last executing test programs: 7m21.081812954s ago: executing program 32 (id=489): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="0b0312002e3c64000200475400", 0xd, 0x88a8ffff, &(0x7f0000000100)={0x11, 0x88a8, r2}, 0x14) 6m48.306703294s ago: executing program 33 (id=680): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)={0x10, 0x17, 0x2, {0x7, './file2'}}, 0x10) fanotify_mark(0xffffffffffffffff, 0x1, 0x0, r0, &(0x7f0000000180)='mtd1\x00') r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x3e, 0x208604) r2 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000200)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0) syz_usb_disconnect(r2) syz_usb_disconnect(r1) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff", @ANYRESDEC=r2], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) (fail_nth: 1) 5m57.960616195s ago: executing program 34 (id=1011): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000340)={0xa, 0x4e24, 0x9, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000003c0)="88", 0x1}], 0x1}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xd00, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x8000, 0xd, 0x9, 0xfffffff7, 0x12, "2819b57232820067a9b6af00"}) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000080)=0xffffffff) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f00000000c0)={0x401, 0x100, 0x1, 0xfffffff9, 0xcc, "e68d3e4826a63a0011130000002000", 0xfffffffd, 0x7}) r3 = socket(0x2, 0x80805, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000500)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) bind$bt_l2cap(r5, &(0x7f0000001780)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, 0x0) sendmmsg$inet(r3, &(0x7f0000000100)=[{{&(0x7f0000000140)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) r9 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r9, 0xc0045516, &(0x7f0000000480)=0x81) readv(r9, &(0x7f00000004c0)=[{&(0x7f0000000600)=""/4110, 0x48}], 0x1000000000000082) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f0000001640)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000280)={r10, 0x8}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000540)={r10, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x9, 0xffff1896, 0x104, 0x25, 0x4efc, 0x9}, 0x9c) 5m16.334452491s ago: executing program 35 (id=1257): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x15, 0x0, 0x1, 0x2}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="010000000000000020", 0x9) 4m40.649181741s ago: executing program 36 (id=1406): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m34.941392291s ago: executing program 6 (id=1588): mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000180)='./my_debugfs\x00', &(0x7f0000000740), 0x800000, &(0x7f0000000780)=ANY=[@ANYBLOB="64796e2cf4"]) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x9, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x4b}, 0xffffffffffffffc0) sched_setscheduler(0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x168) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_debugfs\x00', 0x17) setxattr$incfs_metadata(&(0x7f0000000340)='./mnt\x00', &(0x7f0000000380), &(0x7f0000000a00)="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", 0xf8b, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001a80)='./my_debugfs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file2\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={[{@redirect_dir_nofollow}, {@metacopy_on}, {@metacopy_off}]}) chdir(&(0x7f0000000900)='./bus\x00') 4m33.987729607s ago: executing program 6 (id=1592): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000280)=0xa80, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0xfffffffc, @local}, 0x1c, 0x0}}, {{&(0x7f0000000380)={0xa, 0x4e24, 0x80000000, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0xfffffff5) 4m33.946744045s ago: executing program 6 (id=1593): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) (fail_nth: 4) 4m33.852264638s ago: executing program 6 (id=1595): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x1c5) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1/file0\x00', 0x0) setxattr$incfs_id(&(0x7f0000000280)='./bus\x00', &(0x7f00000004c0), &(0x7f00000005c0)={'0000000000000000000000000000000', 0x31}, 0x20, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x400, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000740)={0x0, 0x200, {}, {0xee01}, 0x6, 0x2}) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x420, &(0x7f0000000800)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x36]}}}}], [{@fsmagic={'fsmagic', 0x3d, 0x1}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fowner_lt={'fowner<', r1}}]}) mount$bind(&(0x7f0000000380)='.\x00', &(0x7f00000003c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x40, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000100000085200000e1410300"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = syz_open_dev$video4linux(&(0x7f0000000180), 0x7ffffffbffffffff, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x9, 0x624, 0x1, 0x2, 0x2, 0x1ff, 0x8, 0xd8, 0x1d, 0x9, 0xc, 0x80000001, 0x9, 0x1f1, 0x0, 0x9, {0x1, 0xff}, 0xe1, 0x9}}) chdir(&(0x7f0000000500)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2) 4m33.817665623s ago: executing program 6 (id=1597): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) write$char_usb(r1, &(0x7f0000000280)='0', 0x1) 4m33.522120328s ago: executing program 6 (id=1598): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002c40)={'syztnl0\x00', &(0x7f0000002b80)={'sit0\x00', 0x0, 0x40, 0x10, 0x6, 0x5, {{0x20, 0x4, 0x3, 0x3a, 0x80, 0x65, 0x0, 0xff, 0x4, 0x0, @local, @local, {[@timestamp_addr={0x44, 0xc, 0xb4, 0x1, 0x4, [{@rand_addr=0x64010102, 0x20}]}, @lsrr={0x83, 0x7, 0xa9, [@dev={0xac, 0x14, 0x14, 0x32}]}, @ssrr={0x89, 0x23, 0x85, [@rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, @empty]}, @lsrr={0x83, 0xb, 0xa4, [@dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x14, 0x59, 0x1, 0x6, [{@private=0xa010102, 0x7}, {@rand_addr=0x64010101, 0x8}]}, @generic={0x88, 0xd, "7d469f836f3b69f8917423"}, @generic={0x83, 0x8, "3d3ba798806a"}, @noop]}}}}}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8400, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000002d40)={[0x135d4fb7, 0x7b7f1c79, 0x9, 0xc08, 0x2, 0x4, 0x1, 0x5, 0x6, 0x4, 0x800, 0xfffffffffffffffe, 0x4, 0x0, 0x8, 0x1], 0x2, 0x120000}) unlink(&(0x7f0000000540)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000026c0)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002780)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000027c0)='./dev\x00', &(0x7f0000002800)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000002840)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000002880)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r2, 0xc138fd09, &(0x7f00000028c0)="0400000000000000000000009001000038010000010000000000000000100000000000080000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") mount(0x0, &(0x7f0000002a80)='./sys\x00', &(0x7f0000002ac0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002b00)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 4m33.486077777s ago: executing program 37 (id=1598): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002c40)={'syztnl0\x00', &(0x7f0000002b80)={'sit0\x00', 0x0, 0x40, 0x10, 0x6, 0x5, {{0x20, 0x4, 0x3, 0x3a, 0x80, 0x65, 0x0, 0xff, 0x4, 0x0, @local, @local, {[@timestamp_addr={0x44, 0xc, 0xb4, 0x1, 0x4, [{@rand_addr=0x64010102, 0x20}]}, @lsrr={0x83, 0x7, 0xa9, [@dev={0xac, 0x14, 0x14, 0x32}]}, @ssrr={0x89, 0x23, 0x85, [@rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, @empty]}, @lsrr={0x83, 0xb, 0xa4, [@dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x14, 0x59, 0x1, 0x6, [{@private=0xa010102, 0x7}, {@rand_addr=0x64010101, 0x8}]}, @generic={0x88, 0xd, "7d469f836f3b69f8917423"}, @generic={0x83, 0x8, "3d3ba798806a"}, @noop]}}}}}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8400, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000002d40)={[0x135d4fb7, 0x7b7f1c79, 0x9, 0xc08, 0x2, 0x4, 0x1, 0x5, 0x6, 0x4, 0x800, 0xfffffffffffffffe, 0x4, 0x0, 0x8, 0x1], 0x2, 0x120000}) unlink(&(0x7f0000000540)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000026c0)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002780)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000027c0)='./dev\x00', &(0x7f0000002800)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000002840)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000002880)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r2, 0xc138fd09, &(0x7f00000028c0)="0400000000000000000000009001000038010000010000000000000000100000000000080000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") mount(0x0, &(0x7f0000002a80)='./sys\x00', &(0x7f0000002ac0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002b00)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 4m4.482287924s ago: executing program 9 (id=1840): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000400)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) preadv(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}], 0x1, 0x800, 0x4000000) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ec0)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000001f40), 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 4m4.435991699s ago: executing program 9 (id=1841): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018300000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) 4m4.435848865s ago: executing program 9 (id=1842): r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x870}}) 4m4.408220914s ago: executing program 9 (id=1843): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0x36, 0x0, &(0x7f0000000600)="c1dfb080cd21d398098ee68886ddfc30d80ce5ed88f6e9b83601f444ac505655d702cb364881a9fb5fbebe8f1e17d613fe24c2021a97", 0x0, 0x7b56, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m3.47639665s ago: executing program 9 (id=1845): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x204, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) read$FUSE(r1, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002ac0)={'\x00', 0x3, 0x8, 0x6, 0x0, 0x5, 0x0}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x53564d41, 0x0, r4, 0x0, &(0x7f0000002b40)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002fc0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002b80)={0x3f4, 0x3e, 0x400, 0x70bd2a, 0x25dfdbfb, {0xc}, [@nested={0x127, 0x3ffc, 0x0, 0x1, [@nested={0x4, 0xb0}, @generic="70acd30277a04daeb22256c3c3409dfece853a0425244f5bf03fd720c236d1ae84875926c1398883f1f4a581acf7f24dc53030c28e1645ac2658be1bf3da092656b753ec0add9a7ba1222ac729fbb60f321cf87a3cb282044adbb6a947646530f633fec2cfdf232d5554a148c8486c88383e32cc947505e1dd2c6234301c56d7d45c1967a5fc867016c8a46d170078a550a97c98046fa24227e2a57753c77d", @typed={0x7e, 0x88, 0x0, 0x0, @binary="2e7a18f31aa1f873eda8d0d3ae5f375828837f464615ea908fea6cc5a6c275be1648cfe0b8c14d9e492ba6da0a9ceef189060021c7243f78f9a9111620adfb5e61cce00ee3f6726498548dbe392a9469cfff0096dd8a273fc7958448c55d640e085be8c5f3ece65ce80d337745b9f62111350f5046731cf104b0"}]}, @typed={0x8, 0xb4, 0x0, 0x0, @uid=r2}, @generic="4ccd6abd688591bb7f63b41db29c05a5e371d3f992e0fbbd67c121840926c9e3cba3ab59d35d8daf90382f0f44a6b9cadf4fa53718c568d2c54f7b450d76d11b", @generic="99cb17041c0a69ebdf9edb8ea167eeac15bb7bc805ed932bdd9fbd5bd59f47a73f015c4c72fe930f206b1f326d7f052655", @typed={0xc, 0x14b, 0x0, 0x0, @u64=0x80}, @typed={0x14, 0x5d, 0x0, 0x0, @ipv6=@remote}, @typed={0x33, 0x154, 0x0, 0x0, @binary="93b1d333378f2f8be7e5f4585a8d5a66d13a8f4d1e204801e74393977995fc206571e76ca00066b240fa53c4f56712"}, @nested={0x1d5, 0x27, 0x0, 0x1, [@typed={0x8, 0x58, 0x0, 0x0, @pid=r3}, @nested={0x4, 0xfa}, @nested={0x4, 0xf4}, @generic="392fdeca43a1c546a85881b922a3c36e8fa40c1237e95ef049cc2aaabf84d0522f0a132e03f512095c5323f774834a2474d53e5bd35e56f5bd39562fc391b5d610718bfa22e60d689021c2a5b056f1efa4678d42a6fd56de008f4d87c2214eee9d2e5f5178bea0ab9f0c2a0ba3c7fd49a821bca940f8abb26663af650bc4762b3f6a3dd45fe0efac0df7234e12392926fbb53b7c0ccc91", @generic="9fe1374c690965113be9fa5b313b674c445b57", @typed={0x8, 0x12e, 0x0, 0x0, @pid=r4}, @generic="8c1089f4fce2a73c3f5b181805cb7f09fc20e0aa093724ce79ae05b4a9d61b0dedf0f65b9629d578e36a6837edbd9f2dbf17c1123e471bec96551988c2c7b14d25fdde232088c4f526a85846ee75fc2d9330168f8f51239c26e8900c5637d8070aca43f4c50cd6cda42b24ff803590f55d604c9cd61eaff06276715c8acf4993b20562c718906b6c118a3698b08154aba394202adf9d7bdafeea531ba7fb076cfcb8951fd3750624f00f72b2bc31a9f70da04216b6697ffc7aab1fd928d5101867d1b023a47b160102f1ee416f41da595d95", @generic="82ad523e8040add6bebc2df05c4ceb64fc9a4e6f1cfc5b67f47f0a56e7b0047ee739a182e89aff275d7d33efea4891cec9a4a310b10ecb12c69afd203c"]}, @typed={0x7, 0x4, 0x0, 0x0, @str='}%\x00'}, @typed={0x8, 0x15, 0x0, 0x0, @u32=0x3a1924d8}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x40000000}, 0x40000) write(r1, &(0x7f0000000140)='7', 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f00000001c0)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0x10, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) syz_emit_ethernet(0x34, &(0x7f0000000a40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@generic={0x8906, "ed9e681963b59679626ced9af0b1af9db4b9ba44905bd8bb232ea0f04bdbf0904bc60fb5f75f"}}}, 0x0) 4m3.406191181s ago: executing program 9 (id=1846): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r3, 0x1, 0x0, 0xffffffff, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'veth1_virt_wifi\x00', {0x13}, 0xffbd}) 3m47.951949746s ago: executing program 38 (id=1846): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r3, 0x1, 0x0, 0xffffffff, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'veth1_virt_wifi\x00', {0x13}, 0xffbd}) 1m45.428816592s ago: executing program 2 (id=3168): setresuid(0x0, 0xee00, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f0000004940)={0x1, 0xe, &(0x7f0000004a00)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000055c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000005600), 0x0, 0x10, &(0x7f0000005640), 0xfffffffffffffdbb}, 0x48) 1m45.372951425s ago: executing program 2 (id=3170): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000480)="0400000000000000000000009001000038010000010000000000000000000000000000000032000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e2030") 1m45.369276242s ago: executing program 2 (id=3172): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="180000000a14090129bd7000fddbe3250800"], 0x18}, 0x1, 0x0, 0x0, 0x200000d0}, 0x20000050) 1m45.344196175s ago: executing program 2 (id=3175): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2210088, &(0x7f0000000240)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f00000002c0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000027000/0x2000)=nil, 0x2000, 0x3, 0x20010, r0, 0x2000) ftruncate(r0, 0x4a8e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000003c0)={0x2, 0x24e23, @loopback}, 0x10) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000880)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r4, 0x3b87, &(0x7f00000008c0)={0x18, 0x1, 0x0, 0x0, r5}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000900)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000980)={0x28, 0x7, r5, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000009c0)={0x18, r5}) sendto$inet(r2, &(0x7f0000000800)='v', 0x1, 0x4040, 0x0, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000340)=0xc, 0x6, 0x2) r6 = socket$inet6(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/kernel/core_pattern\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x23}, {0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xfffffffe}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) 1m45.260041075s ago: executing program 2 (id=3177): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0x36, 0x0, &(0x7f0000000600)="c1dfb080cd21d398098ee68886ddfc30d80ce5ed88f6e9b83601f444ac505655d702cb0e4881a9fb5fbebe8f1e17d613fe24c2021a97", 0x0, 0x7b56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x50) 1m44.819018987s ago: executing program 2 (id=3181): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0415c200000000000109022400010000a00209040001020300020009210000400122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0xa, 0x62080) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x1cbc0240, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) syz_usb_disconnect(r2) write$char_usb(0xffffffffffffffff, &(0x7f0000000280)='0', 0x1) 1m44.716201866s ago: executing program 39 (id=3181): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0415c200000000000109022400010000a00209040001020300020009210000400122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0xa, 0x62080) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x1cbc0240, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) syz_usb_disconnect(r2) write$char_usb(0xffffffffffffffff, &(0x7f0000000280)='0', 0x1) 1m42.069288018s ago: executing program 4 (id=3217): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000fff90000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) 1m42.008877591s ago: executing program 4 (id=3220): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001940)="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", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003940), 0x20940, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x4, 0x7fffffffefff) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000003980)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000039c0)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000dec000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000180)="0f01c50f22a2b9800000c00f3235001000000f3066ba4300b802000080efb92f090000b866341d06babeacff410f30660f38807785263e65670fc75f0083fb090f32b8000001000f23d00f21f835100000010f23f8", 0x55}], 0x1, 0xa, &(0x7f0000000280)=[@cstype0={0x4, 0xf}], 0x1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r3, &(0x7f0000000140)='27', 0x2) unshare(0x40000000) symlink(&(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') 1m41.606231164s ago: executing program 4 (id=3228): r0 = syz_open_dev$mtd(&(0x7f0000000080), 0x0, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKPG(r0, 0xc0104d03, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x401) 1m41.602724628s ago: executing program 4 (id=3229): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000480)="0400000000000000000000009001000038010000010000000000000000000000000000000000000400000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e2030") 1m41.507190183s ago: executing program 4 (id=3230): mkdirat(0xffffffffffffff9c, &(0x7f0000001240)='./file0\x00', 0x0) (async, rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001540)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x0, 0xd0, 0x1a0, 0x270, 0x340, 0x0, 0xd0, 0x1a0, 0x270, 0x430, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@empty, 0x40, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES16, @ANYBLOB="ffffff0000000000000000000000000005000000", @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000000400"/20, @ANYRES32, @ANYBLOB="00870000"], 0x50) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001280)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f00000012c0)='./bus\x00', &(0x7f0000001300), 0x8, &(0x7f0000001340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='1') mkdirat(0xffffffffffffff9c, &(0x7f00000013c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000001440)='./debug\x00', &(0x7f0000001480)='debugfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write(r0, &(0x7f0000001500)="0200000003000000", 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)=ANY=[@ANYBLOB="38000000550001002bbd70000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010200007f"], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_readv(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/255, 0xff}], 0x1, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, 0x0) (async) chdir(&(0x7f0000001380)='./bus\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000001400)='.\x00', 0x737f0c77864bf3b9, 0x408) 1m41.415328615s ago: executing program 4 (id=3231): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000efff0000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) 1m34.739727203s ago: executing program 0 (id=3313): setresuid(0x0, 0xee00, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f0000004940)={0x1, 0xe, &(0x7f0000004a00)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000055c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000005600), 0x0, 0x10, &(0x7f0000005640), 0xfffffffffffffdbb}, 0x48) 1m34.678182297s ago: executing program 0 (id=3315): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x102) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x13) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x2000000000000080, 0x1, r4}}, 0x40) ioctl$CDROMREADAUDIO(r0, 0x5392, &(0x7f0000000040)={@msf={0x8, 0xb, 0x4}, 0x0, 0x0, 0x0}) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) creat(&(0x7f0000000080)='./file0\x00', 0x102) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0xc402, 0x80) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) (async) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[], 0x13) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x2000000000000080, 0x1, r4}}, 0x40) (async) ioctl$CDROMREADAUDIO(r0, 0x5392, &(0x7f0000000040)={@msf={0x8, 0xb, 0x4}, 0x0, 0x0, 0x0}) (async) 1m34.339215402s ago: executing program 0 (id=3321): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000480)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000004000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e2030") 1m34.309405756s ago: executing program 0 (id=3322): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs_dir\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write$tun(r1, 0x0, 0x11f) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="c4001000190001004b995f4effffff31d7fb431109632acb4e86ff00000000e0000002000000000000000400000000200100000000000000000000000000010000fffc00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000002000000000ffffffffffffff7f0000000000000000ac0dffffffffffff00000000000000004d010000000000000000000000000000fbffffffffffffff0000000000000000f7ffffffffffffff00000000000000020000000000000000000000000000000000010302000000000c0015005d07350002000000"], 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@updpolicy={0xb8, 0x15, 0xf1f, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) semop(0x0, &(0x7f0000000540)=[{0x0, 0x9, 0x1800}], 0x1) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000580)={0xfffffff8, 0x100, 0x8, 0x7, 0x6, 0x0, 0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x2000, 0x0, 0xffaa, 0x0, 0x0, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)="88ee798e71ade214d3ff68ec2ec0532d69cfb58277a5dfdb430ff2db2c4fdc9b5fcd607c005c9253b1110dd529297b692f56309c55a47d678ea31ea8e25440c54c275efb1bdf00e8b74dc5853b7c5c18a8c90c4fc5db696f91a827f2f78d9ecd6a7e012e4d10c328b688dabfa93c5aadc4bc1d2186da73358c8528d077314e432f0e5daf4e167e786abeb200bdcbba211d173d71baf330344f45a338924d068e45050fa9880aa4983f2c37a04efa1beb644b50037e0610906956f755d52cba6e70fed3ec18b1da7c9e88f68617a180e34dbf0b873d55b9d4b4f1c3898298aabad5e803", 0xe3}, 0x1, 0x0, 0x0, 0x11}, 0x0) 1m33.910744666s ago: executing program 0 (id=3327): r0 = syz_open_dev$video(&(0x7f0000000440), 0x20000000000008, 0x8000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x626280, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000280)={0x4, 0x9f2, 0x9, 0x0, 0x0, [{{r0}, 0x7}, {{r0}, 0x5}, {{r0}, 0x100000000}, {{r0}, 0x6}, {{r0}, 0x4c}, {{r0}, 0x1000}, {{r0}, 0x4}, {{r0}, 0x3}, {{r0}, 0x2}]}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x5, '\x00', 0x0, r1, 0x3, 0x5, 0x1}, 0x50) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x7, '\x00', 0x0, r1, 0x3, 0x1, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xba3, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000180)='GPL\x00', 0x8c3de7e1, 0xd5, &(0x7f0000000480)=""/213, 0x72e6c23ce448dfcc, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000580)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x6, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000700)=[r1, r1, r2, r1, r1, r1, r3], &(0x7f0000000740)=[{0x4, 0x4, 0x3, 0x5}, {0x3, 0x2, 0x1, 0x9}], 0x10, 0x1}, 0x94) r4 = epoll_create1(0x0) epoll_pwait(r4, &(0x7f0000000b40)=[{}], 0x1, 0x283, &(0x7f0000000b80), 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000003c0)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000400)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone3(&(0x7f0000000a80)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r6, 0x0, 0xf3a, 0x9) tee(r5, r9, 0xf3a, 0x4) write$binfmt_elf64(r7, &(0x7f0000000900)=ANY=[], 0x18c6) r10 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x400e, 0xc000, 0x8, 0x74}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x2, 0x4, 0x4, 0x1, 0x84, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000980)=r11, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x0, &(0x7f0000000a80), &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m33.429810341s ago: executing program 0 (id=3331): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x82084, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0xd) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000002c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x101000) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m33.25174172s ago: executing program 40 (id=3331): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x82084, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0xd) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000002c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x101000) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m26.213891666s ago: executing program 41 (id=3231): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000efff0000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) 1m6.641251884s ago: executing program 5 (id=3647): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xa, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='pstore\x00', 0xc4a000, &(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r1, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffff9, 0x7f}}}}}, 0x30}, 0x1, 0xec0, 0x0, 0x48d4}, 0x40010) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000180)={0x11, 0x0, r4}, 0x14) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1}}], 0x1, 0x10000, 0x0) 1m6.428939911s ago: executing program 5 (id=3652): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}, [@ldst={0x6}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x3e0, &(0x7f0000000200)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000300), 0x0, 0x10, &(0x7f0000000340), 0x76}, 0x48) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x4}]}, 0x30}}, 0x0) 1m6.42881061s ago: executing program 5 (id=3653): setresuid(0x0, 0xee00, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f0000004940)={0x1, 0xe, &(0x7f0000004a00)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000055c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000005600), 0x0, 0x10, &(0x7f0000005640), 0xfffffffffffffdbb}, 0x48) 1m6.337341401s ago: executing program 5 (id=3654): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getpid() (async) r0 = getpid() process_vm_readv(r0, &(0x7f0000000840)=[{&(0x7f0000000740)=""/54, 0x36}, {&(0x7f00000009c0)=""/152, 0x9a}, {&(0x7f00000007c0)=""/115}], 0x2, &(0x7f0000000780)=[{&(0x7f0000000880)=""/95, 0x5f}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000980)={&(0x7f0000ff1000/0xc000)=nil, 0xc000}) mprotect(&(0x7f0000692000/0x9000)=nil, 0x9000, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = io_uring_setup(0x136a, &(0x7f00000003c0)={0x0, 0x1f8a, 0x800, 0x1, 0x100028c}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xb) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000480)={0x1008000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f00000004c0)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r4}) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f00000004c0)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r4}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000580)={0x10000, 0x1000000}) (async) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000580)={0x10000, 0x1000000}) close_range(r1, 0xffffffffffffffff, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000a80)="45fd6d093973878f434bd22069261d27c0747ba64721a9619f9c9ca2a53052ea6171d5bac7be6b78dd426457050cd1ee9411387a5de46c4983963a49cad6b0df1a2995735a2d731d46f94e2bfe04779922c94d0d9df7b4c8e4bcdb00d3a3a16ab9c192c5c98fab124fd6cd4a11ffde0eb2582e0e6c639c64caf02aaaed2cc7829db2d1133e82c1038d61d30d5c9e2e636ecd3980d2656fd15e47bb3f6faa20725aa0a3a2787a974dfe5cc0c18ffe4e1af6f9ea1ad4e4cf8da21c2c31eb3157313bc614bdfe19ee1eb180a89a5d8dd83b5d6609e2f881bda50ad707b1d55cdabd32a80f3557ec75365a0fa2e4d571c35cd8e8d68c2e08ff8202653c10ea3cb46b") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x41) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@verity_require}]}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) chdir(&(0x7f00000006c0)='./proc\x00') mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r8, &(0x7f00000002c0)='100', 0x3) socket(0x10, 0x803, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0080000008440000140012800b00010067006e657665000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000854) (async) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0080000008440000140012800b00010067006e657665000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000854) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000900)={'veth0_macvtap\x00', 0x1}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000900)={'veth0_macvtap\x00', 0x1}) fchmodat(r7, &(0x7f00000000c0)='./file1\x00', 0x0) 1m6.225059347s ago: executing program 5 (id=3658): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00', 0x581800, 0x1a6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000000c0)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000100)=0x400000001, 0x4) r2 = syz_open_dev$video4linux(&(0x7f0000000380), 0xfff, 0x103) ioctl$VIDIOC_SUBDEV_G_CROP(r2, 0xc038563b, &(0x7f0000000580)={0x0, 0x0, {0x8001, 0x2000, 0x8000, 0x7}}) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x10000800) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r2, 0xc038563b, &(0x7f00000005c0)={0x0, 0x0, {0xfffffffb, 0x3, 0x1, 0xffffffff}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f00000004c0)='3', 0x4e) memfd_create(&(0x7f0000000500)='%\x00', 0x3) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, 0x0) syz_clone(0x4200, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)='\x00', 0xffe2}], 0x1}}], 0x1, 0x400c011) mknodat$loop(r0, &(0x7f0000000080)='./config\x00', 0x100, 0x1) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) symlink(&(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00', &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') 1m5.979356575s ago: executing program 5 (id=3659): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/122, 0x0, 0xffff1000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000180)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000200)={0x0, r4}) close_range(r1, 0xffffffffffffffff, 0x3f00000000000000) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000001700)) 50.621403955s ago: executing program 42 (id=3659): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/122, 0x0, 0xffff1000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000180)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000200)={0x0, r4}) close_range(r1, 0xffffffffffffffff, 0x3f00000000000000) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000001700)) 1.857437034s ago: executing program 7 (id=4562): setresuid(0x0, 0xee00, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f0000004940)={0x1, 0xe, &(0x7f0000004a00)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000055c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000005600), 0x0, 0x10, &(0x7f0000005640), 0xfffffffffffffdbb}, 0x48) 1.847106217s ago: executing program 7 (id=4563): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1c0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x50}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@report={0x9c, 0x29, 0x1, 0x70bd2c, 0x25dfdbfe, {0x33, {@in6=@mcast1, @in=@multicast1, 0x7ff, 0x6, 0x4e20, 0x0, 0x0, 0x30, 0x20, 0x8}}, [@algo_auth={0x48, 0x1, {{'blake2s-160-generic\x00'}}}, @proto={0x5, 0x19, 0x6c}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000380)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_link_settings={0x4c, 0x8, 0x4, 0x7, 0x7, 0xc0, 0x1, 0x3, 0x5, 0xdf, [0x80, 0x0, 0x32, 0x7, 0x0, 0xa0, 0x10, 0x5]}}) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/exits\x00', 0x1, 0x184) write(r4, &(0x7f0000000640)='0', 0x1) 1.698643108s ago: executing program 7 (id=4564): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fa) symlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000001540)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000001580)='./file0/file1\x00', 0x880cc2, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x78, 0xa02) syz_open_dev$media(&(0x7f00000000c0), 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x7, 0x6776, 0x1}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x100000000) 1.661778203s ago: executing program 7 (id=4567): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000003c0)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e20, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x1001}}}}}}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000480)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendto$inet6(r0, &(0x7f00000004c0)="d0", 0x1, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000500)=0xffff1884, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000070000000060a010400000000000000000100000008000b400000000048000480440001800b000100657874686472000034000280080001400000000c080003400000000008000440000000220500020007000000080006400000000308000540000000000900010073797a300000000020000000030a010300000000000000000a0000020900030073797a300000000044010000080a01080000000000000000010000073a00074032e97608c07b8f34d704cc507d07a8d4c429672a9b6841e516ce194f03354b3c46a930469ce36ee8391a02352a70d543c633dc17a9d300007900074012119f33dbd27dbba871f33b8206fc0a59dac6df96baf86f3deffa20b8a2b13fa2fbc917a33ad4b9dc903553ff1e7533cd9d1e3f6a3248b10a63552977fab38d9ad7409cbd223b094a0bb6f0884c8839890d122f9b9963668c97749b2304852a8d461ccc39dc307f41ac41688a4f2d64a916dc532d00000008000a40000000000900010073797a30000000000900020073797a3100", @ANYRESHEX=r2], 0x248}}, 0x4000090) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000580)={'macvlan1\x00', &(0x7f00000005c0)=@ethtool_cmd={0x26, 0x80, 0x10000, 0xf, 0x8, 0x0, 0x3c, 0x2, 0x9, 0xe, 0x5, 0x5, 0xff, 0x8, 0x72, 0x0, [0x3bb1cfd0, 0x80]}}) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x4, 0xc9, 0x5}}}, 0x7) r4 = openat$cdrom(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = timerfd_create(0x5, 0x80000) timerfd_gettime(r5, &(0x7f0000000540)) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000100)=@lsasf={0x8, 0x3, 0x1}) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r7, 0x4018aee3, &(0x7f0000000040)=@attr_other={0x0, 0x3, 0x8, 0x0}) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000001280)={0x0, @bt={0xe, 0x6, 0x0, 0x3, 0x7ff, 0x1, 0x3, 0x7, 0x6, 0x36d, 0x10000, 0x7, 0x7fffffff, 0x3da, 0x15, 0x18, {0x6, 0x3}, 0x38, 0x9e}}) 1.525856008s ago: executing program 8 (id=4571): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x5}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r3}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 1.433388901s ago: executing program 8 (id=4573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000007c0)={{0x0, 0x2, 0x3}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000840)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000900)={0x0, 0x0, {0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) write$UHID_CREATE2(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0003006a0500003f000000000000000000000005010905a10105091901290a150025017501950a8102950175068103c0"], 0x135) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000740)=ANY=[@ANYBLOB='\f\x00\x00\x00\n'], 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = gettid() timer_create(0x7, &(0x7f0000000540)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f00000009c0)) timer_settime(0x0, 0x1, &(0x7f0000000a00)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000000a40)=[{0x3, &(0x7f0000000a80)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000500)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x60}]}, &(0x7f0000000980)='syzkaller\x00', 0x4}, 0x94) close(r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x2000c010) sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000013014000000110001000000000000000200010000", @ANYRES16=r4], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 888.747139ms ago: executing program 7 (id=4580): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @empty, @local}}}}, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x3, 0x200d}}}, 0x7) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), 0x4) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0x80184132, &(0x7f00000000c0)) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r2, 0x8949, &(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @empty, @local}}}}, 0x0) (async) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x3, 0x200d}}}, 0x7) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), 0x4) (async) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) (async) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0x80184132, &(0x7f00000000c0)) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$sock_netdev_private(r2, 0x8949, &(0x7f0000000040)) (async) 655.814873ms ago: executing program 1 (id=4586): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x2, 0x9, 0x8c, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x2, 0xffffffff, 0x91, 0x4, 0x4, 0x16, 0x10, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x1, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa3, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x3, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xffff, 0x4, 0x2, 0x7, 0x6, 0x2, 0x1, 0x4e162a2a, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1001, 0x80000004, 0x6, 0x438, 0x5, 0x9, 0x7, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x2, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x9e9, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d27, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf47, 0x3, 0xd500, 0x8, 0x1b, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0x3, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x7973, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0x2, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000340)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 436.568543ms ago: executing program 8 (id=4587): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x119) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}, 0x1, 0x0, 0x0, 0x8811}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000050801"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4) r5 = open(&(0x7f0000000040)='./file0\x00', 0x60840, 0x0) mq_timedsend(r5, &(0x7f0000000440)="ab03460f48b6329d4e9ddecfe9704fcad3c8fb913dbe6dbcee0c1676aff97fe72cefac733fd73153442af1138062dd6f5340a6575f4d05f2705e56e46202d3ed2485d4d2f4bec88baebd802dfb107fff76d5971b325b338d48d5bd1999d388a62b91db737003547c98", 0x69, 0x4, &(0x7f00000004c0)={0x0, 0x3938700}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xc) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(r6, r6, 0x0) setreuid(r6, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000007c0)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000004780)=@newtfilter={0x41a0, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4170, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x6, 0x3}}, @TCA_ROUTE4_ACT={0x118, 0x6, [@m_ct={0xa4, 0xa, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00'}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}]}, {0x5f, 0x6, "13b38683017f8d992b99fe34f979219e0c0b6730de4d682bfcd72e4c8361e982124766ec64e57e515d5e708e1ae9c9ed2940f283d771e44e477749565691323c632ef7be578d7e9136d25d0d51d53271dc54b5c22adf81b52005e6"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xd6, 0x6, 0x7, 0x200, 0x400}}, @TCA_DEF_DATA={0x9, 0x3, 'euid<'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4000000, 0x7, 0x7, 0x0, 0xfffffff7}}]}, {0x7, 0x6, "df6408"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}, @TCA_ROUTE4_POLICE={0x818, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0xa5}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0xd, 0x4c, 0x400, 0x2, 0x1, 0xfffffffa, 0x4, 0x4, 0xffffffff, 0xfe56, 0xffffffff, 0x86, 0xbd11, 0xb, 0xfffffdf5, 0x6, 0x0, 0x20000, 0x7a0, 0x1, 0xa, 0x0, 0x2, 0x8, 0x1, 0x7, 0xfffffffc, 0x331, 0xd, 0x6, 0x6, 0x9, 0x8001, 0xffff, 0x8, 0x84, 0x2, 0x8, 0x7, 0x1, 0x0, 0x0, 0xffffffff, 0x1a, 0x1, 0x4, 0x4, 0x9, 0x7fd, 0x6, 0x3, 0x1, 0x200, 0x1, 0x100, 0x8, 0x9, 0x0, 0x1, 0x634, 0xfff, 0x6, 0x9, 0x0, 0xae30, 0x8001, 0x0, 0x16d, 0x5, 0x0, 0x4, 0x5, 0x6, 0x81, 0x6, 0x5, 0x4, 0xf, 0x3, 0x401, 0x1000, 0x9ae, 0x2, 0x60, 0x7, 0xc, 0x6, 0xa, 0x3, 0x404, 0x200, 0x7, 0x2, 0x3, 0x9, 0x100, 0xf40, 0xf, 0x9, 0x7, 0x3, 0x8, 0x3, 0x0, 0x8, 0x2, 0xfffffffa, 0x5f, 0x4, 0x40, 0x40, 0x200, 0x8, 0x58a457fd, 0x4, 0x5, 0x77b, 0x8, 0x3, 0x7a, 0x6, 0x7, 0x2, 0x82ee, 0x0, 0x0, 0x10, 0x4, 0x0, 0xd60a, 0x7, 0x7, 0x9, 0x4, 0x9, 0x7, 0x1, 0x5, 0xa, 0x3, 0x5, 0x9, 0x9, 0x87, 0x5, 0xff, 0x101, 0x401, 0x4, 0x1, 0x1d8, 0xce94, 0x681, 0x5, 0x8000, 0x7, 0x2, 0x3ff, 0x3, 0x26, 0x7f, 0x9, 0x2, 0x4, 0x4, 0x6, 0xeb9, 0x6, 0x9, 0x1, 0x80000001, 0x8, 0x8, 0x5, 0x4, 0xa93, 0x7, 0x5, 0x5, 0x23, 0x1, 0x7, 0x2, 0x6, 0xfffffffb, 0xfac, 0x53a5c62c, 0x7ff, 0x0, 0x8, 0x6, 0x5, 0x3, 0x5, 0x4c0b, 0x2, 0x0, 0x1, 0x7, 0x3, 0x7fff, 0x3, 0x5, 0x2, 0x40, 0xffffffff, 0x6, 0x81, 0x5, 0x1, 0x4, 0x28000, 0x4, 0x2, 0x7, 0xb, 0x8000, 0x3ff, 0x4, 0x6, 0x3ff, 0x0, 0x1, 0x2, 0x817c, 0xffff6278, 0xffff, 0x46a, 0x9, 0xe, 0x1, 0x3, 0x90, 0x3, 0xc, 0x6, 0x1, 0x1, 0x7095, 0x8, 0x4, 0x9b, 0x24, 0x7, 0x2, 0x6, 0x4, 0x85, 0x0, 0x1000, 0x5, 0x3, 0x9, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x1ff, 0x6, 0xc0eb, 0x26ae, 0x9, 0x7fffffff, 0x1, 0x8, 0x10000, 0x0, 0x1, 0x1ff, 0x80000001, 0x80000000, 0x8, 0x2, 0x7, 0x3, 0x80000000, 0x4, 0x4, 0xe143, 0x9, 0x7f, 0x3, 0x80000000, 0xd, 0x7, 0x2, 0x10001, 0xe35, 0x2, 0x582, 0x2, 0x8001, 0x8, 0x2001f653, 0x1ff, 0xf75a, 0x0, 0x4, 0x1, 0x4, 0x8, 0x2, 0x8, 0xffffff80, 0x40, 0xda58, 0x5, 0x5, 0x3fe00000, 0x3cf2e441, 0x7, 0x2, 0x401, 0x4, 0x8, 0xebf1, 0x7, 0x7f, 0xf1b9, 0x5, 0x3, 0xa35, 0x0, 0xa492, 0xa, 0x9, 0x4, 0x81, 0x2, 0x8, 0xc, 0x4, 0x2, 0x7, 0x3ff, 0xd1, 0x6, 0x2, 0x797, 0x9, 0x1cc4, 0xb16, 0x7, 0xcea, 0x9, 0x3, 0x9c, 0x2, 0x0, 0x10, 0x1, 0x9, 0x1, 0x8, 0x800, 0x1, 0x3, 0x5, 0x4, 0x8, 0xfffffffd, 0x6, 0xe635, 0x101, 0x7fff, 0x91e1, 0x2, 0x9, 0x8, 0x9, 0x8, 0x8001, 0x80000000, 0xec, 0x0, 0x80000000, 0x81, 0x9, 0x1200, 0xffffffec, 0x3, 0x2, 0x8c, 0x9, 0x4, 0x2, 0x9, 0x3c00000, 0x6, 0x8, 0x8, 0x8000, 0x101, 0x5, 0x6, 0x5, 0x6, 0x5, 0x1, 0x6, 0x100, 0x7, 0x8, 0x0, 0x3, 0xfff, 0x7fff, 0x2f3, 0x7, 0x2, 0x9, 0x1, 0xfffffaf1, 0x78, 0x3, 0x4, 0x8, 0x492, 0xb, 0x40, 0xa, 0x4297, 0x2, 0x1, 0x5, 0x2, 0xfffffffb, 0x498, 0x100, 0x3, 0x1, 0x1, 0x9, 0x81, 0x1, 0x3ff, 0x6, 0xfffffff9, 0x7f, 0x401, 0x4, 0x65b, 0x0, 0x3, 0x7, 0x1, 0xcf, 0x5, 0xffffffc6, 0x8, 0x7, 0x10001, 0xffffffff, 0x80000000, 0x91f, 0x42f, 0x9, 0x40, 0x10001, 0x0, 0xd, 0x2e0, 0x1, 0xdf89, 0x9, 0x5, 0x80, 0x10000, 0x6, 0x6, 0x7, 0x7f37, 0x40, 0x5, 0x9b, 0x94d6, 0xf850, 0x6, 0xfffff001, 0x1b, 0x0, 0x10000, 0x6, 0x1, 0x0, 0x5, 0x5, 0x9, 0x10, 0x0, 0x0, 0x8, 0x2f4b, 0xc, 0x623, 0xffff, 0x2, 0xffffffff, 0x6, 0xe, 0x3, 0x8, 0xff, 0xfffffff8, 0x5, 0xa00, 0xbd, 0x7, 0x9, 0xffff, 0x7a, 0x7]}]}, @TCA_ROUTE4_ACT={0x3814, 0x6, [@m_mirred={0xec, 0x1c, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x7, 0x8, 0xfff, 0x8}, 0x4, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x5, 0x3, 0x9, 0x5}, 0x4, r10}}]}, {0x80, 0x6, "19fe14ede027db8bcf8e037c96719cc32e1036a6f27f71d5c0cf1bebebb7a4c93c59460680aa043a0b8cc65027fb4160174e35e72e6e021aea11130e4e29657acee99fe5ef8dad6d803eb4864853af070a0f2a9f8eb70108e1cb5c7cdbfd8ae793751e88941f25424f672ca95427f43f847e604e26eb4287f41036ca"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mpls={0xcc, 0x10, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x3}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x25}, @TCA_MPLS_TC={0x5, 0x6, 0x6}]}, {0x77, 0x6, "3036d4c3420ca41796624c845a6e4d1c328c7966868b1fce4d65036dbdf06b3021a5c2f1b0dfdfe8a40ae247fff82cb2c22cf4e3eee30868e5aed1876a82e1b90b3f529da31dfd57881faf1a54517591a4f7e2a4d695f36c7c3bd9b496299df1b691ea1886e72c0b14e98fffd2c87ece993600"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0x118, 0x15, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x437, 0x5, 0x8, 0xffff}, 0xb}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x320a}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}]}, {0xaa, 0x6, "424c6a91a3ff28296749ce4c893a6e35e12262032ca6b1895147fbbb509f8fe52b8328fdaf4cfcc9b6e8288ce2fa5bc9d5a7a058f58dbd78c4e9e5036830ad3deb893901847df631357d7ad7ea88cd1022d8b18df9765f32a6ddd335a3673bf4c6245d5b0b5205b6137890c7826687cd5c5ac9dbe3779189afea12661533043bbca2e7d13a8976d9df6d4e829e4698b89221b5e1da66a8fee6b65ff674c2d0088f2a30866f81"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0x160, 0xc, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x5, 0xf4, 0x4, 0x9}, {0x7ff, 0x5, 0x8, 0x4}, {0x9, 0x9, 0x92, 0x1}, {0x9, 0x0, 0xf, 0x7f}, {0xfff1, 0xe, 0x4, 0x1}, {0x2, 0x5, 0x5, 0x8}, {0xfffb, 0x2, 0x0, 0xc}]}]}, {0xe4, 0x6, "7bb9905b8aef4dd5a84667440f8ef34590f778987ac6c0c42165a02a98798cea58b0b410f70fde57f7eb1e76bd54479bddf074847f0d9ba465df276e085a7a56b48d8f608249f25d8f7bcc0c4b3ccdf87693556e6cd3f4cf080e9798a5863d8c47e75c48a2c5596b0d763eccde7f4b699ea80aaa8977fb766a440f71bf85fdb1cf8df6520a432ca6c1b1aad9e1edf1902a7e6535f4af39f1d96c1ce27eb55f2d6d57dc707c2f726b6dbc2d83d84676250876d3ad90390b193565088c8b4da56a5495339a06a5794e473d4eb774261d27da161d874925e48aa7b42c1f0a4c7cad"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0x3248, 0xd, 0x0, 0x0, {{0xb}, {0x31fc, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x1, 0x750, 0x2, 0x3, {0x3, 0x0, 0x2, 0x1, 0x7, 0x88}, {0x0, 0x0, 0xffff, 0x4833, 0x1, 0x3}, 0x7, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x6, 0x8, 0x2, 0x8000, 0xe, 0x4, 0x7, 0x7, 0x8001, 0x6f, 0x6, 0x9, 0x3, 0x2, 0x0, 0x2, 0x0, 0xe015, 0x7fff, 0xfffffff8, 0xd56693bf, 0x10001, 0x3, 0x6, 0x7, 0x4, 0x8, 0x9, 0x9, 0x1, 0x80000001, 0x7f, 0x2, 0x7f, 0xb09, 0x8000, 0x5bfdf8b3, 0xffffffff, 0x200, 0xa65, 0x1, 0x10, 0x2, 0x8, 0x101, 0xffff000, 0x0, 0xfffffff9, 0x1, 0x6, 0x8, 0x1000, 0x166, 0xffffff81, 0x59, 0x80000000, 0x9, 0x4, 0x2, 0x2f4, 0x9, 0x80000000, 0x2, 0x1, 0xc5, 0x7fff, 0x3e2, 0x6, 0x9, 0x0, 0x8, 0x7f8a, 0x7, 0x5, 0x31293b07, 0x1a8, 0x800, 0x18000, 0x3, 0x3, 0x20, 0x4, 0x80, 0x277, 0xfffffff0, 0x4, 0x63, 0x40, 0x4, 0x0, 0x3, 0x9, 0x7, 0x8, 0x101, 0x1ff, 0x80000001, 0x3da6316, 0xfffffffc, 0x80000001, 0x5, 0xb25, 0xa69c, 0x67a, 0x3ff, 0xffffff7f, 0x6, 0x6, 0x0, 0x7, 0x4, 0x8001, 0x4de3, 0x6a597f2b, 0x7fffffff, 0x8, 0x2, 0xffff, 0x2, 0x611b, 0x5, 0x5, 0x690, 0x5, 0x1000, 0xa, 0x4, 0x8bc, 0x7, 0x7, 0x5, 0x1ff, 0x10001, 0x63, 0x46e, 0x1, 0xc, 0x2, 0x1, 0x1, 0x2, 0xb, 0x62, 0x80000000, 0x7, 0x7, 0xd8, 0x578, 0x8, 0x3, 0x9, 0x7, 0x6, 0xffffffc0, 0x1ff, 0x2, 0x2, 0x3, 0x7, 0x80000001, 0x7f, 0x7, 0x3, 0x33f80000, 0x7, 0xfffffff8, 0x9, 0x3ec, 0x5, 0x7, 0x200, 0x4, 0x3, 0x950, 0x401, 0x7, 0x8, 0x0, 0x6, 0x4, 0x9, 0xfffffff9, 0xc5, 0x80, 0x8, 0x5, 0x9, 0xffff, 0x283a, 0x400, 0x8, 0xae8c, 0xc, 0x4, 0x454, 0x0, 0x5, 0x3, 0x0, 0x7, 0x8, 0x6, 0x8, 0x4, 0x7f, 0x1, 0xfffffffa, 0x692, 0xdb2, 0x101, 0x2, 0x0, 0x10001, 0x9, 0x5, 0xbb, 0x8, 0x9, 0xfffffffb, 0x5, 0xffff, 0x9, 0x1000, 0x9, 0x6e7530a3, 0x0, 0x40, 0x5, 0xbad, 0x1, 0x1ff, 0xabc4, 0xffff, 0xf478, 0x234f, 0xfdbd, 0x100, 0x5, 0x9, 0x4, 0x1, 0x3, 0x2, 0x1, 0xec, 0x1ef, 0x0, 0x100, 0x6, 0x1f, 0xfffffff8, 0x8001, 0xace1, 0x0, 0x1000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x42e7, 0xfffffffb, 0x7, 0x3, 0x1931, 0x7, 0x2, 0xf, 0x3, 0x6, 0x400, 0x4, 0xfffffffa, 0xc3, 0x1, 0x1, 0x80000000, 0xffff, 0x3, 0xe, 0xfffffbff, 0x6, 0x8, 0x4, 0x5, 0x4, 0x2, 0x1, 0x9, 0x800, 0x7ff, 0x0, 0x8, 0x9, 0xdc37, 0x0, 0x8, 0x8000, 0x2, 0x80000000, 0x3, 0x9, 0xec64, 0x101, 0x7b, 0x1000, 0x3ff, 0x1d83fc58, 0x0, 0x10001, 0x7, 0x4, 0x6, 0x8000, 0x8, 0x0, 0x7, 0x0, 0x747, 0x3, 0x3, 0x9, 0x1, 0x1ff, 0xfffffa8d, 0x8, 0x6, 0x7fffffff, 0x8000, 0x6, 0x6, 0x4, 0x6, 0x3, 0x80000000, 0x2, 0x6, 0x300, 0x6, 0x5, 0x973, 0x8, 0x1, 0xad, 0x2, 0x5, 0x7ff, 0x67f, 0x1, 0x8, 0x2, 0x9, 0x7f, 0x70, 0x2, 0x6, 0x10000, 0x7fffffff, 0x1, 0x386, 0x7, 0x7f, 0x9, 0x7, 0x7, 0xbd, 0x8, 0x8, 0x8000, 0x6, 0x5, 0x6, 0x10001, 0x2, 0xfffffff9, 0x49c5a57c, 0x200, 0x1000, 0xffffff7f, 0x2ad442f8, 0xfffffff9, 0x47d, 0x43e3, 0x40, 0x5, 0x8, 0x8, 0x7fffffff, 0x8e0e, 0x8, 0x6, 0xbc8a, 0x0, 0x7, 0xde, 0x9, 0xfffffffd, 0x0, 0x1000, 0x3, 0x80, 0xc11, 0x7fc8, 0x6, 0x9, 0x0, 0x6, 0x2, 0x6, 0x5, 0x401, 0x9, 0x2, 0x9c, 0x0, 0x5092, 0x4, 0xd84e, 0xfffffff7, 0x4, 0x9, 0x6, 0x8, 0x5d, 0x10, 0x10, 0x7, 0x7, 0x2, 0x1, 0x100, 0x6, 0x7fffffff, 0x3, 0x9000, 0x80, 0x5, 0x5, 0x6, 0x2, 0x9, 0x10c0f8e6, 0x3, 0x9, 0xfff, 0x3, 0x3, 0x7, 0x3b284ed5, 0xf56a, 0x6, 0x1, 0x9, 0xffffffff, 0x7, 0x2, 0xe10, 0xed, 0x1, 0x3, 0x6, 0x5, 0x8001, 0x1, 0x101, 0x10000, 0x8, 0x5, 0x7ff, 0x2, 0x3, 0x1, 0x19e, 0xffffffe3, 0x7, 0x7fff, 0x8000, 0x10001, 0x9, 0x4, 0x10001, 0x2, 0x0, 0xff, 0x4, 0x3, 0x80000000, 0x10, 0x0, 0x200, 0x80000000, 0x8, 0x401, 0x4, 0x1ff, 0x5, 0x8, 0x57e, 0x1, 0xd, 0x3, 0x1, 0x0, 0x3, 0x4, 0x0, 0x1000, 0xfffffff9, 0x3, 0xc3, 0x1, 0x4, 0x3, 0x0, 0x6, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x101, 0x1, 0x4, {0x8, 0x0, 0x8, 0x0, 0x4, 0x1}, {0x0, 0x0, 0x3, 0x6, 0x5bbf, 0x8}, 0x0, 0x7, 0x10000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffd, 0x9a, 0xc, 0x6, 0x10001, 0xb20d, 0x7ff, 0x0, 0x1, 0x400, 0xfffffe87, 0x4, 0x4, 0x0, 0x80000001, 0x0, 0x5, 0xffffffff, 0x1, 0x9, 0x2, 0x0, 0x401, 0xa, 0x8, 0x6, 0x0, 0x852, 0x1dc0041d, 0x7, 0x7, 0x7, 0x3, 0x2, 0x1, 0x2, 0x9, 0x7, 0x7, 0x4b, 0x9, 0x5a1, 0xd0, 0x20000001, 0x7, 0x2, 0x3, 0x10000, 0x70, 0x7, 0x7ed, 0x7, 0x3, 0x800, 0x0, 0xf, 0x6, 0x3, 0x7, 0x0, 0x0, 0x7d, 0x4b8f, 0x456, 0x80000001, 0x2a, 0x4, 0x8, 0xf868, 0x1, 0x6, 0x2, 0x7, 0x8, 0xfffffffb, 0x3, 0xc3c, 0xb, 0x6, 0x7, 0x7fff, 0x4, 0x4, 0x4, 0x8, 0x2, 0x9, 0x9a3a5b7, 0x6, 0x1, 0x7, 0x0, 0x7, 0xfffffff7, 0x2, 0x2, 0x8, 0xfffffffb, 0xffffffff, 0x8, 0xa3, 0x3f44, 0x5e6c, 0xe59, 0xff, 0x2, 0x0, 0xb6a6, 0x4, 0x8e, 0x93, 0x0, 0xc3, 0x1e8, 0x3d, 0x2, 0x80, 0x6, 0x0, 0x80000000, 0x0, 0x4, 0x6, 0x6, 0x0, 0x0, 0x10000, 0xda6, 0x6, 0x6eb, 0x4, 0xaa, 0xfffffff8, 0x80000000, 0xa00, 0x1, 0x5, 0xc3c4, 0x0, 0x10da7532, 0x6, 0x10000, 0x7da, 0xe, 0x2, 0x200000, 0x4, 0x4, 0x0, 0x3, 0x0, 0xaab, 0x2, 0x2, 0x8, 0xff, 0x7db, 0x1ff, 0x1, 0x6, 0x6, 0x5, 0x4, 0x9, 0x5, 0x2, 0x2, 0x81, 0x9, 0xffffffff, 0x1, 0xffff7fff, 0x268c0758, 0x9, 0xfaa8, 0x9, 0x0, 0x1, 0x1, 0x9, 0x1, 0x6, 0xffff, 0xbf5f, 0x2, 0x46b, 0xffffffff, 0x58355b7c, 0x2, 0xffffff59, 0xffff0001, 0x9, 0x80000001, 0x4c1, 0x3c, 0x1, 0x4, 0x7, 0x1, 0x3, 0x1, 0x5, 0x7, 0x6, 0x3, 0xfffffffb, 0x8, 0xf42, 0x400, 0x8d, 0x7ff, 0x3, 0x1a, 0x0, 0x10, 0x3, 0x7, 0x3, 0xfffffffb, 0xd36a, 0x7ff, 0xfffffff8, 0xd, 0x10, 0x5, 0x81, 0x0, 0xfffffffb, 0x8, 0xffff5e55, 0x9, 0x2be, 0x8000, 0x4, 0x80, 0x3, 0x80, 0x9, 0x4, 0x6, 0x72, 0xeccd, 0x6e1, 0x1, 0x8e, 0x9, 0xff, 0x11, 0x9, 0x200, 0x1, 0xfffffffa, 0x2, 0x40, 0x0, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0x1, 0x9, 0x8, 0xe939, 0xbc1, 0x49c, 0x2, 0x6, 0x0, 0x5, 0x77a7, 0x7, 0x1, 0x701, 0x1, 0x60, 0x8, 0x0, 0x4, 0x1f90, 0x7, 0x1f8, 0x9, 0x962, 0x8, 0x7fffffff, 0x8, 0x4, 0x0, 0x26bb, 0x1ec, 0x8b6d, 0x7b7a, 0x5, 0xf, 0x6010, 0x80000001, 0x0, 0x5, 0x8cfc, 0xe, 0x800, 0x2, 0x7, 0xc155b0b, 0x1, 0x8e, 0x8000, 0x4, 0x0, 0x4, 0x8c2, 0x4, 0x80000000, 0x4, 0x46a, 0x2a7, 0x3dae, 0x7, 0xffffff01, 0xd9b, 0x7ff, 0xff, 0x5, 0x8, 0x5, 0x5, 0x9, 0x5, 0xfffffffc, 0xfffffffe, 0x3, 0xffff8000, 0x2, 0x4171, 0xfffffffe, 0x6, 0x5, 0x9, 0x40, 0x101, 0x40, 0x0, 0x6849, 0x743, 0x1ff, 0x76, 0x400, 0x2, 0x1, 0x9, 0x9, 0x8, 0xe588, 0x3, 0x1ff, 0x9, 0x18c, 0x7f, 0xbb1, 0x56, 0xfffffc01, 0x950a, 0x2, 0xd, 0xdb9e, 0x0, 0xa7, 0x8, 0x1, 0xfffffffb, 0xf, 0x8, 0xa400, 0x8, 0x6, 0x6, 0x2, 0x5, 0x1, 0xffff, 0xc0000, 0x3ff, 0x5, 0x0, 0x8, 0xfffffffa, 0x0, 0x100, 0x0, 0x1d83, 0x6, 0xce7, 0x7, 0x5, 0xa, 0x9, 0xfffffffb, 0x28000, 0x1, 0x1608, 0x6, 0x3, 0x1000, 0x9, 0x1, 0xd03c, 0x5, 0x401, 0x6, 0xde04, 0x400, 0x4000000, 0xa4, 0x0, 0x1, 0xb, 0x4, 0x4, 0x3, 0x7, 0x5, 0xfc8c, 0x7fff, 0x1, 0xb6, 0x8, 0x9, 0xf99, 0x74, 0xf, 0x1, 0x4, 0x8, 0xf, 0xc3d6, 0x8, 0x2, 0xffff, 0xffff, 0x200, 0xe0b1, 0x0, 0x3e6, 0x6, 0xff, 0x9b8, 0x7, 0xc, 0x7497, 0x0, 0x2, 0x6, 0x3, 0x7, 0x7, 0x723, 0x7, 0x400, 0x8445, 0xa709, 0x2, 0x1, 0x0, 0x9, 0x3, 0x7, 0xc356, 0x2, 0x8, 0x4, 0x0, 0xffff6475, 0xffffffff, 0x9b, 0x81, 0x101, 0xfffffff4, 0x5, 0x1, 0x8, 0x3c, 0x9, 0x2, 0x7, 0xeb4, 0x10, 0x9, 0x7, 0xffffd514, 0x6, 0x1, 0x9, 0x800, 0xd, 0x1ff, 0x7, 0x8, 0x6, 0x8, 0x0, 0x9cf, 0x1, 0x9bb5, 0x8, 0x1, 0x7, 0x9, 0xffffffff, 0x8, 0xe8e9, 0x0, 0x100, 0x8, 0x10001]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x7fff, 0x200, 0x7, 0x1, 0x6, 0x1, 0x4c, 0x10001, 0x59b, 0x7df, 0xfffffff5, 0x1, 0x7, 0x5, 0x3, 0x8, 0xda, 0x3ac, 0x0, 0x6, 0x515, 0x6, 0x3, 0x2, 0x8, 0x3, 0x6, 0x5, 0xfff, 0x200, 0x10001, 0x3, 0x5, 0x9, 0x7, 0xfbee, 0x9, 0x4, 0x2, 0x0, 0x7, 0x2, 0x6, 0x9, 0x6, 0x3, 0xd, 0x5, 0x2, 0x6, 0x5, 0x9, 0x3, 0x6, 0x2, 0x6, 0xacc57dc7, 0x10, 0x8, 0x10000, 0xb, 0x9, 0x9, 0x9, 0x7f, 0x9517, 0x4, 0x4, 0x7, 0xce, 0x4, 0x3, 0x1, 0x38, 0x1, 0x7, 0x5, 0x4, 0x3, 0x0, 0x3, 0x8, 0x9, 0x2, 0x4, 0x2c62, 0x4, 0x4, 0x4, 0x4, 0x9, 0xe73, 0x6, 0x4, 0xf, 0x7, 0x7, 0x1, 0x1d, 0x4, 0x1b, 0x4, 0x22, 0x9, 0xf, 0x400000, 0x101, 0x0, 0x5, 0x7, 0x400, 0xffffff8d, 0x6, 0x6, 0x668c, 0xfffffff7, 0x2, 0x7ff, 0xf1fa, 0xfff, 0xc, 0x10, 0x4a84, 0x6, 0x0, 0x7ff, 0x2, 0x6, 0xfffffffe, 0x8, 0x6, 0xe, 0xfffffff1, 0xfffffffc, 0xff, 0x4, 0x6, 0x9, 0x3, 0x2, 0x3, 0x1, 0x1, 0x46e2, 0x0, 0xa8, 0x5, 0x0, 0x800, 0xffffffff, 0x2, 0x4, 0x3ff, 0x1, 0x0, 0x9, 0xb4, 0x6, 0xffffffa8, 0x7, 0x7, 0x9, 0x80000001, 0x6, 0x8, 0x8, 0x0, 0x7f, 0x3, 0x2, 0xfffffff7, 0x1, 0x8, 0xb2d5, 0x1, 0x10, 0x9, 0x6, 0x50, 0x50, 0x339, 0xfffffffc, 0xa, 0x2, 0x0, 0x1123, 0x51c, 0x6, 0x800, 0x1, 0x7021d092, 0x3d88, 0x6, 0xf, 0x44, 0x1, 0x3, 0xadb, 0x1, 0x2, 0x2, 0x6, 0x6d2f, 0x23, 0x8, 0xffff, 0x9, 0x1, 0x7, 0xf5d, 0x2, 0x800, 0x7fffffff, 0x7, 0xf, 0x0, 0x9, 0x1, 0xffff, 0x401, 0x5, 0x0, 0xbcc, 0x80000000, 0xfffffffb, 0x31, 0xffffff60, 0x7, 0x8, 0xc, 0x200, 0x401, 0xd1b, 0x2276, 0x3b3, 0x6, 0x0, 0x9, 0x5, 0x2, 0x2, 0xfffffff0, 0x1, 0x6, 0x7, 0x200, 0x3, 0x7, 0x8, 0xdc0, 0x8, 0x6, 0x10000, 0x8000, 0x1800]}, @TCA_POLICE_RATE={0x404, 0x2, [0x800, 0x5, 0xb, 0xbde6, 0x80, 0xfffffff8, 0x3, 0x5, 0x1ff, 0x9, 0x401, 0x74f, 0xe73, 0x5, 0x0, 0x1, 0x3, 0x0, 0xfffffff3, 0x80b, 0xc, 0x28, 0x4, 0x80000001, 0x0, 0x10, 0x8, 0x4, 0x7fff, 0xc, 0xf4, 0x5, 0xbe3, 0xa, 0x16b11755, 0x80000000, 0x8, 0x29e, 0x9fd, 0x3, 0x80000001, 0x1ca, 0x2, 0x5, 0x10001, 0x4, 0x6, 0x8, 0xa, 0x0, 0x7, 0x3, 0x4, 0xff, 0x2, 0xec, 0x1, 0xf, 0x9, 0x286, 0xacf9, 0x5, 0x6, 0x4, 0xffff, 0xf9f, 0x9, 0x400, 0x2, 0x241e, 0x7fffffff, 0x5d, 0x0, 0xc, 0x1ff, 0xb, 0x0, 0x5, 0x5, 0x1, 0x7, 0x1, 0xb, 0xffff, 0x5, 0xcb53, 0x7, 0x1000, 0x40, 0x4, 0xb95, 0x7f, 0x902, 0x1, 0x7fffffff, 0x73, 0xbb, 0x0, 0x4, 0x7ff, 0x5, 0x4, 0xfffe00, 0x9, 0xfffffbff, 0x4, 0xd, 0x1, 0x1, 0x3, 0x3, 0xfff, 0x508, 0xe0, 0x67, 0x7, 0x5, 0xd696, 0x80, 0xffff, 0x80, 0x4, 0x10, 0x4, 0xfffffff3, 0xfffffffa, 0x4, 0x80, 0x4, 0x6, 0x5391, 0x5, 0x101, 0x10000, 0x2, 0x4, 0xfffffffe, 0xd, 0xe, 0xb4, 0xfffffff9, 0x1, 0x912, 0x1, 0x9, 0x9, 0x8, 0xc, 0xffffffff, 0x5, 0xc9, 0x7, 0x2, 0x3, 0x3, 0x40, 0x2, 0xffff0001, 0x3, 0xffffffff, 0x9, 0xb8, 0x9, 0xfffffeff, 0x817, 0x4, 0xffff, 0x2, 0x2, 0xe1a, 0x49, 0x2, 0x6, 0x4, 0x81, 0x0, 0x100, 0xde, 0x40, 0x1, 0x9, 0x0, 0x7fffffff, 0x4, 0xfffffffb, 0x9, 0x80000000, 0xffffff89, 0xffff8001, 0x2, 0x30, 0xfffffff7, 0x7, 0x3, 0x6, 0x2, 0x5, 0xc000000, 0x3, 0xc, 0x0, 0x1, 0x45d5, 0x5, 0x244, 0x0, 0x5, 0xf, 0x3d95, 0x1, 0x7, 0x7, 0x9, 0xffff, 0x2, 0x7ff, 0x10000, 0x7, 0x200, 0xb9, 0x5, 0xa4, 0x1000, 0x4, 0x7f, 0x8, 0x101, 0xffff, 0xfffffffd, 0x8, 0x4, 0x0, 0x4, 0x7, 0x400, 0xffffe91a, 0xd4b, 0xb2, 0x2, 0x4, 0x1f, 0x6, 0x0, 0x9cc, 0x5, 0x28, 0x7, 0x8, 0x2, 0x9, 0x7fff, 0xfffff941, 0x2, 0xffff, 0x8, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0xffffffffffffffff, 0xfffffffb, 0x6, 0x1, {0xfb, 0x1, 0x68c1, 0x3, 0x3, 0x2}, {0x6, 0x2, 0xaa7e, 0x9, 0x7, 0x8}, 0x4, 0x3, 0x7fff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x800, 0x602, 0x5, 0x3, 0x3, 0x71483af, 0x1, 0x0, 0xd1d7, 0x6, 0x5, 0x8, 0x80000000, 0x1, 0x3, 0x6, 0x8001, 0x6f8, 0x0, 0x7, 0x9, 0xffffff4c, 0x4, 0x2, 0xffffffff, 0x5, 0x400, 0x2, 0x101, 0x1, 0x1, 0x1ff, 0x3, 0x3ff, 0x1ff, 0x9e, 0x1, 0x2, 0x2, 0x9, 0xfff, 0xd7, 0x2, 0x7, 0x2c4c, 0x0, 0x9, 0x9, 0xc98, 0x4, 0x1000, 0x9, 0x4, 0x0, 0xb35, 0x80, 0x4, 0xfe, 0x0, 0x100, 0x3, 0x0, 0x4, 0x4, 0x1, 0xfff, 0x6, 0x400, 0x917e, 0x18e4, 0x9, 0x6, 0x2, 0xfcb, 0x7, 0x1cb, 0x0, 0x3, 0x0, 0x4, 0xa6b0, 0x2, 0x3, 0x7f8, 0xa, 0x8b01f1a, 0x900000, 0x5, 0x8001, 0x7, 0x6, 0x8, 0x10000, 0x1, 0x9811, 0x5, 0xbd, 0x1, 0x9, 0x1, 0x0, 0x80000001, 0x0, 0x3, 0x3, 0xef3, 0x6, 0x1582, 0x2, 0x0, 0x6c7, 0x800, 0x1, 0x4, 0xb91a, 0xe, 0x91, 0x3, 0xd43, 0x9, 0x101, 0x40, 0x8, 0x8, 0x4, 0x1ff, 0x10, 0x3ff, 0xfb, 0x100, 0x9, 0x2, 0x2, 0x8, 0x1000000, 0x9, 0x8000000, 0x3, 0x194, 0x0, 0x11cb, 0x2, 0xcd6a, 0xf771, 0xb836, 0x4, 0x1ff, 0x0, 0x4, 0x2, 0x2, 0x19e, 0x2, 0x4, 0x1a, 0x8, 0x2, 0x7fffffff, 0x9, 0xc1, 0x8, 0x200, 0x2, 0x1, 0x6, 0x0, 0x7f, 0x0, 0x6, 0x7fffffff, 0x6, 0xfffffff7, 0x3f9e, 0x3, 0x3378, 0x8, 0x0, 0xfff, 0x10000, 0xa, 0x9, 0x8, 0x0, 0x81, 0x8, 0x9, 0x8, 0x4, 0x5, 0xfffffff9, 0xbabc, 0x3ff, 0xdc, 0x2, 0x2, 0x6, 0x10, 0x0, 0x26533d96, 0xc7ec, 0x9, 0x4, 0xffffffff, 0x0, 0x2, 0xffff, 0x4, 0x6, 0xffff, 0x7, 0x8422, 0x1, 0x5, 0x0, 0xd1d, 0x2, 0x6, 0x0, 0xb3b, 0x9, 0x8, 0x4, 0xfffffffb, 0x1, 0x5, 0x2, 0x5, 0x8, 0x3d84, 0x0, 0x17, 0x8, 0x7, 0x2, 0xce, 0x0, 0xf3c, 0xa96, 0x9000000, 0xfffffffd, 0x44b9f55c, 0x4, 0x0, 0x0, 0x4, 0x1, 0x8, 0xf7, 0x6, 0x1, 0xfff, 0x5134965, 0x9, 0x3, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7fff, 0x200, 0x4, 0xce, 0xfffffff6, 0x7, 0x6, 0x4, 0x0, 0x1, 0xffff, 0x1, 0x100, 0x7, 0x7ff, 0x10, 0x101, 0x9, 0x5, 0x80, 0xd, 0x4, 0x6, 0x80000001, 0x40, 0x0, 0xffff, 0x800, 0x7, 0x437d, 0x8, 0x7fffffff, 0x3, 0xfffffc01, 0x9, 0x4, 0xf7, 0xc, 0x6, 0x3, 0x6, 0x6, 0x1, 0x4, 0x1, 0x3, 0x5, 0x2, 0x8e7, 0xe422, 0x18, 0x9, 0x2d6, 0x2f3e, 0xa, 0xb, 0x8c8, 0x9, 0x0, 0x2, 0x9, 0x8, 0xa, 0x0, 0x7, 0x8, 0x40, 0x1, 0x5, 0xf, 0x7, 0x6, 0x40, 0x2, 0x30, 0x8001, 0x3, 0x2, 0x80, 0x28d, 0x6, 0x2, 0xffff, 0x4, 0x0, 0x46, 0x7fffffff, 0xe, 0x7, 0x8, 0x81, 0x1, 0x79, 0x4ca5, 0x7fffffff, 0x19a, 0x6, 0x38, 0xffffb05d, 0x8, 0x379, 0x7, 0x4, 0xffff, 0x1, 0x6e, 0x1, 0x1, 0x6, 0x8, 0x7, 0x4, 0x9, 0x80, 0x1, 0x0, 0xa294, 0x5, 0xd, 0x2, 0x8, 0x3, 0x6, 0x80000001, 0x8, 0x2, 0x4, 0x72, 0x8, 0x4, 0x1, 0x99e, 0x3, 0xfffffff8, 0x6, 0x6, 0xfffff800, 0xfffffffe, 0x9, 0x8, 0x1, 0x65c, 0x2, 0x2f4e9aa3, 0x2, 0x4, 0x0, 0x6, 0x7, 0x4, 0x57b, 0x1, 0x3, 0x5, 0x1, 0x4, 0x6, 0xc9f, 0x7, 0x0, 0xfb2, 0x2, 0x8, 0x9, 0x2, 0xc, 0xf3a5, 0x3, 0x1, 0x9, 0x1, 0x5, 0xffff, 0x1ff, 0x401, 0xb, 0xa, 0x8, 0xff, 0x3, 0x1, 0x2, 0x4, 0x8000, 0xeab, 0x3, 0x4, 0x10001, 0x80000001, 0x2, 0xe, 0x5, 0x1, 0x9, 0x91b, 0x7fff, 0xffff, 0xb, 0x4, 0x10000, 0x5, 0x7ff, 0x6, 0x81, 0x9, 0xca09, 0x3, 0x81, 0x15, 0x6, 0x4b2, 0x8, 0x617a, 0x10001, 0xffffff7d, 0x5, 0x7, 0xfffffffc, 0x2, 0x1, 0x5, 0x4, 0x1000, 0xb7d, 0x2, 0x3, 0x0, 0x1, 0x8, 0x7, 0x7ff, 0xd9, 0xc529, 0x4578, 0xe65, 0x6, 0x4, 0xa74, 0x5, 0x2, 0x8, 0x6, 0x4, 0x200, 0x8f11, 0x80, 0xfffffff8, 0x1d2e0, 0x9, 0x8, 0x5, 0xe86b, 0x1, 0x505f, 0x4, 0x1459]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffffffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1000}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0xffffffffffffffff, 0x4e01, 0x7, 0x1, {0x4, 0x1, 0x2, 0xff12, 0xd75, 0x80000}, {0x10, 0x0, 0x9, 0x9, 0x5, 0x37d}, 0x6, 0x1, 0x7b15a622}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x101, 0x7, 0x2, 0x3, 0x9, 0x5, 0x0, 0x5, 0xc, 0x9, 0x0, 0x4, 0x3, 0xff, 0x80, 0x6, 0x1769e872, 0x8, 0xa2f, 0x8000, 0xfffffffa, 0x93, 0x0, 0x9e5b, 0x5d2c, 0x0, 0xc8e, 0x7, 0x1, 0x53a, 0x4, 0x3, 0x6, 0x8, 0x3, 0x8, 0x5c84, 0x4, 0x10, 0x81, 0x59f1, 0x4, 0x3, 0x39, 0x7, 0x4, 0x6, 0x9, 0xfffffffd, 0xff, 0x7e, 0x8, 0x3, 0x7, 0x3, 0x7, 0x4, 0x80, 0x0, 0x7fffffff, 0x5, 0x7, 0xfffffffe, 0x6, 0xde3, 0x9, 0x0, 0xdd, 0x8, 0x1, 0x55f0, 0x8, 0xfffffffa, 0xfffffff8, 0x8, 0x6, 0x81, 0x2, 0x3, 0x80, 0xd, 0x5, 0x5, 0x8de7, 0x62, 0xa1, 0x2, 0x8001, 0x200, 0x10000, 0x5, 0x3, 0xffff, 0x8, 0x101, 0x4, 0x80, 0x100, 0x7, 0xbad9, 0x40, 0x0, 0x80000000, 0x9, 0x8000, 0x7, 0x2, 0xf, 0x1d, 0x6, 0x8, 0x31e, 0x0, 0x2, 0x10, 0x7, 0x6, 0x4, 0x401, 0x0, 0xfffff11b, 0x800, 0x0, 0xffff, 0x731, 0x2f9, 0x3ff, 0x4, 0x7, 0x1000, 0x1, 0x40, 0x400, 0x348b, 0x18, 0xfff, 0x1, 0x0, 0x7, 0x7f, 0xe8, 0x6, 0x7, 0x8000, 0xffffffff, 0x0, 0x5, 0x2, 0x5, 0x80, 0x800, 0x7ff, 0x7fff, 0x401, 0x5, 0x1, 0x5, 0x1, 0x0, 0xf7, 0x8, 0x8, 0x0, 0x9, 0x1000, 0x4, 0xfffff800, 0x2, 0x101, 0x2cb, 0x400, 0x5, 0x0, 0x6, 0x1, 0x2125, 0x4b6d, 0xffff, 0x8, 0x7, 0x0, 0x0, 0xe7, 0xecc, 0x5, 0x2, 0x1, 0x9, 0x3, 0x1, 0x7, 0x5, 0x1, 0xa7e6, 0x59, 0xffff7fff, 0x2, 0x10001, 0x614f17db, 0x5, 0x401, 0xffffffff, 0x80, 0x1, 0x1, 0x1, 0x3, 0x4, 0x80000000, 0x0, 0x3, 0x8001, 0x5e, 0x2, 0x5, 0x5, 0x5, 0x0, 0x0, 0xdfa0, 0x6, 0x4, 0xf, 0x5, 0x0, 0x5c, 0xffffffff, 0x7fff, 0xeb1, 0x1020, 0x2, 0x0, 0xbbf, 0x1, 0x7f, 0xffffffff, 0x2, 0x2, 0x6, 0x40, 0x2, 0xffff, 0x40, 0x0, 0x65000, 0x6, 0xc, 0x1, 0x5, 0x0, 0x1c1, 0x21bb, 0x0, 0xfffffffa, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x7, 0x9, 0x8, 0xfffffab9, 0x5, 0x5, 0x7, 0xb523, 0x4, 0x9, 0xe, 0x240, 0x9, 0x9, 0xfffffffe, 0x1e5d, 0x8, 0x101e, 0x10, 0x7f, 0x0, 0x80000000, 0x8, 0x60000000, 0x7fff, 0x10, 0x9b0, 0x5, 0x73d, 0xe7, 0x9a, 0x0, 0x2040, 0x4, 0x1a, 0x7, 0x5, 0x8, 0x4, 0xf, 0x0, 0x7, 0x4, 0x401, 0x6, 0x8, 0xb, 0x200, 0x1, 0x58b, 0x2, 0x18, 0x6, 0xffffff79, 0x5, 0x1, 0x8000, 0x6, 0xfffffffd, 0x1, 0xf50, 0x2, 0x1, 0x7, 0x0, 0x7, 0x5, 0x10001, 0x4, 0x7, 0x400, 0x6, 0x7fff, 0x3, 0x4, 0x7, 0x200000, 0x3, 0x8, 0x6, 0x2, 0x4e, 0x1000, 0x3, 0x3, 0xffffffff, 0x100, 0x8, 0x0, 0x9f3, 0x4000, 0x5, 0xfff, 0x71, 0xea72, 0xffffffff, 0xd, 0x7, 0x6, 0x80000000, 0x932d, 0x0, 0x8000, 0x3ff, 0xa7eb, 0x7, 0x10, 0x0, 0x4cc61079, 0xfffffffc, 0xfffffe01, 0x2, 0x0, 0x6, 0xf, 0x100, 0x302a, 0x0, 0x8, 0x2, 0x2, 0x2, 0x8, 0x8, 0x5, 0x7, 0x6, 0x85, 0x9, 0x6, 0x100, 0x5, 0x7, 0xfffffff8, 0x7, 0x8, 0xffffffff, 0x6, 0x3, 0x3, 0x4, 0x1, 0x7, 0x5, 0x2, 0x448, 0x5, 0x1000, 0x1000, 0xb, 0x8, 0xfffffff9, 0xff, 0x4, 0x6, 0x4be0adbc, 0x5, 0x6, 0x9, 0x40, 0x4, 0xc4e1, 0x100, 0xffff14ea, 0x9, 0x8, 0x0, 0x2, 0xdb, 0x8, 0x6, 0x200, 0xfffffff8, 0x47, 0x45f, 0x9, 0x0, 0x9, 0x6, 0x5, 0x3, 0x1, 0xfe, 0x10000, 0x4, 0xffffffff, 0x38000, 0x41c9, 0x9, 0x8, 0x4, 0xfff, 0x0, 0x5, 0x80, 0x6d, 0x401, 0x5, 0x8d9, 0x7, 0x10001, 0xffffffff, 0x60d1, 0x3, 0x133e, 0xfffffffb, 0x1ff, 0x3, 0x3, 0x380000, 0xfa5, 0x4, 0x5, 0x2, 0x1, 0x8, 0x8, 0x4, 0x2, 0x0, 0x0, 0x2, 0x8, 0x7, 0x3, 0x3, 0x4, 0x6, 0x8, 0x7, 0x7fff, 0x5, 0xb, 0x401, 0x8, 0x6, 0xffff, 0x6, 0x200, 0x6, 0x4, 0x40, 0x3, 0xff, 0x5, 0x5, 0x1, 0xe5dc, 0x9, 0xd5, 0x6, 0xffffff81, 0x8001, 0x5, 0x5]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffc, 0x4ea, 0x0, 0x3, 0x4, 0xffffffff, 0xd, 0xc, 0x4, 0xd, 0x7, 0x9, 0x4, 0x2, 0x7fffffff, 0xa, 0xbf, 0x6, 0xb, 0xfffff993, 0xe, 0x3, 0xcfa, 0x5, 0x4, 0x4, 0xffff, 0x8, 0x2, 0x6, 0x60f, 0x5, 0x9, 0x7ff, 0x6, 0x4, 0x200, 0x101, 0x8, 0x9, 0x200, 0x4, 0x2, 0x1, 0x7, 0xfffffff0, 0xdc, 0x7fffffff, 0x101, 0x40, 0x2, 0x5, 0x6, 0x7fffffff, 0x0, 0x3, 0x1, 0xda2, 0x8, 0x4, 0x7, 0x6, 0xffffffff, 0xfffff163, 0x26, 0x8000, 0x7, 0x2, 0xff, 0x9, 0x7, 0x8, 0x0, 0x3ff, 0x132f7617, 0x8, 0x6, 0x0, 0x5, 0x1, 0x2, 0x2c82, 0x1, 0x8, 0x4675, 0xffffff01, 0x3, 0x2, 0x1, 0x7, 0x9, 0x1, 0x0, 0x5, 0x6, 0x7ff, 0xffffff18, 0xffffff7f, 0x10, 0x2, 0x1000, 0x57a, 0xa3, 0x1, 0x0, 0x10, 0x8, 0x8, 0x7, 0x100, 0xa671, 0x9, 0x9, 0x9, 0xfffffff8, 0x9, 0x400, 0x5, 0x863bf2b, 0x3ff, 0x0, 0x3ff, 0x1, 0x6, 0x7, 0x6, 0x2, 0x80000001, 0x10000, 0x8, 0x63f3, 0x3, 0x94c, 0x9, 0x10000, 0x9, 0x4, 0x40, 0x26, 0xa76a, 0x1ff, 0xffffffc0, 0x7f, 0x0, 0x7, 0xffff, 0x7fffffff, 0x7, 0x3, 0x9, 0x71f834e5, 0x700, 0x3, 0x7, 0x8, 0xd, 0xb, 0x6, 0x5ea, 0x8, 0x4, 0x400, 0x8, 0x4, 0x10000, 0x0, 0x1, 0x8, 0x5, 0x0, 0x1ff, 0x5, 0x6, 0x0, 0x4, 0xfffffff7, 0x9, 0x7, 0x3ff, 0x8, 0x2, 0x7, 0x1d, 0x3ff, 0x5, 0x4, 0x9, 0x80, 0x2, 0x8000, 0x4, 0x97e3, 0x215, 0x4a, 0x7, 0x80000000, 0x0, 0xdb6, 0x3ff, 0x7b, 0x0, 0x8, 0x7f, 0x40, 0x42, 0xcb, 0x0, 0xc, 0x81, 0x90d, 0x26a, 0xffff, 0x5, 0x4, 0x8000, 0xfffffff7, 0x1, 0x1, 0x4, 0x3, 0x10000, 0x6, 0x80, 0x2, 0x80000001, 0xafb, 0x1, 0x3140fd3f, 0x2, 0x80000001, 0x4, 0xf8bd, 0x1, 0x360, 0x5, 0x10000, 0x10001, 0x37f0, 0xce, 0x6, 0xd, 0x1, 0xfff, 0xfa, 0x1, 0x0, 0x1, 0xfffffffd, 0x6, 0xe, 0x1, 0xff, 0x0, 0x2e0dfe10, 0x6, 0x7ac]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x196c}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x6, 0x9, 0x3800000, 0x2, 0x0, 0x4, 0xd82, 0xffffffff, 0x9, 0x5, 0x5af, 0x9, 0x9, 0x100, 0x1, 0x7, 0x6, 0x8b90, 0x8, 0x7fff, 0xb87, 0x7, 0x5, 0x3, 0x0, 0xfffffffb, 0x0, 0xff, 0x40, 0x5d, 0xe14, 0x5, 0x1, 0x9, 0x2, 0x80000000, 0x101, 0x4, 0xd0, 0x9, 0x8000, 0x2, 0x3, 0x3, 0x1c, 0x80000000, 0xffffffff, 0x5, 0x5, 0x7fffffff, 0x6, 0x5824, 0x38, 0x7ff, 0x4, 0xc7, 0x8, 0x46, 0xfffffff8, 0x4, 0x2, 0x401, 0x7, 0x3, 0x8, 0x6, 0xfff, 0x0, 0x0, 0x6, 0x5, 0x5, 0x98, 0x9, 0x5, 0x3, 0x243bfb64, 0x2, 0x80000001, 0x60d8, 0x3, 0xd248, 0x8, 0x0, 0x3aa2, 0xdf, 0x8, 0x0, 0xff, 0xfff, 0x5, 0xfffffdc4, 0x9, 0x1, 0xe, 0x644, 0xfffffffb, 0xd7b, 0x3, 0xb64a, 0x2, 0x200040, 0x4dd4, 0x94, 0x1, 0x3, 0x9a0, 0x1, 0x9, 0x8, 0x8, 0x2, 0x8, 0x6, 0x9, 0x9, 0x5, 0x40, 0x388, 0x7, 0x1, 0x7, 0x2, 0x81, 0x1, 0x4, 0x0, 0x1, 0x8, 0x9, 0x7, 0x0, 0x8, 0xffff, 0x2, 0xffffff01, 0x7cf, 0x29, 0x1, 0x8000, 0x2, 0x9, 0xf63, 0x0, 0x0, 0x6, 0x6, 0x8, 0x0, 0x0, 0x152, 0x5, 0x366, 0xfffffffd, 0x0, 0x0, 0x8001, 0x27ea, 0x9337, 0x2, 0x6, 0xffffffff, 0x5, 0x800, 0x4, 0x61, 0x5, 0x3, 0x5, 0x81, 0x8, 0x6, 0x9, 0x7, 0x4, 0x5, 0x8, 0x5, 0x6, 0x200, 0x401, 0x3, 0x8, 0x401, 0x4, 0x6, 0x1, 0x2, 0x8, 0x9, 0x3, 0x3, 0x5, 0x2, 0x7, 0x3, 0x4, 0x7, 0x0, 0x1b, 0x4e, 0x9, 0x52c0be46, 0x9, 0x2, 0x2, 0x63, 0x7, 0xfff, 0x3, 0x7, 0x2, 0x1, 0x9, 0xc, 0xab0, 0x6, 0x4, 0x7, 0x9, 0x6, 0xb68, 0x6f88, 0xfffffffd, 0x1, 0x7, 0x7, 0x40, 0x80000001, 0xff6f, 0xfe, 0x0, 0x1, 0x6, 0xffff, 0x870, 0x5, 0x0, 0x400, 0x5, 0x494b6497, 0xb1ed, 0xf61b, 0x40000, 0x81, 0x8, 0x10, 0x6, 0x5, 0x99, 0xbbc3, 0x6354, 0xfffffc00, 0xef, 0x2]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x14}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x40af}]]}, {0x24, 0x6, "31b4614f26e8b4af70b29a7169b505824f2363d0fb0fc0cb08e477ae3be0f1bd"}, {0xc, 0x7, {0xdaa7d73b8d6bcd40, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0x198, 0x19, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0x6, 0x2, 0x9, 0x4}, 0x1, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0x7, 0x3, 0xce6, 0x2400}, 0x3, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x8001, 0x6, 0x1, 0x335}, 0x3, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x11, 0x8, 0x8, 0x4, 0x3}, 0x1, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x5, 0x3, 0x2, 0xffff8001}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x70b448b5, 0x92, 0x3, 0x401, 0x2}, 0x1, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1000, 0x3, 0x1, 0x2, 0x8}, 0x1, r10}}]}, {0x8a, 0x6, "29e60f65aaca0e13340a4729b57bfbc8a34e8554322ee4e12b68196e2acc8f1e1354a809dd0e3c81db36df7c3346bbd29b3b03d6c039eb72b375d5fea7c4d5f0310940d5d67da9c37436c685c02ae198ff59dafb8c14bc63ee8c1a3f6ee55e56ecd3f4cec1eca81e1da6b183732c6a9d36d051e534fa3a6e365b1842c4311f15e08949c61c1e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x52}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xf8}, @TCA_ROUTE4_IIF={0x8, 0x4, r10}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x72}]}}]}, 0x41a0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 436.423939ms ago: executing program 3 (id=4588): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000203000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) 436.117425ms ago: executing program 3 (id=4589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x1}) (async) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', 0x1}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8001}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtclass={0x38, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x8001}, {0x0, 0x8001}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3e8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x8001}, {0x3, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x5}}]}}]}, 0x40}}, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000880)='\x00', 0x1, 0x0, &(0x7f00000008c0)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @local}, 0x14) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x2c, r9, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0, 0xfffffc7b}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0xa2}, {0x0, 0xfffffdd4}, {&(0x7f0000000280)}], 0x5, 0x4, 0x6) (async) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r11, &(0x7f0000000280)='tcp 2', 0x5) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) r12 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_RUN(r12, 0xae80, 0x0) 426.075197ms ago: executing program 1 (id=4590): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e24, @rand_addr=0x64010102}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x7e, {0x2, 0x4e21, @empty}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file2\x00', 0x81c0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x280000, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d"], 0x2c}}, 0x0) sendmmsg(r2, &(0x7f0000000440), 0x4000000000001f2, 0xfc) r3 = accept4$llc(0xffffffffffffffff, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000300)=0x10, 0x80800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {r0}}, './file1\x00'}) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x2001}, 0x30, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200000, 0x5) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f00000001c0)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000001280)={0x0, @bt={0xe, 0x6, 0x0, 0x3, 0x7ff, 0x1, 0x5, 0x6, 0x6, 0x36d, 0x10000, 0x7, 0x7fffffff, 0x3da, 0x15, 0x18, {0x6, 0x3}, 0x38, 0x9e}}) 373.171026ms ago: executing program 1 (id=4591): setresuid(0x0, 0xee00, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f0000004940)={0x1, 0xe, &(0x7f0000004a00)=ANY=[@ANYBLOB="b70000000100000bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff00000000ae04020000000000be400300000000006504030001ed00007b130000000000004d44000000000000630a04fe0000000071330000000060009f030000000000009500000000000000023bc065b7a379d17cf9333379fc05000000912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50bec919bc461e91a7168c5181554d1b583c587e436fe275daf51efd601b6bf01c8e8b1b526375ec5dd6fcd82e4fee5bef7af9a0200000000000000e3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f645679c294392cf538b07ce2646cb7798b3e6440c2fbdb00a3e35208b0bb1d2cd871c5548930be3835f2554b4a28610643a98d9ec21ead2ed51b104d4d91af25b84550a7925c3109b151b8b9f75d80000000eda88c658d42ecbf28bf7076c15b463bebc72f526d8e4a9e231d512381e7a78afcb913466aae7f6df70252e79166d858fc152b659da074e1320060d0b11008e59a5923906f88b53987ad1714e72ba7a5b74f0c33d39000d06a59ff61622cfd9aa58fe8d485ae2c0cc65c2a36aaec2477584b6a89adaf17b0a6041bde4cc3ed54d27f777e92b87496e6649cf728d236619074d6ebdf098bc908c423d228a40f9411fe7226a40409d6e37c4f46756d31cb46761bade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18de0ae564162a27afea62d84f3a10746443d64364f56e24e6d21053d901204a1deeed41556175cbd4041b7d301bcb72652d950ad31928b0b093778b68e2e9853c02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f98928d5e9b94ff9ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cff538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595bcf50ab32d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063b59261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6f8c3a13596c2ea3e2e04cfdce669e51731b2875353193f82ade69d0540059fe6c7fe7c00fb7502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abd47b64a1b304502dda787343ce3c95300000000010000003baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022af46667cf25c5d3038816106dec28eaeb88343261a48a18f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfeff59d54d1f92ecc4e95dd2d18383117c03987d198899b212c55318294270a1ad10d30fef7c24b78b29d83238273f4fc87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead8eaf68b0c5dda0467d35a3807000000b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ea1e717d29135753208165b9cdbae037f315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d7012c1b45f6ada1ee7baa5b6a686b50f09b7f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac4d73a008364e0602a594817031fc2ff2c32a1989e00f52f8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a3c3e6e4fd2e016820f78b796a825b3dad9ce7b37507e0b83c3ecd01549bca6a016b3e18a00c748894dc3bfe5efda8b0a477d6a6562fdee45eb16e276dee992094ba9830f6c164179e7d532d86060bea930118d3cae1b8f916b9671b7000000000040f4bee5ad2dea2d14e195265504c05bba38b095e1679f96ddef65ba5de9c8cfb6465ae4165c0689a314a6eb6b36aa705b957edef3035e14b879d4e7dc00624708042e00bf9a7f7ae5f308744770759558e4fcb99c0dc957521ef255362bf2f3966f3754e81fb9bdef22c19f5a49147b85343f9f36bcda9f64b7a5c5b2f5452f5b1de02e6f15c5640bf89d4a74d51dc233dee628c1dfbb5566b98478c174b34eb234481547e484c6af101396b6977dd668b401391c1dc54f2edccf1cabe6be9868d383eb937efdfd9ade018106f544f04fc07ad525497f65fbad3cf145396acf3b0d38e6b46e28d86880fd6f62c373000000000000000000005d194c27cd4d8f6727f59c71dc84311c0f1fb6c87081c7be9355288610c32c2d8c18bf2027212182903687f48262aea54c5f8a315c9aa4a5af1aa2c4007d1baae38c270012b7eb9411ae451204dba30f8321b07a18db97c3e0cf6a15170e515b1cc463a67a5b2b23ec5662ccfa898b8d5075647bdfb390cde56efb8fd42df12c5c8f66bdc58449ec2b38bf12f5f0a49dcbcf4e6f11c47d23fa34793a0000a1cbb1e06e9a8d2449451d7a05ec0a0d3c9716f505ddeba488c60ebf44cac05c2739694359c925148137376dd3f1330ed0e9211f73ee279cc0b5c298422395ce438f48a39ff569375e609f9e904aacc3d8011326d5e4d654c74501cf16bbf72d3984f9b4ef000000003a8a3d49fc837001e4622e58e3a4ef6b55a8dd0680d951cdb6e54ed92a9a6a0e5e494b7b7b0ef4b4bafc5d964551b2a22bfd12b0761ef07a103e51e84917ee44f860b9785e264343f6a80e9318edecf73df6940856cd56c56eb3831445833c701044aaa49439a44a624267580b3c0980d7f87437bf498f6e1915450400000000000000564a02552c0a5fedbcf4da0db6ed03b9dbc224ee76d20aaf1ac74bcb7eb6f202209e64cc4d130dcf6ab3df8ae4911deb4bb5c7df97fc348d151e834be73915f854272f69d88123f666448b6a8e73322b04fffea9cc05e4129debf311c73b4d1a244b1e5b9943028745a0b6477686740ab877315e35624d791e6f71adb1acd3e22cf472ff7e048b16c11c84da9a3b16b92665912132a4dba680052919c20e191311d8092a09f3c609823fed1bd651ce1c34de105790ba2ca3afa26647f66efbf97b109e7226c74e32beb14ff3fd6918e255fc9b42f86b0188cf885afcc9bb77a7fc3ca7ec1015af494add960f8a11422ca005f24006867cd156e0350022943e301b2c07f4d37d07b05ac2fa1f1d5a0d6eb7e992b076bd77509c26034d2a740d578476410b413591884136259693effaf27e7bcfb58efa92625fb9bd68ecca42047f6e7d24b0446ea16a310073c163d1c6aa3ba1fe76b4e88d5f98cc05c6d033e2c28b4990892230d6b4e5c083a601a25145eb22f4f77313117f8147810d95c64fb78b0a000000000000000000000000e92ba8b066e4bd82bb6003d5da8791d838bcd6eefb13000000000000000000000000000000b652ff6fbad82da75114742bc6a27cba894ef490531be709a3a3c81b267dfafa55e6f855200b4e7518682c30f40808cd5bb8f00beb63b4989cc01d8e75a182337b9f9e08430ccec9bda0134d07a9f54b60033182f5d2bb61fd130d65e68bf148d26470060c707a8cf750ca954ee63c78cd975c7f565783383f02edcb7ce4a9ed0c511d18fe32352276d72eefe0d566f97ccae16b3492f60b96574aac4f1862fb6e4932c181dbf8c68ca16b765de9edba0bf5bfb9c4950d19c0bc31db02f374ce62141160436639d4b6cb0033a47ffdc54d55f1136743b1b26946f200000000000000007590ab8f29c7accd9d11786c4ca1271cd2293b572f14a3dfcaa3467f2783fc09e3eee3fa4b82b7b6ce904e05fa797a2f7ff63e4f874bd870821f6460904e05d7a3f8295a9a5fba1e3587b9d9e878c86ba9b66c4491fcff607d9cbf156f3fc0fb8c827d4e6cac493a3e2746bd5f0f8bc024352200a4250785cdca4fe3c546972d0a56e3905d1e72c33d64f6591fe25f312f47e7ec6b4640f1f6dc4efee4b8d3cfbfcbf77bfd52f0a99adc7d359233cfea0a11f5dcb87603885f08d633e842644988d2f45a1824361b5df707f726fad22d53727b4396b3d05df34933262fdb09f19837fdc2af1c721b17d54076e25ab625ae0a4c9cd900"/3002], &(0x7f00000055c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000005600), 0x0, 0x10, &(0x7f0000005640), 0xfffffffffffffdbb}, 0x48) 371.6571ms ago: executing program 8 (id=4592): setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000001600)={0x3, {{0xa, 0x4e22, 0x3, @remote, 0x80000}}, 0x1, 0x2, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x10}}, {{0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}]}, 0x190) (async, rerun: 64) r0 = socket$inet(0x2, 0x2, 0x0) (rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000140)={'bond0\x00', @ifru_names='bond_slave_0\x00'}) (async) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}}, 0x0) (async, rerun: 64) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x1, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8000}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x3c}}, 0x91) (async, rerun: 64) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000300)={'dummy0\x00', @ifru_flags}) (async, rerun: 32) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000340)={'bond0\x00', @ifru_names='dummy0\x00'}) (async, rerun: 32) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000003c0)={'bond0\x00', @ifru_flags=0x1}) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x8008af26, &(0x7f00000002c0)={0x1, 0x3}) nanosleep(0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000420)='./proc\x00', 0x1ff) (async) mount(&(0x7f0000000440)=@filename='proc\x00', &(0x7f0000000480)='./proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) socket(0x18, 0x2, 0x9) (async, rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/bonding/bond0\x00', 0x0, 0x0) (rerun: 32) read(r4, &(0x7f0000000600)=""/4096, 0x1000) 287.694703ms ago: executing program 3 (id=4593): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000480)="0400000000000000000000009001000038010000010000000000000000000000000000000000000032000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e2030") 286.765885ms ago: executing program 1 (id=4594): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x6, 0x9, 0xd691}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000100)={0x20, r0}, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffc0000, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 286.560452ms ago: executing program 3 (id=4595): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000003c0), 0x7fa) symlink(0x0, &(0x7f0000001540)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000001580)='./file0/file1\x00', 0x880cc2, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x78, 0xa02) syz_open_dev$media(&(0x7f00000000c0), 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x7, 0x6776, 0x1}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x100000000) 225.32755ms ago: executing program 7 (id=4596): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x15) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x7) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x20, r3, 0x701, 0x70bd2b, 0x25dfdc02, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}}, 0x4000) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000140)=[0x0], &(0x7f0000000180), 0x1, r5}) get_mempolicy(0x0, 0x0, 0x8000000000000001, &(0x7f0000ffe000/0x2000)=nil, 0x3) 223.711419ms ago: executing program 3 (id=4597): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000303000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) 223.267083ms ago: executing program 1 (id=4598): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x2, 0x9, 0x8c, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x2, 0xffffffff, 0x91, 0x4, 0x4, 0x16, 0x10, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x1, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa3, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x3, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xffff, 0x4, 0x2, 0x7, 0x6, 0x2, 0x1, 0x4e162a2a, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1001, 0x80000004, 0x6, 0x438, 0x5, 0x9, 0x7, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x2, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x9e9, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d27, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf47, 0x3, 0xd500, 0x8, 0x1b, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0x3, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x7973, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0x2, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000340)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 128.29631ms ago: executing program 3 (id=4599): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="4c000000e9000000000000000000000000000000b12107f61948deb1759e05c672d0281c8b93982ba6ede0beb25b6b87d702a5c60458195376361e3e270d8deeb4322fa51cbd195222c791793c1506d3ed4d", @ANYRES32=0x0, @ANYBLOB="00000000051c00002c0012800e00010069703665727370616e000000180002800400120005001600020000000600180003000000"], 0x4c}}, 0x12) (async) r1 = syz_create_resource$futex(&(0x7f00000000c0)=0x200001) futex(r1, 0x6, 0x0, 0x0, r1, 0x1) (async) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4000000, 0x4008032, 0xffffffffffffffff, 0x97224000) (async) mlockall(0x1) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/test\x00', 0x777) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, &(0x7f0000000640)='1', 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000700)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000740)={'syzkaller1\x00', @broadcast}) (async) write$tun(r6, &(0x7f0000000780)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r8 = syz_open_dev$dri(&(0x7f0000000200), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x8}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000880)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000007c0)="683ee7a25f1a85a1710f35e21097a244eba31eab4c59197fa2aeb2029a2c055f70b2a96493cf743d73ca8f02780dc9ff3eba1b77eb2dfe102830f2b85ea8a390fe4bca7ab646bdef1fdd1978765697822af0d7f2de36ae372a797313ee5815cb6cb55b5cbeea50195e6e6efabebf807e611fd1c9889e5ee52ed5c9e39cf6d66e346558cf2ec96d195227ed4f367d188bbe17d7e02fcb", 0x96, r3}, 0x68) r9 = syz_open_dev$dri(&(0x7f0000000300), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r10}) (async) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80, 0x0, 0x0, 0x400, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x3b}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 76.572924ms ago: executing program 8 (id=4600): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) flistxattr(r2, &(0x7f0000000240)=""/156, 0x9c) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmsg$OSF_MSG_ADD(r2, &(0x7f00000011c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001180)={&(0x7f00000005c0)={0xbb8, 0x0, 0x5, 0x3, 0x0, 0x0, {0x7}, [{{0x254, 0x1, {{0x0, 0x2}, 0xcf, 0x0, 0x4, 0x8, 0x1d, 'syz1\x00', "58bd457218ff841c3cb7721e73ed19246fa226176eb28edc24bdf35372273973", "e9d7fda76a488fedd7746473aa18a3bbb6567c8645a10ae60e193705a1c6680f", [{0x3, 0x1, {0x3, 0x7fffffff}}, {0x5, 0x1, {0x1, 0x80000003}}, {0x80, 0xffff, {0x1}}, {0x1000, 0x8, {0x0, 0x5}}, {0x0, 0x0, {0x2, 0x2}}, {0x3f, 0x1, {0x2, 0x5}}, {0xf, 0xfbea, {0x2, 0x9}}, {0x0, 0x5, {0x2, 0x10001}}, {0xfffd, 0x7, {0x0, 0x3}}, {0x8000, 0x3883, {0x2, 0x10}}, {0x3, 0x4ebe, {0x0, 0x7}}, {0x9b, 0x6, {0x2, 0x4}}, {0x0, 0x4, {0x3, 0xfa}}, {0x5, 0xc, {0x1, 0x1}}, {0x100, 0x6, {0x2, 0x1}}, {0xa, 0x1, {0x3, 0x2}}, {0x5, 0x1000, {0x0, 0x1}}, {0x9, 0x8000, {0x1, 0x4}}, {0x4, 0xb0, {0x2, 0x10000}}, {0x3ff, 0x9, {0x1, 0x7f}}, {0x800, 0xd35, {0x0, 0xcba8}}, {0x100, 0x96c, {0x1, 0x2}}, {0x72, 0xe00c, {0x2, 0x7}}, {0x7, 0x8, {0x1, 0x400}}, {0x0, 0x200, {0x2, 0x200000}}, {0x200, 0x4, {0x2, 0x401}}, {0x1, 0x1, {0x0, 0x91f}}, {0x10, 0xd2, {0x3, 0x9}}, {0x58, 0x8001, {0x2, 0xa}}, {0x8, 0x7, {0x3}}, {0x0, 0x9, {0x1}}, {0x6, 0x292, {0x2}}, {0x1, 0x3, {0x2, 0x1000}}, {0x7ff, 0x2c8, {0x0, 0xf32}}, {0x6, 0x8c, {0x0, 0x10001}}, {0x7, 0x10, {0x2}}, {0x4, 0x5, {0x3, 0x4}}, {0x4, 0x800, {0x0, 0xc05}}, {0x7ff, 0x7, {0x0, 0xfffffffb}}, {0x3, 0x2, {0x2, 0x400}}]}}}, {{0x254, 0x1, {{0x3, 0x6}, 0x4, 0x1, 0xda90, 0x64f, 0xd, 'syz1\x00', "5ecf7874a7a20a191eb017b2877b99e666ddfb35656b8761bc656d3fa80a72f4", "2c7bff938c6e754c0ae67f486002f4266978aae17e508130e55f7717d1e29b3a", [{0x1, 0x7ff, {0x0, 0xfffffff9}}, {0x8, 0x8001, {0x2, 0x4}}, {0x8, 0xff, {0x3, 0x9}}, {0x8b, 0xff, {0x1, 0x40}}, {0x1, 0x7, {0x2, 0xfff}}, {0x7df, 0x3, {0x0, 0x1}}, {0xe, 0x200, {0x1, 0xfdf}}, {0x9, 0x0, {0x1, 0x8}}, {0x6, 0x3, {0x3, 0x9}}, {0x3, 0x3, {0x3, 0x9}}, {0x53b, 0xff, {0x2, 0xdc9}}, {0x10, 0x3, {0x1, 0x3}}, {0x5, 0x1, {0x3, 0x8}}, {0x6, 0x3, {0x0, 0x6}}, {0xa, 0x0, {0x2, 0x9d}}, {0xff, 0x80, {0x1, 0x6}}, {0x8000, 0x0, {0x2, 0x4}}, {0xa0c, 0x7800, {0x1, 0x15ca}}, {0x40, 0xd}, {0x80, 0x100, {0x0, 0x23b9}}, {0x2, 0x3, {0x1, 0x9}}, {0xf, 0x2, {0x0, 0x5}}, {0xfff2, 0x1ff, {0x2, 0x5}}, {0xb7, 0xe605, {0x0, 0x8}}, {0x1, 0x0, {0x3, 0x7fffffff}}, {0x4, 0x7, {0x1, 0xfffffffc}}, {0xfff8, 0x100, {0x2, 0x5}}, {0x7, 0x3ff, {0x0, 0x35c}}, {0xeb99, 0x718, {0x2, 0xa}}, {0xfbba, 0x2, {0x1, 0x5}}, {0xf70f, 0x0, {0x2, 0x8}}, {0x100, 0x100, {0x1, 0x9}}, {0x10, 0x6, {0x0, 0x3c7ce8d4}}, {0x79, 0x9, {0x1, 0x6}}, {0x4, 0x8001, {0x3, 0xfff}}, {0x3, 0x7, {0x0, 0x9}}, {0x2, 0x6, {0x0, 0x6}}, {0x200, 0xff, {0x0, 0x3}}, {0x4, 0xc, {0x2, 0x7}}, {0x3, 0x3214, {0x3}}]}}}, {{0x254, 0x1, {{0x2, 0x6}, 0x9, 0x80, 0x2, 0x4, 0x11, 'syz0\x00', "2d1629902c94d47657f250d8c982a4628fa8486fd87375eb6c990a9cfab007d3", "2e5f678a24692db4b9af8cafb703a8b1329c0501571ef684942a5f35ab247809", [{0x200, 0xc1, {0x0, 0x5}}, {0xd, 0x9, {0x3, 0x3}}, {0x0, 0x4, {0x2, 0x2}}, {0x3, 0x20, {0x3, 0x1}}, {0xc, 0xf, {0x0, 0x6}}, {0xb7, 0x5, {0x0, 0x12000}}, {0x5, 0xc3, {0x3, 0x63}}, {0x3, 0x3, {0x3, 0x3}}, {0x16, 0x9, {0x3, 0x9}}, {0xff, 0x401, {0x3, 0x2}}, {0x3, 0x8, {0x2, 0x7fffffff}}, {0xf9, 0x7, {0x0, 0xf}}, {0x5, 0x1, {0x2, 0xe}}, {0x8001, 0x3, {0x2, 0xff}}, {0x4, 0x7fff, {0x2, 0x5f33}}, {0x8, 0x9, {0x0, 0xb}}, {0x0, 0x8f1, {0x1, 0x8}}, {0x2, 0x3c, {0x0, 0x2}}, {0x1000, 0x0, {0x2, 0xfffffffd}}, {0x0, 0x0, {0x3, 0x6}}, {0x8000, 0x80, {0x0, 0x80000000}}, {0x5, 0x3, {0x3, 0x7fff}}, {0xed, 0xff, {0x0, 0x3}}, {0xa, 0x6, {0x1, 0xabc}}, {0xc637, 0x9, {0x1, 0x8000}}, {0x168e, 0x3ff, {0x1, 0xa}}, {0x0, 0xfc00, {0x0, 0xfd4}}, {0xcf, 0x7, {0x3, 0x5}}, {0x7, 0x1, {0x3, 0x623}}, {0x401, 0x7f, {0x2, 0x8}}, {0x81, 0x9, {0x1, 0xffffffff}}, {0xff, 0xb, {0x2, 0x2}}, {0x5, 0x5, {0x1, 0x6}}, {0x3614, 0x9, {0x0, 0xffff0001}}, {0xdabe, 0xe235, {0x1, 0x80000000}}, {0xc, 0x3, {0x2}}, {0x0, 0x800, {0x3, 0xfffffffa}}, {0x8, 0x9, {0x1, 0x2}}, {0x400, 0x6, {0x1, 0x6e1}}, {0xe2c3, 0x2369, {0x2, 0x7}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x1, 0xfe, 0xb, 0x1, 0x15, 'syz0\x00', "37a07c23eb7dfb0306d56cb2b13227507854825d15ffae1db1ec9f19f8a6fd7c", "05e47bd3bb9863c70fd2a80fd52970b6341aabf76ae581953ab043fee894770b", [{0x2, 0xd9a, {0x3, 0xb}}, {0x100, 0x4, {0x3, 0x8}}, {0x2, 0x8, {0x0, 0x9}}, {0x6, 0xb, {0x3, 0x7}}, {0xe, 0x2, {0x3, 0x9}}, {0x1, 0x1, {0x1, 0xe}}, {0xc44, 0xa143}, {0x3ff, 0x79d, {0x2, 0xb}}, {0x1, 0xb2, {0x3, 0x5}}, {0x1, 0xfff7, {0x2, 0x4}}, {0x329, 0x5, {0x3, 0x3}}, {0x84a, 0x1, {0x2, 0x800}}, {0x6, 0x0, {0x3, 0x1ff}}, {0x6, 0x3ff, {0x1, 0x3}}, {0x8000, 0x59a, {0x2}}, {0x13, 0x7, {0x2, 0x2e}}, {0x7f63, 0x2, {0x1, 0x3}}, {0x4, 0xffff, {0x0, 0x9}}, {0x3, 0x6, {0x3, 0x8}}, {0x6, 0x7a, {0x2, 0x7}}, {0x6, 0x1, {0x2, 0x8b8}}, {0x4, 0x6, {0x1}}, {0x7, 0xffff, {0x0, 0x7fffffff}}, {0xd, 0x0, {0x0, 0x3}}, {0x9, 0x7f, {0x3, 0xc}}, {0x8, 0x1, {0x2, 0x1}}, {0x1, 0x0, {0x1, 0x9}}, {0x5, 0x2, {0x2, 0x9}}, {0x4, 0x6, {0x3, 0x9}}, {0xc9, 0x80, {0x3, 0x2}}, {0x400, 0x4, {0x1, 0xffffffff}}, {0x3, 0x40, {0x1, 0x4}}, {0x5, 0x6, {0x1, 0xd}}, {0x7, 0x9, {0x3}}, {0x8, 0x10, {0x0, 0x7}}, {0xa, 0x30, {0x0, 0xe}}, {0x3, 0x2, {0x1, 0xffff0001}}, {0x2, 0xa519, {0x3, 0x4}}, {0x2, 0x0, {0x3, 0xe2}}, {0xfffe, 0x6, {0x1, 0xd}}]}}}, {{0x254, 0x1, {{0x1}, 0xd7, 0x4, 0xc, 0x9, 0x25, 'syz0\x00', "8b32b4c0f3faf13d3d167ca3a6a00f66296628e1cf76424fb980645a79f76c7c", "bece1fd84f276700450ad65c0dc41bfb09b0a8851b5ddf6c0b95fb001d8a6393", [{0x1, 0x1, {0x1, 0x8}}, {0x6, 0x74a4, {0x2, 0x2}}, {0x400, 0x1, {0x0, 0x187}}, {0x0, 0x4, {0x3, 0x3ff}}, {0x1, 0x0, {0x1, 0x2}}, {0x9, 0xa, {0x2, 0x2}}, {0x1, 0x6, {0x0, 0x1}}, {0x1, 0x7ff, {0x3, 0x2}}, {0x3, 0x5, {0x3}}, {0x2b, 0x5, {0x2, 0x2bd2}}, {0x8001, 0x6, {0x2, 0x1}}, {0x7, 0xfff9, {0x1, 0x5}}, {0xaf4, 0x200, {0x2, 0xfffffff9}}, {0x400, 0x62f, {0x2, 0x4}}, {0x8, 0xffff, {0x1, 0x3}}, {0x6, 0x6, {0x1, 0x5}}, {0x5, 0x4, {0x1, 0x7}}, {0x6c, 0x3, {0x1, 0x101}}, {0x4, 0xa180, {0x3, 0x1}}, {0x101, 0x8, {0x2}}, {0x9, 0x6, {0x1, 0xa2}}, {0x6, 0x2, {0x0, 0x6}}, {0x100, 0x7, {0x3, 0x168}}, {0x3, 0xa4, {0x0, 0x9}}, {0x7f, 0x6, {0x2, 0x6}}, {0x5, 0x5, {0x1, 0x1000}}, {0x8, 0x0, {0x0, 0xfffffffa}}, {0x6, 0x7fff, {0x0, 0x9}}, {0x10, 0x7, {0x1, 0xd29}}, {0x16a3, 0x6, {0x3, 0x94d}}, {0x30bf, 0x1ff, {0x0, 0x6}}, {0x0, 0x9, {0x2, 0x5c70}}, {0x7, 0x5, {0x3, 0x52b}}, {0xcd8, 0x8, {0x1, 0x897}}, {0x401, 0x7ff, {0x0, 0x776}}, {0x2, 0x9, {0x1, 0xf200000}}, {0x0, 0x3, {0x1, 0x3}}, {0x2, 0x241, {0x3, 0x5}}, {0x0, 0x2, {0x1, 0xfffffff7}}, {0x9, 0x0, {0x3, 0x4}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000050) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0x1, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) 14.412259ms ago: executing program 8 (id=4601): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x119) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}, 0x1, 0x0, 0x0, 0x8811}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000050801"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4) r5 = open(&(0x7f0000000040)='./file0\x00', 0x60840, 0x0) mq_timedsend(r5, &(0x7f0000000440)="ab03460f48b6329d4e9ddecfe9704fcad3c8fb913dbe6dbcee0c1676aff97fe72cefac733fd73153442af1138062dd6f5340a6575f4d05f2705e56e46202d3ed2485d4d2f4bec88baebd802dfb107fff76d5971b325b338d48d5bd1999d388a62b91db737003547c98", 0x69, 0x4, &(0x7f00000004c0)={0x0, 0x3938700}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xc) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(r6, r6, 0x0) setreuid(r6, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000007c0)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000004780)=@newtfilter={0x41a0, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4170, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x6, 0x3}}, @TCA_ROUTE4_ACT={0x118, 0x6, [@m_ct={0xa4, 0xa, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00'}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}]}, {0x5f, 0x6, "13b38683017f8d992b99fe34f979219e0c0b6730de4d682bfcd72e4c8361e982124766ec64e57e515d5e708e1ae9c9ed2940f283d771e44e477749565691323c632ef7be578d7e9136d25d0d51d53271dc54b5c22adf81b52005e6"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xd6, 0x6, 0x7, 0x200, 0x400}}, @TCA_DEF_DATA={0x9, 0x3, 'euid<'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4000000, 0x7, 0x7, 0x0, 0xfffffff7}}]}, {0x7, 0x6, "df6408"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}, @TCA_ROUTE4_POLICE={0x818, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0xa5}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0xd, 0x4c, 0x400, 0x2, 0x1, 0xfffffffa, 0x4, 0x4, 0xffffffff, 0xfe56, 0xffffffff, 0x86, 0xbd11, 0xb, 0xfffffdf5, 0x6, 0x0, 0x20000, 0x7a0, 0x1, 0xa, 0x0, 0x2, 0x8, 0x1, 0x7, 0xfffffffc, 0x331, 0xd, 0x6, 0x6, 0x9, 0x8001, 0xffff, 0x8, 0x84, 0x2, 0x8, 0x7, 0x1, 0x0, 0x0, 0xffffffff, 0x1a, 0x1, 0x4, 0x4, 0x9, 0x7fd, 0x6, 0x3, 0x1, 0x200, 0x1, 0x100, 0x8, 0x9, 0x0, 0x1, 0x634, 0xfff, 0x6, 0x9, 0x0, 0xae30, 0x8001, 0x0, 0x16d, 0x5, 0x0, 0x4, 0x5, 0x6, 0x81, 0x6, 0x5, 0x4, 0xf, 0x3, 0x401, 0x1000, 0x9ae, 0x2, 0x60, 0x7, 0xc, 0x6, 0xa, 0x3, 0x404, 0x200, 0x7, 0x2, 0x3, 0x9, 0x100, 0xf40, 0xf, 0x9, 0x7, 0x3, 0x8, 0x3, 0x0, 0x8, 0x2, 0xfffffffa, 0x5f, 0x4, 0x40, 0x40, 0x200, 0x8, 0x58a457fd, 0x4, 0x5, 0x77b, 0x8, 0x3, 0x7a, 0x6, 0x7, 0x2, 0x82ee, 0x0, 0x0, 0x10, 0x4, 0x0, 0xd60a, 0x7, 0x7, 0x9, 0x4, 0x9, 0x7, 0x1, 0x5, 0xa, 0x3, 0x5, 0x9, 0x9, 0x87, 0x5, 0xff, 0x101, 0x401, 0x4, 0x1, 0x1d8, 0xce94, 0x681, 0x5, 0x8000, 0x7, 0x2, 0x3ff, 0x3, 0x26, 0x7f, 0x9, 0x2, 0x4, 0x4, 0x6, 0xeb9, 0x6, 0x9, 0x1, 0x80000001, 0x8, 0x8, 0x5, 0x4, 0xa93, 0x7, 0x5, 0x5, 0x23, 0x1, 0x7, 0x2, 0x6, 0xfffffffb, 0xfac, 0x53a5c62c, 0x7ff, 0x0, 0x8, 0x6, 0x5, 0x3, 0x5, 0x4c0b, 0x2, 0x0, 0x1, 0x7, 0x3, 0x7fff, 0x3, 0x5, 0x2, 0x40, 0xffffffff, 0x6, 0x81, 0x5, 0x1, 0x4, 0x28000, 0x4, 0x2, 0x7, 0xb, 0x8000, 0x3ff, 0x4, 0x6, 0x3ff, 0x0, 0x1, 0x2, 0x817c, 0xffff6278, 0xffff, 0x46a, 0x9, 0xe, 0x1, 0x3, 0x90, 0x3, 0xc, 0x6, 0x1, 0x1, 0x7095, 0x8, 0x4, 0x9b, 0x24, 0x7, 0x2, 0x6, 0x4, 0x85, 0x0, 0x1000, 0x5, 0x3, 0x9, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x1ff, 0x6, 0xc0eb, 0x26ae, 0x9, 0x7fffffff, 0x1, 0x8, 0x10000, 0x0, 0x1, 0x1ff, 0x80000001, 0x80000000, 0x8, 0x2, 0x7, 0x3, 0x80000000, 0x4, 0x4, 0xe143, 0x9, 0x7f, 0x3, 0x80000000, 0xd, 0x7, 0x2, 0x10001, 0xe35, 0x2, 0x582, 0x2, 0x8001, 0x8, 0x2001f653, 0x1ff, 0xf75a, 0x0, 0x4, 0x1, 0x4, 0x8, 0x2, 0x8, 0xffffff80, 0x40, 0xda58, 0x5, 0x5, 0x3fe00000, 0x3cf2e441, 0x7, 0x2, 0x401, 0x4, 0x8, 0xebf1, 0x7, 0x7f, 0xf1b9, 0x5, 0x3, 0xa35, 0x0, 0xa492, 0xa, 0x9, 0x4, 0x81, 0x2, 0x8, 0xc, 0x4, 0x2, 0x7, 0x3ff, 0xd1, 0x6, 0x2, 0x797, 0x9, 0x1cc4, 0xb16, 0x7, 0xcea, 0x9, 0x3, 0x9c, 0x2, 0x0, 0x10, 0x1, 0x9, 0x1, 0x8, 0x800, 0x1, 0x3, 0x5, 0x4, 0x8, 0xfffffffd, 0x6, 0xe635, 0x101, 0x7fff, 0x91e1, 0x2, 0x9, 0x8, 0x9, 0x8, 0x8001, 0x80000000, 0xec, 0x0, 0x80000000, 0x81, 0x9, 0x1200, 0xffffffec, 0x3, 0x2, 0x8c, 0x9, 0x4, 0x2, 0x9, 0x3c00000, 0x6, 0x8, 0x8, 0x8000, 0x101, 0x5, 0x6, 0x5, 0x6, 0x5, 0x1, 0x6, 0x100, 0x7, 0x8, 0x0, 0x3, 0xfff, 0x7fff, 0x2f3, 0x7, 0x2, 0x9, 0x1, 0xfffffaf1, 0x78, 0x3, 0x4, 0x8, 0x492, 0xb, 0x40, 0xa, 0x4297, 0x2, 0x1, 0x5, 0x2, 0xfffffffb, 0x498, 0x100, 0x3, 0x1, 0x1, 0x9, 0x81, 0x1, 0x3ff, 0x6, 0xfffffff9, 0x7f, 0x401, 0x4, 0x65b, 0x0, 0x3, 0x7, 0x1, 0xcf, 0x5, 0xffffffc6, 0x8, 0x7, 0x10001, 0xffffffff, 0x80000000, 0x91f, 0x42f, 0x9, 0x40, 0x10001, 0x0, 0xd, 0x2e0, 0x1, 0xdf89, 0x9, 0x5, 0x80, 0x10000, 0x6, 0x6, 0x7, 0x7f37, 0x40, 0x5, 0x9b, 0x94d6, 0xf850, 0x6, 0xfffff001, 0x1b, 0x0, 0x10000, 0x6, 0x1, 0x0, 0x5, 0x5, 0x9, 0x10, 0x0, 0x0, 0x8, 0x2f4b, 0xc, 0x623, 0xffff, 0x2, 0xffffffff, 0x6, 0xe, 0x3, 0x8, 0xff, 0xfffffff8, 0x5, 0xa00, 0xbd, 0x7, 0x9, 0xffff, 0x7a, 0x7]}]}, @TCA_ROUTE4_ACT={0x3814, 0x6, [@m_mirred={0xec, 0x1c, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x7, 0x8, 0xfff, 0x8}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x5, 0x3, 0x9, 0x5}, 0x4}}]}, {0x80, 0x6, "19fe14ede027db8bcf8e037c96719cc32e1036a6f27f71d5c0cf1bebebb7a4c93c59460680aa043a0b8cc65027fb4160174e35e72e6e021aea11130e4e29657acee99fe5ef8dad6d803eb4864853af070a0f2a9f8eb70108e1cb5c7cdbfd8ae793751e88941f25424f672ca95427f43f847e604e26eb4287f41036ca"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mpls={0xcc, 0x10, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x3}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x25}, @TCA_MPLS_TC={0x5, 0x6, 0x6}]}, {0x77, 0x6, "3036d4c3420ca41796624c845a6e4d1c328c7966868b1fce4d65036dbdf06b3021a5c2f1b0dfdfe8a40ae247fff82cb2c22cf4e3eee30868e5aed1876a82e1b90b3f529da31dfd57881faf1a54517591a4f7e2a4d695f36c7c3bd9b496299df1b691ea1886e72c0b14e98fffd2c87ece993600"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0x118, 0x15, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x437, 0x5, 0x8, 0xffff}, 0xb}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x320a}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}]}, {0xaa, 0x6, "424c6a91a3ff28296749ce4c893a6e35e12262032ca6b1895147fbbb509f8fe52b8328fdaf4cfcc9b6e8288ce2fa5bc9d5a7a058f58dbd78c4e9e5036830ad3deb893901847df631357d7ad7ea88cd1022d8b18df9765f32a6ddd335a3673bf4c6245d5b0b5205b6137890c7826687cd5c5ac9dbe3779189afea12661533043bbca2e7d13a8976d9df6d4e829e4698b89221b5e1da66a8fee6b65ff674c2d0088f2a30866f81"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0x160, 0xc, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x5, 0xf4, 0x4, 0x9}, {0x7ff, 0x5, 0x8, 0x4}, {0x9, 0x9, 0x92, 0x1}, {0x9, 0x0, 0xf, 0x7f}, {0xfff1, 0xe, 0x4, 0x1}, {0x2, 0x5, 0x5, 0x8}, {0xfffb, 0x2, 0x0, 0xc}]}]}, {0xe4, 0x6, "7bb9905b8aef4dd5a84667440f8ef34590f778987ac6c0c42165a02a98798cea58b0b410f70fde57f7eb1e76bd54479bddf074847f0d9ba465df276e085a7a56b48d8f608249f25d8f7bcc0c4b3ccdf87693556e6cd3f4cf080e9798a5863d8c47e75c48a2c5596b0d763eccde7f4b699ea80aaa8977fb766a440f71bf85fdb1cf8df6520a432ca6c1b1aad9e1edf1902a7e6535f4af39f1d96c1ce27eb55f2d6d57dc707c2f726b6dbc2d83d84676250876d3ad90390b193565088c8b4da56a5495339a06a5794e473d4eb774261d27da161d874925e48aa7b42c1f0a4c7cad"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0x3248, 0xd, 0x0, 0x0, {{0xb}, {0x31fc, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x1, 0x750, 0x2, 0x3, {0x3, 0x0, 0x2, 0x1, 0x7, 0x88}, {0x0, 0x0, 0xffff, 0x4833, 0x1, 0x3}, 0x7, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x6, 0x8, 0x2, 0x8000, 0xe, 0x4, 0x7, 0x7, 0x8001, 0x6f, 0x6, 0x9, 0x3, 0x2, 0x0, 0x2, 0x0, 0xe015, 0x7fff, 0xfffffff8, 0xd56693bf, 0x10001, 0x3, 0x6, 0x7, 0x4, 0x8, 0x9, 0x9, 0x1, 0x80000001, 0x7f, 0x2, 0x7f, 0xb09, 0x8000, 0x5bfdf8b3, 0xffffffff, 0x200, 0xa65, 0x1, 0x10, 0x2, 0x8, 0x101, 0xffff000, 0x0, 0xfffffff9, 0x1, 0x6, 0x8, 0x1000, 0x166, 0xffffff81, 0x59, 0x80000000, 0x9, 0x4, 0x2, 0x2f4, 0x9, 0x80000000, 0x2, 0x1, 0xc5, 0x7fff, 0x3e2, 0x6, 0x9, 0x0, 0x8, 0x7f8a, 0x7, 0x5, 0x31293b07, 0x1a8, 0x800, 0x18000, 0x3, 0x3, 0x20, 0x4, 0x80, 0x277, 0xfffffff0, 0x4, 0x63, 0x40, 0x4, 0x0, 0x3, 0x9, 0x7, 0x8, 0x101, 0x1ff, 0x80000001, 0x3da6316, 0xfffffffc, 0x80000001, 0x5, 0xb25, 0xa69c, 0x67a, 0x3ff, 0xffffff7f, 0x6, 0x6, 0x0, 0x7, 0x4, 0x8001, 0x4de3, 0x6a597f2b, 0x7fffffff, 0x8, 0x2, 0xffff, 0x2, 0x611b, 0x5, 0x5, 0x690, 0x5, 0x1000, 0xa, 0x4, 0x8bc, 0x7, 0x7, 0x5, 0x1ff, 0x10001, 0x63, 0x46e, 0x1, 0xc, 0x2, 0x1, 0x1, 0x2, 0xb, 0x62, 0x80000000, 0x7, 0x7, 0xd8, 0x578, 0x8, 0x3, 0x9, 0x7, 0x6, 0xffffffc0, 0x1ff, 0x2, 0x2, 0x3, 0x7, 0x80000001, 0x7f, 0x7, 0x3, 0x33f80000, 0x7, 0xfffffff8, 0x9, 0x3ec, 0x5, 0x7, 0x200, 0x4, 0x3, 0x950, 0x401, 0x7, 0x8, 0x0, 0x6, 0x4, 0x9, 0xfffffff9, 0xc5, 0x80, 0x8, 0x5, 0x9, 0xffff, 0x283a, 0x400, 0x8, 0xae8c, 0xc, 0x4, 0x454, 0x0, 0x5, 0x3, 0x0, 0x7, 0x8, 0x6, 0x8, 0x4, 0x7f, 0x1, 0xfffffffa, 0x692, 0xdb2, 0x101, 0x2, 0x0, 0x10001, 0x9, 0x5, 0xbb, 0x8, 0x9, 0xfffffffb, 0x5, 0xffff, 0x9, 0x1000, 0x9, 0x6e7530a3, 0x0, 0x40, 0x5, 0xbad, 0x1, 0x1ff, 0xabc4, 0xffff, 0xf478, 0x234f, 0xfdbd, 0x100, 0x5, 0x9, 0x4, 0x1, 0x3, 0x2, 0x1, 0xec, 0x1ef, 0x0, 0x100, 0x6, 0x1f, 0xfffffff8, 0x8001, 0xace1, 0x0, 0x1000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x42e7, 0xfffffffb, 0x7, 0x3, 0x1931, 0x7, 0x2, 0xf, 0x3, 0x6, 0x400, 0x4, 0xfffffffa, 0xc3, 0x1, 0x1, 0x80000000, 0xffff, 0x3, 0xe, 0xfffffbff, 0x6, 0x8, 0x4, 0x5, 0x4, 0x2, 0x1, 0x9, 0x800, 0x7ff, 0x0, 0x8, 0x9, 0xdc37, 0x0, 0x8, 0x8000, 0x2, 0x80000000, 0x3, 0x9, 0xec64, 0x101, 0x7b, 0x1000, 0x3ff, 0x1d83fc58, 0x0, 0x10001, 0x7, 0x4, 0x6, 0x8000, 0x8, 0x0, 0x7, 0x0, 0x747, 0x3, 0x3, 0x9, 0x1, 0x1ff, 0xfffffa8d, 0x8, 0x6, 0x7fffffff, 0x8000, 0x6, 0x6, 0x4, 0x6, 0x3, 0x80000000, 0x2, 0x6, 0x300, 0x6, 0x5, 0x973, 0x8, 0x1, 0xad, 0x2, 0x5, 0x7ff, 0x67f, 0x1, 0x8, 0x2, 0x9, 0x7f, 0x70, 0x2, 0x6, 0x10000, 0x7fffffff, 0x1, 0x386, 0x7, 0x7f, 0x9, 0x7, 0x7, 0xbd, 0x8, 0x8, 0x8000, 0x6, 0x5, 0x6, 0x10001, 0x2, 0xfffffff9, 0x49c5a57c, 0x200, 0x1000, 0xffffff7f, 0x2ad442f8, 0xfffffff9, 0x47d, 0x43e3, 0x40, 0x5, 0x8, 0x8, 0x7fffffff, 0x8e0e, 0x8, 0x6, 0xbc8a, 0x0, 0x7, 0xde, 0x9, 0xfffffffd, 0x0, 0x1000, 0x3, 0x80, 0xc11, 0x7fc8, 0x6, 0x9, 0x0, 0x6, 0x2, 0x6, 0x5, 0x401, 0x9, 0x2, 0x9c, 0x0, 0x5092, 0x4, 0xd84e, 0xfffffff7, 0x4, 0x9, 0x6, 0x8, 0x5d, 0x10, 0x10, 0x7, 0x7, 0x2, 0x1, 0x100, 0x6, 0x7fffffff, 0x3, 0x9000, 0x80, 0x5, 0x5, 0x6, 0x2, 0x9, 0x10c0f8e6, 0x3, 0x9, 0xfff, 0x3, 0x3, 0x7, 0x3b284ed5, 0xf56a, 0x6, 0x1, 0x9, 0xffffffff, 0x7, 0x2, 0xe10, 0xed, 0x1, 0x3, 0x6, 0x5, 0x8001, 0x1, 0x101, 0x10000, 0x8, 0x5, 0x7ff, 0x2, 0x3, 0x1, 0x19e, 0xffffffe3, 0x7, 0x7fff, 0x8000, 0x10001, 0x9, 0x4, 0x10001, 0x2, 0x0, 0xff, 0x4, 0x3, 0x80000000, 0x10, 0x0, 0x200, 0x80000000, 0x8, 0x401, 0x4, 0x1ff, 0x5, 0x8, 0x57e, 0x1, 0xd, 0x3, 0x1, 0x0, 0x3, 0x4, 0x0, 0x1000, 0xfffffff9, 0x3, 0xc3, 0x1, 0x4, 0x3, 0x0, 0x6, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x101, 0x1, 0x4, {0x8, 0x0, 0x8, 0x0, 0x4, 0x1}, {0x0, 0x0, 0x3, 0x6, 0x5bbf, 0x8}, 0x0, 0x7, 0x10000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffd, 0x9a, 0xc, 0x6, 0x10001, 0xb20d, 0x7ff, 0x0, 0x1, 0x400, 0xfffffe87, 0x4, 0x4, 0x0, 0x80000001, 0x0, 0x5, 0xffffffff, 0x1, 0x9, 0x2, 0x0, 0x401, 0xa, 0x8, 0x6, 0x0, 0x852, 0x1dc0041d, 0x7, 0x7, 0x7, 0x3, 0x2, 0x1, 0x2, 0x9, 0x7, 0x7, 0x4b, 0x9, 0x5a1, 0xd0, 0x20000001, 0x7, 0x2, 0x3, 0x10000, 0x70, 0x7, 0x7ed, 0x7, 0x3, 0x800, 0x0, 0xf, 0x6, 0x3, 0x7, 0x0, 0x0, 0x7d, 0x4b8f, 0x456, 0x80000001, 0x2a, 0x4, 0x8, 0xf868, 0x1, 0x6, 0x2, 0x7, 0x8, 0xfffffffb, 0x3, 0xc3c, 0xb, 0x6, 0x7, 0x7fff, 0x4, 0x4, 0x4, 0x8, 0x2, 0x9, 0x9a3a5b7, 0x6, 0x1, 0x7, 0x0, 0x7, 0xfffffff7, 0x2, 0x2, 0x8, 0xfffffffb, 0xffffffff, 0x8, 0xa3, 0x3f44, 0x5e6c, 0xe59, 0xff, 0x2, 0x0, 0xb6a6, 0x4, 0x8e, 0x93, 0x0, 0xc3, 0x1e8, 0x3d, 0x2, 0x80, 0x6, 0x0, 0x80000000, 0x0, 0x4, 0x6, 0x6, 0x0, 0x0, 0x10000, 0xda6, 0x6, 0x6eb, 0x4, 0xaa, 0xfffffff8, 0x80000000, 0xa00, 0x1, 0x5, 0xc3c4, 0x0, 0x10da7532, 0x6, 0x10000, 0x7da, 0xe, 0x2, 0x200000, 0x4, 0x4, 0x0, 0x3, 0x0, 0xaab, 0x2, 0x2, 0x8, 0xff, 0x7db, 0x1ff, 0x1, 0x6, 0x6, 0x5, 0x4, 0x9, 0x5, 0x2, 0x2, 0x81, 0x9, 0xffffffff, 0x1, 0xffff7fff, 0x268c0758, 0x9, 0xfaa8, 0x9, 0x0, 0x1, 0x1, 0x9, 0x1, 0x6, 0xffff, 0xbf5f, 0x2, 0x46b, 0xffffffff, 0x58355b7c, 0x2, 0xffffff59, 0xffff0001, 0x9, 0x80000001, 0x4c1, 0x3c, 0x1, 0x4, 0x7, 0x1, 0x3, 0x1, 0x5, 0x7, 0x6, 0x3, 0xfffffffb, 0x8, 0xf42, 0x400, 0x8d, 0x7ff, 0x3, 0x1a, 0x0, 0x10, 0x3, 0x7, 0x3, 0xfffffffb, 0xd36a, 0x7ff, 0xfffffff8, 0xd, 0x10, 0x5, 0x81, 0x0, 0xfffffffb, 0x8, 0xffff5e55, 0x9, 0x2be, 0x8000, 0x4, 0x80, 0x3, 0x80, 0x9, 0x4, 0x6, 0x72, 0xeccd, 0x6e1, 0x1, 0x8e, 0x9, 0xff, 0x11, 0x9, 0x200, 0x1, 0xfffffffa, 0x2, 0x40, 0x0, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0x1, 0x9, 0x8, 0xe939, 0xbc1, 0x49c, 0x2, 0x6, 0x0, 0x5, 0x77a7, 0x7, 0x1, 0x701, 0x1, 0x60, 0x8, 0x0, 0x4, 0x1f90, 0x7, 0x1f8, 0x9, 0x962, 0x8, 0x7fffffff, 0x8, 0x4, 0x0, 0x26bb, 0x1ec, 0x8b6d, 0x7b7a, 0x5, 0xf, 0x6010, 0x80000001, 0x0, 0x5, 0x8cfc, 0xe, 0x800, 0x2, 0x7, 0xc155b0b, 0x1, 0x8e, 0x8000, 0x4, 0x0, 0x4, 0x8c2, 0x4, 0x80000000, 0x4, 0x46a, 0x2a7, 0x3dae, 0x7, 0xffffff01, 0xd9b, 0x7ff, 0xff, 0x5, 0x8, 0x5, 0x5, 0x9, 0x5, 0xfffffffc, 0xfffffffe, 0x3, 0xffff8000, 0x2, 0x4171, 0xfffffffe, 0x6, 0x5, 0x9, 0x40, 0x101, 0x40, 0x0, 0x6849, 0x743, 0x1ff, 0x76, 0x400, 0x2, 0x1, 0x9, 0x9, 0x8, 0xe588, 0x3, 0x1ff, 0x9, 0x18c, 0x7f, 0xbb1, 0x56, 0xfffffc01, 0x950a, 0x2, 0xd, 0xdb9e, 0x0, 0xa7, 0x8, 0x1, 0xfffffffb, 0xf, 0x8, 0xa400, 0x8, 0x6, 0x6, 0x2, 0x5, 0x1, 0xffff, 0xc0000, 0x3ff, 0x5, 0x0, 0x8, 0xfffffffa, 0x0, 0x100, 0x0, 0x1d83, 0x6, 0xce7, 0x7, 0x5, 0xa, 0x9, 0xfffffffb, 0x28000, 0x1, 0x1608, 0x6, 0x3, 0x1000, 0x9, 0x1, 0xd03c, 0x5, 0x401, 0x6, 0xde04, 0x400, 0x4000000, 0xa4, 0x0, 0x1, 0xb, 0x4, 0x4, 0x3, 0x7, 0x5, 0xfc8c, 0x7fff, 0x1, 0xb6, 0x8, 0x9, 0xf99, 0x74, 0xf, 0x1, 0x4, 0x8, 0xf, 0xc3d6, 0x8, 0x2, 0xffff, 0xffff, 0x200, 0xe0b1, 0x0, 0x3e6, 0x6, 0xff, 0x9b8, 0x7, 0xc, 0x7497, 0x0, 0x2, 0x6, 0x3, 0x7, 0x7, 0x723, 0x7, 0x400, 0x8445, 0xa709, 0x2, 0x1, 0x0, 0x9, 0x3, 0x7, 0xc356, 0x2, 0x8, 0x4, 0x0, 0xffff6475, 0xffffffff, 0x9b, 0x81, 0x101, 0xfffffff4, 0x5, 0x1, 0x8, 0x3c, 0x9, 0x2, 0x7, 0xeb4, 0x10, 0x9, 0x7, 0xffffd514, 0x6, 0x1, 0x9, 0x800, 0xd, 0x1ff, 0x7, 0x8, 0x6, 0x8, 0x0, 0x9cf, 0x1, 0x9bb5, 0x8, 0x1, 0x7, 0x9, 0xffffffff, 0x8, 0xe8e9, 0x0, 0x100, 0x8, 0x10001]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x7fff, 0x200, 0x7, 0x1, 0x6, 0x1, 0x4c, 0x10001, 0x59b, 0x7df, 0xfffffff5, 0x1, 0x7, 0x5, 0x3, 0x8, 0xda, 0x3ac, 0x0, 0x6, 0x515, 0x6, 0x3, 0x2, 0x8, 0x3, 0x6, 0x5, 0xfff, 0x200, 0x10001, 0x3, 0x5, 0x9, 0x7, 0xfbee, 0x9, 0x4, 0x2, 0x0, 0x7, 0x2, 0x6, 0x9, 0x6, 0x3, 0xd, 0x5, 0x2, 0x6, 0x5, 0x9, 0x3, 0x6, 0x2, 0x6, 0xacc57dc7, 0x10, 0x8, 0x10000, 0xb, 0x9, 0x9, 0x9, 0x7f, 0x9517, 0x4, 0x4, 0x7, 0xce, 0x4, 0x3, 0x1, 0x38, 0x1, 0x7, 0x5, 0x4, 0x3, 0x0, 0x3, 0x8, 0x9, 0x2, 0x4, 0x2c62, 0x4, 0x4, 0x4, 0x4, 0x9, 0xe73, 0x6, 0x4, 0xf, 0x7, 0x7, 0x1, 0x1d, 0x4, 0x1b, 0x4, 0x22, 0x9, 0xf, 0x400000, 0x101, 0x0, 0x5, 0x7, 0x400, 0xffffff8d, 0x6, 0x6, 0x668c, 0xfffffff7, 0x2, 0x7ff, 0xf1fa, 0xfff, 0xc, 0x10, 0x4a84, 0x6, 0x0, 0x7ff, 0x2, 0x6, 0xfffffffe, 0x8, 0x6, 0xe, 0xfffffff1, 0xfffffffc, 0xff, 0x4, 0x6, 0x9, 0x3, 0x2, 0x3, 0x1, 0x1, 0x46e2, 0x0, 0xa8, 0x5, 0x0, 0x800, 0xffffffff, 0x2, 0x4, 0x3ff, 0x1, 0x0, 0x9, 0xb4, 0x6, 0xffffffa8, 0x7, 0x7, 0x9, 0x80000001, 0x6, 0x8, 0x8, 0x0, 0x7f, 0x3, 0x2, 0xfffffff7, 0x1, 0x8, 0xb2d5, 0x1, 0x10, 0x9, 0x6, 0x50, 0x50, 0x339, 0xfffffffc, 0xa, 0x2, 0x0, 0x1123, 0x51c, 0x6, 0x800, 0x1, 0x7021d092, 0x3d88, 0x6, 0xf, 0x44, 0x1, 0x3, 0xadb, 0x1, 0x2, 0x2, 0x6, 0x6d2f, 0x23, 0x8, 0xffff, 0x9, 0x1, 0x7, 0xf5d, 0x2, 0x800, 0x7fffffff, 0x7, 0xf, 0x0, 0x9, 0x1, 0xffff, 0x401, 0x5, 0x0, 0xbcc, 0x80000000, 0xfffffffb, 0x31, 0xffffff60, 0x7, 0x8, 0xc, 0x200, 0x401, 0xd1b, 0x2276, 0x3b3, 0x6, 0x0, 0x9, 0x5, 0x2, 0x2, 0xfffffff0, 0x1, 0x6, 0x7, 0x200, 0x3, 0x7, 0x8, 0xdc0, 0x8, 0x6, 0x10000, 0x8000, 0x1800]}, @TCA_POLICE_RATE={0x404, 0x2, [0x800, 0x5, 0xb, 0xbde6, 0x80, 0xfffffff8, 0x3, 0x5, 0x1ff, 0x9, 0x401, 0x74f, 0xe73, 0x5, 0x0, 0x1, 0x3, 0x0, 0xfffffff3, 0x80b, 0xc, 0x28, 0x4, 0x80000001, 0x0, 0x10, 0x8, 0x4, 0x7fff, 0xc, 0xf4, 0x5, 0xbe3, 0xa, 0x16b11755, 0x80000000, 0x8, 0x29e, 0x9fd, 0x3, 0x80000001, 0x1ca, 0x2, 0x5, 0x10001, 0x4, 0x6, 0x8, 0xa, 0x0, 0x7, 0x3, 0x4, 0xff, 0x2, 0xec, 0x1, 0xf, 0x9, 0x286, 0xacf9, 0x5, 0x6, 0x4, 0xffff, 0xf9f, 0x9, 0x400, 0x2, 0x241e, 0x7fffffff, 0x5d, 0x0, 0xc, 0x1ff, 0xb, 0x0, 0x5, 0x5, 0x1, 0x7, 0x1, 0xb, 0xffff, 0x5, 0xcb53, 0x7, 0x1000, 0x40, 0x4, 0xb95, 0x7f, 0x902, 0x1, 0x7fffffff, 0x73, 0xbb, 0x0, 0x4, 0x7ff, 0x5, 0x4, 0xfffe00, 0x9, 0xfffffbff, 0x4, 0xd, 0x1, 0x1, 0x3, 0x3, 0xfff, 0x508, 0xe0, 0x67, 0x7, 0x5, 0xd696, 0x80, 0xffff, 0x80, 0x4, 0x10, 0x4, 0xfffffff3, 0xfffffffa, 0x4, 0x80, 0x4, 0x6, 0x5391, 0x5, 0x101, 0x10000, 0x2, 0x4, 0xfffffffe, 0xd, 0xe, 0xb4, 0xfffffff9, 0x1, 0x912, 0x1, 0x9, 0x9, 0x8, 0xc, 0xffffffff, 0x5, 0xc9, 0x7, 0x2, 0x3, 0x3, 0x40, 0x2, 0xffff0001, 0x3, 0xffffffff, 0x9, 0xb8, 0x9, 0xfffffeff, 0x817, 0x4, 0xffff, 0x2, 0x2, 0xe1a, 0x49, 0x2, 0x6, 0x4, 0x81, 0x0, 0x100, 0xde, 0x40, 0x1, 0x9, 0x0, 0x7fffffff, 0x4, 0xfffffffb, 0x9, 0x80000000, 0xffffff89, 0xffff8001, 0x2, 0x30, 0xfffffff7, 0x7, 0x3, 0x6, 0x2, 0x5, 0xc000000, 0x3, 0xc, 0x0, 0x1, 0x45d5, 0x5, 0x244, 0x0, 0x5, 0xf, 0x3d95, 0x1, 0x7, 0x7, 0x9, 0xffff, 0x2, 0x7ff, 0x10000, 0x7, 0x200, 0xb9, 0x5, 0xa4, 0x1000, 0x4, 0x7f, 0x8, 0x101, 0xffff, 0xfffffffd, 0x8, 0x4, 0x0, 0x4, 0x7, 0x400, 0xffffe91a, 0xd4b, 0xb2, 0x2, 0x4, 0x1f, 0x6, 0x0, 0x9cc, 0x5, 0x28, 0x7, 0x8, 0x2, 0x9, 0x7fff, 0xfffff941, 0x2, 0xffff, 0x8, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0xffffffffffffffff, 0xfffffffb, 0x6, 0x1, {0xfb, 0x1, 0x68c1, 0x3, 0x3, 0x2}, {0x6, 0x2, 0xaa7e, 0x9, 0x7, 0x8}, 0x4, 0x3, 0x7fff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x800, 0x602, 0x5, 0x3, 0x3, 0x71483af, 0x1, 0x0, 0xd1d7, 0x6, 0x5, 0x8, 0x80000000, 0x1, 0x3, 0x6, 0x8001, 0x6f8, 0x0, 0x7, 0x9, 0xffffff4c, 0x4, 0x2, 0xffffffff, 0x5, 0x400, 0x2, 0x101, 0x1, 0x1, 0x1ff, 0x3, 0x3ff, 0x1ff, 0x9e, 0x1, 0x2, 0x2, 0x9, 0xfff, 0xd7, 0x2, 0x7, 0x2c4c, 0x0, 0x9, 0x9, 0xc98, 0x4, 0x1000, 0x9, 0x4, 0x0, 0xb35, 0x80, 0x4, 0xfe, 0x0, 0x100, 0x3, 0x0, 0x4, 0x4, 0x1, 0xfff, 0x6, 0x400, 0x917e, 0x18e4, 0x9, 0x6, 0x2, 0xfcb, 0x7, 0x1cb, 0x0, 0x3, 0x0, 0x4, 0xa6b0, 0x2, 0x3, 0x7f8, 0xa, 0x8b01f1a, 0x900000, 0x5, 0x8001, 0x7, 0x6, 0x8, 0x10000, 0x1, 0x9811, 0x5, 0xbd, 0x1, 0x9, 0x1, 0x0, 0x80000001, 0x0, 0x3, 0x3, 0xef3, 0x6, 0x1582, 0x2, 0x0, 0x6c7, 0x800, 0x1, 0x4, 0xb91a, 0xe, 0x91, 0x3, 0xd43, 0x9, 0x101, 0x40, 0x8, 0x8, 0x4, 0x1ff, 0x10, 0x3ff, 0xfb, 0x100, 0x9, 0x2, 0x2, 0x8, 0x1000000, 0x9, 0x8000000, 0x3, 0x194, 0x0, 0x11cb, 0x2, 0xcd6a, 0xf771, 0xb836, 0x4, 0x1ff, 0x0, 0x4, 0x2, 0x2, 0x19e, 0x2, 0x4, 0x1a, 0x8, 0x2, 0x7fffffff, 0x9, 0xc1, 0x8, 0x200, 0x2, 0x1, 0x6, 0x0, 0x7f, 0x0, 0x6, 0x7fffffff, 0x6, 0xfffffff7, 0x3f9e, 0x3, 0x3378, 0x8, 0x0, 0xfff, 0x10000, 0xa, 0x9, 0x8, 0x0, 0x81, 0x8, 0x9, 0x8, 0x4, 0x5, 0xfffffff9, 0xbabc, 0x3ff, 0xdc, 0x2, 0x2, 0x6, 0x10, 0x0, 0x26533d96, 0xc7ec, 0x9, 0x4, 0xffffffff, 0x0, 0x2, 0xffff, 0x4, 0x6, 0xffff, 0x7, 0x8422, 0x1, 0x5, 0x0, 0xd1d, 0x2, 0x6, 0x0, 0xb3b, 0x9, 0x8, 0x4, 0xfffffffb, 0x1, 0x5, 0x2, 0x5, 0x8, 0x3d84, 0x0, 0x17, 0x8, 0x7, 0x2, 0xce, 0x0, 0xf3c, 0xa96, 0x9000000, 0xfffffffd, 0x44b9f55c, 0x4, 0x0, 0x0, 0x4, 0x1, 0x8, 0xf7, 0x6, 0x1, 0xfff, 0x5134965, 0x9, 0x3, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7fff, 0x200, 0x4, 0xce, 0xfffffff6, 0x7, 0x6, 0x4, 0x0, 0x1, 0xffff, 0x1, 0x100, 0x7, 0x7ff, 0x10, 0x101, 0x9, 0x5, 0x80, 0xd, 0x4, 0x6, 0x80000001, 0x40, 0x0, 0xffff, 0x800, 0x7, 0x437d, 0x8, 0x7fffffff, 0x3, 0xfffffc01, 0x9, 0x4, 0xf7, 0xc, 0x6, 0x3, 0x6, 0x6, 0x1, 0x4, 0x1, 0x3, 0x5, 0x2, 0x8e7, 0xe422, 0x18, 0x9, 0x2d6, 0x2f3e, 0xa, 0xb, 0x8c8, 0x9, 0x0, 0x2, 0x9, 0x8, 0xa, 0x0, 0x7, 0x8, 0x40, 0x1, 0x5, 0xf, 0x7, 0x6, 0x40, 0x2, 0x30, 0x8001, 0x3, 0x2, 0x80, 0x28d, 0x6, 0x2, 0xffff, 0x4, 0x0, 0x46, 0x7fffffff, 0xe, 0x7, 0x8, 0x81, 0x1, 0x79, 0x4ca5, 0x7fffffff, 0x19a, 0x6, 0x38, 0xffffb05d, 0x8, 0x379, 0x7, 0x4, 0xffff, 0x1, 0x6e, 0x1, 0x1, 0x6, 0x8, 0x7, 0x4, 0x9, 0x80, 0x1, 0x0, 0xa294, 0x5, 0xd, 0x2, 0x8, 0x3, 0x6, 0x80000001, 0x8, 0x2, 0x4, 0x72, 0x8, 0x4, 0x1, 0x99e, 0x3, 0xfffffff8, 0x6, 0x6, 0xfffff800, 0xfffffffe, 0x9, 0x8, 0x1, 0x65c, 0x2, 0x2f4e9aa3, 0x2, 0x4, 0x0, 0x6, 0x7, 0x4, 0x57b, 0x1, 0x3, 0x5, 0x1, 0x4, 0x6, 0xc9f, 0x7, 0x0, 0xfb2, 0x2, 0x8, 0x9, 0x2, 0xc, 0xf3a5, 0x3, 0x1, 0x9, 0x1, 0x5, 0xffff, 0x1ff, 0x401, 0xb, 0xa, 0x8, 0xff, 0x3, 0x1, 0x2, 0x4, 0x8000, 0xeab, 0x3, 0x4, 0x10001, 0x80000001, 0x2, 0xe, 0x5, 0x1, 0x9, 0x91b, 0x7fff, 0xffff, 0xb, 0x4, 0x10000, 0x5, 0x7ff, 0x6, 0x81, 0x9, 0xca09, 0x3, 0x81, 0x15, 0x6, 0x4b2, 0x8, 0x617a, 0x10001, 0xffffff7d, 0x5, 0x7, 0xfffffffc, 0x2, 0x1, 0x5, 0x4, 0x1000, 0xb7d, 0x2, 0x3, 0x0, 0x1, 0x8, 0x7, 0x7ff, 0xd9, 0xc529, 0x4578, 0xe65, 0x6, 0x4, 0xa74, 0x5, 0x2, 0x8, 0x6, 0x4, 0x200, 0x8f11, 0x80, 0xfffffff8, 0x1d2e0, 0x9, 0x8, 0x5, 0xe86b, 0x1, 0x505f, 0x4, 0x1459]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffffffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1000}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0xffffffffffffffff, 0x4e01, 0x7, 0x1, {0x4, 0x1, 0x2, 0xff12, 0xd75, 0x80000}, {0x10, 0x0, 0x9, 0x9, 0x5, 0x37d}, 0x6, 0x1, 0x7b15a622}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x101, 0x7, 0x2, 0x3, 0x9, 0x5, 0x0, 0x5, 0xc, 0x9, 0x0, 0x4, 0x3, 0xff, 0x80, 0x6, 0x1769e872, 0x8, 0xa2f, 0x8000, 0xfffffffa, 0x93, 0x0, 0x9e5b, 0x5d2c, 0x0, 0xc8e, 0x7, 0x1, 0x53a, 0x4, 0x3, 0x6, 0x8, 0x3, 0x8, 0x5c84, 0x4, 0x10, 0x81, 0x59f1, 0x4, 0x3, 0x39, 0x7, 0x4, 0x6, 0x9, 0xfffffffd, 0xff, 0x7e, 0x8, 0x3, 0x7, 0x3, 0x7, 0x4, 0x80, 0x0, 0x7fffffff, 0x5, 0x7, 0xfffffffe, 0x6, 0xde3, 0x9, 0x0, 0xdd, 0x8, 0x1, 0x55f0, 0x8, 0xfffffffa, 0xfffffff8, 0x8, 0x6, 0x81, 0x2, 0x3, 0x80, 0xd, 0x5, 0x5, 0x8de7, 0x62, 0xa1, 0x2, 0x8001, 0x200, 0x10000, 0x5, 0x3, 0xffff, 0x8, 0x101, 0x4, 0x80, 0x100, 0x7, 0xbad9, 0x40, 0x0, 0x80000000, 0x9, 0x8000, 0x7, 0x2, 0xf, 0x1d, 0x6, 0x8, 0x31e, 0x0, 0x2, 0x10, 0x7, 0x6, 0x4, 0x401, 0x0, 0xfffff11b, 0x800, 0x0, 0xffff, 0x731, 0x2f9, 0x3ff, 0x4, 0x7, 0x1000, 0x1, 0x40, 0x400, 0x348b, 0x18, 0xfff, 0x1, 0x0, 0x7, 0x7f, 0xe8, 0x6, 0x7, 0x8000, 0xffffffff, 0x0, 0x5, 0x2, 0x5, 0x80, 0x800, 0x7ff, 0x7fff, 0x401, 0x5, 0x1, 0x5, 0x1, 0x0, 0xf7, 0x8, 0x8, 0x0, 0x9, 0x1000, 0x4, 0xfffff800, 0x2, 0x101, 0x2cb, 0x400, 0x5, 0x0, 0x6, 0x1, 0x2125, 0x4b6d, 0xffff, 0x8, 0x7, 0x0, 0x0, 0xe7, 0xecc, 0x5, 0x2, 0x1, 0x9, 0x3, 0x1, 0x7, 0x5, 0x1, 0xa7e6, 0x59, 0xffff7fff, 0x2, 0x10001, 0x614f17db, 0x5, 0x401, 0xffffffff, 0x80, 0x1, 0x1, 0x1, 0x3, 0x4, 0x80000000, 0x0, 0x3, 0x8001, 0x5e, 0x2, 0x5, 0x5, 0x5, 0x0, 0x0, 0xdfa0, 0x6, 0x4, 0xf, 0x5, 0x0, 0x5c, 0xffffffff, 0x7fff, 0xeb1, 0x1020, 0x2, 0x0, 0xbbf, 0x1, 0x7f, 0xffffffff, 0x2, 0x2, 0x6, 0x40, 0x2, 0xffff, 0x40, 0x0, 0x65000, 0x6, 0xc, 0x1, 0x5, 0x0, 0x1c1, 0x21bb, 0x0, 0xfffffffa, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x7, 0x9, 0x8, 0xfffffab9, 0x5, 0x5, 0x7, 0xb523, 0x4, 0x9, 0xe, 0x240, 0x9, 0x9, 0xfffffffe, 0x1e5d, 0x8, 0x101e, 0x10, 0x7f, 0x0, 0x80000000, 0x8, 0x60000000, 0x7fff, 0x10, 0x9b0, 0x5, 0x73d, 0xe7, 0x9a, 0x0, 0x2040, 0x4, 0x1a, 0x7, 0x5, 0x8, 0x4, 0xf, 0x0, 0x7, 0x4, 0x401, 0x6, 0x8, 0xb, 0x200, 0x1, 0x58b, 0x2, 0x18, 0x6, 0xffffff79, 0x5, 0x1, 0x8000, 0x6, 0xfffffffd, 0x1, 0xf50, 0x2, 0x1, 0x7, 0x0, 0x7, 0x5, 0x10001, 0x4, 0x7, 0x400, 0x6, 0x7fff, 0x3, 0x4, 0x7, 0x200000, 0x3, 0x8, 0x6, 0x2, 0x4e, 0x1000, 0x3, 0x3, 0xffffffff, 0x100, 0x8, 0x0, 0x9f3, 0x4000, 0x5, 0xfff, 0x71, 0xea72, 0xffffffff, 0xd, 0x7, 0x6, 0x80000000, 0x932d, 0x0, 0x8000, 0x3ff, 0xa7eb, 0x7, 0x10, 0x0, 0x4cc61079, 0xfffffffc, 0xfffffe01, 0x2, 0x0, 0x6, 0xf, 0x100, 0x302a, 0x0, 0x8, 0x2, 0x2, 0x2, 0x8, 0x8, 0x5, 0x7, 0x6, 0x85, 0x9, 0x6, 0x100, 0x5, 0x7, 0xfffffff8, 0x7, 0x8, 0xffffffff, 0x6, 0x3, 0x3, 0x4, 0x1, 0x7, 0x5, 0x2, 0x448, 0x5, 0x1000, 0x1000, 0xb, 0x8, 0xfffffff9, 0xff, 0x4, 0x6, 0x4be0adbc, 0x5, 0x6, 0x9, 0x40, 0x4, 0xc4e1, 0x100, 0xffff14ea, 0x9, 0x8, 0x0, 0x2, 0xdb, 0x8, 0x6, 0x200, 0xfffffff8, 0x47, 0x45f, 0x9, 0x0, 0x9, 0x6, 0x5, 0x3, 0x1, 0xfe, 0x10000, 0x4, 0xffffffff, 0x38000, 0x41c9, 0x9, 0x8, 0x4, 0xfff, 0x0, 0x5, 0x80, 0x6d, 0x401, 0x5, 0x8d9, 0x7, 0x10001, 0xffffffff, 0x60d1, 0x3, 0x133e, 0xfffffffb, 0x1ff, 0x3, 0x3, 0x380000, 0xfa5, 0x4, 0x5, 0x2, 0x1, 0x8, 0x8, 0x4, 0x2, 0x0, 0x0, 0x2, 0x8, 0x7, 0x3, 0x3, 0x4, 0x6, 0x8, 0x7, 0x7fff, 0x5, 0xb, 0x401, 0x8, 0x6, 0xffff, 0x6, 0x200, 0x6, 0x4, 0x40, 0x3, 0xff, 0x5, 0x5, 0x1, 0xe5dc, 0x9, 0xd5, 0x6, 0xffffff81, 0x8001, 0x5, 0x5]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffc, 0x4ea, 0x0, 0x3, 0x4, 0xffffffff, 0xd, 0xc, 0x4, 0xd, 0x7, 0x9, 0x4, 0x2, 0x7fffffff, 0xa, 0xbf, 0x6, 0xb, 0xfffff993, 0xe, 0x3, 0xcfa, 0x5, 0x4, 0x4, 0xffff, 0x8, 0x2, 0x6, 0x60f, 0x5, 0x9, 0x7ff, 0x6, 0x4, 0x200, 0x101, 0x8, 0x9, 0x200, 0x4, 0x2, 0x1, 0x7, 0xfffffff0, 0xdc, 0x7fffffff, 0x101, 0x40, 0x2, 0x5, 0x6, 0x7fffffff, 0x0, 0x3, 0x1, 0xda2, 0x8, 0x4, 0x7, 0x6, 0xffffffff, 0xfffff163, 0x26, 0x8000, 0x7, 0x2, 0xff, 0x9, 0x7, 0x8, 0x0, 0x3ff, 0x132f7617, 0x8, 0x6, 0x0, 0x5, 0x1, 0x2, 0x2c82, 0x1, 0x8, 0x4675, 0xffffff01, 0x3, 0x2, 0x1, 0x7, 0x9, 0x1, 0x0, 0x5, 0x6, 0x7ff, 0xffffff18, 0xffffff7f, 0x10, 0x2, 0x1000, 0x57a, 0xa3, 0x1, 0x0, 0x10, 0x8, 0x8, 0x7, 0x100, 0xa671, 0x9, 0x9, 0x9, 0xfffffff8, 0x9, 0x400, 0x5, 0x863bf2b, 0x3ff, 0x0, 0x3ff, 0x1, 0x6, 0x7, 0x6, 0x2, 0x80000001, 0x10000, 0x8, 0x63f3, 0x3, 0x94c, 0x9, 0x10000, 0x9, 0x4, 0x40, 0x26, 0xa76a, 0x1ff, 0xffffffc0, 0x7f, 0x0, 0x7, 0xffff, 0x7fffffff, 0x7, 0x3, 0x9, 0x71f834e5, 0x700, 0x3, 0x7, 0x8, 0xd, 0xb, 0x6, 0x5ea, 0x8, 0x4, 0x400, 0x8, 0x4, 0x10000, 0x0, 0x1, 0x8, 0x5, 0x0, 0x1ff, 0x5, 0x6, 0x0, 0x4, 0xfffffff7, 0x9, 0x7, 0x3ff, 0x8, 0x2, 0x7, 0x1d, 0x3ff, 0x5, 0x4, 0x9, 0x80, 0x2, 0x8000, 0x4, 0x97e3, 0x215, 0x4a, 0x7, 0x80000000, 0x0, 0xdb6, 0x3ff, 0x7b, 0x0, 0x8, 0x7f, 0x40, 0x42, 0xcb, 0x0, 0xc, 0x81, 0x90d, 0x26a, 0xffff, 0x5, 0x4, 0x8000, 0xfffffff7, 0x1, 0x1, 0x4, 0x3, 0x10000, 0x6, 0x80, 0x2, 0x80000001, 0xafb, 0x1, 0x3140fd3f, 0x2, 0x80000001, 0x4, 0xf8bd, 0x1, 0x360, 0x5, 0x10000, 0x10001, 0x37f0, 0xce, 0x6, 0xd, 0x1, 0xfff, 0xfa, 0x1, 0x0, 0x1, 0xfffffffd, 0x6, 0xe, 0x1, 0xff, 0x0, 0x2e0dfe10, 0x6, 0x7ac]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x196c}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x6, 0x9, 0x3800000, 0x2, 0x0, 0x4, 0xd82, 0xffffffff, 0x9, 0x5, 0x5af, 0x9, 0x9, 0x100, 0x1, 0x7, 0x6, 0x8b90, 0x8, 0x7fff, 0xb87, 0x7, 0x5, 0x3, 0x0, 0xfffffffb, 0x0, 0xff, 0x40, 0x5d, 0xe14, 0x5, 0x1, 0x9, 0x2, 0x80000000, 0x101, 0x4, 0xd0, 0x9, 0x8000, 0x2, 0x3, 0x3, 0x1c, 0x80000000, 0xffffffff, 0x5, 0x5, 0x7fffffff, 0x6, 0x5824, 0x38, 0x7ff, 0x4, 0xc7, 0x8, 0x46, 0xfffffff8, 0x4, 0x2, 0x401, 0x7, 0x3, 0x8, 0x6, 0xfff, 0x0, 0x0, 0x6, 0x5, 0x5, 0x98, 0x9, 0x5, 0x3, 0x243bfb64, 0x2, 0x80000001, 0x60d8, 0x3, 0xd248, 0x8, 0x0, 0x3aa2, 0xdf, 0x8, 0x0, 0xff, 0xfff, 0x5, 0xfffffdc4, 0x9, 0x1, 0xe, 0x644, 0xfffffffb, 0xd7b, 0x3, 0xb64a, 0x2, 0x200040, 0x4dd4, 0x94, 0x1, 0x3, 0x9a0, 0x1, 0x9, 0x8, 0x8, 0x2, 0x8, 0x6, 0x9, 0x9, 0x5, 0x40, 0x388, 0x7, 0x1, 0x7, 0x2, 0x81, 0x1, 0x4, 0x0, 0x1, 0x8, 0x9, 0x7, 0x0, 0x8, 0xffff, 0x2, 0xffffff01, 0x7cf, 0x29, 0x1, 0x8000, 0x2, 0x9, 0xf63, 0x0, 0x0, 0x6, 0x6, 0x8, 0x0, 0x0, 0x152, 0x5, 0x366, 0xfffffffd, 0x0, 0x0, 0x8001, 0x27ea, 0x9337, 0x2, 0x6, 0xffffffff, 0x5, 0x800, 0x4, 0x61, 0x5, 0x3, 0x5, 0x81, 0x8, 0x6, 0x9, 0x7, 0x4, 0x5, 0x8, 0x5, 0x6, 0x200, 0x401, 0x3, 0x8, 0x401, 0x4, 0x6, 0x1, 0x2, 0x8, 0x9, 0x3, 0x3, 0x5, 0x2, 0x7, 0x3, 0x4, 0x7, 0x0, 0x1b, 0x4e, 0x9, 0x52c0be46, 0x9, 0x2, 0x2, 0x63, 0x7, 0xfff, 0x3, 0x7, 0x2, 0x1, 0x9, 0xc, 0xab0, 0x6, 0x4, 0x7, 0x9, 0x6, 0xb68, 0x6f88, 0xfffffffd, 0x1, 0x7, 0x7, 0x40, 0x80000001, 0xff6f, 0xfe, 0x0, 0x1, 0x6, 0xffff, 0x870, 0x5, 0x0, 0x400, 0x5, 0x494b6497, 0xb1ed, 0xf61b, 0x40000, 0x81, 0x8, 0x10, 0x6, 0x5, 0x99, 0xbbc3, 0x6354, 0xfffffc00, 0xef, 0x2]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x14}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x40af}]]}, {0x24, 0x6, "31b4614f26e8b4af70b29a7169b505824f2363d0fb0fc0cb08e477ae3be0f1bd"}, {0xc, 0x7, {0xdaa7d73b8d6bcd40, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0x198, 0x19, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0x6, 0x2, 0x9, 0x4}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0x7, 0x3, 0xce6, 0x2400}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x8001, 0x6, 0x1, 0x335}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x11, 0x8, 0x8, 0x4, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x5, 0x3, 0x2, 0xffff8001}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x70b448b5, 0x92, 0x3, 0x401, 0x2}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1000, 0x3, 0x1, 0x2, 0x8}, 0x1}}]}, {0x8a, 0x6, "29e60f65aaca0e13340a4729b57bfbc8a34e8554322ee4e12b68196e2acc8f1e1354a809dd0e3c81db36df7c3346bbd29b3b03d6c039eb72b375d5fea7c4d5f0310940d5d67da9c37436c685c02ae198ff59dafb8c14bc63ee8c1a3f6ee55e56ecd3f4cec1eca81e1da6b183732c6a9d36d051e534fa3a6e365b1842c4311f15e08949c61c1e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x52}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xf8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x72}]}}]}, 0x41a0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 0s ago: executing program 1 (id=4602): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8010) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./config\x00', &(0x7f0000000680)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) rmdir(&(0x7f0000000740)='./config/usb_gadget/g1/functions/hid.usb0\x00') r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000240)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000780)) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3}, 0x94) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000440), 0x0, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FE_SET_FRONTEND(r5, 0x40246f4c, &(0x7f0000000480)={0x7, 0x2, @ofdm={0x4, 0x18, 0x9, 0x0, 0x4, 0x3}}) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000400)=@generic={0x0, r4}, 0x18) r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x5) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000001280)={0x0, @bt={0xe, 0x6, 0x0, 0x3, 0x7ff, 0x1, 0x5, 0x6, 0x6, 0x36d, 0x10000, 0x7, 0x7fffffff, 0x3da, 0x15, 0x18, {0x6, 0x3}, 0x38, 0x9e}}) kernel console output (not intermixed with test programs): 0 audit(10596.356:42327): avc: denied { ioctl } for pid=19416 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 611.547503][ T43] audit: type=1400 audit(10596.356:42328): avc: denied { write } for pid=20228 comm="syz.3.4031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 611.609509][ T43] audit: type=1400 audit(10596.416:42329): avc: denied { module_request } for pid=20228 comm="syz.3.4031" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 611.754494][ T64] usbhid 6-1:0.0: can't add hid device: -71 [ 611.754990][ T64] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 611.756911][ T64] usb 6-1: USB disconnect, device number 33 [ 611.959442][T20255] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 611.962373][T20255] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4038'. [ 612.040069][T20257] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4039'. [ 612.040097][T20257] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4039'. [ 612.099936][T20261] CUSE: unknown device info "" [ 612.099947][T20261] CUSE: unknown device info "" [ 612.099952][T20261] CUSE: unknown device info "ÿ" [ 612.099956][T20261] CUSE: unknown device info "" [ 612.099961][T20261] CUSE: unknown device info "ý" [ 612.099965][T20261] CUSE: unknown device info "" [ 612.099969][T20261] CUSE: unknown device info "" [ 612.099973][T20261] CUSE: DEVNAME unspecified [ 612.184796][ T3380] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 612.271959][T20271] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 80000000000 [ 612.303445][T20274] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4046'. [ 612.345416][ T3380] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 612.348379][ T3380] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.348408][ T3380] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.350776][ T3380] usb 6-1: config 0 descriptor?? [ 612.408360][T20286] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4052'. [ 612.408415][T20286] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4052'. [ 612.454223][T20295] overlayfs: failed to clone upperpath [ 612.466434][T20295] overlayfs: failed to clone upperpath [ 612.467456][T20295] overlayfs: failed to clone upperpath [ 612.468415][T20295] overlayfs: failed to clone upperpath [ 612.469499][T20295] overlayfs: failed to clone upperpath [ 612.471736][T20295] overlayfs: failed to clone upperpath [ 612.473157][T20295] overlayfs: failed to clone upperpath [ 612.475207][T20295] overlayfs: failed to clone upperpath [ 612.477518][T20295] overlayfs: failed to clone upperpath [ 612.479265][T20295] overlayfs: failed to clone upperpath [ 612.480706][T20295] overlayfs: failed to clone upperpath [ 612.482900][T20295] overlayfs: failed to clone upperpath [ 612.486571][T20295] overlayfs: failed to clone upperpath [ 612.489670][T20295] overlayfs: failed to clone upperpath [ 612.491251][T20295] overlayfs: failed to clone upperpath [ 612.493253][T20295] overlayfs: failed to clone upperpath [ 612.496347][T20295] overlayfs: failed to clone upperpath [ 612.498733][T20295] overlayfs: failed to clone upperpath [ 612.500473][T20295] overlayfs: failed to clone upperpath [ 612.502815][T20295] overlayfs: failed to clone upperpath [ 612.512111][T20295] overlayfs: failed to clone upperpath [ 612.513571][T20295] overlayfs: failed to clone upperpath [ 612.515050][T20295] overlayfs: failed to clone upperpath [ 612.516951][T20295] overlayfs: failed to clone upperpath [ 612.518932][T20295] overlayfs: failed to clone upperpath [ 612.520631][T20295] overlayfs: failed to clone upperpath [ 612.522413][T20295] overlayfs: failed to clone upperpath [ 612.527912][T20295] overlayfs: failed to clone upperpath [ 612.529447][T20295] overlayfs: failed to clone upperpath [ 612.531716][T20295] overlayfs: failed to clone upperpath [ 612.533826][T20295] overlayfs: failed to clone upperpath [ 612.536076][T20295] overlayfs: failed to clone upperpath [ 612.538621][T20295] overlayfs: failed to clone upperpath [ 612.683981][ T5760] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 612.690325][ T5760] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 612.691171][ T5760] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 612.691752][ T5760] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 612.692081][ T5760] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 612.781504][ T3380] usbhid 6-1:0.0: can't add hid device: -71 [ 612.781578][ T3380] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 612.783392][ T3380] usb 6-1: USB disconnect, device number 34 [ 612.993108][T20312] rxe_eth0 speed is unknown, defaulting to 1000 [ 613.040486][T13688] tipc: Resetting bearer [ 613.088251][T13688] tipc: Disabling bearer [ 613.309333][T20354] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 613.352421][T20360] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 32 [ 613.494257][ T9800] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.591966][T20368] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 613.591994][T20368] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 613.592005][T20368] overlayfs: missing 'lowerdir' [ 613.596037][T20367] syzkaller1: entered promiscuous mode [ 613.596049][T20367] syzkaller1: entered allmulticast mode [ 613.633771][T20312] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.634647][T20312] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.634734][T20312] bridge_slave_0: entered allmulticast mode [ 613.635539][T20312] bridge_slave_0: entered promiscuous mode [ 613.639826][T20312] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.640027][T20312] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.640214][T20312] bridge_slave_1: entered allmulticast mode [ 613.643082][T20312] bridge_slave_1: entered promiscuous mode [ 613.718171][ T9800] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.745714][T20312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.749280][T20312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.795529][T20312] team0: Port device team_slave_0 added [ 613.798013][T20312] team0: Port device team_slave_1 added [ 613.823026][T20312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.823042][T20312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.823063][T20312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.824507][T20312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.824518][T20312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.825491][T20312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.876436][ T9800] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.893224][T20312] hsr_slave_0: entered promiscuous mode [ 613.894017][T20312] hsr_slave_1: entered promiscuous mode [ 613.894767][T20312] debugfs: 'hsr0' already exists in 'hsr' [ 613.894786][T20312] Cannot create hsr debugfs directory [ 613.954443][T20401] loop5: detected capacity change from 0 to 7 [ 613.967245][T20401] Dev loop5: unable to read RDB block 7 [ 613.967280][T20401] loop5: unable to read partition table [ 613.967423][T20401] loop5: partition table beyond EOD, truncated [ 613.967438][T20401] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 614.069830][ T9800] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.211971][T20413] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 900 [ 614.284346][T20427] loop6: detected capacity change from 0 to 7 [ 614.285754][ C3] blk_print_req_error: 10 callbacks suppressed [ 614.285765][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 614.285802][ C3] buffer_io_error: 11 callbacks suppressed [ 614.285808][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 614.288854][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 614.288890][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 614.288968][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 614.288995][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 614.289061][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 614.289087][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 614.289159][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 614.289189][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 614.289260][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 614.289286][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 614.289351][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 614.289378][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 614.289396][T20427] ldm_validate_partition_table(): Disk read failed. [ 614.289451][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 614.289477][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 614.289543][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 614.289569][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 614.289633][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 614.289659][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 614.289834][T20427] Dev loop6: unable to read RDB block 0 [ 614.290184][T20427] loop6: unable to read partition table [ 614.290278][T20427] loop6: partition table beyond EOD, truncated [ 614.290293][T20427] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü�¾-ý?‹ºÐ œëÜ%õ«`Éæˆ{í©³­ô÷5 FLQkÝŠA€) failed (rc=-5) [ 614.614669][ T12] netdevsim netdevsim3 eth14: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.736331][ T5760] Bluetooth: hci3: command tx timeout [ 614.754755][ T12] netdevsim netdevsim3 eth16: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.998919][ T9800] bond1 (unregistering): (slave gre1): Releasing backup interface [ 614.998945][ T9800] gre1 (unregistering): left promiscuous mode [ 615.101238][ T9800] bond2 (unregistering): (slave bridge2): Releasing active interface [ 615.160999][ T9800] bond0 (unregistering): Released all slaves [ 615.163920][ T9800] bond1 (unregistering): Released all slaves [ 615.169345][ T9800] bond2 (unregistering): Released all slaves [ 615.175269][ T9800] bond3 (unregistering): Released all slaves [ 615.194673][T14539] netdevsim netdevsim3 eth15: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.194722][T14539] netdevsim netdevsim3 eth17: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.328914][T20312] netdevsim netdevsim3 eth17 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.439869][ T35] usb 13-1: new high-speed USB device number 80 using dummy_hcd [ 615.444992][ T9800] tipc: Disabling bearer [ 615.462179][ T9800] tipc: Left network mode [ 615.463755][T20466] FAULT_INJECTION: forcing a failure. [ 615.463755][T20466] name failslab, interval 1, probability 0, space 0, times 0 [ 615.463777][T20466] CPU: 2 UID: 0 PID: 20466 Comm: syz.7.4088 Tainted: G L syzkaller #0 PREEMPT(full) [ 615.463794][T20466] Tainted: [L]=SOFTLOCKUP [ 615.463799][T20466] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 615.463806][T20466] Call Trace: [ 615.463811][T20466] [ 615.463817][T20466] dump_stack_lvl+0x100/0x190 [ 615.463848][T20466] should_fail_ex.cold+0x5/0xa [ 615.463868][T20466] should_failslab+0xc2/0x120 [ 615.463898][T20466] kmem_cache_alloc_noprof+0x92/0x6a0 [ 615.463913][T20466] ? __proc_create+0xc1/0x8f0 [ 615.463928][T20466] ? __proc_create+0x247/0x8f0 [ 615.463944][T20466] __proc_create+0x247/0x8f0 [ 615.463960][T20466] ? __pfx___proc_create+0x10/0x10 [ 615.463977][T20466] ? lock_acquire+0x1d1/0x380 [ 615.463993][T20466] proc_mkdir+0x81/0x170 [ 615.464006][T20466] ? __pfx_proc_mkdir+0x10/0x10 [ 615.464021][T20466] ? __pfx_sunrpc_init_net+0x10/0x10 [ 615.464044][T20466] ? __pfx_sunrpc_init_net+0x10/0x10 [ 615.464059][T20466] rpc_proc_init+0x7e/0xf0 [ 615.464076][T20466] sunrpc_init_net+0x29/0x1b0 [ 615.464093][T20466] ops_init+0x1e2/0x5f0 [ 615.464109][T20466] setup_net+0x118/0x3a0 [ 615.464122][T20466] ? __pfx_setup_net+0x10/0x10 [ 615.464139][T20466] copy_net_ns+0x345/0x7a0 [ 615.464155][T20466] create_new_namespaces+0x3ea/0xac0 [ 615.464172][T20466] unshare_nsproxy_namespaces+0xf2/0x220 [ 615.464188][T20466] ksys_unshare+0x4a2/0xb30 [ 615.464203][T20466] ? __pfx_ksys_unshare+0x10/0x10 [ 615.464223][T20466] __x64_sys_unshare+0x31/0x40 [ 615.464238][T20466] do_syscall_64+0x123/0x790 [ 615.464260][T20466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.464272][T20466] RIP: 0033:0x7f91be79e559 [ 615.464283][T20466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.464294][T20466] RSP: 002b:00007f91bf73d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 615.464306][T20466] RAX: ffffffffffffffda RBX: 00007f91bea25fa0 RCX: 00007f91be79e559 [ 615.464314][T20466] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 615.464323][T20466] RBP: 00007f91be835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 615.464331][T20466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 615.464338][T20466] R13: 00007f91bea26038 R14: 00007f91bea25fa0 R15: 00007ffd706b7978 [ 615.464355][T20466] [ 615.531356][T20312] netdevsim netdevsim3 eth16 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.587712][ T35] usb 13-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 615.590801][ T35] usb 13-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 615.593756][ T35] usb 13-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 615.600332][ T35] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.600354][ T35] usb 13-1: Product: syz [ 615.600366][ T35] usb 13-1: Manufacturer: syz [ 615.600379][ T35] usb 13-1: SerialNumber: syz [ 615.609169][ T35] ti_usb_3410_5052 13-1:2.0: TI USB 5052 2 port adapter converter detected [ 615.636986][ T35] usb 13-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 615.641585][ T35] usb 13-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 615.714023][T20312] netdevsim netdevsim3 eth15 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.981213][T20501] usb 1-1: USB disconnect, device number 2 [ 616.047006][T20505] ima: rule for LSM 'u' is undefined [ 616.056161][T20312] netdevsim netdevsim3 eth14 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.058170][T20506] fuse: Unknown parameter 'rootmodD' [ 616.058656][T20505] fuse: Unknown parameter 'rootmodD' [ 616.059550][T20504] ima: policy update failed [ 616.442070][T20501] hub 1-0:1.0: USB hub found [ 616.442898][T20501] hub 1-0:1.0: 6 ports detected [ 616.459574][T20312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 616.466952][T20312] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 616.467390][T20312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 616.475095][T20312] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 616.478445][T20312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 616.480894][T20312] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 616.481512][T20312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 616.490227][T20312] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 616.546796][T20312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.562930][T20312] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.574420][ T9800] hsr_slave_0: left promiscuous mode [ 616.585827][ T9800] hsr_slave_1: left promiscuous mode [ 616.599900][ T9800] veth1_macvtap: left promiscuous mode [ 616.599924][ T9800] veth0_macvtap: left promiscuous mode [ 616.599969][ T9800] veth1_vlan: left promiscuous mode [ 616.600081][ T9800] veth0_vlan: left promiscuous mode [ 616.634630][ T5863] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 616.652885][ T43] kauditd_printk_skb: 436 callbacks suppressed [ 616.652898][ T43] audit: type=1400 audit(10601.456:42766): avc: denied { mount } for pid=20525 comm="syz.7.4100" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 616.653525][ T43] audit: type=1400 audit(10601.456:42767): avc: denied { create } for pid=20525 comm="syz.7.4100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 616.653903][ T43] audit: type=1400 audit(10601.456:42768): avc: denied { write } for pid=20525 comm="syz.7.4100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 616.677003][ T43] audit: type=1400 audit(10601.486:42769): avc: denied { unmount } for pid=19416 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 616.695540][ T5937] usb 1-1: new high-speed USB device number 3 using ehci-pci [ 616.727874][ T43] audit: type=1400 audit(10601.536:42770): avc: denied { mount } for pid=20527 comm="syz.7.4101" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 616.728967][ T43] audit: type=1400 audit(10601.536:42771): avc: denied { execmem } for pid=20527 comm="syz.7.4101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 616.730724][ T43] audit: type=1400 audit(10601.536:42772): avc: denied { execute } for pid=20527 comm="syz.7.4101" path=2F6D656D66643AF365099F9138C07901631F6E7578202864656C6574656429 dev="tmpfs" ino=3261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 616.732996][ T43] audit: type=1400 audit(10601.536:42773): avc: denied { read write } for pid=20527 comm="syz.7.4101" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 616.733385][ T43] audit: type=1400 audit(10601.536:42774): avc: denied { open } for pid=20527 comm="syz.7.4101" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 616.734101][ T43] audit: type=1400 audit(10601.536:42775): avc: denied { ioctl } for pid=20527 comm="syz.7.4101" path="/dev/dri/card0" dev="devtmpfs" ino=635 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 616.816097][ T5863] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 616.817017][ T5863] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 616.817052][ T5863] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 616.817073][ T5863] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 616.817094][ T5863] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 616.817115][ T5863] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 616.818000][ T5863] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 616.818033][ T5863] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 616.818056][ T5863] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 616.818074][ T5863] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 616.818093][ T5863] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 616.822743][ T5863] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 616.822778][ T5863] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 616.822800][ T5863] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 616.822823][ T5863] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 616.822846][ T5863] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 616.826257][ T5760] Bluetooth: hci3: command tx timeout [ 616.873353][ T5937] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 616.876227][ T5863] usb 6-1: string descriptor 0 read error: -22 [ 616.876333][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.886716][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 616.886737][ T5937] usb 1-1: Product: QEMU USB Tablet [ 616.886750][ T5937] usb 1-1: Manufacturer: QEMU [ 616.886761][ T5937] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 616.939108][ T5863] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 616.945331][ T5937] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0009/input/input40 [ 617.022751][ T5937] hid-generic 0003:0627:0001.0009: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 617.047722][T14849] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.047782][T14849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.052034][T14849] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.052102][T14849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.075595][T20536] device-mapper: table: 248:0: multipath: invalid number of paths (-EINVAL) [ 617.075617][T20536] device-mapper: ioctl: error adding target to table [ 617.251295][T20543] program syz.1.4099 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 617.262379][T20546] FAULT_INJECTION: forcing a failure. [ 617.262379][T20546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.262400][T20546] CPU: 2 UID: 0 PID: 20546 Comm: syz.7.4107 Tainted: G L syzkaller #0 PREEMPT(full) [ 617.262416][T20546] Tainted: [L]=SOFTLOCKUP [ 617.262420][T20546] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 617.262427][T20546] Call Trace: [ 617.262431][T20546] [ 617.262436][T20546] dump_stack_lvl+0x100/0x190 [ 617.262457][T20546] should_fail_ex.cold+0x5/0xa [ 617.262474][T20546] _copy_from_user+0x2e/0xd0 [ 617.262493][T20546] do_ipv6_setsockopt+0x73d/0x44a0 [ 617.262511][T20546] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 617.262526][T20546] ? __lock_acquire+0x5c0/0x1f40 [ 617.262540][T20546] ? __lock_acquire+0x5c0/0x1f40 [ 617.262560][T20546] ? reacquire_held_locks+0xdd/0x1f0 [ 617.262573][T20546] ? release_sock+0x21/0x280 [ 617.262586][T20546] ? do_raw_spin_lock+0x128/0x260 [ 617.262602][T20546] ? selinux_netlbl_socket_setsockopt+0x22c/0x470 [ 617.262620][T20546] ? find_held_lock+0x2b/0x80 [ 617.262637][T20546] ? selinux_netlbl_socket_setsockopt+0x22c/0x470 [ 617.262654][T20546] ? selinux_netlbl_socket_setsockopt+0x22c/0x470 [ 617.262672][T20546] ? __local_bh_enable_ip+0xa5/0x120 [ 617.262685][T20546] ? lockdep_hardirqs_on+0x7d/0x110 [ 617.262724][T20546] ? selinux_netlbl_socket_setsockopt+0x22c/0x470 [ 617.262741][T20546] ? __local_bh_enable_ip+0xa5/0x120 [ 617.262756][T20546] ? ipv6_setsockopt+0xcb/0x170 [ 617.262769][T20546] ipv6_setsockopt+0xcb/0x170 [ 617.262784][T20546] rawv6_setsockopt+0xee/0x5a0 [ 617.262797][T20546] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 617.262810][T20546] ? selinux_socket_setsockopt+0x6a/0x80 [ 617.262825][T20546] ? sock_common_setsockopt+0x2e/0xf0 [ 617.262839][T20546] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 617.262854][T20546] do_sock_setsockopt+0xf3/0x1d0 [ 617.262870][T20546] __sys_setsockopt+0x195/0x220 [ 617.262884][T20546] __x64_sys_setsockopt+0xbd/0x160 [ 617.262895][T20546] ? do_syscall_64+0xae/0x790 [ 617.262911][T20546] ? lockdep_hardirqs_on+0x7d/0x110 [ 617.262927][T20546] do_syscall_64+0x123/0x790 [ 617.262944][T20546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.263034][T20546] RIP: 0033:0x7f91be79e559 [ 617.263050][T20546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.263066][T20546] RSP: 002b:00007f91bf73d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 617.263085][T20546] RAX: ffffffffffffffda RBX: 00007f91bea25fa0 RCX: 00007f91be79e559 [ 617.263095][T20546] RDX: 0000000000000036 RSI: 0000000000000029 RDI: 0000000000000006 [ 617.263104][T20546] RBP: 00007f91be835ab8 R08: 0000000000000078 R09: 0000000000000000 [ 617.263115][T20546] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000000 [ 617.263128][T20546] R13: 00007f91bea26038 R14: 00007f91bea25fa0 R15: 00007ffd706b7978 [ 617.263149][T20546] [ 617.407537][ T9800] IPVS: stop unused estimator thread 0... [ 617.497747][T20312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.534900][T20312] veth0_vlan: entered promiscuous mode [ 617.543855][T20312] veth1_vlan: entered promiscuous mode [ 617.568932][T20312] veth0_macvtap: entered promiscuous mode [ 617.571965][T20312] veth1_macvtap: entered promiscuous mode [ 617.585360][T20312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.591013][T20312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.646485][ T5795] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.649061][T14539] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.649337][T14539] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.649368][T14539] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.692352][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.692366][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.718577][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.718591][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.852956][T20557] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 3200 [ 618.069882][T20566] __nla_validate_parse: 4 callbacks suppressed [ 618.069895][T20566] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4112'. [ 618.069910][T20566] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4112'. [ 618.474249][T20572] FAULT_INJECTION: forcing a failure. [ 618.474249][T20572] name failslab, interval 1, probability 0, space 0, times 0 [ 618.474281][T20572] CPU: 3 UID: 0 PID: 20572 Comm: syz.3.4115 Tainted: G L syzkaller #0 PREEMPT(full) [ 618.474306][T20572] Tainted: [L]=SOFTLOCKUP [ 618.474313][T20572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 618.474323][T20572] Call Trace: [ 618.474329][T20572] [ 618.474337][T20572] dump_stack_lvl+0x100/0x190 [ 618.474394][T20572] should_fail_ex.cold+0x5/0xa [ 618.474419][T20572] should_failslab+0xc2/0x120 [ 618.474449][T20572] kmem_cache_alloc_noprof+0x92/0x6a0 [ 618.474470][T20572] ? __proc_create+0xc1/0x8f0 [ 618.474490][T20572] ? __proc_create+0x247/0x8f0 [ 618.474512][T20572] __proc_create+0x247/0x8f0 [ 618.474532][T20572] ? __pfx___proc_create+0x10/0x10 [ 618.474556][T20572] ? lock_acquire+0x1d1/0x380 [ 618.474577][T20572] proc_mkdir+0x81/0x170 [ 618.474597][T20572] ? __pfx_proc_mkdir+0x10/0x10 [ 618.474618][T20572] ? __pfx_sunrpc_init_net+0x10/0x10 [ 618.474667][T20572] ? __pfx_sunrpc_init_net+0x10/0x10 [ 618.474711][T20572] rpc_proc_init+0x7e/0xf0 [ 618.474738][T20572] sunrpc_init_net+0x29/0x1b0 [ 618.474762][T20572] ops_init+0x1e2/0x5f0 [ 618.474785][T20572] setup_net+0x118/0x3a0 [ 618.474805][T20572] ? __pfx_setup_net+0x10/0x10 [ 618.474829][T20572] copy_net_ns+0x345/0x7a0 [ 618.474851][T20572] create_new_namespaces+0x3ea/0xac0 [ 618.474878][T20572] unshare_nsproxy_namespaces+0xf2/0x220 [ 618.474901][T20572] ksys_unshare+0x4a2/0xb30 [ 618.474922][T20572] ? __pfx_ksys_unshare+0x10/0x10 [ 618.474942][T20572] ? selinux_file_ioctl+0xb6/0x290 [ 618.474967][T20572] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 618.474993][T20572] __x64_sys_unshare+0x31/0x40 [ 618.475013][T20572] do_syscall_64+0x123/0x790 [ 618.475046][T20572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.475064][T20572] RIP: 0033:0x7faf2499e559 [ 618.475079][T20572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.475095][T20572] RSP: 002b:00007faf258e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 618.475113][T20572] RAX: ffffffffffffffda RBX: 00007faf24c25fa0 RCX: 00007faf2499e559 [ 618.475124][T20572] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 618.475135][T20572] RBP: 00007faf24a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 618.475144][T20572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.475155][T20572] R13: 00007faf24c26038 R14: 00007faf24c25fa0 R15: 00007fff15567488 [ 618.475178][T20572] [ 618.904692][T12879] Bluetooth: hci3: command tx timeout [ 619.375092][ T5760] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 619.469044][T20579] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 80000 [ 619.538046][T20582] rxe_eth0 speed is unknown, defaulting to 1000 [ 619.580841][T20585] FAULT_INJECTION: forcing a failure. [ 619.580841][T20585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.580870][T20585] CPU: 3 UID: 0 PID: 20585 Comm: syz.3.4120 Tainted: G L syzkaller #0 PREEMPT(full) [ 619.580893][T20585] Tainted: [L]=SOFTLOCKUP [ 619.580898][T20585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 619.580908][T20585] Call Trace: [ 619.580914][T20585] [ 619.580921][T20585] dump_stack_lvl+0x100/0x190 [ 619.580965][T20585] should_fail_ex.cold+0x5/0xa [ 619.580990][T20585] _copy_from_user+0x2e/0xd0 [ 619.581014][T20585] copy_msghdr_from_user+0x9f/0x4c0 [ 619.581037][T20585] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 619.581064][T20585] ? lock_acquire+0x1d1/0x380 [ 619.581081][T20585] ? get_pid_task+0x2a/0x250 [ 619.581105][T20585] ___sys_sendmsg+0x106/0x1e0 [ 619.581127][T20585] ? __pfx____sys_sendmsg+0x10/0x10 [ 619.581158][T20585] ? find_held_lock+0x2b/0x80 [ 619.581195][T20585] __sys_sendmsg+0x160/0x210 [ 619.581212][T20585] ? __pfx___sys_sendmsg+0x10/0x10 [ 619.581240][T20585] do_syscall_64+0x123/0x790 [ 619.581265][T20585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.581281][T20585] RIP: 0033:0x7faf2499e559 [ 619.581295][T20585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.581309][T20585] RSP: 002b:00007faf258e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 619.581326][T20585] RAX: ffffffffffffffda RBX: 00007faf24c25fa0 RCX: 00007faf2499e559 [ 619.581336][T20583] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 619.581336][T20585] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 619.581346][T20585] RBP: 00007faf258e6090 R08: 0000000000000000 R09: 0000000000000000 [ 619.581356][T20583] [U] J"—e:ÀÆ" [ 619.581356][T20585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.581365][T20585] R13: 00007faf24c26038 R14: 00007faf24c25fa0 R15: 00007fff15567488 [ 619.581393][T20585] [ 619.627975][T20492] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 619.630153][T20492] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 619.636275][ T5420] usb 13-1: USB disconnect, device number 80 [ 619.658516][T20587] jffs2: notice: (20587) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 4 orphan) and 7 of xref (0 dead, 5 orphan) found. [ 619.668747][ T5420] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 619.686074][ T5420] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 619.686540][ T5420] ti_usb_3410_5052 13-1:2.0: device disconnected [ 619.800999][T20597] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 9 [ 619.809629][T20600] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4126'. [ 619.836775][T20601] FAULT_INJECTION: forcing a failure. [ 619.836775][T20601] name failslab, interval 1, probability 0, space 0, times 0 [ 619.836810][T20601] CPU: 0 UID: 0 PID: 20601 Comm: syz.8.4125 Tainted: G L syzkaller #0 PREEMPT(full) [ 619.836841][T20601] Tainted: [L]=SOFTLOCKUP [ 619.836849][T20601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 619.836862][T20601] Call Trace: [ 619.836870][T20601] [ 619.836880][T20601] dump_stack_lvl+0x100/0x190 [ 619.836913][T20601] should_fail_ex.cold+0x5/0xa [ 619.836945][T20601] should_failslab+0xc2/0x120 [ 619.836976][T20601] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 619.837004][T20601] ? lock_acquire+0x1d1/0x380 [ 619.837025][T20601] ? cache_create_net+0x2b/0x1f0 [ 619.837060][T20601] kmemdup_noprof+0x29/0x60 [ 619.837084][T20601] cache_create_net+0x2b/0x1f0 [ 619.837120][T20601] unix_gid_cache_create+0x60/0x130 [ 619.837141][T20601] ? __pfx_sunrpc_init_net+0x10/0x10 [ 619.837169][T20601] sunrpc_init_net+0x71/0x1b0 [ 619.837199][T20601] ops_init+0x1e2/0x5f0 [ 619.837222][T20601] setup_net+0x118/0x3a0 [ 619.837246][T20601] ? __pfx_setup_net+0x10/0x10 [ 619.837283][T20601] copy_net_ns+0x345/0x7a0 [ 619.837312][T20601] create_new_namespaces+0x3ea/0xac0 [ 619.837347][T20601] unshare_nsproxy_namespaces+0xf2/0x220 [ 619.837376][T20601] ksys_unshare+0x4a2/0xb30 [ 619.837403][T20601] ? __pfx_ksys_unshare+0x10/0x10 [ 619.837440][T20601] __x64_sys_unshare+0x31/0x40 [ 619.837465][T20601] do_syscall_64+0x123/0x790 [ 619.837497][T20601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.837519][T20601] RIP: 0033:0x7f88e179e559 [ 619.837537][T20601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.837557][T20601] RSP: 002b:00007f88e26cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 619.837578][T20601] RAX: ffffffffffffffda RBX: 00007f88e1a25fa0 RCX: 00007f88e179e559 [ 619.837593][T20601] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 619.837606][T20601] RBP: 00007f88e1835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 619.837619][T20601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.837634][T20601] R13: 00007f88e1a26038 R14: 00007f88e1a25fa0 R15: 00007ffea28dca08 [ 619.837664][T20601] [ 619.888986][T20600] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4126'. [ 619.905239][T20603] FAULT_INJECTION: forcing a failure. [ 619.905239][T20603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.905276][T20603] CPU: 0 UID: 0 PID: 20603 Comm: syz.3.4127 Tainted: G L syzkaller #0 PREEMPT(full) [ 619.905302][T20603] Tainted: [L]=SOFTLOCKUP [ 619.905309][T20603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 619.905321][T20603] Call Trace: [ 619.905328][T20603] [ 619.905337][T20603] dump_stack_lvl+0x100/0x190 [ 619.905368][T20603] should_fail_ex.cold+0x5/0xa [ 619.905396][T20603] _copy_from_user+0x2e/0xd0 [ 619.905424][T20603] do_ipv6_setsockopt+0x73d/0x44a0 [ 619.905454][T20603] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 619.905480][T20603] ? __lock_acquire+0x5c0/0x1f40 [ 619.905504][T20603] ? __lock_acquire+0x5c0/0x1f40 [ 619.905535][T20603] ? reacquire_held_locks+0xdd/0x1f0 [ 619.905557][T20603] ? release_sock+0x21/0x280 [ 619.905579][T20603] ? do_raw_spin_lock+0x128/0x260 [ 619.905605][T20603] ? selinux_netlbl_socket_setsockopt+0x22c/0x470 [ 619.905633][T20603] ? find_held_lock+0x2b/0x80 [ 619.905660][T20603] ? selinux_netlbl_socket_setsockopt+0x22c/0x470 [ 619.905688][T20603] ? selinux_netlbl_socket_setsockopt+0x22c/0x470 [ 619.905718][T20603] ? __local_bh_enable_ip+0xa5/0x120 [ 619.905739][T20603] ? lockdep_hardirqs_on+0x7d/0x110 [ 619.905765][T20603] ? selinux_netlbl_socket_setsockopt+0x22c/0x470 [ 619.905792][T20603] ? __local_bh_enable_ip+0xa5/0x120 [ 619.905817][T20603] ? ipv6_setsockopt+0xcb/0x170 [ 619.905837][T20603] ipv6_setsockopt+0xcb/0x170 [ 619.905860][T20603] rawv6_setsockopt+0xee/0x5a0 [ 619.905881][T20603] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 619.905901][T20603] ? selinux_socket_setsockopt+0x6a/0x80 [ 619.905926][T20603] ? sock_common_setsockopt+0x2e/0xf0 [ 619.905949][T20603] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 619.905974][T20603] do_sock_setsockopt+0xf3/0x1d0 [ 619.906000][T20603] __sys_setsockopt+0x195/0x220 [ 619.906023][T20603] __x64_sys_setsockopt+0xbd/0x160 [ 619.906042][T20603] ? do_syscall_64+0xae/0x790 [ 619.906067][T20603] ? lockdep_hardirqs_on+0x7d/0x110 [ 619.906093][T20603] do_syscall_64+0x123/0x790 [ 619.906123][T20603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.906143][T20603] RIP: 0033:0x7faf2499e559 [ 619.906160][T20603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.906178][T20603] RSP: 002b:00007faf258e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 619.906197][T20603] RAX: ffffffffffffffda RBX: 00007faf24c25fa0 RCX: 00007faf2499e559 [ 619.906229][T20603] RDX: 0000000000000036 RSI: 0000000000000029 RDI: 0000000000000006 [ 619.906242][T20603] RBP: 00007faf24a35ab8 R08: 0000000000000078 R09: 0000000000000000 [ 619.906255][T20603] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000000 [ 619.906272][T20603] R13: 00007faf24c26038 R14: 00007faf24c25fa0 R15: 00007fff15567488 [ 619.906299][T20603] [ 619.995073][T20605] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 1000000 [ 620.211024][T20611] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4130'. [ 620.297499][T20615] jffs2: notice: (20615) jffs2_build_xattr_subsystem: complete building xattr subsystem, 5 of xdatum (0 unchecked, 4 orphan) and 7 of xref (0 dead, 5 orphan) found. [ 620.305161][T20615] netlink: 'syz.7.4133': attribute type 39 has an invalid length. [ 620.356160][T20617] 9pnet_fd: Insufficient options for proto=fd [ 620.627537][T20621] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4135'. [ 620.830647][T20627] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 32 [ 620.975150][T12879] Bluetooth: hci3: command tx timeout [ 621.121062][T20640] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4143'. [ 621.121094][T20640] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4143'. [ 621.295390][ T1462] usb 6-1: USB disconnect, device number 35 [ 621.336403][T20646] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 4000000 [ 621.377787][T20649] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 400 [ 621.625767][T20661] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4153'. [ 621.625788][T20661] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4153'. [ 621.672042][ T43] kauditd_printk_skb: 213 callbacks suppressed [ 621.672062][ T43] audit: type=1400 audit(10606.476:42989): avc: denied { write } for pid=20663 comm="syz.7.4154" name="loop4" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 621.672704][T20664] loop4: detected capacity change from 0 to 2640 [ 621.680371][T14331] buffer_io_error: 10 callbacks suppressed [ 621.680387][T14331] Buffer I/O error on dev loop4, logical block 0, async page read [ 621.694719][T20664] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 621.694769][T20664] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 621.694803][T20664] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 621.694824][T20664] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 621.694857][T20664] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 621.694878][T20664] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 621.694899][T20664] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 621.694919][T20664] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 621.694952][T20664] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 621.710769][T12879] Bluetooth: hci4: unexpected event 0x3e length: 1004 > 255 [ 621.710794][T12879] Bluetooth: hci4: unexpected subevent 0x0d length: 1003 > 260 [ 621.710817][T12879] Bluetooth: hci4: adv larger than maximum supported [ 621.710827][T12879] Bluetooth: hci4: adv larger than maximum supported [ 621.763157][ T43] audit: type=1400 audit(10606.566:42990): avc: denied { mmap_zero } for pid=20663 comm="syz.7.4154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 621.765940][ T43] audit: type=1400 audit(10606.576:42991): avc: denied { allowed } for pid=20663 comm="syz.7.4154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 621.768509][ T43] audit: type=1400 audit(10606.576:42992): avc: denied { map } for pid=20663 comm="syz.7.4154" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=97980 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 621.768841][ T43] audit: type=1400 audit(10606.576:42993): avc: denied { read write } for pid=20663 comm="syz.7.4154" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=97980 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 621.769871][ T43] audit: type=1400 audit(10606.576:42994): avc: denied { map } for pid=20663 comm="syz.7.4154" path="socket:[97979]" dev="sockfs" ino=97979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 621.931725][ T43] audit: type=1400 audit(10606.736:42995): avc: denied { read } for pid=16806 comm="syz-executor" name="loop8" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 621.932068][ T43] audit: type=1400 audit(10606.736:42996): avc: denied { open } for pid=16806 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 621.932406][ T43] audit: type=1400 audit(10606.736:42997): avc: denied { ioctl } for pid=16806 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=664 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 621.998261][T20669] FAULT_INJECTION: forcing a failure. [ 621.998261][T20669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.998294][T20669] CPU: 0 UID: 0 PID: 20669 Comm: syz.8.4156 Tainted: G L syzkaller #0 PREEMPT(full) [ 621.998319][T20669] Tainted: [L]=SOFTLOCKUP [ 621.998325][T20669] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 621.998336][T20669] Call Trace: [ 621.998343][T20669] [ 621.998351][T20669] dump_stack_lvl+0x100/0x190 [ 621.998383][T20669] should_fail_ex.cold+0x5/0xa [ 621.998410][T20669] _copy_from_iter+0x1f4/0x1690 [ 621.998442][T20669] ? __asan_memset+0x23/0x50 [ 621.998465][T20669] ? __pfx__copy_from_iter+0x10/0x10 [ 621.998492][T20669] ? __pfx___alloc_skb+0x10/0x10 [ 621.998522][T20669] netlink_sendmsg+0x808/0xda0 [ 621.998545][T20669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.998564][T20669] ? selinux_socket_sendmsg+0x198/0x2f0 [ 621.998593][T20669] ____sys_sendmsg+0xa4d/0xbe0 [ 621.998617][T20669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.998637][T20669] ? __pfx_____sys_sendmsg+0x10/0x10 [ 621.998667][T20669] ? lock_acquire+0x1d1/0x380 [ 621.998713][T20669] ? get_pid_task+0x2a/0x250 [ 621.998741][T20669] ___sys_sendmsg+0x190/0x1e0 [ 621.998768][T20669] ? __pfx____sys_sendmsg+0x10/0x10 [ 621.998793][T20669] ? get_pid_task+0x106/0x250 [ 621.998829][T20669] ? find_held_lock+0x2b/0x80 [ 621.998933][T20669] __sys_sendmsg+0x160/0x210 [ 621.998957][T20669] ? __pfx___sys_sendmsg+0x10/0x10 [ 621.999015][T20669] do_syscall_64+0x123/0x790 [ 621.999046][T20669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.999065][T20669] RIP: 0033:0x7f88e179e559 [ 621.999082][T20669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.999099][T20669] RSP: 002b:00007f88e26cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 621.999118][T20669] RAX: ffffffffffffffda RBX: 00007f88e1a25fa0 RCX: 00007f88e179e559 [ 621.999131][T20669] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 621.999142][T20669] RBP: 00007f88e26cc090 R08: 0000000000000000 R09: 0000000000000000 [ 621.999153][T20669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.999165][T20669] R13: 00007f88e1a26038 R14: 00007f88e1a25fa0 R15: 00007ffea28dca08 [ 621.999192][T20669] [ 622.083387][ T43] audit: type=1400 audit(10606.886:42998): avc: denied { mounton } for pid=20672 comm="syz.8.4158" path="/246/dev" dev="tmpfs" ino=1385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 622.085352][T20673] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 800 [ 622.097572][ T5760] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 622.176496][T20675] xt_hashlimit: size too large, truncated to 1048576 [ 622.213993][T20678] netlink: 'syz.8.4159': attribute type 11 has an invalid length. [ 622.274310][T20678] bond3: Removing last arp target with arp_interval on [ 622.419364][T20695] could not allocate digest TFM handle md5-generic [ 622.510846][T20710] FAULT_INJECTION: forcing a failure. [ 622.510846][T20710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.510877][T20710] CPU: 1 UID: 0 PID: 20710 Comm: syz.8.4167 Tainted: G L syzkaller #0 PREEMPT(full) [ 622.510899][T20710] Tainted: [L]=SOFTLOCKUP [ 622.510905][T20710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 622.510915][T20710] Call Trace: [ 622.510921][T20710] [ 622.510929][T20710] dump_stack_lvl+0x100/0x190 [ 622.510957][T20710] should_fail_ex.cold+0x5/0xa [ 622.510981][T20710] _copy_to_user+0x32/0xd0 [ 622.511006][T20710] simple_read_from_buffer+0xcb/0x170 [ 622.511032][T20710] proc_fail_nth_read+0x1af/0x230 [ 622.511057][T20710] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 622.511082][T20710] ? rw_verify_area+0xce/0x6d0 [ 622.511099][T20710] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 622.511123][T20710] vfs_read+0x1e4/0xb40 [ 622.511142][T20710] ? lock_acquire+0x1d1/0x380 [ 622.511161][T20710] ? __fget_files+0x34/0x3d0 [ 622.511183][T20710] ? __pfx_vfs_read+0x10/0x10 [ 622.511200][T20710] ? find_held_lock+0x2b/0x80 [ 622.511224][T20710] ? __fget_files+0x215/0x3d0 [ 622.511249][T20710] ? __fget_files+0x21f/0x3d0 [ 622.511278][T20710] ksys_read+0x12a/0x250 [ 622.511297][T20710] ? __pfx_ksys_read+0x10/0x10 [ 622.511323][T20710] do_syscall_64+0x123/0x790 [ 622.511348][T20710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.511365][T20710] RIP: 0033:0x7f88e175ed8e [ 622.511379][T20710] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 622.511395][T20710] RSP: 002b:00007f88e26cbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 622.511418][T20710] RAX: ffffffffffffffda RBX: 00007f88e26cc6c0 RCX: 00007f88e175ed8e [ 622.511428][T20710] RDX: 000000000000000f RSI: 00007f88e26cc0a0 RDI: 0000000000000004 [ 622.511438][T20710] RBP: 00007f88e26cc090 R08: 0000000000000000 R09: 0000000000000000 [ 622.511448][T20710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.511457][T20710] R13: 00007f88e1a26038 R14: 00007f88e1a25fa0 R15: 00007ffea28dca08 [ 622.511481][T20710] [ 622.525099][T20712] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 10000 [ 622.563251][T20714] FAULT_INJECTION: forcing a failure. [ 622.563251][T20714] name fail_futex, interval 1, probability 0, space 0, times 0 [ 622.563284][T20714] CPU: 3 UID: 0 PID: 20714 Comm: syz.8.4169 Tainted: G L syzkaller #0 PREEMPT(full) [ 622.563310][T20714] Tainted: [L]=SOFTLOCKUP [ 622.563318][T20714] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 622.563330][T20714] Call Trace: [ 622.563337][T20714] [ 622.563346][T20714] dump_stack_lvl+0x100/0x190 [ 622.563379][T20714] should_fail_ex.cold+0x5/0xa [ 622.563409][T20714] get_futex_key+0x1d0/0x14f0 [ 622.563442][T20714] ? __pfx_get_futex_key+0x10/0x10 [ 622.563479][T20714] futex_wait_setup+0x91/0x540 [ 622.563508][T20714] __futex_wait+0x19f/0x300 [ 622.563532][T20714] ? __pfx___futex_wait+0x10/0x10 [ 622.563551][T20714] ? __pfx_try_to_wake_up+0x10/0x10 [ 622.563575][T20714] ? futex_hash+0x311/0x400 [ 622.563604][T20714] ? __pfx_futex_wake_mark+0x10/0x10 [ 622.563631][T20714] ? find_held_lock+0x2b/0x80 [ 622.563660][T20714] ? futex_wake+0x4ea/0x5e0 [ 622.563688][T20714] futex_wait+0xe6/0x370 [ 622.563709][T20714] ? __pfx_futex_wait+0x10/0x10 [ 622.563737][T20714] ? kernelmode_fixup_or_oops.isra.0+0x80/0xf0 [ 622.563766][T20714] ? __bad_area_nosemaphore+0x320/0x3f0 [ 622.563802][T20714] do_futex+0x265/0x440 [ 622.563834][T20714] ? __pfx_do_futex+0x10/0x10 [ 622.563865][T20714] ? lockdep_hardirqs_on+0x7d/0x110 [ 622.563894][T20714] ? irqentry_exit+0x24d/0xa10 [ 622.563945][T20714] __x64_sys_futex+0x34f/0x4d0 [ 622.563981][T20714] ? __pfx___x64_sys_futex+0x10/0x10 [ 622.564014][T20714] ? __might_fault+0x111/0x140 [ 622.564043][T20714] do_syscall_64+0x123/0x790 [ 622.564074][T20714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.564095][T20714] RIP: 0033:0x7f88e179e559 [ 622.564111][T20714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.564130][T20714] RSP: 002b:00007f88e26cc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 622.564150][T20714] RAX: ffffffffffffffda RBX: 00007f88e1a25fa8 RCX: 00007f88e179e559 [ 622.564163][T20714] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f88e1a25fa8 [ 622.564176][T20714] RBP: 00007f88e1a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 622.564188][T20714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.564201][T20714] R13: 00007f88e1a26038 R14: 00007ffea28dc920 R15: 00007ffea28dca08 [ 622.564229][T20714] [ 623.048657][T20718] sd 0:0:0:0: PR command failed: 1026 [ 623.048678][T20719] sd 0:0:0:0: PR command failed: 1026 [ 623.048699][T20718] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 623.048736][T20718] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 623.048755][T20719] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 623.048790][T20719] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 623.050948][T20718] ip_tables: iptables: counters copy to user failed while replacing table [ 623.140289][T20723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16502 sclass=netlink_route_socket pid=20723 comm=syz.7.4172 [ 623.262251][T20737] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 20000 [ 623.382735][T20739] rxe_eth0 speed is unknown, defaulting to 1000 [ 623.580281][T20753] __nla_validate_parse: 4 callbacks suppressed [ 623.580296][T20753] netlink: 136 bytes leftover after parsing attributes in process `syz.7.4181'. [ 623.580417][T20754] netlink: 136 bytes leftover after parsing attributes in process `syz.7.4181'. [ 623.641373][T20754] bond0: (slave bond_slave_0): Releasing backup interface [ 623.677785][T20754] bond0: (slave bond_slave_1): Releasing backup interface [ 623.722338][T20754] team0: Port device team_slave_0 removed [ 623.730061][T20754] team0: Port device team_slave_1 removed [ 623.730447][T20754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.730458][T20754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.731426][T20754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.731439][T20754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.732594][T20754] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 623.738615][T20754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=20754 comm=syz.7.4181 [ 623.738896][T20754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=20754 comm=syz.7.4181 [ 623.739612][T20755] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 624.213970][T20760] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4182'. [ 624.214002][T20760] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4182'. [ 624.657405][T12879] Bluetooth: hci0: command 0x1003 tx timeout [ 624.660058][ T5760] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 624.748125][T20766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4185'. [ 624.751360][T20766] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 624.811155][T20770] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 40000 [ 624.849972][T20774] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4189'. [ 624.849993][T20774] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4189'. [ 624.917157][T20781] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4191'. [ 624.917285][T20781] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4191'. [ 624.917396][T20781] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4191'. [ 624.958624][T20772] 9p: Bad value for 'wfdno' [ 625.313713][T20689] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 625.496191][T20803] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 70000 [ 625.550824][T20811] batadv0: entered promiscuous mode [ 625.550890][T20811] macsec1: entered promiscuous mode [ 625.550973][T20811] macsec1: entered allmulticast mode [ 625.550981][T20811] batadv0: entered allmulticast mode [ 625.551581][T20811] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 625.606784][T20812] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 625.606843][T20812] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 625.612593][T20812] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 625.625718][T20812] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 625.625783][T20812] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 625.628048][T20812] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 625.675265][T20812] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 625.675342][T20812] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 625.680465][T20812] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 625.705875][ T5760] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1 [ 625.711002][ T5760] Bluetooth: hci4: unexpected event for opcode 0x203e [ 625.840934][T20835] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 80000 [ 625.882909][T20839] veth1_macvtap: left promiscuous mode [ 625.882927][T20839] macsec0: entered promiscuous mode [ 625.882934][T20839] macsec0: entered allmulticast mode [ 625.893214][T20839] veth1_macvtap: entered promiscuous mode [ 625.893228][T20839] veth1_macvtap: entered allmulticast mode [ 625.893243][T20839] FAULT_INJECTION: forcing a failure. [ 625.893243][T20839] name failslab, interval 1, probability 0, space 0, times 0 [ 625.893260][T20839] CPU: 3 UID: 0 PID: 20839 Comm: syz.3.4212 Tainted: G L syzkaller #0 PREEMPT(full) [ 625.893275][T20839] Tainted: [L]=SOFTLOCKUP [ 625.893279][T20839] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 625.893286][T20839] Call Trace: [ 625.893291][T20839] [ 625.893296][T20839] dump_stack_lvl+0x100/0x190 [ 625.893326][T20839] should_fail_ex.cold+0x5/0xa [ 625.893343][T20839] should_failslab+0xc2/0x120 [ 625.893366][T20839] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 625.893382][T20839] ? __alloc_skb+0x140/0x710 [ 625.893400][T20839] __alloc_skb+0x140/0x710 [ 625.893409][T20839] ? __alloc_skb+0x5b7/0x710 [ 625.893420][T20839] ? __pfx___alloc_skb+0x10/0x10 [ 625.893431][T20839] ? if_nlmsg_size+0x4b/0xdc0 [ 625.893447][T20839] rtmsg_ifinfo_build_skb+0x81/0x260 [ 625.893465][T20839] rtmsg_ifinfo+0xa4/0x1b0 [ 625.893483][T20839] __dev_notify_flags+0x362/0x4b0 [ 625.893497][T20839] ? __pfx___dev_notify_flags+0x10/0x10 [ 625.893510][T20839] ? lock_acquire+0x1d1/0x380 [ 625.893525][T20839] ? do_raw_spin_lock+0x128/0x260 [ 625.893545][T20839] __dev_set_promiscuity+0x21a/0x350 [ 625.893556][T20839] ? netdev_work_dequeue+0x10a/0x310 [ 625.893573][T20839] netif_set_promiscuity+0x52/0xf0 [ 625.893586][T20839] dev_set_promiscuity+0xb2/0x260 [ 625.893601][T20839] macsec_dev_open+0x2b3/0x5a0 [ 625.893620][T20839] ? __pfx_macsec_dev_open+0x10/0x10 [ 625.893637][T20839] ? vxlan_netdevice_event+0x11f/0x370 [ 625.893657][T20839] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 625.893670][T20839] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 625.893686][T20839] ? __pfx_vxlan_netdevice_event+0x10/0x10 [ 625.893703][T20839] ? netconsole_netdev_event+0x5be/0xbc0 [ 625.893719][T20839] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 625.893734][T20839] ? ip6_route_dev_notify+0xe4/0x750 [ 625.893745][T20839] ? ndisc_netdev_event+0xa1/0x560 [ 625.893762][T20839] ? notifier_call_chain+0x31b/0x3f0 [ 625.893782][T20839] ? __pfx_macsec_dev_open+0x10/0x10 [ 625.893799][T20839] __dev_open+0x3ad/0x8f0 [ 625.893813][T20839] ? __pfx___dev_open+0x10/0x10 [ 625.893829][T20839] ? __local_bh_enable_ip+0xa5/0x120 [ 625.893849][T20839] __dev_change_flags+0x596/0x850 [ 625.893862][T20839] ? __pfx___dev_change_flags+0x10/0x10 [ 625.893875][T20839] ? lock_acquire+0x1d1/0x380 [ 625.893889][T20839] ? dev_ioctl+0x331/0x10e0 [ 625.893904][T20839] netif_change_flags+0x8d/0x160 [ 625.893919][T20839] dev_change_flags+0xba/0x260 [ 625.893935][T20839] dev_ifsioc+0x166f/0x1f80 [ 625.893949][T20839] ? __pfx_dev_ifsioc+0x10/0x10 [ 625.893961][T20839] ? __pfx___mutex_lock+0x10/0x10 [ 625.893986][T20839] ? lock_acquire+0x1d1/0x380 [ 625.894001][T20839] ? dev_load+0x8e/0x240 [ 625.894011][T20839] ? dev_load+0x8e/0x240 [ 625.894026][T20839] dev_ioctl+0x342/0x10e0 [ 625.894040][T20839] sock_do_ioctl+0x1a0/0x280 [ 625.894055][T20839] ? __pfx_sock_do_ioctl+0x10/0x10 [ 625.894069][T20839] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 625.894087][T20839] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 625.894100][T20839] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 625.894120][T20839] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 625.894139][T20839] sock_ioctl+0x599/0x6b0 [ 625.894156][T20839] ? __pfx_sock_ioctl+0x10/0x10 [ 625.894176][T20839] ? selinux_file_ioctl+0x13b/0x290 [ 625.894191][T20839] ? selinux_file_ioctl+0xb6/0x290 [ 625.894209][T20839] ? __pfx_sock_ioctl+0x10/0x10 [ 625.894226][T20839] __x64_sys_ioctl+0x18e/0x210 [ 625.894241][T20839] do_syscall_64+0x123/0x790 [ 625.894260][T20839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.894273][T20839] RIP: 0033:0x7faf2499e559 [ 625.894283][T20839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.894295][T20839] RSP: 002b:00007faf258e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 625.894307][T20839] RAX: ffffffffffffffda RBX: 00007faf24c25fa0 RCX: 00007faf2499e559 [ 625.894315][T20839] RDX: 0000200000000240 RSI: 0000000000008914 RDI: 0000000000000003 [ 625.894322][T20839] RBP: 00007faf24a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 625.894329][T20839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.894336][T20839] R13: 00007faf24c26038 R14: 00007faf24c25fa0 R15: 00007fff15567488 [ 625.894353][T20839] [ 625.894454][T20839] macsec0: left promiscuous mode [ 625.894794][T20839] macsec0: left allmulticast mode [ 625.894803][T20839] veth1_macvtap: left allmulticast mode [ 626.042062][T20843] sl0: header compression turned on [ 626.303077][ T3380] asus 0005:0B05:8502.000A: hidraw1: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 626.749515][ T43] kauditd_printk_skb: 203 callbacks suppressed [ 626.749529][ T43] audit: type=1400 audit(10611.546:43202): avc: denied { read write } for pid=20885 comm="syz.8.4223" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 626.749555][ T43] audit: type=1400 audit(10611.546:43203): avc: denied { open } for pid=20885 comm="syz.8.4223" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 626.756941][ T43] audit: type=1400 audit(10611.566:43204): avc: denied { create } for pid=20885 comm="syz.8.4223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 626.756990][ T43] audit: type=1400 audit(10611.566:43205): avc: denied { write } for pid=20885 comm="syz.8.4223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 626.766615][ T43] audit: type=1400 audit(10611.566:43206): avc: denied { read } for pid=20885 comm="syz.8.4223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 626.867249][ T43] audit: type=1400 audit(10611.676:43207): avc: denied { allowed } for pid=20888 comm="syz.7.4224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 626.867298][ T43] audit: type=1400 audit(10611.676:43208): avc: denied { create } for pid=20888 comm="syz.7.4224" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 626.867335][ T43] audit: type=1400 audit(10611.676:43209): avc: denied { map } for pid=20888 comm="syz.7.4224" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=98116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 626.867373][ T43] audit: type=1400 audit(10611.676:43210): avc: denied { read write } for pid=20888 comm="syz.7.4224" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=98116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 626.929548][ T43] audit: type=1400 audit(10611.736:43211): avc: denied { mmap_zero } for pid=20888 comm="syz.7.4224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 626.970834][T20894] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 90000 [ 627.046266][T20899] SELinux: policydb magic number 0x78463d49 does not match expected magic number 0xf97cff8c [ 627.046296][T20899] SELinux: failed to load policy [ 627.320108][T20935] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 320000 [ 627.357147][T20937] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(37) [ 627.357169][T20937] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 627.358543][T20937] vhci_hcd vhci_hcd.0: Device attached [ 627.362742][T20937] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(106) [ 627.362756][T20937] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 627.362807][T20937] vhci_hcd vhci_hcd.0: Device attached [ 627.367306][T20937] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(108) [ 627.367318][T20937] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 627.367367][T20937] vhci_hcd vhci_hcd.0: Device attached [ 627.368495][T20937] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(110) [ 627.368507][T20937] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 627.368550][T20937] vhci_hcd vhci_hcd.0: Device attached [ 627.369754][T20937] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(112) [ 627.369766][T20937] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 627.369855][T20937] vhci_hcd vhci_hcd.0: Device attached [ 627.370789][T20937] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(114) [ 627.370801][T20937] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 627.370830][T20937] vhci_hcd vhci_hcd.0: Device attached [ 627.373164][T20937] vhci_hcd vhci_hcd.0: pdev(8) rhport(6) sockfd(116) [ 627.373176][T20937] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 627.373231][T20937] vhci_hcd vhci_hcd.0: Device attached [ 627.374111][T20937] vhci_hcd vhci_hcd.0: pdev(8) rhport(7) sockfd(121) [ 627.374123][T20937] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 627.374143][T20937] vhci_hcd vhci_hcd.0: Device attached [ 627.377732][T20937] vhci_hcd vhci_hcd.0: port 0 already used [ 627.465531][ T44] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 627.594624][ T30] usb 53-1: new high-speed USB device number 2 using vhci_hcd [ 627.614998][ T5760] Bluetooth: hci1: command 0x0c1a tx timeout [ 627.615312][ T44] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 627.620599][ T44] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.620618][ T44] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.620636][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.632171][ T44] metro_usb 6-1:1.0: Metrologic USB to Serial converter detected [ 627.636178][ T44] usb 6-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 627.704804][ T5760] Bluetooth: hci3: command 0x0c1a tx timeout [ 627.830223][T20922] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90 [ 627.833258][ T44] usb 6-1: USB disconnect, device number 36 [ 627.840490][ T44] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 627.840918][ T44] metro_usb 6-1:1.0: device disconnected [ 627.901870][T20956] vhci_hcd: connection closed [ 627.902069][ T12] vhci_hcd vhci_hcd.8: stop threads [ 627.902088][ T12] vhci_hcd vhci_hcd.8: release socket [ 627.902143][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 627.903061][T20954] vhci_hcd: connection closed [ 627.903175][T20952] vhci_hcd: connection closed [ 627.905117][T20948] vhci_hcd: connection closed [ 627.905301][T20946] vhci_hcd: connection closed [ 627.905402][T20943] vhci_hcd: connection closed [ 627.905690][T20950] vhci_hcd: connection closed [ 627.910136][ T12] vhci_hcd vhci_hcd.8: stop threads [ 627.910149][ T12] vhci_hcd vhci_hcd.8: release socket [ 627.910220][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 627.910352][ T12] vhci_hcd vhci_hcd.8: stop threads [ 627.910361][ T12] vhci_hcd vhci_hcd.8: release socket [ 627.910401][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 627.910494][ T12] vhci_hcd vhci_hcd.8: stop threads [ 627.910502][ T12] vhci_hcd vhci_hcd.8: release socket [ 627.910539][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 627.910661][ T12] vhci_hcd vhci_hcd.8: stop threads [ 627.910670][ T12] vhci_hcd vhci_hcd.8: release socket [ 627.910706][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 627.910786][ T12] vhci_hcd vhci_hcd.8: stop threads [ 627.910794][ T12] vhci_hcd vhci_hcd.8: release socket [ 627.910829][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 627.910978][ T12] vhci_hcd vhci_hcd.8: stop threads [ 627.910987][ T12] vhci_hcd vhci_hcd.8: release socket [ 627.911020][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 627.911567][T20941] vhci_hcd: connection reset by peer [ 627.911765][ T12] vhci_hcd vhci_hcd.8: stop threads [ 627.911775][ T12] vhci_hcd vhci_hcd.8: release socket [ 627.911814][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 627.942203][T20977] binder: 20976:20977 ioctl 40046210 0 returned -14 [ 628.280496][T20986] nvme_fabrics: missing parameter 'transport=%s' [ 628.280513][T20986] nvme_fabrics: missing parameter 'nqn=%s' [ 628.282844][T20986] FAULT_INJECTION: forcing a failure. [ 628.282844][T20986] name failslab, interval 1, probability 0, space 0, times 0 [ 628.282874][T20986] CPU: 0 UID: 0 PID: 20986 Comm: syz.3.4245 Tainted: G L syzkaller #0 PREEMPT(full) [ 628.282900][T20986] Tainted: [L]=SOFTLOCKUP [ 628.282907][T20986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 628.282918][T20986] Call Trace: [ 628.282925][T20986] [ 628.282933][T20986] dump_stack_lvl+0x100/0x190 [ 628.282964][T20986] should_fail_ex.cold+0x5/0xa [ 628.282990][T20986] should_failslab+0xc2/0x120 [ 628.283032][T20986] kmem_cache_alloc_noprof+0x92/0x6a0 [ 628.283059][T20986] ? anon_vma_fork+0x19a/0x6a0 [ 628.283082][T20986] anon_vma_fork+0x19a/0x6a0 [ 628.283106][T20986] dup_mmap+0x10e6/0x2370 [ 628.283145][T20986] ? __pfx_dup_mmap+0x10/0x10 [ 628.283168][T20986] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 628.283196][T20986] ? lockdep_hardirqs_on+0x7d/0x110 [ 628.283224][T20986] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 628.283254][T20986] ? __lock_acquire+0x5c0/0x1f40 [ 628.283286][T20986] ? lock_acquire+0x1d1/0x380 [ 628.283306][T20986] ? copy_process+0x5079/0x8430 [ 628.283339][T20986] copy_process+0x5084/0x8430 [ 628.283375][T20986] ? __pfx_copy_process+0x10/0x10 [ 628.283403][T20986] ? _copy_from_user+0x59/0xd0 [ 628.283433][T20986] kernel_clone+0x176/0x9d0 [ 628.283457][T20986] ? __pfx_kernel_clone+0x10/0x10 [ 628.283487][T20986] ? __pfx_futex_wake+0x10/0x10 [ 628.283512][T20986] __do_sys_clone3+0x214/0x290 [ 628.283535][T20986] ? __pfx___do_sys_clone3+0x10/0x10 [ 628.283592][T20986] do_syscall_64+0x123/0x790 [ 628.283622][T20986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.283644][T20986] RIP: 0033:0x7faf2499e559 [ 628.283660][T20986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.283685][T20986] RSP: 002b:00007faf258e5ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 628.283707][T20986] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007faf2499e559 [ 628.283720][T20986] RDX: 00007faf258e5f10 RSI: 0000000000000058 RDI: 00007faf258e5f10 [ 628.283732][T20986] RBP: 00007faf24a35ab8 R08: 0000000000000000 R09: 0000000000000058 [ 628.283744][T20986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.283756][T20986] R13: 00007faf24c26038 R14: 00007faf24c25fa0 R15: 00007fff15567488 [ 628.283783][T20986] [ 628.461813][T20999] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 80000000000 [ 628.499396][T21003] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 628.543609][T21008] rxe_eth0 speed is unknown, defaulting to 1000 [ 628.546087][T21010] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 32000000 [ 628.756618][T21023] usb 1-1: USB disconnect, device number 3 [ 628.825369][T21028] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 1000000000000 [ 628.868785][T21031] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 628.868807][T21031] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 628.870034][T21031] vhci_hcd vhci_hcd.0: Device attached [ 628.871218][T21032] vhci_hcd: unknown pdu 2 [ 628.878714][T14539] vhci_hcd vhci_hcd.3: stop threads [ 628.878730][T14539] vhci_hcd vhci_hcd.3: release socket [ 628.878748][T14539] vhci_hcd vhci_hcd.3: disconnect device [ 628.922427][T21036] ima: policy update failed [ 628.933538][T21039] netlink: 'syz.8.4263': attribute type 10 has an invalid length. [ 628.933552][T21039] __nla_validate_parse: 76 callbacks suppressed [ 628.933559][T21039] netlink: 55 bytes leftover after parsing attributes in process `syz.8.4263'. [ 629.381125][T21062] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 2000000000000 [ 629.491559][T21067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21067 comm=syz.7.4275 [ 629.632876][T21075] openvswitch: netlink: Message has 8 unknown bytes. [ 629.704754][ T5760] Bluetooth: hci1: command 0x0c1a tx timeout [ 629.784712][ T5760] Bluetooth: hci3: command 0x0c1a tx timeout [ 629.784767][T12879] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 629.784823][T12879] Bluetooth: hci4: Injecting HCI hardware error event [ 629.791367][T21091] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 4000000000000 [ 629.813165][ T5760] Bluetooth: hci4: hardware error 0x00 [ 629.889883][T21101] IPv6: NLM_F_CREATE should be specified when creating new route [ 629.957293][T21113] random: crng reseeded on system resumption [ 629.965315][T21100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4289'. [ 630.204273][T21127] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 7000000000000 [ 630.348048][T21144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4303'. [ 630.389164][T21148] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4301'. [ 630.509643][T21154] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 100000000000000 [ 630.538243][T21157] netlink: 'syz.8.4308': attribute type 16 has an invalid length. [ 630.538263][T21157] netlink: 64138 bytes leftover after parsing attributes in process `syz.8.4308'. [ 630.538884][T21157] netlink: 'syz.8.4308': attribute type 10 has an invalid length. [ 630.543038][T21157] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 630.545689][T21157] .`: (slave netdevsim1): Enslaving as an active interface with an up link [ 630.584190][T21160] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 630.596418][T21160] XFS (nbd3): SB validate failed with error -5. [ 630.728201][T21184] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 200000000000000 [ 631.042805][T21221] binder: 21220:21221 ioctl c0a85320 2000000003c0 returned -22 [ 631.050759][T21221] binder: 21220:21221 ioctl 40806685 2000000016c0 returned -22 [ 631.076386][T21221] binder: 21220:21221 ioctl c0a85320 200000000480 returned -22 [ 631.210410][T21229] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 400000000000000 [ 631.301969][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 631.430895][T21210] .`: (slave netdevsim1): Releasing backup interface [ 631.443590][T12879] Bluetooth: hci4: unexpected event for opcode 0x0c05 [ 631.655540][T21270] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 800000000000000 [ 631.773028][ T43] kauditd_printk_skb: 2963 callbacks suppressed [ 631.773050][ T43] audit: type=1400 audit(10616.576:46175): avc: denied { create } for pid=21281 comm="syz.3.4347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 631.774411][ T43] audit: type=1400 audit(10616.576:46176): avc: denied { write } for pid=21281 comm="syz.3.4347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 631.784932][T12879] Bluetooth: hci1: command 0x0c1a tx timeout [ 631.864698][T12879] Bluetooth: hci3: command 0x0c1a tx timeout [ 631.935054][ T5760] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 632.216077][ T43] audit: type=1400 audit(10617.026:46177): avc: denied { mount } for pid=21290 comm="syz.7.4348" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 632.219164][ T43] audit: type=1400 audit(10617.026:46178): avc: denied { module_request } for pid=21290 comm="syz.7.4348" kmod="nvme-(null)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 632.246846][T21291] nvme_fabrics: missing parameter 'transport=%s' [ 632.246862][T21291] nvme_fabrics: missing parameter 'nqn=%s' [ 632.250101][ T43] audit: type=1400 audit(10617.056:46179): avc: denied { read write } for pid=21290 comm="syz.7.4348" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 632.250151][ T43] audit: type=1400 audit(10617.056:46180): avc: denied { open } for pid=21290 comm="syz.7.4348" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 632.250983][T21291] FAULT_INJECTION: forcing a failure. [ 632.250983][T21291] name failslab, interval 1, probability 0, space 0, times 0 [ 632.251014][T21291] CPU: 3 UID: 0 PID: 21291 Comm: syz.7.4348 Tainted: G L syzkaller #0 PREEMPT(full) [ 632.251042][T21291] Tainted: [L]=SOFTLOCKUP [ 632.251050][T21291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 632.251063][T21291] Call Trace: [ 632.251070][T21291] [ 632.251078][T21291] dump_stack_lvl+0x100/0x190 [ 632.251142][T21291] should_fail_ex.cold+0x5/0xa [ 632.251171][T21291] should_failslab+0xc2/0x120 [ 632.251205][T21291] kmem_cache_alloc_noprof+0x92/0x6a0 [ 632.251230][T21291] ? lockdep_init_map_type+0x5c/0x250 [ 632.251256][T21291] ? copy_process+0x503a/0x8430 [ 632.251285][T21291] copy_process+0x503a/0x8430 [ 632.251306][T21291] ? futex_unqueue+0x133/0x2c0 [ 632.251350][T21291] ? __pfx_copy_process+0x10/0x10 [ 632.251378][T21291] ? _copy_from_user+0x59/0xd0 [ 632.251411][T21291] kernel_clone+0x176/0x9d0 [ 632.251438][T21291] ? __pfx_kernel_clone+0x10/0x10 [ 632.251476][T21291] __do_sys_clone3+0x214/0x290 [ 632.251500][T21291] ? __pfx___do_sys_clone3+0x10/0x10 [ 632.251560][T21291] do_syscall_64+0x123/0x790 [ 632.251598][T21291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.251619][T21291] RIP: 0033:0x7f91be79e559 [ 632.251637][T21291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.251662][T21291] RSP: 002b:00007f91bf73cef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 632.251683][T21291] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f91be79e559 [ 632.251696][T21291] RDX: 00007f91bf73cf10 RSI: 0000000000000058 RDI: 00007f91bf73cf10 [ 632.251709][T21291] RBP: 00007f91be835ab8 R08: 0000000000000000 R09: 0000000000000058 [ 632.251723][T21291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.251735][T21291] R13: 00007f91bea26038 R14: 00007f91bea25fa0 R15: 00007ffd706b7978 [ 632.251765][T21291] [ 632.257803][ T43] audit: type=1400 audit(10617.066:46181): avc: denied { read write } for pid=21290 comm="syz.7.4348" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 632.257853][ T43] audit: type=1400 audit(10617.066:46182): avc: denied { open } for pid=21290 comm="syz.7.4348" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 632.260492][ T43] audit: type=1400 audit(10617.066:46183): avc: denied { ioctl } for pid=21290 comm="syz.7.4348" path="/dev/dri/card0" dev="devtmpfs" ino=635 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 632.272489][ T43] audit: type=1400 audit(10617.066:46184): avc: denied { mount } for pid=21290 comm="syz.7.4348" name="/" dev="autofs" ino=102031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 632.384023][T21302] Could not find key with description: [syz] [ 632.384037][T21302] process_request_key_err: No key [ 632.384045][T21302] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 632.384054][T21302] One or more global auth toks could not properly register; rc = [-2] [ 632.384082][T21302] Error validating options; rc = [-2] [ 632.502434][T21318] batman_adv: batadv0: Adding interface: syzkaller0 [ 632.502446][T21318] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.502568][T21318] batman_adv: batadv0: Interface activated: syzkaller0 [ 632.524172][T21320] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 632.524196][T21320] overlayfs: failed to set xattr on upper [ 632.524204][T21320] overlayfs: ...falling back to redirect_dir=nofollow. [ 632.524212][T21320] overlayfs: ...falling back to index=off. [ 632.524219][T21320] overlayfs: ...falling back to uuid=null. [ 632.724712][ T30] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 633.243522][T21308] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 633.261822][T21308] batman_adv: batadv0: Removing interface: syzkaller0 [ 633.391901][T21338] nvme_fabrics: missing parameter 'transport=%s' [ 633.391919][T21338] nvme_fabrics: missing parameter 'nqn=%s' [ 633.395051][T21338] FAULT_INJECTION: forcing a failure. [ 633.395051][T21338] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 633.395080][T21338] CPU: 0 UID: 0 PID: 21338 Comm: syz.8.4362 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.395106][T21338] Tainted: [L]=SOFTLOCKUP [ 633.395113][T21338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 633.395124][T21338] Call Trace: [ 633.395132][T21338] [ 633.395140][T21338] dump_stack_lvl+0x100/0x190 [ 633.395172][T21338] should_fail_ex.cold+0x5/0xa [ 633.395195][T21338] ? prepare_alloc_pages+0x16d/0x5b0 [ 633.395225][T21338] should_fail_alloc_page+0xeb/0x140 [ 633.395255][T21338] prepare_alloc_pages+0x1f0/0x5b0 [ 633.395293][T21338] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 633.395322][T21338] ? prepare_alloc_pages+0x151/0x5b0 [ 633.395350][T21338] ? is_bpf_text_address+0x94/0x1a0 [ 633.395381][T21338] ? rcu_is_watching+0x13/0xc0 [ 633.395410][T21338] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 633.395437][T21338] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 633.395466][T21338] ? stack_trace_save+0x8e/0xc0 [ 633.395487][T21338] ? __pfx_stack_trace_save+0x10/0x10 [ 633.395505][T21338] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 633.395527][T21338] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 633.395549][T21338] ? is_bpf_text_address+0x94/0x1a0 [ 633.395581][T21338] ? kasan_save_track+0x14/0x30 [ 633.395605][T21338] ? __kasan_slab_alloc+0x89/0x90 [ 633.395629][T21338] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 633.395653][T21338] ? alloc_vmap_area+0x1814/0x2bb0 [ 633.395676][T21338] ? __get_vm_area_node+0x1ed/0x350 [ 633.395701][T21338] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 633.395728][T21338] ? __vmalloc_node_noprof+0xad/0xf0 [ 633.395754][T21338] ? copy_process+0x80b/0x8430 [ 633.395775][T21338] ? kernel_clone+0x176/0x9d0 [ 633.395796][T21338] ? __do_sys_clone3+0x214/0x290 [ 633.395815][T21338] ? do_syscall_64+0x123/0x790 [ 633.395842][T21338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.395871][T21338] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 633.395902][T21338] ? policy_nodemask+0xed/0x4f0 [ 633.395933][T21338] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 633.395971][T21338] __kasan_populate_vmalloc+0xf0/0x210 [ 633.396001][T21338] alloc_vmap_area+0x95d/0x2bb0 [ 633.396034][T21338] ? kasan_save_track+0x14/0x30 [ 633.396058][T21338] ? __kasan_kmalloc+0xaa/0xb0 [ 633.396082][T21338] ? __pfx_alloc_vmap_area+0x10/0x10 [ 633.396109][T21338] ? __get_vm_area_node+0x124/0x350 [ 633.396157][T21338] __get_vm_area_node+0x1ed/0x350 [ 633.396191][T21338] __vmalloc_node_range_noprof+0x268/0x1420 [ 633.396221][T21338] ? kernel_clone+0x176/0x9d0 [ 633.396242][T21338] ? lock_acquire+0x1d1/0x380 [ 633.396278][T21338] ? kernel_clone+0x176/0x9d0 [ 633.396301][T21338] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 633.396326][T21338] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 633.396358][T21338] ? rcu_is_watching+0x13/0xc0 [ 633.396386][T21338] ? trace_kmem_cache_alloc+0xdd/0x100 [ 633.396417][T21338] ? kernel_clone+0x176/0x9d0 [ 633.396439][T21338] __vmalloc_node_noprof+0xad/0xf0 [ 633.396466][T21338] ? kernel_clone+0x176/0x9d0 [ 633.396491][T21338] copy_process+0x80b/0x8430 [ 633.396511][T21338] ? futex_unqueue+0x133/0x2c0 [ 633.396536][T21338] ? futex_unqueue+0x133/0x2c0 [ 633.396574][T21338] ? __pfx_copy_process+0x10/0x10 [ 633.396602][T21338] ? _copy_from_user+0x59/0xd0 [ 633.396632][T21338] kernel_clone+0x176/0x9d0 [ 633.396656][T21338] ? __pfx_kernel_clone+0x10/0x10 [ 633.396692][T21338] __do_sys_clone3+0x214/0x290 [ 633.396714][T21338] ? __pfx___do_sys_clone3+0x10/0x10 [ 633.396768][T21338] do_syscall_64+0x123/0x790 [ 633.396799][T21338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.396818][T21338] RIP: 0033:0x7f88e179e559 [ 633.396835][T21338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.396854][T21338] RSP: 002b:00007f88e26cbef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 633.396874][T21338] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f88e179e559 [ 633.396886][T21338] RDX: 00007f88e26cbf10 RSI: 0000000000000058 RDI: 00007f88e26cbf10 [ 633.396899][T21338] RBP: 00007f88e1835ab8 R08: 0000000000000000 R09: 0000000000000058 [ 633.396911][T21338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.396922][T21338] R13: 00007f88e1a26038 R14: 00007f88e1a25fa0 R15: 00007ffea28dca08 [ 633.396948][T21338] [ 633.397058][T21338] syz.8.4362: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 633.397164][T21338] CPU: 0 UID: 0 PID: 21338 Comm: syz.8.4362 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.397192][T21338] Tainted: [L]=SOFTLOCKUP [ 633.397201][T21338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 633.397212][T21338] Call Trace: [ 633.397219][T21338] [ 633.397227][T21338] dump_stack_lvl+0x100/0x190 [ 633.397257][T21338] warn_alloc.cold+0x9e/0xb2 [ 633.397284][T21338] ? __pfx_warn_alloc+0x10/0x10 [ 633.397306][T21338] ? lockdep_hardirqs_on+0x7d/0x110 [ 633.397337][T21338] ? __get_vm_area_node+0x2f0/0x350 [ 633.397371][T21338] ? __get_vm_area_node+0x22b/0x350 [ 633.397403][T21338] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 633.397433][T21338] ? lock_acquire+0x1d1/0x380 [ 633.397463][T21338] ? kernel_clone+0x176/0x9d0 [ 633.397486][T21338] ? __memcg_slab_post_alloc_hook+0x71e/0x10c0 [ 633.397510][T21338] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 633.397541][T21338] ? rcu_is_watching+0x13/0xc0 [ 633.397568][T21338] ? trace_kmem_cache_alloc+0xdd/0x100 [ 633.397598][T21338] ? kernel_clone+0x176/0x9d0 [ 633.397618][T21338] __vmalloc_node_noprof+0xad/0xf0 [ 633.397645][T21338] ? kernel_clone+0x176/0x9d0 [ 633.397669][T21338] copy_process+0x80b/0x8430 [ 633.397690][T21338] ? futex_unqueue+0x133/0x2c0 [ 633.397715][T21338] ? futex_unqueue+0x133/0x2c0 [ 633.397752][T21338] ? __pfx_copy_process+0x10/0x10 [ 633.397780][T21338] ? _copy_from_user+0x59/0xd0 [ 633.397810][T21338] kernel_clone+0x176/0x9d0 [ 633.397833][T21338] ? __pfx_kernel_clone+0x10/0x10 [ 633.397869][T21338] __do_sys_clone3+0x214/0x290 [ 633.397891][T21338] ? __pfx___do_sys_clone3+0x10/0x10 [ 633.397946][T21338] do_syscall_64+0x123/0x790 [ 633.397975][T21338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.397994][T21338] RIP: 0033:0x7f88e179e559 [ 633.398009][T21338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.398027][T21338] RSP: 002b:00007f88e26cbef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 633.398044][T21338] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f88e179e559 [ 633.398056][T21338] RDX: 00007f88e26cbf10 RSI: 0000000000000058 RDI: 00007f88e26cbf10 [ 633.398069][T21338] RBP: 00007f88e1835ab8 R08: 0000000000000000 R09: 0000000000000058 [ 633.398082][T21338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.398094][T21338] R13: 00007f88e1a26038 R14: 00007f88e1a25fa0 R15: 00007ffea28dca08 [ 633.398121][T21338] [ 633.398129][T21338] Mem-Info: [ 633.398137][T21338] active_anon:10387 inactive_anon:367 isolated_anon:0 [ 633.398137][T21338] active_file:5115 inactive_file:23984 isolated_file:0 [ 633.398137][T21338] unevictable:1000 dirty:253 writeback:0 [ 633.398137][T21338] slab_reclaimable:9299 slab_unreclaimable:90899 [ 633.398137][T21338] mapped:26999 shmem:1159 pagetables:4304 [ 633.398137][T21338] sec_pagetables:309 bounce:0 [ 633.398137][T21338] kernel_misc_reclaimable:0 [ 633.398137][T21338] free:418090 free_pcp:19677 free_cma:0 [ 633.398184][T21338] Node 0 active_anon:41524kB inactive_anon:1468kB active_file:20460kB inactive_file:95704kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:58756kB dirty:1000kB writeback:0kB shmem:2636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19200kB pagetables:15892kB sec_pagetables:1236kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 633.398232][T21338] Node 1 active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:49240kB dirty:12kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:1324kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 633.398342][T21338] Node 0 DMA free:15268kB boost:0kB min:344kB low:428kB high:512kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:0kB free_cma:0kB [ 633.398395][T21338] lowmem_reserve[]: 0 1204 1204 1204 1204 [ 633.398432][T21338] Node 0 DMA32 free:184300kB boost:0kB min:27108kB low:33884kB high:40660kB reserved_highatomic:0kB free_highatomic:0kB active_anon:41524kB inactive_anon:1468kB active_file:20460kB inactive_file:95704kB unevictable:2000kB writepending:1000kB zspages:0kB present:2080628kB managed:1233664kB mlocked:0kB bounce:0kB free_pcp:62724kB local_pcp:18976kB free_cma:0kB [ 633.398489][T21338] lowmem_reserve[]: 0 0 0 0 0 [ 633.398519][T21338] Node 1 Normal free:1472792kB boost:0kB min:40124kB low:50152kB high:60180kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:2000kB writepending:12kB zspages:2360kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:15948kB local_pcp:160kB free_cma:0kB [ 633.398570][T21338] lowmem_reserve[]: 0 0 0 0 0 [ 633.398601][T21338] Node 0 DMA: 7*4kB (UM) 7*8kB (UM) 7*16kB (UM) 7*32kB (UM) 6*64kB (UM) 7*128kB (UM) 7*256kB (UM) 5*512kB (UM) 7*1024kB (UM) 1*2048kB (U) 0*4096kB = 15268kB [ 633.398767][T21338] Node 0 DMA32: 1423*4kB (UME) 1009*8kB (UME) 472*16kB (UME) 1177*32kB (UM) 296*64kB (UME) 173*128kB (UME) 139*256kB (UME) 47*512kB (UM) 22*1024kB (UM) 1*2048kB (M) 0*4096kB = 184292kB [ 633.398907][T21338] Node 1 Normal: 548*4kB (UM) 221*8kB (UME) 266*16kB (UME) 236*32kB (UME) 230*64kB (UME) 224*128kB (UME) 200*256kB (UME) 193*512kB (UM) 148*1024kB (UME) 9*2048kB (UME) 267*4096kB (UM) = 1472792kB [ 633.399052][T21338] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 633.399067][T21338] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 633.399081][T21338] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 633.399095][T21338] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 633.399172][T21338] 30303 total pagecache pages [ 633.399181][T21338] 54 pages in swap cache [ 633.399188][T21338] Free swap = 119164kB [ 633.399195][T21338] Total swap = 124996kB [ 633.399203][T21338] 1048443 pages RAM [ 633.399210][T21338] 0 pages HighMem/MovableOnly [ 633.399217][T21338] 290717 pages reserved [ 633.399224][T21338] 0 pages cma reserved [ 633.535264][T21342] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 633.535676][T21347] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev e00000000000000 [ 633.555152][ C2] Illegal XDP return value 16128 on prog (id 651) dev veth0_to_bridge, expect packet loss! [ 634.050894][T21378] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4377'. [ 634.050916][T21378] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4377'. [ 634.131097][T21381] bcache: register_bcache() error : failed to open device [ 634.346053][T21388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4380'. [ 634.375978][T21393] FAULT_INJECTION: forcing a failure. [ 634.375978][T21393] name failslab, interval 1, probability 0, space 0, times 0 [ 634.376003][T21393] CPU: 2 UID: 0 PID: 21393 Comm: syz.8.4384 Tainted: G L syzkaller #0 PREEMPT(full) [ 634.376024][T21393] Tainted: [L]=SOFTLOCKUP [ 634.376029][T21393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 634.376038][T21393] Call Trace: [ 634.376043][T21393] [ 634.376049][T21393] dump_stack_lvl+0x100/0x190 [ 634.376076][T21393] should_fail_ex.cold+0x5/0xa [ 634.376098][T21393] should_failslab+0xc2/0x120 [ 634.376120][T21393] __kmalloc_noprof+0xfc/0x840 [ 634.376138][T21393] ? rcu_is_watching+0x13/0xc0 [ 634.376159][T21393] ? tomoyo_realpath_from_path+0xb6/0x690 [ 634.376188][T21393] tomoyo_realpath_from_path+0xb6/0x690 [ 634.376215][T21393] tomoyo_path_number_perm+0x23c/0x580 [ 634.376234][T21393] ? tomoyo_path_number_perm+0x22e/0x580 [ 634.376255][T21393] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 634.376282][T21393] ? __lock_acquire+0x5c0/0x1f40 [ 634.376310][T21393] ? __fget_files+0x34/0x3d0 [ 634.376336][T21393] ? find_held_lock+0x2b/0x80 [ 634.376356][T21393] ? hook_file_ioctl_common+0x140/0x440 [ 634.376372][T21393] ? __fget_files+0x21f/0x3d0 [ 634.376391][T21393] security_file_ioctl+0xd3/0x230 [ 634.376408][T21393] __x64_sys_ioctl+0xb7/0x210 [ 634.376423][T21393] do_syscall_64+0x123/0x790 [ 634.376442][T21393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.376454][T21393] RIP: 0033:0x7f88e179e559 [ 634.376464][T21393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.376475][T21393] RSP: 002b:00007f88e26cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 634.376486][T21393] RAX: ffffffffffffffda RBX: 00007f88e1a25fa0 RCX: 00007f88e179e559 [ 634.376493][T21393] RDX: 0000200000001280 RSI: 00000000c0845657 RDI: 0000000000000003 [ 634.376500][T21393] RBP: 00007f88e26cc090 R08: 0000000000000000 R09: 0000000000000000 [ 634.376507][T21393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.376514][T21393] R13: 00007f88e1a26038 R14: 00007f88e1a25fa0 R15: 00007ffea28dca08 [ 634.376530][T21393] [ 634.376535][T21393] ERROR: Out of memory at tomoyo_realpath_from_path. [ 634.730761][T21410] netlink: 'syz.1.4388': attribute type 1 has an invalid length. [ 634.743691][T21410] bond2: entered promiscuous mode [ 634.743938][T21410] 8021q: adding VLAN 0 to HW filter on device bond2 [ 634.749548][T21410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4388'. [ 634.749610][T21410] bond2: entered allmulticast mode [ 634.765261][T21410] bond2: (slave bridge1): making interface the new active one [ 634.765277][T21410] bridge1: entered promiscuous mode [ 634.765413][T21410] bridge1: entered allmulticast mode [ 634.766086][T21410] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 634.791993][T21410] can: request_module (can-proto-4) failed. [ 635.258427][T21440] overlayfs: failed to clone upperpath [ 635.643966][T21474] bond1: option downdelay: invalid value (18446744073709551615) [ 635.643991][T21474] bond1: option downdelay: allowed values 0 - 2147483647 [ 635.646548][T21474] bond1 (unregistering): Released all slaves [ 636.064558][T21492] BEET mode doesn't support inner IPv4 fragments [ 636.195160][ T30] usb 13-1: new low-speed USB device number 81 using dummy_hcd [ 636.347949][ T30] usb 13-1: unable to get BOS descriptor or descriptor too short [ 636.347991][ T30] usb 13-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 636.349102][ T30] usb 13-1: config 142 has an invalid interface number: 251 but max is 0 [ 636.349126][ T30] usb 13-1: config 142 has no interface number 0 [ 636.349153][ T30] usb 13-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 636.349174][ T30] usb 13-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 636.349194][ T30] usb 13-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 636.349216][ T30] usb 13-1: config 142 interface 251 has no altsetting 0 [ 636.352415][ T30] usb 13-1: string descriptor 0 read error: -22 [ 636.352518][ T30] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.357011][T21490] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 636.357152][T21490] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 636.358734][ T30] cypress_m8 13-1:142.251: HID->COM RS232 Adapter converter detected [ 636.364230][ T30] usb 13-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 636.404991][T21470] ceph: No mds server is up or the cluster is laggy [ 636.424939][ T5444] veth0_vlan: left promiscuous mode [ 636.443715][ T5420] veth0_vlan: entered promiscuous mode [ 636.655227][T21518] bond0: (slave veth0_to_bond): Releasing backup interface [ 636.689408][T21518] veth0_to_bond: left allmulticast mode [ 636.793757][ T43] kauditd_printk_skb: 242 callbacks suppressed [ 636.793777][ T43] audit: type=1400 audit(10621.596:46427): avc: denied { create } for pid=21534 comm="syz.3.4430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 636.796713][ T43] audit: type=1400 audit(10621.606:46428): avc: denied { write } for pid=21534 comm="syz.3.4430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 636.797308][ T43] audit: type=1400 audit(10621.606:46429): avc: denied { read } for pid=21534 comm="syz.3.4430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 636.798591][ T43] audit: type=1400 audit(10621.606:46430): avc: denied { ioctl } for pid=21534 comm="syz.3.4430" path="socket:[103594]" dev="sockfs" ino=103594 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 636.801457][ T43] audit: type=1400 audit(10621.606:46431): avc: denied { accept } for pid=21534 comm="syz.3.4430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 636.867609][ T43] audit: type=1400 audit(10621.676:46432): avc: denied { create } for pid=21539 comm="syz.7.4438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 636.868467][ T43] audit: type=1400 audit(10621.676:46433): avc: denied { map_create } for pid=21539 comm="syz.7.4438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 636.868507][ T43] audit: type=1400 audit(10621.676:46434): avc: denied { map_read map_write } for pid=21539 comm="syz.7.4438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 636.868856][ T43] audit: type=1400 audit(10621.676:46435): avc: denied { prog_load } for pid=21539 comm="syz.7.4438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 636.871081][ T43] audit: type=1400 audit(10621.676:46436): avc: denied { prog_run } for pid=21539 comm="syz.7.4438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 637.284293][ C1] usb 13-1: cypress_write_int_callback - unexpected nonzero write status received: -71 [ 637.284321][ C1] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 637.284709][ C1] usb 13-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 637.299462][T21560] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4437'. [ 637.299511][T21560] netlink: 9 bytes leftover after parsing attributes in process `syz.7.4437'. [ 637.370690][T21563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.375934][T21564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.427208][T21571] netlink: 'syz.7.4441': attribute type 4 has an invalid length. [ 637.427229][T21571] netlink: 152 bytes leftover after parsing attributes in process `syz.7.4441'. [ 637.432389][T21571] .`: renamed from bond0 (while UP) [ 637.512644][T21573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4440'. [ 637.512666][T21573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4440'. [ 637.519254][T21573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4440'. [ 637.534921][ T9800] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.534960][ T9800] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.534986][ T9800] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.535004][ T9800] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.745916][ T64] usb 13-1: USB disconnect, device number 81 [ 637.750790][ T64] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 637.753047][ T64] cypress_m8 13-1:142.251: device disconnected [ 639.317372][T21607] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 639.317491][T21607] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 639.317641][T21607] hwrng_fill thread creation failed [ 639.411888][T21643] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 639.461741][T21647] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 639.461761][T21647] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 639.461775][T21647] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 639.461784][T21647] One or more global auth toks could not properly register; rc = [-22] [ 639.461813][T21647] Error validating options; rc = [-22] [ 639.501847][T21645] Bluetooth: (null): Too short H5 packet [ 639.672304][T21649] /dev/sr0: Can't open blockdev [ 639.875832][T21668] netlink: 'syz.1.4471': attribute type 1 has an invalid length. [ 639.875845][T21668] __nla_validate_parse: 2 callbacks suppressed [ 639.875852][T21668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4471'. [ 639.876005][T21668] 8021q: VLANs not supported on tunl0 [ 640.025708][T21678] 9p: Bad value for 'msize' [ 640.077244][T21685] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4473'. [ 640.301996][T21700] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4481'. [ 640.324835][T11674] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 640.400859][T21704] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4483'. [ 640.401822][T21704] netlink: 'syz.3.4483': attribute type 10 has an invalid length. [ 640.475038][T11674] usb 12-1: Using ep0 maxpacket: 16 [ 640.475812][T11674] usb 12-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 640.476967][T11674] usb 12-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.476992][T11674] usb 12-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.477011][T11674] usb 12-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 640.477034][T11674] usb 12-1: config 0 interface 0 has no altsetting 0 [ 640.477060][T11674] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.483126][T11674] usb 12-1: config 0 descriptor?? [ 640.574853][T12879] Bluetooth: hci1: command 0x0c1a tx timeout [ 640.884811][ T3380] usb 13-1: new high-speed USB device number 82 using dummy_hcd [ 640.917015][T11674] input: HID 046d:c215 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/0003:046D:C215.000B/input/input42 [ 640.950309][T21733] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 640.950309][T21733] [ 640.950575][T21733] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 640.950699][T21733] CIFS: Attempting to mount //172.20.20.170/share [ 640.985809][T11674] logitech 0003:046D:C215.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.7-1/input0 [ 641.047754][ T3380] usb 13-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 641.048942][ T3380] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 641.048981][ T3380] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 641.049003][ T3380] usb 13-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 641.049035][ T3380] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.049285][T21736] program syz.1.4493 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 641.164072][T11674] usb 12-1: USB disconnect, device number 7 [ 641.287354][T21720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.288101][T21720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.491921][ T3380] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 641.491938][ T3380] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 641.502619][ T3380] cxacru 13-1:1.0: probe with driver cxacru failed with error -71 [ 641.503384][T21744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4496'. [ 641.507817][ T3380] usb 13-1: USB disconnect, device number 82 [ 641.784757][T21733] CIFS: VFS: Error connecting to socket. Aborting operation. [ 641.784798][T21733] CIFS: VFS: cifs_mount failed w/return code = -4 [ 641.795696][ T43] kauditd_printk_skb: 236 callbacks suppressed [ 641.795708][ T43] audit: type=1400 audit(10626.606:46672): avc: denied { read } for pid=21746 comm="syz.7.4497" dev="nsfs" ino=4026534280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 641.795955][ T43] audit: type=1400 audit(10626.606:46673): avc: denied { open } for pid=21746 comm="syz.7.4497" path="net:[4026534280]" dev="nsfs" ino=4026534280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 641.796442][ T43] audit: type=1400 audit(10626.606:46674): avc: denied { module_request } for pid=21746 comm="syz.7.4497" kmod="bt-proto-8" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 641.815627][ T43] audit: type=1400 audit(10626.626:46675): avc: denied { create } for pid=21746 comm="syz.7.4497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 641.820230][ T43] audit: type=1400 audit(10626.626:46676): avc: denied { write } for pid=21750 comm="syz.3.4498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 641.820850][ T43] audit: type=1400 audit(10626.626:46677): avc: denied { read } for pid=21750 comm="syz.3.4498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 641.826488][ T43] audit: type=1400 audit(10626.636:46678): avc: denied { ioctl } for pid=21750 comm="syz.3.4498" path="socket:[103927]" dev="sockfs" ino=103927 ioctlcmd=0x9363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 641.827515][T21751] netlink: 'syz.3.4498': attribute type 10 has an invalid length. [ 641.860366][T21751] team0 (unregistering): Port device team_slave_0 removed [ 641.871562][T21751] team0 (unregistering): Port device team_slave_1 removed [ 641.878184][T21755] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4499'. [ 641.890816][T21755] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 641.925509][ T43] audit: type=1400 audit(10626.736:46679): avc: denied { execmem } for pid=21757 comm="syz.7.4500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 641.929499][ T43] audit: type=1400 audit(10626.736:46680): avc: denied { create } for pid=21757 comm="syz.7.4500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 641.929973][ T43] audit: type=1400 audit(10626.736:46681): avc: denied { shutdown } for pid=21757 comm="syz.7.4500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 641.939808][T21759] ip_tables: iptables: counters copy to user failed while replacing table [ 641.940080][T21759] ip_tables: iptables: counters copy to user failed while replacing table [ 641.940317][T21759] ip_tables: iptables: counters copy to user failed while replacing table [ 641.940567][T21759] ip_tables: iptables: counters copy to user failed while replacing table [ 641.940814][T21759] ip_tables: iptables: counters copy to user failed while replacing table [ 641.941103][T21759] ip_tables: iptables: counters copy to user failed while replacing table [ 641.941347][T21759] ip_tables: iptables: counters copy to user failed while replacing table [ 641.941599][T21759] ip_tables: iptables: counters copy to user failed while replacing table [ 641.941845][T21759] ip_tables: iptables: counters copy to user failed while replacing table [ 641.942078][T21759] ip_tables: iptables: counters copy to user failed while replacing table [ 642.036283][ T854] libceph: connect (1)[c::]:6789 error -101 [ 642.036452][ T854] libceph: mon0 (1)[c::]:6789 connect error [ 642.076691][T21764] ceph: No mds server is up or the cluster is laggy [ 642.092976][T21772] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev e0000 [ 642.223901][T21779] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 642.223925][T21779] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 642.223946][T21779] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 642.231253][T21779] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 642.283250][T21779] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4507'. [ 642.333721][T21788] Bluetooth: hci0: Frame reassembly failed (-84) [ 642.344809][T21788] Bluetooth: hci0: Frame reassembly failed (-84) [ 642.371101][T12479] smbdirect: ib_dev[syz1] removed [ 642.383223][T21788] Bluetooth: hci0: Frame reassembly failed (-84) [ 642.537835][T21808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 642.543017][T21808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 642.810319][T21815] netlink: 'syz.7.4517': attribute type 1 has an invalid length. [ 642.819355][T21815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.823479][T21815] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4517'. [ 642.828842][T21815] xt_LOG: level 115 >= 8 [ 643.219862][T21793] ceph: No mds server is up or the cluster is laggy [ 643.287576][ T5760] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 643.293156][ T5760] Bluetooth: hci3: unexpected event for opcode 0x203e [ 643.444475][T21836] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 8000000 [ 643.757067][T21852] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 643.791488][T21854] xt_bpf: check failed: parse error [ 643.910246][T21860] tmpfs: Bad value for 'mpol' [ 644.029357][T21875] xt_hashlimit: size too large, truncated to 1048576 [ 644.206518][T21881] tipc: Started in network mode [ 644.206538][T21881] tipc: Node identity 1000001, cluster identity 4369 [ 644.206549][T21881] tipc: Node number set to 16777217 [ 644.206706][T21881] tipc: Cannot configure node identity twice [ 644.211985][T21881] tipc: New replicast peer: 127.0.0.1 [ 644.212380][T21881] tipc: Enabled bearer , priority 10 [ 644.254797][ T5760] Bluetooth: hci0: command 0x1003 tx timeout [ 644.254927][T12879] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 644.495814][ T1168] rpcbind: server 127.0.0.1 not responding, timed out [ 644.557131][T21906] FAULT_INJECTION: forcing a failure. [ 644.557131][T21906] name failslab, interval 1, probability 0, space 0, times 0 [ 644.557167][T21906] CPU: 1 UID: 0 PID: 21906 Comm: syz.8.4549 Tainted: G L syzkaller #0 PREEMPT(full) [ 644.557196][T21906] Tainted: [L]=SOFTLOCKUP [ 644.557204][T21906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 644.557216][T21906] Call Trace: [ 644.557224][T21906] [ 644.557233][T21906] dump_stack_lvl+0x100/0x190 [ 644.557266][T21906] should_fail_ex.cold+0x5/0xa [ 644.557298][T21906] should_failslab+0xc2/0x120 [ 644.557335][T21906] kmem_cache_alloc_noprof+0x92/0x6a0 [ 644.557364][T21906] ? jffs2_scan_make_ino_cache+0x86/0x180 [ 644.557400][T21906] jffs2_scan_make_ino_cache+0x86/0x180 [ 644.557430][T21906] jffs2_scan_medium+0x4bb4/0x59c0 [ 644.557476][T21906] ? __pfx_jffs2_scan_medium+0x10/0x10 [ 644.557503][T21906] ? trace_kmalloc+0xeb/0x110 [ 644.557528][T21906] ? __kasan_kmalloc+0xaa/0xb0 [ 644.557554][T21906] ? __kmalloc_noprof+0x350/0x840 [ 644.557577][T21906] ? jffs2_sum_init+0xc4/0x1b0 [ 644.557608][T21906] jffs2_do_mount_fs+0x8a0/0x2300 [ 644.557638][T21906] ? rcu_is_watching+0x13/0xc0 [ 644.557663][T21906] ? trace_kmalloc+0xeb/0x110 [ 644.557697][T21906] ? lockdep_init_map_type+0x5c/0x250 [ 644.557727][T21906] ? __pfx_jffs2_do_mount_fs+0x10/0x10 [ 644.557749][T21906] ? __raw_spin_lock_init+0x3a/0x110 [ 644.557779][T21906] ? __init_rwsem+0x10e/0x180 [ 644.557805][T21906] jffs2_do_fill_super+0x3d4/0xa50 [ 644.557833][T21906] jffs2_fill_super+0x283/0x370 [ 644.557855][T21906] ? __pfx_get_mtd_device+0x10/0x10 [ 644.557890][T21906] ? __pfx_jffs2_fill_super+0x10/0x10 [ 644.557917][T21906] mtd_get_sb+0x2f0/0x4c0 [ 644.557938][T21906] ? __pfx_jffs2_fill_super+0x10/0x10 [ 644.557966][T21906] get_tree_mtd+0x6f9/0x8a0 [ 644.557987][T21906] ? __pfx_get_tree_mtd+0x10/0x10 [ 644.558007][T21906] ? cap_capable+0x107/0x430 [ 644.558034][T21906] ? bpf_lsm_capable+0x9/0x10 [ 644.558052][T21906] ? security_capable+0x80/0x260 [ 644.558074][T21906] vfs_get_tree+0x92/0x320 [ 644.558095][T21906] path_mount+0x7d0/0x2850 [ 644.558122][T21906] ? __pfx_path_mount+0x10/0x10 [ 644.558141][T21906] ? lockdep_hardirqs_on+0x7d/0x110 [ 644.558173][T21906] ? putname+0xb1/0x110 [ 644.558191][T21906] ? kmem_cache_free+0x127/0x6c0 [ 644.558221][T21906] ? __x64_sys_mount+0x293/0x310 [ 644.558241][T21906] __x64_sys_mount+0x293/0x310 [ 644.558263][T21906] ? __pfx___x64_sys_mount+0x10/0x10 [ 644.558292][T21906] do_syscall_64+0x123/0x790 [ 644.558339][T21906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.558363][T21906] RIP: 0033:0x7f88e179e559 [ 644.558382][T21906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.558401][T21906] RSP: 002b:00007f88e26cc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 644.558422][T21906] RAX: ffffffffffffffda RBX: 00007f88e1a25fa0 RCX: 00007f88e179e559 [ 644.558436][T21906] RDX: 00002000000049c0 RSI: 0000200000004980 RDI: 0000200000004940 [ 644.558449][T21906] RBP: 00007f88e1835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 644.558461][T21906] R10: 0000000000800004 R11: 0000000000000246 R12: 0000000000000000 [ 644.558473][T21906] R13: 00007f88e1a26038 R14: 00007f88e1a25fa0 R15: 00007ffea28dca08 [ 644.558502][T21906] [ 644.558527][T21906] jffs2: jffs2_scan_make_ino_cache(): allocation of inode cache failed [ 644.869313][T21936] bridge0: port 3(veth1_to_bridge) entered blocking state [ 644.869390][T21936] bridge0: port 3(veth1_to_bridge) entered disabled state [ 644.871038][T21936] veth1_to_bridge: entered allmulticast mode [ 644.874058][T21936] veth1_to_bridge: entered promiscuous mode [ 644.874154][T21936] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 644.874380][T21936] bridge0: port 3(veth1_to_bridge) entered blocking state [ 644.874422][T21936] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 645.366436][T21957] netlink: 88 bytes leftover after parsing attributes in process `syz.7.4567'. [ 645.542085][T21969] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4571'. [ 645.542109][T21969] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4571'. [ 645.542124][T21969] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4571'. [ 645.542306][T21969] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4571'. [ 645.597660][ T1462] wacom 0003:056A:003F.000C: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 646.260785][T22025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4584'. [ 646.263915][T22025] xfrm1: entered promiscuous mode [ 646.263929][T22025] xfrm1: entered allmulticast mode [ 646.267509][T22025] netlink: 'syz.1.4584': attribute type 10 has an invalid length. [ 646.623243][T22043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4590'. [ 646.704624][T22053] bond0: (slave dummy0): making interface the new active one [ 646.707979][T22053] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 646.729507][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.729615][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.729691][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.729767][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.729863][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.729936][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.730010][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.730084][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.730186][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.730262][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.730336][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.730411][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.730503][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.730600][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.730673][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.730747][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.730838][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.730905][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.730976][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.731043][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.731146][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.731271][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.731340][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.731417][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.731522][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.731596][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.731668][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.731740][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.732005][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.732078][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.732152][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.732221][T22053] bond0: (slave dummy0): Error: Device is in use and cannot be enslaved [ 646.809900][ T5795] bond0: (slave dummy0): link status definitely down, disabling slave [ 646.836579][ T5795] bond0: now running without any active interface! [ 646.871438][T22067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=233 sclass=netlink_route_socket pid=22067 comm=syz.3.4599 [ 646.882383][ T43] kauditd_printk_skb: 256 callbacks suppressed [ 646.882395][ T43] audit: type=1400 audit(10631.686:46938): avc: denied { ioctl } for pid=22066 comm="syz.3.4599" path="socket:[106235]" dev="sockfs" ino=106235 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 646.896362][ T43] audit: type=1400 audit(10631.706:46939): avc: denied { unmount } for pid=16806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 647.040768][ T43] audit: type=1400 audit(10631.846:46940): avc: denied { map_create } for pid=22075 comm="syz.1.4602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 647.041236][ T43] audit: type=1400 audit(10631.846:46941): avc: denied { map_read map_write ** replaying previous printk message ** [ 647.041236][ T43] audit: type=1400 audit(10631.846:46941): avc: denied { map_read map_write } for pid=22075 comm="syz.1.4602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 647.045271][ T43] audit: type=1400 audit(10631.856:46942): avc: denied { mount } for pid=22075 comm="syz.1.4602" name="/" dev="configfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 647.045697][ T43] audit: type=1400 audit(10631.856:46943): avc: denied { search } for pid=22075 comm="syz.1.4602" name="/" dev="configfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 647.045798][ T43] audit: type=1400 audit(10631.856:46944): avc: denied { search } for pid=22075 comm="syz.1.4602" name="usb_gadget" dev="configfs" ino=5071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 647.046041][ T43] audit: type=1400 audit(10631.856:46945): avc: denied { search } for pid=22075 comm="syz.1.4602" name="/" dev="configfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 647.046148][ T43] audit: type=1400 audit(10631.856:46946): avc: denied { search } for pid=22075 comm="syz.1.4602" name="usb_gadget" dev="configfs" ino=5071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 647.046248][ T43] audit: type=1400 audit(10631.856:46947): avc: denied { search } for pid=22075 comm="syz.1.4602" name="g1" dev="configfs" ino=16627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 647.056183][T22076] [ 647.101153][T22077] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 647.114868][T22076] ====================================================== [ 647.117287][T22076] WARNING: possible circular locking dependency detected [ 647.120002][T22076] syzkaller #0 Tainted: G L [ 647.122444][T22076] ------------------------------------------------------ [ 647.125201][T22076] syz.1.4602/22076 is trying to acquire lock: [ 647.127627][T22076] ffffffff913ff9c8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5ae/0x950 [ 647.131161][T22076] [ 647.131161][T22076] but task is already holding lock: [ 647.134067][T22076] ffff88803c61b0c0 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 647.137848][T22076] [ 647.137848][T22076] which lock already depends on the new lock. [ 647.137848][T22076] [ 647.141304][T22076] [ 647.141304][T22076] the existing dependency chain (in reverse order) is: [ 647.144110][T22076] [ 647.144110][T22076] -> #3 (&sb->s_type->i_mutex_key#25){++++}-{4:4}: [ 647.146850][T22076] lock_acquire+0x1d1/0x380 [ 647.148447][T22076] down_write+0x8b/0x1f0 [ 647.149974][T22076] configfs_depend_item_unlocked+0xf3/0x6a0 [ 647.152012][T22076] usbg_make_tpg+0x251/0x610 [ 647.153672][T22076] target_fabric_make_tpg+0xab/0x8c0 [ 647.155530][T22076] configfs_mkdir+0x525/0xd40 [ 647.157175][T22076] vfs_mkdir+0x364/0x850 [ 647.158712][T22076] filename_mkdirat+0x48b/0x5e0 [ 647.160414][T22076] __x64_sys_mkdirat+0x89/0xc0 [ 647.162438][T22076] do_syscall_64+0x123/0x790 [ 647.164499][T22076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.167120][T22076] [ 647.167120][T22076] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 647.170210][T22076] lock_acquire+0x1d1/0x380 [ 647.172219][T22076] __mutex_lock+0x1a4/0x1bd0 [ 647.174240][T22076] tcm_alloc_inst+0x5f/0x1e0 [ 647.176318][T22076] try_get_usb_function_instance+0x136/0x1f0 [ 647.178990][T22076] usb_get_function_instance+0x16/0x70 [ 647.181399][T22076] function_make+0x18c/0x3f0 [ 647.183432][T22076] configfs_mkdir+0x525/0xd40 [ 647.185647][T22076] vfs_mkdir+0x364/0x850 [ 647.187606][T22076] filename_mkdirat+0x48b/0x5e0 [ 647.189706][T22076] __x64_sys_mkdirat+0x89/0xc0 [ 647.191773][T22076] do_syscall_64+0x123/0x790 [ 647.193831][T22076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.196387][T22076] [ 647.196387][T22076] -> #1 (func_lock){+.+.}-{4:4}: [ 647.199184][T22076] lock_acquire+0x1d1/0x380 [ 647.201188][T22076] __mutex_lock+0x1a4/0x1bd0 [ 647.203234][T22076] try_get_usb_function_instance+0x26/0x1f0 [ 647.205760][T22076] usb_get_function_instance+0x16/0x70 [ 647.208150][T22076] function_make+0x18c/0x3f0 [ 647.210185][T22076] configfs_mkdir+0x525/0xd40 [ 647.212294][T22076] vfs_mkdir+0x364/0x850 [ 647.214197][T22076] filename_mkdirat+0x48b/0x5e0 [ 647.216352][T22076] __x64_sys_mkdirat+0x89/0xc0 [ 647.218432][T22076] do_syscall_64+0x123/0x790 [ 647.220454][T22076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.222968][T22076] [ 647.222968][T22076] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 647.226176][T22076] check_prev_add+0xeb/0xe60 [ 647.228199][T22076] __lock_acquire+0x1528/0x1f40 [ 647.230309][T22076] lock_acquire+0x1d1/0x380 [ 647.232297][T22076] __mutex_lock+0x1a4/0x1bd0 [ 647.234315][T22076] configfs_rmdir+0x5ae/0x950 [ 647.236369][T22076] vfs_rmdir+0x328/0x8a0 [ 647.238262][T22076] filename_rmdir+0x31a/0x5c0 [ 647.240317][T22076] __x64_sys_rmdir+0x46/0x70 [ 647.242335][T22076] do_syscall_64+0x123/0x790 [ 647.244362][T22076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.246899][T22076] [ 647.246899][T22076] other info that might help us debug this: [ 647.246899][T22076] [ 647.250136][T22076] Chain exists of: [ 647.250136][T22076] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#25 [ 647.250136][T22076] [ 647.254763][T22076] Possible unsafe locking scenario: [ 647.254763][T22076] [ 647.257108][T22076] CPU0 CPU1 [ 647.258905][T22076] ---- ---- [ 647.260764][T22076] lock(&sb->s_type->i_mutex_key#25); [ 647.262489][T22076] lock(tpg_instances_lock); [ 647.264759][T22076] lock(&sb->s_type->i_mutex_key#25); [ 647.267269][T22076] lock(gadget_subsys.su_mutex); [ 647.268865][T22076] [ 647.268865][T22076] *** DEADLOCK *** [ 647.268865][T22076] [ 647.271434][T22076] locks held by syz.1.4602/22076: 3, last CPU#2: [ 647.273394][T22076] #0: ffff888025208460 (sb_writers#21){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 647.276412][T22076] #1: ffff88803c696e80 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 647.279991][T22076] #2: ffff88803c61b0c0 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 647.283237][T22076] [ 647.283237][T22076] stack backtrace: [ 647.285190][T22076] CPU: 2 UID: 0 PID: 22076 Comm: syz.1.4602 Tainted: G L syzkaller #0 PREEMPT(full) [ 647.288655][T22076] Tainted: [L]=SOFTLOCKUP [ 647.290006][T22076] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 647.293228][T22076] Call Trace: [ 647.294329][T22076] [ 647.295549][T22076] dump_stack_lvl+0x100/0x190 [ 647.297180][T22076] print_circular_bug.cold+0x178/0x1be [ 647.298952][T22076] check_noncircular+0x146/0x160 [ 647.300565][T22076] check_prev_add+0xeb/0xe60 [ 647.302065][T22076] ? __bfs+0x150/0x2a0 [ 647.303408][T22076] __lock_acquire+0x1528/0x1f40 [ 647.305044][T22076] lock_acquire+0x1d1/0x380 [ 647.306536][T22076] ? configfs_rmdir+0x5ae/0x950 [ 647.308139][T22076] ? __pfx___might_resched+0x10/0x10 [ 647.309875][T22076] ? __lock_acquire+0x5c0/0x1f40 [ 647.311920][T22076] __mutex_lock+0x1a4/0x1bd0 [ 647.313825][T22076] ? configfs_rmdir+0x5ae/0x950 [ 647.315846][T22076] ? configfs_rmdir+0x5ae/0x950 [ 647.317891][T22076] ? reacquire_held_locks+0xdd/0x1f0 [ 647.320149][T22076] ? __pfx___mutex_lock+0x10/0x10 [ 647.322256][T22076] ? do_raw_spin_lock+0x128/0x260 [ 647.324387][T22076] ? find_held_lock+0x2b/0x80 [ 647.326390][T22076] ? fast_dput+0x2fe/0x6f0 [ 647.328292][T22076] ? do_raw_spin_unlock+0x145/0x1e0 [ 647.330481][T22076] ? _raw_spin_unlock+0x28/0x50 [ 647.332572][T22076] ? fast_dput+0x168/0x6f0 [ 647.334456][T22076] ? configfs_rmdir+0x5ae/0x950 [ 647.336518][T22076] configfs_rmdir+0x5ae/0x950 [ 647.338513][T22076] ? __pfx_configfs_rmdir+0x10/0x10 [ 647.340702][T22076] ? __pfx_down_write+0x10/0x10 [ 647.342736][T22076] vfs_rmdir+0x328/0x8a0 [ 647.344484][T22076] filename_rmdir+0x31a/0x5c0 [ 647.346444][T22076] ? __pfx_filename_rmdir+0x10/0x10 [ 647.348617][T22076] ? do_getname+0x191/0x390 [ 647.350534][T22076] __x64_sys_rmdir+0x46/0x70 [ 647.352514][T22076] do_syscall_64+0x123/0x790 [ 647.354471][T22076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.356943][T22076] RIP: 0033:0x7efe9559e559 [ 647.358822][T22076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.365891][T22076] RSP: 002b:00007efe963b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 647.368514][T22076] RAX: ffffffffffffffda RBX: 00007efe95825fa0 RCX: 00007efe9559e559 [ 647.371086][T22076] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000740 [ 647.373981][T22076] RBP: 00007efe95635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 647.376457][T22076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.378935][T22076] R13: 00007efe95826038 R14: 00007efe95825fa0 R15: 00007ffd7db77f78 [ 647.381426][T22076] [ 647.383111][T12879] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 647.383167][T12879] Bluetooth: hci3: Injecting HCI hardware error event [ 647.383297][ T5760] Bluetooth: hci3: hardware error 0x00 [ 649.454822][ T5760] Bluetooth: hci3: Opcode 0x0c03 failed: -110