last executing test programs: 1.241967938s ago: executing program 2 (id=1160): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f000000ba80)={0x8, 0xdf, 0xe, 0x4, 0xf4, 0x3}) 1.147482432s ago: executing program 2 (id=1163): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001814010028bd7000000000000800030001000000080001"], 0x20}}, 0x0) ioprio_set$pid(0x2, 0x0, 0x4000) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x18df00, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) 1.086135209s ago: executing program 2 (id=1165): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsopen(&(0x7f0000000240)='sysfs\x00', 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r6 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r8}]}}]}, 0x44}}, 0x800) ioctl$SIOCNRDECOBS(r3, 0x89e2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 848.716964ms ago: executing program 0 (id=1168): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) (async, rerun: 64) readv(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) mkdir(&(0x7f00000002c0)='./bus\x00', 0x29) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r2 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r3 = fsmount(r2, 0x0, 0x3) (async, rerun: 32) r4 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) (rerun: 32) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) (async) pwritev(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0x0) (async, rerun: 32) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) (rerun: 32) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r6, r6) r7 = openat$cgroup(r3, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000080)={0x201800000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000001800), 0x0, &(0x7f0000000a00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) (rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 826.660357ms ago: executing program 2 (id=1169): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e25, 0x100001, @mcast2, 0xb}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf250b000000040001"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x804) 769.318022ms ago: executing program 2 (id=1170): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bfd000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f00000002c0)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x40000106, 0x4}}], 0x20}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r6, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x44, r2, 0x917, 0x70bd2c, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 767.772279ms ago: executing program 0 (id=1171): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) (async) syz_emit_ethernet(0xfc1, &(0x7f00000023c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @multicast1}, "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"}}}}, 0x0) (async, rerun: 64) r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000053c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000005480)={0x0, 0x8, 0x3cdb, {0x0, 0x10000}}) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) (async) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000140)={0x3ff, 0x0, 0xffff36cd, 0x5, 0x3, 0x9}) (async) r4 = accept4$alg(r1, 0x0, 0x0, 0x80000) (async) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r4, &(0x7f0000000000)='e', 0x3f}]) (async) setfsuid(0xee00) (async) setresuid(0x0, 0x0, 0xffffffffffffffff) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0xf3a, 0x0) (async) write$binfmt_misc(r8, &(0x7f0000000980), 0xfdef) (async) splice(r7, 0x0, r8, 0x0, 0x80, 0x4) (async, rerun: 64) timer_settime(0x0, 0x0, 0x0, 0x0) (async, rerun: 64) close_range(r6, 0xffffffffffffffff, 0x0) (async) sendmmsg$alg(r4, &(0x7f0000001780)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)="00c910edf15b8b3451f012c78c3971ee5e", 0x11}, {&(0x7f00000004c0)="913bfc64a6a6185b1295af683e8f9c360cc068a245d1014b9fc8f6cbcea4a7f3", 0x20}], 0x2, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x1) 611.396857ms ago: executing program 2 (id=1173): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x70bd28, 0xfffffffe, {0x0, 0xcf, 0x0, 0x0, 0x808b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}, @IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x44}}, 0x4000010) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000003940)=0x10) read(r1, &(0x7f0000000080)=""/193, 0xc1) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000180)) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x21601, 0x0) r6 = signalfd4(r5, &(0x7f0000000240)={[0x2]}, 0x8, 0x800) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000400)=0x5) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) sendto$inet6(r0, &(0x7f0000000000)='D', 0x1, 0x28004044, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @empty, 0xfffffffd}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000400000000000000000000a90000000061d64a54557cb0b0b3143630a0b0400000000000000000200000368000480640001800b00010072656a65637400005400028008000140000000000800014000000001050002000100000008000140000000000500020009000000080001400000000205000200410000000800014000000001080001400000000205000200100000000900010073797a300000000008000b4000000003140000001100010000000000000000000100000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000080)=0x8, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000005c0)='configfs\x00', 0x200000, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x100) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 611.073863ms ago: executing program 0 (id=1174): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x0, 0x46, 0x0, 0x7, 0x100002}, 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) read$FUSE(r1, 0x0, 0x9) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x0, 0x0, 0x13, 0x4, @buffer={0x0, 0x5d, &(0x7f0000000080)=""/93}, &(0x7f0000000140)="0a36bd5a000b0f50e8e6fbd05ea13e51a56a75", &(0x7f0000000180)=""/91, 0x400, 0x10, 0x4, &(0x7f0000000200)}) 610.283706ms ago: executing program 0 (id=1176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x304000000) (async) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000b80)="6a676b5455fba79df21b375f0a394de0313d4bb6c390af2db07cd34d2140c78980770701a990a689d28cc8e64ff163890b70ee823e2595efebf8dcdfb3e55b66007e2347b33383f3269b4cf9c1f2ccdd4ebbdea0f904473450b25ad5b24934040309633de7429ddbf333b99d34d02d572bf158d4f2ef48807965d8ada5fc382e03980716e160b1f7275d18", 0x8b}], 0x1) (async) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000240)={0x0, 0x1, 0x0, &(0x7f0000000780)=""/218, 0x0, 0x25000}) (async) r5 = dup2(r4, r4) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r5, &(0x7f0000004d80)={0x2020}, 0x2020) (async) write$vhost_msg_v2(r5, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000280)=""/120, 0x78, 0x0, 0x0, 0x2}}, 0x48) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04180312c900a9e5e59df94e6a747416b02b69182f9b942616657586b96b8e1e91c17cce89577ec02cbcb2c13dfef6c288dcab936a75c95a0aef0ea0387a11e589809fae09f9bc15008d7f7f90e805e4af00d69f58485c75a8f5a2e45b1f92e687cacd1cefd04c402c37ca4bca59e952fbb14ae34b457503984422156e64681324cbfba7664b166fe02cb7185048242c74c87e3af3dd"], 0x6) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000b140)=@newtfilter={0x3f68, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x3f38, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xf, 0xb}}, @TCA_ROUTE4_ACT={0x1654, 0x6, [@m_ctinfo={0x1098, 0x20, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0xbc0, 0x4, 0x5, 0x7}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x6, 0x1, 0x0, 0x80000001}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7e1}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x7fff, 0x0, 0x3, 0x8}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}]}, {0x1004, 0x6, "43b61f94341001a241e2c59f2cbd31621b2941eaefc878793aa9a7a39c2c4e5bfebccccc5552e0ad7c26695fdcc4a3a4f0a48a378c4282ca93131ed33f6efe81dbe11413e05f4cc1b77ccf23cd4b00c63afe9687e461089c73758098f232594da11272b4753e7192b744270dcebbc895c22dac8c0f1c014e78314052b3840e49d386f37af7fcd4857882b8f7f75b4997fcbaf8101570dac084acf4ccce4e8edf9e975e02d499892ece63c7ab69333164f9370952b06157a9d10493a9ba12dd799c1eafd7f202974da0a27b270d64f89de33f52c1dc044e6f8027672b0e31f4f52f318bff5a898e11af873fdf83cf170666772908a6a95d853ea05d666f6f77d3ea8d932d7d22856990d7dec30520ee6d2e6fc91e40b5dcf12d7447672479e49a843b71c051427ec41074dc74eadd7f2a5f938530a904fb8d466e075c35f1188010ff9979df596ce9225aae4dcf786629313000f8e690fea256167fee2b1eddab2f8b0b2c3b02f17f1cb9e10c9b3c23bca2adbf64a9d02ce12d90d5cde4b1684e885c1a323b2f4eb8ab70ea5a1091db615b0a1f366d4a695e2bdad3fe22d6d0ecb0c410a8974fc95f98babaea58404d3d0be17730d9ae24885887711cd28cd12344b4a755144e744c1d01197e92d7fdbc9869112b03683a649ee03ac5377b2beb45593213e125fa2aee99f59aec5148a923d0c16560fc37f35c0b193df36169252512e905880866e146cd20b945e31f9edac52f62b9945622929e88e8db45491e7ef8f5308d4a85afd98963a3de599765db1e1b5532732293b509c792fa38831b99e943f06412a1328bf6014ad695a83d7aba8b6e3d718bf1d6d9c81a5c7c3daae051c43408e7323f851bb5acab5d80f9d57175faf5b37c2b28c35d7e39ea9822796e7915b68a7ea80897f0b191885558f31293a774bdfae2cbc94429c80f13b7436f1e0095b90b21dbfafea149229d0aea464cf40a9feb3cd51952ac1cb28eef507e96ed6e4a41dccd809540d79a219351f040b671159ded7d5d53cd03a121d1428be30927d7edb3e757d83221801328a63d694884bce57fd7e265c4e87b30e64082d395fee92a055724b7837125c5625c2e659a67e0b238e6da76dbcb225dbbbd899c216550e2f7c50ec5964dd4e32d5dd0b9d135dbb905d641b572d4d24ec696661e75dfc184d11bf5e94b62123eea92c3f1e999c297dfd3e85d70ba4e6892cb0ee80990c2da1bc9b59dce3b4bea6c19a97005eae4d85fb4cc82da2590f705354631c73d73788da00538475bb814f8b5ff9e221ab117c4170ff326a3aa0966588c8c7200e1a71c3d791613a22f3844e743670490935c61375be829c027cecd95f57388f7fb1e08f5b626eee9406f309c0fe240bd9a2c6f6da24d79f13fe9aaef6b237ce6c0cd485d68b7635fde027cdb61c250539136198dbb55fa09f16dc3ecb6e601974d1c7e3a91ccbe0436b83cc8b8b2ac442371838dc941890f42490a16048479e9dc2ccf39005909b2c9def525cfb4a08aa0b581d7ffd3fd1279c0288790e49bf73005a89fccdca1c31c7c729757cb7e7116b4e1dd3432ddaccb3763fc7cc879f200a3deadf4a2a254d9ed4257fa71a19ee7e56db9529e7914846968640edafd4f7094b2e9186f6133bcf5d323509c643a60062e976798337fdfd4ade1f8ef0235bbe4a3bb185acabb4be88320e3fbc9e38bd37ef60594738fe0d91895ac7870ebc3d3e17ded0794864120a33e0bf0683c742747cb52355fd88262e89e162599ca3b4334065e53df024797dcbd8312973ae0a29912a1928072729545ebf961570a5fb211138c5c9e1da6fc570a39abf0a1838af2988c3ee871932508bb5fa620f786003e042209182431d59afa57bbf68f86c9a92c8dcd5caad39a218109d8dc7878539cd8af31f57d26a16665f1d86858dcb0dc8a0590c51cf303bdf46bedca689c1c0b0695b7a402722e949262173059a43889b923cf6ec5b195aaccf41cd6f180deaa7b7fe8ec4ef7b2c7391ee010d809766bf49e8a443382838b3941c67b25bf32212380b2fa45bdc96670d2e288c4cd9ab88b1889141824ddb39208ed8c8bbea79c3394d4cfbe7a4cf3c205b16355c32287ad00c72d247e4655e96fd22edbb401c74d04999018ec7a17e83d393f4be2005a44fa84f68a0badf06949f61379e1fddf1329b435b0abb77d8953fdf2eb67c1e96cfbb61dc6eb73924d7dc1a3ebbf8b7fa9be7b2828e1c3c2189e9f64bb23f56de1529bfa580ddbc5061dd4a1b65dcf2612e4f12d3bac4f7583435a2c6eae91e1572da93be6ebea8e1d4cf270b6755bea6e56c395fbd530cc75a71731eeda20a9d5471ec7e64c7c459817dc000c86737289122c8137a4a7ba798194a676a602b6aa4f7cfb650e1f39581ebad740ddb11538d0404d61b0f41be305c03892daa11056565d5fc57c21c6e3394cd48968ab48ac2ebbdeee066734ad03a98c74702c60eed20de85428e3b1029c0200d3e9760c9f1d61fbea19516aa686d40d8ee2e2992ee5371970ec9a5b10d7406efa3085bc739ec44042728fcdd46512d99f4c60f4e5a79c44158ac44c2901c3e8b5be483ed6748f3d5ee68fb19d3ee5fd17120757d2de1e53aa8bca61d83d376aa0ff58fbcb35329e42f0ea994819b50e8259f7e1c7a465649fd1f23b6fe49b648b20c0a46db4ccc6e1e242f4c7c93c93f34067f377ac3f352821deeb2b1cc80fb7ef1924ccde6042f8bce6769c540d6b87d52fa0ff576ed655d1c528c3525e0c1ec943da65dc44fa210674852a308613b4f0ba3b1ac8955c41656de986d1d029d4afe6a7a50efa60d1f311b428fb69a678c2f2646b7c9c819083b03329cada9b0d531ba8e0d7be5bdf06ef1dcfe2acda0a4a556aab2962957d6ea58bac6c01f9ccc0040619e1df7cd639530a2ef260053b95e910d5fcb3dd641f2522d6c1f29e9846e89488b9765bbf627d8652da6419acd846f63f9ea1b4bba53c7921706cc1b219da545b6c6f364024a3b29f117c824ca1599cf5502bbcaaefe054e23e2c2ef07f380a0a7cd9150f564e7b8f6cd786cb4c0a2c9f24d192b254749072896c28537fbf10b1f2d46816ebe3f689ca808332ad5cfa7667d9b850d481ec9470f5c4c856fc4185f184a983a447486c1e7eccbbb0aa9a080e172be50b9592d11da03d880fdb2992de5e90327131e3909e02bf04f459bbeec4d5e1ac4d38aacb04fb752cec347b7798fdd325373e2ab5be7050420f09c5f75cd2236afe3f473b8abaedb8bb5f8d3aeb77c346728989916ca594d36dd15a5d7740a4f9f80037447ac6e96de7dd963f91daa1e3cc54d325804d660fc4a7d76696a1cb83a2137f2355da380222e4e514a1998bcd0d0fe3fff57dfaa395b208399285df23da80b389df8077b2d15dcd3bba916e2e39bdb4b9f418cc7b50741eb1a7c0ef9fd4a3777d52558c45148be1a02f613079420612ce5886843b5bd692eecf467ff3e04dbc33c13420838ba8282fa8061ba93a6dca054a7f771dbf38c4e6ea55247b76e0b72d078309ed7b54184ed5d5f80e28005c5b0db0947df00252d5d21387b1105c5c0059adbaae1e1925994e07ce9d93c4d5fed96f834b5c8c34d3e66e53a5eb60027c14cb8f1a86ea6ea23c57f32ade846a78c29d6fdd73f77a56d048b829b35b105a62967943b915766958d812980bad2832ad213fab5f4c4912db126b2493ff7d9eff1c5bba2a6c87ae24f281d173c0e362d02fe482588d8f0f763617f97399bb5001ee4abba79cccea180f5c1977e5aea5e9e5bc0c9be232c9ee97f68d545b9476ac92b11364e4fcd7280280511d5af551e26b02648b0bca7f42e31dd5b6bb27823b19399d15af32fe5e0686a49693edceb04381c1dd289e795b65b00b8a8f500932796ff756ca4340c0ff657bc9f26f23048d4e56f7a8f43c1f68884d83b873e6c73604143d00b444aa3a2a729506e62780dde0670b19908d720757a31f7f5946f49e38da479d11255890f2f8ec34cc20fae0863fc520f27db9683cffc071558719ff267fb89c8a59b4617a295a97ecaf5d219a6e9c74033a3e3a8460d0b5782d2e234d2be0dbc3e10fae38a262bdb53c0e505f6ac3f064e480485c8011bafb6e1dbde8a0e2e5c77b873a7c8983fd2a28f595c2b88c02f9432abd095419ae29296cd352a3ea3121c3a48f7ac2e2288114c412a175bb3b4a9279f48522659c7e4a2c1a6e2549711f6b19cdb12ae49abb1d0036bdce4f1de9c5843d2a6124491ccd4e27f6521faa63590ac993eac93e484421fff4bf6b747cea01af9f391e406fc27991d363e1d849249d50e1ca539587cb6d4b715febcfef848a292d0bc0513aa75ca1606c10344939938eb19211ea85a3c56bbbf8120b84fc7a7c0b68d8a462d3a303cd0294dd6ec853b27664001ccc6338ae7d16820b725c6d3b138b86b797455c18d0b988c10e52410dd71824a5b4529db16ea9b714afaa50625423026439c9079e6be5543292a13b74733b047b33be0b8c9b5b985c3b98c33f6330e593588cbe6fd87ccd036b521b3d55140241e0d74aab7eb2f03343fcd60fb40ec260c681301fcdcce243e96f85fac5f8e249ff4e7a119dc6b2d98195a230c725c4a0eabc0b4af1656a1b0802d5e056a147d3ef06b20a349234517452f00157e8465db5f4d7d21258a4684ba5ec8101bc931492512e7cf65e6eac588b07bb2598867b18c2e5a6e8860e1dce4d8a11cdc49ead20eaebdd623d94afada59e44993b2161f3b81c346311c2554c44fce0f8d45a48c86661f259c5aa881a8e30dc00f91d730394993cc2ba1736501c9697aea8916dde18223d80dbd2184f805a99b1f7987eeca8f0d58bb647c93a073a425b4158cf8434aa8ddd300547b04c09787433ac5a034dbe320b54f822b5f0f93e69bec8d142b6ae59de75f1d13eaa8ca09d26ca7b6f0efa98d65f8db41453ab0eb217cc779cd5d2908990bc47276ab8e17bd7b3deb81d0b63b27fac7a5408cf1fb94a22efc8df51ce027e67645f33bfde35705071fc5bd904ae1ec4561519e16bc33910c77279077948cd93effac59972a46759115fbf6c9da140d08d177159b9e60a32419818f8a37438a4f8e2528bb572f20ebb7b6e12e23081e7f708b86f312e637a6aa615b711f4cf853e404ef39b191715ca0a41f834553b9df4acb8de12a6548fa43f70df0a9bad8a07badb45c4a36ffacc153bb983a991101b51e20f0b2bc3e11d22b113acce9ec2cbc6b58445ab33e5baa22838788f720e740f04fe80dd745078bd3bfb3b488e5f6a7e222b0cc9f0755f179fce7f136637ff237fb764b8c2cc7ecd0cc069418e733c5e64b6ff31b57b0641a3733d75dec34fe863de2b1c8053e79dc4a9a6bf4adce7121848334f9ede7b7c874f2a4bd082d2b67b7015f337b23148460658b79e510852eb29967a8599d649a399d4462b107d5e80c05e6a87b15960dad1096353195123baa121deaaaa1cfda463ea08df54acfab832e257bac5fec12d79467564d35c49f9bac61975c12f5f7ee8c9699937d1e32ccff557ad2ba81b38beee93c4e7f67fb47304aa2ccfa7672516c891aacb585445ec1389421d1ab600181cc03d40bec0ef27a9474d24d4d63fe677bd90f30f10c2957c19057bad21041a923d3afa29033fe0fe7afae8530c5777bdf560c4af8614badab45b5d54783add4f5ae57e86807e19695b5040b826bee14b208958ad4498a711408984003aeb30516e7a25749bf2db525fc9da56345bf6b5fbb76c92d70b56b1f1177021312ae12d9f3ca1c07d431b0d3bbdb22140"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0xa4, 0x7, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x61, 0x6, "b1bf8b6788d55f2f6351ff67d96d590edd6e68c05fc88b0136a2aeaae0fa5f0597fd9888c9e3499ea83549762f21560cc1b7cbea8d50db4643cf335d035dae932ecf85ee193970cddb2ea7e1e2528752099f28c3ec61136b7f677f8bcc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0x150, 0x1f, 0x0, 0x0, {{0xf}, {0x68, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x9, 0x3, 0x401, 0x3ff}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x47}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2d}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x9, 0x6, 0x1, 0xa6}, 0x1}}]}, {0xb9, 0x6, "74b908fa4c04b9fa6b0c2349d16a55e29d66dcc25219ca95bfc5020f58ae71047f4330f63bcbcdf1174ad257b9747d15b3602df9b55bbfd6ebbead08cc34b5d1ae5b55e6fdb422b1064edab5f3bd36d8bcc478df62a066c9de73a84d7dc42129c1c09039d192511245a150b22840ddf165e0f845f657c0d2652b4305a1fabea6f2745898edb3af034eef08ed8c9f080aa8006fdecc7bffbbefc29e4f04d9125cbc42599e032510bf623e0f4cccaac3d9c54971243e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x4}}}}, @m_simple={0x15c, 0x1, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, 'syzkaller0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x0, 0x2, 0x481f9e15, 0xd87}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x7, 0x2, 0x9, 0xffffc65a}}, @TCA_DEF_DATA={0xe, 0x3, '\\^++:\\%@(\x00'}]}, {0xde, 0x6, "228a71661766b62960e4829cbfd7e4f99dff52a756f1ec25fa6aa0f1e1e645924a1cfcd2f22bf86b10114e693da6d8252746c17e65b3d37d286587d5c7dfebf753d8c73b511b590c07879574d9cd277ba2724a217f252f6fdae2c54ccc9eca409372299da8bf36afffe13c8e26c36a63f93d53fc8eca3444135b1587c130e051892e7069f4621a67d526acd303fef67eb8f32daeead00df0379cebf4e41f2c1283d253196308a9d6b0cae6b10afa0b99753fa9ccfbb366ca942a7c2840914f9a2c64a5a19c9f8a7f41623eb18ebb5eb0cbb42743353ebf9d83a8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0x15c, 0x4, 0x0, 0x0, {{0xb}, {0xb4, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @random="c080e5fa6d41"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1000, 0x9, 0x3, 0x7, 0x1}, 0xc}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0x7dee9ff4, 0x8, 0xfffffff7, 0x4}, 0x4}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0x3, 0x1, 0x2, 0x1}, 0x3}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfffffff9, 0xe1fc, 0x10000000, 0xffffffff, 0x9}}}]}, {0x7d, 0x6, "56800222727d261cb1d079f639a8b5cbfdefaa204df4df4492e8443cd2e610626530b26daf761357d648b021c4fe69b33dc3d68c688278f440e2d9e57965c2c977a953c576114e1c05a5fcc91c79f403bd4e39964843e5836f32ce363feb6f7c8ef90f0a447284ff92dcafb1611330e2415bc32d7893e17597"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0x10c, 0xd, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80000000, 0x6, 0x4, 0x7f, 0x101}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x4, 0x9, 0x200}}]}, {0xb0, 0x6, "424372f7dece4ad4aded5872db974e0ca637681c146f94b08d09aa08f1ffead94c1c6984ca35f12c5f85031240abe25d28d8affb84b9229bdfb14fec04391b40abaa5e18faf87d7108e9e87e0a3a2520346314eaceb72c911128eb23e4511afb24b5bd4927dfd4cb3f70333337caa29c4452089204d38437cfbfd42b248ef99d7625f00adf2c96a8265758f4bb2207e6b85c63829361f1bea059a476a6f1bc0499300603107e56deffac284e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}, @TCA_ROUTE4_ACT={0x2494, 0x6, [@m_mpls={0x1040, 0x1b, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}]}, {0x1004, 0x6, "3f5677666500325cfcc41850975be21a4f918fbd04b46e4071cdf716453b5767909d4f773933db7df822a668c649137a7ab1c476d38922af80161120d856366ce109c7affb294264f3efb8ec2aea0ab1893b336325382eb484a5123f962294f25d5e731525ce7eeb8c651277cab3e7d9173818f56a0336a57f36e882fad6aabe3a235abe1cf06c348fd9d0e9fc05e0cc31c2264b0a0b4483176af292ab97b9ceb6a9fa06cdcd8f7547f00ed251af9cbfcdc85f4c5dfdad7a978705e84d6d8fe2d0fb78d03cf5ed5e292761fcc81dabb9fbbd1be4e5ae7f7e773dcbab6fc905923c408e47ced14f59c94a8d076a34290e23441e0e6a082d8e72f081c0895424a6f4d2bc49eeef15e2e3eac80989e94cf92779de11e124639f998422a3dc49fa99b26a51ccc6ab23a8b5d72e03fc7e7163f527c68c5d9456c03831b02aa492798eb3c95dcb1c1cc633d570e410fb85997aded9e795f9d0d62fbc66cb4f3b37914219a550a2f8d5c5385e8d9712296f6eb05be128a806522d03ef9fa5bd5a28dbbf8813bdd21705e3e8f46b3a229e3b82541c521d523b8df9561d0de40b0f1d3943e11c91dd779c1d6c6f3a4e44aca7bb6f8bffd1dada990c00a87b27d975eef4eec75fcd32d095cd6d4fc3ab93e2ebe4b4d2dbdaa566e41c45b61ee28303afd5081c7d517cd5a34ed822ede3bc67746335983f500c9eadd1fc81182c0ad5f3c207fef31323acda5b420f5bac129fbac40cede2cd56741fa0a9626a1bc88443081750b92b6c791d64ac08434d03431daa6edde219c1f29f5e9ee0749dee21d46637ca4712a478e24da31da23b26cc91712e6b53e6337e62da83086cdc1403d8cad8d0563f4d962c2cd3f3d5b663ab1e51e0d4a86354576616360555a3dd4e81d6ff4eaa5961dbe2cf252595076c076da256704d89915b3ab564fe058c1379d5a7645ee302187b7df2ec46d5fa0ff519cec37f147fb715a550a112827ae566409a19cdfe15f6a859859965baf2f28c5cc70b27e0553736063a4ca33745a66a8daa1fd72c99f795d319ab1f8707df88e47c07ca42c85c871a27654214808f53214219df93461eda2d2219ec8fea7eba72b28fd05d3f70215a54f3c91444fa7f2f9c950866b30a4c627dc9d1c467e4e62ffd03d56b9d111af99bdce9d3efbdcd49afe7ae6b2ae89342f828e86d7c08224be2897be9567cada571c0949f62c47bf0376601289cd4229445be6dd17665fe4fd2f252af682172facbc657167893aca5b7034a257529007a0fcb0e3458a05bbfe4cc261436b7f532a20756d6c0acfe81fc551fcd18a5ad216e8ad4e2168799124f863d4579fce952acae5311253546865be769cfb7788ddbdeae2eaa94a354d5f1f5fbf5a71b49d65c74380b784d1a671b501ee4b26d3d19ef2fb8de5ae4e1ece1c772f57fd5848f2a36b8039316fcc2275d235c2040f8a487979f91592c370e90ce19b06d21b8e62ecb9413685f6cae607aef9d8f0f05efc8a4b675a827e564e46e70e30b1aef68a734e7b3476a93bb38198127e773b568d1becacd8f5731317e4826ff78c896643e7940147852fbe453e07c8f0d035609e7811c40b1027e3ffd2549cf7e11f3c33da729889afba9066722ab7e1be13ed6a6d40aa41abcb0571394e664e668c95f18ef40ac227a74c1f7af1338b9af9943d5bfaa91fc8c3d70af68a90600970787a576f7b1f7196063eb20dc7c930f281625a0830974d15397672f90cc240edea312e404d287e2252bd43f9f545683fe18fb820940787fbbbdbe8c9da7750ea7f27eee3544f2d3b9895040aa740efb52777b700cb3128930ca85a771a31436e6484699191976c06dd1285dcc2ea7167a3d7f94858706f4bc34ba885a44d4c516403c6cdbfc1b12b49083bc9b0adaa1ee0914c7bcef92d04e0fc3025c4a836f8eddcd14d34a5ce378744a5ddc6d1e52f6b87e2a092a9332c4ad73233dbcff2e5eabfdb196603a31311ad5058bfcd9cb73718d0e6c906d802ba70a3d8e499035dadab290a7f962e7055f3ec200114d7aaac187015cbcb444c6574a72996ab566540b036a5f0c56787d74d7b09046da232b4c4512486e17f56933553ecf449d0509f4dc7db6fc9c21760b9bb15506f62589ed6e21185d72e2a20af7fa54d60b4cb5a0205258caec7700b713de5ab54c2230157d53d04bcc8be6090f8e862470f74dff25cf8232e9590f8cb2ee77281ba111c4f77443aebdcb955fc62353744af0ecd7b1b8a0fdd4215cd784d86c0db111df066ff44a36e1fcff9657f5b11bdf5f301840cdca50068f92766de75f7c8a7b1315756da62c7793f20942640e4a8ed6392584133d718a00e1252763c0cdcb051d264fb4263e882095168945e99617c9331ba674c2b3fb003c63c08b6475bd459eac997d5d3650931884a865c178dae3dee83bc715d50eb0291937c701a66d0c703c8c1faa100ed4b87a99207f0f57cee768f46e9be269c1fcd15601bceb26dcdbafc8e622d0b84c798a9f82163c6ebf84a1ddaecd3ad7e6a399ba0b330d86a5908b60cae3555629e8b020bce45b4c53aad58c7404c8652deed229eb0a1933980d73a0a8d8f7033df077bc42bb9c37fa4523a8fb46cb91e3f6699e6677aaf74909e859bbf8197d90de1a642180e11c59045ef4a5393c099a864fd60169bf1632d6ac894c80ddd93659171ede8a73b270c459ae8e871cece5641a660f93b6610813b9b9099a446646349bad82a79593e2465a922bb042513cb018d2254fc43705d348e263645583491000661cd5e7e44b226cc16cc7b919c90763e285d2dfcbd09c5d1244f2a908d25d9d3c758301d5ccb76dee2380e54140ef8d80241d59dacb40747760ff08639468060ee44b4c2101b78e3f6fdf84b8beacb84da09363b619810ba23a6b827e9d3dee0c5375e874dab193f5bfd63aced49ebf60b002bf7e77a0efe7d4e21cbece604410f930a81e3d8ce9f056a4751979488c291149b1c1c0e8b444c158b8ad33edee64f23d83f6ace9293ab285e4907e48f1f8bed7cc044c6f81b1c5f005c8f0a395de5c25d9b66431fc7b0b7e6937e9c30b069607a615c335bbcef23d45e782442b3db983dea74de0c5715a076f65c21eb873199059a773e8b64edd61913f50d2070e83402f24681d1315adb36ae415c07de7c5985f63f86097da67983f4d0bd249c7f1cf61b604f5207050b67da9e9f88500fd424f07f3f2062114610806d75679d269bb34230de6e7e93a14fa099ff82892735a0992bfad500b9da63017d142551d0f196d469501bdd3b80f7932a8b775b50efae3f4e4173db3a0d0e50e864e38e0e0bf598e66e0945e83b74cddbaa0b646cde45685f9ec54cf12275dc19304e80e3f4eb7714562c56212fb309f51cda7f99800c32987374af31d08dc0e782e68aedc192420ae22fbf6b58d5633b7c2cd81e8755972c3d8d1a4530381a627607f4ec1323fa05ae7deb714bdce28deebe391b5647a27b0353980697385ff43dd82daf4fbacb3abd1dc5b871a6b2cc5a0a90977425761fb14a660968b8ca13e2ddf5c72394bd028510f2661838524b22539595ba73069c9bdaf290a941dc3dd84a508a892d6314d4d8532d257b344b7f0299e222ef339f655c94a4d8f9744199f5e45675a3e54b52c6ebdd357bffa1e3425daf0efe43ee3f21402c561174c9045f3ea3810cfafac52056034861226fe13ce5dfd3a9924ceda58f55d8b1ae045c1ae9a921a05573d882cc4af96df1b6e4b5188a2a304d1f35104ffce947acedd3fdafb6f81749dda1b2d0aca57d6b0ad388f19b09c989cc19e09d0d9d24c2593fbd3c6b1919396feacc82849c81cfbefb489919873f4ff890e2c9f10cd6b0215cc50d6ce385b2711d96fec064e03034735d541b1c0fff9222d82a14b8de25bd05b7e052f51f8bb92f78fb2deffc275644a337564184e0e05e4200264a76b0768dd63f3dc394e7e498e2f09317af9dfe196f8bf990239491a039b639364960317bffeacdf51525b57096b76fdb774ad04968724dec7be37b54d06d65613a4cbcc68fc16a951a5e933036264b9430a00441645f02d8817c2a2b3731ac23c8ce97d78e63818325da70bb5c392095895bad96e5321f49bacc5058d94c96ae0aeb05ec36960a110ea9ad2b124bd0f47c7228552f5e8f5527659b518cecddab0665cffe51870d80a2aff7c55fc8d8725af07c54a42a0ab07178d83537cdb50a78aaf00d7c3c9e04fe43a624e713e9b406dbccfbdc5e8d69162e25f5bcd8df4e35d7c31b0e3b25ad6e1ad1b1d23382fa2c0991e9ddc677b88c3bc93649ce3b560a6ead6e398f4a8a3b9a8f6e49b34bf33cf49f34c6e18575760feb3830f997cb67a3dbd6470ecba45b5e51af75f237eff915ba4c0c876ef36b24d70fe6901028a58b2dbe3f3f95d2997e789c574685adb3756f105c157bedabb6ea7e32c6df9d606e885e91fed8304b9651027e54671758144d9a61609670c6b54fdd4001122a09cae5a37b4bb7c33f061f1734b68202adacde5839d5950864ecd8de7b3ea1f26935767793d2ef9c40122abba790253ecd66570ce4216aa722ff8d9d54a5a19a206f5c873e4d4bab15e5416b0172c722fc2f8fb515f656ce421d88b674e3fd3160e4afcaab834694b2f3cfd8c6598e5cb940ab5c1c9944ef372a24b25eefd0a7bc75495f1648df90f1fc2695c8de5acd25c959e5f7530679ca343b72283ab022a35e51644223d51b27e71d8237016e780b9c27392a522adba3ed7129c99abb1615b61b723c6f7c8e7f1454500b04801c400bcfc0f595712ac389dcba9c7d80fc5e3a03454f99e900c5805fdd6ec5ee8f3b6e87e7ea8b8efbd4dd469ac8b79aa08799903d852f55bb968c35e694bfdc8964ea145e15c92823b6aa5aff84aa17bc5f6a635e19a47abf56f82d0ef4c6c2d2a27d86ead6a6bb61187a4d51fd53b3fe0d553dd57075b48081a3bae9d6753b2ae5cdf631c95d96f677664e2ab79820c20e021bc64b20175567ff389b0245d879b38949df192ad87e0a4e554cc593f484c2794efce31a19f78f2eff848b27622b9828c9ed8920f95119da216e537dd8d36825c6d612855804cd6059128611fec70e705a3db2df8cfb394decda6b165fa44fdeb72564500f98e6859f536d5c84d72fb79ff938a41808ca485aae1e366a9a7afd6a0950301facc552e8167dd860bdf0fd6eca36d50f5f00b0c890c6f69156231734def6a63fea5a267cbc8cf09783b641d59cb4f412b0e07d8c1c76a4d8821482a8438dbbabc1a22f36b2360a47db21ce7acf738582166631665fd5d45433412adc28d9bed6f707697cbbb6546b1c024aff9f4616e67b45d170faeae89f44f5db61718d7110d60c968d82d139aace6eec6a55abe0287c4240cdb3c9b44841bf3a00dda1f8c728902509fcecead2b1fb2986232e4dc14ce71ccc442a3cb1928af4b0083ac4dc1f465b3522e11aa0d4f2f7dadccc7953aa224626ce0673535fbbae3af5b109744ffef926a323e97308f4fb2ac3bea93f46b31b37ee433df4414c7906b632184519f4e0de137c79039053d4e3615c66b9d9d0f0c510513e0b141c4251b0fe0be037462e42ff92357eace25a406f212171d3c7cb5046574816ad39d1b4020c317291d534cd972106b1288de4439dd90ee66f5b7ee9c32fc6f696053503ca595c9657a6c61ed525b4639f91d912b6b468babbd44e0435734104e2b5927884ce9bc28d077bb805aac771f43f0a29874ab594d7806786022cf8e60a28d24a73fa269f7f746f4fc27a9c96eacf3614e7746d59d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x10a0, 0x1d, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x0, 0x200024a, 0x3}, 0x18}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x6, 0x1, 0x5, 0x7}, 0x19}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffff801, 0x9, 0xffffffffffffffff, 0x3a59, 0x6}, 0x2d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x6, 0x0, 0x1000, 0x1000}, 0x5d}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x5}}}}, @m_ife={0x78, 0xd, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_DMAC={0xa, 0x3, @random="ddd70f829ce8"}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_TYPE={0x6, 0x5, 0x7da0}]}, {0x24, 0x6, "b972d6bbf7b800cf4fb3e3f2db8436f54d12bf51109594a0a87d28cac8753e68"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0x64, 0x5, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7ff, 0xfffff000, 0x10000000, 0x6, 0xa0}}]}, {0x15, 0x6, "738af5d450c7e50ae728d939b86d0effc6"}, {0xc, 0x7, {0xdb32707b46f1b9e4, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x1b0, 0x16, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffb, 0x6, 0xfffffffffffffffa, 0xd9c, 0x1}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x81, 0xae7b, 0x4, 0x8, 0x7ff}, @dev={0xac, 0x14, 0x14, 0x2b}, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x8, 0x1, 0x1, 0xc2938416}, @remote, @loopback, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xb5, 0x8d, 0x3, 0x4, 0xaa5}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10000, 0x10001, 0x0, 0x7, 0x8}, @dev={0xac, 0x14, 0x14, 0x29}, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6a601a12, 0x4, 0xffffffffffffffff, 0x6, 0x7}, @remote, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3ff, 0x10400, 0x8, 0x2}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10000, 0x2, 0x6, 0xb3, 0x1}, @multicast2, @loopback, 0x0, 0x1}}]}, {0x48, 0x6, "2886874ba5e9de85605953a08d970cbb8eb28a278caf1fe61af7a31cdfc6ea9248362496d9d03c80c37a20bc0c60fe1821c7e228c9dbfb5263c20fbc7d7df41c8abbb083"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x68, 0x1b, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40, 0x26d, 0x0, 0xfffeffff, 0x9}, 0x2}}]}, {0x1a, 0x6, "0fd5f2f1120f18b9459a12a0c32b079e3f70cbb90e7d"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0xbc, 0x7, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x8, 0x6, 0x0, 0x8477}, 0x1}}]}, {0x72, 0x6, "6c5ceef97d2b8632c81e4d137153c6b39b06afc2a20610e77e94828c155731c36173568b9672c68fb7b7a91c9d76dcf4cc72f222add3c182e84959af499eafac0307bebd156e6cc2c460eb3b3314c44821957bf00f589d859b19f62a605fe00d98f016983b1c14fc9b603ce32607"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x6}}, @TCA_ROUTE4_POLICE={0x43c, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff80000000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x7fffffff, 0x4f0a1f76, 0xbc, 0xffff, 0x551, 0x0, 0xfffffffc, 0xf10, 0x2, 0x6465, 0x4d, 0xfff, 0xb4543631, 0x4, 0x5, 0x5, 0x9f, 0x4000000, 0x4, 0x9, 0x8, 0x5ac4, 0x80, 0x7, 0x5, 0x6, 0x7ff, 0x5, 0x0, 0x1, 0x2, 0x8, 0x84, 0x5, 0x7, 0x0, 0x8000, 0x80000000, 0xe14, 0x7ff, 0x0, 0x10000, 0x2, 0x200, 0x28000000, 0xb866, 0x6520, 0x3, 0x10001, 0x3, 0x9, 0x7ff, 0xfe000000, 0x100, 0xcb5, 0x2, 0x9, 0x7, 0x5, 0x0, 0x15, 0x4, 0x6, 0x3, 0x9, 0x2, 0x800, 0xb, 0x93, 0x6, 0x40, 0xfc8, 0x0, 0x4, 0x7, 0x1, 0x9, 0x6, 0x348, 0x5, 0x200, 0x2, 0xffffffff, 0x9, 0x80000000, 0x7, 0xb, 0x121d3851, 0x0, 0xf9, 0x9, 0x1, 0xe1a, 0xe, 0x7fff, 0x9, 0x6, 0xffffffff, 0x656, 0x6, 0x100, 0x4, 0xb, 0x5, 0xd5f, 0xff, 0x6, 0xff, 0x0, 0xc5e, 0x966e, 0x2, 0x1, 0x1, 0x5, 0x1, 0x190, 0x7, 0x7, 0x0, 0x0, 0x2, 0x4ec, 0xd98, 0x9408, 0x3, 0x0, 0x0, 0x9bb, 0x9, 0xd, 0x7, 0x4, 0x4, 0x5, 0x2, 0x4, 0x1, 0x101, 0x800, 0x7, 0x1, 0x9, 0x5, 0x6, 0x1, 0x199, 0x9, 0x5, 0x8, 0x7, 0x9, 0x4, 0x0, 0x7, 0x3, 0x7, 0xfffffff8, 0xe3a0, 0x6, 0x0, 0xfffff801, 0x7, 0x5, 0x0, 0xd, 0x0, 0x8, 0x6, 0xfffffff7, 0x9, 0xfff, 0x2, 0x0, 0x6, 0xffff5760, 0x40, 0x2, 0x0, 0x4f4, 0xa61, 0x8, 0x6, 0xbffe, 0xd, 0x0, 0x7, 0x1, 0xfffffff8, 0x3, 0x5, 0xd2, 0xcc, 0x84, 0x60000, 0x9, 0x7ff, 0x2, 0x4, 0x0, 0x2, 0x4, 0x7, 0x200, 0x3, 0x6, 0xffffff4a, 0x6, 0x2, 0xa, 0x0, 0x8cfec000, 0x6, 0x10, 0x7, 0x6, 0xed6, 0xfffffffe, 0x8, 0x0, 0x9, 0x6, 0xa88b, 0x9, 0x0, 0xe, 0x4, 0x7ff, 0x13185109, 0x1000, 0x20, 0x9, 0x7, 0x7, 0x3, 0x40, 0xb, 0x0, 0x8, 0x7, 0x1, 0x0, 0xffffd4da, 0x7fffffff, 0xaa45, 0x1, 0x16, 0x1, 0x5, 0x5, 0x6, 0x7, 0x7f, 0x0, 0x101]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2f0f}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf3}]}]}}]}, 0x3f68}, 0x1, 0x0, 0x0, 0xc804}, 0x2) (async) close(r1) (async) sendto(r2, &(0x7f0000000a80)="f1267d3a0e82701843f9250d023deabb7fcc91a2f023b5530c59d48e38bf438b2d69153f08966830643c86120322218150fd4d43bd05e96e7ef68d4062712da6894a877f755259843b1aca2f52c614eee9220792392c958b785e7f497ead2b", 0x5f, 0x4000, &(0x7f0000000b00)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @multicast1}, 0x2, 0x4, 0x2, 0x3}}, 0x80) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c0ff000000000ff840000000200000003125ce882cbf490d908f1523f000000000000", 0x2e}, {&(0x7f0000000640)="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", 0x320}, {&(0x7f0000002680)="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", 0xcac}, {&(0x7f0000000440)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a6cb6faab2a777dde15829d9d419713d523ff60e494f69a880b0888b6b023dc9b5f6a05f99fe7cf5d148c5b", 0xd6}, {&(0x7f0000000980)="281a9d23fdff85a6f28bf48173b0e3b782453b0ad70cf48abf0b0ab0071d3c3d7b736f8f27fe30efd1bbe7b703e34502c0da00f7dee9782d8c52f31b1f69a6ebc9ade94566ea5d541e4e11a1c42a24ab80d01f836864e5ccf2b525074fe96a2c62ce224fee666f0f8d6ed490152373b15d394974fe3925f81e59194dc94dce66bf2cc8f4b2029aa530aa6e0bfae783c3ae787158726c450f9ac7ade3b2d2687a097200e4b25fe2bfe5a319a550b94b10d8dbd47286e42b64b97d3857ebc356e12f38ef18af765e", 0xc7}, {&(0x7f0000003340)="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", 0xe98}], 0x6}, 0x4005) (async) socket(0x21, 0x6, 0x5) 521.711589ms ago: executing program 3 (id=1177): writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bffd08307d80c79b1cb7b5f0c5b4d719c69c8513f748fbe425a7bc388c9019bef114779f7a10dc03a883d6e16a0a704f74297f381ff1db75098a9b38bb67206a7ff22e6ca46dc760bdad8a79d5951988c55a368dd1132ba7f129c2e65441eaa27492c069488df0881f123ca01ae873f5b36eb0fddb8f07420f5484d81cabde167c87ffbab6a94b24b5537bb1a08d56469f516fd4b7c66e2ac50d5ff4e52c628d0a89e53d0e78582a5ab2a2c714f66", 0xfe7c}], 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000080)={0x0, 0x8}, 0x2) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000f00)={0x2, 0x0, 0x1, 0x18, 0x9d, &(0x7f0000000b00)="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"}) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$sock_netdev_private(r5, 0x8949, &(0x7f0000000000)) dup2(r4, r2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x39, 0x4c, 0x2, 0x6, 0x1, @rand_addr=' \x01\x00', @loopback, 0x0, 0x1, 0xb, 0x5}}) write$FUSE_INIT(r0, &(0x7f0000000f40)={0x50, 0x0, r3, {0x7, 0x2d, 0x1, 0x10003080, 0x8, 0x8, 0x2c6c, 0xc7800000, 0x0, 0x0, 0x80, 0x16a6}}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2c, &(0x7f0000000480)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xa1, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x1e, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000800000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000a035e0ffffffffff82b7a2004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000400000000"], &(0x7f00000007c0)='GPL\x00', 0xffffffff, 0x62, &(0x7f0000000800)=""/98, 0x1f00, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000008c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000900)=[{0x4, 0x5, 0xd, 0x1}, {0x0, 0x5, 0xd, 0x5}, {0x2, 0x1, 0x9, 0x6}], 0x10, 0x100}, 0x94) r9 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) openat$cgroup_procs(r10, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) 441.89765ms ago: executing program 0 (id=1178): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000280)={{r0, &(0x7f0000000000)='9p\x00', 0x50b140, &(0x7f0000000100)={@align=0x8, {0x5, 0x3, 0x0, 0x3}}, 0x6, &(0x7f0000000140), &(0x7f0000000180)=0x20000000}, {[0x1, 0x1ff, 0xfff, 0x81]}, 0x9, 0x30, &(0x7f0000000240)=""/48}) sendmmsg$inet6(r2, &(0x7f00000027c0)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x9, @empty}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000340)="999a45d25497282f534aa2f288a8cda0951b8240ee5f2764fb6c06e377103f7f11d1e730723b5b86166fe1d0676c928633b2a998a2211870381d8a1e46974df2a6e10685c6", 0x45}, {&(0x7f00000003c0)}], 0x2, &(0x7f0000000440)=[@rthdr={{0xa8, 0x29, 0x39, {0x32, 0x12, 0x0, 0x3a, 0x0, [@mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @private2, @local, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00']}}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x2f, 0x5, '\x00', [@ra={0x5, 0x2, 0x4}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x5c, 0x4, 0x2, 0x52, 0x0, [@empty, @rand_addr=' \x01\x00']}}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x2c, 0x19, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x95, 0x8, [0xc, 0xfffffffffffffffe, 0x8001, 0xffffffff7fffffff]}}, @hao={0xc9, 0x10, @private1}, @calipso={0x7, 0x38, {0x3, 0xc, 0x4, 0xf1bf, [0x7fff, 0x3ff, 0x4, 0x1, 0x3, 0xd038]}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x31}}, @jumbo={0xc2, 0x4, 0x290d}, @calipso={0x7, 0x30, {0x2, 0xa, 0xfa, 0xe9f, [0x40, 0x0, 0x1000, 0x3, 0xc21]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xf}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x87, 0xd, '\x00', [@hao={0xc9, 0x10, @local}, @pad1, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x40, {0x1, 0xe, 0x4, 0x2, [0x3, 0xa, 0x5, 0x71dead25, 0xff, 0x1, 0x5]}}, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x58, 0x29, 0x4, {0x2b, 0x7, '\x00', [@pad1, @ra={0x5, 0x2, 0x2}, @calipso={0x7, 0x30, {0x0, 0xa, 0x9, 0x5, [0x400, 0x8001, 0x0, 0x5, 0xde0]}}]}}}], 0x300}}, {{&(0x7f0000000740)={0xa, 0x4e21, 0x200, @mcast2, 0x7}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000000780)="d46b528e0e55c584be4ebd86de796c093c2b21cced39fd7408f0bbc0", 0x1c}], 0x2, &(0x7f0000000800)=[@dstopts={{0x20, 0x29, 0x37, {0x0, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xc7}]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x6, 0xa, '\x00', [@ra={0x5, 0x2, 0x7be}, @enc_lim={0x4, 0x1, 0xa}, @jumbo={0xc2, 0x4, 0x14000000}, @pad1, @enc_lim, @calipso={0x7, 0x28, {0x0, 0x8, 0x6, 0x3, [0x4, 0xfffffffffffffffd, 0x59c, 0x0]}}, @pad1, @jumbo={0xc2, 0x4, 0xfffffff8}, @ra={0x5, 0x2, 0x3}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f00000008c0)="5d4d6febe3248bc4eec09e38d8e99ddf6af26f00fd12b429d0d113ddbd686917c2c65388463fdcd5807e3ff373bdd03aab6c3b7eb992d2f4244c5ee10db0f770ac90336717e30c1d1e7ba15b93d1e714f569d0783bbdd987b1caec324d593664799e7f1444c523f9130582c7e661ea1046020aa42a215bd72ab4d22b9d32889acb91376a33bfb24ccc645142685cd99c9291bda43c4884d5f3ecf4df8451708a5a01440cefe683aa6c1a6f02dec0e187d621cba5e0f668a7b79e70532a311acd5b98d0e02cf0486c80fdf9e494f62e94fb", 0xd1}, {&(0x7f00000009c0)="a01973d079be0c6ed23ad270fdf0020b63252b97662c7460faac0231599ef68c39acf9d7bf3b2a5fd0de47d9003e772ac48f284502eae20f00d3a4ccf0e0e37eacb1231766a21ddbb11bddcfebada1de0a40747bc747794680d9cd8c7c479f3eb88c1ed571f81aafa0424de2dca1d7aea4a2da2b35f55e8d6eae03", 0x7b}, {&(0x7f0000001ac0)="6a1c262601ef154d009c5e3b3d0d1b0d04cf3ee0f135f416f1bc87b335d55122d02711389caba096a409fda727b67983ee3878f2a22b75daa11e7a6fa4c284ba507c9a4415de82110726", 0x4a}, {&(0x7f0000001b40)="0e326175bb0cb07d4ece1d37bb7de0dac32036cdee50678dbbde7045af51d271631f602ad69ebf1ee224306676c735e7f25872b4a44c7e7e56c14581b833517d0d0d67f585a6c1e6600a7633145e8efa6ed03143ebf64956bcad82f02320d28d6e8fae29680aecac8cdaaabb28b284660a4011c4c21ec36bad631daa9b839416312c6a9a65259b92fc06acb8fe544563493cae38533aa878112d0f69c18a5195c114f702eb93e401d2274ab4035cd60b85713fb403e30ff7144bdab0eaca5280609500364d40b2ebf0afb486d886fb1ba7008b0d01e1f209c10608f4ae24f0", 0xdf}, {&(0x7f0000001c40)="a4ab1767ee0e1c29e08917c6cde1d223b502a8ca4be6c777d3bbafcf71e05052b8226760a662345a236d9bf83a3dd57802d9b079e6382f18ba508514b44453619f4b11b37460a0c160372b113be3b7652a0454f8f9964896f65c03a94fd0b3848fdde864fecb4bbb1288ea140cee109fca0c31ce2b97da4cff56b766cf185570143d32d17af3c3d71d85cfe3015a638f5b53095e7294632b4bfde659", 0x9c}, {&(0x7f0000001d00)="a310f2f1b36630ebab5d013e92b229111d75e53a7e996c0cbb121b8b3826b661393fb99c796540de3ea16f636d8d83ef600a833b978cbcc10d52aa85e1a4b00bc3e96978930c55fafe2deab0bd6e1f7040797ee2fe64ca5292cc8f37f463cb0755a1691842566dd109804e7488f27d463e3be363a385c37f1544902a5a13afbe73fa64a74ba5771bbcd6602a5dd3b9719abcd4498e629677815ac0cbd6354859e27dd217916a1b2d450a76d838498a957632c75c4a501f0137656a34d338f25d3b54", 0xc2}], 0x6, &(0x7f0000000a40)=[@tclass={{0x14, 0x29, 0x43, 0x7}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r1}}}], 0x40}}, {{&(0x7f0000001e80)={0xa, 0x4e23, 0x9, @private2, 0x2}, 0x1c, &(0x7f0000002140)=[{&(0x7f0000001ec0)="8b3d038e9a5f36d2331cccd7a154657ac3b932f2c87c55b89492c2c41b41c0aa3558b53e7032bdf1312d1534900fc0377912fb8cfc65fa7683", 0x39}, {&(0x7f0000001f00)="19329487927d2ab0e5cf22ee612ec49036fafc139d89738e284319976cc97a5d0a48aef11c88ac883cfebab917a9c86d45d39f4bdadbdea47d9160d0ff4bcae37d57ac07b58df5a4c0ba679be07241d9c61eb4923e41277748a558ebcac947ec01659920fd27fd48b742bac2f66cc02b7dde344f71d10915fc79", 0x7a}, {&(0x7f0000001f80)="073346c6f2dc49e4f07fb40a9b2c22353ab99bc90341263a21492e4a586c49e1c17d3001b50a15123dfd2dc8", 0x2c}, {&(0x7f0000001fc0)="dfdee7e548539e640d903d6c1f8fae3772ca5d311751c993234bc5ff001b7c911f480ad088dc94f4d9d74fb702fbfff7326a48de12840bcaa4c80e2aec5fc5ebaff0966b14ecf545391341193c3c7e7804ba172a417e205f018644cab7933f4676d9a68e493288059bd0b0fc2bd993f90be7fda792915e8b6ff093d101bda745e269b0d42b5c0a52010e7a5fef6cea651618e85a206ee5bcc1c0155d", 0x9c}, {&(0x7f0000002080)="1be31ad6030933b9e6466f296e090199a53c50d6af674a0d149dc17dbe030566663d754f2990b2705d0a67a090540c3cb9efe01d7e999d4e75c8f0b30879c6cbe512bb3f27a991f931eb4e08c10a786c35a383af418e474a80621e85edb30ed8818d71ebd744b1737e0f76e548d340491e73400945b802c43920e2dacbceb5072f91329534665faaac10f56256691c48c29c9620421a12720a26a0339a", 0x9d}], 0x5, &(0x7f00000021c0)=[@hopopts_2292={{0xd0, 0x29, 0x36, {0x33, 0x16, '\x00', [@pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x18}}, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x38, {0x1, 0xc, 0x1, 0x4, [0x0, 0x3, 0x5, 0x0, 0x3ff, 0x8000]}}, @hao={0xc9, 0x10, @private0}, @calipso={0x7, 0x40, {0x6, 0xe, 0x1, 0x4, [0x5, 0x100, 0x2, 0x9, 0x5, 0x0, 0x6]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x33, 0x2, 0x1, 0xff, 0x0, [@mcast1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xd}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x29, 0x19, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x81}, @ra={0x5, 0x2, 0x1ff}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xe, 0xa3, "4bd55eed3cded271a60dbf9c8a8d023f8b336b8723ed51360a2af7d64420fa3337c5795c2743a98f9d8fa96cf2963f7dfc5532ea465b39ad2b6fce7ef3746bdef7dacea0d0211af3841c350f8227ae4bc70baa105d568a4ef458b2abfd4151fda6996ead7ce8efc1dd38879f4293c21880d502361a63d044eb925661455a59de305eb6d12307c2afeb53cccfbc1341252c6d0f42b80a314053ebd089270f2662d6aa56"}, @hao={0xc9, 0x10, @local}]}}}], 0x1f8}}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000023c0)="a6027ed6", 0x4}, {&(0x7f0000002400)="de22bea3561c136d4be8d126fbe2d2a8739e08efcc9b31e25163a8617e3ce08cfdb57d91a59b6016df487973dc6c4b136ed137f5abe96604d31a36f67ae507e0a9f0383ce01ee84efccb1618509d7e94c5c06d56764a3f4799d3f97137189affee9fad3bdcd8469e13a8c746f220a9b1052471621a26bd32709c10060def76ec22ed207494dda651b4e45ecbe201ab97c13190dc9bccb15d81", 0x99}, {&(0x7f00000024c0)="f850e3b1125144a02a6a6a64084fcb46218cd0506312228faa31ce2380600571e3303ccdd50d279500b7408ff0bb8a555eafa0181c498d6ef7e51f2c5d834290b67bcf7acdd6044ee1b731a891e028fc65eaf377c868f96e4c86df5a63a3b2eb619f6dd575ea961eb32f843a9f359e3a4a08a7ee68ba8ed2e6f57c5ec8ad94973cd3a170a46aa92a346e7e8d31a8d9e439236baca2e9bcbd3c5ce84ba78ca6950608b9c47e4f7795c4683678c70a7b5700867af71647ab84a0513ff78c28bb11ed517e8b3e281e18f4879be649b56fcca2efebf4712e43392192c8222d216e1ba9aa6f0c033e0d9bb2c1bbeecc4a33db36ea8e326b", 0xf5}, {&(0x7f00000025c0)="3374cf70cd26f8ac74c75e21f7030a199e24617fef8d876f41ceaed1eef123b546382906ef96520bd154f758745064589ad528a468a15b38a8a8a998f418b7b7328f60ac8186fa0751b4e18a5e78833b9a67b39e20d1ee20889049704beff1f8d2feed402bb98f74c3709504d41ff24862a4388a58a5f5af91fa0e1b525eda57fbebb6247c32f7b7ba200bde09cc8bd3bd794bdda4230672c89a8a7294ac2c5815883a4e4945e9ff10a633ae64ad1afd10282c7273b7b2086cb05e47bb098e1e7ad8f13a1ec9895151b01f581ad4eb01", 0xd0}], 0x4, &(0x7f0000002700)=[@rthdr_2292={{0x68, 0x29, 0x39, {0xff, 0xa, 0x1, 0xb6, 0x0, [@mcast2, @dev={0xfe, 0x80, '\x00', 0xf}, @dev={0xfe, 0x80, '\x00', 0x35}, @empty, @mcast1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r1}}}], 0x90}}], 0x5, 0x0) (async) sendto$packet(r0, &(0x7f0000000a80)="cf435f010008ba00000000850800", 0xe, 0x800, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) getsockname(r3, 0x0, &(0x7f00000002c0)) (async) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x804, &(0x7f00000000c0)={'trans=virtio,', {[{@msize={'msize', 0x3d, 0xd074}}]}}) (async) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000ffdbdf25010000001c000180060001000200000008000300ac1414bb080006002b"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x10) (async) read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) 441.286459ms ago: executing program 3 (id=1179): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x1000, 0x8000, 0xc2}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0xb, 0x6, 0xc, 0x3}, {0x7, 0xff, 0x3, 0x7}, {0x98d, 0x8, 0x8, 0xc}, {0x6, 0x2, 0x3f, 0x5}, {0x5, 0x8, 0x8, 0x1}]}) 440.916197ms ago: executing program 0 (id=1180): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001180)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) execve(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) poll(&(0x7f0000001280)=[{r0, 0x8100}], 0x1, 0x4d8b7b7e) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 439.205349ms ago: executing program 3 (id=1181): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x100080, 0x44) (async) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @mcast1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x11}, 0xb00}], 0x1, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:2 m'], 0x9) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) (async, rerun: 64) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x200) ioctl$CEC_RECEIVE(r3, 0xc0386106, &(0x7f0000000040)={0x80000001, 0x7f, 0x8, 0x0, 0x0, 0x2, "77afcd484bbeb37fc22331a9d74d92c1", 0x4, 0x3, 0x5, 0x3, 0x10, 0x7, 0x2}) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000001c0)={0x1d, r5}, 0x10) (async, rerun: 64) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f00000003c0)={0x0, 0x0, r6}) 311.869631ms ago: executing program 3 (id=1182): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000c30a00fe4100000018120000", @ANYRES32=r0, @ANYBLOB="00000000000000dbfaaa750c000000b72300000000000095000000000000004b"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='iso9660\x00', 0x204001, 0x0) 311.607262ms ago: executing program 3 (id=1183): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00'}) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nofsc']) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000140)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="5538b9edff00", 0x0, 0x0, 0x0, 0x0, 0x0}) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) 180.749948ms ago: executing program 1 (id=1184): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000000)={'gretap0\x00', {0x2, 0x0, @local}}) (async) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0xfffffffffffffd2e, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x0, 0x3, r4}, @val={0x0, 0x99, {0x0, 0x23}}}}, [@chandef_params]}, 0x14}, 0x1, 0x0, 0x0, 0x24001040}, 0x20040010) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x1b, 0x1c, 0x401, 0x70bd28, 0x25dfdc00, {0x7, 0x0, 0x0, 0x0, 0x40, 0xe4, 0x9}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r8) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r9, {0xffe0, 0xb}, {0xfff3, 0xffff}, {0xf, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x5594b08a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40045}, 0x4804) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r10, &(0x7f0000003480)={0x2020}, 0x2020) (async) ioctl$DRM_IOCTL_DROP_MASTER(r10, 0x641f) (async) r11 = openat$random(0xffffffffffffff9c, &(0x7f0000000d40), 0x200, 0x0) readv(r11, &(0x7f0000002dc0)=[{&(0x7f0000001940)=""/22, 0x16}], 0x1) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000206b000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000800000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c2900333f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c"], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) 180.148059ms ago: executing program 3 (id=1185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) getsockopt$ax25_int(r1, 0x101, 0x19, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)={'macvtap0\x00'}) (async) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)={'macvtap0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r2, 0x10c, 0x2, &(0x7f0000000040)=0xffff, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x610003d5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) lsetxattr$security_capability(&(0x7f0000000280)='./file2\x00', &(0x7f0000000300), &(0x7f0000000380)=@v3={0x3000000, [{0x7, 0x4}, {0x7, 0x7f}]}, 0x18, 0x0) pwritev2(r3, &(0x7f0000000240), 0x0, 0x5604, 0x0, 0xe) (async) pwritev2(r3, &(0x7f0000000240), 0x0, 0x5604, 0x0, 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1ca5454727e8051af6bbd36adb329dc50b85d7", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYBLOB="4cd4631ccc0c2ef54bb615e00e160e168bce2cec6461c4e40fe11ad903bc011c2d522b7c662824588f6e79ff687ef1c1700703dbb49f1bb2a409ce54ebcfc7798a617105bb4e12014a2d542d647af06ecd323e434f26c0cceec73c932487252ce400df696b1d26f8792105c28dc83c1bcbb94c1bb3be04d25701145e41ace06ebf737117728e7c28074d1e41d62aa0fd0b501e5a7b92d771da4a4b174fead91e9c044b758179c00afb2eb666329af44b486b14fc451892a240a74bc8c04b12cf37c6d8f24297e7e63cba1632b7295f939bc99ebbf1e92e11baac"], 0x50) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') (async) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000100), 0xfffffd79) (async) read$eventfd(r4, &(0x7f0000000100), 0xfffffd79) socket$alg(0x26, 0x5, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', &(0x7f00000013c0)=@ethtool_drvinfo={0x3, "3768ca9bdb9072480b2f1c8f8182ce0898651461231fb740854b22a4379de586", "43a38879022a99b405a660e7cd1d15725e68a25c5152bd0bd227ffb8739f1cfc", "131c5b4bdb8af434447f3cb705650db1c0f8ddb541648cc0b1d318873f8c9a85", "f16051bbcb4dda20aea0d433f8c6f05bce62635e71c972c7929a58603233d497", "1cb283a6b524caa0cfd3fc2d99e7cad81b31b74f347dff63fa93236b8a8a2ccb"}}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r8, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r8, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) r9 = accept4(r5, 0x0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r7, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r9) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r9) 179.733915ms ago: executing program 1 (id=1186): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3d, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000700000000200000060000e9181100002410dd7a727c2659bb2a04f5c139cb1e7b29b1aa60fc25203166bd516087051731afdbf29bc4eb561518f4687b7acbd25a36ffe78ab98786a7853b372bf26290a67acb", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000800500008500000006000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000001800000002000000000000000200000018410000010000000000000000000000d4150800fcffffff18000000ea0000000000000007000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r5 = dup(r4) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r5}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close_range(r2, r3, 0x2) r6 = fsmount(r0, 0x0, 0x6) fchdir(r6) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r7, 0xffffffffffffffff, 0x0) 91.902348ms ago: executing program 1 (id=1187): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) (async) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6}]}, 0x10) (async) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xa0) fallocate(r2, 0x0, 0x0, 0x1001f0) (async) copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0xc615, 0x101, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000190001002cbd70000000800080200040000400050024000008000100000000f3af2f54e5a5e10006eb75c73749dcc5c5340267346d5c49ee8fbb99024144b1b2221b7e17ced28ae27ab8b088f77ca5bd2dbd3d42b0bd6d00c9c98c2cf893b668fafbbf159f80de288b09830cf4c823d2f4f79bd9b1f721e638e426c7f1d6db5609289cb4190169943241"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) (async) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004c81) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 91.505373ms ago: executing program 1 (id=1188): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000180)={[{}, {@subsystem='blkio'}]}) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="0c1874268c0000bd3f4c2ee4c3e4fdfea05e8e04a1a4", 0x16}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x44000) 1.778562ms ago: executing program 1 (id=1189): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000)) flock(r0, 0x1) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000300)=@ethtool_eeprom={0xc, 0x4, 0xfffffff5}}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xdb, 0x602, 0x7a, 0x1, 0xc84, 0x5}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000100)=""/62, &(0x7f0000000140)=0x3e) 0s ago: executing program 1 (id=1190): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[], 0x10) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x8, 0x0, 0x5e, 0x7}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r4, &(0x7f00000004c0)=""/57, 0x39) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) kernel console output (not intermixed with test programs): [ 69.439183][ T10] hid-generic 0002:0006:0007.0003: unknown main item tag 0x1 [ 69.441806][ T10] hid-generic 0002:0006:0007.0003: reserved main item tag 0xd [ 69.444371][ T10] hid-generic 0002:0006:0007.0003: unknown global tag 0xe [ 69.446826][ T10] hid-generic 0002:0006:0007.0003: item 0 0 1 14 parsing failed [ 69.451132][ T10] hid-generic 0002:0006:0007.0003: probe with driver hid-generic failed with error -22 [ 69.749040][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 69.903984][ T24] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 69.909071][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 999, setting to 64 [ 69.918078][ T24] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 69.922827][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.926496][ T24] usb 6-1: Product: syz [ 69.928469][ T24] usb 6-1: Manufacturer: syz [ 69.931183][ T24] usb 6-1: SerialNumber: syz [ 69.937811][ T6837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.257'. [ 69.941766][ T6837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.257'. [ 69.946571][ T6837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.257'. [ 69.950607][ T6837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.257'. [ 69.954992][ T6838] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 69.955002][ T6837] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 69.957518][ T6838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 69.960768][ T6837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 70.145225][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 70.148014][ T24] usb 6-1: MIDIStreaming interface descriptor not found [ 70.171351][ T24] usb 6-1: USB disconnect, device number 4 [ 70.191083][ T6013] udevd[6013]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.268710][ T5801] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 70.418782][ T5801] usb 7-1: Using ep0 maxpacket: 8 [ 70.422649][ T5801] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 70.425621][ T5801] usb 7-1: config 179 has no interface number 0 [ 70.427960][ T5801] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 70.431735][ T5801] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 70.435985][ T5801] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 70.439870][ T5801] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 70.443734][ T5801] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 70.448116][ T5801] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 70.451301][ T5801] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.456080][ T6840] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 70.669306][ T34] usb 7-1: USB disconnect, device number 2 [ 70.669351][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 70.674829][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 70.698917][ T6847] x_tables: ip6_tables: CT target: only valid in raw table, not syz1 [ 71.078828][ T5939] Bluetooth: hci4: command 0x1003 tx timeout [ 71.078994][ T5936] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 71.635534][ T6863] tipc: Enabling of bearer rejected, media not registered [ 71.939367][ T6890] "syz.0.273" (6890) uses obsolete ecb(arc4) skcipher [ 72.044867][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.274'. [ 72.047801][ T6896] netlink: 'syz.0.274': attribute type 12 has an invalid length. [ 72.072438][ T6898] xt_hashlimit: size too large, truncated to 1048576 [ 72.128414][ T6900] bridge_slave_0 (unregistering): left allmulticast mode [ 72.133059][ T6900] bridge_slave_0 (unregistering): left promiscuous mode [ 72.136163][ T6900] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.414089][ T40] kauditd_printk_skb: 51 callbacks suppressed [ 73.414105][ T40] audit: type=1400 audit(1772298260.257:429): avc: denied { bind } for pid=6977 comm="syz.2.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.424522][ T40] audit: type=1400 audit(1772298260.257:430): avc: denied { name_bind } for pid=6977 comm="syz.2.293" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 73.433768][ T40] audit: type=1400 audit(1772298260.257:431): avc: denied { node_bind } for pid=6977 comm="syz.2.293" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 73.442471][ T40] audit: type=1400 audit(1772298260.257:432): avc: denied { read } for pid=6977 comm="syz.2.293" path="socket:[16417]" dev="sockfs" ino=16417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.653334][ T6992] omfs: Invalid superblock (0) [ 73.697163][ T6997] can0: slcan on ttynull. [ 73.708554][ T6997] ip6gretap1: entered promiscuous mode [ 73.711306][ T6997] ip6gretap1: entered allmulticast mode [ 73.799016][ T6996] can0 (unregistered): slcan off ttynull. [ 73.867376][ T40] audit: type=1400 audit(1772298260.707:433): avc: denied { mounton } for pid=7010 comm="syz.3.300" path="/proc/127/task" dev="proc" ino=17486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 73.908506][ T40] audit: type=1400 audit(1772298260.747:434): avc: denied { write } for pid=7014 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.039111][ T5936] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 74.107806][ T7028] Cannot find set identified by id 65534 to match [ 74.175614][ T40] audit: type=1400 audit(1772298261.017:435): avc: denied { map } for pid=7031 comm="syz.1.304" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 74.185546][ T40] audit: type=1400 audit(1772298261.017:436): avc: denied { execute } for pid=7031 comm="syz.1.304" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 74.195727][ T40] audit: type=1400 audit(1772298261.017:437): avc: denied { read } for pid=7030 comm="syz.0.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 74.202715][ T40] audit: type=1400 audit(1772298261.017:438): avc: denied { write } for pid=7030 comm="syz.0.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 74.241505][ T7040] dlm: no locking on control device [ 74.343817][ T7041] netlink: 'syz.0.305': attribute type 15 has an invalid length. [ 74.347264][ T7041] __nla_validate_parse: 2 callbacks suppressed [ 74.347277][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 74.364639][ T7041] netlink: 'syz.0.305': attribute type 15 has an invalid length. [ 74.364815][ T6503] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 74.368106][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 74.375248][ T6503] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 74.375271][ T6503] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 74.375370][ T6503] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 74.387957][ T7046] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 74.389581][ T7046] @0: renamed from bond_slave_1 [ 74.644301][ T7060] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 74.646603][ T7060] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 74.650249][ T7060] vhci_hcd vhci_hcd.0: Device attached [ 74.653528][ T7061] vhci_hcd: connection closed [ 74.654363][ T6503] vhci_hcd vhci_hcd.1: stop threads [ 74.658181][ T6503] vhci_hcd vhci_hcd.1: release socket [ 74.658207][ T6503] vhci_hcd vhci_hcd.1: disconnect device [ 74.751715][ T7071] openvswitch: netlink: Missing key (keys=40, expected=80) [ 75.085799][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.319'. [ 75.096259][ T7080] hsr_slave_1 (unregistering): left promiscuous mode [ 75.259772][ T7096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.324'. [ 75.264915][ T7096] netlink: 31 bytes leftover after parsing attributes in process `syz.0.324'. [ 75.268300][ T7096] netlink: 'syz.0.324': attribute type 3 has an invalid length. [ 75.272082][ T7096] netlink: 'syz.0.324': attribute type 2 has an invalid length. [ 75.275244][ T7096] netlink: 31 bytes leftover after parsing attributes in process `syz.0.324'. [ 75.290624][ T1459] IPVS: starting estimator thread 0... [ 75.304800][ T7089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.326041][ T7104] overlayfs: failed to resolve './file1': -2 [ 75.408735][ T7100] IPVS: using max 43 ests per chain, 103200 per kthread [ 75.432272][ T7114] (syz.2.328,7114,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 75.436075][ T7114] (syz.2.328,7114,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 75.527862][ T7119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=7119 comm=syz.2.330 [ 75.822015][ T5971] Process accounting resumed [ 75.869303][ T7132] netlink: 'syz.3.334': attribute type 2 has an invalid length. [ 75.871824][ T7132] netlink: 'syz.3.334': attribute type 1 has an invalid length. [ 75.874468][ T7132] netlink: 'syz.3.334': attribute type 1 has an invalid length. [ 75.913410][ T7139] netlink: 'syz.3.336': attribute type 21 has an invalid length. [ 76.173367][ T7160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.177860][ T7160] team0: Port device bond0 added [ 76.182723][ T7159] delete_channel: no stack [ 76.250820][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.345'. [ 76.297279][ T7165] netlink: 268 bytes leftover after parsing attributes in process `syz.0.345'. [ 76.323905][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.326287][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.368106][ T7175] fuse: Unknown parameter '0x0000000000000005' [ 76.371800][ T7175] capability: warning: `syz.2.347' uses deprecated v2 capabilities in a way that may be insecure [ 76.420406][ T7183] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 76.432707][ T7183] CIFS: Unable to determine destination address [ 76.457446][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'. [ 76.463845][ T7183] nbd: must specify a size in bytes for the device [ 76.599380][ T7195] (syz.2.355,7195,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 76.602745][ T7195] (syz.2.355,7195,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 76.700165][ T7193] netlink: 20 bytes leftover after parsing attributes in process `syz.0.354'. [ 76.709302][ T7203] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 76.765753][ T7210] netlink: 'syz.2.360': attribute type 4 has an invalid length. [ 76.939932][ T7235] gretap0: refused to change device tx_queue_len [ 76.942213][ T7235] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 76.951629][ T7237] syzkaller0: entered promiscuous mode [ 76.954600][ T7237] syzkaller0: entered allmulticast mode [ 77.135579][ T7251] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 77.297726][ T7258] kvm: pic: single mode not supported [ 77.302021][ T7258] faux_driver vgem: [drm] Unknown color mode 127; guessing buffer size. [ 77.587204][ T7278] hsr_slave_1 (unregistering): left promiscuous mode [ 77.968893][ T7309] hfs: unable to load iocharset "io#harsett-vsock" [ 78.018556][ T7322] netlink: zone id is out of range [ 78.023794][ T7322] netlink: zone id is out of range [ 78.025593][ T7322] netlink: zone id is out of range [ 78.027320][ T7322] netlink: zone id is out of range [ 78.029068][ T7322] netlink: zone id is out of range [ 78.031113][ T7322] netlink: zone id is out of range [ 78.032868][ T7322] netlink: zone id is out of range [ 78.034743][ T7322] netlink: zone id is out of range [ 78.036474][ T7322] netlink: get zone limit has 4 unknown bytes [ 78.218753][ T34] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 78.329167][ T7339] exFAT-fs (nullb0): invalid boot record signature [ 78.332332][ T7339] exFAT-fs (nullb0): failed to read boot sector [ 78.335124][ T7339] exFAT-fs (nullb0): failed to recognize exfat type [ 78.368749][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 78.373021][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 78.377766][ T34] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 78.382089][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.387859][ T34] usb 7-1: config 0 descriptor?? [ 78.395477][ T7340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4096 sclass=netlink_route_socket pid=7340 comm=syz.3.401 [ 78.596648][ T34] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 78.796069][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 78.796082][ T40] audit: type=1400 audit(1772298265.637:484): avc: denied { connect } for pid=7304 comm="syz.2.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 78.849061][ T5936] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 79.276532][ T7371] validate_nla: 1 callbacks suppressed [ 79.276550][ T7371] netlink: 'syz.3.409': attribute type 3 has an invalid length. [ 79.306017][ T7380] team0: Port device team_slave_0 removed [ 79.375742][ T40] audit: type=1400 audit(1772298266.217:485): avc: denied { read } for pid=7384 comm="syz.0.411" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 79.384767][ T40] audit: type=1400 audit(1772298266.217:486): avc: denied { open } for pid=7384 comm="syz.0.411" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 79.400352][ T40] audit: type=1400 audit(1772298266.217:487): avc: denied { write } for pid=7384 comm="syz.0.411" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 79.488741][ T40] audit: type=1400 audit(1772298266.327:488): avc: denied { write } for pid=7398 comm="syz.1.416" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 79.639709][ T7397] lo speed is unknown, defaulting to 1000 [ 79.643189][ T7397] lo speed is unknown, defaulting to 1000 [ 79.646061][ T7397] lo speed is unknown, defaulting to 1000 [ 79.678742][ T40] audit: type=1400 audit(1772298266.517:489): avc: denied { accept } for pid=7408 comm="syz.3.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.750169][ T7411] __nla_validate_parse: 9 callbacks suppressed [ 79.750179][ T7411] netlink: 24 bytes leftover after parsing attributes in process `syz.3.419'. [ 79.757953][ T7397] infiniband syz0: set active [ 79.759478][ T40] audit: type=1400 audit(1772298266.607:490): avc: denied { ioctl } for pid=7410 comm="syz.3.419" path="socket:[16271]" dev="sockfs" ino=16271 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.765139][ T10] lo speed is unknown, defaulting to 1000 [ 79.773507][ T6014] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 79.778848][ T7397] infiniband syz0: added lo [ 79.804819][ T7397] RDS/IB: syz0: added [ 79.806643][ T7397] smc: adding ib device syz0 with port count 1 [ 79.810149][ T7397] smc: ib device syz0 port 1 has no pnetid [ 79.814710][ T50] lo speed is unknown, defaulting to 1000 [ 79.820202][ T7397] lo speed is unknown, defaulting to 1000 [ 79.929901][ T6014] usb 6-1: config 0 has no interfaces? [ 79.933807][ T6014] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 79.937557][ T6014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.941133][ T6014] usb 6-1: Product: syz [ 79.942893][ T6014] usb 6-1: Manufacturer: syz [ 79.944808][ T6014] usb 6-1: SerialNumber: syz [ 79.948397][ T6014] usb 6-1: config 0 descriptor?? [ 79.966425][ T7397] lo speed is unknown, defaulting to 1000 [ 80.068803][ T7397] lo speed is unknown, defaulting to 1000 [ 80.157709][ T10] usb 6-1: USB disconnect, device number 5 [ 80.195231][ T7397] lo speed is unknown, defaulting to 1000 [ 80.325972][ T7397] lo speed is unknown, defaulting to 1000 [ 80.601956][ T40] audit: type=1400 audit(1772298267.447:491): avc: denied { block_suspend } for pid=7419 comm="syz.0.423" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.703999][ T40] audit: type=1400 audit(1772298267.547:492): avc: denied { mounton } for pid=7419 comm="syz.0.423" path="/112/bus" dev="tmpfs" ino=605 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 80.711429][ T7420] ======================================================= [ 80.711429][ T7420] WARNING: The mand mount option has been deprecated and [ 80.711429][ T7420] and is ignored by this kernel. Remove the mand [ 80.711429][ T7420] option from the mount to silence this warning. [ 80.711429][ T7420] ======================================================= [ 80.724846][ T7420] FAT-fs (nullb0): bogus number of reserved sectors [ 80.727256][ T7420] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 80.731720][ T7424] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 80.792825][ T40] audit: type=1400 audit(1772298267.637:493): avc: denied { append } for pid=7428 comm="syz.0.427" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 80.793480][ T7429] loop5: detected capacity change from 0 to 2640 [ 80.798888][ T7431] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 80.801945][ T7432] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 80.815253][ T5933] Buffer I/O error on dev loop5, logical block 0, async page read [ 80.822660][ T5933] Buffer I/O error on dev loop5, logical block 0, async page read [ 80.825856][ T5933] Buffer I/O error on dev loop5, logical block 0, async page read [ 80.830744][ T5933] Buffer I/O error on dev loop5, logical block 0, async page read [ 80.833335][ T5933] Buffer I/O error on dev loop5, logical block 0, async page read [ 80.839746][ T5933] Buffer I/O error on dev loop5, logical block 0, async page read [ 80.846095][ T5933] Buffer I/O error on dev loop5, logical block 0, async page read [ 80.848922][ T5933] Buffer I/O error on dev loop5, logical block 0, async page read [ 80.851475][ T5933] ldm_validate_partition_table(): Disk read failed. [ 80.853659][ T5933] Dev loop5: unable to read RDB block 0 [ 80.855581][ T5933] loop5: unable to read partition table [ 80.858091][ T7429] ldm_validate_partition_table(): Disk read failed. [ 80.860718][ T7429] Dev loop5: unable to read RDB block 0 [ 80.862715][ T7429] loop5: unable to read partition table [ 80.864710][ T7429] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 80.964655][ T5801] usb 7-1: USB disconnect, device number 3 [ 81.391288][ T7457] netlink: 187468 bytes leftover after parsing attributes in process `syz.1.436'. [ 81.435907][ T7459] SELinux: syz.0.437 (7459) set checkreqprot to 1. This is no longer supported. [ 81.462166][ T7461] vcan0: tx address claim with different name [ 81.534486][ T7466] netlink: 44 bytes leftover after parsing attributes in process `syz.0.439'. [ 81.537447][ T7466] netlink: 43 bytes leftover after parsing attributes in process `syz.0.439'. [ 81.540603][ T7466] netlink: 'syz.0.439': attribute type 6 has an invalid length. [ 81.543294][ T7466] netlink: 'syz.0.439': attribute type 5 has an invalid length. [ 81.545864][ T7466] netlink: 43 bytes leftover after parsing attributes in process `syz.0.439'. [ 81.578284][ T7473] netlink: 32 bytes leftover after parsing attributes in process `syz.1.441'. [ 81.625738][ T7479] netlink: 28 bytes leftover after parsing attributes in process `syz.1.443'. [ 81.769783][ T7484] nbd0: detected capacity change from 0 to 112 [ 81.773702][ T7481] block nbd0: shutting down sockets [ 81.774623][ T5933] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 81.781740][ T2105] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 81.786346][ T5933] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 81.789598][ T5933] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 81.792914][ T5933] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 81.795984][ T5933] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 81.799084][ T5933] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 81.802126][ T5933] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 81.805073][ T5933] ldm_validate_partition_table(): Disk read failed. [ 81.807229][ T5933] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 81.810274][ T5933] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 81.813419][ T5933] Dev nbd0: unable to read RDB block 0 [ 81.815328][ T5933] nbd0: unable to read partition table [ 81.818146][ T7481] ldm_validate_partition_table(): Disk read failed. [ 81.821887][ T7481] Dev nbd0: unable to read RDB block 0 [ 81.824691][ T7481] nbd0: unable to read partition table [ 81.828187][ T5933] ldm_validate_partition_table(): Disk read failed. [ 81.838885][ T5933] Dev nbd0: unable to read RDB block 0 [ 81.841200][ T5933] nbd0: unable to read partition table [ 81.988850][ T7489] netlink: 'syz.2.447': attribute type 8 has an invalid length. [ 82.540460][ T7513] netlink: 96 bytes leftover after parsing attributes in process `syz.2.454'. [ 82.575817][ T7516] No such timeout policy "syz1" [ 82.578102][ T7516] No such timeout policy "syz1" [ 82.602772][ T7520] macsec0: entered promiscuous mode [ 82.605271][ T7520] macsec0: entered allmulticast mode [ 82.642652][ T7520] bridge_slave_1: left allmulticast mode [ 82.644655][ T7520] bridge_slave_1: left promiscuous mode [ 82.661191][ T7520] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.794847][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 82.805602][ T7492] syz.1.448 (7492): drop_caches: 1 [ 82.847339][ T7492] syz.1.448 (7492): drop_caches: 1 [ 83.025327][ T7547] netlink: 4556 bytes leftover after parsing attributes in process `syz.1.462'. [ 83.109640][ T7569] kvm: emulating exchange as write [ 83.131502][ T7569] SELinux: policydb magic number 0x776172 does not match expected magic number 0xf97cff8c [ 83.135176][ T7569] SELinux: failed to load policy [ 83.432625][ T7596] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 83.436931][ T7596] qnx6: wrong signature (magic) in superblock #1. [ 83.443708][ T7596] qnx6: unable to read the first superblock [ 83.447199][ T7595] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 83.450844][ T7595] qnx6: wrong signature (magic) in superblock #1. [ 83.458761][ T7595] qnx6: unable to read the first superblock [ 83.491874][ T7599] program syz.3.478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.627591][ T7605] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 83.632737][ T7605] SELinux: failed to load policy [ 84.148463][ T7640] overlay: filesystem on ./bus not supported as upperdir [ 84.225932][ T7645] loop6: detected capacity change from 0 to 7 [ 84.230992][ T7645] Dev loop6: unable to read RDB block 7 [ 84.233099][ T7645] loop6: unable to read partition table [ 84.235443][ T7645] loop6: partition table beyond EOD, truncated [ 84.237825][ T7645] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 84.264640][ T7640] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 84.271646][ T7640] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3485821776 (6971643552 ns) > initial count (4394717668 ns). Using initial count to start timer. [ 84.281528][ T7640] evm: overlay not supported [ 84.325593][ T7654] loop1: detected capacity change from 0 to 4 [ 84.332316][ T7654] Dev loop1: unable to read RDB block 4 [ 84.334750][ T7654] loop1: unable to read partition table [ 84.337299][ T7654] loop1: partition table beyond EOD, truncated [ 84.340397][ T7654] loop_reread_partitions: partition scan of loop1 (被x ) failed (rc=-5) [ 84.528402][ T7678] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 84.531080][ T7678] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 84.534105][ T7669] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 84.537372][ T7669] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 84.550365][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 84.550376][ T40] audit: type=1400 audit(1772298271.397:539): avc: denied { bind } for pid=7675 comm="syz.3.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.663938][ T40] audit: type=1326 audit(1772298271.507:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.1.503" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd37779c799 code=0x0 [ 84.817300][ T7699] netlink: 'syz.3.510': attribute type 1 has an invalid length. [ 84.822581][ T7699] nbd: error processing sock list [ 84.933026][ T7705] kvm: kvm [7704]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 84.936666][ T7705] kvm: kvm [7704]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 84.956273][ T7705] kvm: kvm [7704]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 84.980040][ T7705] kvm: kvm [7704]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 84.984295][ T7705] kvm: kvm [7704]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 84.989669][ T7709] __nla_validate_parse: 5 callbacks suppressed [ 84.989683][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.511'. [ 85.316054][ T7734] 9pnet_virtio: no channels available for device ./file0 [ 85.533237][ T7739] netlink: 'syz.2.521': attribute type 1 has an invalid length. [ 85.535860][ T7739] netlink: 224 bytes leftover after parsing attributes in process `syz.2.521'. [ 85.667535][ T40] audit: type=1400 audit(1772298272.507:541): avc: denied { read } for pid=7745 comm="syz.1.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.236391][ T7773] x_tables: ip6_tables: CT target: only valid in raw table, not syz1 [ 86.242204][ T7773] x_tables: ip6_tables: CT target: only valid in raw table, not syz1 [ 86.245413][ T7773] x_tables: ip6_tables: CT target: only valid in raw table, not syz1 [ 86.246628][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.529'. [ 86.253790][ T7773] x_tables: ip6_tables: CT target: only valid in raw table, not syz1 [ 86.258358][ T7773] x_tables: ip6_tables: CT target: only valid in raw table, not syz1 [ 86.261809][ T7773] x_tables: ip6_tables: CT target: only valid in raw table, not syz1 [ 86.265414][ T7773] x_tables: ip6_tables: CT target: only valid in raw table, not syz1 [ 86.270293][ T7773] x_tables: ip6_tables: CT target: only valid in raw table, not syz1 [ 86.273453][ T7773] x_tables: ip6_tables: CT target: only valid in raw table, not syz1 [ 86.276517][ T7773] x_tables: ip6_tables: CT target: only valid in raw table, not syz1 [ 86.520445][ T830] cfg80211: failed to load regulatory.db [ 86.554812][ T40] audit: type=1400 audit(1772298273.397:542): avc: denied { watch_mount } for pid=7789 comm="syz.1.535" path="/146" dev="tmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 86.565093][ T40] audit: type=1400 audit(1772298273.407:543): avc: denied { bind } for pid=7789 comm="syz.1.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.632256][ T7800] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.657027][ T7807] sctp: [Deprecated]: syz.0.540 (pid 7807) Use of struct sctp_assoc_value in delayed_ack socket option. [ 86.657027][ T7807] Use struct sctp_sack_info instead [ 86.706023][ T7800] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.760026][ T7800] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.816894][ T7815] team_slave_0: entered promiscuous mode [ 86.819530][ T7815] team_slave_1: entered promiscuous mode [ 86.823443][ T7815] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 86.840719][ T6008] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 86.872153][ T7800] bond0: (slave netdevsim0): Releasing backup interface [ 86.876857][ T7800] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.968862][ T6008] usb 6-1: device descriptor read/64, error -71 [ 86.998990][ T6503] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.011297][ T6503] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.020913][ T6503] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.030958][ T6503] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.164207][ T40] audit: type=1326 audit(1772298274.007:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7828 comm="syz.2.548" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f14fbd9c799 code=0x0 [ 87.208717][ T6008] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 87.301815][ T7831] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 87.306412][ T7831] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 87.314025][ T7831] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 87.317990][ T7831] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 87.320390][ T7831] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 87.323989][ T7831] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 87.327481][ T7831] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 87.330056][ T7831] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 87.333444][ T7831] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 87.336469][ T7831] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 87.338473][ T7831] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 87.338765][ T6008] usb 6-1: device descriptor read/64, error -71 [ 87.345596][ T7831] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 87.448910][ T6008] usb usb6-port1: attempt power cycle [ 87.508133][ T40] audit: type=1400 audit(1772298274.347:545): avc: denied { ioctl } for pid=7850 comm="syz.0.553" path="socket:[20278]" dev="sockfs" ino=20278 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 87.554924][ T7853] XFS (nullb0): Invalid superblock magic number [ 87.585192][ T7853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.554'. [ 87.763025][ T7874] netlink: 'syz.0.557': attribute type 12 has an invalid length. [ 87.788981][ T6008] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 87.809811][ T6008] usb 6-1: device descriptor read/8, error -71 [ 88.048782][ T6008] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 88.071996][ T6008] usb 6-1: device descriptor read/8, error -71 [ 88.179008][ T6008] usb usb6-port1: unable to enumerate USB device [ 88.187415][ T7891] netlink: zone id is out of range [ 88.402809][ T40] audit: type=1400 audit(1772298275.247:546): avc: denied { setopt } for pid=7895 comm="syz.3.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 88.453898][ T40] audit: type=1400 audit(1772298275.297:547): avc: denied { ioctl } for pid=7897 comm="syz.2.565" path="socket:[22877]" dev="sockfs" ino=22877 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 88.577980][ T7912] fuse: Unknown parameter 'gY' [ 88.691328][ T40] audit: type=1400 audit(1772298275.537:548): avc: denied { setopt } for pid=7916 comm="syz.0.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.691372][ T7917] openvswitch: netlink: Missing key (keys=40, expected=100) [ 88.887980][ T7928] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 89.328758][ T5936] Bluetooth: hci0: command 0x0c1a tx timeout [ 89.399024][ T5936] Bluetooth: hci2: command 0x0c1a tx timeout [ 89.399081][ T5939] Bluetooth: hci1: command 0x0c1a tx timeout [ 89.401730][ T5936] Bluetooth: hci3: command 0x0c1a tx timeout [ 89.768292][ T1459] IPVS: starting estimator thread 0... [ 89.800382][ T7968] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 89.863270][ T40] audit: type=1400 audit(1772298276.707:549): avc: denied { watch } for pid=7972 comm="syz.0.587" path="/160/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 89.878384][ T40] audit: type=1400 audit(1772298276.707:550): avc: denied { watch_sb watch_reads } for pid=7972 comm="syz.0.587" path="/160/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=862 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.879160][ T7966] IPVS: using max 42 ests per chain, 100800 per kthread [ 89.898361][ T40] audit: type=1400 audit(1772298276.717:551): avc: denied { firmware_load } for pid=7972 comm="syz.0.587" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 89.901286][ T7973] syz.0.587 (7973) used greatest stack depth: 17352 bytes left [ 89.994155][ T40] audit: type=1400 audit(1772298276.837:552): avc: denied { append } for pid=7979 comm="syz.0.590" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 90.107695][ T7989] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 90.308222][ T8016] program syz.2.599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.322961][ T5971] libceph: connect (1)[c::]:6789 error -22 [ 90.325193][ T5971] libceph: mon0 (1)[c::]:6789 connect error [ 90.331804][ T5971] libceph: connect (1)[c::]:6789 error -22 [ 90.333877][ T5971] libceph: mon0 (1)[c::]:6789 connect error [ 90.417152][ T8014] ceph: No mds server is up or the cluster is laggy [ 90.417372][ T40] audit: type=1400 audit(1772298277.257:553): avc: denied { connect } for pid=8023 comm="syz.0.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 90.651530][ T8056] overlayfs: workdir and upperdir must be separate subtrees [ 90.702482][ T8059] program syz.2.610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.744020][ T8062] netlink: 36 bytes leftover after parsing attributes in process `syz.2.611'. [ 90.750264][ T8062] netlink: 16 bytes leftover after parsing attributes in process `syz.2.611'. [ 90.777893][ T8062] bond0: entered promiscuous mode [ 90.780572][ T8062] bond_slave_0: entered promiscuous mode [ 90.780842][ T8062] @0: entered promiscuous mode [ 90.786554][ T8062] gretap0: entered promiscuous mode [ 90.787756][ T8062] hsr1: entered promiscuous mode [ 90.828990][ T6008] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 90.875805][ T40] audit: type=1400 audit(1772298277.717:554): avc: denied { write } for pid=8063 comm="syz.0.612" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 90.885089][ T40] audit: type=1400 audit(1772298277.717:555): avc: denied { open } for pid=8063 comm="syz.0.612" path="/172/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 90.935113][ T40] audit: type=1400 audit(1772298277.777:556): avc: denied { write } for pid=8072 comm="syz.0.616" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 90.939906][ T8073] random: crng reseeded on system resumption [ 90.950902][ T40] audit: type=1400 audit(1772298277.797:557): avc: denied { map } for pid=8072 comm="syz.0.616" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 90.987978][ T6008] usb 6-1: Using ep0 maxpacket: 8 [ 90.991498][ T6008] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 90.995444][ T6008] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 90.999561][ T6008] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.003976][ T6008] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.009429][ T6008] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 91.013307][ T6008] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.208897][ T1459] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 91.220314][ T6008] usb 6-1: GET_CAPABILITIES returned 0 [ 91.222637][ T6008] usbtmc 6-1:16.0: can't read capabilities [ 91.360061][ T1459] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 91.363324][ T1459] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 91.366687][ T1459] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.374277][ T1459] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 91.378157][ T1459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 91.381861][ T1459] usb 5-1: Product: syz [ 91.383417][ T1459] usb 5-1: Manufacturer: syz [ 91.385447][ T1459] usb 5-1: SerialNumber: syz [ 91.408803][ T5936] Bluetooth: hci0: command 0x0c1a tx timeout [ 91.425094][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 91.432035][ T24] usb 6-1: USB disconnect, device number 10 [ 91.478807][ T5936] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.478835][ T5940] Bluetooth: hci3: command 0x0c1a tx timeout [ 91.478847][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.601576][ T1459] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 91.735000][ T8087] bond1: option downdelay: invalid value (18446744073709551615) [ 91.737608][ T8087] bond1: option downdelay: allowed values 0 - 2147483647 [ 91.740979][ T8087] bond1 (unregistering): Released all slaves [ 91.756414][ T40] audit: type=1400 audit(1772298278.597:558): avc: denied { setattr } for pid=8089 comm="syz.2.621" name="SCTPv6" dev="sockfs" ino=20475 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.788992][ T8092] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 91.810544][ T8079] netlink: 'syz.0.617': attribute type 1 has an invalid length. [ 91.815094][ T6008] usb 5-1: USB disconnect, device number 5 [ 91.820606][ T6008] usblp0: removed [ 91.899495][ T8102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.910467][ T8101] loop2: detected capacity change from 0 to 7 [ 91.915159][ T5933] Dev loop2: unable to read RDB block 7 [ 91.917005][ T5933] loop2: unable to read partition table [ 91.919040][ T5933] loop2: partition table beyond EOD, truncated [ 91.923626][ T8101] Dev loop2: unable to read RDB block 7 [ 91.926053][ T8101] loop2: unable to read partition table [ 91.928568][ T8101] loop2: partition table beyond EOD, truncated [ 91.933986][ T8101] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 91.974731][ T8105] batman_adv: batadv0: Adding interface: ipvlan2 [ 91.976837][ T8105] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.987016][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.992607][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.996974][ T8105] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 92.338754][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 92.488718][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 92.491732][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.495169][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 92.499366][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 92.502798][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.507045][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.510350][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.718062][ T24] usb 6-1: GET_CAPABILITIES returned 0 [ 92.720026][ T24] usbtmc 6-1:16.0: can't read capabilities [ 92.838807][ T5971] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 92.920924][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.923972][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.926939][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.929882][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.932837][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.935767][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.938737][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.943230][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.946182][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.949085][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.952048][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.955032][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.957948][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.960809][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.963710][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.967478][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.971913][ T6008] usb 6-1: USB disconnect, device number 11 [ 93.020338][ T5971] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 93.023269][ T5971] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 93.039309][ T5971] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 93.042364][ T5971] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 93.045884][ T5971] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 93.055868][ T5971] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 93.059085][ T5971] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 93.062990][ T5971] usb 7-1: Product: syz [ 93.064383][ T5971] usb 7-1: Manufacturer: syz [ 93.079127][ T8157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.636'. [ 93.086892][ T5971] cdc_wdm 7-1:1.0: skipping garbage [ 93.089751][ T5971] cdc_wdm 7-1:1.0: skipping garbage [ 93.116478][ T5971] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 93.118510][ T5971] cdc_wdm 7-1:1.0: Unknown control protocol [ 93.144987][ T8157] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 93.147081][ T8157] syzkaller1: linktype set to 1 [ 93.158918][ T8157] syzkaller1: tun_chr_ioctl cmd 3288372256 [ 93.161055][ T8157] syzkaller1: tun_chr_ioctl cmd 3288372256 [ 93.193034][ T8159] < [ 93.287414][ T8171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.640'. [ 93.293181][ T8171] Unsupported ieee802154 address type: 0 [ 93.379548][ T8179] fuse: Bad value for 'fd' [ 93.559465][ T5940] Bluetooth: hci1: command 0x0c1a tx timeout [ 93.559571][ T5936] Bluetooth: hci2: command 0x0c1a tx timeout [ 93.559655][ T5939] Bluetooth: hci3: command 0x0c1a tx timeout [ 93.810455][ T24] usb 7-1: USB disconnect, device number 4 [ 93.851831][ T8185] MPI: mpi too large (16392 bits) [ 93.954301][ T8166] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.956944][ T8166] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 93.959374][ T8166] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 93.961392][ T8166] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 94.166455][ T5928] cgroup: fork rejected by pids controller in /syz3 [ 94.217834][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'. [ 94.221030][ T8212] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 94.293400][ T8214] netlink: 'syz.0.657': attribute type 1 has an invalid length. [ 94.551079][ T6496] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.657817][ T6496] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.679616][ T5936] Bluetooth: hci0: unexpected event for opcode 0x2012 [ 94.716988][ T8228] syzkaller1: entered promiscuous mode [ 94.719497][ T8228] syzkaller1: entered allmulticast mode [ 94.737831][ T5940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.743737][ T5940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.748431][ T5940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.752881][ T5940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.756358][ T5940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.767380][ T6496] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.797374][ T8230] lo speed is unknown, defaulting to 1000 [ 94.879690][ T6496] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.043766][ T8241] bond1: entered promiscuous mode [ 95.105456][ T6496] bridge_slave_1: left allmulticast mode [ 95.107604][ T6496] bridge_slave_1: left promiscuous mode [ 95.112078][ T8247] netlink: 48 bytes leftover after parsing attributes in process `syz.2.664'. [ 95.114522][ T6496] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.122303][ T6496] bridge_slave_0: left allmulticast mode [ 95.124174][ T6496] bridge_slave_0: left promiscuous mode [ 95.126119][ T6496] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.167287][ T8251] netlink: 48 bytes leftover after parsing attributes in process `syz.2.664'. [ 95.338716][ T8262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8262 comm=syz.1.667 [ 95.372657][ T6496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.379238][ T6496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.385116][ T6496] bond0 (unregistering): Released all slaves [ 95.414153][ T8247] bond2: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 95.417773][ T8251] bond2: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 95.474001][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 95.474014][ T40] audit: type=1400 audit(1772298282.317:578): avc: denied { map } for pid=8270 comm="syz.2.669" path="pipe:[24683]" dev="pipefs" ino=24683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 95.485582][ T8230] chnl_net:caif_netlink_parms(): no params data found [ 95.514216][ T8277] openvswitch: netlink: Key 25 has unexpected len 504 expected 16 [ 95.589364][ T8285] input: syz1 as /devices/virtual/input/input8 [ 95.591772][ T8230] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.594983][ T8230] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.597335][ T8230] bridge_slave_0: entered allmulticast mode [ 95.600260][ T8230] bridge_slave_0: entered promiscuous mode [ 95.605533][ T8230] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.608037][ T8230] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.611047][ T8230] bridge_slave_1: entered allmulticast mode [ 95.616058][ T8230] bridge_slave_1: entered promiscuous mode [ 95.672480][ T40] audit: type=1400 audit(1772298282.507:579): avc: denied { read } for pid=5319 comm="acpid" name="event4" dev="devtmpfs" ino=2975 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.681693][ T40] audit: type=1400 audit(1772298282.507:580): avc: denied { open } for pid=5319 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2975 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.697455][ T40] audit: type=1400 audit(1772298282.507:581): avc: denied { ioctl } for pid=5319 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2975 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.716368][ T8230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.732842][ T8230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.771843][ T40] audit: type=1400 audit(1772298282.617:582): avc: denied { getattr } for pid=8294 comm="syz.2.675" lport=51762 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 95.782217][ T8295] netlink: 'syz.2.675': attribute type 41 has an invalid length. [ 95.808422][ T8230] team0: Port device team_slave_0 added [ 95.813533][ T8230] team0: Port device team_slave_1 added [ 95.827812][ T40] audit: type=1400 audit(1772298282.667:583): avc: denied { bind } for pid=8300 comm="syz.2.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.828324][ T8301] netlink: 40 bytes leftover after parsing attributes in process `syz.1.676'. [ 95.855494][ T8230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.859324][ T8230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.868063][ T8230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.873445][ T8230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.876040][ T8230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.887061][ T40] audit: type=1400 audit(1772298282.737:584): avc: denied { bpf } for pid=8300 comm="syz.2.677" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.887265][ T8230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.910437][ T40] audit: type=1400 audit(1772298282.757:585): avc: denied { module_request } for pid=8300 comm="syz.2.677" kmod="nfnetlink-subsys-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 95.932734][ T8230] hsr_slave_0: entered promiscuous mode [ 95.935423][ T8230] hsr_slave_1: entered promiscuous mode [ 95.937681][ T8230] debugfs: 'hsr0' already exists in 'hsr' [ 95.938260][ T40] audit: type=1400 audit(1772298282.777:586): avc: denied { read } for pid=8300 comm="syz.2.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.942021][ T8230] Cannot create hsr debugfs directory [ 96.049050][ T5940] Bluetooth: hci3: command 0x0c1a tx timeout [ 96.049142][ T5936] Bluetooth: hci2: command 0x0c1a tx timeout [ 96.116161][ T8312] syzkaller0: entered promiscuous mode [ 96.118014][ T8312] syzkaller0: entered allmulticast mode [ 96.125517][ T6496] hsr_slave_0: left promiscuous mode [ 96.128419][ T6496] hsr_slave_1: left promiscuous mode [ 96.149138][ T6496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.151979][ T6496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.155337][ T6496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.157812][ T6496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.166960][ T6496] veth1_macvtap: left promiscuous mode [ 96.171178][ T6496] veth0_macvtap: left promiscuous mode [ 96.173417][ T6496] veth1_vlan: left promiscuous mode [ 96.175302][ T6496] veth0_vlan: left promiscuous mode [ 96.293866][ T6496] team0 (unregistering): Port device team_slave_1 removed [ 96.304054][ T6496] team0 (unregistering): Port device team_slave_0 removed [ 96.842982][ T5936] Bluetooth: hci1: command tx timeout [ 97.371665][ T40] audit: type=1400 audit(1772298284.217:587): avc: denied { block_suspend } for pid=8334 comm="syz.2.684" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 97.430058][ T8340] netlink: 'syz.0.683': attribute type 30 has an invalid length. [ 97.481270][ T8347] netlink: 'syz.0.683': attribute type 30 has an invalid length. [ 97.798826][ T6496] IPVS: stop unused estimator thread 0... [ 97.935537][ T8230] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.942519][ T8230] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.948089][ T8230] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.953052][ T8230] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.014179][ T8230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.023937][ T8230] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.029744][ T6501] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.032886][ T6501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.041622][ T6498] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.044034][ T6498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.163258][ T8230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.201926][ T8230] veth0_vlan: entered promiscuous mode [ 98.210460][ T8230] veth1_vlan: entered promiscuous mode [ 98.230527][ T34] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 98.233824][ T8230] veth0_macvtap: entered promiscuous mode [ 98.237738][ T8230] veth1_macvtap: entered promiscuous mode [ 98.246350][ T8230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.254117][ T8230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.260574][ T6498] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.263618][ T6498] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.267824][ T6498] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.271062][ T6498] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.313301][ T6498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.322778][ T6498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.338416][ T6496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.342840][ T6496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.377010][ T8410] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.659'. [ 98.381817][ T34] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 98.384630][ T34] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.387862][ T34] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 98.399000][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.402469][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.406755][ T34] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 98.410135][ T34] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 98.412780][ T34] usb 5-1: Product: syz [ 98.414278][ T34] usb 5-1: Manufacturer: syz [ 98.421458][ T34] cdc_wdm 5-1:1.0: skipping garbage [ 98.423622][ T34] cdc_wdm 5-1:1.0: skipping garbage [ 98.426923][ T34] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 98.429060][ T34] cdc_wdm 5-1:1.0: Unknown control protocol [ 98.635752][ T8393] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 98.787889][ T5971] usb 5-1: USB disconnect, device number 6 [ 98.902708][ T8420] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x33424752, 8, 0, 0, 0) [ 98.928812][ T5940] Bluetooth: hci1: command tx timeout [ 98.989736][ T8436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.703'. [ 99.006235][ T8439] No source specified [ 99.367932][ T8482] veth1_to_batadv: entered promiscuous mode [ 99.414190][ T8487] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 99.416598][ T8487] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 99.421171][ T8487] vhci_hcd vhci_hcd.0: Device attached [ 99.430662][ T8490] vhci_hcd: connection closed [ 99.431891][ T6503] vhci_hcd vhci_hcd.1: stop threads [ 99.435602][ T6503] vhci_hcd vhci_hcd.1: release socket [ 99.437556][ T6503] vhci_hcd vhci_hcd.1: disconnect device [ 99.458565][ T8494] [U] zͻi[27| [ 99.461138][ T8494] [U] BswAerOU]~A`1eX!j5i5y2ڂ_S"qh$6\P[2*/Wb_$0A7 Xۖ(wc# =g< [ 99.467158][ T8494] [U] Iwub:lEeiBHk^VI|ȥ\xd [ 99.470828][ T8494] [U] |KIH;F~{Iӎ=Mkq%hd9!@a*lz~`E=[>meLhc`'u~+ۤmͷLXX舂i 'j3e=:3/C_81(FW [ 99.485073][ T8494] [U] 8)X)YvxRĻbmbN@ox;JD, [ 99.487210][ T8494] [U] *Cn3v7KEXgt_3 [ 99.489164][ T8494] [U] D/QazҬEHgE1$_ks=R@ [ 99.491325][ T8494] [U] ϼcEv @ [ 99.492819][ T8494] [U] a% [ 99.493930][ T8494] [U] @cÏ_-ƱZ&<Z9ah_L@bKÈs3JJ5D;wWˆUuyLbҳ53ż{4XRQrH=M"/@ opS~{Pӡ~i*T~W)Q~ȵ_ߜͬz~Vq۪` [ 99.500349][ T8494] [U] f1p3 [ 99.501455][ T8494] [U] N0[L;a_l&kMC [ 99.503165][ T8494] [U] r6w^gP$u4~GCߚpkFtw~@L1 [ 99.873955][ T8506] mtd partition "" doesn't have enough space: 0x20003 < 0x100000000, disabled [ 99.885262][ T8506] ftl_cs: FTL header not found. [ 99.967014][ T5940] Bluetooth: hci3: unexpected event for opcode 0x0c46 [ 100.287938][ T8493] [U] :K!:Y咑;Rdma9tbt= Ҫ+sS i-YJc (ґx|]k|_V҉T8MNi׎ͪY΃zAM"ev3KěO0q]^)?ס8ⅴS ܝXeݢ%4 [ 115.746852][ T9278] dump_stack_lvl+0x100/0x190 [ 115.746893][ T9278] should_fail_ex.cold+0x5/0xa [ 115.746917][ T9278] _copy_from_user+0x2e/0xd0 [ 115.746947][ T9278] move_addr_to_kernel+0x65/0x170 [ 115.746976][ T9278] __sys_sendto+0x1c9/0x520 [ 115.747001][ T9278] ? __pfx___sys_sendto+0x10/0x10 [ 115.747044][ T9278] ? ksys_write+0x1ac/0x250 [ 115.747069][ T9278] ? __pfx_ksys_write+0x10/0x10 [ 115.747092][ T9278] __x64_sys_sendto+0xe0/0x1c0 [ 115.747113][ T9278] ? do_syscall_64+0x95/0xf80 [ 115.747128][ T9278] ? lockdep_hardirqs_on+0x78/0x100 [ 115.747146][ T9278] do_syscall_64+0x106/0xf80 [ 115.747162][ T9278] ? clear_bhb_loop+0x40/0x90 [ 115.747182][ T9278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.747200][ T9278] RIP: 0033:0x7f41aaf9c799 [ 115.747214][ T9278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.747230][ T9278] RSP: 002b:00007f41abe9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 115.747247][ T9278] RAX: ffffffffffffffda RBX: 00007f41ab215fa0 RCX: 00007f41aaf9c799 [ 115.747258][ T9278] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 115.747268][ T9278] RBP: 00007f41abe9c090 R08: 0000200000000140 R09: 000000000000001c [ 115.747278][ T9278] R10: 0000000028004044 R11: 0000000000000246 R12: 0000000000000001 [ 115.747287][ T9278] R13: 00007f41ab216038 R14: 00007f41ab215fa0 R15: 00007ffc8652a3e8 [ 115.747311][ T9278] [ 115.818824][ T34] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 115.901271][ T6014] usb 7-1: Using ep0 maxpacket: 8 [ 115.905692][ T6014] usb 7-1: config index 0 descriptor too short (expected 41261, got 45) [ 115.909477][ T6014] usb 7-1: config 79 has too many interfaces: 242, using maximum allowed: 32 [ 115.913237][ T6014] usb 7-1: config 79 has an invalid descriptor of length 0, skipping remainder of the config [ 115.917745][ T6014] usb 7-1: config 79 has 0 interfaces, different from the descriptor's value: 242 [ 115.922919][ T6014] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 115.927030][ T6014] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.980908][ T34] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.985235][ T34] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 115.989366][ T34] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 115.993272][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.998980][ T34] usb 6-1: config 0 descriptor?? [ 116.005417][ T34] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 116.008549][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 116.017414][ T34] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 116.021892][ T34] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 116.025069][ T34] usb 6-1: media controller created [ 116.029763][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.041184][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 116.043949][ T34] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 116.057081][ T34] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input13 [ 116.067823][ T34] dvb-usb: schedule remote query interval to 150 msecs. [ 116.071086][ T34] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 116.230520][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 116.233172][ T34] dvb-usb: error while querying for an remote control event. [ 116.351408][ T9268] loop9: detected capacity change from 0 to 14 [ 116.357777][ T9268] Dev loop9: unable to read RDB block 14 [ 116.360433][ T9268] loop9: AHDI p1 p2 p3 [ 116.362245][ T9268] loop9: partition table partially beyond EOD, truncated [ 116.365492][ T9268] loop9: p1 start 1601398130 is beyond EOD, truncated [ 116.368303][ T9268] loop9: p2 start 1702059890 is beyond EOD, truncated [ 116.374180][ T9268] ubi31: attaching mtd0 [ 116.376170][ T9268] ubi31 error: ubi_attach_mtd_dev: bad VID header (8) or data offsets (72) [ 116.384320][ T6014] usb 7-1: string descriptor 0 read error: -71 [ 116.388081][ T6014] usb 7-1: USB disconnect, device number 6 [ 116.388943][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 116.393217][ T34] dvb-usb: error while querying for an remote control event. [ 116.551031][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 116.553230][ T34] dvb-usb: error while querying for an remote control event. [ 116.708720][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 116.710720][ T24] dvb-usb: error while querying for an remote control event. [ 116.868847][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 116.870554][ T24] dvb-usb: error while querying for an remote control event. [ 117.028830][ T5990] dvb-usb: bulk message failed: -22 (1/0) [ 117.031431][ T5990] dvb-usb: error while querying for an remote control event. [ 117.107458][ T9309] FAULT_INJECTION: forcing a failure. [ 117.107458][ T9309] name failslab, interval 1, probability 0, space 0, times 0 [ 117.115911][ T9311] nbd: must specify a size in bytes for the device [ 117.116297][ T9309] CPU: 1 UID: 0 PID: 9309 Comm: syz.0.970 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.116317][ T9309] Tainted: [L]=SOFTLOCKUP [ 117.116321][ T9309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.116328][ T9309] Call Trace: [ 117.116332][ T9309] [ 117.116354][ T9309] dump_stack_lvl+0x100/0x190 [ 117.116380][ T9309] should_fail_ex.cold+0x5/0xa [ 117.116395][ T9309] should_failslab+0xc2/0x120 [ 117.116414][ T9309] __kmalloc_cache_noprof+0x7a/0x6f0 [ 117.116428][ T9309] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 117.116448][ T9309] tcp_sendmsg_fastopen+0x24d/0x750 [ 117.116469][ T9309] tcp_sendmsg_locked+0x279a/0x45f0 [ 117.116488][ T9309] ? __lock_acquire+0x4a5/0x2630 [ 117.116507][ T9309] ? __lock_acquire+0x4a5/0x2630 [ 117.116528][ T9309] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 117.116545][ T9309] ? do_raw_spin_lock+0x128/0x260 [ 117.116559][ T9309] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 117.116575][ T9309] ? __local_bh_enable_ip+0x9e/0x120 [ 117.116592][ T9309] tcp_sendmsg+0x2e/0x50 [ 117.116606][ T9309] ? __pfx_tcp_sendmsg+0x10/0x10 [ 117.116625][ T9309] inet6_sendmsg+0xb9/0x140 [ 117.116643][ T9309] __sys_sendto+0x381/0x520 [ 117.116672][ T9309] ? __pfx___sys_sendto+0x10/0x10 [ 117.116717][ T9309] ? ksys_write+0x1ac/0x250 [ 117.116744][ T9309] ? __pfx_ksys_write+0x10/0x10 [ 117.116771][ T9309] __x64_sys_sendto+0xe0/0x1c0 [ 117.116792][ T9309] ? do_syscall_64+0x95/0xf80 [ 117.116804][ T9309] ? lockdep_hardirqs_on+0x78/0x100 [ 117.116815][ T9309] do_syscall_64+0x106/0xf80 [ 117.116826][ T9309] ? clear_bhb_loop+0x40/0x90 [ 117.116841][ T9309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.116853][ T9309] RIP: 0033:0x7f41aaf9c799 [ 117.116863][ T9309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.116874][ T9309] RSP: 002b:00007f41abe9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 117.116886][ T9309] RAX: ffffffffffffffda RBX: 00007f41ab215fa0 RCX: 00007f41aaf9c799 [ 117.116893][ T9309] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 117.116900][ T9309] RBP: 00007f41abe9c090 R08: 0000200000000140 R09: 000000000000001c [ 117.116906][ T9309] R10: 0000000028004044 R11: 0000000000000246 R12: 0000000000000001 [ 117.116913][ T9309] R13: 00007f41ab216038 R14: 00007f41ab215fa0 R15: 00007ffc8652a3e8 [ 117.116928][ T9309] [ 117.202850][ T5990] dvb-usb: bulk message failed: -22 (1/0) [ 117.204891][ T5990] dvb-usb: error while querying for an remote control event. [ 117.358971][ T5990] dvb-usb: bulk message failed: -22 (1/0) [ 117.361269][ T5990] dvb-usb: error while querying for an remote control event. [ 117.476118][ T9332] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 117.518434][ T9335] 8021q: VLANs not supported on ip6_vti0 [ 117.522594][ T5990] dvb-usb: bulk message failed: -22 (1/0) [ 117.525383][ T5990] dvb-usb: error while querying for an remote control event. [ 117.690313][ T5990] dvb-usb: bulk message failed: -22 (1/0) [ 117.693191][ T5990] dvb-usb: error while querying for an remote control event. [ 117.848810][ T5990] dvb-usb: bulk message failed: -22 (1/0) [ 117.850748][ T5990] dvb-usb: error while querying for an remote control event. [ 118.018796][ T5990] dvb-usb: bulk message failed: -22 (1/0) [ 118.021015][ T5990] dvb-usb: error while querying for an remote control event. [ 118.178742][ T5990] dvb-usb: bulk message failed: -22 (1/0) [ 118.180787][ T5990] dvb-usb: error while querying for an remote control event. [ 118.338705][ T5990] dvb-usb: bulk message failed: -22 (1/0) [ 118.341206][ T5990] dvb-usb: error while querying for an remote control event. [ 118.499763][ T5990] dvb-usb: bulk message failed: -22 (1/0) [ 118.501897][ T5990] dvb-usb: error while querying for an remote control event. [ 118.601371][ T34] usb 6-1: USB disconnect, device number 14 [ 118.617250][ T9344] __nla_validate_parse: 3 callbacks suppressed [ 118.617262][ T9344] netlink: 24 bytes leftover after parsing attributes in process `syz.3.979'. [ 118.633358][ T9348] FAULT_INJECTION: forcing a failure. [ 118.633358][ T9348] name failslab, interval 1, probability 0, space 0, times 0 [ 118.638342][ T9348] CPU: 1 UID: 0 PID: 9348 Comm: syz.1.980 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.638367][ T9348] Tainted: [L]=SOFTLOCKUP [ 118.638372][ T9348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.638381][ T9348] Call Trace: [ 118.638388][ T9348] [ 118.638394][ T9348] dump_stack_lvl+0x100/0x190 [ 118.638431][ T9348] should_fail_ex.cold+0x5/0xa [ 118.638451][ T9348] should_failslab+0xc2/0x120 [ 118.638475][ T9348] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 118.638495][ T9348] ? __inet_hash_connect+0x686/0x1e40 [ 118.638518][ T9348] ? __inet_hash_connect+0x5ae/0x1e40 [ 118.638544][ T9348] __inet_hash_connect+0x686/0x1e40 [ 118.638574][ T9348] ? __pfx___inet6_check_established+0x10/0x10 [ 118.638595][ T9348] ? __pfx___inet_hash_connect+0x10/0x10 [ 118.638638][ T9348] ? inet6_hash_connect+0xe2/0x180 [ 118.638658][ T9348] tcp_v6_connect+0x1562/0x2420 [ 118.638676][ T9348] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 118.638694][ T9348] ? tcp_sendmsg_locked+0x279a/0x45f0 [ 118.638719][ T9348] ? __pfx_tcp_v6_connect+0x10/0x10 [ 118.638746][ T9348] __inet_stream_connect+0x208/0xfa0 [ 118.638772][ T9348] ? __pfx___inet_stream_connect+0x10/0x10 [ 118.638803][ T9348] tcp_sendmsg_fastopen+0x3ed/0x750 [ 118.638828][ T9348] tcp_sendmsg_locked+0x279a/0x45f0 [ 118.638852][ T9348] ? __lock_acquire+0x4a5/0x2630 [ 118.638875][ T9348] ? __lock_acquire+0x4a5/0x2630 [ 118.638904][ T9348] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 118.638925][ T9348] ? do_raw_spin_lock+0x128/0x260 [ 118.638943][ T9348] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 118.638965][ T9348] ? __local_bh_enable_ip+0x9e/0x120 [ 118.638987][ T9348] tcp_sendmsg+0x2e/0x50 [ 118.639005][ T9348] ? __pfx_tcp_sendmsg+0x10/0x10 [ 118.639024][ T9348] inet6_sendmsg+0xb9/0x140 [ 118.639040][ T9348] __sys_sendto+0x381/0x520 [ 118.639065][ T9348] ? __pfx___sys_sendto+0x10/0x10 [ 118.639105][ T9348] ? ksys_write+0x1ac/0x250 [ 118.639128][ T9348] ? __pfx_ksys_write+0x10/0x10 [ 118.639152][ T9348] __x64_sys_sendto+0xe0/0x1c0 [ 118.639175][ T9348] ? do_syscall_64+0x95/0xf80 [ 118.639190][ T9348] ? lockdep_hardirqs_on+0x78/0x100 [ 118.639200][ T9348] do_syscall_64+0x106/0xf80 [ 118.639211][ T9348] ? clear_bhb_loop+0x40/0x90 [ 118.639224][ T9348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.639235][ T9348] RIP: 0033:0x7fd37779c799 [ 118.639244][ T9348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.639255][ T9348] RSP: 002b:00007fd378620028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 118.639266][ T9348] RAX: ffffffffffffffda RBX: 00007fd377a15fa0 RCX: 00007fd37779c799 [ 118.639273][ T9348] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 118.639279][ T9348] RBP: 00007fd378620090 R08: 0000200000000140 R09: 000000000000001c [ 118.639286][ T9348] R10: 0000000028004044 R11: 0000000000000246 R12: 0000000000000001 [ 118.639292][ T9348] R13: 00007fd377a16038 R14: 00007fd377a15fa0 R15: 00007ffd3ac50008 [ 118.639306][ T9348] [ 118.651192][ T34] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 120.110688][ T9311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.189689][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'. [ 120.202690][ T5936] Bluetooth: hci0: unexpected event 0x01 length: 4 > 1 [ 121.188482][ T9397] lo speed is unknown, defaulting to 1000 [ 121.468791][ T34] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 121.589624][ T9404] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 121.594051][ T9404] bond4 (unregistering): Released all slaves [ 121.621282][ T34] usb 7-1: config 0 has no interfaces? [ 121.625612][ T34] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 121.629811][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.633346][ T34] usb 7-1: Product: syz [ 121.635205][ T34] usb 7-1: Manufacturer: syz [ 121.637243][ T34] usb 7-1: SerialNumber: syz [ 121.638913][ T830] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 121.649654][ T34] usb 7-1: config 0 descriptor?? [ 121.802053][ T830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.806471][ T830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.811045][ T830] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.816690][ T830] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.821086][ T830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.826899][ T830] usb 5-1: config 0 descriptor?? [ 121.909593][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 121.914020][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 121.914032][ T40] audit: type=1400 audit(121.847:670): avc: denied { listen } for pid=9408 comm="syz.1.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 122.067631][ T1334] usb 7-1: USB disconnect, device number 7 [ 122.235585][ T9400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.240344][ T9400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.246258][ T40] audit: type=1400 audit(122.177:671): avc: denied { listen } for pid=9399 comm="syz.0.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 122.255247][ T830] usbhid 5-1:0.0: can't add hid device: -71 [ 122.258089][ T830] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 122.264399][ T830] usb 5-1: USB disconnect, device number 8 [ 122.895755][ T9441] TCP: TCP_TX_DELAY enabled [ 122.924357][ T9441] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 122.934037][ T40] audit: type=1326 audit(378.866:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9443 comm="syz.0.1009" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41aaf9c799 code=0x0 [ 122.962338][ T5936] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 122.965817][ T9450] tmpfs: Bad value for 'mpol' [ 122.968291][ T9450] netlink: 'syz.2.1011': attribute type 2 has an invalid length. [ 122.971620][ T5936] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 122.977944][ T9452] tmpfs: Bad value for 'mpol' [ 123.019075][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1013'. [ 123.026102][ T9458] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9458 comm=syz.2.1013 [ 123.198500][ T6496] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.204105][ T6496] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.207808][ T6496] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.211921][ T6496] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.318765][ T40] audit: type=1400 audit(379.246:673): avc: denied { write } for pid=9476 comm="syz.2.1021" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 123.330284][ T40] audit: type=1400 audit(379.256:674): avc: denied { associate } for pid=9476 comm="syz.2.1021" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 123.346689][ T40] audit: type=1400 audit(379.276:675): avc: denied { getopt } for pid=9476 comm="syz.2.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 123.430586][ T9491] netlink: 'syz.1.1022': attribute type 21 has an invalid length. [ 123.433997][ T9491] netlink: 'syz.1.1022': attribute type 2 has an invalid length. [ 123.436586][ T9491] netlink: 46 bytes leftover after parsing attributes in process `syz.1.1022'. [ 123.463277][ T5936] block nbd0: Receive control failed (result -32) [ 123.505586][ T40] audit: type=1400 audit(379.436:676): avc: denied { watch watch_reads } for pid=9494 comm="syz.2.1026" path="/proc/878" dev="proc" ino=29276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 124.104885][ T9542] nfs4: Unknown parameter '͹ ' [ 124.127571][ T9542] netlink: 'syz.0.1040': attribute type 1 has an invalid length. [ 124.131386][ T9542] netlink: 16138 bytes leftover after parsing attributes in process `syz.0.1040'. [ 124.302910][ T9560] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1045'. [ 124.311009][ T9560] netlink: 212048 bytes leftover after parsing attributes in process `syz.0.1045'. [ 124.362791][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1048'. [ 124.366499][ T9564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1048'. [ 124.451947][ T9572] ieee802154 phy0 wpan0: encryption failed: -126 [ 124.584237][ T9595] 9p: Could not find request transport: vkrtio [ 124.725765][ T9604] kvm: pic: non byte write [ 124.734513][ T40] audit: type=1400 audit(380.666:677): avc: denied { mounton } for pid=9615 comm="syz.1.1064" path="/276/file0" dev="9p" ino=72614007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.738890][ T9617] 9pnet_virtio: no channels available for device syz [ 124.748563][ T9617] 9pnet_virtio: no channels available for device syz [ 124.753466][ T9617] 9pnet_virtio: no channels available for device syz [ 124.756416][ T9617] 9pnet_virtio: no channels available for device syz [ 124.759749][ T9617] 9pnet_virtio: no channels available for device syz [ 124.762294][ T9617] 9pnet_virtio: no channels available for device syz [ 124.764733][ T9617] 9pnet_virtio: no channels available for device syz [ 124.767161][ T9617] 9pnet_virtio: no channels available for device syz [ 124.770629][ T9617] 9pnet_virtio: no channels available for device syz [ 124.773922][ T9617] 9pnet_virtio: no channels available for device syz [ 124.777148][ T9617] 9pnet_virtio: no channels available for device syz [ 125.142114][ T9625] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1067'. [ 125.153736][ T9625] overlayfs: conflicting options: userxattr,redirect_dir=on [ 125.212758][ T9629] batadv_slave_1: entered promiscuous mode [ 125.217678][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1069'. [ 125.218758][ T40] audit: type=1400 audit(381.146:678): avc: denied { mount } for pid=9628 comm="syz.1.1069" name="/" dev="autofs" ino=33800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 125.242282][ T9629] team0 (unregistering): Port device team_slave_1 removed [ 125.250153][ T9629] team0 (unregistering): Port device bond0 removed [ 125.296037][ T9628] batadv_slave_1: left promiscuous mode [ 125.315153][ T40] audit: type=1400 audit(381.246:679): avc: denied { unmount } for pid=5924 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 125.405143][ T9634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1071'. [ 125.457789][ T9639] lo speed is unknown, defaulting to 1000 [ 125.542017][ T9644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1074'. [ 125.546891][ T9644] trusted_key: encrypted_key: master key parameter 'eJryptfs' is invalid [ 125.911428][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1081'. [ 126.062758][ T9680] lo speed is unknown, defaulting to 1000 [ 126.516590][ T9690] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 126.531719][ T9690] picdev_read: 59 callbacks suppressed [ 126.531732][ T9690] kvm: pic: non byte read [ 126.565831][ T9696] erspan0: entered promiscuous mode [ 126.584141][ T9697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9697 comm=syz.2.1087 [ 126.591453][ T9690] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9690 comm=syz.2.1087 [ 126.655398][ T9699] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 126.658518][ T9701] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 126.688358][ T9701] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 126.694218][ T9701] overlayfs: failed to look up (tracing) for ino (-66) [ 126.842434][ T9713] wg1: entered promiscuous mode [ 126.844652][ T9713] wg1: entered allmulticast mode [ 126.849985][ T9715] netlink: 'syz.2.1094': attribute type 1 has an invalid length. [ 126.963055][ T9723] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 126.967152][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 126.967166][ T40] audit: type=1400 audit(382.896:687): avc: denied { bind } for pid=9721 comm="syz.0.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 127.049854][ T9728] MTD: Couldn't look up '/dev/sg0': -15 [ 127.052204][ T9728] /dev/sg0: Can't lookup blockdev [ 127.169402][ T9744] dlm: no locking on control device [ 127.233197][ T1334] IPVS: starting estimator thread 0... [ 127.289283][ T40] audit: type=1400 audit(383.226:688): avc: denied { accept } for pid=9760 comm="syz.0.1109" path="socket:[34031]" dev="sockfs" ino=34031 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 127.319181][ T9754] IPVS: using max 43 ests per chain, 103200 per kthread [ 127.465377][ T9769] net_ratelimit: 30 callbacks suppressed [ 127.465395][ T9769] openvswitch: netlink: IP tunnel dst address not specified [ 127.904185][ T40] audit: type=1400 audit(383.836:689): avc: denied { setopt } for pid=9784 comm="syz.3.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 128.449273][ T9808] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=278 sclass=netlink_xfrm_socket pid=9808 comm=syz.0.1120 [ 128.633718][ T9818] fuse: Bad value for 'group_id' [ 128.635429][ T9818] fuse: Bad value for 'group_id' [ 128.717770][ T9820] 9p: Could not find request transport: vi= [ 128.734276][ T9820] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 128.989806][ T40] audit: type=1400 audit(384.926:690): avc: denied { ioctl } for pid=9831 comm="syz.0.1127" path="socket:[35076]" dev="sockfs" ino=35076 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 130.754866][ T9785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.814747][ T9840] __nla_validate_parse: 7 callbacks suppressed [ 130.814765][ T9840] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1130'. [ 130.831347][ T40] audit: type=1326 audit(386.766:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9842 comm="syz.3.1132" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb8b9c799 code=0x50000 [ 130.851143][ T40] audit: type=1326 audit(386.766:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9842 comm="syz.3.1132" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb8b9c799 code=0x50000 [ 130.863000][ T40] audit: type=1326 audit(386.766:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9842 comm="syz.3.1132" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb8b9c799 code=0x50000 [ 130.872117][ T40] audit: type=1326 audit(386.766:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9842 comm="syz.3.1132" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb8b9c799 code=0x50000 [ 130.889956][ T40] audit: type=1326 audit(386.766:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9842 comm="syz.3.1132" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb8b9c799 code=0x50000 [ 130.901770][ T40] audit: type=1326 audit(386.776:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9842 comm="syz.3.1132" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb8b9c799 code=0x50000 [ 130.927939][ T9849] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1130'. [ 131.185070][ T9869] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1136'. [ 131.588397][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1141'. [ 131.949092][ T9891] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1143'. [ 131.968670][ T40] kauditd_printk_skb: 9323 callbacks suppressed [ 131.968682][ T40] audit: type=1326 audit(387.896:10020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9842 comm="syz.3.1132" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb8b9c799 code=0x50000 [ 131.979256][ T40] audit: type=1326 audit(387.906:10021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9842 comm="syz.3.1132" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb8b9c799 code=0x50000 [ 131.986950][ T40] audit: type=1326 audit(387.906:10022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9842 comm="syz.3.1132" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb8b9c799 code=0x50000 [ 131.998370][ T40] audit: type=1326 audit(387.906:10023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9842 comm="syz.3.1132" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb8b9c799 code=0x50000 [ 132.005985][ T40] audit: type=1326 audit(387.906:10024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9842 comm="syz.3.1132" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb8b9c799 code=0x50000 [ 132.013388][ T40] audit: type=1326 audit(387.906:10025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9842 comm="syz.3.1132" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb8b9c799 code=0x50000 [ 132.020922][ T40] audit: type=1326 audit(387.906:10026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9842 comm="syz.3.1132" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb8b9c799 code=0x50000 [ 132.028074][ T40] audit: type=1326 audit(387.906:10027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9842 comm="syz.3.1132" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb8b9c799 code=0x50000 [ 132.038046][ T40] audit: type=1326 audit(387.906:10028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9842 comm="syz.3.1132" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb8b9c799 code=0x50000 [ 132.047760][ T40] audit: type=1326 audit(387.906:10029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9842 comm="syz.3.1132" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb8b9c799 code=0x50000 [ 132.109167][ T9899] netlink: get zone limit has 4 unknown bytes [ 132.187517][ T9899] kvm: kvm [9898]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 132.199554][ T9899] kvm: kvm [9898]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 132.962777][ T9908] lo speed is unknown, defaulting to 1000 [ 132.971558][ T9910] QAT: failed to copy from user cfg_data. [ 132.974439][ T9910] netlink: 'syz.1.1151': attribute type 6 has an invalid length. [ 132.978126][ T9910] netlink: 'syz.1.1151': attribute type 6 has an invalid length. [ 133.107305][ T9917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1152'. [ 133.368866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 133.371992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 133.408773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 133.412753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 133.499154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 133.558851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 133.859149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 133.961932][ T9938] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1158'. [ 134.071412][ T9952] IPv6: NLM_F_CREATE should be specified when creating new route [ 134.075109][ T9952] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 134.078540][ T9952] IPv6: NLM_F_CREATE should be set when creating new route [ 134.109798][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 134.129018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 134.223762][ T9964] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 134.226598][ T9964] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 134.273707][ T9972] Illegal XDP return value 3968116652 on prog (id 166) dev N/A, expect packet loss! [ 134.326006][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.338011][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.349302][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.360710][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.370904][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.380972][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.388236][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.395254][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.405947][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.416059][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.426582][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.437031][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.447460][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.458271][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.465277][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1169'. [ 134.468590][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.474892][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.486942][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.497580][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.508012][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.518683][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.527500][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.537920][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.546912][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.557363][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.565853][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.572757][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.579548][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.586325][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.594042][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.602027][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.608776][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.616299][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.624431][ T9977] SELinux: syz.3.1167 (9977) set checkreqprot to 1. This is no longer supported. [ 134.706235][T10003] Bluetooth: MGMT ver 1.23 [ 134.754462][T10012] misc userio: No port type given on /dev/userio [ 134.862724][T10024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1180'. [ 134.866486][T10024] netlink: 'syz.0.1180': attribute type 11 has an invalid length. [ 134.871294][T10024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1180'. [ 134.875318][T10024] netlink: 'syz.0.1180': attribute type 11 has an invalid length. [ 134.932090][T10030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.969629][T10033] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 135.054896][T10036] nfs: Unknown parameter 'nofschG[aY*`JXϟ_ ]Z"FhR@.^3^' [ 135.224382][T10057] cgroup: subsys name conflicts with all [ 135.227699][T10057] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.426602][T10063] overlay: ./file0 is not a directory [ 135.692392][T10024] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 135.695712][T10024] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 135.697873][T10024] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 135.700405][T10024] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 135.702552][T10024] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 135.704468][T10024] ================================================================== [ 135.707108][T10024] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 135.710158][T10024] Read of size 8 at addr ffff88802fd52578 by task syz.0.1180/10024 [ 135.714797][T10024] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 135.715682][T10024] CPU: 3 UID: 0 PID: 10024 Comm: syz.0.1180 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.715701][T10024] Tainted: [L]=SOFTLOCKUP [ 135.715706][T10024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.715713][T10024] Call Trace: [ 135.715718][T10024] [ 135.715723][T10024] dump_stack_lvl+0x100/0x190 [ 135.715743][T10024] print_report+0x156/0x4c9 [ 135.715760][T10024] ? __virt_addr_valid+0x81/0x620 [ 135.715776][T10024] ? __phys_addr+0xe8/0x180 [ 135.715792][T10024] ? __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 135.715804][T10024] kasan_report+0xdf/0x1e0 [ 135.715821][T10024] ? __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 135.715836][T10024] __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 135.715850][T10024] bt_accept_unlink+0x34/0x2f0 [ 135.715875][T10024] l2cap_sock_teardown_cb+0x1a3/0x3f0 [ 135.715888][T10024] l2cap_chan_del+0xbd/0x930 [ 135.715904][T10024] l2cap_conn_del+0x38c/0x770 [ 135.715919][T10024] l2cap_connect_cfm+0x9bb/0x1050 [ 135.715938][T10024] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 135.715954][T10024] ? hci_connect_le_scan_cleanup+0x393/0x6e0 [ 135.715973][T10024] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 135.715988][T10024] hci_conn_failed+0x188/0x360 [ 135.715999][T10024] hci_abort_conn_sync+0x7d9/0xb20 [ 135.716012][T10024] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 135.716025][T10024] ? find_held_lock+0x2b/0x80 [ 135.716038][T10024] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 135.716056][T10024] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 135.716077][T10024] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 135.716100][T10024] hci_disconnect_all_sync.constprop.0.isra.0+0x155/0x430 [ 135.716123][T10024] ? __pfx_hci_disconnect_all_sync.constprop.0.isra.0+0x10/0x10 [ 135.716146][T10024] ? __hci_cmd_sync_status_sk+0xe4/0x190 [ 135.716169][T10024] hci_suspend_sync+0x8b7/0xa70 [ 135.716184][T10024] ? __pfx_hci_suspend_sync+0x10/0x10 [ 135.716197][T10024] ? mgmt_pending_find+0x13e/0x1a0 [ 135.716214][T10024] hci_suspend_dev+0x31d/0x540 [ 135.716230][T10024] ? __pfx_hci_suspend_dev+0x10/0x10 [ 135.716246][T10024] ? kobject_get+0xbb/0x150 [ 135.716257][T10024] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 135.716272][T10024] hci_suspend_notifier+0x21e/0x330 [ 135.716290][T10024] notifier_call_chain+0x99/0x420 [ 135.716314][T10024] blocking_notifier_call_chain_robust+0xc8/0x160 [ 135.716326][T10024] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 135.716343][T10024] ? do_raw_spin_unlock+0x145/0x1e0 [ 135.716356][T10024] pm_notifier_call_chain_robust+0x27/0x60 [ 135.716373][T10024] snapshot_open+0x189/0x2a0 [ 135.716389][T10024] ? __pfx_snapshot_open+0x10/0x10 [ 135.716404][T10024] misc_open+0x26d/0x450 [ 135.716421][T10024] ? __pfx_misc_open+0x10/0x10 [ 135.716435][T10024] chrdev_open+0x234/0x6a0 [ 135.716445][T10024] ? __pfx_chrdev_open+0x10/0x10 [ 135.716455][T10024] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 135.716468][T10024] do_dentry_open+0x6d8/0x1660 [ 135.716484][T10024] ? __pfx_chrdev_open+0x10/0x10 [ 135.716495][T10024] vfs_open+0x82/0x3f0 [ 135.716508][T10024] path_openat+0x208c/0x31a0 [ 135.716521][T10024] ? __pfx_path_openat+0x10/0x10 [ 135.716534][T10024] do_file_open+0x20e/0x430 [ 135.716544][T10024] ? __pfx_do_file_open+0x10/0x10 [ 135.716558][T10024] ? alloc_fd+0x476/0x790 [ 135.716569][T10024] ? do_getname+0x191/0x390 [ 135.716582][T10024] do_sys_openat2+0x10d/0x1e0 [ 135.716594][T10024] ? __pfx_do_sys_openat2+0x10/0x10 [ 135.716606][T10024] ? read_tsc+0x9/0x20 [ 135.716619][T10024] ? ktime_get_ts64+0x256/0x3f0 [ 135.716636][T10024] __x64_sys_openat+0x12d/0x210 [ 135.716649][T10024] ? __pfx___x64_sys_openat+0x10/0x10 [ 135.716664][T10024] do_syscall_64+0x106/0xf80 [ 135.716675][T10024] ? clear_bhb_loop+0x40/0x90 [ 135.716687][T10024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.716698][T10024] RIP: 0033:0x7f41aaf9c799 [ 135.716708][T10024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.716718][T10024] RSP: 002b:00007f41abe9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 135.716731][T10024] RAX: ffffffffffffffda RBX: 00007f41ab215fa0 RCX: 00007f41aaf9c799 [ 135.716739][T10024] RDX: 0000000000000000 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 135.716746][T10024] RBP: 00007f41ab032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 135.716753][T10024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.716760][T10024] R13: 00007f41ab216038 R14: 00007f41ab215fa0 R15: 00007ffc8652a3e8 [ 135.716771][T10024] [ 135.716775][T10024] [ 135.882185][T10024] Allocated by task 9844: [ 135.883605][T10024] kasan_save_stack+0x30/0x50 [ 135.885120][T10024] kasan_save_track+0x14/0x30 [ 135.886685][T10024] __kasan_kmalloc+0xaa/0xb0 [ 135.888519][T10024] __kmalloc_node_track_caller_noprof+0x304/0x850 [ 135.891006][T10024] kmalloc_reserve+0xe8/0x350 [ 135.892774][T10024] __alloc_skb+0x185/0x710 [ 135.894508][T10024] audit_log_start+0x350/0x930 [ 135.896246][T10024] audit_seccomp+0x61/0x1f0 [ 135.897797][T10024] __seccomp_filter+0x850/0x1140 [ 135.899420][T10024] __secure_computing+0x221/0x2e0 [ 135.901193][T10024] do_syscall_64+0x568/0xf80 [ 135.902813][T10024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.904875][T10024] [ 135.905842][T10024] Freed by task 40: [ 135.907233][T10024] kasan_save_stack+0x30/0x50 [ 135.908825][T10024] kasan_save_track+0x14/0x30 [ 135.910468][T10024] kasan_save_free_info+0x3b/0x70 [ 135.912215][T10024] __kasan_slab_free+0x5f/0x80 [ 135.913841][T10024] kfree+0x1f6/0x6b0 [ 135.915228][T10024] skb_free_head+0x119/0x220 [ 135.916811][T10024] skb_release_data+0x79b/0x9d0 [ 135.918512][T10024] sk_skb_reason_drop+0x102/0x1b0 [ 135.920288][T10024] kauditd_hold_skb+0x144/0x210 [ 135.922064][T10024] kauditd_send_queue+0x232/0x2e0 [ 135.923753][T10024] kauditd_thread+0x645/0xb30 [ 135.925398][T10024] kthread+0x370/0x450 [ 135.926808][T10024] ret_from_fork+0x754/0xd80 [ 135.928393][T10024] ret_from_fork_asm+0x1a/0x30 [ 135.930043][T10024] [ 135.930917][T10024] The buggy address belongs to the object at ffff88802fd52000 [ 135.930917][T10024] which belongs to the cache kmalloc-2k of size 2048 [ 135.935607][T10024] The buggy address is located 1400 bytes inside of [ 135.935607][T10024] freed 2048-byte region [ffff88802fd52000, ffff88802fd52800) [ 135.940197][T10024] [ 135.941095][T10024] The buggy address belongs to the physical page: [ 135.943246][T10024] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2fd50 [ 135.946255][T10024] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 135.949187][T10024] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 135.952040][T10024] page_type: f5(slab) [ 135.953433][T10024] raw: 00fff00000000040 ffff88801b842f00 dead000000000100 dead000000000122 [ 135.956721][T10024] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 135.960455][T10024] head: 00fff00000000040 ffff88801b842f00 dead000000000100 dead000000000122 [ 135.964207][T10024] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 135.967920][T10024] head: 00fff00000000003 ffffea0000bf5401 00000000ffffffff 00000000ffffffff [ 135.971556][T10024] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 135.974544][T10024] page dumped because: kasan: bad access detected [ 135.976801][T10024] page_owner tracks the page as allocated [ 135.978768][T10024] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5928, tgid 5928 (syz-executor), ts 53074433148, free_ts 52987597036 [ 135.985668][T10024] post_alloc_hook+0x153/0x170 [ 135.987261][T10024] get_page_from_freelist+0x111d/0x3140 [ 135.989077][T10024] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 135.991013][T10024] new_slab+0xa6/0x6d0 [ 135.992391][T10024] refill_objects+0x26b/0x400 [ 135.993945][T10024] __pcs_replace_empty_main+0x19f/0x600 [ 135.995760][T10024] __kmalloc_cache_noprof+0x493/0x6f0 [ 135.997535][T10024] nexthop_net_init+0x73/0x140 [ 135.999118][T10024] ops_init+0x1e2/0x5f0 [ 136.000498][T10024] setup_net+0x118/0x3a0 [ 136.001941][T10024] copy_net_ns+0x46f/0x7c0 [ 136.003406][T10024] create_new_namespaces+0x3ea/0xac0 [ 136.005130][T10024] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 136.006979][T10024] ksys_unshare+0x473/0xad0 [ 136.008474][T10024] __x64_sys_unshare+0x31/0x40 [ 136.010044][T10024] do_syscall_64+0x106/0xf80 [ 136.011588][T10024] page last free pid 5933 tgid 5933 stack trace: [ 136.013666][T10024] __free_frozen_pages+0x7e1/0x10d0 [ 136.015366][T10024] qlist_free_all+0x47/0xe0 [ 136.016861][T10024] kasan_quarantine_reduce+0x1a0/0x1f0 [ 136.018658][T10024] __kasan_slab_alloc+0x69/0x90 [ 136.020259][T10024] __kvmalloc_node_noprof+0x316/0xa00 [ 136.022066][T10024] seq_read_iter+0x819/0x1270 [ 136.023621][T10024] kernfs_fop_read_iter+0x46c/0x610 [ 136.025313][T10024] vfs_read+0x825/0xb30 [ 136.026694][T10024] ksys_read+0x12a/0x250 [ 136.028098][T10024] do_syscall_64+0x106/0xf80 [ 136.029617][T10024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.031584][T10024] [ 136.032385][T10024] Memory state around the buggy address: [ 136.034361][T10024] ffff88802fd52400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.037016][T10024] ffff88802fd52480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.039648][T10024] >ffff88802fd52500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.042219][T10024] ^ [ 136.044762][T10024] ffff88802fd52580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.047366][T10024] ffff88802fd52600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.049950][T10024] ================================================================== [ 136.055843][T10024] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 136.058248][T10024] CPU: 3 UID: 0 PID: 10024 Comm: syz.0.1180 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.061782][T10024] Tainted: [L]=SOFTLOCKUP [ 136.063215][T10024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 136.066486][T10024] Call Trace: [ 136.067606][T10024] [ 136.068589][T10024] dump_stack_lvl+0x100/0x190 [ 136.070167][T10024] vpanic+0x552/0x970 [ 136.071525][T10024] ? __pfx_vpanic+0x10/0x10 [ 136.073041][T10024] ? __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 136.075142][T10024] panic+0xd1/0xe0 [ 136.076656][T10024] ? __pfx_panic+0x10/0x10 [ 136.078345][T10024] ? __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 136.080455][T10024] ? preempt_schedule_common+0x42/0xc0 [ 136.082286][T10024] check_panic_on_warn.cold+0x19/0x34 [ 136.084044][T10024] end_report.part.0+0x3a/0x90 [ 136.085639][T10024] kasan_report.cold+0xe/0x18 [ 136.087211][T10024] ? __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 136.089358][T10024] __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 136.091440][T10024] bt_accept_unlink+0x34/0x2f0 [ 136.093060][T10024] l2cap_sock_teardown_cb+0x1a3/0x3f0 [ 136.094862][T10024] l2cap_chan_del+0xbd/0x930 [ 136.096404][T10024] l2cap_conn_del+0x38c/0x770 [ 136.098055][T10024] l2cap_connect_cfm+0x9bb/0x1050 [ 136.099755][T10024] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 136.101630][T10024] ? hci_connect_le_scan_cleanup+0x393/0x6e0 [ 136.104238][T10024] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 136.106612][T10024] hci_conn_failed+0x188/0x360 [ 136.108459][T10024] hci_abort_conn_sync+0x7d9/0xb20 [ 136.110214][T10024] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 136.112187][T10024] ? find_held_lock+0x2b/0x80 [ 136.114010][T10024] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 136.116354][T10024] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 136.119304][T10024] ? hci_disconnect_all_sync.constprop.0.isra.0+0xbe/0x430 [ 136.122540][T10024] hci_disconnect_all_sync.constprop.0.isra.0+0x155/0x430 [ 136.125640][T10024] ? __pfx_hci_disconnect_all_sync.constprop.0.isra.0+0x10/0x10 [ 136.128914][T10024] ? __hci_cmd_sync_status_sk+0xe4/0x190 [ 136.131333][T10024] hci_suspend_sync+0x8b7/0xa70 [ 136.133485][T10024] ? __pfx_hci_suspend_sync+0x10/0x10 [ 136.135715][T10024] ? mgmt_pending_find+0x13e/0x1a0 [ 136.137908][T10024] hci_suspend_dev+0x31d/0x540 [ 136.140026][T10024] ? __pfx_hci_suspend_dev+0x10/0x10 [ 136.142399][T10024] ? kobject_get+0xbb/0x150 [ 136.144319][T10024] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 136.146873][T10024] hci_suspend_notifier+0x21e/0x330 [ 136.149251][T10024] notifier_call_chain+0x99/0x420 [ 136.151558][T10024] blocking_notifier_call_chain_robust+0xc8/0x160 [ 136.154402][T10024] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 136.157596][T10024] ? do_raw_spin_unlock+0x145/0x1e0 [ 136.159931][T10024] pm_notifier_call_chain_robust+0x27/0x60 [ 136.162619][T10024] snapshot_open+0x189/0x2a0 [ 136.164701][T10024] ? __pfx_snapshot_open+0x10/0x10 [ 136.166993][T10024] misc_open+0x26d/0x450 [ 136.168902][T10024] ? __pfx_misc_open+0x10/0x10 [ 136.171063][T10024] chrdev_open+0x234/0x6a0 [ 136.173065][T10024] ? __pfx_chrdev_open+0x10/0x10 [ 136.175276][T10024] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 136.178112][T10024] do_dentry_open+0x6d8/0x1660 [ 136.180255][T10024] ? __pfx_chrdev_open+0x10/0x10 [ 136.182473][T10024] vfs_open+0x82/0x3f0 [ 136.184280][T10024] path_openat+0x208c/0x31a0 [ 136.186407][T10024] ? __pfx_path_openat+0x10/0x10 [ 136.188654][T10024] do_file_open+0x20e/0x430 [ 136.190689][T10024] ? __pfx_do_file_open+0x10/0x10 [ 136.193001][T10024] ? alloc_fd+0x476/0x790 [ 136.194986][T10024] ? do_getname+0x191/0x390 [ 136.197032][T10024] do_sys_openat2+0x10d/0x1e0 [ 136.199145][T10024] ? __pfx_do_sys_openat2+0x10/0x10 [ 136.201483][T10024] ? read_tsc+0x9/0x20 [ 136.203312][T10024] ? ktime_get_ts64+0x256/0x3f0 [ 136.205497][T10024] __x64_sys_openat+0x12d/0x210 [ 136.207714][T10024] ? __pfx___x64_sys_openat+0x10/0x10 [ 136.210114][T10024] do_syscall_64+0x106/0xf80 [ 136.212185][T10024] ? clear_bhb_loop+0x40/0x90 [ 136.214292][T10024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.216910][T10024] RIP: 0033:0x7f41aaf9c799 [ 136.218886][T10024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.227298][T10024] RSP: 002b:00007f41abe9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 136.230968][T10024] RAX: ffffffffffffffda RBX: 00007f41ab215fa0 RCX: 00007f41aaf9c799 [ 136.234506][T10024] RDX: 0000000000000000 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 136.237960][T10024] RBP: 00007f41ab032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 136.241449][T10024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.244964][T10024] R13: 00007f41ab216038 R14: 00007f41ab215fa0 R15: 00007ffc8652a3e8 [ 136.248445][T10024] [ 136.250683][T10024] Kernel Offset: disabled [ 136.252654][T10024] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:05:22 Registers: info registers vcpu 0 CPU#0 RAX=000000000016d11d RBX=ffffffff8e4975c0 RCX=ffffffff8b8fac75 RDX=0000000000000000 RSI=ffffffff8de72aee RDI=ffffffff8c1af220 RBP=0000000000000000 RSP=ffffffff8e407e00 R8 =0000000000000001 R9 =ffffed100d486795 R10=ffff88806a433cab R11=0000000000000000 R12=fffffbfff1c92eb8 R13=0000000000000000 R14=ffffffff90d97a10 R15=0000000000000000 RIP=ffffffff8b8f95df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6347000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd3785ddff8 CR3=00000000262d8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6c615f65676173 752e746363617570 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe13d7b566 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe13d7b566 00007ffe13d7b56c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbb8c331bc ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbb8c331fc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbb8c33360 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcbb8c331ee ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=0000000000000003 RCX=ffffffff81fc3fa2 RDX=ffff8880343e0000 RSI=0000000000000001 RDI=0000000000000000 RBP=ffff88806a742d80 RSP=ffffc90003307420 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100d4e85b1 R14=0000000000000001 R15=ffff88806a53c3c0 RIP=ffffffff82089978 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6447000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb335b47e20 CR3=000000000e598000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6717ced0 00007ffd6717ced0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb334feb823 00007fb334feb823 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb334febe80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb334febe80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555594aa0a98 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffff10810 c4037a020010c203 7269647265707075 01ffffffffffffff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e01ffffffffffff ffffe50810d40358 020010d20330656c 69662f2e01ffffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0110800410100005 8004048004001000 0a0144b000020010 f00358020010ee03 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6f3d74726f7078 655f73666e01ffff ffffffffffffe508 10d40358020010d2 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0330656c69662f2e 01ffffffffffffff fff10810c4037a02 0010c20372696472 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6570707501ffffff ffffffffffef0810 b20358020010b003 2e01ffffffffffff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000001237a3 RBX=ffff88801eae4900 RCX=ffffffff8b8fac75 RDX=0000000000000000 RSI=ffffffff8de72aee RDI=ffffffff8c1af220 RBP=0000000000000002 RSP=ffffc90000187df0 R8 =0000000000000001 R9 =ffffed100d4c6795 R10=ffff88806a633cab R11=0000000000000000 R12=ffffed1003d5c920 R13=0000000000000002 R14=ffffffff90d97a10 R15=0000000000000000 RIP=ffffffff8b8f95df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6547000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000002040 CR3=00000000662d6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff857910a5 RDI=ffffffff9b49e940 RBP=ffffffff9b49e900 RSP=ffffc900039c6c28 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000005 R14=0000000000000010 R15=0000000000000000 RIP=ffffffff857910cf RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f41abe9c6c0 ffffffff 00c00000 GS =0000 ffff8880d6647000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3a3482 CR3=0000000035f63000 CR4=00352ef0 DR0=0000400040000005 DR1=0000000100000000 DR2=000000000000089c DR3=0000000000000006 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7570637265705f65 676173752e746363 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3ac504f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3ac504f6 00007ffd3ac504fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd3778331bc ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd3778331fc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd377833360 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd3778331ee ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000