2211275db6c64f220056d21f7a377784c80d5"], 0x6c}}, 0x0) r3 = fsopen(&(0x7f0000000200)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='uid', &(0x7f0000000740)='0+,\xaa\xd4\x00#\xb3\x9cu~V\xb1\x8eC\x92\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\xf7\x99;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\x04\x00\x00\x00\x00\x00\x00\x00s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3', 0x0) 2.616364161s ago: executing program 1 (id=114): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000340)={@multicast, @local, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x18, 0x2c, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@hopopts={0x33}], @ni={0x8c, 0x0, 0x0, 0x8, 0x4, 0x2}}}}}}, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) recvmmsg(r3, 0x0, 0x0, 0x43, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400040003) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000001b0000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a300000000048000480440001800b000100657874686472000034000280080001400000000b080004400000001908000340000000f905000200830000000800064000000002"], 0xf8}}, 0x6044040) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000000100)={0x8, '\x00\x00\x00\x00\x00\x00\x00\x00'}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_emit_ethernet(0x52, &(0x7f0000000340)={@multicast, @local, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x18, 0x2c, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@hopopts={0x33}], @ni={0x8c, 0x0, 0x0, 0x8, 0x4, 0x2}}}}}}, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) (async) fcntl$dupfd(r2, 0x0, r2) (async) recvmmsg(r3, 0x0, 0x0, 0x43, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400040003) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000001b0000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a300000000048000480440001800b000100657874686472000034000280080001400000000b080004400000001908000340000000f905000200830000000800064000000002"], 0xf8}}, 0x6044040) (async) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000000100)={0x8, '\x00\x00\x00\x00\x00\x00\x00\x00'}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 2.523046827s ago: executing program 3 (id=115): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4c080, 0x88) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 2.409855155s ago: executing program 3 (id=116): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(0xffffffffffffffff, 0x3b8c, &(0x7f0000000300)={0x30, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x181380, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800ef012bbd7000000002000a200000fc00000500000000140005000000000000000000000000000000000108000400", @ANYRES32], 0x38}, 0x1, 0x11}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x1, &(0x7f0000005000)='ufstype=sun\x00') 2.25675217s ago: executing program 2 (id=117): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000380)=0x3, 0x4) (async) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ftruncate(r3, 0x4) (async, rerun: 64) sendfile(r2, r3, 0x0, 0x10) (async, rerun: 64) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYRESOCT, @ANYBLOB="00140012", @ANYRESHEX=r0], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x8010) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900150000000000000000000a"], 0x34}], 0x1, 0x0, 0x0, 0x4010}, 0x50) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000208010100000000000000000700000306000240600200000900010073797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) (async) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000100)={"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"}) (async) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000146000/0x4000)=nil, r7, 0x100000c, 0x40010, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0xc24e8e4a6fdcfe0b, 0x41000, 0x2000, &(0x7f0000cf7000/0x2000)=nil}) (async, rerun: 32) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r9 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) (rerun: 32) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f00000005c0)='fd', 0x0, r8) openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x101881, 0x0) (async) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_POISON(r8, 0xc020aa08, &(0x7f0000000080)={{&(0x7f00000cb000/0x3000)=nil, 0x3000}, 0x1}) (async, rerun: 32) ioctl$KVM_RUN(r6, 0xae80, 0x0) (rerun: 32) 2.256524777s ago: executing program 0 (id=118): syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="040e04ff0520"], 0x7) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x20fe, 0x0) r1 = socket(0xa, 0x3, 0x3a) io_setup(0x6, &(0x7f0000000040)) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x2, 0x0, 0x6}, 0xc) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)=0x7) 2.001748406s ago: executing program 3 (id=119): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000400)={0x1c, 0x40, 0x0, 'queue0\x00', 0xffbffffc}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000180)={0x0, 0x8, 0x6, {0x7e, 0x7}, 0x10000, 0xe}) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r3 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)={'a', ' *:* ', 'rm\x00'}, 0x9) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000021000900000000000000000000000000000000000000ff"], 0x15c}}, 0x20008080) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r5, 0x9) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 1.994433814s ago: executing program 2 (id=120): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="04005b0007006500"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async) write$cgroup_int(r0, &(0x7f0000000040)=0x4, 0x12) 1.73328712s ago: executing program 2 (id=121): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00010002"], 0x8) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r1, 0xc138fd0d, &(0x7f0000000000)="04000000000000") mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80, 0x2, 0x0, 0x0, 0x0) 1.732185418s ago: executing program 3 (id=122): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r1 = syz_ublk_setup_io_uring(0x73b, &(0x7f0000000340)={0x0, 0x5585, 0x100, 0x1, 0x1e1}, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000980)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000004c0)=@IORING_OP_RENAMEAT={0x23, 0xe, 0x0, 0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0\x00'}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000000c0)={0x2e, 0x9, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x1, 0xe8d, 0x0, 0x0, 0x1000, 0x1}}}, &(0x7f0000000180)) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000003c0)=0x246, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) dup3(r7, r5, 0x80000) ioctl$SIOCX25SCAUSEDIAG(r6, 0x89ec, &(0x7f00000000c0)={0x9, 0xc}) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff000000000000750000000000000000000000000000000000000000000000000000000000b86b6e"], 0xb8}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x1) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010800040000000000000b01000008000300", @ANYRES32=r12, @ANYBLOB="28005080140001004abee33957edf8aaae14574df40000000500020007000000080003000bac0f"], 0x44}}, 0x0) r13 = socket$key(0xf, 0x3, 0x2) r14 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r16, @ANYBLOB="00000000000000005c001280110001006272696467655f736c677665000000004400058005001b"], 0x7c}}, 0x24000004) sendmsg$key(r13, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0216ef050a0000002dbd7000ffdbdf250800120002000100b86b6e00"], 0x50}}, 0x840) clock_gettime(0x0, &(0x7f00000025c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dbg\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) 1.628868238s ago: executing program 0 (id=123): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x400454da, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8fe490a060b483f2dd090fc6889ae6b84", 0x14}], 0x1}, 0x8800) 1.540431744s ago: executing program 1 (id=124): r0 = getpid() syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb0/zoned\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nullb/nullb0/power\x00', 0x2, 0x0) write(r2, &(0x7f0000000600)='1\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./mnt\x00', 0x1ff) mount(&(0x7f0000000800)=@nullb, &(0x7f0000000700)='./mnt\x00', &(0x7f0000000900)='zonefs\x00', 0x0, 0x0) capget(&(0x7f0000000480)={0x19980330, r0}, 0x0) 1.459435263s ago: executing program 2 (id=125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040884) 1.144315963s ago: executing program 1 (id=126): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$FE_GET_INFO(r1, 0x80a86f3d, &(0x7f0000000040)) r2 = accept4$unix(r0, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e, 0x800) getpeername$unix(r2, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) (async) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r1, 0xc0106450, &(0x7f0000000280)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000002c0)={r3, 0x0}) (async) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x10) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000340)=""/230) (async) ioctl$SNDCTL_FM_LOAD_INSTR(r1, 0x40285107) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000480)={0x4, 0x8, [0x9, 0x3, 0x8000000000000001, 0xaf6c], &(0x7f0000000440)=[0x0]}) (async, rerun: 32) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x4080, 0x0) (rerun: 32) ioctl$KDADDIO(r6, 0x4b34, 0x7fdb) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSIG(r7, 0x40045436, 0x3a) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000500)=0x3) ioctl$PIO_CMAP(r7, 0x4b71, &(0x7f0000000540)={0x4, 0x9, 0x2, 0x9, 0x80000001, 0x553}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=@RTM_GETNSID={0x44, 0x5a, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NETNSA_FD={0x8, 0x3, r1}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_FD={0x8, 0x3, r5}, @NETNSA_FD={0x8, 0x3, r1}, @NETNSA_NSID={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8094}, 0x10004081) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDMKTONE(r9, 0x4b30, 0x4) (async, rerun: 32) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) (rerun: 32) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r10, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb81}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x9eb}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1162}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0xc400}, 0x8000) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1f) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000840)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r11, 0xc010640b, &(0x7f0000000880)={r4, 0x0}) r13 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_FONT(r13, 0x4b61, &(0x7f00000008c0)="7a5520a809146b79d7a74a2a02dd0e103897035f5b764df9ce14191a3db496a65dc2621e9358652de57bee4af15ab04353915915ced816e12244740f5c38bb915007a111bbaa94bc3b2f0954a366e77afe788053") ioctl$DRM_IOCTL_PANTHOR_BO_SET_LABEL(r1, 0xc010644d, &(0x7f0000000980)={r12, 0x0, &(0x7f0000000940)='nl80211\x00'}) (async) ioctl$TIOCEXCL(r0, 0x540c) (async) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000011c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001180)={&(0x7f0000000e40)={0x338, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x20000000}}}]}}]}, 0x338}, 0x1, 0x0, 0x0, 0x2008000}, 0x0) 987.427883ms ago: executing program 2 (id=127): syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd600000000018000120010000000000000000000000000000fe8000000000000200000000000000002f01000000000000070800000000000000d6000100010000"], 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x4, 0x0, 0x4, @local, @dev={0xfe, 0x80, '\x00', 0x41}, 0x20, 0x7800, 0x7, 0x8001}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x3, 0x26, 0x60, @ipv4={'\x00', '\xff\xff', @loopback}, @local, 0x8, 0x7, 0x5, 0xff}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000003340)={'gretap0\x00', &(0x7f0000003300)={'erspan0\x00', r2, 0x8000, 0x40, 0x80000000, 0x9, {{0x8, 0x4, 0x1, 0x31, 0x20, 0x64, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_prespec={0x44, 0xc, 0x13, 0x3, 0xc, [{@broadcast, 0x7}]}]}}}}}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e1}, 0x4890) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0xb, 0x6, 0x25, @dev={0xfe, 0x80, '\x00', 0x37}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x8, 0x77, 0x3}}) r10 = open_tree(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x9901) r11 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r11, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) r13 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000032c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003280)={&(0x7f0000000580)=@deltfilter={0x2cf0, 0x2d, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0x6, 0x1}, {0x10}, {0x0, 0xffff}}, [@f_rsvp6={{0xa}, {0x57c, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x5, 0x7, 0x248e}, {0xe00000, 0x956, 0x47b5}, 0x5e, 0x6, 0x2}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x800, 0x1000, 0xe}, {0x2, 0xfffffb67, 0x2}, 0x6, 0xae, 0x8}}, @TCA_RSVP_ACT={0x4b8, 0x6, [@m_mirred={0x1cc, 0xb, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xff, 0x3, 0x1, 0x3, 0x5}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd, 0x101, 0x1, 0xeb, 0x6}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x130, 0x3, 0x4, 0x9, 0x26c5}, 0x6, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7d3b, 0x0, 0x5, 0x3, 0x7ff}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x9, 0x20000000, 0x800, 0x8}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x7, 0x20000000, 0x2, 0xb6b}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x6, 0x1, 0x8, 0x18}, 0x1, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x4, 0x20000000, 0x9, 0x7}, 0xcac407d6a5e0c486, r9}}]}, {0x9e, 0x6, "bfed52c4a36de3f9fc40d5ec154ea9f648d6a387f2bec1e36e5ca6de636a93772af3900455ba19a8c8cd74c8861ce1d1b15cf22e37b94b7c080c0922c0905f70f3e80e75591f7ce77347daa776e6f86388e2be343e011b83f0b9cefaab04e4a2dbb523c3d5e9399f404988f57ecf873e5a52c7ae1e1f41f0e82d165aa81e26f156d6d51e475f4487faf379775bdd3827bf421c00d9ba308d14a1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0x8c, 0xf, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0x10}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7f}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x401}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x9, 0x1, 0x1, 0x9}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x1}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x88}]}, {0x15, 0x6, "9f6d7ee8d81b42d3b720484b14c6ec3d47"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0x164, 0x20, 0x0, 0x0, {{0x8}, {0x80, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x34, 0x4, [{0x2, 0x55, 0x4, 0x9}, {0xe, 0x8, 0xeb, 0x8000}, {0x5, 0x3, 0x9, 0x2}, {0x6, 0x0, 0x18, 0xa}, {0x1a8, 0xf0, 0x6, 0xc130}, {0x6, 0xff, 0x0, 0x400}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x4, 0x8, 0x5, 0x3}, {0x4, 0x6, 0x5, 0x1}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x6, 0x4, 0x5, 0xe7}}, @TCA_ACT_BPF_FD={0x8, 0x5, r10}, @TCA_ACT_BPF_FD={0x8, 0x5, r11}]}, {0xbe, 0x6, "c7fc36b5e8fda2129350ff8ddf5e78985666efd5ec6ac6d9d2bee5c68e3ea724bbad2fdc285334df84a5a1c7eab7ddc7155985afdc4c694864defefcc73583daa9149681b7d72291a0cbcce5ed54bffc20ff83c8da201abd4909592dfb23fdfa5a550604cc15da9fe0fb1ad8e6a2d848362e49d62f171e0fa412f7b62d840c7096491bcc2114d3fa272d9e1c9057c5afd02a34233074e2e2d6c0a6d3135bb259498809ad928bb411fb8276b6389ea3d849fe3e59ba851559576c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0xf8, 0xf, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb09}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xbb, 0x6, "2864e906f5f3385968b0b8d0dd58c41ad6a67f05c4128d73672127fbe0fb76a04c149ff29e861d06921519ce89c898400c7057edc2ea524be00aaa33b00419d6d782e95b20907b1f86fca95e783e79b7fef3d96abb18727c671ae8981ab6169a137c1f54a253ea7797635f738458eee4feb8750927845091960df37ae1b8ef77e225e2002b74e3cca9d1f35c9e6ff1d07a21d405895f88dcf0299266a6a85df457ea0e7c2f72bfd3f31eb110e54c1883e37ae950bb392e"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xfff, 0x2, 0xbb0f}, {0x5d3, 0x4, 0x8}, 0x2, 0x3, 0x4}}, @TCA_RSVP_ACT={0x4}, @TCA_RSVP_DST={0x14, 0x2, @private0}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x3747, 0x7, 0x7ff}, {0x8ea, 0x4, 0xffff}, 0x5e, 0x81, 0x1}}]}}, @f_rsvp6={{0xa}, {0x242c, 0x2, [@TCA_RSVP_POLICE={0x418, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0xff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x12d2}, @TCA_POLICE_RATE={0x404, 0x2, [0xd799, 0x8, 0x8, 0x8, 0x2, 0x5, 0xfd0d, 0x100, 0xfff, 0x4, 0x2, 0x4, 0x1000, 0x7ff, 0x8, 0x9, 0x8, 0x7, 0x100, 0x10000, 0x1ff, 0xffffffe8, 0x5, 0x7f, 0x0, 0x5, 0x8, 0xffff, 0x1ff, 0x1000, 0xfffffffc, 0x101, 0x9, 0x7, 0x4, 0x8, 0x2, 0x6, 0x0, 0x7, 0x2, 0x4, 0x80000000, 0x4, 0xde, 0xc7, 0x1, 0x5, 0xa, 0x1, 0x1ff, 0xe0, 0x80000000, 0x1, 0x8001, 0x42, 0x98, 0x199a, 0x7, 0x100, 0x75b11a69, 0x6, 0x2, 0x3, 0x0, 0xb90, 0xea, 0x8, 0x7, 0xfa15, 0xfffffffa, 0x80, 0x4f, 0x3, 0x6, 0x14, 0x8, 0xb, 0x1, 0x9dbd, 0x5, 0x800000, 0xffff, 0x0, 0x800, 0x4, 0x10000, 0x0, 0x7, 0x9, 0x80000000, 0x406, 0x6, 0x1, 0x6, 0xe5, 0xc, 0x1ff, 0x3, 0x7, 0x4, 0x9, 0x2, 0x6, 0x80000001, 0x8de, 0xffffff53, 0x8, 0xba30, 0x9, 0xfffffc01, 0x3, 0x9, 0x7, 0x4, 0xee, 0xfffffff7, 0x8, 0xe, 0x64a4, 0x9, 0x2df, 0x9, 0x7b, 0xac, 0x200, 0x6, 0x9, 0x8, 0x7, 0x7, 0x9ada, 0x2, 0x50, 0x0, 0x2, 0x40d1, 0x7fff, 0x6, 0x7, 0x100, 0x9, 0x10000, 0xcb, 0x9, 0x100, 0x5, 0x744, 0x6, 0x6, 0xa3, 0x141d6243, 0x9, 0x0, 0x6, 0x5, 0x0, 0x529, 0x1, 0x100, 0xff9f, 0x7ff, 0x5, 0xfffffffe, 0x5, 0x1, 0x2, 0x2, 0xcd4, 0x0, 0x2, 0xfffffffb, 0x358e, 0x1, 0x8, 0x5, 0x4, 0xec3, 0x3, 0xa69, 0x100, 0x3, 0x3f2, 0xfffffff4, 0x1000, 0x9, 0x4, 0x8, 0x6, 0x1200000, 0x7, 0x54a, 0x2, 0x8000, 0x8, 0x6b, 0x67a1, 0x2207, 0xa672, 0x3, 0x2, 0x3, 0x0, 0x8, 0x7fffffff, 0x7fffffff, 0x0, 0xf, 0x0, 0x8, 0x644, 0xe, 0x2, 0x5, 0x40, 0x5, 0x28000000, 0x7fffffff, 0x5, 0xffffffff, 0xfffffff9, 0x0, 0x4da, 0xb, 0x5fcc, 0x7, 0x8, 0x3, 0x35, 0x800, 0x7, 0x3ff, 0xa, 0x3, 0x5, 0x0, 0x1, 0x2, 0x6, 0x0, 0x9, 0x3, 0x5f83, 0xfff, 0x38, 0x9, 0x0, 0x6, 0x80, 0xe, 0x8001, 0x3, 0x7f, 0xf324, 0x6, 0xb]}]}, @TCA_RSVP_ACT={0x1d1c, 0x6, [@m_police={0x1a7c, 0x4, 0x0, 0x0, {{0xb}, {0x1a04, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x1, 0x80, 0x3c4c, 0x6, 0x3, 0x80000000, 0x3, 0x0, 0x4, 0x2, 0xffff, 0x9, 0x8, 0x1, 0x2, 0x5, 0x3, 0x6434, 0x3, 0x0, 0x0, 0x80000001, 0xa, 0x9, 0x80, 0x9, 0x3, 0x5, 0xffff, 0x5, 0x0, 0x0, 0x4, 0x8, 0x100e, 0x5, 0x9, 0x2, 0x6, 0x5, 0x6, 0xffffffff, 0xc, 0x4, 0x2, 0x9, 0x8, 0x3, 0x3, 0x4, 0x6, 0x2, 0x80000001, 0x7, 0x1, 0x4, 0x3, 0x8, 0x4, 0x4, 0x9, 0x1, 0x80000000, 0xfffffffd, 0x61ceeb40, 0x6, 0x3ff, 0x4, 0x6, 0x2, 0x8, 0x0, 0x8e5f, 0xa, 0x81a, 0x2, 0x401, 0x3, 0x7ff, 0x1d8, 0x9, 0x9, 0x7, 0x2, 0x6, 0xa1, 0x5, 0x3ff, 0x7c9c, 0x1, 0x37dc, 0x8, 0x3, 0x1, 0x5a4, 0x2, 0x10001, 0x9, 0xf4, 0x1a28, 0x784b, 0x7bd, 0x4c8, 0x100, 0x1, 0x5a2, 0x2, 0x3, 0x8, 0x8, 0x6, 0xcbb, 0x74b27d40, 0x93, 0x200, 0xd, 0x3, 0x401, 0x0, 0x0, 0x3, 0x4, 0x101, 0x0, 0x6a, 0x541, 0x80000001, 0x3, 0xfffffff7, 0x6, 0x2, 0x100, 0x8218, 0x8, 0x8001, 0x7, 0x3, 0x9, 0xad1, 0x2, 0x10, 0xb7b, 0x8, 0x70, 0x3000000, 0x2, 0x8000, 0xd, 0x4, 0x3, 0xffffffff, 0x5, 0x8, 0x10000, 0x9, 0xfffffff7, 0x8, 0xd, 0x7, 0x7, 0x0, 0xab0, 0x0, 0xf, 0x7, 0xfff, 0x6, 0x3, 0xe, 0xca6, 0x9, 0x9, 0x1ff, 0x9, 0x1, 0xa, 0x9, 0x5, 0x0, 0x101, 0x1, 0x0, 0x0, 0x3, 0x3, 0x7, 0x7, 0x101, 0x981, 0x3, 0xc4dd, 0x56c5, 0x5, 0x7, 0xcfb7, 0x5, 0xfffffff8, 0x9856, 0x8001, 0xd6, 0x0, 0x9, 0xd, 0x0, 0xfffffc00, 0x3, 0x7fff, 0xfffffffa, 0xfffffff0, 0x81, 0x9, 0x7ff, 0x80000000, 0x0, 0xfffffff7, 0x7fff, 0x7, 0x7, 0x101, 0x10000, 0x7, 0x9, 0x9, 0x44, 0x6, 0xc50, 0x8, 0x8, 0x9, 0x9, 0x1, 0x5, 0x10, 0x8, 0x10000, 0x8, 0x9, 0x9, 0x0, 0x1, 0xff, 0x9, 0x6, 0x2, 0x40, 0x186, 0x4f, 0x5, 0x7, 0x6, 0x81, 0x401, 0x1, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x6, 0x5, 0xffffffff, 0x6, {0x4, 0x1, 0x1, 0x5, 0xc65a, 0xff}, {0x10, 0x2, 0x0, 0x6d, 0x3ff, 0x7ff}, 0x7, 0x3, 0xc}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x6, 0x1788, 0x6, 0x4, {0x4, 0x1, 0xbc8, 0xfffc, 0x8000, 0xff}, {0x7f, 0x1, 0xa, 0xb, 0x5, 0x400}, 0x7, 0xffffff80, 0x3}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x73, 0xe, 0x6, 0x8d0d, 0x7, 0x0, 0x3, 0x2, 0x7f, 0x101, 0xafe0, 0x4, 0x80000000, 0xd, 0x198d, 0x70d, 0x0, 0xffffffff, 0x9, 0x4, 0x5, 0xffff, 0x1, 0x0, 0x10000, 0x1, 0xe, 0xf, 0x1, 0x2, 0x7, 0x6, 0x2, 0x4, 0x8, 0x9, 0xe, 0xc4ca, 0x0, 0xffffffff, 0x1, 0x3, 0x8, 0x7e, 0x1, 0x10000, 0xd1f1, 0x81, 0x80, 0xfff, 0x4, 0x2, 0x4, 0x0, 0x3, 0x10, 0x2, 0x7, 0xffffffff, 0x0, 0xfffffff7, 0x7, 0x4, 0x2, 0x2, 0xb, 0x0, 0x6, 0x31c, 0x6f, 0x3ff, 0x3, 0x8, 0x6, 0xa, 0x7, 0x3, 0x5, 0x400000, 0x7, 0x2, 0x4, 0x0, 0x7, 0xfffff69d, 0x4, 0xfffffff8, 0x7, 0x3f67c284, 0x8, 0x3, 0x3ff, 0x6, 0x9, 0x9, 0x7, 0x1, 0xa, 0x3, 0xf84f, 0x7, 0x1, 0x4cd8, 0x7, 0x3, 0x0, 0x4, 0x7daa, 0x50, 0x5, 0x4, 0x6, 0x80000001, 0x5, 0x81, 0x3, 0x6ef, 0x3ff, 0xa0, 0x9, 0x6, 0x3ff, 0x3, 0x0, 0x2, 0x7, 0x4b, 0x10, 0x0, 0x1, 0xea, 0x9, 0xffffffff, 0x5, 0x6, 0x9, 0x7ff, 0x3, 0x3, 0x8, 0x3, 0xfffffff9, 0xb52, 0x8, 0x3e4, 0x4, 0x7, 0x50d, 0xae, 0x1, 0x38, 0x80000000, 0xc8b, 0x8, 0x166, 0x400, 0x218, 0x1ff, 0x9, 0xb, 0xf48d, 0x62ab, 0x2, 0x7, 0x5, 0x2, 0x0, 0x7fffffff, 0x10, 0x5, 0x5, 0x6, 0x7, 0x8000, 0xffffffff, 0xd4, 0x0, 0x10001, 0xfffffff8, 0x5, 0xfffffffe, 0x8, 0x6, 0x0, 0x6, 0x8, 0xfffffffe, 0x1, 0x7, 0x6, 0x400, 0x0, 0x7f, 0x0, 0x7, 0x0, 0xd2, 0x336ab73c, 0xfffffffc, 0x1, 0x5, 0xe, 0x1, 0x0, 0x14, 0x2, 0x5, 0x8, 0x9, 0x6, 0x6, 0x3, 0x1, 0x3, 0xe, 0x6, 0x5, 0x4d, 0x6, 0x5, 0x0, 0x0, 0x2, 0x8c, 0xc00000, 0x0, 0x3, 0x2, 0x5, 0xffffef14, 0x8, 0x2, 0x2f8, 0x9, 0x3, 0xffff, 0x5, 0x8, 0x1, 0x6, 0x625, 0x0, 0x1ff, 0x676a, 0x0, 0xc, 0x5, 0x2, 0x8, 0x39d8, 0x4, 0x9, 0x1, 0xe, 0x2, 0xb58e]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffff801}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffc2dc}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x7fffffff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xde2, 0x3, 0x25117018, 0x0, 0x5, 0x6f, 0x1, 0x5, 0x6a35, 0x7ff, 0x7fff, 0x7, 0x2, 0xc, 0x6, 0x38, 0x1, 0x0, 0x6, 0x3, 0x1, 0x5, 0x7ff, 0xd, 0x1, 0x1, 0x7, 0x1, 0x1, 0x1000, 0x0, 0x2, 0x8, 0x3, 0x2fb, 0x7, 0x7, 0xfffffff8, 0x5, 0x8001, 0x8, 0x6cd0, 0x5, 0x10000, 0x8, 0x6, 0xcc27, 0x4, 0x7, 0x1ff, 0x3, 0x2, 0xe84d, 0x5, 0x0, 0x6, 0x0, 0x3, 0xcc1b, 0x5, 0x400, 0x3, 0xf, 0x6, 0xfffffff7, 0x7, 0x6, 0x5000000, 0x7, 0x1, 0x5, 0x0, 0x1cec, 0x5, 0xe8c, 0x101, 0x9, 0x9, 0x8d, 0x81, 0x495c, 0x6, 0x0, 0x1ff, 0x0, 0x1, 0xfffffff7, 0x1, 0x7, 0x4d756b77, 0x0, 0x8, 0x6, 0x40, 0x9, 0x3, 0xffffc840, 0x1, 0x4, 0x9, 0x1, 0x8, 0x8, 0x9, 0xf, 0x4, 0x5, 0x4, 0x1, 0x10000, 0x8, 0x4, 0x101, 0x6, 0x9, 0x101, 0x80000000, 0x0, 0x7, 0x401, 0x6, 0xffffffff, 0xe493, 0x4, 0x6, 0x5, 0xf, 0x7, 0x6, 0x3, 0x9, 0x2, 0x8000, 0x6, 0x5, 0x4, 0xff, 0x1, 0x9861, 0x1, 0x0, 0x0, 0x9, 0x41a4, 0xfffffff8, 0x8, 0x4, 0xff, 0x80, 0x2, 0x7, 0xfffffffd, 0x1, 0xfffffff7, 0x8, 0x3ff, 0xb85f, 0x6, 0x40, 0x3, 0xfffff96f, 0x800, 0x86, 0xfffffffd, 0x4, 0x0, 0x9, 0x5b, 0x3, 0xfffffffe, 0x40, 0x4, 0x5, 0x3ff, 0x80000001, 0x9, 0x3ff, 0x1000000, 0x0, 0x4a2, 0x0, 0xd1ef, 0x4, 0xa, 0xe, 0x506b, 0x8001, 0xb, 0x5, 0x6, 0x9f9b, 0x3, 0x1bdb0000, 0x5, 0x4, 0x7, 0xa, 0xc4d1, 0x1, 0x8000, 0x1ff, 0x4, 0xa5, 0x0, 0x1, 0x8001, 0x3, 0x5, 0x7, 0xb, 0x9, 0xd482, 0x8, 0x10, 0x8, 0x5, 0x8, 0x9, 0x2bfd7424, 0x29, 0x5, 0x2, 0x1, 0x2f6e, 0xfffffffe, 0x1000, 0x6, 0x8, 0x81, 0x2, 0xffff, 0x3d, 0xffff90f1, 0x7, 0x3, 0x6, 0xf000, 0x90ac, 0x5, 0x0, 0x6, 0xffff, 0x81, 0x0, 0x345b, 0x7fffffff, 0x8, 0x6, 0x7fff, 0xd2c, 0x8, 0x3, 0x7, 0xf, 0xffffffff]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xff, 0x2, 0x200, 0x100, 0x8, 0xfff, 0x0, 0x851, 0x8, 0x8, 0x8, 0x7, 0x7, 0x10, 0x3000, 0xb7, 0x2, 0x0, 0xfffffff3, 0x5, 0x47d4ed80, 0xe, 0x7, 0xd4, 0x200, 0x4, 0x80, 0x0, 0x4, 0x1000, 0x22a5, 0x5, 0x8001, 0x203, 0x2, 0x66, 0x3, 0x5, 0x3d97, 0x80, 0x0, 0x400, 0xffffffff, 0x9, 0x6, 0x81, 0x5, 0x0, 0x20000000, 0x98, 0xffffffff, 0x438, 0xaa88, 0xfffffffe, 0x938, 0x8, 0x0, 0x1, 0x10000, 0xfffffffe, 0x2, 0xd, 0xfff, 0x10000, 0x5, 0x81, 0x6, 0x9aa9, 0x1000, 0x8001, 0x400, 0x4, 0x8, 0x8, 0xe, 0x8000, 0x1, 0x3fff8, 0x8, 0x5, 0xeb, 0x10001, 0x1f, 0xc68f, 0x2, 0x81, 0x5, 0x4, 0x3, 0xffffcf17, 0xfffffff8, 0x1, 0x8, 0xfffffff7, 0x4, 0x9, 0x2, 0x9, 0x3, 0x6, 0x7, 0xff, 0x7fffffff, 0x2, 0x7fffffff, 0xe, 0x8e06, 0xa, 0xfffffffa, 0x4e56, 0xdda, 0x2830, 0x4, 0xfffffff7, 0x4, 0xe71, 0x3, 0x2, 0x6, 0xf, 0x8, 0x2000200, 0x3, 0x9, 0x1000, 0xfff, 0x752ff8a8, 0x5ac6385b, 0x1, 0x7, 0xe1, 0x3, 0x8000, 0xf32d, 0x37, 0x6, 0x1, 0x0, 0x5, 0x100000, 0xd8, 0x81, 0x1, 0x2, 0xfffffffb, 0x8, 0xf, 0xe, 0x9, 0x0, 0x0, 0x2178, 0x80, 0x7, 0x5, 0xffff, 0x7ff, 0xfffffffe, 0x653, 0x0, 0x0, 0xfffffffd, 0x4, 0xc30a, 0x2, 0x99fb, 0xffffffff, 0x4, 0x7a, 0x254, 0x0, 0x0, 0x8c9b, 0x6, 0x5, 0xb, 0x8, 0x401, 0x6, 0x1, 0x1, 0x9, 0x4, 0x831, 0x2, 0x8, 0x9, 0x6, 0x9, 0x9, 0xb, 0xf, 0x1, 0x3ff, 0x2b98, 0x8, 0xf4d, 0x4, 0x3e9, 0xffffff80, 0x3, 0x80000001, 0x48c1, 0x4, 0x3, 0x81, 0xe, 0x6, 0x3, 0x5, 0x7, 0xffffffaa, 0x8, 0x2, 0x6, 0x9, 0xffff, 0x1, 0xe4f3, 0x9, 0xc, 0x2, 0xffff, 0x3, 0x9, 0x6, 0x6, 0xe2, 0x8, 0x1, 0x803c, 0x3, 0xff, 0xfff, 0x7, 0x17a2, 0x2, 0x7, 0x8, 0x7, 0x1, 0x80000001, 0x2, 0x800, 0x0, 0xff, 0x996, 0x7, 0x9, 0x6, 0x81, 0x332, 0xfffff1cb, 0xb7ed, 0xe3, 0x5]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x81}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x7, 0x30000000, 0x10000, {0xc9, 0x1, 0xfffc, 0x8, 0x4, 0x6}, {0x4, 0x0, 0x7, 0x6, 0x1}, 0x8, 0x9, 0x2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1a}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x7, 0xfffffe01, 0xf7, 0x2, 0x8, 0x1, 0x7f, 0x9, 0x1, 0x9, 0x401, 0xf, 0x4, 0x0, 0x9c, 0x7, 0xcb3, 0x8000, 0x10001, 0x9, 0x10, 0x3, 0x9, 0x4, 0xb, 0x8000, 0x6, 0x1, 0x4, 0x9, 0xfffffff9, 0xc025, 0x69, 0x81, 0xe5, 0x9, 0x39, 0x9d42, 0x6, 0x9, 0x9, 0x6, 0x7, 0x5f, 0x6, 0x7ff, 0xfffffff9, 0x4, 0x8, 0x7, 0x80000000, 0x3, 0x8, 0x1ff, 0xffff, 0xd, 0x4, 0x0, 0x6, 0x8, 0xff, 0x0, 0x6cd, 0x4, 0x101, 0xffff, 0x5, 0x80, 0x8, 0x6, 0x40, 0x200, 0xffffffff, 0xc, 0x9, 0x2b, 0x8001, 0x85c, 0x9, 0x3, 0x9, 0x5, 0x3, 0x4, 0x3, 0x5, 0xfffffff6, 0x5, 0x7f, 0x7ff, 0x800, 0x0, 0xcf59, 0x2, 0x8, 0x4, 0x3, 0x995, 0x9, 0x56, 0x7, 0x0, 0xe4, 0x8000, 0x1c, 0x9, 0x5, 0x1, 0x5, 0xe, 0x82e5, 0x5cb, 0x4, 0x8, 0xa2f, 0x7fffffff, 0x8000, 0x1, 0xff, 0x8, 0x1, 0x8, 0x2, 0x5, 0x5, 0x3, 0x3, 0xb, 0x2, 0x9, 0x0, 0xbcf, 0x100, 0x2, 0x5, 0x200, 0xfffff1e3, 0x4, 0x1000, 0x6, 0xffffffff, 0x9, 0x5, 0x3ff, 0x80, 0x2, 0xdfa, 0x6, 0x0, 0x8, 0x4b, 0x1, 0x2, 0xffff964f, 0x2, 0x4, 0x4, 0x4, 0xfffffffc, 0x4, 0xffff0000, 0x8, 0x9, 0x98, 0x0, 0x1000, 0x7f, 0x0, 0x7b, 0x3, 0x6, 0x0, 0x9, 0xffffff7e, 0x8, 0xfffffffd, 0x6, 0x7, 0x0, 0x101, 0x7, 0x5653, 0x6, 0x1, 0x101, 0x7, 0x280000, 0x4, 0x6, 0x4c5d, 0x7ff, 0x72c, 0x8, 0x80000000, 0x27e7, 0x9e8, 0x34ee, 0x8, 0xab, 0x0, 0x5, 0x640, 0x9, 0xa, 0x4, 0x2, 0x3, 0x0, 0x5, 0x6, 0xcf, 0x9, 0x6, 0x9, 0x5, 0xc8b7, 0xa, 0x10, 0x7fffffff, 0x7, 0x3, 0xfed, 0xaf61, 0x7, 0x8, 0xffffffff, 0x2, 0x3, 0x4, 0x6, 0x5d43, 0x101, 0x72e, 0x1, 0x1, 0x9, 0x6, 0xfff, 0x5, 0x5, 0x1, 0x0, 0x3, 0x9, 0x7, 0x3fa7, 0xfffffff9, 0x8, 0x10001, 0x800, 0x1, 0x7fffffff, 0x5, 0x8]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7fff}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xcb79, 0x1, 0xc636, 0x9, 0x73a, {0x7, 0x1, 0x7, 0x9, 0x66, 0xfffffffe}, {0x7, 0x2, 0x7, 0x8, 0x400, 0x1}, 0x3fe, 0x7c3, 0x80}}, @TCA_POLICE_RATE={0x404, 0x2, [0xb7, 0x1c00, 0x95, 0xfffffffb, 0x60000, 0xffffffff, 0x1, 0xfffffff8, 0x5, 0x5, 0x2ef6, 0x3, 0x4, 0x2, 0x3, 0x2, 0x6, 0x14d, 0x8, 0xabd5, 0x4000, 0x34, 0x80000001, 0x9, 0x6, 0x401, 0xf8, 0x4, 0x80000001, 0x6, 0x1, 0x100, 0x1, 0x7, 0xcc31, 0x75b, 0x3ff, 0x6, 0x0, 0x9, 0x1, 0x2, 0x6, 0x8001, 0x6, 0x7, 0x3, 0x8001, 0xf, 0x5, 0x7, 0x5, 0x1000, 0xffffab64, 0x0, 0xffffff80, 0x0, 0x81, 0xf, 0x1b, 0xb035, 0x7, 0x7, 0xd, 0x81ea, 0xd2, 0x3, 0xfffff8f9, 0x6324, 0x0, 0x0, 0x9, 0xe, 0x7, 0x9, 0x9, 0x9, 0xa00, 0x0, 0x3, 0x2e, 0xfff, 0x10, 0x3, 0x200, 0x8, 0xc8000000, 0x4016, 0x2, 0x6, 0x80000001, 0x0, 0x2, 0x6, 0x554c, 0x6, 0x6, 0x8, 0x1, 0x200, 0xb3, 0x8, 0x3, 0x0, 0x9, 0x5, 0x2, 0x1, 0x2, 0x2, 0x3, 0x6, 0x100, 0x6a50, 0x7, 0x3b3c, 0x7, 0x8000, 0x7, 0x8, 0x9, 0x0, 0x0, 0xfff, 0x6, 0x6, 0x3, 0x1, 0x7, 0xc, 0xfffffffe, 0x4, 0x2, 0x1, 0xb, 0x80, 0x0, 0x3, 0x0, 0x101, 0x2, 0x0, 0x84, 0x5, 0x100, 0x0, 0xfffffffc, 0x0, 0xff, 0x10000, 0x7f, 0x0, 0xffffffff, 0x62, 0x4, 0xfffffffd, 0x6, 0x92, 0x3ff, 0x1, 0x7, 0x3, 0x5, 0x2, 0x5, 0x10000, 0x3, 0xb, 0x8001, 0x8, 0x6, 0x1, 0x9, 0x30, 0x9b3, 0x2, 0x1, 0x8, 0x7, 0x4, 0x0, 0x8, 0x0, 0xfffffff7, 0xc28c, 0x5, 0x4, 0x80, 0x6, 0x0, 0x8, 0x3, 0x3, 0x1, 0x5346, 0x3c2, 0x7, 0xe11, 0x8, 0xf6, 0x140, 0x6, 0x8, 0x7, 0x4, 0x7, 0x6, 0x310e, 0x8, 0x7, 0x6, 0x1, 0x3, 0x7, 0x1, 0x5, 0x40, 0x5, 0x86, 0x6, 0x7fff, 0x43, 0x2, 0x9, 0x3, 0xffffffff, 0x4, 0x80000000, 0xc, 0x4, 0xc3c, 0xffffffff, 0x0, 0x7, 0xff, 0x7, 0x1, 0x7fff, 0x10f, 0x7, 0x6, 0x8001, 0x3, 0x9, 0x0, 0x2, 0x4, 0x4993b59e, 0x4, 0xfffffe00, 0x8, 0x10000, 0x200, 0xf1, 0x9, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x45, 0x3, 0x2, {0x3, 0x1, 0x1, 0x1, 0x2, 0x42}, {0x0, 0x2, 0x4, 0x31d0, 0x8000, 0x2}, 0x9, 0x4, 0x8}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xa}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000}]]}, {0x4f, 0x6, "0ff83a77b2637e8024f855d3b1d3c6d157336a59e87daaa7e14a0e00da35a4f89c5585eb311bc04ca77e7f62491290f5ceaa6ab6ad9a9f162ffdc1afcaeb4e23dce6877f4a4fbfefe4e01b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbedit={0xa0, 0x6, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xf}]}, {0x6c, 0x6, "8c1605b6383812adea326612da5ad0c5749634cbea1b88b1770d8cf00674f9f8e50d7ebccb6213b5f02ce0645f1a2a7a995e4e1c63ce45c88e93d6345bb6550725f977832b28e5273a86954a2cbafed6786e21d8c2c4dfdc06390064e19844639acde2664b838280"}, {0xc}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbmod={0xa0, 0x17, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0xd93d, 0x10000000, 0x3, 0x8}, 0x8}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfff3}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0x4, 0x2, 0x1, 0x7fff}, 0xe}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="a392eda4bc40"}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x15c, 0xf, 0x0, 0x0, {{0x8}, {0xec, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r12}, @TCA_ACT_BPF_OPS={0x4c, 0x4, [{0xa4f, 0x9, 0x5, 0x2}, {0x9, 0x3, 0x4, 0x8ee}, {0x9, 0x1c, 0x40}, {0xfff0, 0x7, 0x4, 0x101}, {0xfffb, 0x8c, 0x3, 0x8}, {0x7, 0x1, 0x5, 0x3}, {0x1ff, 0xb1, 0x0, 0x3}, {0x2, 0xc, 0x4, 0x9}, {0x56, 0xf, 0x3, 0xfffffffd}]}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0xa94, 0x21, 0x5, 0x8}, {0x8, 0x9, 0x10, 0x9}, {0xfffc, 0x81, 0x6, 0x4}, {0x8000, 0x2, 0xf4, 0x3}, {0x4, 0xfe, 0x1, 0x100}]}, @TCA_ACT_BPF_OPS={0x54, 0x4, [{0x6, 0x55, 0x2, 0x9}, {0x3, 0x59, 0x81, 0x7}, {0x5, 0x6a, 0x5, 0x1ff}, {0xa63e, 0x81, 0x8, 0x5726}, {0x9, 0xe, 0x1, 0x9}, {0xf91, 0x40, 0x1, 0x7}, {0x6, 0xf, 0x3, 0x3}, {0x4, 0x7, 0x0, 0x81}, {0x9, 0x5, 0x5b, 0x1}, {0x5, 0x6, 0x9, 0x3}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}]}, {0x49, 0x6, "f40159061a61ed52900543d968a8aa3bfa25a23b49ded8c484bc27c025a296c5b96fc38bbb64d743f3b66fef6f25df17b84c142158cb82318ced52ac1d0ee73ac4efd2c9a7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x10, 0xe}}, @TCA_RSVP_SRC={0x14, 0x3, @mcast2}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr=' \x01\x00'}, @TCA_RSVP_ACT={0x2a4, 0x6, [@m_skbmod={0x188, 0xa, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="d7f818040a31"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x1, 0x8, 0xc5c9, 0x10001}, 0xc}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0xa, 0x7, 0x5ac, 0x80000000}, 0x8}}]}, {0xf4, 0x6, "ca6c1c4b0eacbce9d1b33f6f1287da2e9c39f9e3589e1819966a228e6de6859e8f0e054b2e5e8a3307302a72ad857d9896d494e29ec3a112dc091cfc8388bb6c249f8a8d09bc24c60b91924f4c9560469a86da7bf1fd2ae0c3934f2d99580b2db818f8db10c4ac492a53b857086804cb83f359293006c89960e1cc5d0891854032232780f932cfcd9f14368793258ec862ca3a626db2a73c48b00846664cd0b74ecc6a146d992120f03a25a1afabc9c4decafb4cd20e2b1c0fa7c32e6512a576aae85b71b295cd30d5a5bad21e63fc3ea84ab7c52dcaea81bdfef18b7801b53e11ae7ba1cc6e09b35686fd6e4d8fcf27"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0x118, 0x1b, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_FD={0x8, 0x5, r13}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x1, 0xffffffffffffffff, 0xfffffff9, 0x80000001}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x7, 0xffffffffffffffff, 0x43, 0x8}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x1634, 0x4, 0x1, 0x1}}]}, {0x96, 0x6, "1f357b1b1e7c29eb77168cd850a7d5b91186ef0c0efc0973afcfffd6b9a0ea082d9114252269fe345c748cf0d56565aa95c5eb072d24eb102131b07a41557eb24c05e003eeba7a1af77ecf3d9d4b7cc283b14c21952408f826708f8a4f9f01797e94f3c427d31bc56179003c2169d53fd29739370af383627982a54f457fc09dd054d7b570284a6cd1fc5974823dcf0b0246"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x10, 0x9a, 0x6}, {0x2, 0x1ff, 0xf}, 0xccada14230c14d08, 0x5, 0x6c}}]}}, @f_rsvp6={{0xa}, {0x8, 0x2, [@TCA_RSVP_ACT={0x4}]}}, @f_rsvp={{0x9}, {0xec, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x8001, 0x7}, {0x0, 0x800, 0x9}, 0x88, 0xed, 0x1}}, @TCA_RSVP_DST={0x8, 0x2, @multicast1}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x1, 0x7f, 0x7}, {0x1, 0x8}, 0x84, 0x1, 0x2}}, @TCA_RSVP_ACT={0xa0, 0x6, [@m_gact={0x9c, 0xc, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1479, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x8, 0x2, 0x7, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe1, 0x100, 0x3, 0x3d}}]}, {0x32, 0x6, "47ecb25b8d583a36911f9b81cdd6f340e5f3794662d771a52f847a238c8d5d3fef4c7cc0238279fdd8ebf5ce1377"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}]}]}}, @f_rsvp6={{0xa}, {0x1bc, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x1, 0x100, 0xaba}, {0xfffffffb, 0x3ff, 0xffffffff}, 0x16, 0x8, 0x5}}, @TCA_RSVP_DST={0x14, 0x2, @empty}, @TCA_RSVP_ACT={0x170, 0x6, [@m_skbmod={0xe4, 0x17, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xe5, 0x10, 0x1, 0x7, 0x1e}, 0x2}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x401, 0x0, 0x2, 0x6, 0x1}, 0xf}}]}, {0x62, 0x6, "21c8198268250f4a054c358e933c2aa06135985d633c7c85de0250811bce4d5dc4342475de89ca6f033a86e134f666f79bdf603a5fbfc46f9ae8ab0f2a23d23c509688255c0faba43c693ad572212ad79976b26732ffcede0ef8701a1af9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mpls={0x88, 0xb, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0x52, 0x6, "6ea9bd2720958d52f61b6f3495694862028e8a4bf822633d3a6b6eab2a12ed0575535fe6e2c1c2a4f774e92b91795c2b3ba5df801d639e6cb61ca5d363882b0a019226503c031313805aa5d53b54"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}, @f_rsvp6={{0xa}, {0x2c, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @loopback}, @TCA_RSVP_DST={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}]}}]}, 0x2cf0}, 0x1, 0x0, 0x0, 0x44000}, 0x20040800) 986.916904ms ago: executing program 0 (id=128): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x20000, 0x0, 0x0, 0x1, 0x2}}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f00000001c0)={r4, r4, 0x0, 0x0, 0x2}) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x4, @any, 0x0, 0x2}, 0xe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0x7, 0x2}) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES32=r3], 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x24}, @remote}, "f2dfbc81cfe0ca1b360883fff0380bc5"}}}}, 0x0) 783.987437ms ago: executing program 3 (id=129): r0 = socket$inet(0x2, 0xa, 0xfffffffb) getsockname(r0, 0x0, &(0x7f0000001e40)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000001c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x3c, r2, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008890}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, r8, 0x1, 0x170bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5cd2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x14004800) 533.602478ms ago: executing program 1 (id=130): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c081}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r4, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x4040020) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c081}, 0x4000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r4, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x4040020) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) 530.309287ms ago: executing program 2 (id=131): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}, {0x85, 0x0, 0x0, 0x7b}}]}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x24000014) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r0, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x1) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffc0) setns(0xc9, 0x0) r4 = socket(0x2a, 0x2, 0x9) bind$inet(r4, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) 0s ago: executing program 3 (id=132): r0 = getpid() mkdir(&(0x7f0000000180)='./file1\x00', 0x100) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x12, &(0x7f0000000200)={'trans=virtio,', {[{@noextend}]}}) r1 = syz_pidfd_open(r0, 0x0) madvise(&(0x7f0000bdc000/0x2000)=nil, 0x2000, 0x3) r2 = socket$pppoe(0x18, 0x1, 0x0) recvmmsg(r2, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000000, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/134) r3 = syz_open_procfs(r0, &(0x7f00000000c0)='environ\x00') setns(r1, 0x24020000) pread64$ublk_ch(r3, &(0x7f0000000240)=@buf_4k, 0x1000, 0x6) syz_clone(0xde280000, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() (async) mkdir(&(0x7f0000000180)='./file1\x00', 0x100) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x12, &(0x7f0000000200)={'trans=virtio,', {[{@noextend}]}}) (async) syz_pidfd_open(r0, 0x0) (async) madvise(&(0x7f0000bdc000/0x2000)=nil, 0x2000, 0x3) (async) socket$pppoe(0x18, 0x1, 0x0) (async) recvmmsg(r2, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000000, 0x0) (async) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/134) (async) syz_open_procfs(r0, &(0x7f00000000c0)='environ\x00') (async) setns(r1, 0x24020000) (async) pread64$ublk_ch(r3, &(0x7f0000000240)=@buf_4k, 0x1000, 0x6) (async) syz_clone(0xde280000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) kernel console output (not intermixed with test programs): [ 96.339924][ T44] audit: type=1400 audit(1785997117.495:115): avc: denied { write } for pid=5656 comm="sh" path="pipe:[6685]" dev="pipefs" ino=6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 96.393848][ T44] audit: type=1400 audit(1785997117.495:116): avc: denied { rlimitinh } for pid=5656 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 96.401660][ T44] audit: type=1400 audit(1785997117.495:117): avc: denied { siginh } for pid=5656 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 96.446931][ T44] audit: type=1400 audit(1785997117.565:118): avc: denied { write } for pid=5657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.337801][ T44] kauditd_printk_skb: 4 callbacks suppressed [ 97.337820][ T44] audit: type=1400 audit(1785997118.555:123): avc: denied { write } for pid=5676 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.603531][ T44] audit: type=1400 audit(1785997118.815:124): avc: denied { write } for pid=5679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.779598][ T44] audit: type=1400 audit(1785997118.995:125): avc: denied { write } for pid=5682 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.995258][ T44] audit: type=1400 audit(1785997119.205:126): avc: denied { write } for pid=5685 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.170863][ T44] audit: type=1400 audit(1785997119.385:127): avc: denied { write } for pid=5688 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.326381][ T44] audit: type=1400 audit(1785997119.535:128): avc: denied { write } for pid=5691 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.460992][ T44] audit: type=1400 audit(1785997119.675:129): avc: denied { write } for pid=5694 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.739037][ T44] audit: type=1400 audit(1785997119.945:130): avc: denied { write } for pid=5697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.863770][ T44] audit: type=1400 audit(1785997120.075:131): avc: denied { write } for pid=5700 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.070939][ T44] audit: type=1400 audit(1785997120.275:132): avc: denied { write } for pid=5705 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:58096' (ED25519) to the list of known hosts. [ 107.533484][ T44] kauditd_printk_skb: 8 callbacks suppressed [ 107.533503][ T44] audit: type=1400 audit(1785997128.745:141): avc: denied { mounton } for pid=5732 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 107.556290][ T44] audit: type=1400 audit(1785997128.765:142): avc: denied { mount } for pid=5732 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 107.564257][ T5732] cgroup: Unknown subsys name 'net' [ 107.570940][ T44] audit: type=1400 audit(1785997128.785:143): avc: denied { unmount } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 107.764926][ T5732] cgroup: Unknown subsys name 'cpuset' [ 107.787194][ T5732] cgroup: Unknown subsys name 'rlimit' [ 108.009401][ T44] audit: type=1400 audit(1785997129.225:144): avc: denied { setattr } for pid=5732 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.050865][ T44] audit: type=1400 audit(1785997129.275:145): avc: denied { create } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.066837][ T44] audit: type=1400 audit(1785997129.275:146): avc: denied { write } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.077536][ T44] audit: type=1400 audit(1785997129.275:147): avc: denied { read } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.101176][ T44] audit: type=1400 audit(1785997129.315:148): avc: denied { mounton } for pid=5732 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 108.134599][ T44] audit: type=1400 audit(1785997129.315:149): avc: denied { mount } for pid=5732 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 108.186706][ T44] audit: type=1400 audit(1785997129.315:150): avc: denied { read } for pid=5452 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 108.299498][ T5738] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 110.297008][ T5732] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 114.491584][ T1489] cfg80211: failed to load regulatory.db [ 123.686925][ T44] kauditd_printk_skb: 7 callbacks suppressed [ 123.686942][ T44] audit: type=1400 audit(1785997144.905:159): avc: denied { execmem } for pid=5752 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 123.725615][ T44] audit: type=1400 audit(1785997144.905:158): avc: denied { execmem } for pid=5753 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 124.348629][ T44] audit: type=1400 audit(1785997145.555:160): avc: denied { create } for pid=5757 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.404942][ T44] audit: type=1400 audit(1785997145.575:161): avc: denied { read write } for pid=5757 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 124.473462][ T44] audit: type=1400 audit(1785997145.575:162): avc: denied { open } for pid=5757 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 124.512908][ T44] audit: type=1400 audit(1785997145.655:163): avc: denied { ioctl } for pid=5757 comm="syz-executor" path="socket:[5755]" dev="sockfs" ino=5755 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.557596][ T5761] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.563987][ T5761] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.568674][ T5761] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.575387][ T5761] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.594762][ T5761] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.595625][ T5769] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 124.597888][ T5770] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.603066][ T5770] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.604351][ T5761] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.604881][ T5761] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 124.616345][ T44] audit: type=1400 audit(1785997145.825:164): avc: denied { read } for pid=5757 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 124.616409][ T44] audit: type=1400 audit(1785997145.825:165): avc: denied { open } for pid=5757 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 124.632947][ T5769] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.647029][ T5770] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.647681][ T5770] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.677806][ T5766] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 124.714020][ T44] audit: type=1400 audit(1785997145.925:166): avc: denied { mounton } for pid=5757 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 124.721706][ T5766] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 124.724525][ T5770] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.737894][ T5766] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 124.746741][ T44] audit: type=1400 audit(1785997145.925:167): avc: denied { module_request } for pid=5757 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 124.748053][ T5770] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 124.748961][ T5770] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.770270][ T5766] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 126.414620][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.457363][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.461113][ T5764] bridge_slave_0: entered allmulticast mode [ 126.482526][ T5764] bridge_slave_0: entered promiscuous mode [ 126.504018][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.507377][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.511867][ T5764] bridge_slave_1: entered allmulticast mode [ 126.533800][ T5764] bridge_slave_1: entered promiscuous mode [ 126.647633][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.654643][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.658034][ T5762] bridge_slave_0: entered allmulticast mode [ 126.669398][ T5762] bridge_slave_0: entered promiscuous mode [ 126.704946][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.722683][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.728218][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.728521][ T5763] Bluetooth: hci0: command tx timeout [ 126.728526][ T5766] Bluetooth: hci1: command tx timeout [ 126.731500][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.766831][ T5762] bridge_slave_1: entered allmulticast mode [ 126.773694][ T5762] bridge_slave_1: entered promiscuous mode [ 126.807413][ T5763] Bluetooth: hci3: command tx timeout [ 126.814633][ T5763] Bluetooth: hci2: command tx timeout [ 126.982730][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.113582][ T5764] team0: Port device team_slave_0 added [ 127.119154][ T5764] team0: Port device team_slave_1 added [ 127.139171][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.202721][ T5757] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.222093][ T5757] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.227531][ T5757] bridge_slave_0: entered allmulticast mode [ 127.234894][ T5757] bridge_slave_0: entered promiscuous mode [ 127.326833][ T5757] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.330300][ T5757] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.333915][ T5757] bridge_slave_1: entered allmulticast mode [ 127.342376][ T5757] bridge_slave_1: entered promiscuous mode [ 127.382755][ T5762] team0: Port device team_slave_0 added [ 127.390048][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.393593][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.432595][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.466455][ T5759] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.470026][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.473582][ T5759] bridge_slave_0: entered allmulticast mode [ 127.479859][ T5759] bridge_slave_0: entered promiscuous mode [ 127.493581][ T5757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.510366][ T5762] team0: Port device team_slave_1 added [ 127.513907][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.516589][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.535459][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.548134][ T5759] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.550788][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.553267][ T5759] bridge_slave_1: entered allmulticast mode [ 127.570381][ T5759] bridge_slave_1: entered promiscuous mode [ 127.611673][ T5757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.674316][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.677894][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.687296][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.693973][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.697156][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.711360][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.768910][ T5757] team0: Port device team_slave_0 added [ 127.830834][ T5759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.856070][ T5759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.870017][ T5757] team0: Port device team_slave_1 added [ 127.899881][ T5764] hsr_slave_0: entered promiscuous mode [ 127.943647][ T5764] hsr_slave_1: entered promiscuous mode [ 128.101998][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.105116][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.119989][ T5757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.131173][ T5762] hsr_slave_0: entered promiscuous mode [ 128.139738][ T5762] hsr_slave_1: entered promiscuous mode [ 128.144342][ T5762] debugfs: 'hsr0' already exists in 'hsr' [ 128.171346][ T5762] Cannot create hsr debugfs directory [ 128.284093][ T5759] team0: Port device team_slave_0 added [ 128.291482][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.294222][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.318191][ T5757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.416103][ T5759] team0: Port device team_slave_1 added [ 128.490602][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.493306][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.539236][ T5759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.580151][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.584980][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.598411][ T5759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.667972][ T5757] hsr_slave_0: entered promiscuous mode [ 128.692785][ T5757] hsr_slave_1: entered promiscuous mode [ 128.699597][ T5757] debugfs: 'hsr0' already exists in 'hsr' [ 128.716652][ T5757] Cannot create hsr debugfs directory [ 128.809720][ T5763] Bluetooth: hci1: command tx timeout [ 128.820345][ T5763] Bluetooth: hci0: command tx timeout [ 128.886349][ T5763] Bluetooth: hci2: command tx timeout [ 128.889852][ T5763] Bluetooth: hci3: command tx timeout [ 128.961282][ T5759] hsr_slave_0: entered promiscuous mode [ 128.967581][ T5759] hsr_slave_1: entered promiscuous mode [ 128.971801][ T5759] debugfs: 'hsr0' already exists in 'hsr' [ 128.974630][ T5759] Cannot create hsr debugfs directory [ 129.261933][ T5764] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 129.290755][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 129.382811][ T5764] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 129.396809][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 129.459773][ T5764] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 129.474140][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 129.479005][ T5764] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 129.511655][ T5764] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 129.782579][ T5762] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 129.801446][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 129.805363][ T5762] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 129.813153][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 129.818168][ T5762] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 129.827589][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 129.849371][ T5762] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 129.856074][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 130.012276][ T5757] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 130.022449][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 130.028407][ T5757] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 130.034888][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 130.077123][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.103947][ T5757] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 130.137237][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 130.273424][ T5757] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 130.279523][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 130.322203][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.460553][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.464326][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.540748][ T5759] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 130.568135][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 130.575099][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.603677][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.633059][ T5759] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 130.657562][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 130.661547][ T5759] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 130.681630][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 130.685616][ T5759] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 130.735835][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 130.897739][ T5763] Bluetooth: hci0: command tx timeout [ 130.911384][ T5763] Bluetooth: hci1: command tx timeout [ 130.977269][ T5763] Bluetooth: hci3: command tx timeout [ 130.978059][ T5766] Bluetooth: hci2: command tx timeout [ 130.992467][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.121492][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.224982][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.241334][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.300216][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.304266][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.324563][ T5757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.435861][ T5757] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.465812][ T5759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.499311][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.504022][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.519990][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.533950][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.587444][ T5759] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.626317][ T5762] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 131.649186][ T5762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.808197][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.825087][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.831472][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.839454][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.354367][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.519169][ T5764] veth0_vlan: entered promiscuous mode [ 132.649567][ T5764] veth1_vlan: entered promiscuous mode [ 132.860586][ T5764] veth0_macvtap: entered promiscuous mode [ 132.934827][ T5764] veth1_macvtap: entered promiscuous mode [ 132.972570][ T5766] Bluetooth: hci1: command tx timeout [ 132.972958][ T5763] Bluetooth: hci0: command tx timeout [ 132.978493][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.074645][ T5763] Bluetooth: hci2: command tx timeout [ 133.077073][ T5763] Bluetooth: hci3: command tx timeout [ 133.166576][ T5759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.264911][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.274595][ T5757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.380398][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.392056][ T5762] veth0_vlan: entered promiscuous mode [ 133.441929][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.446954][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.450224][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.475226][ T5762] veth1_vlan: entered promiscuous mode [ 133.487835][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.625629][ T5759] veth0_vlan: entered promiscuous mode [ 133.653945][ T5757] veth0_vlan: entered promiscuous mode [ 133.721143][ T5762] veth0_macvtap: entered promiscuous mode [ 133.739812][ T5759] veth1_vlan: entered promiscuous mode [ 133.759149][ T5757] veth1_vlan: entered promiscuous mode [ 133.765581][ T5762] veth1_macvtap: entered promiscuous mode [ 133.784760][ T5759] veth0_macvtap: entered promiscuous mode [ 133.833280][ T5759] veth1_macvtap: entered promiscuous mode [ 133.859693][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.874404][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.900480][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.946494][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.020070][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.030523][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.051461][ T5757] veth0_macvtap: entered promiscuous mode [ 134.086521][ T5757] veth1_macvtap: entered promiscuous mode [ 134.091104][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.097014][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.206502][ T44] kauditd_printk_skb: 1 callbacks suppressed [ 134.206524][ T44] audit: type=1400 audit(1785997155.385:169): avc: denied { mount } for pid=5764 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 134.220741][ T44] audit: type=1400 audit(1785997155.385:170): avc: denied { mounton } for pid=5764 comm="syz-executor" path="/syzkaller.f5939o/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 134.253704][ T44] audit: type=1400 audit(1785997155.445:171): avc: denied { mount } for pid=5764 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 134.267485][ T44] audit: type=1400 audit(1785997155.445:172): avc: denied { mounton } for pid=5764 comm="syz-executor" path="/syzkaller.f5939o/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 134.287973][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.288317][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.288379][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.288405][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.288430][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.288455][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.288479][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.288520][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.288546][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.298360][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.336400][ T44] audit: type=1400 audit(1785997155.445:173): avc: denied { mounton } for pid=5764 comm="syz-executor" path="/syzkaller.f5939o/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 134.367055][ T44] audit: type=1400 audit(1785997155.485:174): avc: denied { unmount } for pid=5764 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 134.378717][ T44] audit: type=1400 audit(1785997155.555:175): avc: denied { mounton } for pid=5764 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 134.409859][ T44] audit: type=1400 audit(1785997155.575:176): avc: denied { mount } for pid=5764 comm="syz-executor" name="/" dev="gadgetfs" ino=6089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 134.434765][ T44] audit: type=1400 audit(1785997155.575:177): avc: denied { mount } for pid=5764 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 134.456221][ T44] audit: type=1400 audit(1785997155.575:178): avc: denied { mounton } for pid=5764 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 134.656098][ T5764] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 134.719907][ T5901] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.728225][ T191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.739405][ T191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.796907][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.800797][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.946371][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.954357][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.984259][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.142817][ T191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.156886][ T191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.379700][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.384168][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.468097][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.471837][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.653969][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.667384][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.053262][ T5915] ip_tables: iptables: counters copy to user failed while replacing table [ 136.387634][ T5912] could not allocate digest TFM handle xcbc(aes-arm) [ 136.494195][ T5934] ALSA: seq fatal error: cannot create timer (-22) [ 137.065179][ T5543] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 137.103263][ T5543] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 137.106831][ T5543] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 137.110180][ T5543] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 137.141010][ T5543] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 137.150946][ T5543] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 137.178948][ T5543] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 137.198513][ T5543] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 137.265462][ T5543] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 137.270506][ T5543] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 137.283015][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 137.312727][ T42] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 137.336839][ T5543] hid-generic 0004:FFFFFFFF:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 137.508454][ T42] usb 6-1: config 0 has no interfaces? [ 137.512809][ T42] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 137.523324][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.533310][ T42] usb 6-1: config 0 descriptor?? [ 137.545560][ T10] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 137.649124][ T10] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 137.663461][ T10] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 137.673015][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.738222][ T10] usb 8-1: Product: syz [ 137.748813][ T10] usb 8-1: Manufacturer: syz [ 137.765944][ T10] usb 8-1: SerialNumber: syz [ 137.803993][ T5950] syzkaller0: entered promiscuous mode [ 137.809123][ T5950] syzkaller0: entered allmulticast mode [ 137.848819][ T10] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 137.919708][ T10] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 137.930877][ T5950] tipc: Started in network mode [ 137.988041][ T5950] tipc: Node identity eefd48a3e808, cluster identity 4711 [ 138.000199][ T5950] tipc: Enabled bearer , priority 0 [ 138.019790][ T10] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 138.188474][ T5949] tipc: Resetting bearer [ 138.383581][ T5949] tipc: Disabling bearer [ 138.510807][ T5960] Cannot find set identified by id 0 to match [ 138.729232][ T5543] usb 6-1: USB disconnect, device number 2 [ 138.883975][ T5960] C: renamed from veth1_to_team (while UP) [ 138.905530][ T5956] input: syz0 as /devices/virtual/input/input5 [ 138.947285][ T5960] netlink: 'syz.2.13': attribute type 1 has an invalid length. [ 138.951362][ T5960] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13'. [ 138.958216][ T5960] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 138.959955][ T5965] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 139.051254][ T5964] tmpfs: Bad value for 'huge' [ 139.429029][ T44] kauditd_printk_skb: 62 callbacks suppressed [ 139.429047][ T44] audit: type=1400 audit(1785997160.655:241): avc: denied { unmount } for pid=5759 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 139.566665][ T44] audit: type=1400 audit(1785997160.775:242): avc: denied { create } for pid=5971 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.569069][ T5970] ªªªªª): renamed from hsr0 (while UP) [ 139.632889][ T5976] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 139.676690][ T5976] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 139.692160][ T5942] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 139.913742][ T44] audit: type=1400 audit(1785997161.125:243): avc: denied { append } for pid=5981 comm="syz.1.20" name="v4l-subdev0" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 140.072987][ T5980] netlink: Failed to add helper -22 [ 140.092549][ T5980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.119594][ T44] audit: type=1400 audit(1785997161.325:244): avc: denied { create } for pid=5988 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 140.161893][ T5987] syz.0.21 uses obsolete (PF_INET,SOCK_PACKET) [ 140.167173][ T44] audit: type=1400 audit(1785997161.375:245): avc: denied { ioctl } for pid=5985 comm="syz.0.21" path="socket:[7954]" dev="sockfs" ino=7954 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 140.214362][ T44] audit: type=1400 audit(1785997161.405:246): avc: denied { create } for pid=5985 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 140.256529][ T44] audit: type=1400 audit(1785997161.405:247): avc: denied { setopt } for pid=5985 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 140.265457][ T44] audit: type=1400 audit(1785997161.405:248): avc: denied { bind } for pid=5988 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 140.281971][ T44] audit: type=1400 audit(1785997161.425:249): avc: denied { setopt } for pid=5988 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 140.346682][ T44] audit: type=1400 audit(1785997161.425:250): avc: denied { accept } for pid=5988 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 140.431311][ T63] usb 8-1: USB disconnect, device number 2 [ 140.511038][ T63] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 140.538728][ T63] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 140.655062][ T63] ti_usb_3410_5052 8-1:2.0: device disconnected [ 140.791762][ T5996] program syz.2.25 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.002387][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'. [ 141.016291][ T6005] capability: warning: `syz.3.27' uses deprecated v2 capabilities in a way that may be insecure [ 141.030092][ T5766] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 141.047509][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'. [ 141.053466][ T5766] CPU: 3 UID: 0 PID: 5766 Comm: kworker/u34:5 Not tainted syzkaller #0 PREEMPT(full) [ 141.053494][ T5766] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.053508][ T5766] Workqueue: hci3 hci_rx_work [ 141.053539][ T5766] Call Trace: [ 141.053556][ T5766] [ 141.053564][ T5766] dump_stack_lvl+0x100/0x190 [ 141.053601][ T5766] sysfs_warn_dup.cold+0x1c/0x28 [ 141.053633][ T5766] sysfs_create_dir_ns+0x24b/0x2b0 [ 141.053654][ T5766] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 141.053672][ T5766] ? find_held_lock+0x2b/0x80 [ 141.053689][ T5766] ? kobject_add_internal+0x25f/0x930 [ 141.053714][ T5766] ? kobject_add_internal+0x25f/0x930 [ 141.053762][ T5766] ? do_raw_spin_unlock+0x145/0x1e0 [ 141.053794][ T5766] kobject_add_internal+0x2c8/0x930 [ 141.053823][ T5766] kobject_add+0x16a/0x1e0 [ 141.053848][ T5766] ? __pfx_kobject_add+0x10/0x10 [ 141.053870][ T5766] ? class_to_subsys+0x10f/0x150 [ 141.053898][ T5766] ? kobject_put+0xb9/0x640 [ 141.053918][ T5766] ? _raw_spin_unlock+0x28/0x50 [ 141.053940][ T5766] device_add+0x294/0x1970 [ 141.053963][ T5766] ? __pfx_dev_set_name+0x10/0x10 [ 141.053978][ T5766] ? __pfx_device_add+0x10/0x10 [ 141.054001][ T5766] ? mgmt_send_event_skb+0x2fb/0x460 [ 141.054025][ T5766] hci_conn_add_sysfs+0x1a3/0x260 [ 141.054047][ T5766] le_conn_complete_evt+0x11eb/0x1f60 [ 141.054071][ T5766] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 141.054088][ T5766] ? hci_event_packet+0x186/0xcd0 [ 141.054110][ T5766] hci_le_conn_complete_evt+0x23c/0x3a0 [ 141.054129][ T5766] ? skb_pull_data+0x15f/0x1e0 [ 141.054157][ T5766] hci_le_meta_evt+0x34a/0x5f0 [ 141.054176][ T5766] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 141.054197][ T5766] hci_event_packet+0x51c/0xcd0 [ 141.054216][ T5766] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 141.054235][ T5766] ? __pfx_hci_event_packet+0x10/0x10 [ 141.054255][ T5766] ? kcov_remote_start+0x384/0x670 [ 141.054274][ T5766] ? lockdep_hardirqs_on+0x78/0x100 [ 141.054298][ T5766] hci_rx_work+0x451/0xfc0 [ 141.054320][ T5766] process_one_work+0xa23/0x1940 [ 141.054346][ T5766] ? __pfx_process_one_work+0x10/0x10 [ 141.054369][ T5766] ? __pfx_hci_rx_work+0x10/0x10 [ 141.054388][ T5766] worker_thread+0x5ef/0xe50 [ 141.054413][ T5766] ? kthread+0x13a/0x450 [ 141.054426][ T5766] ? __pfx_worker_thread+0x10/0x10 [ 141.054442][ T5766] kthread+0x370/0x450 [ 141.054456][ T5766] ? __pfx_kthread+0x10/0x10 [ 141.054472][ T5766] ret_from_fork+0x72b/0xd50 [ 141.054495][ T5766] ? __pfx_ret_from_fork+0x10/0x10 [ 141.054516][ T5766] ? __switch_to+0x800/0x10f0 [ 141.054532][ T5766] ? __pfx_kthread+0x10/0x10 [ 141.054548][ T5766] ret_from_fork_asm+0x1a/0x30 [ 141.054582][ T5766] [ 141.054633][ T5766] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 141.308129][ T5766] Bluetooth: hci3: failed to register connection device [ 142.208342][ T6032] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 142.613027][ T6034] overlayfs: workdir and upperdir must reside under the same mount [ 142.769103][ T6041] syz_tun: entered allmulticast mode [ 142.799887][ T6036] syz_tun: left allmulticast mode [ 143.046400][ T6053] capability: warning: `syz.3.38' uses 32-bit capabilities (legacy support in use) [ 143.059221][ T6053] program syz.3.38 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.203678][ T6056] syzkaller0: entered promiscuous mode [ 143.216368][ T6056] syzkaller0: entered allmulticast mode [ 143.751996][ T6067] tipc: Started in network mode [ 143.776310][ T6067] tipc: Node identity 7f000001, cluster identity 4711 [ 143.832082][ T6067] tipc: Enabled bearer , priority 10 [ 144.026647][ T6075] sctp: [Deprecated]: syz.1.47 (pid 6075) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.026647][ T6075] Use struct sctp_sack_info instead [ 144.262085][ T6090] process 'syz.2.51' launched './file0' with NULL argv: empty string added [ 144.494981][ T6093] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 144.540810][ T44] kauditd_printk_skb: 69 callbacks suppressed [ 144.540830][ T44] audit: type=1400 audit(1785997165.755:320): avc: denied { bind } for pid=6101 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.570928][ T44] audit: type=1400 audit(1785997165.755:321): avc: denied { map } for pid=6096 comm="syz.2.53" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 144.580943][ T6102] Zero length message leads to an empty skb [ 144.616106][ T44] audit: type=1400 audit(1785997165.755:322): avc: denied { read write } for pid=6096 comm="syz.2.53" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 144.616333][ T44] audit: type=1400 audit(1785997165.755:323): avc: denied { setopt } for pid=6101 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.616365][ T44] audit: type=1400 audit(1785997165.775:324): avc: denied { read } for pid=6101 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.638723][ T44] audit: type=1400 audit(1785997165.845:325): avc: denied { cmd } for pid=6096 comm="iou-wrk-6097" path="/dev/ublk-control" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 144.695156][ T6097] overlay: Unknown parameter 'euid<00000000000000016832' [ 144.717805][ T44] audit: type=1400 audit(1785997165.865:326): avc: denied { watch watch_reads } for pid=6096 comm="syz.2.53" path="/15" dev="tmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 144.717858][ T44] audit: type=1400 audit(1785997165.865:327): avc: denied { mount } for pid=6096 comm="syz.2.53" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 144.717896][ T44] audit: type=1400 audit(1785997165.865:328): avc: denied { mount } for pid=6096 comm="syz.2.53" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 144.717931][ T44] audit: type=1400 audit(1785997165.875:329): avc: denied { search } for pid=6096 comm="syz.2.53" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 144.924523][ T6109] rdma_rxe: Failed to create IPv4 UDP tunnel [ 144.929948][ T63] tipc: Node number set to 2130706433 [ 145.226924][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 145.250123][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.600402][ T6110] infiniband syz0: set active [ 145.604064][ T6110] infiniband syz0: added veth0 [ 145.647208][ T6110] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 145.672573][ T6110] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 145.690032][ T6110] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 146.013241][ T6133] IPv6: NLM_F_CREATE should be specified when creating new route [ 146.047594][ T6110] RDS/IB: syz0: added [ 146.057122][ T6110] smc: adding ib device syz0 with port count 1 [ 146.063176][ T6110] smc: ib device syz0 port 1 has no pnetid [ 146.573154][ T6146] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 147.614295][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.843521][ T6179] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 148.603062][ T6208] netlink: 132 bytes leftover after parsing attributes in process `syz.1.81'. [ 148.669168][ T6214] blkio.reset_stats is deprecated [ 149.217302][ T6228] netlink: 112 bytes leftover after parsing attributes in process `syz.3.86'. [ 149.431701][ T6235] ======================================================= [ 149.431701][ T6235] WARNING: The mand mount option has been deprecated and [ 149.431701][ T6235] and is ignored by this kernel. Remove the mand [ 149.431701][ T6235] option from the mount to silence this warning. [ 149.431701][ T6235] ======================================================= [ 149.721709][ T44] kauditd_printk_skb: 72 callbacks suppressed [ 149.721728][ T44] audit: type=1400 audit(1785997170.905:402): avc: denied { connect } for pid=6238 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.744773][ T6239] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 149.796911][ T6243] key id 000004d2 not found [ 149.853909][ T44] audit: type=1400 audit(1785997171.055:403): avc: denied { shutdown } for pid=6238 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.988128][ T35] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 150.136305][ T35] usb 5-1: device descriptor read/64, error -71 [ 150.378714][ T44] audit: type=1400 audit(1785997171.555:404): avc: denied { write } for pid=6254 comm="syz.3.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 150.389949][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'. [ 150.436331][ T35] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 150.532258][ T6258] macsec1: entered allmulticast mode [ 150.550553][ T6258] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 150.555463][ T6258] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 150.586406][ T35] usb 5-1: device descriptor read/64, error -71 [ 150.608179][ T6258] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 150.726686][ T35] usb usb5-port1: attempt power cycle [ 150.743098][ T44] audit: type=1400 audit(1785997171.955:405): avc: denied { allowed } for pid=6265 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 150.848208][ T44] audit: type=1400 audit(1785997172.065:406): avc: denied { wake_alarm } for pid=6265 comm="syz.1.97" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 150.902017][ T44] audit: type=1400 audit(1785997172.115:407): avc: denied { read } for pid=6265 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 151.082487][ T44] audit: type=1400 audit(1785997172.285:408): avc: denied { ioctl } for pid=6272 comm="syz.1.99" path="socket:[10841]" dev="sockfs" ino=10841 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 151.116391][ T35] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 151.175075][ T35] usb 5-1: device descriptor read/8, error -71 [ 151.441165][ T35] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 151.472233][ T35] usb 5-1: device descriptor read/8, error -71 [ 151.582010][ T35] usb usb5-port1: unable to enumerate USB device [ 152.481222][ T6304] IPv6: NLM_F_CREATE should be specified when creating new route [ 152.739098][ T6307] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 152.787499][ T44] audit: type=1400 audit(1785997173.995:409): avc: denied { connect } for pid=6306 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 152.871447][ T44] audit: type=1400 audit(1785997174.075:410): avc: denied { create } for pid=6312 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.889047][ T44] audit: type=1400 audit(1785997174.075:411): avc: denied { bind } for pid=6312 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.926384][ T5862] IPVS: starting estimator thread 0... [ 153.046450][ T6317] IPVS: using max 28 ests per chain, 67200 per kthread [ 153.311872][ T6328] netlink: 156 bytes leftover after parsing attributes in process `syz.0.111'. [ 153.724709][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'. [ 153.787884][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'. [ 154.152250][ T6348] pim6reg9: entered allmulticast mode [ 154.595989][ T6362] Bluetooth: MGMT ver 1.23 [ 154.741864][ T44] kauditd_printk_skb: 11 callbacks suppressed [ 154.741883][ T44] audit: type=1400 audit(1785997175.935:423): avc: denied { write } for pid=6364 comm="syz.0.123" lport=262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.853892][ T44] audit: type=1400 audit(1785997176.055:424): avc: denied { ioctl } for pid=6360 comm="syz.3.122" path="socket:[11822]" dev="sockfs" ino=11822 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 154.897116][ T44] audit: type=1400 audit(1785997176.085:425): avc: denied { write } for pid=6366 comm="syz.1.124" name="nullb" dev="configfs" ino=2457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.909026][ T6367] zonefs (nullb0) ERROR: Not a zoned block device [ 154.917428][ T44] audit: type=1400 audit(1785997176.085:426): avc: denied { add_name } for pid=6366 comm="syz.1.124" name="nullb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 154.917468][ T44] audit: type=1400 audit(1785997176.085:427): avc: denied { create } for pid=6366 comm="syz.1.124" name="nullb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 155.043652][ T44] audit: type=1400 audit(1785997176.255:428): avc: denied { write } for pid=6360 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 155.117023][ T6361] netlink: 56 bytes leftover after parsing attributes in process `syz.3.122'. [ 155.334167][ T6377] usb usb9: usbfs: process 6377 (syz.2.127) did not claim interface 0 before use [ 155.999973][ T51] Bluetooth: Error in BCSP hdr checksum [ 156.229790][ C3] ================================================================== [ 156.239571][ C3] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 156.246229][ T44] audit: type=1400 audit(1785997177.465:429): avc: denied { create } for pid=6397 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 156.258895][ C3] Read of size 1 at addr ffff88803859c418 by task kworker/u33:7/191 [ 156.258921][ C3] [ 156.258932][ C3] CPU: 3 UID: 0 PID: 191 Comm: kworker/u33:7 Not tainted syzkaller #0 PREEMPT(full) [ 156.258950][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.258961][ C3] Workqueue: events_unbound bpf_map_free_deferred [ 156.258990][ C3] Call Trace: [ 156.258997][ C3] [ 156.259004][ C3] dump_stack_lvl+0x100/0x190 [ 156.259134][ C3] print_report+0x13d/0x4b0 [ 156.259158][ C3] ? __virt_addr_valid+0x239/0x430 [ 156.259222][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 156.259241][ C3] kasan_report+0xdf/0x1c0 [ 156.259264][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 156.259282][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 156.259298][ C3] __kasan_check_byte+0x36/0x50 [ 156.259319][ C3] lock_acquire+0x132/0x370 [ 156.259338][ C3] ? do_raw_spin_unlock+0x53/0x1e0 [ 156.259359][ C3] ? .slowpath+0x9/0x18 [ 156.259377][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 156.259393][ C3] ? p9_req_put+0xaf/0x250 [ 156.259415][ C3] p9_req_put+0xaf/0x250 [ 156.259436][ C3] req_done+0x1dc/0x2e0 [ 156.259454][ C3] ? __pfx_req_done+0x10/0x10 [ 156.259473][ C3] ? do_raw_spin_lock+0x128/0x260 [ 156.259496][ C3] ? __pfx_req_done+0x10/0x10 [ 156.259512][ C3] vring_interrupt+0x2ef/0x660 [ 156.259535][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 156.259548][ C3] __handle_irq_event_percpu+0x232/0x880 [ 156.259575][ C3] handle_irq_event+0xab/0x1e0 [ 156.259595][ C3] handle_edge_irq+0x34c/0x950 [ 156.259614][ C3] __common_interrupt+0xd8/0x2f0 [ 156.259637][ C3] common_interrupt+0x60/0xe0 [ 156.259656][ C3] asm_common_interrupt+0x26/0x40 [ 156.259672][ C3] RIP: 0010:handle_softirqs+0x1ad/0x9b0 [ 156.259692][ C3] Code: 20 44 88 74 24 1e 45 89 ee 48 c7 c7 c0 8a cd 8b e8 58 63 f2 09 31 d2 65 66 89 15 16 98 9b 12 e8 59 cb 49 00 fb bb ff ff ff ff <49> c7 c4 c0 a0 80 8e 41 0f bc de 83 c3 01 0f 85 a4 00 00 00 e9 1b [ 156.259705][ C3] RSP: 0018:ffffc90000708f28 EFLAGS: 00000206 [ 156.259717][ C3] RAX: 0000000000120336 RBX: 00000000ffffffff RCX: 0000000000000004 [ 156.259726][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a826d RDI: ffffffff8c402680 [ 156.259734][ C3] RBP: 00000000ffffc64e R08: 0000000000000001 R09: 0000000000000000 [ 156.259742][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: 000000000000000a [ 156.259750][ C3] R13: 0000000000000002 R14: 0000000000000002 R15: 1ffff920000e11ec [ 156.259764][ C3] ? handle_softirqs+0x1a7/0x9b0 [ 156.259783][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 156.259798][ C3] ? _raw_spin_unlock+0x28/0x50 [ 156.259812][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 156.259828][ C3] __irq_exit_rcu+0x162/0x210 [ 156.259846][ C3] irq_exit_rcu+0x9/0x30 [ 156.259862][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 156.259880][ C3] [ 156.259885][ C3] [ 156.259891][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 156.259908][ C3] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 156.259925][ C3] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 d0 27 f6 48 89 df e8 7e 20 28 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 2e 17 f6 65 8b 05 4e 57 a6 08 85 c0 74 16 5b [ 156.259940][ C3] RSP: 0018:ffffc900030e7a48 EFLAGS: 00000246 [ 156.259954][ C3] RAX: 0000000000000006 RBX: ffffffff9b948130 RCX: 0000000000000040 [ 156.259964][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a826d RDI: ffffffff8c402680 [ 156.259975][ C3] RBP: 0000000000000282 R08: 0000000000000001 R09: 0000000000000000 [ 156.259985][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 156.259992][ C3] R13: 0000000000101346 R14: 0000000000000006 R15: ffffc9002fecf000 [ 156.260005][ C3] debug_check_no_obj_freed+0x31f/0x630 [ 156.260027][ C3] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 156.260050][ C3] ? _raw_spin_unlock+0x28/0x50 [ 156.260064][ C3] ? find_unlink_vmap_area+0x306/0x3f0 [ 156.260083][ C3] remove_vm_area+0x1b0/0x390 [ 156.260102][ C3] free_vm_area+0x31/0x60 [ 156.260341][ C3] arena_map_free+0x10f/0x1c0 [ 156.260367][ C3] bpf_map_free_deferred+0x23e/0x810 [ 156.260429][ C3] process_one_work+0xa23/0x1940 [ 156.260451][ C3] ? __pfx_process_one_work+0x10/0x10 [ 156.260470][ C3] ? __pfx_bpf_map_free_deferred+0x10/0x10 [ 156.260493][ C3] worker_thread+0x5ef/0xe50 [ 156.260511][ C3] ? __pfx_worker_thread+0x10/0x10 [ 156.260528][ C3] ? kthread+0x13a/0x450 [ 156.260543][ C3] ? __pfx_worker_thread+0x10/0x10 [ 156.260559][ C3] kthread+0x370/0x450 [ 156.260574][ C3] ? __pfx_kthread+0x10/0x10 [ 156.260588][ C3] ret_from_fork+0x72b/0xd50 [ 156.260610][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 156.260637][ C3] ? __switch_to+0x800/0x10f0 [ 156.260653][ C3] ? __pfx_kthread+0x10/0x10 [ 156.260668][ C3] ret_from_fork_asm+0x1a/0x30 [ 156.260692][ C3] [ 156.260698][ C3] [ 156.260704][ C3] Allocated by task 6398: [ 156.260712][ C3] kasan_save_stack+0x30/0x50 [ 156.260727][ C3] kasan_save_track+0x14/0x30 [ 156.260740][ C3] __kasan_kmalloc+0xaa/0xb0 [ 156.260752][ C3] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 156.260772][ C3] p9_client_create+0xaf/0xd40 [ 156.260789][ C3] v9fs_session_init+0x3c/0xdd0 [ 156.260803][ C3] v9fs_get_tree+0xb8/0xb50 [ 156.260818][ C3] vfs_get_tree+0x92/0x320 [ 156.260836][ C3] path_mount+0x7d0/0x23d0 [ 156.260853][ C3] __x64_sys_mount+0x293/0x310 [ 156.260871][ C3] do_syscall_64+0x115/0x870 [ 156.260888][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.260903][ C3] [ 156.260906][ C3] Freed by task 6398: [ 156.260914][ C3] kasan_save_stack+0x30/0x50 [ 156.260929][ C3] kasan_save_track+0x14/0x30 [ 156.260942][ C3] kasan_save_free_info+0x3b/0x70 [ 156.260962][ C3] __kasan_slab_free+0x5f/0x80 [ 156.260976][ C3] kfree+0x22b/0x6c0 [ 156.260993][ C3] p9_client_create+0x72d/0xd40 [ 156.261009][ C3] v9fs_session_init+0x3c/0xdd0 [ 156.261023][ C3] v9fs_get_tree+0xb8/0xb50 [ 156.261038][ C3] vfs_get_tree+0x92/0x320 [ 156.261054][ C3] path_mount+0x7d0/0x23d0 [ 156.261068][ C3] __x64_sys_mount+0x293/0x310 [ 156.261082][ C3] do_syscall_64+0x115/0x870 [ 156.261098][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.261109][ C3] [ 156.261112][ C3] The buggy address belongs to the object at ffff88803859c400 [ 156.261112][ C3] which belongs to the cache kmalloc-512 of size 512 [ 156.261123][ C3] The buggy address is located 24 bytes inside of [ 156.261123][ C3] freed 512-byte region [ffff88803859c400, ffff88803859c600) [ 156.261135][ C3] [ 156.261139][ C3] The buggy address belongs to the physical page: [ 156.261145][ C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3859c [ 156.261156][ C3] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 156.261167][ C3] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 156.261183][ C3] page_type: f5(slab) [ 156.261195][ C3] raw: 00fff00000000040 ffff88801bc42c80 dead000000000100 dead000000000122 [ 156.261207][ C3] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 156.261220][ C3] head: 00fff00000000040 ffff88801bc42c80 dead000000000100 dead000000000122 [ 156.261233][ C3] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 156.261245][ C3] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 156.261257][ C3] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 156.261265][ C3] page dumped because: kasan: bad access detected [ 156.261272][ C3] page_owner tracks the page as allocated [ 156.261277][ C3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5448, tgid 5448 (S41dhcpcd), ts 76547510109, free_ts 74529249948 [ 156.261299][ C3] post_alloc_hook+0xfd/0x120 [ 156.261317][ C3] get_page_from_freelist+0xf48/0x3530 [ 156.261357][ C3] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 156.261370][ C3] new_slab+0xa2/0x640 [ 156.261380][ C3] refill_objects+0xe3/0x410 [ 156.261394][ C3] __pcs_replace_empty_main+0x376/0x680 [ 156.289667][ T44] audit: type=1400 audit(1785997177.465:430): avc: denied { read } for pid=6397 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 156.299060][ C3] __kmalloc_noprof+0x66d/0x820 [ 156.299092][ C3] tomoyo_init_log+0x1224/0x20c0 [ 156.299104][ C3] tomoyo_supervisor+0x506/0x1340 [ 156.299116][ C3] tomoyo_path_permission+0x270/0x3b0 [ 156.299130][ C3] tomoyo_path_perm+0x364/0x460 [ 156.299145][ C3] security_inode_getattr+0x116/0x280 [ 156.299161][ C3] vfs_statx+0x11f/0x3f0 [ 156.299174][ C3] vfs_fstatat+0x77/0xe0 [ 156.299186][ C3] __do_sys_newfstatat+0x9d/0x120 [ 156.299199][ C3] do_syscall_64+0x115/0x870 [ 156.299214][ C3] page last free pid 5152 tgid 5152 stack trace: [ 156.299226][ C3] __free_frozen_pages+0x79f/0x1090 [ 156.299247][ C3] qlist_free_all+0x47/0xf0 [ 156.299260][ C3] kasan_quarantine_reduce+0x1a0/0x1f0 [ 156.299272][ C3] __kasan_slab_alloc+0x69/0x90 [ 156.299287][ C3] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 156.299300][ C3] do_getname+0x35/0x390 [ 156.299314][ C3] vfs_fstatat+0xd0/0xe0 [ 156.299326][ C3] __do_sys_newfstatat+0x9d/0x120 [ 156.299343][ C3] do_syscall_64+0x115/0x870 [ 156.299356][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.299369][ C3] [ 156.299373][ C3] Memory state around the buggy address: [ 156.299382][ C3] ffff88803859c300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 156.299392][ C3] ffff88803859c380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 156.299401][ C3] >ffff88803859c400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.299407][ C3] ^ [ 156.299414][ C3] ffff88803859c480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.299422][ C3] ffff88803859c500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.299432][ C3] ================================================================== [ 156.299440][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 156.299451][ C3] CPU: 3 UID: 0 PID: 191 Comm: kworker/u33:7 Not tainted syzkaller #0 PREEMPT(full) [ 156.299468][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.299478][ C3] Workqueue: events_unbound bpf_map_free_deferred [ 156.299504][ C3] Call Trace: [ 156.299511][ C3] [ 156.299518][ C3] dump_stack_lvl+0x100/0x190 [ 156.299537][ C3] vpanic+0x552/0x970 [ 156.299553][ C3] ? __pfx_vpanic+0x10/0x10 [ 156.299568][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 156.299591][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 156.299607][ C3] panic+0xd1/0xe0 [ 156.299621][ C3] ? __pfx_panic+0x10/0x10 [ 156.299644][ C3] ? end_report.part.0+0x23/0x90 [ 156.299666][ C3] ? rcu_is_watching+0x12/0xc0 [ 156.299691][ C3] ? end_report.part.0+0x23/0x90 [ 156.299712][ C3] ? check_panic_on_warn+0x1f/0x90 [ 156.299730][ C3] check_panic_on_warn.cold+0x19/0x34 [ 156.299747][ C3] end_report.part.0+0x3a/0x90 [ 156.299768][ C3] kasan_report.cold+0xe/0x18 [ 156.299790][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 156.299808][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 156.299824][ C3] __kasan_check_byte+0x36/0x50 [ 156.299845][ C3] lock_acquire+0x132/0x370 [ 156.299864][ C3] ? do_raw_spin_unlock+0x53/0x1e0 [ 156.299885][ C3] ? .slowpath+0x9/0x18 [ 156.299904][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 156.299920][ C3] ? p9_req_put+0xaf/0x250 [ 156.299941][ C3] p9_req_put+0xaf/0x250 [ 156.299963][ C3] req_done+0x1dc/0x2e0 [ 156.299982][ C3] ? __pfx_req_done+0x10/0x10 [ 156.300001][ C3] ? do_raw_spin_lock+0x128/0x260 [ 156.300018][ C3] ? __pfx_req_done+0x10/0x10 [ 156.300032][ C3] vring_interrupt+0x2ef/0x660 [ 156.300049][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 156.300064][ C3] __handle_irq_event_percpu+0x232/0x880 [ 156.300087][ C3] handle_irq_event+0xab/0x1e0 [ 156.300107][ C3] handle_edge_irq+0x34c/0x950 [ 156.300128][ C3] __common_interrupt+0xd8/0x2f0 [ 156.300147][ C3] common_interrupt+0x60/0xe0 [ 156.300168][ C3] asm_common_interrupt+0x26/0x40 [ 156.300186][ C3] RIP: 0010:handle_softirqs+0x1ad/0x9b0 [ 156.300204][ C3] Code: 20 44 88 74 24 1e 45 89 ee 48 c7 c7 c0 8a cd 8b e8 58 63 f2 09 31 d2 65 66 89 15 16 98 9b 12 e8 59 cb 49 00 fb bb ff ff ff ff <49> c7 c4 c0 a0 80 8e 41 0f bc de 83 c3 01 0f 85 a4 00 00 00 e9 1b [ 156.300218][ C3] RSP: 0018:ffffc90000708f28 EFLAGS: 00000206 [ 156.300234][ C3] RAX: 0000000000120336 RBX: 00000000ffffffff RCX: 0000000000000004 [ 156.300242][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a826d RDI: ffffffff8c402680 [ 156.300252][ C3] RBP: 00000000ffffc64e R08: 0000000000000001 R09: 0000000000000000 [ 156.300261][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: 000000000000000a [ 156.300271][ C3] R13: 0000000000000002 R14: 0000000000000002 R15: 1ffff920000e11ec [ 156.300283][ C3] ? handle_softirqs+0x1a7/0x9b0 [ 156.300301][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 156.300317][ C3] ? _raw_spin_unlock+0x28/0x50 [ 156.300331][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 156.300346][ C3] __irq_exit_rcu+0x162/0x210 [ 156.300364][ C3] irq_exit_rcu+0x9/0x30 [ 156.300382][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 156.300399][ C3] [ 156.300405][ C3] [ 156.300411][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 156.300427][ C3] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 156.300441][ C3] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 d0 27 f6 48 89 df e8 7e 20 28 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 2e 17 f6 65 8b 05 4e 57 a6 08 85 c0 74 16 5b [ 156.300452][ C3] RSP: 0018:ffffc900030e7a48 EFLAGS: 00000246 [ 156.300463][ C3] RAX: 0000000000000006 RBX: ffffffff9b948130 RCX: 0000000000000040 [ 156.300471][ C3] RDX: 0000000000000000 RSI: ffffffff8e1a826d RDI: ffffffff8c402680 [ 156.300479][ C3] RBP: 0000000000000282 R08: 0000000000000001 R09: 0000000000000000 [ 156.300486][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 156.300493][ C3] R13: 0000000000101346 R14: 0000000000000006 R15: ffffc9002fecf000 [ 156.300506][ C3] debug_check_no_obj_freed+0x31f/0x630 [ 156.300526][ C3] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 156.300544][ C3] ? _raw_spin_unlock+0x28/0x50 [ 156.300555][ C3] ? find_unlink_vmap_area+0x306/0x3f0 [ 156.300571][ C3] remove_vm_area+0x1b0/0x390 [ 156.300587][ C3] free_vm_area+0x31/0x60 [ 156.300601][ C3] arena_map_free+0x10f/0x1c0 [ 156.300621][ C3] bpf_map_free_deferred+0x23e/0x810 [ 156.300646][ C3] process_one_work+0xa23/0x1940 [ 156.300663][ C3] ? __pfx_process_one_work+0x10/0x10 [ 156.300679][ C3] ? __pfx_bpf_map_free_deferred+0x10/0x10 [ 156.300696][ C3] worker_thread+0x5ef/0xe50 [ 156.300711][ C3] ? __pfx_worker_thread+0x10/0x10 [ 156.300724][ C3] ? kthread+0x13a/0x450 [ 156.300735][ C3] ? __pfx_worker_thread+0x10/0x10 [ 156.300746][ C3] kthread+0x370/0x450 [ 156.300757][ C3] ? __pfx_kthread+0x10/0x10 [ 156.300769][ C3] ret_from_fork+0x72b/0xd50 [ 156.300785][ C3] ? __pfx_ret_from_fork+0x10/0x10 [ 156.300801][ C3] ? __switch_to+0x800/0x10f0 [ 156.300813][ C3] ? __pfx_kthread+0x10/0x10 [ 156.300825][ C3] ret_from_fork_asm+0x1a/0x30 [ 156.300846][ C3] [ 156.313161][ C3] Kernel Offset: disabled VM DIAGNOSIS: 06:19:38 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=00000000000000c4 RCX=ffffffff81e8b30e RDX=ffff88801d342540 RSI=ffffffff81e8b2fc RDI=ffff88801d342540 RBP=0000000000000001 RSP=ffffc900007cfb78 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff920000f9f71 R13=0000000000000200 R14=ffff8880250ea540 R15=ffffc900007cfc40 RIP=ffffffff81e8b2fe RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5dd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000017c0 CR3=0000000039678000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 307a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc64a0a046 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc64a0a046 00007ffc64a0a04c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd6c635607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd6c635647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd6c6357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efd6c635639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff81fdc952 RDX=ffff88801fab8000 RSI=ffffffff81fdc92c RDI=ffff88801fab8000 RBP=ffff88806a743520 RSP=ffffc90000717858 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100d4e86a5 R14=0000000000000001 R15=ffff88806a53c880 RIP=ffffffff81fdc92e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ed8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f96b3e8cff8 CR3=000000000e994000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd78f5fc26 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd78f5fc26 00007ffd78f5fc2c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96b3035607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96b3035647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96b30357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96b3035639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96b31f25f8 00007f96b31f25c8 00007f96b31f2600 00007f96b31f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff97f09f58 RBX=0000000000000274 RCX=0000000000020bd9 RDX=ffffffff966ce038 RSI=000000000000027a RDI=ffffffff9809e978 RBP=0000000000000030 RSP=ffffc900067eefe8 R8 =ffffffff966ce068 R9 =0000000000000007 R10=ffffc900067ef178 R11=0000000000000000 R12=ffffffff81e57f20 R13=ffffc900067ef090 R14=ffffffff81e58d30 R15=ffffffff980a0428 RIP=ffffffff81e596ef RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f96b3e8d6c0 ffffffff 00c00000 GS =0000 ffff8880d5fd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f55cb7f5ff8 CR3=0000000064f2f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c6974616c6f76 2f7461706d6f636e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd78f5fc26 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd78f5fc26 00007ffd78f5fc2c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96b3035607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96b3035647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96b30357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f96b3035639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000017957d8a RBX=0000000000000000 RCX=0000000000000003 RDX=0000000000000061 RSI=ffffffff8c402600 RDI=ffffffff8c402640 RBP=0000006117957d64 RSP=ffffc90000708850 R8 =0000000000000007 R9 =0000000000000000 R10=00000000000f32ba R11=000000000000758b R12=0000000000000003 R13=0000000000000a29 R14=00000000000f32b9 R15=fffffbfff28d33c0 RIP=ffffffff8bb9d8e9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 000fffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 000fffff 00000000 FS =0000 0000000000000000 000fffff 00000000 GS =0000 ffff8880d60d8000 000fffff 00000000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00002000000000d8 CR3=0000000050bf4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6576697372756365 725f64656772656d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc3d5585c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc3d5585c6 00007ffc3d5585cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3376635607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3376635647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33766357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3376635639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000