last executing test programs: 24.166400802s ago: executing program 2 (id=451): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000023c0)={0x0, 'vlan1\x00', {}, 0xef}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x10000, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0xfffffffc, 0x0, 0x10000000, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0xa, 0x0, 0x2d52c0, 0x6], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2001, 0x109, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x0, 0xf, 0x8000, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0xd77, 0x0, 0x0, 0x4507c35a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xc, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0x1ff, 0x9, 0x0, 0x0, 0x2, 0x9, 0x0, 0x2, 0x0, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x1000, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x9, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x0, 0x1f}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3f000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffff8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2], [0xd68a, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x9262, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x20000002, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x6], [0x81, 0x5, 0x5d30, 0x1, 0xb05f, 0x0, 0xdbc1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) 23.97026492s ago: executing program 2 (id=454): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x4e26, 0x101, @local, 0xa3c}, {0xa, 0xfffe, 0x6, @remote, 0x4}, 0x1001, {[0x8, 0x10004, 0xfffffffc, 0x1, 0x20, 0x0, 0x101]}}, 0x5c) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x80087601) r3 = socket(0x2b, 0x80801, 0x1) listen(r3, 0x10) recvmsg$kcm(r3, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x40002020) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) creat(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6a55c0c4ada8324e) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c0, 0x1004, 0x8000000000000000, 0xc591, 0x0, 0x1, 0xffffffffffffffff, 0xf604, 0xb3, 0x8d], 0x80a0000, 0x2012d3}) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000300)={0x800, 0x140, 0x1e0, 0xf0, 0x8, 0x1, 0x20, 0x0, {0xa90}, {0x0, 0x5, 0x1}, {0x0, 0x0, 0xfffffffd}, {0x6, 0x4}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x6, 0x6, 0xfffffffd, 0x0, 0x8, 0x8, 0x1, 0x2, 0xb}) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x1, &(0x7f0000000000)=0xb, 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23.119352222s ago: executing program 2 (id=461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet6(0xa, 0x3, 0xb2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="380080002000010039bd7000000000000a0020640000000700000000050016004f00000014000200fc000000000000800000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x5c}}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) socket$netlink(0x10, 0x3, 0x14) syz_usb_connect(0x5, 0x24, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0x5b, 0x1a, 0xc1, 0x20, 0x499, 0x1003, 0xec77, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf7, 0x4b, 0x10, 0x52, "", [{{0x9, 0x4, 0x6f, 0xf6, 0x0, 0xfc, 0x5e, 0x8d, 0x1}}]}}]}}, 0x0) r2 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000000000000000000000000000d0a000000000000000200000500"/62], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0xa}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a0001000000000000000a00802020", @ANYRES64], 0x38}}, 0x0) listen(r2, 0x800) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x3c, 0x0, "bb02a3c364ca41d6357e544508474004000b42a201ecffffffffffffff8a0e2f964e0000c534a632ab6193fcf19b2df3ee0500faa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x2c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 21.74733007s ago: executing program 2 (id=475): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='.\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x27, 0x1c, 0x3fc, 0x0, 0xa, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 21.528010279s ago: executing program 2 (id=476): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a0", 0xca}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x2100, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x403, 0xfffefffc, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200440d4}, 0x4804) 20.650640048s ago: executing program 2 (id=480): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500), 0x482841, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) io_uring_enter(0xffffffffffffffff, 0xf, 0x7929, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000180)={0xfa55, 0x6}) openat(0xffffffffffffff9c, 0x0, 0x22a0c0, 0x1b2) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r5, r4, 0x0, 0x7ffffffd) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x40030000030000, 0x0, 0x4000000}, 0x80) 20.546803678s ago: executing program 32 (id=480): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500), 0x482841, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) io_uring_enter(0xffffffffffffffff, 0xf, 0x7929, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000180)={0xfa55, 0x6}) openat(0xffffffffffffff9c, 0x0, 0x22a0c0, 0x1b2) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pipe2$watch_queue(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r5, r4, 0x0, 0x7ffffffd) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x40030000030000, 0x0, 0x4000000}, 0x80) 2.700540951s ago: executing program 4 (id=583): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00') pread64(r0, &(0x7f00000000c0)=""/144, 0x90, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b7000000000000006111900000e1f90006000000000000009500000000000000650881f86b2cc338df645e9fe3e06088f59a1804a0411223122b5edcdd5f6cd0ac52cd010001000000000042db7732b4e7f5318f7d072f289968935fe5143706d8a9dacef4e6fa9f392c0565078eba4f0c7243cfaf3983427c7250be5aeb541b4b317897bcfe86a812677427a0b5c59185db31"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) socket$kcm(0x2, 0xa, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x9c, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c2000001aab1aaaaaaaa3388a801008100110086dd65795382005e210100000000000000000000000000000000ff010000000000000000000000000001730201400000000000000000000000000000ffff000000004e244e2104419078a897c45f04021920e8ddf55627382a42ccb6c3dc3e79f2bb5e4a1ad8aa2bb0b07db321cc789c4471c04026066b12831ca465a624e20da03d60653c0e5e8d"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, r4, 0x1, 0xffffbffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}]}, 0x48}}, 0x20000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f0000000c00)) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000050}, 0x20048045) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x24002801}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x8, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) 2.149853734s ago: executing program 4 (id=594): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000440)=[{{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40000000}}], 0x2, 0x48080) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) sendmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x181c81, 0x0) readv(r6, &(0x7f0000000500)=[{&(0x7f0000000200)=""/107, 0x6b}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.399700421s ago: executing program 3 (id=600): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) r3 = socket(0x80000000000000a, 0x2, 0x0) (rerun: 64) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}}}}, 0x104) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xfffd, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x104) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffd, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x0, @loopback}, 0x2}}, 0x26) (async) sched_getattr(0x0, &(0x7f00000001c0)={0x38}, 0x38, 0x0) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r6, 0xc0205648, &(0x7f0000000080)={0xf010000, 0x0, 0x4, 0x10, 0x0, {0x77359400}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xd, "3acfa8ee"}}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x1}}, 0x2e) getsockopt(r7, 0x111, 0xfffffffd, 0x0, &(0x7f0000000080)) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/raw6\x00') r8 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r8, &(0x7f0000002140)={0x2020}, 0xfffffffffffffcad) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x0) (async) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x0, 0x3, 0x8, 0x6, 0x0, 0x208001, 0x0}) (async, rerun: 32) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f29, 0x14, 0x10000, 0xff, 0x5, 0xcc7, 0xe, 0x4000007, 0xa, 0x1, 0x2, 0x8, 0x1, 0x9, 0x3, 0x2, 0x0, 0x5, 0x3, 0x40000003, 0x40000089, 0x6, 0x5, 0xaf3, 0xb, 0x1, 0x7c, 0xd, 0x6, 0x0, 0x1000000b]}) (rerun: 32) 1.258743346s ago: executing program 3 (id=601): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x143400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.156241845s ago: executing program 3 (id=602): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000100)={0x211, 0xe73, 0x8}) 1.142904034s ago: executing program 4 (id=603): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 1.033468178s ago: executing program 3 (id=604): syz_open_procfs$pagemap(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000540)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 945.206217ms ago: executing program 4 (id=607): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xfffffffa, &(0x7f0000000280)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a04002800128009000100766c616e000000001800028006000100000000000c000200110000001300000008000500", @ANYRES32=r4, @ANYBLOB="0500110002000000b0b236b9351e3a2059ff7aaef93f3f4d7ea065d3e3bc7459bbd9718f23be4ca16858281aa0f70f6a9e5f00d016413c09f288780a2a0485029f84f112df1d698feaeb33035ddc40cb5be275e91a4181b25e3607cf60d3a1afb19375108be2f654e7b61c25395854c3dfd8f0041ca5df4288f57debf5ddbfaef747a50d9602c1f16a0619e4d5d92848460dc205aa05cf829e406e7c00f116591c784a0bc23be6b87e654ba413a5a38df05840fe0f9d0ec00ba83539e0d8a0506a97c8e8931d83ef753dc9629b116a35fead14586131b6fe30a9c2e71eb14a005d2b92"], 0x58}}, 0x40080) read$FUSE(r2, &(0x7f0000008300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x3, {0x3, 0x4000000000, 0x0, 0x4, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdc, 0x103, 0xffff, 0x1000, 0x0, 0x0, r5, 0x4, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000006300)="c4acef607b9ddcfd235a03c6db2c1419c3332fd94e60bb741ab4a8750cdb46d41965ca8c176409eae88e4d142adc35d20aeb6cee87b470c46a623ffd2c7b92b7b2026c8a2d3a08f7c376bba66ea2fd6bd26a5903aab1fd5f08c5c80a017bd0a1f16e11ed288e1f71fd8f904cd60c2bad8ba59003a9216f171640535484f6706eda84c4a11c63565004ac33cb6040901b5f14b2406a1ddc7ca78fa91f3d575ec92c1c73d56c7d02de887a84a9b88c9b70f0bf2141e1f624e8222a9a63ba199362c8bff33780e6c79435460ada699e037ee7894aeecf7d3b089fa428a18edfe239134a244f69ecda10834e06e1466d95effc76211b61514522c429e80691780744f5e470e417559879fd7c7cdbde84361bb2491dc53a481b3bb5c071926f0c57af8745b52e6b07b053daad9e52a29869f3bee8c9ff43b2e9c20a26035ac89169b7058ee967b44365648f510555c701188079c745776f55748c32867df6e4e78890a32f126197f55113ce4e8c5397224ab6fb9124bdb0050fdb92a42237292668a7aa615216e39f78210b2774f0849a79fd446bdf2ec38d7c61e5384ca5ca6c040522d42102515d86c7743a8f384bf18efffb69d0ad0abb7c48fc8f770152226d05363ea26a7aabb3450905bf28dbc5fadbebe2ea45a4d82e2bcc574bcfd3e3164ee9ce2eb86cf356bd2822699a21dde91d2117e3647d926db9c7bece2484bd81a972c293226a1cbe15f233822fdfd042d6b6515b49f9f1d585b1f0fb596e50eea60ea3f4cc8808b576a1de2c7111df3cef7b090e5b5db7f616d5bc83428b4f55f97e87e43b3360c5099455193584fd94568890e87224bfc9b117d0172d85a176dd2c6828c0144b5398e7354d5923f8014bc3d30860c153696cc776c3982fdef7641bc61d3b21baf0f76adfb94d135ff87393174fd9ca5363e2834a24a06c16522bffb0f60d69cc8440d8a0dfbb47c7d8d6707cd7cbb34fbc8f8d3c4490b31b92806e0d56f83b2a2c7ad88ddb4d0e7dcff8aac6416e8be9c2c9855d5a441f4b34d55fb08306a8fa2832d70023ab0f63ff75629c0e98d64870fd4cd242a6f27fa6163994ec50e18071f5344c6786b01f2d7268930375188e04e0408c973d4872330b96aa88db2fc1860accbccb65f771ced5305891c44ac410541ac980ba50f419503aa058774737c77965db9ec9af213e516fa0a2468d788289337c5babad8c418a3af875ffc8bc39c62e94acf6b1bcbd28274a2e62092f87095958c8bc657ba788907902746872a6441966c9663198d1b54ce5c660ed0b7cfa1d6d3a81de7d16fd017d7f041c30b7f334889feca18596cbf344286563dd59b7c65697c4a3cf587c0682de6fc105628bdd1990dcb3fed18e1192ca07fe4a05be1efbc4057476257a59fcdd24eb040acef0f94ededf984978413ede4793255c0e6b24a5ee1713692149849e60f65c10e437db0a8e97807ea27f0a42f60b5ec86e85ab4eb9a81e2463b00afe7d20cbd30ee600b57202434e1fed80ef2cb45eec5362178b9e490dc0b8a45e10feb8a08138778364a2983a113b671e04d60ab4f18f383300228631cab01302c20c624c8e74bdb6ac3a7cf062f8db96416ff19e42ebb72aed1b46a063cbcb1b16b76abfa628e885cad99ca26b23929ed4602b5e897b019da855b58691503d3021f9c1b314105037a2be7e73d49f8ee9f0a3c3e6e2cec44cb6258d1862c3341b053db1b67640ec14afbbbca41b1b500ee3a0c22a712a02a1b2bfbaaa62ed542fceecc1ee426f9ed748d8656ceab891a9d5a8784ee78e18159abaf531c44829374b4814176534af4adfedb5efead99e214f52b0b2eb9e217c6bbda92a01edb0d5037e2038d8a0fb61f95c377817cf2af1568a66e395596c4045d4be3619adcf70879827dd90c45386c39b0248832254b2f7e646289ecd0aba2a56213e504bcf536ee6567baa25db9fbab142b4a333441778db9b672ccf0154f3f5adaffbf9a36472713077a90fa7828fe58c157593235de0617b7a13c0f269401bceb6f3a5c3eb151c97f3d8ef579f665777f4d801f0df77ae72433c488dabe2504ac0fd0e9703e9b960fcac1063704268e24a40890d627e0f6c38c0cf99b4d11436642dab9452834b13686e8b90cc07e4588c60aed21b90bcf73de85fddd85926557c6aec3510adf2d82f411b16b8013c408cfcb88d519daf256dce2c8a460e82bd0e6bf05c7d901157123dc9b8b1581fbb7bb8127f7adc01c926f6f79bbf666dd35df271cb0816418e71b18653bb1f246d07af5becaeb81abd83ebfce8f874daaf6b6acca7f313ed43570dd6a81548c2d7a0e1cf56124a7a441fe92fd12a5963cf6718543d429499a76f7613cfb7c7f638fbcee879929126cf1cca0c263320d8f34dcd1af2345b9801fcb38b44570bd855dff15ac3c7c11fd18982102258c1ec8941a4eb04b2ecdafa01b8f9fe39e65e40adb8d9a5d972da57a3e716a9518b890845160ca42419e8ce1261a855638e6db7a188c04a68b2afaa9de470283922bd6beadc9ddff314516f0c4e39977f97d79a291bf9d626b471d8bbfe0668cdde8f54a24f31d3928e4e659caebb403902cb27d829bbff401e533bc93d406b6a7113c91d680d424d679df00b9694cfe497cbdabd16841aa1b08e9076ffca9bed761455324fd89338f6cc3223b79a46c8e52aca9a4408edf745c3a02ff52e5314d2f2ecd88d91a45a906bb21dbfe490ca8691dce636424694cdfb7c3cc9e354148b852c52a99d59012bb80360e11d92e9ce2220776f21cce91ba2c1a0c9bd456fad2c17a62bc1ae32ae189b7baf5eafdd0903a02d74e8027c8e884127d0b94ef12e940e3ca65b3d174ba25201b28fe6ca36189e7ed93a6985859463e2d35411957e5c24aa474bac60844aa2828c3c0f8e9199b143ebcd7d56a28794ab54dce479cfe2989838b3fcbfdf146e85cc6176ab35c0da942b5d9351a2fb87266b4870124e38305583bd0e838b31bcaa54ce0c724fc99f2acc3b28d2095f4745a94b94c89489bed29116839d2ab6a152eadd2a30e71c3a014f41e1554ba238358ba1867e089dd6def8aee0ac338e6da5eb0d0c815c5991a9155ba3f73859eecf57024b5dd65c6d2ec31c9e7339f98ddbad954b121be83cef5cca1606c47e8e8a431615e0d75eface7772d28e3185cdf87581d3f8adf33784aa80880940d86ab881b22b971535f7b83a9f7015e86790dc2520eecf3d1abf1c0dd8c207a22a656b98cb6ec51d8791166d18ab1d6ed43c16050b136d7f55d42492af94d07b1adb562ef07f6a309d884ca55316cbd810905171dd8c6f9a36b855e907b302343d06f0a0d081ad3a710ee9cfc1abfe8005dab815cd26c13236cfa01a7c072e30bab37cc7ab2f3d23796c2a1202f30500a516633e8072483a6d44bdd8fae4622c7e58f083bd70b97f4db8e9bd907be321737b21f18ae1a4d14366131e641851bffdabd5b22e5b731f4c65283ee5403bc31317045372a4fbec67d26df95e0a14888f2bdcb440cd42de4e0bf389a393fc318e18d393310d5aa3778df0fdca87a5801e5e5b891adb64646011f7693b4b0e9b1cbfa1fbc847f9939271c19b8fb4fc9b15b9397a7e221987417ba13a9fc2902ac3a1d58d65b58968df285ad3b3875949857a67d7b33dc1861bd18383428c9ed41c474f3f316c0df272c55806f4454460e64c37adaff5d712ec376ae5d0d1e91bd3bbdf2a0a5507429d53e13de0562a5ba4b02103c12dab0bd4b85bdd290b98c7e1fd9f494501d2c4b824c007f67bc2e8993d4f163b40515da8f2111f4fa519230713844d170f12b4077324312da2ca1c51c8fe1fff0d6dd68eeebae22ad6681a5f277711db0064d3fa25d09cac0e4b280b58c150e73b3885ab3964837cfc34cb29e215bade71b45e19505b356bf8de9f69c4a3741ab016f77a55869edd76bb33edc34a68959c37bdf60926530d3284688aeb17a347251d5501c034dd3902eef528f167cfc5913d02c430d76b50a6860eb84ee5eca2458ce862ad9fcda642b8df177defe8abacebb4bda07c040b4ccd773fd5c9026ac98243ea2a00f8760a2dacf1c371589b7e32f2d2094543a7d87414813f54ab98cf738ed3b3c1f9e9fdc4fe97bab52d172fad00dff94b0b72fa87b2a3372c8fc9af326f4d05ca131dc254d378eaaf2da3aada8815fedc18d252d95629f7b455cfc54983c2f042e5dd2c22d0f70addcc45c03fa3a52e0937e9590722cedcef23401824dd3f2537d28fb10ff13f6e9641c23075a5ca68125e67df28b3231a65d32a97f00117020debb14e19511acbb52e56be81595f8e74eab72e36b8dfc37678c309bb84221e480c9348f6977f8e3f8a47421184276eba93e84e8b7e2105a5a89c08708c0eb8ba7bfe4dd715278be217fafde8047652ab69544bc2d63d72060ac40f104bc5b509b7501ae7ea36e0d19149645d15b5abc68fad73a542662b3df07ab506746d7343e405370238b657cdb960223752b62e86758143474a78ff92696ad8b5c9d2637c8d9810cfa4faf2765efcd7a1a435a60bbf5962223b1fb0975e227abdc7bf80e3adeabc6ead120922beabd707e6d7a42e233c0788c680190e9ffaf0cc145c010c33438121e8206e25342413dddd02ff2c2e4e5299a82e8e85d181148e1e98db886103810230c6a8687de33c4cf7753c333b8d7b6b6b1a18eab53cc395104818709fc11f4995e057d4517828dcb5a9f3baf41ade7101ef40df27c680c8bcbe8bf2368f1d19b46036bf8419516789dc69ee2573ddec41d9ca00fcc710f5635afcf088e0107fb09a87db9ca6fccd0655ec0816ead48371d64e8318b767b95ed6ea89ff919c68cd33cdfa0381b8b7caa545de948b8c46bb879c4470feed0a990056fb2db739225fc768e83d15568d73694e6888da65870e79c4f5e1287f1a8cce359f82c9860e13ff900833dc556d8fd005c38a855ed1efec66b4ba8d1e65db9a999e172101062081354625cea8f1ac0da70d7f2dca34c4204dfdefe456822ae2cd1349f1a2251292ddbb287c5b9ca41c75f45bb4ddd82c277afd37422cc00fe8b7221168b04b6275f8e530757c673b3f515059f8c8421872d07a156a9d061bdbe0c549a52acfb0708682a2573c259225d0e95a16b8d13dcec60ae91c09537e8bea549f748d2e060d8ef856bb496a53f1cee7a7b716c95e7310ff9fa56180f0259df99b5fe06c030015d9cb5bc9ece0cd907d724e1d1a89d3d875970bf144c58260c0dde163a26d4769b33f6de7f181ecabc050797a105fd1ce73ac4d26a153297305b8a3c150beee4b563f468694cf3895c44df56fc8753e3c8182e8e3c9da0314eac9c288978847b92015ddc5711c09210e1f5a684b7f1f149fb0fe8471c30f8a35a58ffc6e2fb797acf9c686fbb8d1ee8d6dac14de44c22a3cdda239235c24ff23de17228aeb354939a80e4a1397b316da5e18f077cc7b8497df214290c33c4b8593db1ab1638698059f29477a091b070f139b3fd2fe3ff55803b6e65abe6dae32eddb18e898e63743ed256801c8bbbf26e21bdff9491ef743341a5159b36b616ea9c700aca9b6486278c7811729e3df91147ad0e25c44e03c9f4b2385aa6cbfc70d8f68d17ac0925d8fe8737b212f708633bacda57b3848667a4f624a4c7edd33a060f82aabe6ac6a19a81a2cf6403189f08d2632260d72630da6ffe46ab9c19456e95e3cfc423940023ba0ad6f1fe2a8755509441e248b291e02e85f7173054ec6597cc712e80751b4078bf8db1177130f0b170be8f3ac79d579e012caed707156f3ba28ddd5ca5d18320fc9f361e88aa93de9127752ea04c7c77425ad30522dfb5f1f10f802c1a9668812ee9e6b4acab25e10dfd2b18387e9f6ac725cd72f5100b6c15265dcfa1dd45f538b76346209e6cab4441013e36e861ae677e980ddd08e9366426f410428b9b0828c9805bcbb667209191e79305ecc15ce9cf30aa829373e4a8152e2c68294dc71b6ab7b551addc661a5a040ca7b79993cf1060c8410fac1e9d3b209319f22c4bab53b1a6585ebb72a579dbce64b107b280b529439cde9d1fa29333ce63dbfd693e0b2fb3633e37304e70fd5b8d04bf47f6630cfdfbf8ad9f7778c88d7ca9705f4694b1d3355c8406adc99e15bb39fdaa8df214e1730b6d05bd5f93349ecbf5b0db04a5fb1bd66c5bc30671a564d46fbfceacc074bb14c31d471593172ffe28c39912ece3f718864ab9e300ca172a7ebfad6fe28a0ef5aafcd3f966a5d7d4d6ff164434b649cfe149505159018d8c00e82afaf7657402109549f7a5a4c8c7dd02d7d2b005a3be97f0a32bdf3d8e449fb4146c9e38a509781246d9fb67ed087148fd8b8fa1abcc5771148c0483aca397b36302459ae43f6f5aff98bd784b8a1e19a05acc632672bdabb32f2aa4d66ba731d6e219d880f4ceb63d30ee61e5e13919352ee32254d48bab3566e13788689e35c3e4c71c244c34b457fa8a23248b9be6fa195a055137a587e73afd4ee521af95040e72851d3b6c06a15c3464c755cba079f1f53d807bedd0382e36c975793bf3f78690cf408a7c502b872a05a5988e6a96b0aaeb0c0075576f295e55a9002caecab04331d06cb042cbe87375e557933e3d5e8763baffb71bab63343e432f62e82bc51b4bcbb8fb93c72dbe0ee310bd0d776109700007d0a1bcbf1655e1354f2f5dbae7d2d569b099003347f9c3f6c5ceadfb113ae3daea860f61e233e68c63386ecafe74c1a7386c97725bb650f298c06ad648662940daa3abf0c6f460bd2875984858a97c1fa921d2a73f6d207163cffb573dd59ef815605824d3e44eb74e22e865c975b5d8b923b063934960d62fa9907baa28c9f0a24f1e5bf731eabe1f6b076ae19b150d5632b307de0741116d5af8c5b4dae3c8ae01808d1a9925cf185c55a335820c1d8b80736bec9a9562d269ff273a040d77babad128d2b71a64d084dd93be96e3b99ffcc037a6db0f296f63438c83789e54635e0c69fe3ebfd3022130523ffa6f2805747b4e97c2fa38e04decd1b037123814be9a38d322d342d07baa37d5b484c32517b74fc636441a08d8424aaeeefb6bb47a8c010d6f1442a6632e808520308ec7ce7f7607ba18cd8b897ca3814834b2f088cde073d93261dac3bb624bcc6839d6249b51a58fcc4db00058484e0c5814004c5da1d4cda1c025883c999fd2ef171a5c3a438cc0fccff03bae681775421d49ddbfb4f74ffcf88992abd6168e58295b91e7cbd442bbf8d7cfb5d3ce080dc2b90961edbca462e843343d129e45cfa28eeb426eeef08a5ee84d7b48c59a6687b8c0f7549375033398a65eb6336e40423c12a55b5bf732a65bcaae27a91fde89318727cd769c0cbece6371b611a0b40a6b14aa40ceb5848b738c13258fb0765cf83c62a2081d3c363cd7d48da0f0b19e884045c44e78bb61bd673c4522e1c50a2a944115a57f4670b8c388858c7f4babae8052ff86f2b6b780e3b1b5e4302fe7aa7321b3a45ae98ba5a74e87ef4cf13046c7b67bff56f9ff6f4224c4d24bd438eb92e3a1a786c50b6d1dbb302b237618ad008fa5aba8c4778ec3735dc483adc99d19ce1c87634d5ff86f06acece91c7a79e1400b6b483285c8e478f43c3fdf22ccf792aec034ffd47e60080e7d4a27b6e48bb0a15aed15d6b84e9b6af83d4de502d70026533db7c881d0b344ce7b732fbb69348aadf44b22dd3921f8eefd5ef2914a7eac8d36b5420163258fc2be1d34bbf49ef5c4c7ad6a09c7292690f569621bfba1c4d9e484acd7d92f58b79bde01dd6ba98f4cad801e902bff0e81ae787c595969187b58ed9bf68b0aeaec069b64f6facbf7f0a4a8a5d3fc401c0e1ac3bef9bafa512e36d5c8d8b135f1a05368255c15b1c976ae93c9c99288fecf018505eed0f089aec2a9ca7b198a0a89671f095092d2a9e7fb90dde3bf586a2f168f2a8329118d04bffb6adabd53f87df50275981c9fd5d69020c8e9750287e5119c1cf347d1c3e4adba1d598446b4c0a479a5475859383e8c82bfe4c6b8560ad55e27f3323d857efcad4b5ee4d83b4dd74458414d2a9ce74ffda8042038caba0098bcfd6b2e2bda9afcc4c5890f38773726aa94791642ff492f8d11c736f397c080d63e2dd24baa37aff0ae46d9c77c5097f84d6e5a90c554436cfa5311e4f31e2386c2c4b04cf44fd118b4eee2326cd1f0a48efeb4c51fbe0f395694b2b40aca9fccfc1eb84283fd53671955b251bcc2253ed3a3fbb906b2b25944fbe6c5b226b05052fec7c9e6b2d4c0a1ae1029ff70900d4634954f025a345731a76ebcfc4e61499d91b888292e6c59a16c34e4d96ac23dbad628988fcb777c4e9c6348389decbce8c9c03420c01bd670280ce1d4d641d2d4b9c3c11ade9d196f8e49290094ed55382b09f0cf0397ffcd9006e38980ee0b3882e7d93e33643c1ed2429cbefba0e1720f69a20024aff6070acd25a3d68b129e3d7699641d20c5b93e8d4b784669e3a22727d687ff1dadfd19c5b44dcf776561eecf2d28c01e683f49b1c204ba45aadf5d84bdde7d2cd53dad97d060664ddefff75f5e413f72be41d6e7c13fcbc481eefdab31fbc500109c8c24756227ff5bb18b148d0a31576d2e427c43472624312a7568d5ad9b5f9a2274549e5180288dbc0c7e046766c174fca0aca1d867fce966bf4d1097efe62ae23c925ac387b368345999a92cd1d44055e178430fad19cbf8b53756df5584503d848e13ab90c338c2aa8346e2b499e5790926cbe359dc30a3d5336293c4990832e998c2901fae3df81ad4f1ec6fd17baf25fa25fa08bb71345a1fec99299e4ee962dab091c16138fe01d5403230fd896b0992a2474fe38e5a7ff15b372e2a7a4a0ff34defe1fba14bfb6f56630aaef274b57fd0999bf77aa79f743e29c60b7d5d1774ffa9591286f809ea6c0dcc1520f5766851e0f9233b4a2e1329e93e043837510f5ef85676590b0540aa7b2b5211d7d38fbc45e2fe3d7993c6bec4ba2205a40819f8a3ef2e71af85162e39f0f859ed446947bc8516eb527c496244488f8663dee31973d91c7be81b7e895e97294cbf94e09d155354af76ecac1d968038ed961843350524dbfd6ff46e4e0991aed94c144a403a5be126279a6469f9b7854b839933163c83672275491445ccc81bcabf91a6851101593bdfa0930e1058c972e7e41ad390cc4666575ce29fa80095eceb4cbb035e7e7e5a02be4606004e176db167fb67889912b8381e311c39d4378a088328f3e2cd4733dc55fc2e5a0afa7c928b98f95187a7200d8f78a2619df22a4f9fb433fb4a3a848651abfa90adc22c3bc29c1c386c0bc168c0c7873719f3cd76c49c77a5624a288022ebc89998c94f3bad87cd8bcd58502c38b0ff7ed312614f65ca1ea2f999fdcf2432e49b56c635f78514d9be0a5416e2b1ca8aa1b6f6c15d4ba022e5486afb79935d7021eea7b5d8e41a52b514af162a8b79a65efded6720126b9a5b3965f672d8da1bd9692bc14da0b29bc052e9ad22a59edbd0cb3c71fc304b0b8e296cdde1b259ac35a2e30e0741ec6a1cc4699d956959cfdfe4a91f6460271a70ba883f1b8eb3c1f52c60c361696056a411b74104960528caaa338066d823eec164c9c69d7b80c4d0c2ec7a739155c913810b3f5eb147e89e3b8699a29ca192f20cf8db8a1d7c01cbffdceb9d1a5045f55c8328966b91ee2b8e373d35ce74d35c1bea66316a2c0ea561844dcd6a027c6991038623ef894ed3489b4e04ab7e116973380fff9066eac58a406f78c4656367b57081f7b99030b0b087cbac6fd705d2d135ae4505ebb3c8b5ff3e226c9aa8896ba16600ba3dc89b73f07f9968a05045b34218a9f14a3e507103916f3a0b1f8989ab057b8907041cc1c31905b6e87f10e74e4c196c17e31450419040df59bee49aa554f9661f38435effa292f7ef01cd6173e08a3186f04018c23f37b7953c3f5ca7f83389ccbd539405ace7abb99aa29537eedb79000ee04fe5b72999ee606238874f0fa1b14d8cfc9d9c0c1a1666ca7ccceaefe1cf583157ae6e7dbd70425f487340386cbd141261ecc838482daec473b685e6ec71a23c42fbe89521360d6c6ed42284627655d2eceb9cd0f65df549b0c4efec101dd359ddb53dc99d94df991093459f7842c878b7b49fff2cf850bd924a06d3a3a420ee82dcb39e487c0f61de92ae6f0c8d12cdcc7365f2bee4300ac3842188ec82c76164c33c1d11362c1d9e136e516ae0b91172e252f73958be0913777a29be7da26ae2f7ba9e2a80a67974fe30fde3f6b9aa0b21aedbe0f23f074f962ee846d64116eb14d886ad4aa4166c779e6bf3e7d5ee3d7ff2519351f07595531ac10da596268f65434d9a4779fd8c326a847a44d0ca1cb1d1e764a56c99df167901695de6f07ffa94edf874233b340a524449b19f4cda7712cea6c7e0fcd7879edeec3ea24073354e31989ed1c08bb4bb1bec053c4c6fd352b0c91007623635619e05375728bf575f2e26bf617644f0239123f8ac1ed06767ca7b3096ec91ec1d530b7a0ec855a341ba4f72fdbd40cae0727581dfaf25b00282131bc82b5c44d4089b0b3274520a40c0053b5dd10e59a811023b660ffcb2d7e79b32af9f55ae030eb845a64361d25b175cacb07389957f23c9ff3e52e2bea41a75305377af233336d9a7bf7f9939441b76898b9aa8a596e9261f71c5176aae31270d80576885119fa6324856f1ceef3c6cb2db8a10aadea3c801c267e9987afa360958514bc85bc69c6d59211bbcf2b1312399f74f340fdf10a19145f0129d9cccfa4194bf148493db3a01b81f19aeca63e1074d94cfbb289ba9823646201ce9eb234167086a90241bfaf57c3216fcfcaf39824ff97545135f42c443b65b6369349d89de333fd015507c3a03cd3ee5253abd8fef6fe2248a002f9c70a51ddb89e7fe476163c6b1cce417be229b0e5533b81088370f7ec9468ee0de1f6feedb371dfa850ea5fe35c83ee58533c52a7c758c7adbb0329b3d7b4180be6df7f1d1881fad5a52cd807922d7eaddb13fa65cec8684a2321a4d923fc3fc657bf2ff3c02ffa6845f2eda3e736bed70e6984387cf77531b2e6ac6d67c706f43bb3944b618851abbff019ad48d116a7ca56fa436a58adc82dd5f8cc63fcd56076442ca88e3b3702ad99d6e2c46a561b87c5ac8a94ad77100be0c5d80887ba1283f38017b421c6456ac90bf90c8ce31d011ab997db7215520dda972ff1a78fcc5122e140e51a20bd361566276ae614643344e5b395bed67d8bde8957429c6ffb9147ad00d99ed2baa6766feb100c8b2601fa5f34f6428b9cec3262ee29dd220642df5fdcf2e43cf72ce7c710cce7de6099d76bf0d01f68f60d9fec99f69c0db0465ab3cf4e7a623676dac5fee48f55059140139bc210b1d5a9b2dae02eea4b799f36142286ff85ebffe76ee562d3af670c78633cf314e4d8792a8c6eb40bed1fd7d99603b22f216e260cc7dd59eb226b2a59d946c02b5458e358470be9e8c4fcd5f6403bebbd5de5421f082b39fd77cd590ad96d5ff7d3f1ac38f244742662726cfe70909d04867c869332ded36bac3f819fe173dd7f00", 0x2000, &(0x7f00000005c0)={&(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x28, 0x1, 0x1000b280, 0xff, 0x2, 0x803, 0xb6, 0x0, 0x0, 0x10, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x8050, r2, 0x2ce37000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$l2tp(0x2, 0x2, 0x73) r8 = socket$l2tp(0x2, 0x2, 0x73) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) splice(r8, 0x0, r10, 0x0, 0x4ffe5, 0xd) unlink(&(0x7f0000000100)='./file0/file0\x00') dup3(r1, r0, 0x0) 800.449528ms ago: executing program 1 (id=609): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000006b80), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000006f00)={0x0, 0x0, &(0x7f0000006ec0)={&(0x7f0000006e40)={0x20, r1, 0x3, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}}, 0x48810) 800.162068ms ago: executing program 1 (id=610): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x143400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 640.409127ms ago: executing program 1 (id=611): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') read$FUSE(r0, &(0x7f0000006040)={0x2020}, 0x17a9) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={0x0, 0xfffffe70, 0x80800}) 640.2658ms ago: executing program 1 (id=612): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000001f40), 0x0, 0x1, 0x0, 0x0, r1}) 572.050577ms ago: executing program 1 (id=613): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x700, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0x8000000, 0xffffffff}, 0xfffffc00, 0x0, 0x7, 0x8, 0x80000001, 0x11, 0x0, 0x0, 0x0, 0x8, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 567.10456ms ago: executing program 0 (id=614): syz_emit_ethernet(0x7a, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x29, 0x0, [{0x0, 0xc, "5e000000ff0000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev={0xac, 0x14, 0x14, 0x41}, @multicast1, @empty, @multicast2]}]}}}}}}}, 0x0) 500.235518ms ago: executing program 1 (id=615): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000440)=[{{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40000000}}], 0x2, 0x48080) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) sendmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x181c81, 0x0) readv(r6, &(0x7f0000000500)=[{&(0x7f0000000200)=""/107, 0x6b}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 499.943131ms ago: executing program 0 (id=616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000004bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a98000000060a0104000000f9ff0000000a0004050900010073797a31000000006c000480680001800a000100696e6e6572000000580002800800044000000017340005800c0001007061796c6f6164002400028008000340000000920800024020000000080004400000000008000140000000110800034000000002080002400003008408000140000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) (fail_nth: 5) 456.647384ms ago: executing program 0 (id=617): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) open$dir(&(0x7f0000000000)='./file1\x00', 0x102, 0x40) 395.055211ms ago: executing program 0 (id=618): socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) r0 = socket$inet(0x2, 0x80001, 0x84) (async) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) (async) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) (async) socket$pppoe(0x18, 0x1, 0x0) (async) r2 = add_key(&(0x7f0000000180)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r2) (async) keyctl$instantiate(0xc, r2, &(0x7f0000000280)=ANY=[@ANYBLOB="75706461647c571427b07a746520656372797074667320747275737465643a21004872418a2d3f779a2409a2770acbd61aefed105f6ea1b4e460dd498fc1a38da32d4ca954adc829fc6efb110d8946dbb45a3f003b52c0af9819dc0534ab00686da9901b27178c83566df130002cd852bef7491294f288e28f3cbd66dcb445c522bceb9c167a9a602f25312605"], 0x1a, 0xfffffffffffffffa) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$packet(0x11, 0x3, 0x300) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) pipe(0x0) (async) close(0xffffffffffffffff) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffdffe7e}, 0xc) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x480, 0x0) (async) r4 = getpid() (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0x9, 0xffffffff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) 209.534834ms ago: executing program 3 (id=619): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000006b80), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000006f00)={0x0, 0x0, &(0x7f0000006ec0)={&(0x7f0000006e40)={0x20, r1, 0x3, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}}, 0x48810) 207.944927ms ago: executing program 0 (id=620): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x207, 0x80742, 0x0, 0x32315659, 0x2, 0x490, 0x1, 0xfffffffd, 0xfeedcafe, 0x3, 0x0, 0x1}}) ptrace$poke(0x420f, r0, 0x0, 0x101) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x143400, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000020c0)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0x2020) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') 108.716317ms ago: executing program 3 (id=621): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newtfilter={0x7f3c, 0x2c, 0x0, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10}, {0x8, 0xa}, {0x5, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x5f}, @TCA_RATE={0x6, 0x5, {0x6, 0xff}}, @TCA_CHAIN={0x8, 0xb, 0x80000000}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x2}}, @filter_kind_options=@f_bpf={{0x8}, {0x4d64, 0x2, [@TCA_BPF_ACT={0x4d50, 0x1, [@m_pedit={0x3ae4, 0x9, 0x0, 0x0, {{0xa}, {0x3a58, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x6c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x4, 0x9, 0x3, 0x1, 0x1ff}, 0x7f, 0xfb, [{0x7, 0x0, 0x9, 0x3, 0x200, 0x40100000}, {0x6, 0x7, 0x7, 0x8, 0x1000, 0x6}]}, [{0xfffffd95, 0x38a, 0x1ff, 0x0, 0x3, 0x1}, {0x2, 0x8, 0x22, 0xfc4c, 0xfffffc01, 0x7}, {0x1, 0x2, 0xffff, 0x6, 0x3, 0x3}, {0x7, 0x8, 0x9, 0x3, 0x1, 0x3}, {0x2, 0x800, 0x4, 0xffff, 0x9, 0xfffffff8}, {0x6, 0x6, 0x24200000, 0x584, 0x7ff, 0x9}, {0x8, 0xe4, 0x80, 0x10532d2a, 0x200, 0x42}, {0xffff, 0x6, 0x4, 0x4c5c, 0x3, 0x9}, {0xfffff053, 0xfffffffc, 0x80000000, 0x3, 0x0, 0x200}, {0xa, 0x8, 0x4, 0xbc4c, 0xffff, 0xb62}, {0x7f, 0x18a3, 0x3, 0x6, 0x995, 0x80}, {0x5, 0xf, 0x40, 0x10000, 0x2}, {0x5, 0x9, 0x401, 0x0, 0x8, 0xe9412f2c}, {0x7fff, 0x800, 0x3, 0x3, 0xe, 0x7}, {0x53, 0x6, 0xe, 0x200, 0xfdd7, 0x200}, {0x7, 0x9, 0xfff, 0xfffffff7, 0x2, 0xa}, {0x7288, 0xa, 0x100000, 0x1, 0x7fff, 0x190}, {0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0xe142}, {0x3, 0x3, 0x2, 0x5, 0xaf, 0x101}, {0x6, 0x1, 0x9, 0x4, 0x1, 0xe1}, {0xd, 0xed4, 0x400, 0xffff0000, 0x0, 0x8}, {0x2, 0x4, 0x5, 0x101, 0x0, 0x4b}, {0x800, 0x80000000, 0xff, 0x3ff, 0xf0, 0xdfd}, {0x7, 0x7fffffff, 0x6, 0x100, 0x400, 0x9}, {0x9, 0xfe83, 0x5183, 0x80000000, 0x9, 0xf}, {0x8, 0x1, 0x2, 0x7fffffff, 0x0, 0x8}, {0x8000, 0xd2f, 0xe, 0x401, 0x10a1, 0x60000000}, {0x9, 0xa, 0x7, 0x7, 0x9, 0x7fffffff}, {0x7ff, 0x44d8, 0x80000000, 0x8, 0x7}, {0x4, 0x2, 0x2, 0x5, 0xb}, {0x5, 0x60cc, 0x6a, 0x8001, 0x6, 0xb}, {0x9, 0x3, 0x0, 0xfffffe16, 0x27, 0xffffff10}, {0xfffffff7, 0xd75, 0x1, 0x80000001, 0xfb57, 0x8}, {0x9, 0x9, 0xecf, 0xffffffff, 0x7, 0x5}, {0x2, 0x9, 0x33, 0x0, 0x8, 0xcc00000}, {0xd, 0x7, 0x12, 0x7, 0x7, 0x6}, {0x1, 0x7fffffff, 0x4, 0x0, 0x80, 0xffff}, {0x2, 0x3, 0x7, 0x2, 0x6fd2, 0x100}, {0x5, 0x5, 0x9, 0x3, 0xf}, {0x2, 0x60000, 0x1, 0x7, 0x5, 0x3ff}, {0x9, 0x56, 0x4, 0x62b3, 0x9, 0x2}, {0x1, 0x1000, 0xcb, 0x6, 0x2, 0x2}, {0xe, 0x7fff, 0x2, 0xfffffe00, 0x7fff, 0x2}, {0x200, 0xc1, 0x8000, 0xf2, 0x8, 0x10000}, {0x5, 0x8, 0x9, 0xffff, 0x401, 0x4}, {0x6, 0x0, 0x5, 0x1fffe000, 0x3, 0x3ff}, {0xfffffff5, 0x5, 0x9, 0x3000000, 0x1, 0xffff}, {0x1e, 0xed4, 0x8, 0x5, 0x2, 0x1}, {0x6, 0xfffffff8, 0x3, 0x3ff, 0x2, 0xce}, {0x1, 0x0, 0x0, 0x7, 0x8, 0x9}, {0xa870, 0x3, 0x0, 0x1, 0x9, 0xf}, {0x7, 0x5, 0x8, 0x3, 0x9, 0x80000001}, {0xfffffffa, 0x2, 0xa8000000, 0x8, 0xffff}, {0x80000000, 0x3, 0x4, 0x1, 0x9}, {0xb4, 0x7f, 0x0, 0x8, 0x9, 0x6}, {0x8000, 0x2, 0x1b9, 0x3, 0x2, 0x8}, {0x2, 0xb75, 0x62, 0x3, 0x8}, {0x5, 0x4, 0xfa, 0x8000, 0x40, 0x8001}, {0x2, 0x4, 0x401, 0x2, 0x200, 0x5}, {0x7, 0x7, 0x0, 0x20000000, 0x5, 0xfff}, {0x6c7f, 0x10, 0x2, 0x3, 0x800, 0x80000001}, {0x4, 0x7bdb, 0x9, 0x7, 0x8, 0x101}, {0x4, 0x3c2, 0x4, 0x30000, 0x5, 0x3ff}, {0x0, 0xa1e, 0x4, 0x1, 0x1, 0x3}, {0x5, 0x10, 0xffffffff, 0xfffffff9, 0x9, 0x9}, {0xbe6, 0x9, 0xd, 0xfff, 0x51, 0x3}, {0x7, 0x80, 0x6, 0x1, 0x8, 0xd}, {0x6, 0x1, 0x8, 0xc, 0x6, 0x9}, {0x8, 0x8001, 0x10000, 0x6, 0xe, 0x10000000}, {0x1, 0xc, 0x9, 0xffffffe5, 0x9, 0xfffffff8}, {0x5, 0x4e6a, 0x2, 0x9, 0x7, 0xe7c}, {0x5, 0x9, 0x1ff, 0x81, 0x2, 0x9}, {0x3ff, 0x4, 0x6, 0x5, 0xa9, 0x7}, {0x4, 0x0, 0xfffffffb, 0x80000000, 0x3, 0x65fc}, {0x40, 0x1, 0x2, 0x2d, 0x2, 0x1}, {0x7, 0x2, 0x3, 0x2, 0x9, 0xffffff81}, {0x33a, 0x9, 0x4c4, 0x9, 0x2, 0xda1}, {0x73, 0x3, 0x3, 0xc1, 0x6, 0xea9a}, {0x4, 0xfffffffa, 0x0, 0x2, 0x1, 0x9}, {0xe2f, 0x7, 0x7f, 0x80000000, 0x8, 0xfffffffe}, {0x3, 0x1000, 0x5, 0x0, 0x4, 0x6}, {0x3, 0x5, 0x0, 0x6, 0x2, 0x8}, {0x6, 0x8, 0x2, 0x8, 0x3, 0x5}, {0xfff, 0x6, 0x6, 0x2, 0x8, 0x8}, {0xc13, 0x9, 0xb, 0x2, 0x1, 0x8}, {0x1, 0xaa, 0x7ff, 0xe, 0x0, 0x8}, {0x8000, 0x4, 0x8, 0x5, 0xb, 0x80000001}, {0x67, 0x7fff, 0x0, 0x400, 0x9, 0xe}, {0x1, 0xf9, 0x7, 0x2, 0x3, 0x1}, {0x8, 0xffff, 0x1, 0x10001, 0x5, 0x8}, {0x80000000, 0x1, 0xdef, 0x9, 0x5, 0x56f1}, {0xe, 0x61, 0x100, 0xffffffff, 0x8, 0x5}, {0x30, 0x1, 0x401, 0x40, 0x2, 0x7f}, {0xb70d, 0x4e1, 0x3, 0x0, 0x40, 0x9}, {0xa, 0x4, 0x2fca, 0xa2b, 0x1b8, 0x9}, {0x0, 0x72, 0x7ff, 0x2, 0x0, 0x6c}, {0x9, 0x3, 0x8, 0x9, 0x4, 0xffffff01}, {0x0, 0x4, 0xfffffffe, 0x8, 0x6, 0xd0}, {0xa, 0x7, 0x72f2, 0x40, 0x0, 0x6}, {0x7, 0x6c, 0xb5, 0x2, 0x100, 0x8}, {0x4, 0x9, 0x2, 0x3, 0x1ff, 0x5}, {0x2, 0x5, 0xfffffffd, 0xffffffff, 0x2, 0x8}, {0x2, 0x5, 0x80, 0x9, 0x9, 0x2}, {0x3, 0x80, 0x8, 0x6, 0x8, 0x1}, {0x8c, 0x19bd, 0x6, 0x7fffffff, 0x3, 0x9}, {0x7, 0x4, 0x4, 0xc8d, 0x1cf4, 0x9}, {0xb, 0x2, 0x2d, 0x1, 0x2, 0x9}, {0x3, 0x251c, 0x56a575f3, 0x3, 0x1ed741cf}, {0x0, 0x8, 0x0, 0x8, 0x7, 0x8}, {0x7, 0x7fffffff, 0x0, 0x2, 0x7, 0x9}, {0x40, 0x2, 0x0, 0xffffff81, 0x101, 0x8}, {0x7, 0x10, 0x300000, 0x6, 0x4, 0xc39}, {0x6ba, 0x8, 0x0, 0xfffffffb, 0x7fffffff, 0x8}, {0x180d, 0x6, 0x1, 0x8, 0x6, 0x1}, {0x2, 0x1, 0x0, 0x400000, 0x1, 0x3}, {0xd3, 0x4, 0xfffff42d, 0x9, 0x216, 0x9493}, {0x1, 0x7, 0x9, 0x5, 0x401, 0xf2}, {0x80, 0x80000, 0x4e72, 0x7, 0x6, 0x2000000}, {0x5, 0x9, 0x800, 0x5, 0xfffffff7, 0x9}, {0x8, 0x5, 0x5, 0x5, 0x800, 0x3}, {0x4, 0xab038ab, 0xfffffffd, 0x7a92ffab, 0xa2c, 0x6}, {0x0, 0x8000, 0x800, 0xe64, 0x6, 0x498}, {0xffffffff, 0x5, 0x3, 0x4, 0xc654, 0xcc}, {0x6, 0x9, 0xeec6, 0x4, 0x0, 0x7}, {0x7, 0x3, 0xfffffffc, 0x6, 0xd, 0x101}, {0xffff, 0xe2, 0x7ff, 0x80000000, 0x8000, 0x6}, {0xfffffff9, 0x4, 0x5, 0x5, 0x1ff, 0x5}, {0x1, 0x6, 0x81, 0x9, 0xfffffff9, 0xa878}], [{0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x3}, {0x5}, {0x2}, {0x5}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x3, 0x3c238dc0a6798e09}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x8337b1692766e467}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x99bb0706208066fb}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {}, {0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x2}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x9, 0x5, 0x3, 0x8}, 0x4, 0x5, [{0x7, 0x6, 0x5, 0x3, 0x5, 0x66a2}, {0x401, 0xe, 0x80000000, 0x9, 0x9, 0x7fff}, {0xcb4, 0x2, 0x4, 0x3, 0x200, 0x3}]}, [{0x960c, 0x6, 0x7, 0x4, 0x7444, 0x630}, {0x3, 0x0, 0x10, 0xf, 0x4, 0x2}, {0xfffffff9, 0x3f65, 0x9, 0x26d, 0x4, 0x7fffffff}, {0x7, 0x6, 0x240000, 0x38fd, 0x0, 0x7}, {0x5, 0x2, 0x2, 0x100, 0x5, 0x10000}, {0x1, 0x9, 0x0, 0x1, 0x4, 0x5}, {0x8, 0x1, 0x5, 0x10000, 0x5, 0x95}, {0x9, 0x3, 0x81, 0x3, 0x0, 0x2000000}, {0x9, 0x6, 0x2, 0x8, 0x8, 0x4}, {0x4, 0x7ff, 0x0, 0xe, 0x81, 0x38b5}, {0x1, 0xffffffff, 0xd, 0xf87, 0x5, 0x3}, {0x10e1c5b3, 0x1, 0x7, 0x26, 0x1, 0x9}, {0xd7, 0x3, 0x0, 0x1, 0x9, 0x1}, {0x8000, 0x2, 0x4, 0xfffffe9c, 0x7, 0x3d02}, {0x7, 0x80000000, 0x5, 0x9, 0xffff8a8f, 0x9}, {0x781f8b41, 0xfffffff5, 0xa, 0x0, 0x6, 0x200}, {0x9, 0x1, 0xf, 0xffffffff, 0x2, 0x1}, {0x0, 0x5, 0x10000, 0x0, 0x0, 0x6}, {0xffffffe2, 0xc8, 0x5, 0x73, 0x10}, {0x7, 0x3, 0x3, 0xfffffff9, 0xf6, 0x6}, {0x3836, 0x664, 0x4, 0x7, 0xe, 0xcd}, {0x5, 0xf8f7, 0xe, 0x80000000, 0x2, 0x7}, {0x6, 0x6, 0xf1, 0xcf89, 0x200, 0x3}, {0x7, 0x6, 0x8, 0x2, 0x3, 0x10}, {0x5, 0xdd, 0x80000001, 0x8, 0x2, 0xb}, {0x8, 0x3, 0x0, 0x3, 0x2, 0x9}, {0x9, 0x80000001, 0x4, 0x3, 0x80000001, 0xa19}, {0x8, 0xd, 0x401, 0x4, 0x8, 0x6}, {0x4, 0x7, 0x5, 0x7, 0x7c4e, 0x8}, {0x2, 0x4, 0x8, 0x40, 0x2794, 0x88}, {0x28, 0xa3, 0x8, 0x4, 0x5a05, 0x8}, {0xffffffff, 0x800, 0x3, 0xd, 0x1, 0x40}, {0x0, 0xfb5ed182, 0x3, 0x7ff, 0x0, 0x2}, {0x3, 0x5, 0x2, 0x8, 0x2}, {0x1, 0x40, 0x4, 0x3, 0x6, 0xe92390f}, {0x800, 0xd45, 0x3, 0xfff, 0x0, 0x9}, {0x9, 0x2, 0x5, 0x80000000, 0x6a2, 0xfffffffd}, {0x3, 0x9, 0x3b, 0xb, 0x100000, 0x6}, {0xbc, 0x7, 0x7, 0x4, 0xb7dc, 0x9}, {0x2, 0x8a1, 0x1, 0xb4, 0xc, 0x15}, {0xf69, 0xfffffffc, 0x0, 0x2, 0x7a, 0x6}, {0x8, 0x7, 0x3, 0x9, 0xd, 0x8}, {0x7, 0x80000000, 0x44aa, 0x6, 0x3, 0x4}, {0x5, 0x9, 0x8, 0x0, 0x3, 0x2}, {0x6, 0xffff, 0x3, 0x7, 0x10001, 0xfff}, {0x0, 0x5, 0xdda, 0x4c5, 0x0, 0x4}, {0x7, 0xd9, 0x4, 0x0, 0x7, 0x7}, {0x9, 0x3, 0x8, 0xe, 0x1, 0x100}, {0x40, 0xd, 0x7, 0xffffffc4, 0xe, 0x6}, {0x60, 0x400, 0x2, 0x0, 0x9, 0x7}, {0x5, 0x200, 0x3, 0x0, 0x8, 0x4}, {0x6, 0x10001, 0x523, 0x4, 0x3, 0x1}, {0xffffffff, 0x2, 0x2, 0xd8, 0x2, 0x7}, {0xb10ce418, 0x800, 0x600000, 0x1800000, 0x9, 0x8}, {0x4, 0xfbeb, 0x1, 0x8, 0xfff, 0x4}, {0x40, 0x9, 0x2, 0x498, 0x1, 0xe9}, {0x745, 0x6, 0x5, 0xd, 0xfffffffb, 0x8000}, {0xe, 0x5, 0x7ff, 0x4, 0x4, 0x2}, {0xfffffffd, 0x1, 0x1, 0x468, 0xe3, 0x2}, {0x5, 0x9, 0x5, 0x1fc8, 0x2, 0x9}, {0xfffffffd, 0x4, 0x7, 0x401, 0x6}, {0x3, 0x6, 0x4, 0x9, 0x1, 0x8}, {0x1, 0xffffffff, 0x1, 0x1, 0x7f, 0x7}, {0x1, 0x10001, 0x6, 0x0, 0x0, 0xe}, {0xbe, 0x0, 0xa, 0xfda6, 0x8001, 0xe63}, {0x10001, 0xfffffff8, 0x5, 0x1, 0x0, 0xfffffffd}, {0x2, 0x2, 0x15a000, 0x0, 0x5, 0x7f}, {0x3, 0x10001, 0x2, 0xffff, 0x3b, 0x3}, {0x5, 0x3, 0xffffff43, 0x5, 0xffffffff, 0x101}, {0x4, 0x7, 0x3000, 0x5, 0xb, 0x7f}, {0x5, 0xdb6, 0xfff, 0xfffffff9, 0xfff, 0xe}, {0x5bb7, 0xac, 0x1, 0x8, 0x0, 0x9}, {0x9, 0x4, 0x2, 0x4b, 0xffffffff, 0x80000001}, {0x5, 0xc, 0x5, 0x1c000, 0x7, 0x5}, {0x5, 0x7, 0x3, 0x1, 0x4f34, 0x2}, {0x3b79, 0x7, 0x0, 0x101, 0x9, 0x4}, {0x9, 0x8, 0x6, 0x5, 0x1, 0x8}, {0x0, 0x9, 0x9, 0x1c, 0x61e6, 0xeb}, {0x0, 0x0, 0x80000000, 0x2, 0x8, 0xc}, {0xdc7, 0xe, 0x1, 0xff, 0x0, 0x1}, {0xffff, 0xc100, 0xbe8f, 0x6, 0x80000000, 0x80000000}, {0x5, 0x0, 0x859, 0x8, 0x101, 0x6}, {0x9, 0x6, 0x800, 0x5b69, 0xff, 0x2}, {0xfffffff7, 0x3, 0x6, 0x6, 0x0, 0x8}, {0x401, 0x8, 0x1, 0xb, 0x4, 0x3}, {0x100, 0x77aa, 0x0, 0x1, 0x10, 0x8}, {0x7f, 0xe, 0x7, 0xb5f, 0x2c, 0x7}, {0x9, 0x1, 0x0, 0x3, 0x8}, {0x7, 0x0, 0x2, 0x9, 0x8, 0x8}, {0xe7ab, 0x7, 0x4, 0x2, 0x8, 0x2}, {0xe, 0x4, 0x9, 0x3, 0x6, 0x2}, {0x5, 0x80000001, 0x4, 0x102d, 0x9, 0x2}, {0x0, 0xa4, 0xb, 0x8000, 0x3, 0x4}, {0xab, 0x7, 0x7, 0x7, 0x7fff, 0x4}, {0x1, 0xf, 0x8, 0xa, 0x3, 0x6}, {0xcaa, 0x1b0e, 0x1, 0x401, 0x7, 0x2}, {0x5, 0x9, 0x400, 0x9, 0x7}, {0x1, 0x9, 0xf, 0x0, 0x861c, 0x9}, {0xa4b1, 0x1, 0x1, 0x91be, 0x0, 0x3}, {0x7, 0xffffffff, 0xe90, 0xf73, 0x81, 0xffffffff}, {0x7ff, 0x2, 0x9, 0x3, 0x5, 0x3}, {0x0, 0xfffffff7, 0x4, 0x7ff, 0x5, 0x3}, {0x6, 0x7, 0x0, 0xfffff001, 0xe, 0x2}, {0x0, 0x2, 0x7, 0xffffffff, 0x80000000, 0x7}, {0x4, 0x10, 0x8605, 0x80000001, 0x5, 0x7fff}, {0x3, 0x7fff, 0x6, 0x3, 0xff, 0x73483ef4}, {0x6, 0x1, 0x21, 0x4, 0x0, 0x10000}, {0x5, 0x5, 0xb9, 0x1ff, 0x9, 0xf}, {0x8, 0x0, 0x4, 0x2, 0x6, 0x7}, {0x401, 0x753, 0x2, 0x1, 0x667bbb50, 0x3}, {0x0, 0x6, 0xd, 0x4, 0x10, 0x4}, {0x6, 0xf, 0x2, 0x40000000, 0xf}, {0x3, 0x1, 0xfff, 0xe, 0x0, 0x3}, {0x4, 0x0, 0x29, 0x9177, 0x5, 0x3}, {0xb7a, 0x10000, 0x4, 0x3, 0x3000, 0x8}, {0xbc2, 0x100, 0x4, 0x3, 0x6, 0xde3}, {0xc, 0x5c92, 0x5, 0x6ee, 0xffffffff, 0x1}, {0xbe8, 0xf5e, 0x8, 0x7ff, 0x7, 0x81}, {0x7, 0x1, 0x200, 0x2800, 0x800, 0x200}, {0x1, 0x8, 0x400, 0xb1e1, 0x10000, 0x5}, {0xb048, 0xd, 0x7ff, 0x2, 0x8000, 0x7fff}, {0x9, 0x5, 0x5, 0x2, 0x9, 0xb}, {0x3ff, 0x7, 0xfffffffa, 0xfff, 0x1, 0x2}, {0xf, 0x10001, 0x3, 0x2, 0x10, 0x3}, {0x28a2, 0x2952b22a, 0x4, 0x3, 0x8, 0x5}, {0x40, 0x5, 0x1, 0xff, 0x0, 0x10}, {0x1d, 0x40, 0x401, 0x0, 0x10, 0x4}, {0x6, 0x9, 0x1, 0x4, 0x200, 0x5}], [{0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x4}, {0x1, 0x776dbe6f285ed465}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {}, {0x5}, {0x1, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x6}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xc4d651b95baa841a}, {0x2}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4, 0x4fef0febe7aea3de}, {0xb6bfa341e30a6f99, 0x2558f9d5b84d0405}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x5}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x7, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0xbc69bf5da5e02bf8}, {0x5}, {0x2, 0x1}, {0x1}, {0x5}, {0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xf10, 0x4, {{{0x1, 0x2, 0x5, 0x8001, 0xc}, 0x0, 0xa, [{0x1f8e, 0x1ff, 0x4, 0x1, 0xb1, 0x3}, {0x12a8, 0x9adb, 0x7, 0x3ff, 0x5, 0x5}, {0xcded, 0x9, 0x3, 0x8, 0x5d, 0x1}, {0x6, 0x0, 0xe8, 0x9, 0x6, 0x8}, {0x3ff, 0x6, 0x4, 0x3ff, 0xb3}, {0x0, 0x1, 0x8, 0x7, 0x7, 0x3}, {0x5f78b5f8, 0x3, 0x6, 0x9, 0x5, 0xff}, {0x6, 0x4, 0xf, 0x0, 0x2, 0x40}, {0x2, 0x1ff, 0x5, 0x0, 0xeb8, 0x7}, {0x9, 0x3, 0x7, 0x8, 0x0, 0xe}]}, [{0xffffffff, 0x4, 0x96, 0x5d, 0x9, 0x4}, {0x7842, 0xc, 0x242, 0x4, 0x10, 0x6}, {0x9, 0x0, 0x8, 0x1, 0x5, 0xb8b}, {0x2, 0x7, 0x80, 0x4, 0x80000001, 0x8}, {0x400, 0x0, 0xf, 0x1, 0x1, 0x9}, {0x0, 0x5, 0x1, 0x5, 0x8001, 0xfffffff7}, {0xc, 0x4, 0xac, 0x2, 0x2, 0x11}, {0x0, 0x7, 0xfb8, 0x75, 0x3, 0xfffffff2}, {0xffffffff, 0x4, 0xdb01, 0xa, 0x566, 0x604e}, {0xff, 0x0, 0xae, 0x6, 0x0, 0xc}, {0xfffffff8, 0x230, 0x10000, 0x1, 0x0, 0x5}, {0x400, 0x101, 0x5, 0x57, 0x81, 0x1ff}, {0x1, 0x4d, 0xfffffffa, 0x4, 0x100, 0xfffffffa}, {0xd56, 0xcce4, 0x3, 0x3, 0xe7f2af9, 0x8}, {0xd31, 0x2, 0x7, 0x2, 0x9a9, 0xa29}, {0x200, 0x9, 0x3, 0x3, 0x5, 0x8000}, {0x4, 0x400, 0xfffffffc, 0x3, 0x9, 0x1000}, {0x1, 0x3, 0x3, 0x0, 0x10001, 0xb}, {0xffffff81, 0xf2, 0x6, 0x14c, 0x8000, 0x6}, {0x7fffffff, 0xffffffff, 0x0, 0x3, 0x1, 0x9}, {0x200, 0x5506, 0x9, 0x6, 0x8, 0xa}, {0x81, 0x7, 0xc, 0x6, 0xd, 0x1}, {0xe9b, 0x89, 0xfff, 0x8, 0x7, 0x8}, {0x1, 0x8, 0x7fffffff, 0x6, 0xa, 0x3}, {0x8, 0xfffffff4, 0x9, 0x5, 0x8, 0x8d2}, {0x10001, 0xfffffffd, 0x2c76, 0xb6, 0x10, 0xb7}, {0x98c, 0x4, 0x4a3, 0x4, 0x4, 0x40}, {0x8000, 0x1, 0x0, 0x3, 0x0, 0x9}, {0x2, 0x5, 0xf71e, 0x4, 0x3, 0x1}, {0x81, 0x9, 0x800, 0x3, 0x7f, 0x6}, {0x3, 0x6, 0x3, 0x0, 0x8000, 0x3}, {0x3, 0x8, 0x4, 0x2, 0x7, 0x8}, {0x9, 0x8, 0x9, 0x6, 0xac, 0x800}, {0x8, 0x4, 0x200, 0x8, 0x4, 0x100}, {0x8001, 0x8, 0x0, 0x5, 0x6, 0x5}, {0x7, 0x8, 0x7, 0xf, 0x7, 0x7a0}, {0x7, 0x370e, 0x3, 0x7, 0x1, 0x1}, {0x4, 0x2, 0x2, 0xf6, 0x5, 0x4}, {0xffff9fab, 0x1, 0x8, 0x7f, 0x7fff, 0xfffff87e}, {0x5, 0x9df7, 0x4, 0xc, 0x0, 0x1}, {0x0, 0x100, 0xb376, 0x4, 0x1, 0xb}, {0x5, 0x5, 0xea, 0xf0000000, 0x2, 0x3}, {0x7, 0x10000, 0x70, 0x40, 0xecd, 0x800}, {0x4a, 0x2, 0xdcf, 0x400, 0x1, 0x686271a8}, {0x2, 0x0, 0x8, 0x0, 0xe, 0x7}, {0x8d1f, 0x1, 0x1, 0x51, 0xe9a1, 0x7}, {0x8, 0x7, 0x1, 0x6, 0x7fffffff, 0x400}, {0x32ab39bd, 0x1, 0x9, 0x4, 0x2, 0xf}, {0x4, 0x3cd0, 0x7, 0x8, 0x5fbd, 0x4d}, {0x7fffffff, 0x0, 0x3, 0x2, 0x8000, 0x7fff}, {0x1, 0x4, 0x9, 0xfffffffe, 0x6, 0x1}, {0xa5c5, 0x3, 0xffffffff, 0x8, 0x3, 0x9}, {0x1, 0x5, 0x6, 0x5, 0x47d5, 0x4}, {0x8, 0x0, 0x7, 0xff, 0x1, 0x4}, {0x7, 0x4, 0x8cea, 0x7, 0x2, 0x6}, {0x8, 0x8, 0x7, 0x4, 0x1, 0x7}, {0x5, 0x6, 0x7, 0x1, 0x3, 0x3}, {0x10001, 0xfffffffd, 0x8, 0x9, 0x9, 0x6}, {0x10, 0x4, 0x3, 0x2, 0xadf, 0x800}, {0x4, 0x42, 0x382, 0x3, 0x6, 0x7}, {0x9, 0x400, 0x0, 0x1, 0xfffffffb, 0xdae70ec}, {0x3, 0x8, 0xa3, 0x8, 0xb, 0x7}, {0x2, 0x4, 0x8, 0xf, 0xc9, 0xb}, {0x9, 0x1, 0x1, 0x7, 0x400, 0x1}, {0x607, 0x40, 0x8, 0x8, 0x4105, 0x80000001}, {0x7ab, 0x2, 0xfffffc00, 0x8c, 0x5}, {0x7, 0xfffffffd, 0x8001, 0x3, 0x6, 0x4}, {0xd, 0x5, 0x9, 0xff, 0xb6, 0x9}, {0x9, 0x800, 0x8, 0x4, 0x9}, {0x9, 0x1a, 0xa001, 0xfffff800, 0x6, 0x4}, {0x0, 0x2, 0xffffffff, 0x7, 0x10000, 0x1}, {0x3, 0x3, 0xae6, 0x8, 0x2, 0x2}, {0x5, 0x6, 0xffff, 0xffffffff, 0x827, 0xb}, {0xb, 0x76, 0x6, 0x4, 0x1, 0x1}, {0x8000, 0x10000, 0xc1, 0x4, 0xe, 0x1}, {0x3, 0x10001, 0x845, 0x1, 0x6, 0x2}, {0x7, 0xffffffff, 0xb9e, 0x1, 0x5b, 0xfffffffd}, {0x7, 0x38, 0x6, 0x1, 0x4, 0xa8}, {0xfffffff7, 0xc, 0x3, 0x2, 0x0, 0xc}, {0x1, 0x6, 0x8, 0xff, 0x7bce, 0x400}, {0x1000, 0xffffffb8, 0x6, 0x9, 0x4}, {0x0, 0x4, 0x4, 0xb, 0xc0b, 0x1}, {0x4, 0x1, 0x3, 0x0, 0x90, 0x3ff}, {0x3, 0x2, 0x1, 0x0, 0xd, 0x2}, {0x2, 0x0, 0x7, 0xfffffff9, 0x7, 0x7fff}, {0x9, 0x1b76, 0x8, 0x6, 0x5, 0x14}, {0x0, 0x2, 0x8, 0x7, 0x10000, 0x7}, {0xc43, 0x0, 0x3, 0x400, 0x1, 0xf}, {0xfffffffa, 0x8, 0x7fffffff, 0x4, 0xffff, 0x9}, {0x2, 0x23, 0x1, 0x1, 0x4, 0x833}, {0x45ac, 0x9, 0x7fffffff, 0x9, 0xcfa8, 0x5}, {0x8, 0x0, 0x5, 0xb, 0x3, 0x5}, {0x1, 0x0, 0x8, 0x1000, 0xd67f, 0xffff}, {0x8, 0xc28a, 0x6, 0x5, 0x0, 0xe0a9}, {0x1, 0xf21, 0x8, 0x0, 0x0, 0x67}, {0x4, 0x7f, 0x9, 0x3, 0x6, 0x1}, {0x7, 0xb, 0x5, 0x4, 0x9, 0xffff}, {0x7f, 0x9, 0x7, 0xd55f, 0xff}, {0x6, 0x0, 0x5, 0xdddd, 0x637, 0xa}, {0x79a0f950, 0x591, 0x2, 0x400, 0x10, 0x5}, {0x5, 0x4, 0x3, 0xfd22, 0x2, 0x5f}, {0x40, 0x101, 0x7, 0xa, 0x2dc5, 0xe}, {0x4, 0xffff, 0x8, 0x7, 0x8, 0x5}, {0x9, 0x7, 0x1bc, 0x6, 0x0, 0x7}, {0xdd, 0xfff, 0x1, 0x6, 0x6, 0x8}, {0xbfb, 0x2, 0x7, 0x0, 0x1, 0x101}, {0xe8, 0x4, 0x6c, 0x1ff, 0xf6, 0x3}, {0x2, 0x942, 0xe54, 0x6a8, 0x542d, 0xe}, {0x9, 0xfffffff9, 0xb4, 0xcc, 0xaac, 0xffff}, {0x7, 0x8, 0x100, 0x3, 0x4, 0x80}, {0x0, 0x9, 0x2, 0x2, 0x8001, 0xe0000}, {0x0, 0x4, 0x2, 0x1, 0x4, 0x5}, {0x8, 0x1a, 0x1, 0x5, 0x7fff, 0x82}, {0x6, 0x7ff, 0x4, 0x1ff, 0x7, 0x5c}, {0x9, 0x7ff, 0x6, 0xa84, 0x8000, 0x3}, {0x8, 0x8, 0xa3, 0xba05, 0xf, 0x7ff}, {0xeb, 0x8, 0x8, 0x7, 0xff, 0x101}, {0x101, 0x401, 0x716e, 0xfffffff8, 0x6, 0x1}, {0xcda6, 0x7, 0x43, 0x7, 0x1, 0x8}, {0x80000001, 0xffffffff, 0x9, 0x7, 0x2, 0x7}, {0xfff, 0x1, 0x1, 0x4, 0x8, 0x8000}, {0x7, 0x4, 0x4533, 0x101, 0x7, 0xbf}, {0x3, 0xffff, 0x5, 0x2, 0x4000000, 0x400}, {0x7, 0x0, 0x6, 0x3f, 0x4, 0x7f}, {0x6, 0x7, 0x100, 0x6, 0x8, 0x1}, {0x83, 0x0, 0x0, 0x3, 0x8, 0x200}, {0x9, 0x7, 0x20000000, 0x5, 0xc5, 0xc8d8}, {0x4, 0xffffffff, 0x3, 0x1af9, 0xffff, 0x91}], [{0x0, 0x1}, {0x5, 0x1}, {0x3}, {}, {0xd3820deef70b95f1, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x2}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x3}, {}, {0x2}, {}, {0x5, 0x1}, {0x2}, {}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {}, {0x5, 0x1}, {}, {0x1, 0x4b25500174b431ce}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {}, {0x2}, {0x1}, {0x3, 0x1}, {0xe151fff520a7eef1}, {}, {}, {0x4}, {0x3}, {}, {0x2}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x3}, {0x4}, {0x5}, {0x3}, {0x4}, {0x2, 0x1}, {0x1}, {0x1}, {}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x3, 0x400, 0x20000000, 0x5, 0xffffff32}, 0x1, 0x63}, [{0xffffff0c, 0x76, 0x7, 0x1, 0x6, 0x8}, {0x78, 0x9, 0xac, 0x10, 0xa8, 0x3198}, {0x7, 0x127b, 0x2, 0xffff0cae, 0x3, 0xf}, {0x8, 0x7, 0xc70b, 0xefe1, 0xe3, 0xff}, {0x81, 0x8, 0x9, 0xffffff46, 0x10000, 0x4}, {0x5, 0x9c, 0x9, 0x2, 0xfffff21e, 0x6}, {0x7fffffff, 0x0, 0x35bb, 0x5, 0xe1, 0x9}, {0x1, 0x0, 0x8, 0x81, 0x7fff, 0x6}, {0x15, 0x4, 0x1, 0x3, 0x4, 0x3}, {0x5, 0x1ff, 0x8, 0xc01, 0x5, 0x6}, {0xffffffff, 0xda, 0x80000001, 0x2, 0xffff, 0x9}, {0x1, 0x6, 0x54b, 0xffffffff, 0x5, 0x3}, {0xfffffefb, 0x800, 0x895, 0xb, 0xaa6, 0x5}, {0x401, 0x401, 0x8, 0x200, 0x6, 0x9}, {0x3, 0x9, 0x6, 0x0, 0x1, 0x25cc}, {0x7, 0x7f, 0x4, 0x7, 0x8, 0x8}, {0x2, 0x9, 0x7, 0x7, 0xff, 0x3}, {0x4, 0x7, 0x8, 0x7fffffff, 0x3, 0x1b54000}, {0x0, 0x1, 0x4, 0x1, 0x0, 0x2}, {0x8, 0x40, 0x8001, 0x5, 0x5821, 0x3}, {0x0, 0x5, 0x3, 0xc, 0x8, 0x1ff}, {0x6, 0x2, 0x81, 0x5, 0x4, 0x1}, {0xfffffffa, 0x1, 0x4, 0x3, 0xff, 0x6}, {0xc6f, 0x80000000, 0x1, 0xe4, 0x2, 0x1}, {0xdc5f, 0x9, 0x10000, 0xfffffffb, 0x5, 0xffffffd5}, {0xfff, 0x1, 0xff, 0x9, 0xfffffff9, 0xf2f3}, {0xe, 0x6, 0xffffcefd, 0x6, 0x4e, 0x9}, {0x10000, 0x0, 0xffffffff, 0x4, 0xc, 0x6}, {0x9, 0x7ff, 0x3, 0x2, 0x9, 0x7fff}, {0x7ff, 0x7ff, 0x10001, 0x1, 0x8, 0x14dc}, {0x40, 0x1, 0x1fb3fb4e, 0x48, 0xa0c, 0xfff}, {0x0, 0x733, 0x8, 0x9, 0x7, 0x7}, {0xf34, 0xb8, 0x2, 0x5, 0x9, 0x4}, {0x8, 0xfffffffe, 0x3, 0x6, 0xfffffffa, 0x5}, {0x9, 0xeb5, 0x1, 0x6, 0x3, 0x2}, {0xda, 0xff, 0x0, 0x4, 0x8, 0x7ff}, {0x1ff, 0x1, 0x7ff, 0x1, 0x2000, 0x401}, {0x0, 0x4, 0x0, 0x1, 0x200, 0xc464}, {0x5, 0x101, 0x101, 0x33, 0x5}, {0x0, 0x7, 0x9, 0x7, 0xc0, 0xba9}, {0xffff, 0x0, 0x1, 0x8, 0x40, 0x80cf}, {0x6, 0x1, 0x8, 0x81, 0x624, 0x3}, {0x0, 0xd22, 0x8, 0x1, 0x3}, {0xd301, 0x0, 0x27, 0x401, 0x7, 0x2}, {0x8b0, 0x6, 0x2, 0xf9, 0xfff, 0x6}, {0x7, 0x5, 0x40, 0x7, 0x1ff, 0x80000001}, {0xa, 0x9, 0x6, 0x8, 0x5, 0x8}, {0x40, 0x0, 0x9, 0x300, 0x4, 0x10000}, {0xf, 0x5, 0x8, 0x0, 0x5, 0xcd}, {0x5, 0x1a00, 0x80000000, 0x9, 0x4, 0x7}, {0xc528, 0x0, 0x3, 0x10000, 0x0, 0x8}, {0x3, 0x9, 0x7ff, 0xd3c4, 0x1, 0x9}, {0x401, 0x9, 0x80, 0x9, 0x0, 0x3}, {0x4, 0x6f65, 0x1, 0x0, 0xea8, 0x4}, {0xfffffff9, 0x6, 0x3, 0x5, 0x2, 0x7}, {0xdc1a53d5, 0x5, 0xf, 0x1, 0x0, 0xfffff0b2}, {0x9, 0x9, 0x5, 0xac0, 0xffffffff, 0xb2}, {0x9, 0x3, 0x2, 0x6, 0x8, 0x10000}, {0x3, 0x1, 0x0, 0x0, 0x9, 0xc}, {0x10000, 0x1, 0x1, 0x7fffffff, 0x7fffffff, 0xfffffffc}, {0x5, 0x3, 0xfffffe01, 0xe7d, 0x9d6, 0x6}, {0x8, 0x634, 0x2, 0x1, 0x9, 0x4}, {0x7, 0x4, 0xb60a, 0x1, 0xb, 0x1}, {0xa, 0x4, 0x5, 0x3, 0x2, 0x20e}, {0x3, 0x878, 0x7, 0x401, 0x9, 0x6}, {0x7, 0x8, 0xffffffff, 0x7, 0xfe4, 0x3}, {0x5, 0x5, 0x5000000, 0x4d8b, 0x80000000, 0x5}, {0x4d05, 0xfff, 0x2, 0x57f, 0x6, 0x6}, {0x800, 0xc6c3, 0x7, 0x7, 0x8, 0x4}, {0x10000, 0x7, 0x6, 0x7, 0x7fff, 0x1}, {0x92, 0x3, 0x0, 0x3e18, 0x5}, {0x5, 0x0, 0xf, 0x5, 0x6, 0x800}, {0xfffffffe, 0x3ff, 0x800, 0x7fffffff, 0xffff, 0x5}, {0x9ba, 0x7, 0x6, 0x2c68, 0xcb, 0x6}, {0x56, 0xb6b, 0x0, 0x9, 0x101, 0x3ff}, {0x3, 0x401, 0x81, 0xa, 0xff, 0x5}, {0xff, 0x6, 0x1, 0xffffff21, 0x9, 0xadc7}, {0xfffffffd, 0x5, 0xffff, 0x6, 0x1000, 0x9}, {0xe48, 0xb, 0x10001, 0x9, 0x6, 0x6}, {0x9, 0x8, 0x9, 0x8, 0x1, 0x7}, {0x1, 0x4c, 0xc, 0x0, 0x10001, 0x9eb}, {0x3, 0x8, 0x2, 0xffff, 0x6, 0xc}, {0x8, 0x80000000, 0x7, 0x7, 0x3ff, 0x3}, {0x7, 0x1, 0x8, 0x43c, 0x4d4c, 0x1}, {0xffff, 0x0, 0x10, 0x9, 0xfffffffc, 0x6ded}, {0xfffffff9, 0x3, 0xffffffff, 0x1ef, 0x4, 0x8}, {0x1, 0x0, 0xfae, 0xfffffc00, 0x400}, {0x7, 0x8, 0xfff, 0x7, 0x7, 0xb}, {0x7, 0x6, 0x8000, 0xffffffff, 0x3, 0x1}, {0x0, 0x6, 0x8001, 0x5, 0x9, 0x2}, {0x7, 0x8, 0x9, 0x9, 0xff0f, 0xc}, {0x2, 0x3, 0x1, 0x8, 0x1, 0x5}, {0xd, 0xe0000, 0x8, 0x5, 0x3, 0x18000}, {0x0, 0x4, 0x5, 0x3, 0x2, 0x80000000}, {0x7e67c8dc, 0x46, 0xfff, 0x4, 0x10001, 0x200}, {0x5, 0xffffffff, 0x54000000, 0x9, 0xbe9e, 0xffff994f}, {0x0, 0x10001, 0x43, 0x7e, 0xfffffff9, 0x28}, {0x4, 0x837, 0x2, 0x8, 0x4, 0x1}, {0x5, 0x0, 0x7, 0xffffffa1, 0x1, 0xf}, {0x2, 0x100000, 0xd, 0x3d, 0x1, 0x80000001}, {0xfffffffc, 0x0, 0x5, 0x9, 0x8, 0x3}, {0x3, 0x2, 0xf2, 0x4, 0x0, 0x7}, {0x9, 0xfec9, 0x1, 0x9, 0x200, 0x5cb}, {0x7, 0x0, 0x9, 0x8, 0xd29, 0x7}, {0x8001, 0xbcd9da4, 0x8, 0x9, 0x507e, 0x1}, {0x6, 0x4, 0x8, 0x401, 0x0, 0x401}, {0x8, 0x800, 0xfff, 0x5, 0x2, 0x3}, {0x1, 0x80000000, 0xfffffff9, 0x401, 0x1, 0x2}, {0x8, 0x2, 0x9, 0xa49, 0x8, 0x3}, {0x8000, 0xffffffff, 0xbf, 0x3ef, 0x3, 0x4}, {0x5, 0x100, 0x1, 0x3, 0x5, 0x3}, {0x4, 0xffffffff, 0x40, 0x1, 0x5, 0xa}, {0x100, 0x10, 0x2, 0xfffffffc, 0x5, 0x8}, {0x7, 0x53, 0x80000000, 0x400, 0x5, 0x8}, {0x80, 0xffff8000, 0x9aa1, 0x80, 0x6, 0x7a72}, {0x1, 0x7, 0xffffffff, 0x7, 0x890, 0x3}, {0x0, 0x1, 0x1, 0x2, 0x7, 0x80}, {0x3, 0x1, 0xe06, 0x10000, 0x2, 0x2ead3cd9}, {0xffffffff, 0x1ff, 0x8, 0x6, 0x7, 0xc}, {0xfffffff8, 0x80, 0x4, 0xfff, 0x7f, 0x9}, {0x7, 0x1, 0x7, 0x6, 0xd888}, {0x6, 0x6, 0x4, 0x9, 0x7, 0x101}, {0x6, 0x8, 0x0, 0xbe, 0x5, 0xc}, {0xc0, 0x9, 0x2, 0x1, 0x39b8, 0x7}, {0xfffffffa, 0x1, 0x1, 0x1000, 0x9d4, 0x7}, {0x7fffffff, 0x2, 0x0, 0x9, 0x3, 0x2}, {0x7, 0x1, 0x6f, 0x2, 0x2, 0x3}, {0x1000, 0x1, 0x3, 0xffffffff, 0x2, 0xaefe}], [{0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0xe8f164e8f4ee855f}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x5}, {}, {0x1, 0x1}, {0x2, 0x1}, {0xc07fd4f2068b73e1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x2, 0x1}, {0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0xb70a1157fb24abec}, {0x7}, {0x2}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x2}, {0x4, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x3193d108bffcdc17, 0x1}, {0x5, 0x1}, {0x7}, {0x3}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x4}, {0xc}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x2}, {0x3}, {0x2}, {0x4}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}]}}]}, {0x62, 0x6, "1086f7a15a0615266cca4dfc9329bc7986628e72351ea225dedda1a647317086f13dbe7eb24645595466f16224c12748d58f36126472991a43c851665f0d863282b29fddb447ad1093d5eb8094ad4b2322ae21d9bf15d4d1f59745c028ec"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0x148, 0xe, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x74}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xffffffff, 0x101, 0x10000000, 0x7f}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1ff, 0x7f, 0x3, 0x401, 0x10001}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x205}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x7, 0x8, 0xf3e, 0x1}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcab}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x5cf}]}, {0x98, 0x6, "1ea7a4e44db3cb9966cfd67b95da7a2f9a4b273cb033847295bbecbb7739fb16ee636c3b966bc0e4ee4010cecc93a2c3450496115cb05a751fc017a0eda0bf860937a83061f3728b55c719ee690cc14ba51ba4e4f3d37fbfbe519e83084bd6e9c39938677eb23a174c1c31039809eaf3c9bd5348df744e31d61c6eca56e5b2b89b7d9ac5d60e53e5f5cdb01312eab9999f132101"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0xdc4, 0xf, 0x0, 0x0, {{0xb}, {0xcbc, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x4, 0x4, 0x7, {0x5, 0x1, 0x8, 0x4, 0x1c0, 0x3ff}, {0x1, 0x0, 0x7, 0x7ff, 0x1, 0x9}, 0x3, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4e7, 0x5, 0x3, 0x3ff, 0x8, 0x36, 0x0, 0x8, 0x59d, 0x5, 0x8, 0x2, 0x8001, 0xe, 0x3, 0x200, 0x4, 0x100, 0x0, 0x1, 0xff, 0x4ad, 0x3ff, 0x9, 0x5, 0x7ff, 0x9, 0x752e34ec, 0xffff, 0x3, 0x10, 0x5, 0x4, 0x7, 0xd, 0x1000, 0x80000001, 0x0, 0x81, 0x0, 0xffffffff, 0x6, 0x5, 0x6, 0x0, 0xf179, 0x9, 0x0, 0x4, 0x4, 0xeaa0, 0x5, 0x8000, 0x4, 0x7, 0x7fff, 0x4, 0x9, 0x1, 0xda87, 0xfffffff9, 0x9, 0x6, 0x2, 0x7006, 0xe2, 0x3, 0x5, 0x400, 0x5beb, 0x4, 0x5, 0x1, 0x9, 0x4, 0x6, 0x4, 0xc61, 0x3, 0x80000000, 0x1, 0x7, 0x8, 0x4, 0x2a400, 0x7038, 0x3, 0x4, 0x4d, 0x1, 0x9, 0x6, 0x9, 0xc0, 0x40, 0x2, 0x1ff, 0xb771, 0x2, 0x5, 0x0, 0x2, 0xb, 0x8, 0x7, 0x5, 0xf34, 0x8, 0x3, 0x4, 0x6, 0x4c1, 0xfff, 0xf28e, 0x9, 0x7, 0xf, 0x6, 0xfffff865, 0xd, 0x3, 0x2, 0x6, 0x3, 0xc44, 0x1ff, 0x7, 0x9, 0xff, 0x8, 0x8, 0x3, 0x79fc, 0x1, 0x10000, 0xfff, 0x40000000, 0xbf, 0x7, 0x3, 0xfffffffe, 0x1000, 0x1, 0x6625, 0x4, 0x8001, 0x9b5f, 0x8, 0x85, 0x4, 0xe4, 0xfff, 0x1ff, 0x7, 0x7ff, 0xfffffffd, 0x0, 0x100, 0x2, 0x3, 0x200, 0x400, 0x0, 0x8, 0xfff, 0x8, 0x6, 0x3, 0xfffffffe, 0xc, 0xffffd15b, 0x80000001, 0x5, 0x400, 0x2, 0x6, 0x200, 0x1, 0x5, 0x4, 0x1, 0x8, 0x7, 0x1, 0x80, 0x9, 0x3, 0x2, 0x2, 0x81, 0x9, 0x3, 0x8, 0xfff, 0x8, 0x3, 0x6, 0x800, 0xfffff000, 0x4, 0x1, 0x9, 0x8001, 0xb0b, 0x1ac3bbf, 0x8, 0x4, 0xffffffff, 0x6, 0x781e, 0x7fffffff, 0xffff, 0x3, 0xfffffffb, 0x330, 0x8be7, 0x5, 0x6, 0x3, 0x2, 0x3, 0x95c8, 0x3, 0x384, 0x5, 0x3f3, 0x7, 0x4, 0xffffffff, 0x7fff, 0x8, 0x81, 0x7, 0xfffffffe, 0x1, 0x7, 0x5, 0x4, 0x0, 0xa, 0xc117, 0x28, 0x8, 0x7f, 0x0, 0x400, 0x4, 0x4, 0x8, 0x2, 0x8, 0x400, 0xfffffff7, 0x3, 0x10, 0x6]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x2, 0x2, {0x63, 0x1, 0x8, 0x9, 0x1000, 0x5}, {0x2, 0x2, 0xa, 0x8, 0x7f}, 0x3, 0x6, 0x4}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5393}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x807000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x3ff, 0x3, 0xfffff000, 0x401, 0xf3, 0x6, 0x5, 0x400, 0x6, 0xc, 0xdcb, 0x3, 0xe, 0x5, 0x0, 0x401, 0x6, 0x3a7, 0x5, 0xf0a, 0x5, 0x2, 0x3, 0x9, 0x1, 0x15d, 0x5, 0x6, 0xffff, 0x8, 0xbb7, 0x4, 0x5, 0x7c, 0x4, 0x7, 0xfffffff8, 0x2, 0xe0, 0x1, 0x5a, 0x32, 0x8ace, 0x4, 0x3d3ca49e, 0xc7d, 0x7, 0x80, 0x8, 0x0, 0x8000, 0x1000, 0xffffffff, 0x2, 0x1000, 0x1, 0x2, 0x1, 0x7, 0x40, 0x3, 0x9, 0x3, 0x4, 0xd5, 0xf, 0x18000000, 0xd, 0xe, 0x1, 0x4aa, 0xb1c8, 0x10, 0x10, 0x8, 0x3, 0x5, 0x80, 0x101, 0x201, 0x6, 0x4, 0x12b, 0x2, 0x9, 0xde6, 0x3, 0x9, 0xc7, 0x17, 0x80000001, 0x6, 0xf04, 0x4, 0x2, 0x1, 0xf2db, 0xf4b, 0x5, 0x0, 0x2, 0xffff0000, 0x0, 0x40, 0x3, 0x1, 0x4, 0x9, 0xfffffff9, 0x9, 0x3, 0x2, 0x8, 0x1, 0x200, 0x5, 0x9, 0x2, 0x0, 0xa, 0x4, 0x3, 0x1, 0x200, 0x3, 0x158, 0x4, 0x539805c, 0x7, 0x80000000, 0x7f, 0xfffffeff, 0xdf3, 0xffffff19, 0x1, 0x200, 0x4, 0x80000000, 0x76, 0x7fff, 0x7, 0x4, 0xb, 0x19c7, 0x2, 0x2, 0x8000, 0x5, 0x44, 0xffffffff, 0x159b, 0x9, 0x3, 0x3, 0x19dc, 0x4, 0xd1, 0x8a, 0x10000, 0xfffff997, 0x10000, 0x7, 0x3, 0x81, 0x2, 0x10, 0x10001, 0x5, 0x8, 0x40, 0x61, 0x6, 0x3ff, 0x5, 0xfffffffc, 0x8, 0x5, 0x5, 0x8, 0x3, 0xfffffff9, 0x6, 0x0, 0x8000, 0x0, 0x8, 0x7, 0x6, 0x8, 0x6500, 0xffffff80, 0x6, 0x4, 0x0, 0xcb0, 0x74c3, 0x9, 0x0, 0x0, 0x6, 0x6, 0xb2, 0x1, 0x26, 0x79a0, 0x2, 0x0, 0x0, 0x2, 0x3, 0xd, 0x1, 0xb, 0xe, 0x0, 0x5, 0xfffffffc, 0x0, 0x2, 0x7, 0x40, 0x8, 0x5, 0x1, 0xbd78, 0x6, 0xfff, 0x9, 0x3, 0x4, 0x5b, 0x7, 0x3, 0x7, 0x9, 0x1, 0x5, 0x24000000, 0x2, 0x4, 0xfff, 0x7f, 0x8, 0x4, 0x400000, 0x8, 0x275e, 0x100000, 0x0, 0x9, 0x9, 0x2f83, 0x8, 0x5, 0x7]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8550, 0x4, 0x1c3, 0x10000, 0x43d, 0x6, 0x3, 0x5c, 0x1, 0x4dd, 0x5, 0x8788, 0x3, 0x80000001, 0x6, 0x4d7, 0x9, 0x48, 0x4da, 0xd, 0x8, 0x5, 0x6, 0x401, 0x7, 0x80000000, 0xfc, 0xfffffffd, 0x4, 0x5, 0x1a, 0xfbd, 0x5, 0x1, 0x5, 0x499, 0x3, 0x7, 0x8, 0x5, 0x7, 0x1, 0x7, 0x10000, 0x0, 0x8, 0x5, 0x8001, 0x4a, 0x3, 0x7, 0x5, 0x2, 0x5, 0x9, 0x2, 0x8, 0x7, 0x775e, 0xfffff000, 0x0, 0x9, 0x7fffffff, 0xa81d, 0xfd1, 0x7, 0x2, 0x7fffffff, 0x5, 0x4, 0x7fffffff, 0x80, 0xa816, 0x9152, 0xd, 0x6, 0x6, 0x3c3, 0x7, 0x3, 0x4, 0x2, 0xfffffffc, 0x3, 0xb, 0x1, 0xa03, 0xc, 0x1, 0x66, 0x101, 0x9, 0x4, 0x6, 0x5a7, 0x4000000, 0x4, 0xc, 0x8, 0x7, 0xfffffffe, 0x5, 0x3fc00, 0xe, 0x10000, 0x0, 0x6, 0x2, 0x1, 0x6, 0xa7, 0x3, 0x80, 0xaf3, 0x3, 0x6, 0x9, 0xc5, 0x4, 0x7ff, 0x101, 0x6, 0x5, 0x1, 0x0, 0x4, 0x0, 0x5, 0x0, 0x5, 0xd, 0x4d0, 0xc258, 0x1ff, 0x101, 0x7, 0x5, 0x91, 0xf, 0x6, 0xaa2, 0x6, 0x4, 0xfffffff9, 0x1, 0x8, 0x5, 0x9, 0xfffffffb, 0x808049a, 0x9, 0x6, 0x10001, 0x3, 0x14, 0x7ff, 0x10, 0x140000, 0x0, 0xce, 0xb, 0x1, 0x6, 0x7fff, 0x6, 0x7, 0x400, 0x1, 0x1, 0xe, 0xf3, 0x7, 0x5acb, 0xa3f1, 0x200, 0x9c3a, 0x94a, 0x40, 0x7, 0x2, 0x9, 0x7f, 0x1ff, 0x5, 0xa90, 0xf, 0xfff, 0x3, 0x200, 0x9, 0x3, 0xfffffc00, 0x80000001, 0x3, 0x2c8, 0x0, 0xb, 0x800, 0x5, 0x800000, 0x1ff, 0x2, 0xf694, 0x400, 0x1, 0x77d2fb13, 0x2, 0x9, 0x8000, 0x866, 0x2, 0x9, 0x4, 0x6, 0x6, 0x2, 0x0, 0x84e6, 0x4, 0x7, 0x5, 0x4, 0x3, 0x1, 0xd, 0xb1, 0x6, 0x0, 0x10000, 0x9, 0x1, 0x0, 0x101, 0x5, 0x100, 0x736, 0x1, 0x9, 0x8, 0x0, 0x1, 0x0, 0x4, 0x401, 0x6a, 0xffff, 0x5, 0xfffffffd, 0x5, 0x4, 0x3, 0x9, 0x1ff, 0x4ff, 0x3ff, 0xfffffffd]}]]}, {0xdf, 0x6, "8ede970246327e6136fad30fcc277fff791ec81a9d110724016dd2c7dc79d015d0674b011fcef88602adec0a57615d1c76a1097cb2e0ea206385a7f3a0cdf9d2eea47bdda940c879628d0530523846df1a2729b6da04808a5cefd7f6ead7232ce3da9090ccbaa3a0148af3d693111c020b3484044b48d7e7317e9c3329420114d13a3f2e04d464fb8d64c44459afcfa624aad571da84950b836103b12a449cd9f4ccfc50310a42613b0a7c2a35c4e507668a02cd2bcf4ec266735a1142a1ca29403e0cae1e7ba80920b7d70d4b015b18fa8c06c9b6eb76c9965c24"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mirred={0x154, 0x11, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0xfffff31c, 0x6, 0x6, 0xa}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x1, 0x1, 0x360000, 0x6}, 0x3}}]}, {0xe5, 0x6, "86a23824e805bab2c339869b296d386d1f4f2a9ec22a90ddb2cfa82de7725b550e7515b7a175af571e41dce515550d5f15d93a7287499c4340d653418f858bcbe0b163a977d0927c2e0828743587c78c2cd2f3dad6e9afb9c53e7dae77b9a53a32f5b084d48483a5bb767a2fffab7ece2ad4189b76f943309fc0276ed3473e834186bf4333ec5ed4824dfb7cd23680f5c3ea0260c7cf9f9d7f14d76914246e02121a1a549a2bb1cc9992d551215204609eb14669c0993072f446b2e04782336b978f24fcb220940f5d79013256c6602e0701a5efb06fea790296083c8d53aafff9"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0xf8, 0xd, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x1, 0x68eb, 0xa58}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0x3, 0x6, 0x4, 0x200}, 0x15}}]}, {0x94, 0x6, "db6e463572b422bf80c02b669a158f67a06d7d53f925373768ec0f1f4eec95d22cbe2434320115ad002e065a0b8b48054c0afefffd2f186fbfe3e5bea8b189c400f9e7778d0eecfa1a01b0bff1e78353e731e6b325039156de93f6358720968bce73768626687acf991ce0b9d7b6660edfb46976b7d24df0ada2813aefe5c3336e18f96b0a3fecad0d514a034a6438a4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ct={0x110, 0x9, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010102}]}, {0xde, 0x6, "716ff79e73c0484c4989e0d85076f5ec78b63798fd2a9512ae787b68043da991e8a35f5bd9eb33eb1ff3d3ac5dbaefcfbd64751bebd374f678f090d495ba690a361b390855b891c7c398d53861a116f234d1438583d260583a1171db7358bc912c6b256d4daac0fee1c711a9a6d7ec87ba512ec04085c6895cea639ab9cf6d6276c741ae70a11dc740e2aa9fd5354296a2f9ce16319231f32e656f7a09f078b7bf57b23c46bec4aaa9008edd50cc17ab38b30a5b86a0f6ad9538f30d6950d98d65d80ad82c1ed90c5107c762eb76b417feca79d620d8de661a25"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x3168, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x96}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x54, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1b0}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x7, 0x9, 0x80000000, 0x0, {0x3, 0x2, 0x1, 0x9, 0x8, 0xf7}, {0x7f, 0x2, 0x9, 0xfff8, 0x1}, 0x2, 0x4, 0x7}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}]}, @TCA_ROUTE4_POLICE={0x1034, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xe, 0x20f7, 0x1, 0x1, 0x5, 0x9, 0xfffffff8, 0x10001, 0x0, 0x8, 0x5, 0x3ff, 0xb0eb, 0x4304, 0x0, 0x1af4, 0x19fdb1a9, 0x7ff, 0x2, 0x5, 0xb39, 0x7fff, 0x9, 0x0, 0xfffffffd, 0x8, 0xff, 0x200, 0x8, 0xfffffffc, 0x1000, 0x6, 0x6, 0xfff, 0x49ae, 0x2, 0x8fd, 0xfff, 0xfffffffe, 0x0, 0x7, 0x405, 0x7, 0xfff, 0x3, 0xb, 0xfffffffb, 0x0, 0x9, 0x5, 0xbaa4, 0x2, 0x7, 0x9, 0xfce3, 0x1, 0x200, 0x8, 0xd, 0x5, 0x9, 0x6, 0xffff0000, 0x1a3f, 0x9, 0x6, 0x7, 0x7fffffff, 0x1, 0xd85, 0xd, 0x0, 0x7fff, 0x6, 0x3, 0x8001, 0x2, 0xfffffffb, 0x2, 0xa0, 0xed, 0x10000, 0xfff, 0x66, 0x5, 0x9, 0x5, 0x1, 0x10000, 0xd63, 0x2, 0x6, 0x400, 0x5, 0x2, 0x2, 0x2, 0x9, 0x5, 0x2, 0xfffffffb, 0x80000000, 0x7fffffff, 0x4, 0xffff982b, 0x0, 0x81, 0x3, 0x5, 0x81, 0x7fff, 0x8000, 0x101, 0xdf0, 0x7, 0x2, 0x100, 0x0, 0x7f, 0xffffc49e, 0xb, 0xffffff7f, 0x83e6, 0x2, 0xff, 0x1, 0xa4a1, 0xffffffc4, 0x7ff, 0x4, 0x400, 0x40, 0x7, 0x1, 0x6, 0x0, 0xfffeffff, 0x1, 0x6, 0x80000000, 0xa63, 0x4, 0xb3b0, 0x15fe, 0x9, 0x4, 0xf49, 0x9, 0x4, 0xa, 0xab, 0x10000, 0x8000, 0xfffffffe, 0x0, 0x4, 0x9, 0x7fff, 0x7db, 0x9, 0x6, 0xb, 0x7f, 0xee5, 0x1c, 0x96, 0x0, 0xd, 0x5, 0x3, 0x6, 0x4, 0x1000, 0xb, 0x7, 0xb56, 0x3, 0x8, 0xb, 0x515, 0x1, 0x8, 0x4, 0x476, 0x25cc, 0x200, 0x1, 0x7, 0x7, 0x3, 0x7, 0x81, 0x80, 0x6, 0x10, 0x20c48ed3, 0x200, 0x8, 0x7ff, 0x7, 0x142, 0x2, 0xd43, 0x1, 0x1a1cb068, 0x9, 0x1717f534, 0x946, 0x100, 0x2, 0x0, 0xfffffe7d, 0x9, 0xc, 0x0, 0x2, 0x3, 0x7, 0x4, 0x5, 0x0, 0x8, 0xfff, 0x100, 0x6, 0x6, 0x9, 0x2, 0x0, 0x9, 0xffff, 0x5, 0x1000, 0x8, 0x800, 0x84, 0x200, 0x9, 0x7, 0x7914, 0x7ff, 0x674, 0xa77, 0x8, 0x7fffffff, 0x2581, 0x0, 0x5, 0x8b, 0x636, 0x8, 0x204, 0x6, 0x4, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0x9, 0x3000, 0x8, 0x4, 0xb2, 0xe8, 0x409, 0x7, 0xe8f, 0x7f, 0x1, 0x0, 0x4, 0x9, 0x5, 0x1, 0x7, 0x2, 0x2, 0x10, 0x417f, 0x4, 0x0, 0x8, 0x3, 0x2000000, 0x9, 0x6, 0x2a50, 0x100, 0x9, 0x7, 0x591, 0x7ff, 0x3, 0x2, 0x0, 0x3, 0x3, 0x0, 0x4, 0x0, 0x3, 0x401, 0x4, 0x543b, 0x0, 0x7, 0x1, 0x2c4a, 0x3, 0x6, 0x1, 0x2, 0x5, 0x0, 0x7fff, 0x7, 0x5, 0x899b, 0x20f, 0x2704, 0x800, 0x5, 0x9d28, 0x4, 0x1000, 0x3, 0x5, 0x3, 0x5, 0x1, 0x8001, 0x80000001, 0x0, 0x4, 0x8, 0x2a1b, 0x7, 0x0, 0x2, 0x5, 0xd, 0xffffffff, 0x1000, 0xa0, 0x800, 0x4c, 0x1, 0x10001, 0xfffffffd, 0x0, 0x3, 0x8, 0x100, 0x9, 0x8, 0x0, 0x3ffc00, 0x70f7, 0x400, 0x0, 0x9, 0x6, 0x2, 0x7, 0x1, 0x6, 0x81, 0x2, 0x0, 0xfffffff7, 0x8001, 0x101, 0x0, 0xff, 0x6, 0x1000, 0x400, 0x6, 0x1000, 0x1, 0x9, 0x6, 0x7, 0x8001, 0x9449, 0x380, 0x7, 0x8, 0x800, 0x5, 0x4c5e, 0x8, 0x400, 0x80000001, 0x9, 0x2b, 0x9, 0x0, 0x2, 0x0, 0x1e, 0xfffffffe, 0x100, 0x2, 0x0, 0x3, 0x148, 0x7, 0x7fff, 0x8000, 0x7, 0x0, 0x3d, 0x1, 0x8, 0x6, 0x7, 0x0, 0xfffff402, 0x6, 0x7, 0xa57d, 0x6, 0x200, 0x0, 0x3, 0x7, 0x6, 0x7, 0x7ff, 0xb, 0x5, 0x9, 0xffffffc0, 0x4, 0x100, 0x40000000, 0xf9b0, 0x2, 0x2, 0x8, 0x9, 0xa2, 0x5, 0x10000, 0x5, 0x0, 0xfffffff2, 0x4, 0x3, 0xe2bb, 0x3, 0x80, 0xffffffff, 0x5, 0x3, 0x398a, 0xff, 0x6, 0x2, 0x2, 0x9, 0x3ff, 0x9, 0x80, 0x1, 0x7, 0x9f7d, 0xe131, 0x100, 0x4, 0x10, 0xe31, 0x1, 0x9, 0x3, 0x4, 0x8, 0x8, 0x1, 0xffff0000, 0xe, 0x8, 0x89, 0x1ff, 0x80, 0x1, 0x8, 0xfffffc00, 0x1000, 0xe, 0x100, 0x3, 0xfffffffb, 0x2, 0x3, 0x0, 0x5, 0x7, 0x8fd6, 0xb, 0x800, 0x7ff, 0x2, 0x1, 0x6, 0x2, 0x9af, 0x400, 0x3, 0x9, 0x7, 0x5ca]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x101, 0x0, 0x6, 0xffff, 0x5, 0xd, 0x0, 0x5, 0x40, 0xdbb9, 0x2, 0x5, 0x7, 0xd7, 0x3, 0x0, 0xd150, 0x3, 0x1000, 0x101, 0xe, 0x2, 0x81, 0x2, 0x490000, 0x3, 0x5, 0xffffffff, 0x80000001, 0xb, 0x6d25, 0x5, 0x4, 0x5, 0x6, 0x3, 0xfffffff8, 0x8001, 0x9, 0xba, 0x1, 0x9f8b, 0x7, 0x14b8, 0x8001, 0x3, 0x2, 0x5f8, 0x6, 0x1, 0x3ff, 0x1, 0x8001, 0x80, 0xffff, 0x1000, 0x8, 0xeca4, 0x9, 0x1, 0xff, 0x6, 0x0, 0x0, 0x6, 0x5, 0x5, 0xffffff7f, 0x9, 0x1ff, 0x0, 0x8, 0x7, 0x49, 0x265, 0x6b1, 0xfffffffe, 0x4, 0x87, 0x7, 0x9, 0x9, 0x35, 0x7, 0x5, 0xc, 0xf, 0x9, 0x79, 0x5, 0x39, 0x2, 0x3ff, 0x80000000, 0xfd4, 0x0, 0x5, 0x9, 0x0, 0x7, 0x1ff, 0x10, 0x8, 0x3, 0xaa8, 0x5, 0x2, 0x7d, 0x7c1, 0x0, 0x10, 0xfffffffc, 0x81, 0x1, 0x3, 0x6, 0x9, 0x4, 0x5c2e, 0x1356, 0x9, 0x200, 0xa, 0x1, 0x2, 0xf, 0x6, 0x6, 0x6, 0x1, 0x9, 0x3, 0x7, 0xf3c, 0x101, 0x0, 0x7d51bd9b, 0x0, 0xfb, 0xffff, 0x8, 0x0, 0x1ff, 0xc, 0x5, 0x4, 0xffffffff, 0xe4bd, 0x4, 0x6, 0xe1, 0x8, 0x2, 0xffff, 0x4121d07b, 0x101, 0x0, 0x3, 0xfffffff8, 0x6, 0xcc43, 0x3, 0xe, 0x1000, 0xe, 0x2, 0x8000, 0x5, 0x5844b904, 0x7ff, 0x20000000, 0xbd9, 0x0, 0x10, 0x6, 0x4, 0x2, 0x1ff, 0x7fffffff, 0x0, 0xc, 0x200, 0x6, 0x3, 0x8, 0xc, 0xc, 0x5b, 0xd, 0xff, 0xffffffff, 0xfffffffb, 0x101, 0x6, 0x4, 0x6, 0x7ff, 0x1, 0x2, 0x9, 0x3, 0x5, 0x2, 0xe, 0x5, 0x4, 0x704b, 0x2, 0x6, 0xc8, 0x0, 0x7fffffff, 0x80000001, 0x3, 0xbf, 0x47, 0x3, 0x38000, 0x2, 0xa1c5, 0x78ab, 0x4, 0x7, 0x0, 0x2, 0x0, 0x9, 0xf, 0xff, 0x5, 0xfff, 0x1000, 0xb, 0x6, 0x3, 0x9, 0x7c96, 0xb, 0x800, 0x0, 0xeeb, 0x4, 0x800, 0x9, 0x800, 0x9, 0x0, 0x6, 0x38c65f5b, 0x7, 0xffffffff, 0x10000, 0xe, 0x0, 0x6, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe0000000, 0x7, 0x9, 0xaa, 0x7ff, 0x3, 0xbf, 0xd9, 0x40, 0x1, 0x3, 0x5, 0xfffffffc, 0x2, 0x101, 0x9, 0x6, 0x401, 0x1000, 0x6, 0x56a, 0x79f, 0x4, 0x5, 0x0, 0x3, 0x0, 0x9f, 0x4, 0x7, 0xffffffff, 0x4e1, 0x9, 0x4, 0x95, 0xba, 0xffffff83, 0xfffffff5, 0x8, 0x4f, 0x6, 0x7, 0x7, 0x8, 0x327a, 0x1, 0xc, 0x40, 0x8, 0x7fffffff, 0x4, 0xfff, 0x7, 0x7, 0x2, 0x780f, 0x7, 0x6, 0x7e0f, 0x1, 0x8b59, 0x9, 0x3ff, 0xffffffff, 0x2, 0xd902, 0x10, 0x4c7, 0x4, 0xb, 0x9, 0x7, 0x100, 0x8001, 0xe, 0x8, 0x0, 0x8001, 0x0, 0x1, 0x1, 0x200, 0x3d, 0x80, 0x3, 0x5, 0x75, 0x80000000, 0x0, 0x2, 0x2, 0x9, 0xfffffffd, 0x5fbdc650, 0x7, 0x7fff, 0x0, 0x6f3e, 0x2, 0x5, 0x9, 0xc4, 0x7, 0xfffffff8, 0x3, 0xfe5, 0x3, 0xfffffff9, 0x4, 0x80000000, 0x40, 0x1, 0x80, 0x4, 0x9, 0x9, 0x7f, 0x3, 0x4, 0xfffffffb, 0x8, 0x4, 0x2, 0x5, 0x2, 0x3, 0xd, 0x2, 0x9, 0x8, 0x7, 0x4, 0x5, 0xffff, 0x9, 0x0, 0xa, 0x26, 0x3ff, 0x5, 0x6, 0x9, 0x5, 0x6, 0x10, 0x6, 0xcf, 0x6, 0x100, 0x142ba93d, 0x9, 0x4, 0x5, 0x114, 0x3, 0x9, 0x7, 0x8000, 0x4, 0x8000, 0xb4, 0x0, 0x5, 0x7ff, 0x80000001, 0xffff, 0x4, 0xd4c, 0xfffff390, 0x0, 0xffff61b3, 0x3ff, 0x5, 0x9, 0x1, 0x3ff, 0x0, 0x0, 0x400, 0x10001, 0x401, 0x3, 0xd9, 0x3, 0x7e75, 0x7, 0x5, 0x8, 0xa, 0x7, 0xfffffff3, 0x19c0, 0xe6, 0xc8e, 0xd, 0x66e5, 0x9, 0x3, 0x8, 0x4, 0x8000, 0xa, 0x3, 0x3, 0xc3, 0x1, 0x4, 0x3, 0x3, 0x0, 0x5, 0xff, 0x2, 0x2aa53db8, 0x6, 0x1ff, 0x3ff, 0x8000, 0x4, 0x8, 0xbb, 0x4, 0xfffffffe, 0x6, 0x92c3, 0xfffffff7, 0x6, 0xd, 0x6, 0x1, 0x8, 0xf, 0xa16d4af, 0xe, 0x0, 0x1, 0x9, 0x2fd50182, 0x1, 0x3, 0x9, 0x1, 0xfffffff8, 0x8, 0x5d, 0x1000, 0x9, 0x0, 0x5, 0x0, 0xfc, 0x2, 0xfffffff8, 0x3, 0x9, 0x1]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe}]}, @TCA_ROUTE4_POLICE={0x844, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x6314, 0x7, 0x7, 0x4, 0x2, 0x8001, 0x1, 0x4, 0x8, 0x9, 0xfff, 0x4, 0x6, 0x4, 0xfffffff3, 0x7fff, 0x10, 0x1ff, 0x6, 0x3ff, 0xf34, 0x529, 0x8, 0x6, 0x1, 0x8, 0x10, 0x7fffffff, 0x8000, 0x80000000, 0x1, 0x800, 0x2, 0x8, 0x5, 0x3, 0xc62, 0x4, 0x5844, 0x6, 0x6, 0x1e82, 0xfffffbff, 0xfa, 0x7, 0x80000001, 0x3, 0x1, 0x0, 0x131b, 0x80000000, 0x7, 0x6, 0x8, 0x800, 0x9, 0x92e, 0x6, 0xe, 0x1, 0x2, 0x1ff, 0xffffffff, 0x3, 0xfffffff9, 0x80000001, 0x4, 0xa, 0x8, 0x4, 0x5, 0x7f, 0x7f, 0x1, 0x6, 0x6, 0x3, 0x1, 0x81, 0xb5, 0x3c, 0x2, 0x7, 0x1, 0x80, 0x4, 0xf15, 0xff, 0xfffffffa, 0x4, 0x5, 0x364b, 0x7, 0x6, 0x1, 0x10001, 0x3, 0x400, 0xf, 0x8, 0x7, 0x2, 0x5, 0x8, 0x4ff6, 0x9, 0x2, 0x8, 0x7, 0x0, 0x7, 0xffffe519, 0xa9c1, 0x9, 0x2, 0x0, 0x2, 0x2, 0x401, 0xb, 0x1, 0x8001, 0x3, 0x4fca, 0x9, 0x0, 0x1, 0x1, 0x4, 0x30a, 0x8, 0x1, 0xda8e, 0x1, 0x3, 0x8, 0x3, 0x800, 0x8, 0x4, 0x6, 0x9, 0x8, 0xf0b, 0x55af0ba6, 0x5, 0x6, 0x7ff, 0x56, 0x7ff, 0x2, 0x9, 0x8, 0x0, 0xfff, 0x5, 0x7f, 0x2, 0x9, 0x5, 0x1, 0x3, 0x9, 0x9, 0x0, 0x24, 0x0, 0x0, 0x9, 0x1, 0x634, 0x3, 0x9, 0x9, 0x4, 0x3, 0x0, 0xb, 0x5, 0x95, 0x1, 0x8, 0x4000000, 0x96, 0xf606, 0x1ff, 0x10001, 0x2, 0x7, 0x3, 0x4, 0x8, 0x7, 0x2, 0x6, 0xfff, 0x7, 0xffffffc0, 0x350f637d, 0x6, 0x0, 0x0, 0x45, 0x8, 0x1, 0x4, 0x7fff, 0x9, 0x1b1, 0x5, 0x8000, 0x0, 0xc6a2, 0x7f, 0xfff, 0x9, 0xa, 0xb8, 0x7, 0x0, 0x9, 0x6, 0x1, 0x0, 0xe1be, 0x5, 0x80000000, 0xafc, 0xfffffff7, 0x80000001, 0x82, 0xa53, 0xe0000000, 0x7, 0xc, 0x50, 0x6666, 0x6, 0x7, 0x101, 0xd, 0x3, 0x9, 0x6, 0xc5ce, 0x1, 0x3, 0xe2, 0x5, 0x9, 0x8001, 0xffffffff, 0x1, 0xe, 0x9, 0x8001]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x81}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x9, 0x2, 0x7ff, 0x3, 0x8, 0x6, 0x80000000, 0x0, 0x6, 0x6, 0xa7, 0xa75d, 0x5, 0xffff, 0x98e, 0x5, 0x0, 0x9, 0x6, 0x2, 0x3, 0x8, 0x0, 0x0, 0x1, 0x5, 0xf, 0x4, 0xb60, 0x37, 0x8001, 0x31fbb7cd, 0xffff0001, 0x6f91bf2, 0x8000, 0x382c, 0x6, 0x2, 0x3556, 0xfffffff8, 0x3, 0xffff, 0x4, 0x0, 0x8, 0x8, 0xa9c, 0x8000, 0x7, 0x5, 0xb, 0x3, 0x8, 0x9, 0x9, 0x64fd, 0x491e, 0xf50, 0x8, 0x2, 0x5c, 0x9, 0x2, 0x2c6e, 0x0, 0x81, 0x7, 0x3, 0xffffffb4, 0x4, 0x0, 0x10, 0x3, 0x800, 0x700c, 0x1, 0x5, 0x2, 0x9, 0xfffff801, 0x3, 0x4, 0x9, 0x6, 0x80, 0x5, 0x5, 0x5c6, 0x5, 0xfffffffe, 0x401, 0xf038, 0x2, 0x2, 0x1, 0x2, 0x85, 0x40, 0xe, 0xafc6, 0x2, 0x12000, 0x4084, 0x0, 0x101, 0x2, 0xc6a, 0x6e3, 0x7fff, 0xe5d3, 0x2, 0x101, 0xc, 0x8, 0x3, 0x7, 0x6, 0x9, 0x1, 0x6, 0x1, 0x4, 0x1, 0x10, 0x8, 0x6, 0x4a, 0x52, 0x0, 0x3, 0xe, 0x6, 0x1, 0xfffff800, 0x6, 0x1, 0x101, 0x9, 0x7, 0x4, 0x8000, 0x800, 0xe72d, 0x8, 0x3, 0x200, 0xfff, 0x3, 0x5, 0x3, 0x7fffffff, 0xef0, 0x8, 0x400, 0xd0b3, 0xfffffffd, 0x6, 0x5, 0x586, 0x4, 0x9, 0xa, 0x10, 0x7, 0x101, 0x10001, 0x7fff, 0x3ff, 0x7, 0x0, 0x0, 0x7, 0x2, 0x6, 0x0, 0x0, 0x7b, 0x2, 0x1, 0x7, 0xe10, 0xf, 0xffffffd1, 0xfffff1f5, 0x7ff, 0x9, 0x436, 0x0, 0xfff, 0x200, 0xfff, 0x71076fd3, 0x3ff, 0x8, 0x1a3f, 0x6, 0x1, 0x8, 0x1, 0x1, 0x8, 0x9, 0xde7, 0x5, 0x4, 0xfffffff9, 0x1, 0xfffffffb, 0xd, 0x1ff, 0x1, 0xd, 0x4, 0x8, 0xb, 0x0, 0x2, 0x5, 0x6, 0x7, 0x1, 0x2, 0x0, 0x5, 0x3, 0x7fff, 0x6, 0x2, 0x3, 0x0, 0x1, 0x10001, 0x80, 0x4, 0x7f, 0x8, 0xf, 0x5, 0x5, 0x8, 0x200, 0x9, 0x800, 0x9f79, 0x34b4, 0x9, 0xd40, 0x800, 0xe, 0xfb7, 0x0, 0x5, 0x781, 0x7ff]}]}, @TCA_ROUTE4_POLICE={0xc18, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x9, 0x5, 0x0, 0x9d, 0x80000001, 0x4, 0xb, 0x7, 0x9, 0x2, 0x3, 0x10001, 0x8, 0x80000001, 0x9, 0x4, 0x970, 0xfffffffd, 0x3, 0x4, 0xffff0698, 0xffff6b6d, 0x4, 0x2, 0x8, 0x12, 0x4, 0x5, 0x3ff, 0x8, 0x0, 0xffffffff, 0x800, 0x6f, 0x6, 0x4c, 0xd, 0x6, 0x7f, 0x0, 0x9a, 0x2, 0x100, 0x1, 0x9, 0x3, 0x3, 0xffff1dcb, 0x6, 0x2fc, 0x2ee, 0x1, 0x4, 0x7, 0xffffffff, 0x1, 0x888e, 0x8, 0x1, 0x3, 0x7, 0x8, 0x5, 0xadd, 0x400, 0x4, 0xfffffff8, 0x9, 0x5, 0x0, 0xca, 0x4, 0xb, 0x876, 0x0, 0x1, 0x1, 0x9, 0x4c5, 0x7, 0x9, 0x3, 0x28000, 0x29, 0x7, 0x10001, 0xc9db, 0x7, 0x0, 0x6, 0xf3, 0x4, 0x0, 0x0, 0x66, 0x9ee7, 0x7, 0x10, 0x1, 0xffffffff, 0x0, 0x40000000, 0x1, 0x4, 0xffff0000, 0x5, 0x0, 0x2, 0x2, 0x0, 0x100, 0x3, 0x3, 0x3, 0x9, 0x6, 0x81, 0x7, 0x2c4800, 0x400, 0x100, 0x401, 0x7, 0x9, 0x8, 0x3, 0x80000, 0x5, 0xc000000, 0x8, 0x0, 0x40000, 0x6, 0x0, 0x2, 0xf9, 0x10001, 0x200, 0x5, 0x4, 0x9, 0x0, 0x2, 0x6, 0x80, 0xfffffffe, 0xfffffffd, 0x6, 0x10, 0x1, 0x1, 0x7, 0x8, 0x30, 0x1, 0x6, 0x9, 0x80000001, 0x40, 0x80000000, 0x4, 0x3, 0xe4d8, 0x9, 0x3a, 0xfffffffd, 0x3, 0x7fffffff, 0x1, 0x5, 0x4, 0xa, 0x2, 0x3ff, 0x0, 0xf6, 0x8, 0x11000000, 0x3ff, 0x85, 0x768, 0x4, 0x0, 0x1, 0x37b, 0x1, 0x3ff, 0x8, 0x9, 0x10, 0x5389, 0x80, 0x200, 0x1, 0x6ce, 0x4, 0xffffff7b, 0x5, 0x3, 0x1e79, 0x5, 0xd, 0x94, 0x9, 0x0, 0x1000, 0x8000, 0xb, 0x1, 0x7, 0x9, 0x7, 0x0, 0x68, 0x3, 0x2, 0x0, 0x8, 0x6, 0x8, 0x400000, 0x8001, 0x3, 0x5, 0x8, 0x5, 0x4, 0x8, 0x3ff, 0x8, 0x8, 0x1, 0x7, 0xf5, 0x8, 0xffffffff, 0x8000000, 0x80, 0x4, 0x7, 0x9, 0xa, 0x1, 0x9, 0x8, 0x6, 0x4, 0x2, 0x8cca, 0xbf14, 0x3, 0x2aa, 0x81, 0x67ad, 0xfb]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x4, 0x5, 0x1, 0x1, 0x2b8, 0x2, 0x5, 0x2, 0xf47, 0x4, 0xc0, 0x80000000, 0x8, 0x6, 0x56f, 0x10001, 0x0, 0x10000, 0xe8e, 0x3, 0x9, 0x6, 0x6, 0x7f, 0xfffffffb, 0x0, 0x7f, 0x16, 0x80, 0x4, 0x8, 0x0, 0x8, 0x7, 0x4, 0x40, 0x4, 0x3, 0xfffffff8, 0x10, 0x0, 0xffffffff, 0x3, 0xb2c, 0x1, 0xe003, 0xf, 0xf, 0x1, 0x101, 0x5, 0x7, 0x9, 0x235, 0x4, 0x7, 0xdc, 0xff, 0x40, 0x6, 0x0, 0x6ca7, 0x54f7, 0x5, 0x8, 0x4, 0xffffff6b, 0x8000, 0x0, 0x2, 0x0, 0x4, 0x0, 0x7f, 0x40, 0x6, 0x4, 0x0, 0x306e, 0x9, 0x4, 0xfffffffa, 0x2, 0x1, 0x8, 0x2, 0x100, 0x3d6, 0xe2, 0x200000, 0x4, 0x7, 0xc33, 0x0, 0x80, 0xfc73, 0x4, 0x200, 0x5, 0x100, 0x1000, 0x4, 0x7, 0x4ad5, 0x2, 0x0, 0x3, 0x2, 0x0, 0x10, 0x3, 0xffffff7f, 0x128d, 0x7ff, 0x3, 0x3ff, 0x696f, 0x400, 0x3, 0x4, 0xffffffff, 0x8, 0x8, 0x4, 0x1, 0xf, 0x8, 0x8045, 0x6, 0x7, 0x3f2, 0x3, 0x5, 0x7ff, 0x800, 0x400, 0xcd, 0xffffffd4, 0xb, 0x0, 0x4, 0x8, 0x9, 0x3, 0x3, 0x7fffffff, 0x4, 0x1, 0x9bb6, 0x0, 0xfc2f, 0x3, 0x8, 0x3, 0x1, 0x2, 0xfff, 0xe6d, 0x8, 0x7, 0x80000001, 0x50fa, 0x101, 0x0, 0x1, 0x9, 0x1, 0x7fffffff, 0x7, 0xfffffffb, 0x2, 0x8001, 0x8, 0x2, 0x7fff, 0x5, 0xa1c, 0x7fffffff, 0x3, 0x5, 0x2, 0xb, 0x6, 0x0, 0x9, 0x8, 0x1, 0x2, 0x7, 0x5, 0x3ff, 0x6, 0xf7d, 0x8, 0x2, 0xfff, 0xec8, 0x7, 0x6, 0xffff0b03, 0x7, 0x6, 0x8, 0x0, 0x6d, 0x5, 0x9, 0xae, 0xffffffff, 0x1, 0x9, 0x8, 0x100, 0xd91, 0x5a7c, 0x407ff, 0x9, 0x4, 0x7, 0xfd, 0x6, 0x7, 0x8, 0x9, 0x0, 0x6, 0x5, 0x5, 0x6, 0xdc7, 0x6, 0x9, 0x5, 0xffffffff, 0x8000, 0x300, 0x9, 0x8, 0x3, 0x0, 0xe, 0x7f, 0xf0a, 0x5, 0x3, 0x5, 0x100, 0x2, 0xd9c3, 0x5, 0x5, 0x8, 0xff, 0x7, 0x800]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xfffffff8, 0x1ff, 0x6, 0x2, 0x5, 0x0, 0x8, 0x8, 0x10000, 0x9, 0xcb, 0x3, 0x7, 0x1, 0xcf5, 0xd, 0x4, 0x0, 0x8, 0x9, 0x7f3, 0x80000001, 0xffffffac, 0x6, 0x3, 0x2, 0x8, 0x4, 0x194, 0x5, 0x8001, 0x4, 0x3, 0x8, 0x5, 0x5, 0x6, 0x8, 0x7b8, 0x7, 0x9, 0x8, 0x40, 0x5, 0x7, 0x1800000, 0x7, 0x5, 0x0, 0x1, 0x7, 0x8, 0x68ca, 0x6, 0x5, 0x101, 0x100, 0x4b80, 0x7, 0x400, 0x401, 0x6817, 0x4, 0x1ff, 0x10000, 0x3ff, 0x5, 0x1000, 0x0, 0x8000, 0x6, 0x8, 0x2, 0x9, 0x7, 0xd, 0xdbfc, 0xd66f, 0xd, 0xff9, 0x1, 0x9, 0x7, 0x8, 0x656999df, 0x1, 0x0, 0x58c, 0xfffffffb, 0xe, 0x7ff, 0xe7, 0xd, 0x4, 0x9, 0x1, 0x80, 0x0, 0x4, 0x6, 0x0, 0x1, 0x0, 0x3, 0xfffffff9, 0x7fffffff, 0x1, 0x8, 0x1, 0x4, 0xffffff01, 0x40, 0x1, 0x2, 0x16794515, 0x6, 0x3ff, 0x80000000, 0x10000, 0x9, 0x10, 0x9, 0x261d, 0xc, 0x3, 0x487e, 0x8bd, 0x1000, 0x3ff, 0x5bae, 0x7, 0x7fff, 0x9, 0x5, 0x3, 0x3, 0x800, 0x6, 0x1, 0x8, 0x7, 0x8, 0x7, 0x8b87, 0x3, 0x5, 0x9, 0x0, 0x3, 0x1, 0xfffffffb, 0x8, 0x6, 0xfffffc01, 0x7, 0xd823, 0x7, 0x9, 0x6, 0xc15, 0x7ff, 0x48, 0x3, 0x34, 0x6, 0x7f, 0x4, 0x6, 0x200, 0x0, 0x1, 0xce, 0x1, 0x6, 0x0, 0x8, 0x4, 0xffffff7f, 0x6, 0x0, 0x2, 0x3, 0xbec, 0x5ee, 0x5, 0x5c56, 0x3, 0x1000, 0x0, 0x8, 0x1c, 0x1, 0x8b, 0x8, 0x3, 0xb, 0x7fffffff, 0xfffff800, 0x2, 0x3ff, 0x2, 0x4, 0x7, 0x2, 0x8, 0xfffffa09, 0x7, 0x7fffffff, 0x80000001, 0x1bf4, 0x9, 0x0, 0x7, 0x9, 0x1, 0xb, 0x2, 0x9, 0x40, 0x3, 0x5, 0x5, 0x0, 0x3ff, 0xffffffff, 0xf, 0xd, 0x10, 0x3, 0x0, 0x7, 0x91ba, 0xfffffff4, 0x4, 0x9, 0x3, 0xfff, 0x6, 0x80000000, 0x3, 0xfffffffb, 0x6, 0x9, 0x9, 0x9, 0x81, 0x695, 0x6, 0x89ee, 0x401, 0x4fe, 0xd, 0x1, 0x1c9, 0x8]}]}, @TCA_ROUTE4_POLICE={0xc58, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x7, 0x1, 0x36, 0x1b, 0xc1, 0x6e, 0x4, 0xd8, 0x5, 0x3, 0xfff, 0x5, 0x5, 0xf4, 0x35, 0x5, 0x87, 0xdc4, 0x7, 0x9, 0x9, 0x8001, 0x100, 0x4, 0x6, 0x80000001, 0x0, 0x2, 0x1000, 0x2, 0x2, 0x0, 0x5, 0xfe1, 0x4, 0x3, 0x401, 0x0, 0xe, 0x2, 0x5, 0x0, 0x7ff, 0x200, 0x1, 0x9, 0x1ff, 0xb6, 0x9d6, 0x6, 0x9, 0x3, 0x1ff, 0x6, 0x3, 0x1, 0x1, 0x2, 0x1, 0x7, 0x7, 0x20, 0x8, 0x3ff, 0x65, 0x0, 0xf2d, 0x2, 0x1ff, 0xffffffff, 0xffffffff, 0x9, 0x101, 0x8, 0x2, 0x2, 0x2, 0x3, 0x2, 0x7fff, 0x6, 0x8, 0x5, 0x5, 0xffffffff, 0x5, 0x0, 0x8, 0x591, 0x9, 0x2, 0x3, 0x0, 0x2, 0x0, 0x9, 0x100, 0x7, 0x81, 0xfffffffe, 0x7, 0x400, 0x3, 0xa3, 0x7, 0x9, 0x4, 0x8, 0x95, 0x3, 0x4, 0xc63, 0xfffffffa, 0x8, 0x2a12, 0x2, 0x200, 0x8cd, 0x8, 0xd, 0xffff, 0x7, 0x10, 0x5, 0x6, 0x3, 0x5, 0x4, 0x9, 0x200, 0x3, 0x80, 0x4a, 0x1, 0xd398, 0x1000, 0x4, 0xfffffffe, 0x9, 0x3, 0x7, 0x5, 0xfffffffd, 0x9, 0x9, 0xd, 0xa, 0x7fff, 0x6, 0x1, 0x80000000, 0x7, 0x873, 0x7fffffff, 0x5, 0x9a, 0x4, 0x8, 0x4, 0x66, 0x4fa, 0x7c, 0x4, 0xcfa3, 0xec8, 0x80000000, 0x6, 0xfff, 0x5, 0xd, 0x10000, 0x2c8, 0x0, 0x7, 0xc00, 0x3, 0x8, 0x5, 0xe071, 0x5, 0x80000000, 0x4, 0x3ff, 0x9, 0x7, 0xf12, 0x4, 0x7, 0x6, 0x3, 0x5, 0x10001, 0x9, 0x1, 0x98d, 0xffffff7f, 0x6, 0x4, 0x10000, 0x0, 0xe, 0x1, 0xfffffff7, 0xc, 0xb6e6, 0xfff, 0xfd28, 0x0, 0x100, 0x0, 0x401, 0x8, 0xe00000, 0xfffffe00, 0xcde8, 0x2, 0x5, 0x7fffffff, 0x4, 0xfffffffd, 0x138, 0x577a7527, 0xff, 0x6d, 0x80000001, 0xfffffff2, 0x4, 0x8000, 0x80, 0x54, 0x3, 0xf, 0x1000, 0x80000001, 0xb, 0x1, 0x8, 0x8a12, 0x2, 0x4, 0x8, 0x800, 0x4, 0x7ff, 0x7f800000, 0x752c, 0x2, 0x7, 0x3, 0x6, 0x3, 0x2, 0x800, 0x1, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0x7, 0x35, 0x9, 0x8, 0x5, 0xd4ad, 0x3c00000, 0x7, 0x98, 0x1, 0x8, 0x1000, 0x10001, 0x5fde, 0x1ff, 0x9, 0xd110, 0x80, 0x9, 0x1ff, 0x5, 0x5, 0x7, 0xfff, 0xc4, 0xc7, 0xbd, 0x5, 0x401, 0x8000, 0x5, 0x4b624068, 0x9, 0x5, 0x7, 0x4, 0xfffff801, 0xae, 0x400, 0x0, 0xffff, 0x9, 0x6, 0x9, 0x7, 0x8, 0x80000000, 0x2, 0x8, 0x2, 0x303, 0x3ff, 0x1, 0x1, 0x2, 0x423, 0xf0e2, 0x7fff, 0xb, 0x4, 0x8001, 0x200, 0x400, 0x9, 0x1, 0x6eb, 0xfffffff7, 0x0, 0x6, 0xffffffff, 0x8, 0x5, 0x0, 0x7, 0x80000001, 0x658, 0x8, 0xf, 0x9, 0x3, 0x2, 0x1b62, 0x1, 0x3, 0x6, 0x2, 0x8001, 0xb5, 0xc, 0xffff, 0x8001, 0x76d00000, 0xfffffff6, 0x1000, 0x8, 0x0, 0xfffffff7, 0x101, 0x75, 0x10000, 0x5, 0x0, 0x8000, 0x3, 0x7, 0x5, 0x0, 0x4, 0x9, 0x8, 0x5, 0x10, 0x9, 0x4, 0x9, 0x3ff, 0xffff, 0xc, 0x2, 0x4, 0x200, 0x6, 0x3, 0x0, 0x3, 0x3440, 0x8, 0x9975, 0x6, 0x0, 0x3ff, 0x7, 0x1, 0x9, 0x3, 0x6, 0x8, 0xc, 0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0xfffffff7, 0x7, 0x49, 0x9a5, 0x1ff000, 0x8000, 0x16, 0x82, 0xfffff801, 0x8, 0x0, 0x0, 0x8, 0x7, 0x6, 0x0, 0x6, 0x6, 0x0, 0xfffffffc, 0x5c3a6125, 0x7, 0x7, 0x3, 0x8001, 0x280, 0x54c4, 0x3, 0x6, 0x3, 0x5, 0x18, 0x6544, 0x3, 0x3, 0x8, 0x4, 0xfff, 0x0, 0x7, 0x7, 0x7fff, 0x9, 0x3, 0x3, 0xd, 0x8, 0xd, 0x0, 0x5, 0x5, 0x0, 0x7, 0x1ff, 0xfffffffa, 0x3, 0x5, 0x9, 0x8001, 0x3, 0xdbb, 0x6d, 0xe493, 0xc, 0x9, 0x3, 0x9, 0x4, 0xfffffff8, 0x1, 0x1ff, 0xfffffffa, 0x7, 0x1, 0xedb, 0x8, 0x5, 0x5, 0x3, 0x10001, 0xfffffffc, 0x0, 0x9, 0x2, 0x9, 0x6, 0x80, 0x2, 0x7, 0x2, 0x80000000, 0x1ff, 0x10001, 0x100, 0xfffffffb, 0x6, 0x36b, 0xff, 0xffffffff, 0x9, 0x7, 0x3, 0x800, 0x1, 0x80000001, 0x5, 0x0, 0xfffffff9, 0x1ff, 0x1, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x10, 0x1, 0x3, 0x0, 0x7fffffff, 0x7, 0x100, 0xe26, 0x8001, 0xffffffff, 0x2, 0x4, 0xffff, 0x2, 0xb600, 0x7fff, 0xb, 0x2, 0xffffe742, 0xa7d, 0x2, 0xfffffffc, 0x0, 0x5d, 0x4, 0xd92, 0x400, 0x7, 0x4, 0x5, 0xb4, 0x1, 0x195, 0x5, 0x7, 0x9, 0x5dc, 0x5, 0x3ff, 0xffffff2f, 0x254b, 0x80000001, 0x7, 0x8, 0x3c60, 0x10001, 0x8, 0xfffffb51, 0x10000, 0x9, 0x16, 0xffffffff, 0x6d7, 0x5, 0x1, 0xf5e9, 0x1, 0x9eb, 0x2, 0x0, 0x2, 0xaf, 0xfffffff8, 0x6, 0x3, 0xa, 0x8, 0x9, 0x84, 0x7, 0xffffff80, 0x100, 0x2, 0x81a, 0x3, 0x8, 0x100, 0x86, 0x4, 0x80000000, 0x4, 0x7, 0x400, 0xc0000, 0x5, 0x1, 0x5, 0x3, 0xc, 0x4, 0x0, 0x2, 0x9, 0x8, 0x8, 0x4, 0x401, 0x80, 0x5, 0xbf4d, 0x0, 0xc0c7, 0xfff, 0x3, 0x3, 0x1, 0xffffffff, 0x8, 0x0, 0x3, 0x4, 0xffff, 0x200, 0xffffffff, 0x1, 0x3ff, 0x9e1, 0x7, 0xfffffff7, 0x1, 0x55, 0xd1f8, 0x2, 0x9, 0x7, 0x10001, 0x9, 0x7, 0x0, 0x3ff, 0x3, 0x9, 0x1, 0x2, 0x1, 0x10, 0x3ff, 0xb, 0x9, 0x8, 0x6, 0x800, 0x36a, 0x5e9, 0xffffffc0, 0x100, 0x2, 0x4, 0x6ba, 0x7f, 0x58, 0x9, 0x3, 0x7, 0xab4f, 0x3, 0x8, 0x0, 0xc2, 0x7, 0x9, 0x1, 0x1, 0xfffffff8, 0x200, 0x3fd, 0x8, 0x0, 0x7, 0x800, 0x9, 0x80000001, 0xfffffff7, 0x2e1, 0x9, 0x6, 0xcb5, 0x0, 0xfffffff8, 0x8, 0x7fffffff, 0x5f, 0x4, 0x9, 0x9, 0x0, 0x3151, 0x6, 0x4, 0xaa9, 0x4, 0x2, 0x0, 0x6, 0xfffffff8, 0x1, 0x2, 0x4, 0x8, 0x0, 0x9, 0x6, 0x2, 0x2, 0x3, 0xfffffff7, 0x4a, 0x100, 0x6, 0xc0b5, 0x4, 0x8, 0x8, 0x6, 0x2, 0x1, 0x80000000, 0x5, 0x2e, 0x8, 0x0, 0x0, 0x570, 0x3, 0x4, 0x1, 0x0, 0x6, 0x2, 0xf, 0x1, 0x4, 0x0, 0xfffff371, 0xffffffff, 0x6, 0x5, 0x3, 0x3, 0x401, 0x0, 0xfff, 0xe, 0x100, 0x0, 0x4, 0xb8a4, 0x6, 0x2, 0xff, 0x4, 0xfffffffb, 0x80, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x4, 0x2, 0x1, 0x3, {0x8, 0x3, 0x3, 0x100, 0x3, 0x3ff}, {0x1, 0x2, 0x1000, 0xd, 0x7, 0xe98d}, 0x10, 0x0, 0x6}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x9f}, @TCA_ROUTE4_TO={0x8, 0x2, 0xcf}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xab}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x7, 0x3}}]}, 0x7f3c}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40010) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r1, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f00000003c0)=0x7, 0x4) r2 = socket$kcm(0x10, 0x6, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) write$binfmt_misc(r4, &(0x7f0000000180)='5', 0x1) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000001f40), 0x0, 0x1, 0x0, 0x0, r6}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000280)="e262", 0x2}], 0x2}, 0x48050) sendmsg(0xffffffffffffffff, 0x0, 0x4) 48.10679ms ago: executing program 0 (id=622): r0 = socket(0x2, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) dup3(r0, r1, 0x0) 47.89236ms ago: executing program 4 (id=623): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x4008050) 0s ago: executing program 4 (id=624): r0 = socket(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000068000000060a010400000000000000000100000040000480240001800b00010072656a6563740000140002800800014000000002050002000300000018000180080001006f7366000c000280080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xf0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x1, &(0x7f0000000180), 0x4) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2c, &(0x7f0000000140)={0xb, {{0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x25}}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x20, 0x0}}}}, 0x104) dup3(r0, r6, 0x0) kernel console output (not intermixed with test programs): k_sendmsg+0x8b0/0xda0 [ 101.586836][ T6883] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.586858][ T6883] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 101.586887][ T6883] ____sys_sendmsg+0x9e1/0xb70 [ 101.586908][ T6883] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.586931][ T6883] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.586961][ T6883] ___sys_sendmsg+0x190/0x1e0 [ 101.586983][ T6883] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.587016][ T6883] ? find_held_lock+0x2b/0x80 [ 101.587055][ T6883] __sys_sendmsg+0x170/0x220 [ 101.587073][ T6883] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.587088][ T6883] ? __fget_files+0x21f/0x3d0 [ 101.587116][ T6883] ? ksys_write+0x1ac/0x250 [ 101.587138][ T6883] ? rcu_is_watching+0x12/0xc0 [ 101.587162][ T6883] __do_fast_syscall_32+0xe7/0x950 [ 101.587185][ T6883] ? lockdep_hardirqs_on+0x78/0x100 [ 101.587209][ T6883] do_fast_syscall_32+0x32/0x70 [ 101.587231][ T6883] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 101.587254][ T6883] RIP: 0023:0xf707efcc [ 101.587270][ T6883] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 101.587287][ T6883] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 101.587302][ T6883] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 101.587311][ T6883] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.587319][ T6883] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.587328][ T6883] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 101.587338][ T6883] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.587360][ T6883] [ 101.726623][ T6886] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 102.611883][ T66] usb 5-1: USB disconnect, device number 10 [ 103.331318][ T6902] FAT-fs (sr0): bogus number of reserved sectors [ 103.334641][ T6902] FAT-fs (sr0): Can't find a valid FAT filesystem [ 104.770623][ T6925] FAULT_INJECTION: forcing a failure. [ 104.770623][ T6925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.777675][ T6925] CPU: 1 UID: 0 PID: 6925 Comm: syz.0.248 Not tainted syzkaller #0 PREEMPT(full) [ 104.777690][ T6925] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 104.777697][ T6925] Call Trace: [ 104.777701][ T6925] [ 104.777705][ T6925] dump_stack_lvl+0x100/0x190 [ 104.777721][ T6925] should_fail_ex.cold+0x5/0xa [ 104.777735][ T6925] _copy_from_user+0x2e/0xd0 [ 104.777753][ T6925] get_compat_msghdr+0xb3/0x4b0 [ 104.777764][ T6925] ? __pfx_get_compat_msghdr+0x10/0x10 [ 104.777777][ T6925] ? _kstrtoull+0x13c/0x1f0 [ 104.777789][ T6925] ? __pfx__kstrtoull+0x10/0x10 [ 104.777802][ T6925] ___sys_sendmsg+0x1b6/0x1e0 [ 104.777817][ T6925] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.777831][ T6925] ? __lock_acquire+0x4a5/0x2630 [ 104.777856][ T6925] __sys_sendmmsg+0x2ff/0x430 [ 104.777868][ T6925] ? __pfx___sys_sendmmsg+0x10/0x10 [ 104.777882][ T6925] ? __fget_files+0x215/0x3d0 [ 104.777900][ T6925] ? fput+0x79/0x100 [ 104.777914][ T6925] ? ksys_write+0x1ac/0x250 [ 104.777927][ T6925] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 104.777939][ T6925] ? lockdep_hardirqs_on+0x78/0x100 [ 104.777952][ T6925] __do_fast_syscall_32+0xe7/0x950 [ 104.777965][ T6925] ? lockdep_hardirqs_on+0x78/0x100 [ 104.777978][ T6925] do_fast_syscall_32+0x32/0x70 [ 104.777992][ T6925] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.778005][ T6925] RIP: 0023:0xf7f65fcc [ 104.778014][ T6925] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 104.778024][ T6925] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 104.778035][ T6925] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003e40 [ 104.778042][ T6925] RDX: 000000007047374e RSI: 0000000000000004 RDI: 0000000000000000 [ 104.778048][ T6925] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.778054][ T6925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.778060][ T6925] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.778073][ T6925] [ 105.229292][ T6938] snd_aloop snd_aloop.0: control 2:-2:3:syz1:2 is already present [ 105.400054][ T6921] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 105.924404][ T6949] wg2 speed is unknown, defaulting to 1000 [ 106.012202][ T6958] netlink: 32 bytes leftover after parsing attributes in process `syz.2.259'. [ 107.591706][ T6985] fuse: Bad value for 'group_id' [ 107.595588][ T6985] fuse: Bad value for 'group_id' [ 107.811484][ T6986] overlayfs: failed to resolve './file2': -2 [ 108.069614][ T6996] netlink: 'syz.1.269': attribute type 2 has an invalid length. [ 108.136174][ T6997] 9p: Bad value for 'wfdno' [ 108.395465][ T7015] 9p: Bad value for 'wfdno' [ 108.789338][ T7032] loop7: detected capacity change from 0 to 16384 [ 108.792870][ T843] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 108.880082][ T7030] binder: BINDER_SET_CONTEXT_MGR already set [ 108.902498][ T7030] binder: 7028:7030 ioctl 4018620d 80000040 returned -16 [ 109.339025][ T7038] tmpfs: Cannot retroactively limit size [ 109.504554][ T7042] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 109.754314][ T843] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 109.868456][ T7048] FAULT_INJECTION: forcing a failure. [ 109.868456][ T7048] name failslab, interval 1, probability 0, space 0, times 0 [ 109.873853][ T7048] CPU: 2 UID: 0 PID: 7048 Comm: syz.3.283 Not tainted syzkaller #0 PREEMPT(full) [ 109.873873][ T7048] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.873882][ T7048] Call Trace: [ 109.873887][ T7048] [ 109.873894][ T7048] dump_stack_lvl+0x100/0x190 [ 109.873916][ T7048] should_fail_ex.cold+0x5/0xa [ 109.873936][ T7048] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 109.873959][ T7048] should_failslab+0xc2/0x120 [ 109.873977][ T7048] __kmalloc_noprof+0xe0/0x850 [ 109.874000][ T7048] ? lockdep_hardirqs_on+0x78/0x100 [ 109.874022][ T7048] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 109.874049][ T7048] genl_family_rcv_msg_doit+0xc7/0x300 [ 109.874073][ T7048] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 109.874094][ T7048] ? genl_get_cmd+0x3e7/0x760 [ 109.874119][ T7048] ? bpf_lsm_capable+0x9/0x10 [ 109.874135][ T7048] ? security_capable+0x80/0x260 [ 109.874157][ T7048] ? ns_capable+0xd2/0xf0 [ 109.874178][ T7048] genl_rcv_msg+0x560/0x800 [ 109.874202][ T7048] ? __pfx_genl_rcv_msg+0x10/0x10 [ 109.874224][ T7048] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 109.874251][ T7048] netlink_rcv_skb+0x159/0x420 [ 109.874270][ T7048] ? __pfx_genl_rcv_msg+0x10/0x10 [ 109.874292][ T7048] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 109.874319][ T7048] ? netlink_deliver_tap+0x1ae/0xcc0 [ 109.874341][ T7048] genl_rcv+0x28/0x40 [ 109.874359][ T7048] netlink_unicast+0x585/0x850 [ 109.874381][ T7048] ? __pfx_netlink_unicast+0x10/0x10 [ 109.874406][ T7048] netlink_sendmsg+0x8b0/0xda0 [ 109.874428][ T7048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.874449][ T7048] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 109.874475][ T7048] ____sys_sendmsg+0x9e1/0xb70 [ 109.874494][ T7048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.874514][ T7048] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.874559][ T7048] ___sys_sendmsg+0x190/0x1e0 [ 109.874582][ T7048] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.874625][ T7048] ? find_held_lock+0x2b/0x80 [ 109.874664][ T7048] __sys_sendmsg+0x170/0x220 [ 109.874680][ T7048] ? __pfx___sys_sendmsg+0x10/0x10 [ 109.874693][ T7048] ? __fget_files+0x21f/0x3d0 [ 109.874717][ T7048] ? ksys_write+0x1ac/0x250 [ 109.874736][ T7048] ? rcu_is_watching+0x12/0xc0 [ 109.874758][ T7048] __do_fast_syscall_32+0xe7/0x950 [ 109.874777][ T7048] ? lockdep_hardirqs_on+0x78/0x100 [ 109.874796][ T7048] do_fast_syscall_32+0x32/0x70 [ 109.874821][ T7048] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.874840][ T7048] RIP: 0023:0xf707efcc [ 109.874853][ T7048] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 109.874868][ T7048] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 109.874885][ T7048] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 109.874895][ T7048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.874904][ T7048] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.874913][ T7048] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 109.874922][ T7048] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.874943][ T7048] [ 110.022616][ T843] usb 5-1: Using ep0 maxpacket: 16 [ 110.026409][ T843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 110.031605][ T843] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 110.034429][ T843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.036768][ T843] usb 5-1: Product: syz [ 110.038002][ T843] usb 5-1: Manufacturer: syz [ 110.039376][ T843] usb 5-1: SerialNumber: syz [ 110.042063][ T843] usb 5-1: config 0 descriptor?? [ 110.046214][ T843] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 110.048913][ T843] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 110.472391][ T29] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 110.612931][ T7062] netlink: 48 bytes leftover after parsing attributes in process `syz.2.288'. [ 110.635837][ T29] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 110.640535][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.643911][ T29] usb 6-1: Product: syz [ 110.645702][ T29] usb 6-1: Manufacturer: syz [ 110.647824][ T29] usb 6-1: SerialNumber: syz [ 110.652221][ T843] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 110.887560][ T29] rtl8150 6-1:1.0: couldn't reset the device [ 110.889762][ T29] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 110.900810][ T29] usb 6-1: USB disconnect, device number 3 [ 111.062164][ T843] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 111.065951][ T843] em28xx 5-1:0.0: board has no eeprom [ 111.296891][ T7070] FAULT_INJECTION: forcing a failure. [ 111.296891][ T7070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.302472][ T7070] CPU: 2 UID: 0 PID: 7070 Comm: syz.2.290 Not tainted syzkaller #0 PREEMPT(full) [ 111.302493][ T7070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.302505][ T7070] Call Trace: [ 111.302510][ T7070] [ 111.302517][ T7070] dump_stack_lvl+0x100/0x190 [ 111.302542][ T7070] should_fail_ex.cold+0x5/0xa [ 111.302566][ T7070] _copy_from_iter+0x1f4/0x1690 [ 111.302598][ T7070] ? __pfx__copy_from_iter+0x10/0x10 [ 111.302625][ T7070] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 111.302644][ T7070] ? arch_stack_walk+0xa6/0xf0 [ 111.302672][ T7070] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 111.302701][ T7070] skb_copy_datagram_from_iter+0x11f/0x720 [ 111.302733][ T7070] packet_sendmsg+0x227e/0x5100 [ 111.302772][ T7070] ? __pfx___might_resched+0x10/0x10 [ 111.302812][ T7070] ? aa_sk_perm+0x309/0xaa0 [ 111.302834][ T7070] ? __pfx_packet_sendmsg+0x10/0x10 [ 111.302854][ T7070] ? __pfx_aa_sk_perm+0x10/0x10 [ 111.302869][ T7070] ? __might_fault+0xc5/0x140 [ 111.302902][ T7070] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 111.302931][ T7070] __sys_sendto+0x468/0x4b0 [ 111.302955][ T7070] ? __pfx_packet_sendmsg+0x10/0x10 [ 111.302977][ T7070] ? __pfx___sys_sendto+0x10/0x10 [ 111.303011][ T7070] ? __fget_files+0x215/0x3d0 [ 111.303031][ T7070] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 111.303064][ T7070] ? fput+0x79/0x100 [ 111.303087][ T7070] ? ksys_write+0x1ac/0x250 [ 111.303109][ T7070] __ia32_sys_sendto+0xdd/0x1b0 [ 111.303134][ T7070] ? __do_fast_syscall_32+0x98/0x950 [ 111.303156][ T7070] ? lockdep_hardirqs_on+0x78/0x100 [ 111.303175][ T7070] __do_fast_syscall_32+0xe7/0x950 [ 111.303196][ T7070] ? lockdep_hardirqs_on+0x78/0x100 [ 111.303219][ T7070] do_fast_syscall_32+0x32/0x70 [ 111.303241][ T7070] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.303263][ T7070] RIP: 0023:0xf7fb7fcc [ 111.303277][ T7070] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 111.303294][ T7070] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 111.303311][ T7070] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 111.303322][ T7070] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000080000200 [ 111.303332][ T7070] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 111.303342][ T7070] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 111.303352][ T7070] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.303375][ T7070] [ 111.401193][ T843] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 111.404406][ T843] em28xx 5-1:0.0: dvb set to bulk mode. [ 111.408697][ T5817] em28xx 5-1:0.0: Binding DVB extension [ 111.432371][ T5817] em28xx 5-1:0.0: Registering input extension [ 111.436165][ T843] usb 5-1: USB disconnect, device number 11 [ 111.438663][ T843] em28xx 5-1:0.0: Disconnecting em28xx [ 111.440522][ T843] em28xx 5-1:0.0: Closing input extension [ 111.477772][ T843] em28xx 5-1:0.0: Freeing device [ 111.913577][ T7092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.296'. [ 111.970083][ T7096] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 112.007262][ T7098] netlink: 36 bytes leftover after parsing attributes in process `syz.1.300'. [ 112.013618][ T7098] netlink: 20 bytes leftover after parsing attributes in process `syz.1.300'. [ 112.022835][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.300'. [ 112.052957][ T7100] l2tp_ppp: sess 2/0: no socket in recv [ 113.026130][ T7118] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 113.028236][ T7118] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 113.037416][ T7118] vhci_hcd vhci_hcd.0: Device attached [ 113.040901][ T7121] vhci_hcd: connection closed [ 113.041579][ T70] vhci_hcd vhci_hcd.1: stop threads [ 113.049834][ T70] vhci_hcd vhci_hcd.1: release socket [ 113.051588][ T70] vhci_hcd vhci_hcd.1: disconnect device [ 113.661323][ T7128] netlink: 68 bytes leftover after parsing attributes in process `syz.3.308'. [ 113.809735][ T7133] FAULT_INJECTION: forcing a failure. [ 113.809735][ T7133] name failslab, interval 1, probability 0, space 0, times 0 [ 113.822333][ T7133] CPU: 3 UID: 0 PID: 7133 Comm: syz.3.309 Not tainted syzkaller #0 PREEMPT(full) [ 113.822349][ T7133] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 113.822355][ T7133] Call Trace: [ 113.822359][ T7133] [ 113.822364][ T7133] dump_stack_lvl+0x100/0x190 [ 113.822380][ T7133] should_fail_ex.cold+0x5/0xa [ 113.822394][ T7133] should_failslab+0xc2/0x120 [ 113.822407][ T7133] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 113.822424][ T7133] ? skb_clone+0x190/0x400 [ 113.822437][ T7133] skb_clone+0x190/0x400 [ 113.822447][ T7133] netlink_deliver_tap+0xaed/0xcc0 [ 113.822467][ T7133] netlink_unicast+0x62b/0x850 [ 113.822482][ T7133] ? __pfx_netlink_unicast+0x10/0x10 [ 113.822499][ T7133] netlink_sendmsg+0x8b0/0xda0 [ 113.822514][ T7133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.822529][ T7133] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 113.822547][ T7133] ____sys_sendmsg+0x9e1/0xb70 [ 113.822560][ T7133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.822574][ T7133] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.822594][ T7133] ___sys_sendmsg+0x190/0x1e0 [ 113.822608][ T7133] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.822629][ T7133] ? find_held_lock+0x2b/0x80 [ 113.822651][ T7133] __sys_sendmsg+0x170/0x220 [ 113.822661][ T7133] ? __pfx___sys_sendmsg+0x10/0x10 [ 113.822670][ T7133] ? __fget_files+0x21f/0x3d0 [ 113.822686][ T7133] ? ksys_write+0x1ac/0x250 [ 113.822699][ T7133] ? rcu_is_watching+0x12/0xc0 [ 113.822713][ T7133] __do_fast_syscall_32+0xe7/0x950 [ 113.822727][ T7133] ? lockdep_hardirqs_on+0x78/0x100 [ 113.822740][ T7133] do_fast_syscall_32+0x32/0x70 [ 113.822754][ T7133] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 113.822767][ T7133] RIP: 0023:0xf707efcc [ 113.822776][ T7133] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 113.822787][ T7133] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 113.822797][ T7133] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009000 [ 113.822804][ T7133] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.822810][ T7133] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.822816][ T7133] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 113.822821][ T7133] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.822835][ T7133] [ 113.822848][ T7133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.309'. [ 114.002164][ T7136] tipc: Enabled bearer , priority 0 [ 114.005904][ T7136] syzkaller0: entered promiscuous mode [ 114.010365][ T7136] syzkaller0: entered allmulticast mode [ 114.039892][ T7135] tipc: Resetting bearer [ 114.054475][ T7135] tipc: Disabling bearer [ 114.100773][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'. [ 114.155775][ T7141] FAULT_INJECTION: forcing a failure. [ 114.155775][ T7141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.160116][ T7141] CPU: 3 UID: 0 PID: 7141 Comm: syz.3.312 Not tainted syzkaller #0 PREEMPT(full) [ 114.160131][ T7141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.160137][ T7141] Call Trace: [ 114.160142][ T7141] [ 114.160146][ T7141] dump_stack_lvl+0x100/0x190 [ 114.160161][ T7141] should_fail_ex.cold+0x5/0xa [ 114.160175][ T7141] _copy_from_user+0x2e/0xd0 [ 114.160192][ T7141] get_compat_msghdr+0xb3/0x4b0 [ 114.160205][ T7141] ? __pfx_get_compat_msghdr+0x10/0x10 [ 114.160216][ T7141] ? rcu_is_watching+0x12/0xc0 [ 114.160229][ T7141] ? ___sys_recvmsg+0x177/0x1a0 [ 114.160242][ T7141] ? kfree+0x1dd/0x6c0 [ 114.160259][ T7141] ___sys_recvmsg+0x193/0x1a0 [ 114.160278][ T7141] ? __pfx____sys_recvmsg+0x10/0x10 [ 114.160311][ T7141] ? __pfx___might_resched+0x10/0x10 [ 114.160326][ T7141] do_recvmmsg+0x563/0x760 [ 114.160342][ T7141] ? __pfx_do_recvmmsg+0x10/0x10 [ 114.160357][ T7141] ? ksys_write+0x190/0x250 [ 114.160369][ T7141] ? ksys_write+0x190/0x250 [ 114.160384][ T7141] ? __fget_files+0x215/0x3d0 [ 114.160396][ T7141] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 114.160412][ T7141] __sys_recvmmsg+0x21f/0x270 [ 114.160423][ T7141] ? __pfx___sys_recvmmsg+0x10/0x10 [ 114.160435][ T7141] ? ksys_write+0x1ac/0x250 [ 114.160449][ T7141] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 114.160462][ T7141] ? __do_fast_syscall_32+0x98/0x950 [ 114.160475][ T7141] ? lockdep_hardirqs_on+0x78/0x100 [ 114.160487][ T7141] __do_fast_syscall_32+0xe7/0x950 [ 114.160500][ T7141] ? lockdep_hardirqs_on+0x78/0x100 [ 114.160513][ T7141] do_fast_syscall_32+0x32/0x70 [ 114.160526][ T7141] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.160539][ T7141] RIP: 0023:0xf707efcc [ 114.160549][ T7141] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 114.160559][ T7141] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 114.160570][ T7141] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002440 [ 114.160576][ T7141] RDX: 00000000ffffff67 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.160583][ T7141] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.160588][ T7141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.160594][ T7141] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.160607][ T7141] [ 114.585766][ T7152] tipc: Started in network mode [ 114.588528][ T7152] tipc: Node identity e6354da6cd91, cluster identity 4711 [ 114.591165][ T7152] tipc: Enabled bearer , priority 0 [ 114.594350][ T7152] syzkaller0: entered promiscuous mode [ 114.596255][ T7152] syzkaller0: entered allmulticast mode [ 114.609697][ T7152] syzkaller0: mtu less than device minimum [ 114.617655][ T7151] tipc: Resetting bearer [ 114.648767][ T7151] tipc: Disabling bearer [ 114.765472][ T7160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.556040][ T7172] netlink: 'syz.0.324': attribute type 11 has an invalid length. [ 115.610739][ T7176] comedi comedi0: Minor 3 could not be opened [ 115.853106][ T7185] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 115.855247][ T7185] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 115.859140][ T7185] vhci_hcd vhci_hcd.0: Device attached [ 116.084220][ T7191] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 116.142400][ T6972] usb 42-1: SetAddress Request (2) to port 0 [ 116.144462][ T6972] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 116.512429][ T7186] vhci_hcd: connection reset by peer [ 116.514918][ T43] vhci_hcd vhci_hcd.2: stop threads [ 116.517307][ T43] vhci_hcd vhci_hcd.2: release socket [ 116.521509][ T43] vhci_hcd vhci_hcd.2: disconnect device [ 116.728090][ T7203] FAULT_INJECTION: forcing a failure. [ 116.728090][ T7203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.732410][ T7203] CPU: 2 UID: 0 PID: 7203 Comm: syz.0.333 Not tainted syzkaller #0 PREEMPT(full) [ 116.732424][ T7203] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.732431][ T7203] Call Trace: [ 116.732434][ T7203] [ 116.732438][ T7203] dump_stack_lvl+0x100/0x190 [ 116.732454][ T7203] should_fail_ex.cold+0x5/0xa [ 116.732468][ T7203] _copy_to_user+0x32/0xd0 [ 116.732485][ T7203] simple_read_from_buffer+0xcb/0x170 [ 116.732498][ T7203] proc_fail_nth_read+0x1af/0x230 [ 116.732515][ T7203] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 116.732532][ T7203] ? rw_verify_area+0xce/0x6d0 [ 116.732543][ T7203] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 116.732559][ T7203] vfs_read+0x1e4/0xb30 [ 116.732572][ T7203] ? __pfx_vfs_read+0x10/0x10 [ 116.732583][ T7203] ? find_held_lock+0x2b/0x80 [ 116.732597][ T7203] ? __fget_files+0x215/0x3d0 [ 116.732611][ T7203] ? __fget_files+0x21f/0x3d0 [ 116.732626][ T7203] ksys_read+0x12a/0x250 [ 116.732638][ T7203] ? __pfx_ksys_read+0x10/0x10 [ 116.732649][ T7203] ? rcu_is_watching+0x12/0xc0 [ 116.732662][ T7203] ? rcu_is_watching+0x12/0xc0 [ 116.732680][ T7203] do_int80_emulation+0x141/0x700 [ 116.732699][ T7203] asm_int80_emulation+0x1a/0x20 [ 116.732714][ T7203] RIP: 0023:0xf716616b [ 116.732723][ T7203] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 116.732733][ T7203] RSP: 002b:00000000f54264bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 116.732744][ T7203] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54265d0 [ 116.732750][ T7203] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 116.732756][ T7203] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.732762][ T7203] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 116.732768][ T7203] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.732781][ T7203] [ 116.810684][ T7205] warning: `syz.0.334' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 118.273967][ T7226] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 118.334370][ T7214] 9pnet_virtio: no channels available for device syz [ 118.782573][ T7230] fuse: Unknown parameter '000000000019863306240x0000000000000000' [ 119.025239][ T7234] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 119.100494][ T7240] FAULT_INJECTION: forcing a failure. [ 119.100494][ T7240] name failslab, interval 1, probability 0, space 0, times 0 [ 119.106264][ T7240] CPU: 2 UID: 0 PID: 7240 Comm: syz.3.345 Not tainted syzkaller #0 PREEMPT(full) [ 119.106287][ T7240] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.106297][ T7240] Call Trace: [ 119.106303][ T7240] [ 119.106309][ T7240] dump_stack_lvl+0x100/0x190 [ 119.106332][ T7240] should_fail_ex.cold+0x5/0xa [ 119.106355][ T7240] ? fib6_info_alloc+0x40/0x160 [ 119.106374][ T7240] should_failslab+0xc2/0x120 [ 119.106394][ T7240] __kmalloc_noprof+0xe0/0x850 [ 119.106426][ T7240] fib6_info_alloc+0x40/0x160 [ 119.106452][ T7240] ip6_route_info_create+0x14c/0xad0 [ 119.106471][ T7240] ? nla_find+0x7b/0x130 [ 119.106494][ T7240] ip6_route_multipath_add+0x3cf/0x1ba0 [ 119.106527][ T7240] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 119.106572][ T7240] ? kasan_quarantine_put+0x104/0x240 [ 119.106599][ T7240] ? lockdep_hardirqs_on+0x78/0x100 [ 119.106629][ T7240] ? inet6_rtm_newroute+0xf5/0x160 [ 119.106655][ T7240] inet6_rtm_newroute+0xf5/0x160 [ 119.106683][ T7240] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 119.106709][ T7240] ? __lock_acquire+0x4a5/0x2630 [ 119.106735][ T7240] ? find_held_lock+0x2b/0x80 [ 119.106756][ T7240] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 119.106774][ T7240] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 119.106794][ T7240] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 119.106823][ T7240] rtnetlink_rcv_msg+0x95e/0xe90 [ 119.106844][ T7240] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 119.106870][ T7240] ? ref_tracker_free+0x37e/0x6c0 [ 119.106894][ T7240] netlink_rcv_skb+0x159/0x420 [ 119.106917][ T7240] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 119.106937][ T7240] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 119.106969][ T7240] ? netlink_deliver_tap+0x1ae/0xcc0 [ 119.106995][ T7240] netlink_unicast+0x585/0x850 [ 119.107021][ T7240] ? __pfx_netlink_unicast+0x10/0x10 [ 119.107050][ T7240] netlink_sendmsg+0x8b0/0xda0 [ 119.107077][ T7240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.107103][ T7240] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 119.107134][ T7240] ____sys_sendmsg+0x9e1/0xb70 [ 119.107155][ T7240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.107179][ T7240] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.107213][ T7240] ___sys_sendmsg+0x190/0x1e0 [ 119.107239][ T7240] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.107274][ T7240] ? find_held_lock+0x2b/0x80 [ 119.107310][ T7240] __sys_sendmsg+0x170/0x220 [ 119.107329][ T7240] ? __pfx___sys_sendmsg+0x10/0x10 [ 119.107345][ T7240] ? __fget_files+0x21f/0x3d0 [ 119.107373][ T7240] ? ksys_write+0x1ac/0x250 [ 119.107395][ T7240] ? rcu_is_watching+0x12/0xc0 [ 119.107419][ T7240] __do_fast_syscall_32+0xe7/0x950 [ 119.107445][ T7240] ? lockdep_hardirqs_on+0x78/0x100 [ 119.107469][ T7240] do_fast_syscall_32+0x32/0x70 [ 119.107493][ T7240] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.107514][ T7240] RIP: 0023:0xf707efcc [ 119.107529][ T7240] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 119.107546][ T7240] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 119.107563][ T7240] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 119.107574][ T7240] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.107584][ T7240] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 119.107594][ T7240] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 119.107605][ T7240] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.107645][ T7240] [ 119.315923][ T7245] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 119.347130][ T7245] kvm: pic: non byte read [ 119.352225][ T7245] kvm: pic: level sensitive irq not supported [ 119.352551][ T7245] kvm: pic: non byte read [ 119.361068][ T7245] kvm: pic: level sensitive irq not supported [ 119.361319][ T7245] kvm: pic: non byte read [ 119.631482][ T7257] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 119.633875][ T7257] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 119.642060][ T7228] libceph: connect (1)[c::]:6789 error -101 [ 119.646002][ T7257] vhci_hcd vhci_hcd.0: Device attached [ 119.648840][ T7228] libceph: mon0 (1)[c::]:6789 connect error [ 119.654730][ T6781] libceph: connect (1)[c::]:6789 error -101 [ 119.659008][ T6781] libceph: mon0 (1)[c::]:6789 connect error [ 119.668229][ T7257] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 119.676925][ T7255] ceph: No mds server is up or the cluster is laggy [ 119.804428][ T7267] netlink: 224 bytes leftover after parsing attributes in process `syz.2.352'. [ 119.922405][ T7228] usb 40-1: SetAddress Request (2) to port 0 [ 119.925211][ T7228] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 120.089769][ T7271] wg2 speed is unknown, defaulting to 1000 [ 120.243496][ T7258] vhci_hcd: connection reset by peer [ 120.247174][ T13] vhci_hcd vhci_hcd.1: stop threads [ 120.248883][ T13] vhci_hcd vhci_hcd.1: release socket [ 120.259001][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 120.488278][ T7289] FAULT_INJECTION: forcing a failure. [ 120.488278][ T7289] name failslab, interval 1, probability 0, space 0, times 0 [ 120.492585][ T7289] CPU: 1 UID: 0 PID: 7289 Comm: syz.3.360 Not tainted syzkaller #0 PREEMPT(full) [ 120.492607][ T7289] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.492618][ T7289] Call Trace: [ 120.492625][ T7289] [ 120.492631][ T7289] dump_stack_lvl+0x100/0x190 [ 120.492660][ T7289] should_fail_ex.cold+0x5/0xa [ 120.492683][ T7289] should_failslab+0xc2/0x120 [ 120.492701][ T7289] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 120.492718][ T7289] ? skb_clone+0x190/0x400 [ 120.492731][ T7289] skb_clone+0x190/0x400 [ 120.492741][ T7289] netlink_deliver_tap+0xaed/0xcc0 [ 120.492757][ T7289] netlink_unicast+0x62b/0x850 [ 120.492772][ T7289] ? __pfx_netlink_unicast+0x10/0x10 [ 120.492789][ T7289] netlink_sendmsg+0x8b0/0xda0 [ 120.492804][ T7289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.492819][ T7289] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 120.492837][ T7289] ____sys_sendmsg+0x9e1/0xb70 [ 120.492849][ T7289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.492863][ T7289] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.492883][ T7289] ___sys_sendmsg+0x190/0x1e0 [ 120.492898][ T7289] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.492918][ T7289] ? find_held_lock+0x2b/0x80 [ 120.492940][ T7289] __sys_sendmsg+0x170/0x220 [ 120.492951][ T7289] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.492960][ T7289] ? __fget_files+0x21f/0x3d0 [ 120.492976][ T7289] ? ksys_write+0x1ac/0x250 [ 120.492989][ T7289] ? rcu_is_watching+0x12/0xc0 [ 120.493003][ T7289] __do_fast_syscall_32+0xe7/0x950 [ 120.493017][ T7289] ? lockdep_hardirqs_on+0x78/0x100 [ 120.493030][ T7289] do_fast_syscall_32+0x32/0x70 [ 120.493044][ T7289] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.493058][ T7289] RIP: 0023:0xf707efcc [ 120.493067][ T7289] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 120.493077][ T7289] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 120.493088][ T7289] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 120.493094][ T7289] RDX: 0000000024008084 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.493100][ T7289] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 120.493106][ T7289] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 120.493112][ T7289] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.493125][ T7289] [ 120.497728][ T7286] binder: 7284:7286 ioctl c0306201 80000600 returned -14 [ 120.784286][ T7302] netlink: 220 bytes leftover after parsing attributes in process `syz.2.363'. [ 120.787623][ T7302] netlink: 'syz.2.363': attribute type 2 has an invalid length. [ 121.212636][ T6972] usb 42-1: device descriptor read/8, error -110 [ 121.603575][ T6972] usb usb42-port1: attempt power cycle [ 121.731813][ T7322] netlink: 40 bytes leftover after parsing attributes in process `syz.2.368'. [ 122.097581][ T7331] IPv6: Can't replace route, no match found [ 122.166763][ T6972] usb usb42-port1: unable to enumerate USB device [ 122.217285][ T7335] syzkaller0: entered promiscuous mode [ 122.219203][ T7335] syzkaller0: entered allmulticast mode [ 122.235945][ T7335] tipc: Started in network mode [ 122.237776][ T7335] tipc: Node identity 0a787b2ce73, cluster identity 4711 [ 122.244281][ T7335] tipc: Enabled bearer , priority 0 [ 122.248583][ T7334] tipc: Resetting bearer [ 122.274531][ T7334] tipc: Disabling bearer [ 122.384324][ T7337] FAULT_INJECTION: forcing a failure. [ 122.384324][ T7337] name failslab, interval 1, probability 0, space 0, times 0 [ 122.402375][ T7337] CPU: 1 UID: 0 PID: 7337 Comm: syz.0.376 Not tainted syzkaller #0 PREEMPT(full) [ 122.402392][ T7337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.402399][ T7337] Call Trace: [ 122.402403][ T7337] [ 122.402407][ T7337] dump_stack_lvl+0x100/0x190 [ 122.402425][ T7337] should_fail_ex.cold+0x5/0xa [ 122.402438][ T7337] should_failslab+0xc2/0x120 [ 122.402451][ T7337] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 122.402468][ T7337] ? skb_clone+0x190/0x400 [ 122.402480][ T7337] skb_clone+0x190/0x400 [ 122.402491][ T7337] netlink_deliver_tap+0xaed/0xcc0 [ 122.402507][ T7337] netlink_unicast+0x62b/0x850 [ 122.402522][ T7337] ? __pfx_netlink_unicast+0x10/0x10 [ 122.402539][ T7337] netlink_sendmsg+0x8b0/0xda0 [ 122.402555][ T7337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.402570][ T7337] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 122.402588][ T7337] ____sys_sendmsg+0x9e1/0xb70 [ 122.402601][ T7337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.402615][ T7337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.402634][ T7337] ___sys_sendmsg+0x190/0x1e0 [ 122.402649][ T7337] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.402673][ T7337] ? find_held_lock+0x2b/0x80 [ 122.402695][ T7337] __sys_sendmsg+0x170/0x220 [ 122.402706][ T7337] ? __pfx___sys_sendmsg+0x10/0x10 [ 122.402715][ T7337] ? __fget_files+0x21f/0x3d0 [ 122.402731][ T7337] ? ksys_write+0x1ac/0x250 [ 122.402744][ T7337] ? rcu_is_watching+0x12/0xc0 [ 122.402758][ T7337] __do_fast_syscall_32+0xe7/0x950 [ 122.402772][ T7337] ? lockdep_hardirqs_on+0x78/0x100 [ 122.402785][ T7337] do_fast_syscall_32+0x32/0x70 [ 122.402798][ T7337] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.402812][ T7337] RIP: 0023:0xf7f65fcc [ 122.402822][ T7337] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 122.402832][ T7337] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 122.402842][ T7337] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 122.402849][ T7337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 122.402855][ T7337] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.402861][ T7337] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 122.402867][ T7337] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.402880][ T7337] [ 122.479855][ T7339] syzkaller0: entered promiscuous mode [ 122.511892][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'. [ 122.515940][ T7339] syzkaller0: entered allmulticast mode [ 122.538942][ T7339] tipc: Started in network mode [ 122.540758][ T7339] tipc: Node identity b2f99b8f4b14, cluster identity 4711 [ 122.544843][ T7339] tipc: Enabled bearer , priority 0 [ 122.549456][ T7338] tipc: Resetting bearer [ 122.559852][ T7338] tipc: Disabling bearer [ 122.861414][ T7354] netlink: 28 bytes leftover after parsing attributes in process `syz.0.381'. [ 123.912487][ T7380] kvm: user requested TSC rate below hardware speed [ 123.959187][ T7380] FAULT_INJECTION: forcing a failure. [ 123.959187][ T7380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.971636][ T7380] CPU: 3 UID: 0 PID: 7380 Comm: syz.3.389 Not tainted syzkaller #0 PREEMPT(full) [ 123.971659][ T7380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.971668][ T7380] Call Trace: [ 123.971673][ T7380] [ 123.971680][ T7380] dump_stack_lvl+0x100/0x190 [ 123.971703][ T7380] should_fail_ex.cold+0x5/0xa [ 123.971724][ T7380] _copy_from_user+0x2e/0xd0 [ 123.971748][ T7380] sw_sync_ioctl+0x74b/0x13f0 [ 123.971774][ T7380] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 123.971793][ T7380] ? __fget_files+0x215/0x3d0 [ 123.971810][ T7380] ? hook_file_ioctl_common+0x149/0x410 [ 123.971828][ T7380] ? __fget_files+0x21f/0x3d0 [ 123.971841][ T7380] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 123.971855][ T7380] compat_ptr_ioctl+0x6e/0xa0 [ 123.971871][ T7380] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 123.971887][ T7380] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 123.971899][ T7380] __do_fast_syscall_32+0xe7/0x950 [ 123.971913][ T7380] ? lockdep_hardirqs_on+0x78/0x100 [ 123.971926][ T7380] do_fast_syscall_32+0x32/0x70 [ 123.971939][ T7380] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 123.971953][ T7380] RIP: 0023:0xf707efcc [ 123.971962][ T7380] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 123.971972][ T7380] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 123.971983][ T7380] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040045701 [ 123.971989][ T7380] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.971995][ T7380] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 123.972001][ T7380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.972007][ T7380] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.972020][ T7380] [ 124.482461][ T6972] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 124.573481][ T40] kauditd_printk_skb: 100 callbacks suppressed [ 124.573492][ T40] audit: type=1326 audit(1777123354.323:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.0.394" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65fcc code=0x7ffc0000 [ 124.607025][ T40] audit: type=1326 audit(1777123354.323:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.0.394" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65fcc code=0x7ffc0000 [ 124.622490][ T40] audit: type=1326 audit(1777123354.333:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.0.394" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f65fcc code=0x7ffc0000 [ 124.631526][ T40] audit: type=1326 audit(1777123354.333:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.0.394" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65fcc code=0x7ffc0000 [ 124.639213][ T40] audit: type=1326 audit(1777123354.333:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.0.394" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f65fcc code=0x7ffc0000 [ 124.646970][ T6972] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.647297][ T40] audit: type=1326 audit(1777123354.333:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.0.394" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65fcc code=0x7ffc0000 [ 124.650891][ T6972] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.660308][ T6972] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.663069][ T40] audit: type=1326 audit(1777123354.333:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.0.394" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f65fcc code=0x7ffc0000 [ 124.664452][ T6972] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.675225][ T6972] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.680604][ T40] audit: type=1326 audit(1777123354.333:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.0.394" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65fcc code=0x7ffc0000 [ 124.687322][ T40] audit: type=1326 audit(1777123354.333:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.0.394" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f65fcc code=0x7ffc0000 [ 124.695516][ T40] audit: type=1326 audit(1777123354.333:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7396 comm="syz.0.394" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65fcc code=0x7ffc0000 [ 124.716803][ T6972] usb 8-1: config 0 descriptor?? [ 124.826286][ T7403] lo: Caught tx_queue_len zero misconfig [ 124.974003][ T7228] usb 40-1: device descriptor read/8, error -110 [ 125.237799][ T6972] usbhid 8-1:0.0: can't add hid device: -71 [ 125.243347][ T6972] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 125.353662][ T6972] usb 8-1: USB disconnect, device number 5 [ 125.369327][ T7228] usb usb40-port1: attempt power cycle [ 125.762094][ T7421] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 125.947939][ T7228] usb usb40-port1: unable to enumerate USB device [ 126.090561][ T7429] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 126.092659][ T7429] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 126.098652][ T7429] vhci_hcd vhci_hcd.0: Device attached [ 126.207611][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.400'. [ 126.212646][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 126.222589][ T7429] netlink: 'syz.0.400': attribute type 12 has an invalid length. [ 126.342868][ T7228] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 126.408814][ T7436] wg2 speed is unknown, defaulting to 1000 [ 127.035202][ T7432] ALSA: mixer_oss: invalid OSS volume 'u' [ 127.636296][ T7430] vhci_hcd: connection reset by peer [ 127.638490][ T43] vhci_hcd vhci_hcd.0: stop threads [ 127.640254][ T43] vhci_hcd vhci_hcd.0: release socket [ 127.642397][ T43] vhci_hcd vhci_hcd.0: disconnect device [ 127.731760][ T7444] tmpfs: Cannot retroactively limit size [ 127.757781][ T7448] kvm: user requested TSC rate below hardware speed [ 128.168113][ T7465] FAULT_INJECTION: forcing a failure. [ 128.168113][ T7465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.172202][ T7465] CPU: 2 UID: 0 PID: 7465 Comm: syz.2.412 Not tainted syzkaller #0 PREEMPT(full) [ 128.172217][ T7465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.172223][ T7465] Call Trace: [ 128.172227][ T7465] [ 128.172231][ T7465] dump_stack_lvl+0x100/0x190 [ 128.172247][ T7465] should_fail_ex.cold+0x5/0xa [ 128.172273][ T7465] _copy_from_user+0x2e/0xd0 [ 128.172295][ T7465] memdup_user+0x6b/0xe0 [ 128.172306][ T7465] ucma_set_option+0x11f/0x530 [ 128.172321][ T7465] ? __might_fault+0xc5/0x140 [ 128.172336][ T7465] ? __pfx_ucma_set_option+0x10/0x10 [ 128.172353][ T7465] ? __pfx_ucma_set_option+0x10/0x10 [ 128.172367][ T7465] ucma_write+0x1fb/0x330 [ 128.172379][ T7465] ? __pfx_ucma_write+0x10/0x10 [ 128.172390][ T7465] ? bpf_lsm_file_permission+0x9/0x10 [ 128.172401][ T7465] ? security_file_permission+0x76/0x210 [ 128.172413][ T7465] ? rw_verify_area+0xce/0x6d0 [ 128.172424][ T7465] vfs_write+0x2aa/0x1070 [ 128.172436][ T7465] ? __pfx_ucma_write+0x10/0x10 [ 128.172449][ T7465] ? __pfx_vfs_write+0x10/0x10 [ 128.172459][ T7465] ? find_held_lock+0x2b/0x80 [ 128.172473][ T7465] ? __fget_files+0x215/0x3d0 [ 128.172485][ T7465] ? __fget_files+0x215/0x3d0 [ 128.172499][ T7465] ? __fget_files+0x21f/0x3d0 [ 128.172514][ T7465] ksys_write+0x1f8/0x250 [ 128.172525][ T7465] ? __pfx_ksys_write+0x10/0x10 [ 128.172536][ T7465] ? ksys_write+0x1ac/0x250 [ 128.172548][ T7465] ? rcu_is_watching+0x12/0xc0 [ 128.172562][ T7465] __do_fast_syscall_32+0xe7/0x950 [ 128.172576][ T7465] ? lockdep_hardirqs_on+0x78/0x100 [ 128.172589][ T7465] do_fast_syscall_32+0x32/0x70 [ 128.172602][ T7465] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 128.172616][ T7465] RIP: 0023:0xf7fb7fcc [ 128.172625][ T7465] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 128.172635][ T7465] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 128.172646][ T7465] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 128.172652][ T7465] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.172658][ T7465] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 128.172664][ T7465] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 128.172670][ T7465] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 128.172684][ T7465] [ 128.493275][ T7473] FAULT_INJECTION: forcing a failure. [ 128.493275][ T7473] name failslab, interval 1, probability 0, space 0, times 0 [ 128.497639][ T7473] CPU: 1 UID: 0 PID: 7473 Comm: syz.0.414 Not tainted syzkaller #0 PREEMPT(full) [ 128.497654][ T7473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.497660][ T7473] Call Trace: [ 128.497664][ T7473] [ 128.497669][ T7473] dump_stack_lvl+0x100/0x190 [ 128.497685][ T7473] should_fail_ex.cold+0x5/0xa [ 128.497699][ T7473] should_failslab+0xc2/0x120 [ 128.497712][ T7473] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 128.497728][ T7473] ? skb_clone+0x190/0x400 [ 128.497741][ T7473] skb_clone+0x190/0x400 [ 128.497751][ T7473] netlink_deliver_tap+0xaed/0xcc0 [ 128.497767][ T7473] netlink_unicast+0x62b/0x850 [ 128.497782][ T7473] ? __pfx_netlink_unicast+0x10/0x10 [ 128.497799][ T7473] netlink_sendmsg+0x8b0/0xda0 [ 128.497814][ T7473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.497829][ T7473] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 128.497847][ T7473] ____sys_sendmsg+0x9e1/0xb70 [ 128.497859][ T7473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.497874][ T7473] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.497893][ T7473] ___sys_sendmsg+0x190/0x1e0 [ 128.497908][ T7473] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.497928][ T7473] ? find_held_lock+0x2b/0x80 [ 128.497951][ T7473] __sys_sendmsg+0x170/0x220 [ 128.497961][ T7473] ? __pfx___sys_sendmsg+0x10/0x10 [ 128.497970][ T7473] ? __fget_files+0x21f/0x3d0 [ 128.497986][ T7473] ? ksys_write+0x1ac/0x250 [ 128.497999][ T7473] ? rcu_is_watching+0x12/0xc0 [ 128.498014][ T7473] __do_fast_syscall_32+0xe7/0x950 [ 128.498028][ T7473] ? lockdep_hardirqs_on+0x78/0x100 [ 128.498041][ T7473] do_fast_syscall_32+0x32/0x70 [ 128.498055][ T7473] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 128.498068][ T7473] RIP: 0023:0xf7f65fcc [ 128.498077][ T7473] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 128.498087][ T7473] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 128.498098][ T7473] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 128.498104][ T7473] RDX: 0000000004004040 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.498110][ T7473] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 128.498116][ T7473] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 128.498122][ T7473] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 128.498135][ T7473] [ 128.732963][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'. [ 129.027889][ T7488] FAULT_INJECTION: forcing a failure. [ 129.027889][ T7488] name failslab, interval 1, probability 0, space 0, times 0 [ 129.031898][ T7488] CPU: 1 UID: 0 PID: 7488 Comm: syz.0.417 Not tainted syzkaller #0 PREEMPT(full) [ 129.031923][ T7488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.031929][ T7488] Call Trace: [ 129.031934][ T7488] [ 129.031939][ T7488] dump_stack_lvl+0x100/0x190 [ 129.031954][ T7488] should_fail_ex.cold+0x5/0xa [ 129.031968][ T7488] should_failslab+0xc2/0x120 [ 129.031980][ T7488] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 129.031997][ T7488] ? io_submit_one+0x124/0x1fb0 [ 129.032015][ T7488] io_submit_one+0x124/0x1fb0 [ 129.032030][ T7488] ? __lock_acquire+0x4a5/0x2630 [ 129.032041][ T7488] ? irqentry_exit+0x246/0x790 [ 129.032053][ T7488] ? lockdep_hardirqs_on+0x78/0x100 [ 129.032066][ T7488] ? __pfx_io_submit_one+0x10/0x10 [ 129.032084][ T7488] ? __might_fault+0xc5/0x140 [ 129.032104][ T7488] ? __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 129.032119][ T7488] __ia32_compat_sys_io_submit+0x1a7/0x3b0 [ 129.032134][ T7488] ? __fget_files+0x21f/0x3d0 [ 129.032147][ T7488] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 129.032165][ T7488] ? ksys_write+0x1ac/0x250 [ 129.032177][ T7488] ? rcu_is_watching+0x12/0xc0 [ 129.032192][ T7488] __do_fast_syscall_32+0xe7/0x950 [ 129.032205][ T7488] ? lockdep_hardirqs_on+0x78/0x100 [ 129.032218][ T7488] do_fast_syscall_32+0x32/0x70 [ 129.032231][ T7488] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 129.032248][ T7488] RIP: 0023:0xf7f65fcc [ 129.032257][ T7488] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 129.032278][ T7488] RSP: 002b:00000000f53e450c EFLAGS: 00000292 ORIG_RAX: 00000000000000f8 [ 129.032289][ T7488] RAX: ffffffffffffffda RBX: 00000000f7f5d000 RCX: 0000000000000001 [ 129.032295][ T7488] RDX: 0000000080000780 RSI: 0000000000000000 RDI: 0000000000000000 [ 129.032301][ T7488] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 129.032307][ T7488] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 129.032313][ T7488] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 129.032327][ T7488] [ 129.955525][ T7502] netlink: 1544 bytes leftover after parsing attributes in process `syz.2.422'. [ 131.328464][ T7524] FAULT_INJECTION: forcing a failure. [ 131.328464][ T7524] name failslab, interval 1, probability 0, space 0, times 0 [ 131.332646][ T7524] CPU: 1 UID: 0 PID: 7524 Comm: syz.3.427 Not tainted syzkaller #0 PREEMPT(full) [ 131.332660][ T7524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.332667][ T7524] Call Trace: [ 131.332670][ T7524] [ 131.332674][ T7524] dump_stack_lvl+0x100/0x190 [ 131.332703][ T7524] should_fail_ex.cold+0x5/0xa [ 131.332717][ T7524] ? tomoyo_realpath_from_path+0xb6/0x690 [ 131.332729][ T7524] should_failslab+0xc2/0x120 [ 131.332742][ T7524] __kmalloc_noprof+0xe0/0x850 [ 131.332758][ T7524] ? kfree+0x1dd/0x6c0 [ 131.332774][ T7524] tomoyo_realpath_from_path+0xb6/0x690 [ 131.332790][ T7524] tomoyo_path_number_perm+0x23c/0x580 [ 131.332799][ T7524] ? tomoyo_path_number_perm+0x22e/0x580 [ 131.332810][ T7524] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 131.332821][ T7524] ? get_pid_task+0x106/0x250 [ 131.332850][ T7524] ? find_held_lock+0x2b/0x80 [ 131.332863][ T7524] ? __fget_files+0x215/0x3d0 [ 131.332874][ T7524] ? hook_file_ioctl_common+0x149/0x410 [ 131.332884][ T7524] ? __fget_files+0x215/0x3d0 [ 131.332898][ T7524] ? __fget_files+0x21f/0x3d0 [ 131.332912][ T7524] security_file_ioctl_compat+0xd3/0x230 [ 131.332923][ T7524] __ia32_compat_sys_ioctl+0xc2/0x360 [ 131.332936][ T7524] __do_fast_syscall_32+0xe7/0x950 [ 131.332949][ T7524] ? lockdep_hardirqs_on+0x78/0x100 [ 131.332962][ T7524] do_fast_syscall_32+0x32/0x70 [ 131.332976][ T7524] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 131.332989][ T7524] RIP: 0023:0xf707efcc [ 131.332998][ T7524] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 131.333009][ T7524] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 131.333019][ T7524] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0505350 [ 131.333026][ T7524] RDX: 0000000080000940 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.333032][ T7524] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 131.333038][ T7524] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 131.333044][ T7524] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 131.333057][ T7524] [ 131.333073][ T7524] ERROR: Out of memory at tomoyo_realpath_from_path. [ 131.472407][ T7228] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 131.794736][ T7541] netlink: 68 bytes leftover after parsing attributes in process `syz.3.432'. [ 131.834451][ T34] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 131.866093][ T7547] 9pnet_virtio: no channels available for device syz [ 131.892578][ T7547] 9pnet_virtio: no channels available for device syz [ 131.896448][ T7547] 9pnet_virtio: no channels available for device syz [ 131.905459][ T7547] 9pnet_virtio: no channels available for device syz [ 131.911435][ T7547] 9pnet_virtio: no channels available for device syz [ 131.960625][ T7550] FAULT_INJECTION: forcing a failure. [ 131.960625][ T7550] name failslab, interval 1, probability 0, space 0, times 0 [ 131.964683][ T7550] CPU: 1 UID: 0 PID: 7550 Comm: syz.2.433 Not tainted syzkaller #0 PREEMPT(full) [ 131.964721][ T7550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.964731][ T7550] Call Trace: [ 131.964735][ T7550] [ 131.964739][ T7550] dump_stack_lvl+0x100/0x190 [ 131.964762][ T7550] should_fail_ex.cold+0x5/0xa [ 131.964786][ T7550] should_failslab+0xc2/0x120 [ 131.964806][ T7550] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 131.964829][ T7550] ? prepare_creds+0x2c/0x950 [ 131.964849][ T7550] ? from_kgid_munged+0xab/0x130 [ 131.964876][ T7550] prepare_creds+0x2c/0x950 [ 131.964895][ T7550] __sys_setfsgid+0xe3/0x3b0 [ 131.964913][ T7550] __do_fast_syscall_32+0xe7/0x950 [ 131.964927][ T7550] ? lockdep_hardirqs_on+0x78/0x100 [ 131.964941][ T7550] do_fast_syscall_32+0x32/0x70 [ 131.964954][ T7550] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 131.964967][ T7550] RIP: 0023:0xf7fb7fcc [ 131.964976][ T7550] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 131.964987][ T7550] RSP: 002b:00000000f543450c EFLAGS: 00000292 ORIG_RAX: 000000000000008b [ 131.964997][ T7550] RAX: ffffffffffffffda RBX: 000000000000ee01 RCX: 0000000000000000 [ 131.965004][ T7550] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.965010][ T7550] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 131.965016][ T7550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.965022][ T7550] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 131.965035][ T7550] [ 132.022533][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 132.026775][ T34] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 132.029975][ T34] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 132.034413][ T34] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 132.039029][ T34] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 132.046450][ T34] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 132.051215][ T34] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 132.057238][ T34] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 132.062787][ T34] usb 6-1: config 168 interface 0 has no altsetting 0 [ 132.066799][ T34] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 132.069923][ T34] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 132.075931][ T34] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 132.080603][ T34] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 132.085837][ T34] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 132.090755][ T34] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 132.096020][ T34] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 132.102991][ T34] usb 6-1: config 168 interface 0 has no altsetting 0 [ 132.106840][ T34] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 132.110018][ T34] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 132.115357][ T34] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 132.120035][ T34] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 132.125193][ T34] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 132.129628][ T34] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 132.134484][ T34] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 132.139882][ T34] usb 6-1: config 168 interface 0 has no altsetting 0 [ 132.146065][ T34] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 132.149843][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.152875][ T34] usb 6-1: Product: syz [ 132.154228][ T34] usb 6-1: Manufacturer: syz [ 132.155781][ T34] usb 6-1: SerialNumber: syz [ 132.283536][ T9] libceph: connect (1)[c::]:6789 error -101 [ 132.285592][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 132.370305][ T34] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 132.376752][ T34] usb 6-1: USB disconnect, device number 4 [ 132.434773][ T7553] ceph: No mds server is up or the cluster is laggy [ 132.566016][ T7563] overlayfs: failed to resolve './file1': -2 [ 132.616461][ T7536] bridge1: entered promiscuous mode [ 132.618276][ T7536] bridge1: entered allmulticast mode [ 133.199270][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.438'. [ 133.281840][ T7570] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.441'. [ 133.303182][ T7574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.442'. [ 133.535460][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 133.540022][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.440'. [ 133.834907][ T7590] pimreg: entered allmulticast mode [ 133.836849][ T7587] pimreg: left allmulticast mode [ 133.848009][ T7593] overlayfs: failed to resolve './file1': -2 [ 134.073115][ T7598] input: syz0 as /devices/virtual/input/input15 [ 134.279950][ T7610] overlayfs: unescaped trailing colons in lowerdir mount option. [ 134.298136][ T7610] input: syz0 as /devices/virtual/input/input16 [ 134.340792][ T6401] udevd[6401]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 134.378993][ T7615] openvswitch: netlink: Missing key (keys=40, expected=80) [ 134.455848][ T7622] FAULT_INJECTION: forcing a failure. [ 134.455848][ T7622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.466032][ T7622] CPU: 3 UID: 0 PID: 7622 Comm: syz.1.456 Not tainted syzkaller #0 PREEMPT(full) [ 134.466048][ T7622] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.466054][ T7622] Call Trace: [ 134.466058][ T7622] [ 134.466062][ T7622] dump_stack_lvl+0x100/0x190 [ 134.466079][ T7622] should_fail_ex.cold+0x5/0xa [ 134.466092][ T7622] _copy_from_iter+0x1f4/0x1690 [ 134.466111][ T7622] ? __lock_acquire+0x4a5/0x2630 [ 134.466122][ T7622] ? __pfx__copy_from_iter+0x10/0x10 [ 134.466138][ T7622] ? __lock_acquire+0x4a5/0x2630 [ 134.466153][ T7622] copy_page_from_iter+0x238/0x300 [ 134.466171][ T7622] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 134.466192][ T7622] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 134.466206][ T7622] ? unwind_get_return_address+0x59/0xa0 [ 134.466221][ T7622] ? arch_stack_walk+0xa6/0xf0 [ 134.466235][ T7622] ? __lock_acquire+0x4a5/0x2630 [ 134.466253][ T7622] tun_get_user+0x16d6/0x3c20 [ 134.466273][ T7622] ? __pfx_tun_get_user+0x10/0x10 [ 134.466289][ T7622] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 134.466305][ T7622] ? find_held_lock+0x2b/0x80 [ 134.466318][ T7622] ? tun_get+0x191/0x370 [ 134.466330][ T7622] ? tun_get+0x191/0x370 [ 134.466347][ T7622] tun_chr_write_iter+0xdc/0x200 [ 134.466363][ T7622] vfs_write+0x6ac/0x1070 [ 134.466375][ T7622] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 134.466391][ T7622] ? __pfx_vfs_write+0x10/0x10 [ 134.466402][ T7622] ? find_held_lock+0x2b/0x80 [ 134.466423][ T7622] ksys_write+0x12a/0x250 [ 134.466440][ T7622] ? __pfx_ksys_write+0x10/0x10 [ 134.466453][ T7622] ? rcu_is_watching+0x12/0xc0 [ 134.466468][ T7622] do_int80_emulation+0x141/0x700 [ 134.466484][ T7622] asm_int80_emulation+0x1a/0x20 [ 134.466499][ T7622] RIP: 0023:0xf719616b [ 134.466508][ T7622] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 134.466530][ T7622] RSP: 002b:00000000f545644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 134.466541][ T7622] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000440 [ 134.466547][ T7622] RDX: 0000000000000036 RSI: 0000000000000000 RDI: 0000000000000000 [ 134.466554][ T7622] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 134.466559][ T7622] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 134.466565][ T7622] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 134.466579][ T7622] [ 135.482461][ T1037] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 135.536407][ T7646] FAULT_INJECTION: forcing a failure. [ 135.536407][ T7646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.541570][ T7646] CPU: 1 UID: 0 PID: 7646 Comm: syz.1.463 Not tainted syzkaller #0 PREEMPT(full) [ 135.541594][ T7646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.541605][ T7646] Call Trace: [ 135.541612][ T7646] [ 135.541619][ T7646] dump_stack_lvl+0x100/0x190 [ 135.541644][ T7646] should_fail_ex.cold+0x5/0xa [ 135.541667][ T7646] _copy_to_user+0x32/0xd0 [ 135.541696][ T7646] simple_read_from_buffer+0xcb/0x170 [ 135.541718][ T7646] proc_fail_nth_read+0x1af/0x230 [ 135.541748][ T7646] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.541777][ T7646] ? rw_verify_area+0xce/0x6d0 [ 135.541795][ T7646] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.541822][ T7646] vfs_read+0x1e4/0xb30 [ 135.541845][ T7646] ? __pfx_vfs_read+0x10/0x10 [ 135.541861][ T7646] ? find_held_lock+0x2b/0x80 [ 135.541885][ T7646] ? __fget_files+0x215/0x3d0 [ 135.541909][ T7646] ? __fget_files+0x21f/0x3d0 [ 135.541936][ T7646] ksys_read+0x12a/0x250 [ 135.541955][ T7646] ? __pfx_ksys_read+0x10/0x10 [ 135.541974][ T7646] ? rcu_is_watching+0x12/0xc0 [ 135.541996][ T7646] ? rcu_is_watching+0x12/0xc0 [ 135.542020][ T7646] do_int80_emulation+0x141/0x700 [ 135.542046][ T7646] asm_int80_emulation+0x1a/0x20 [ 135.542064][ T7646] RIP: 0023:0xf719616b [ 135.542079][ T7646] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 135.542096][ T7646] RSP: 002b:00000000f54564bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 135.542113][ T7646] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54565d0 [ 135.542124][ T7646] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 135.542133][ T7646] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 135.542143][ T7646] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 135.542153][ T7646] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.542177][ T7646] [ 135.546758][ T7648] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 135.606419][ T7649] Bluetooth: (null): Too short H5 packet [ 135.607041][ T7648] CIFS mount error: No usable UNC path provided in device string! [ 135.607041][ T7648] [ 135.632549][ T1037] usb 7-1: Using ep0 maxpacket: 32 [ 135.635050][ T7648] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 135.645420][ T1037] usb 7-1: config 247 has an invalid interface number: 111 but max is 0 [ 135.650200][ T1037] usb 7-1: config 247 has no interface number 0 [ 135.652891][ T1037] usb 7-1: config 247 interface 111 has no altsetting 0 [ 135.662951][ T630] Bluetooth: (null): Invalid header checksum [ 135.667823][ T1037] usb 7-1: New USB device found, idVendor=0499, idProduct=1003, bcdDevice=ec.77 [ 135.671267][ T1037] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.680615][ T1037] usb 7-1: Product: syz [ 135.682124][ T1037] usb 7-1: Manufacturer: syz [ 135.684224][ T1037] usb 7-1: SerialNumber: syz [ 135.848909][ T7657] syzkaller0: entered promiscuous mode [ 135.851319][ T7657] syzkaller0: entered allmulticast mode [ 136.072698][ T7653] syz.1.465 (7653): drop_caches: 2 [ 136.090769][ T1037] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 136.426000][ T1037] snd-usb-audio 7-1:247.111: probe with driver snd-usb-audio failed with error -2 [ 136.443076][ T1037] usb 7-1: USB disconnect, device number 9 [ 136.487092][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:247.111/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.801114][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 136.801134][ T40] audit: type=1326 audit(1777123366.543:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.1.474" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f98fcc code=0x0 [ 137.208236][ T7694] netlink: 48 bytes leftover after parsing attributes in process `syz.1.474'. [ 137.375521][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.378061][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.453872][ T7712] FAULT_INJECTION: forcing a failure. [ 137.453872][ T7712] name failslab, interval 1, probability 0, space 0, times 0 [ 137.459044][ T7712] CPU: 2 UID: 0 PID: 7712 Comm: syz.3.477 Not tainted syzkaller #0 PREEMPT(full) [ 137.459059][ T7712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.459066][ T7712] Call Trace: [ 137.459069][ T7712] [ 137.459073][ T7712] dump_stack_lvl+0x100/0x190 [ 137.459089][ T7712] should_fail_ex.cold+0x5/0xa [ 137.459103][ T7712] should_failslab+0xc2/0x120 [ 137.459115][ T7712] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 137.459131][ T7712] ? skb_clone+0x190/0x400 [ 137.459152][ T7712] skb_clone+0x190/0x400 [ 137.459162][ T7712] netlink_deliver_tap+0xaed/0xcc0 [ 137.459178][ T7712] netlink_unicast+0x62b/0x850 [ 137.459193][ T7712] ? __pfx_netlink_unicast+0x10/0x10 [ 137.459210][ T7712] netlink_sendmsg+0x8b0/0xda0 [ 137.459225][ T7712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.459240][ T7712] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 137.459259][ T7712] ____sys_sendmsg+0x9e1/0xb70 [ 137.459271][ T7712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.459285][ T7712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.459305][ T7712] ___sys_sendmsg+0x190/0x1e0 [ 137.459319][ T7712] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.459339][ T7712] ? find_held_lock+0x2b/0x80 [ 137.459361][ T7712] __sys_sendmsg+0x170/0x220 [ 137.459372][ T7712] ? __pfx___sys_sendmsg+0x10/0x10 [ 137.459381][ T7712] ? __fget_files+0x21f/0x3d0 [ 137.459399][ T7712] ? ksys_write+0x1ac/0x250 [ 137.459411][ T7712] ? rcu_is_watching+0x12/0xc0 [ 137.459426][ T7712] __do_fast_syscall_32+0xe7/0x950 [ 137.459440][ T7712] ? lockdep_hardirqs_on+0x78/0x100 [ 137.459453][ T7712] do_fast_syscall_32+0x32/0x70 [ 137.459466][ T7712] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.459480][ T7712] RIP: 0023:0xf707efcc [ 137.459489][ T7712] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 137.459499][ T7712] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 137.459510][ T7712] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440 [ 137.459516][ T7712] RDX: 00000000040088c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.459523][ T7712] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.459528][ T7712] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 137.459534][ T7712] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.459547][ T7712] [ 137.743040][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.874607][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.960717][ T62] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.968230][ T62] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.972183][ T62] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.975630][ T62] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.979399][ T62] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.995448][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.198809][ T7727] wg2 speed is unknown, defaulting to 1000 [ 138.276211][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.373541][ T7750] vlan2: entered allmulticast mode [ 138.375248][ T7750] bond0: entered allmulticast mode [ 138.377043][ T7750] bond_slave_0: entered allmulticast mode [ 138.379024][ T7750] bond_slave_1: entered allmulticast mode [ 138.493993][ T13] bridge_slave_1: left allmulticast mode [ 138.496411][ T13] bridge_slave_1: left promiscuous mode [ 138.499270][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.504780][ T13] bridge_slave_0: left allmulticast mode [ 138.509270][ T13] bridge_slave_0: left promiscuous mode [ 138.511302][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.700651][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.706548][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.710784][ T13] bond0 (unregistering): Released all slaves [ 138.790976][ T13] tipc: Left network mode [ 138.834615][ T7727] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.837233][ T7727] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.839881][ T7727] bridge_slave_0: entered allmulticast mode [ 138.844741][ T7727] bridge_slave_0: entered promiscuous mode [ 138.864548][ T7727] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.867291][ T7727] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.869976][ T7727] bridge_slave_1: entered allmulticast mode [ 138.873452][ T7727] bridge_slave_1: entered promiscuous mode [ 138.895502][ T7727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.900554][ T7727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.924155][ T7727] team0: Port device team_slave_0 added [ 138.939972][ T7727] team0: Port device team_slave_1 added [ 138.972827][ T7727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.975232][ T7727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.983728][ T7727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.988173][ T7727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.990613][ T7727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.999543][ T7727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.025527][ T5451] 8021q: adding VLAN 0 to HW filter on device eth2 [ 139.054153][ T7727] hsr_slave_0: entered promiscuous mode [ 139.056422][ T7727] hsr_slave_1: entered promiscuous mode [ 139.058631][ T7727] debugfs: 'hsr0' already exists in 'hsr' [ 139.060701][ T7727] Cannot create hsr debugfs directory [ 139.304963][ T13] hsr_slave_0: left promiscuous mode [ 139.307238][ T13] hsr_slave_1: left promiscuous mode [ 139.309339][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.311761][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.314871][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.317228][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.324204][ T13] veth1_macvtap: left promiscuous mode [ 139.326883][ T13] veth0_macvtap: left promiscuous mode [ 139.329307][ T13] veth1_vlan: left promiscuous mode [ 139.331406][ T13] veth0_vlan: left promiscuous mode [ 139.510356][ T13] team0 (unregistering): Port device team_slave_1 removed [ 139.522557][ T13] team0 (unregistering): Port device team_slave_0 removed [ 139.601963][ T5451] 8021q: adding VLAN 0 to HW filter on device eth3 [ 139.605908][ T7795] netlink: 'syz.3.495': attribute type 1 has an invalid length. [ 139.635080][ T7795] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.700954][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'. [ 139.703921][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.495'. [ 139.875761][ T5451] 8021q: adding VLAN 0 to HW filter on device eth4 [ 139.921720][ T7727] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 139.930271][ T7727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 139.934932][ T7727] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 139.941176][ T7727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 139.945165][ T7727] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 139.950914][ T7727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 139.954060][ T7727] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 139.960014][ T7727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 140.013575][ T5749] Bluetooth: hci1: command tx timeout [ 140.037593][ T7727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.064391][ T7727] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.075300][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.077669][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.093136][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.095459][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.109981][ T5451] 8021q: adding VLAN 0 to HW filter on device eth5 [ 140.292043][ T7823] binder: 7816:7823 ioctl 81e8943c 80000c00 returned -22 [ 140.326900][ T5147] IPVS: starting estimator thread 0... [ 140.443709][ T7827] IPVS: using max 43 ests per chain, 103200 per kthread [ 141.535405][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.499'. [ 141.554138][ T5749] block nbd0: Receive control failed (result -32) [ 141.560078][ T5749] block nbd0: Receive control failed (result -32) [ 141.634254][ T7822] nbd0: detected capacity change from 0 to 128 [ 141.723574][ T5898] block nbd0: Dead connection, failed to find a fallback [ 141.728513][ T5898] block nbd0: shutting down sockets [ 141.741411][ T5898] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 141.747738][ T5898] Buffer I/O error on dev nbd0, logical block 0, async page read [ 141.752615][ T5898] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 141.756605][ T5898] Buffer I/O error on dev nbd0, logical block 0, async page read [ 141.760208][ T5898] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 141.768423][ T5898] Buffer I/O error on dev nbd0, logical block 0, async page read [ 141.772082][ T5898] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 141.776418][ T5898] Buffer I/O error on dev nbd0, logical block 0, async page read [ 141.779900][ T5898] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 141.783947][ T5898] Buffer I/O error on dev nbd0, logical block 0, async page read [ 141.786819][ T5898] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 141.789705][ T5898] Buffer I/O error on dev nbd0, logical block 0, async page read [ 141.792255][ T5898] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 141.795740][ T5898] Buffer I/O error on dev nbd0, logical block 0, async page read [ 141.798277][ T5898] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 141.801138][ T5898] Buffer I/O error on dev nbd0, logical block 0, async page read [ 141.803745][ T5898] ldm_validate_partition_table(): Disk read failed. [ 141.806519][ T5898] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 141.807228][ T7727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.809928][ T5898] Buffer I/O error on dev nbd0, logical block 0, async page read [ 141.814340][ T5898] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 141.817287][ T5898] Buffer I/O error on dev nbd0, logical block 0, async page read [ 141.819918][ T5898] Dev nbd0: unable to read RDB block 0 [ 141.821935][ T5898] nbd0: unable to read partition table [ 141.835605][ T5898] ldm_validate_partition_table(): Disk read failed. [ 141.839232][ T5898] Dev nbd0: unable to read RDB block 0 [ 141.843448][ T5898] nbd0: unable to read partition table [ 141.929945][ T7858] tmpfs: Bad value for 'mpol' [ 141.968753][ T7727] veth0_vlan: entered promiscuous mode [ 141.978774][ T7727] veth1_vlan: entered promiscuous mode [ 142.009323][ T7727] veth0_macvtap: entered promiscuous mode [ 142.014013][ T7727] veth1_macvtap: entered promiscuous mode [ 142.022122][ T7727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.038547][ T7727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.045370][ T163] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.048305][ T163] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.054002][ T163] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.056820][ T163] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.093598][ T62] Bluetooth: hci1: command tx timeout [ 142.113007][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.115591][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.129680][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.136655][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.707778][ T40] audit: type=1326 audit(1777123372.453:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.4.505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efcc code=0x7ffc0000 [ 142.711295][ T7879] netlink: 44 bytes leftover after parsing attributes in process `syz.4.505'. [ 142.714962][ T40] audit: type=1326 audit(1777123372.453:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.4.505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efcc code=0x7ffc0000 [ 142.724717][ T40] audit: type=1326 audit(1777123372.453:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.4.505" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707efcc code=0x7ffc0000 [ 142.732748][ T40] audit: type=1326 audit(1777123372.453:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.4.505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efcc code=0x7ffc0000 [ 142.740558][ T40] audit: type=1326 audit(1777123372.453:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.4.505" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707efcc code=0x7ffc0000 [ 142.747482][ T40] audit: type=1326 audit(1777123372.453:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.4.505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efcc code=0x7ffc0000 [ 142.754283][ T40] audit: type=1326 audit(1777123372.453:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.4.505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efcc code=0x7ffc0000 [ 142.761085][ T40] audit: type=1326 audit(1777123372.453:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.4.505" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707efcc code=0x7ffc0000 [ 142.767940][ T40] audit: type=1326 audit(1777123372.453:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.4.505" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efcc code=0x7ffc0000 [ 142.770092][ T7881] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 142.774831][ T40] audit: type=1326 audit(1777123372.453:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.4.505" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707efcc code=0x7ffc0000 [ 143.194168][ T7885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.508'. [ 143.332697][ T7889] FAULT_INJECTION: forcing a failure. [ 143.332697][ T7889] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 143.342366][ T7889] CPU: 2 UID: 0 PID: 7889 Comm: syz.0.509 Not tainted syzkaller #0 PREEMPT(full) [ 143.342382][ T7889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.342389][ T7889] Call Trace: [ 143.342393][ T7889] [ 143.342398][ T7889] dump_stack_lvl+0x100/0x190 [ 143.342413][ T7889] should_fail_ex.cold+0x5/0xa [ 143.342425][ T7889] ? prepare_alloc_pages+0x16d/0x5f0 [ 143.342439][ T7889] should_fail_alloc_page+0xeb/0x140 [ 143.342452][ T7889] prepare_alloc_pages+0x1f0/0x5f0 [ 143.342467][ T7889] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 143.342488][ T7889] ? rcu_is_watching+0x12/0xc0 [ 143.342501][ T7889] ? trace_mm_page_alloc+0x163/0x1d0 [ 143.342515][ T7889] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 143.342533][ T7889] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 143.342552][ T7889] ? find_held_lock+0x2b/0x80 [ 143.342566][ T7889] ? is_bpf_text_address+0x8a/0x1a0 [ 143.342580][ T7889] ? is_bpf_text_address+0x8a/0x1a0 [ 143.342595][ T7889] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 143.342611][ T7889] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 143.342627][ T7889] ? is_bpf_text_address+0x94/0x1a0 [ 143.342641][ T7889] ? kernel_text_address+0x8d/0x100 [ 143.342651][ T7889] ? __kernel_text_address+0xd/0x30 [ 143.342662][ T7889] ? unwind_get_return_address+0x59/0xa0 [ 143.342679][ T7889] alloc_pages_bulk_noprof+0x657/0x1390 [ 143.342700][ T7889] ? policy_nodemask+0xed/0x4f0 [ 143.342713][ T7889] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 143.342731][ T7889] ? kasan_save_stack+0x30/0x50 [ 143.342747][ T7889] __kasan_populate_vmalloc+0xf0/0x210 [ 143.342766][ T7889] alloc_vmap_area+0x95d/0x2b70 [ 143.342784][ T7889] ? __pfx_alloc_vmap_area+0x10/0x10 [ 143.342799][ T7889] __get_vm_area_node+0x1ca/0x330 [ 143.342815][ T7889] __vmalloc_node_range_noprof+0x228/0x1630 [ 143.342829][ T7889] ? kernel_clone+0x12e/0x9c0 [ 143.342843][ T7889] ? find_held_lock+0x2b/0x80 [ 143.342855][ T7889] ? rcu_read_unlock+0x17/0x60 [ 143.342871][ T7889] ? kernel_clone+0x12e/0x9c0 [ 143.342889][ T7889] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 143.342907][ T7889] ? rcu_is_watching+0x12/0xc0 [ 143.342919][ T7889] ? trace_kmem_cache_alloc+0xd5/0x100 [ 143.342933][ T7889] ? kernel_clone+0x12e/0x9c0 [ 143.342946][ T7889] __vmalloc_node_noprof+0xad/0xf0 [ 143.342960][ T7889] ? kernel_clone+0x12e/0x9c0 [ 143.342975][ T7889] copy_process+0x7fb/0x7fa0 [ 143.342991][ T7889] ? __lock_acquire+0x4a5/0x2630 [ 143.343006][ T7889] ? __pfx_copy_process+0x10/0x10 [ 143.343034][ T7889] ? get_pid_task+0xfc/0x250 [ 143.343050][ T7889] ? get_pid_task+0xfc/0x250 [ 143.343067][ T7889] kernel_clone+0x12e/0x9c0 [ 143.343081][ T7889] ? proc_fail_nth_write+0x9f/0x220 [ 143.343098][ T7889] ? __pfx_kernel_clone+0x10/0x10 [ 143.343116][ T7889] ? ksys_write+0x190/0x250 [ 143.343131][ T7889] __do_compat_sys_ia32_clone+0xd4/0x120 [ 143.343149][ T7889] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 143.343166][ T7889] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 143.343185][ T7889] ? fput+0x79/0x100 [ 143.343199][ T7889] ? ksys_write+0x1ac/0x250 [ 143.343211][ T7889] ? rcu_is_watching+0x12/0xc0 [ 143.343225][ T7889] __do_fast_syscall_32+0xe7/0x950 [ 143.343238][ T7889] ? lockdep_hardirqs_on+0x78/0x100 [ 143.343251][ T7889] do_fast_syscall_32+0x32/0x70 [ 143.343264][ T7889] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 143.343278][ T7889] RIP: 0023:0xf7f65fcc [ 143.343287][ T7889] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 143.343298][ T7889] RSP: 002b:00000000f54054bc EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 143.343308][ T7889] RAX: ffffffffffffffda RBX: 000000000004d000 RCX: 0000000000000000 [ 143.343315][ T7889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.343321][ T7889] RBP: 00000000f7425018 R08: 0000000000000000 R09: 0000000000000000 [ 143.343327][ T7889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.343333][ T7889] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 143.343345][ T7889] [ 143.343385][ T7889] syz.0.509: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 143.502450][ T7889] CPU: 3 UID: 0 PID: 7889 Comm: syz.0.509 Not tainted syzkaller #0 PREEMPT(full) [ 143.502473][ T7889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.502482][ T7889] Call Trace: [ 143.502488][ T7889] [ 143.502494][ T7889] dump_stack_lvl+0x100/0x190 [ 143.502517][ T7889] warn_alloc.cold+0x95/0x1c1 [ 143.502534][ T7889] ? __pfx_warn_alloc+0x10/0x10 [ 143.502558][ T7889] ? lockdep_hardirqs_on+0x78/0x100 [ 143.502579][ T7889] ? __get_vm_area_node+0x2c5/0x330 [ 143.502600][ T7889] ? __get_vm_area_node+0x208/0x330 [ 143.502616][ T7889] __vmalloc_node_range_noprof+0xccd/0x1630 [ 143.502630][ T7889] ? find_held_lock+0x2b/0x80 [ 143.502647][ T7889] ? kernel_clone+0x12e/0x9c0 [ 143.502666][ T7889] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 143.502684][ T7889] ? rcu_is_watching+0x12/0xc0 [ 143.502697][ T7889] ? trace_kmem_cache_alloc+0xd5/0x100 [ 143.502711][ T7889] ? kernel_clone+0x12e/0x9c0 [ 143.502724][ T7889] __vmalloc_node_noprof+0xad/0xf0 [ 143.502738][ T7889] ? kernel_clone+0x12e/0x9c0 [ 143.502753][ T7889] copy_process+0x7fb/0x7fa0 [ 143.502769][ T7889] ? __lock_acquire+0x4a5/0x2630 [ 143.502783][ T7889] ? __pfx_copy_process+0x10/0x10 [ 143.502799][ T7889] ? get_pid_task+0xfc/0x250 [ 143.502814][ T7889] ? get_pid_task+0xfc/0x250 [ 143.502832][ T7889] kernel_clone+0x12e/0x9c0 [ 143.502846][ T7889] ? proc_fail_nth_write+0x9f/0x220 [ 143.502862][ T7889] ? __pfx_kernel_clone+0x10/0x10 [ 143.502879][ T7889] ? ksys_write+0x190/0x250 [ 143.502895][ T7889] __do_compat_sys_ia32_clone+0xd4/0x120 [ 143.502914][ T7889] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 143.502930][ T7889] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 143.502961][ T7889] ? fput+0x79/0x100 [ 143.502977][ T7889] ? ksys_write+0x1ac/0x250 [ 143.502989][ T7889] ? rcu_is_watching+0x12/0xc0 [ 143.503003][ T7889] __do_fast_syscall_32+0xe7/0x950 [ 143.503016][ T7889] ? lockdep_hardirqs_on+0x78/0x100 [ 143.503029][ T7889] do_fast_syscall_32+0x32/0x70 [ 143.503043][ T7889] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 143.503056][ T7889] RIP: 0023:0xf7f65fcc [ 143.503065][ T7889] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 143.503075][ T7889] RSP: 002b:00000000f54054bc EFLAGS: 00000282 ORIG_RAX: 0000000000000078 [ 143.503086][ T7889] RAX: ffffffffffffffda RBX: 000000000004d000 RCX: 0000000000000000 [ 143.503093][ T7889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.503098][ T7889] RBP: 00000000f7425018 R08: 0000000000000000 R09: 0000000000000000 [ 143.503109][ T7889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.503116][ T7889] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 143.503129][ T7889] [ 143.503183][ T7889] Mem-Info: [ 143.616182][ T7889] active_anon:10161 inactive_anon:2143 isolated_anon:0 [ 143.616182][ T7889] active_file:16753 inactive_file:22684 isolated_file:0 [ 143.616182][ T7889] unevictable:3793 dirty:536 writeback:0 [ 143.616182][ T7889] slab_reclaimable:6674 slab_unreclaimable:55394 [ 143.616182][ T7889] mapped:29127 shmem:8408 pagetables:1344 [ 143.616182][ T7889] sec_pagetables:296 bounce:0 [ 143.616182][ T7889] kernel_misc_reclaimable:0 [ 143.616182][ T7889] free:43236 free_pcp:15672 free_cma:0 [ 143.644788][ T7889] Node 0 active_anon:692kB inactive_anon:32kB active_file:776kB inactive_file:40kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:188kB dirty:36kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8580kB pagetables:1856kB sec_pagetables:1120kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 143.656396][ T7889] Node 1 active_anon:36452kB inactive_anon:8540kB active_file:66236kB inactive_file:90696kB unevictable:11636kB isolated(anon):0kB isolated(file):0kB mapped:104320kB dirty:2108kB writeback:0kB shmem:28396kB shmem_thp:8192kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4936kB pagetables:3520kB sec_pagetables:64kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 143.670474][ T7889] Node 0 DMA free:2060kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:700kB local_pcp:204kB free_cma:0kB [ 143.675908][ T7903] FAULT_INJECTION: forcing a failure. [ 143.675908][ T7903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.680187][ T7889] lowmem_reserve[]: 0 285 285 285 285 [ 143.684737][ T7903] CPU: 1 UID: 0 PID: 7903 Comm: syz.1.512 Not tainted syzkaller #0 PREEMPT(full) [ 143.684751][ T7903] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 143.684758][ T7903] Call Trace: [ 143.684762][ T7903] [ 143.684766][ T7903] dump_stack_lvl+0x100/0x190 [ 143.684782][ T7903] should_fail_ex.cold+0x5/0xa [ 143.684796][ T7903] _copy_to_user+0x32/0xd0 [ 143.684814][ T7903] __copy_siginfo_to_user32+0x9a/0x100 [ 143.684830][ T7903] ? __pfx___copy_siginfo_to_user32+0x10/0x10 [ 143.684850][ T7903] ? siginfo_layout+0x1b1/0x290 [ 143.684864][ T7903] ia32_setup_rt_frame+0x6ac/0xaf0 [ 143.684879][ T7903] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 143.684895][ T7903] arch_do_signal_or_restart+0x43f/0x770 [ 143.684911][ T7903] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 143.684930][ T7903] ? __ia32_sys_clock_nanosleep_time32+0x363/0x480 [ 143.684966][ T7903] ? rcu_is_watching+0x12/0xc0 [ 143.684980][ T7903] exit_to_user_mode_loop+0x86/0x4a0 [ 143.684991][ T7903] ? __do_fast_syscall_32+0x373/0x950 [ 143.685006][ T7903] __do_fast_syscall_32+0x608/0x950 [ 143.685023][ T7903] ? lockdep_hardirqs_on+0x78/0x100 [ 143.685036][ T7903] do_fast_syscall_32+0x32/0x70 [ 143.685050][ T7903] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 143.685063][ T7903] RIP: 0023:0xf7f98fcc [ 143.685072][ T7903] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 143.685082][ T7903] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 000000000000010b [ 143.685093][ T7903] RAX: fffffffffffffffc RBX: 0000000000000002 RCX: 0000000000000000 [ 143.685099][ T7903] RDX: 0000000080000140 RSI: 0000000080000040 RDI: 0000000000000000 [ 143.685106][ T7903] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 143.685111][ T7903] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 143.685117][ T7903] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 143.685131][ T7903] [ 143.756195][ T7889] Node 0 DMA32 free:18252kB boost:2048kB min:15140kB low:18412kB high:21684kB reserved_highatomic:0KB free_highatomic:0KB active_anon:680kB inactive_anon:32kB active_file:776kB inactive_file:40kB unevictable:3536kB writepending:36kB zspages:0kB present:1032196kB managed:292684kB mlocked:0kB bounce:0kB free_pcp:14212kB local_pcp:3332kB free_cma:0kB [ 143.767147][ T7889] lowmem_reserve[]: 0 0 0 0 0 [ 143.770309][ T7889] Node 1 DMA32 free:169432kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21852kB inactive_anon:8540kB active_file:66236kB inactive_file:90696kB unevictable:11636kB writepending:2108kB zspages:2444kB present:1048432kB managed:948212kB mlocked:8100kB bounce:0kB free_pcp:49576kB local_pcp:12900kB free_cma:0kB [ 143.785066][ T7889] lowmem_reserve[]: 0 0 0 0 0 [ 143.790752][ T7889] Node 0 DMA: 159*4kB (UM) 22*8kB (UM) 14*16kB (UM) 6*32kB (U) 1*64kB (U) 2*128kB (M) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2060kB [ 143.797559][ T7889] Node 0 DMA32: 403*4kB (UM) 88*8kB (UME) 26*16kB (UM) 55*32kB (UME) 45*64kB (UME) 23*128kB (UM) 17*256kB (UM) 5*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 18252kB [ 143.805431][ T7889] Node 1 DMA32: 1363*4kB (UME) 982*8kB (UME) 880*16kB (UME) 233*32kB (ME) 119*64kB (ME) 91*128kB (UME) 71*256kB (UME) 61*512kB (UME) 34*1024kB (UM) 9*2048kB (UM) 3*4096kB (UM) = 169052kB [ 143.814815][ T7889] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 143.820772][ T7889] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 143.829544][ T7889] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 143.838439][ T7889] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 143.849389][ T7889] 44454 total pagecache pages [ 143.854390][ T7889] 713 pages in swap cache [ 143.859050][ T7889] Free swap = 116584kB [ 143.863229][ T7889] Total swap = 124996kB [ 143.867380][ T7889] 524155 pages RAM [ 143.871117][ T7889] 0 pages HighMem/MovableOnly [ 143.876676][ T7889] 210091 pages reserved [ 143.881229][ T7889] 0 pages cma reserved [ 144.173397][ T62] Bluetooth: hci1: command 0x040f tx timeout [ 144.668682][ T7915] syzkaller0: entered promiscuous mode [ 144.670388][ T7915] syzkaller0: entered allmulticast mode [ 144.819236][ T7922] capability: warning: `syz.1.518' uses 32-bit capabilities (legacy support in use) [ 144.902520][ T58] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 145.072517][ T7925] netlink: 48 bytes leftover after parsing attributes in process `syz.3.517'. [ 145.073639][ T58] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 145.084827][ T58] usb 5-1: config 1 has no interface number 0 [ 145.087264][ T58] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 145.092441][ T58] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 145.101690][ T58] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.114120][ T58] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 145.119992][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.125907][ T58] usb 5-1: Product: syz [ 145.129800][ T58] usb 5-1: Manufacturer: syz [ 145.134817][ T58] usb 5-1: SerialNumber: syz [ 145.145771][ T7914] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 145.237560][ T7930] FAULT_INJECTION: forcing a failure. [ 145.237560][ T7930] name failslab, interval 1, probability 0, space 0, times 0 [ 145.241979][ T7930] CPU: 3 UID: 0 PID: 7930 Comm: syz.1.519 Not tainted syzkaller #0 PREEMPT(full) [ 145.241994][ T7930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.242000][ T7930] Call Trace: [ 145.242005][ T7930] [ 145.242009][ T7930] dump_stack_lvl+0x100/0x190 [ 145.242025][ T7930] should_fail_ex.cold+0x5/0xa [ 145.242039][ T7930] ? tomoyo_realpath_from_path+0xb6/0x690 [ 145.242052][ T7930] should_failslab+0xc2/0x120 [ 145.242064][ T7930] __kmalloc_noprof+0xe0/0x850 [ 145.242080][ T7930] ? kfree+0x1dd/0x6c0 [ 145.242097][ T7930] tomoyo_realpath_from_path+0xb6/0x690 [ 145.242113][ T7930] tomoyo_check_open_permission+0x2af/0x3c0 [ 145.242125][ T7930] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 145.242136][ T7930] ? check_noncircular+0x97/0x160 [ 145.242156][ T7930] ? hook_file_open+0x24e/0x7a0 [ 145.242176][ T7930] ? path_get+0x61/0x80 [ 145.242192][ T7930] tomoyo_file_open+0x6b/0x90 [ 145.242207][ T7930] security_file_open+0xb5/0x1e0 [ 145.242220][ T7930] do_dentry_open+0x5aa/0x1660 [ 145.242234][ T7930] ? security_inode_permission+0xbf/0x250 [ 145.242252][ T7930] vfs_open+0x82/0x3f0 [ 145.242284][ T7930] path_openat+0x208c/0x31a0 [ 145.242302][ T7930] ? __pfx_path_openat+0x10/0x10 [ 145.242317][ T7930] ? stack_trace_save+0x8e/0xc0 [ 145.242334][ T7930] do_file_open+0x20e/0x430 [ 145.242348][ T7930] ? __pfx_do_file_open+0x10/0x10 [ 145.242383][ T7930] ? find_held_lock+0x2b/0x80 [ 145.242398][ T7930] ? __might_fault+0xc5/0x140 [ 145.242415][ T7930] ? __might_fault+0xc5/0x140 [ 145.242432][ T7930] file_open_name+0x198/0x3b0 [ 145.242448][ T7930] ? __pfx_file_open_name+0x10/0x10 [ 145.242466][ T7930] ? do_getname+0x191/0x390 [ 145.242482][ T7930] acct_on+0xa4/0x9e0 [ 145.242496][ T7930] ? __pfx_acct_on+0x10/0x10 [ 145.242509][ T7930] ? bpf_lsm_capable+0x9/0x10 [ 145.242524][ T7930] __ia32_sys_acct+0x80/0x1e0 [ 145.242537][ T7930] ? lockdep_hardirqs_on+0x78/0x100 [ 145.242550][ T7930] __do_fast_syscall_32+0xe7/0x950 [ 145.242563][ T7930] ? lockdep_hardirqs_on+0x78/0x100 [ 145.242576][ T7930] do_fast_syscall_32+0x32/0x70 [ 145.242589][ T7930] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 145.242603][ T7930] RIP: 0023:0xf7f98fcc [ 145.242612][ T7930] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 145.242623][ T7930] RSP: 002b:00000000f543550c EFLAGS: 00000292 ORIG_RAX: 0000000000000033 [ 145.242633][ T7930] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000000000000 [ 145.242640][ T7930] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.242646][ T7930] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 145.242651][ T7930] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 145.242657][ T7930] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 145.242671][ T7930] [ 145.356884][ T7930] ERROR: Out of memory at tomoyo_realpath_from_path. [ 145.564446][ T7914] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 145.783078][ T58] usb 5-1: Incompatible driver and firmware versions [ 145.803990][ T58] usb 5-1: USB disconnect, device number 12 [ 146.252866][ T5749] Bluetooth: hci1: command 0x040f tx timeout [ 147.005557][ T7959] tun0: tun_chr_ioctl cmd 1074025675 [ 147.009892][ T7959] tun0: persist enabled [ 147.013666][ T7959] tun0: tun_chr_ioctl cmd 1074025675 [ 147.016048][ T7959] tun0: persist disabled [ 147.196980][ T7963] FAULT_INJECTION: forcing a failure. [ 147.196980][ T7963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.202037][ T7963] CPU: 0 UID: 0 PID: 7963 Comm: syz.4.531 Not tainted syzkaller #0 PREEMPT(full) [ 147.202059][ T7963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.202068][ T7963] Call Trace: [ 147.202073][ T7963] [ 147.202079][ T7963] dump_stack_lvl+0x100/0x190 [ 147.202100][ T7963] should_fail_ex.cold+0x5/0xa [ 147.202119][ T7963] _copy_from_user+0x2e/0xd0 [ 147.202142][ T7963] get_compat_msghdr+0xb3/0x4b0 [ 147.202159][ T7963] ? __pfx_get_compat_msghdr+0x10/0x10 [ 147.202182][ T7963] ___sys_sendmsg+0x1b6/0x1e0 [ 147.202202][ T7963] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.202229][ T7963] ? find_held_lock+0x2b/0x80 [ 147.202258][ T7963] __sys_sendmsg+0x170/0x220 [ 147.202293][ T7963] ? __pfx___sys_sendmsg+0x10/0x10 [ 147.202306][ T7963] ? __fget_files+0x21f/0x3d0 [ 147.202328][ T7963] ? ksys_write+0x1ac/0x250 [ 147.202344][ T7963] ? rcu_is_watching+0x12/0xc0 [ 147.202364][ T7963] __do_fast_syscall_32+0xe7/0x950 [ 147.202381][ T7963] ? lockdep_hardirqs_on+0x78/0x100 [ 147.202399][ T7963] do_fast_syscall_32+0x32/0x70 [ 147.202417][ T7963] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.202435][ T7963] RIP: 0023:0xf707efcc [ 147.202447][ T7963] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 147.202461][ T7963] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 147.202476][ T7963] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 147.202485][ T7963] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.202493][ T7963] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.202502][ T7963] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 147.202510][ T7963] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.202528][ T7963] [ 147.567613][ T7973] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.587666][ T7972] Driver unsupported XDP return value 0 on prog (id 40) dev N/A, expect packet loss! [ 147.622797][ T58] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 147.658275][ T7978] FAULT_INJECTION: forcing a failure. [ 147.658275][ T7978] name failslab, interval 1, probability 0, space 0, times 0 [ 147.663924][ T7978] CPU: 0 UID: 0 PID: 7978 Comm: syz.1.535 Not tainted syzkaller #0 PREEMPT(full) [ 147.663939][ T7978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.663946][ T7978] Call Trace: [ 147.663949][ T7978] [ 147.663953][ T7978] dump_stack_lvl+0x100/0x190 [ 147.663969][ T7978] should_fail_ex.cold+0x5/0xa [ 147.663983][ T7978] should_failslab+0xc2/0x120 [ 147.663996][ T7978] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 147.664012][ T7978] ? skb_clone+0x190/0x400 [ 147.664025][ T7978] skb_clone+0x190/0x400 [ 147.664037][ T7978] netlink_deliver_tap+0xaed/0xcc0 [ 147.664053][ T7978] netlink_unicast+0x62b/0x850 [ 147.664068][ T7978] ? __pfx_netlink_unicast+0x10/0x10 [ 147.664085][ T7978] netlink_sendmsg+0x8b0/0xda0 [ 147.664100][ T7978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.664115][ T7978] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 147.664133][ T7978] ____sys_sendmsg+0x9e1/0xb70 [ 147.664146][ T7978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.664160][ T7978] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.664179][ T7978] ___sys_sendmsg+0x190/0x1e0 [ 147.664194][ T7978] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.664214][ T7978] ? find_held_lock+0x2b/0x80 [ 147.664236][ T7978] __sys_sendmsg+0x170/0x220 [ 147.664247][ T7978] ? __pfx___sys_sendmsg+0x10/0x10 [ 147.664256][ T7978] ? __fget_files+0x21f/0x3d0 [ 147.664272][ T7978] ? ksys_write+0x1ac/0x250 [ 147.664288][ T7978] ? rcu_is_watching+0x12/0xc0 [ 147.664303][ T7978] __do_fast_syscall_32+0xe7/0x950 [ 147.664316][ T7978] ? lockdep_hardirqs_on+0x78/0x100 [ 147.664329][ T7978] do_fast_syscall_32+0x32/0x70 [ 147.664343][ T7978] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.664356][ T7978] RIP: 0023:0xf7f98fcc [ 147.664366][ T7978] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 147.664377][ T7978] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 147.664388][ T7978] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 147.664394][ T7978] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.664413][ T7978] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.664418][ T7978] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 147.664424][ T7978] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.664439][ T7978] [ 147.664526][ T7978] IPv6: Can't replace route, no match found [ 147.779260][ T58] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 147.787252][ T58] usb 9-1: config 1 has no interface number 0 [ 147.792194][ T58] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 147.796665][ T58] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 147.801691][ T58] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.807580][ T58] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 147.811608][ T58] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.815716][ T58] usb 9-1: Product: syz [ 147.817555][ T58] usb 9-1: Manufacturer: syz [ 147.822441][ T58] usb 9-1: SerialNumber: syz [ 147.831884][ T7969] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 147.838754][ T7983] syzkaller0: entered promiscuous mode [ 147.840607][ T7983] syzkaller0: entered allmulticast mode [ 148.253109][ T7969] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 148.332420][ T5749] Bluetooth: hci1: command 0x040f tx timeout [ 148.362368][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 148.461019][ T58] usb 9-1: Incompatible driver and firmware versions [ 148.474769][ T58] usb 9-1: USB disconnect, device number 2 [ 148.523560][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 148.532016][ T9] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 148.539482][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.543215][ T9] usb 5-1: Product: syz [ 148.544608][ T9] usb 5-1: Manufacturer: syz [ 148.546592][ T9] usb 5-1: SerialNumber: syz [ 148.551197][ T9] usb 5-1: config 0 descriptor?? [ 148.559393][ T9] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 148.562751][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 148.570897][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 148.575166][ T9] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 148.578298][ T9] usb 5-1: media controller created [ 148.588431][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.764846][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 148.787031][ T9] DVB: Unable to find symbol mt352_attach() [ 148.789754][ T9] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 148.852310][ T9] rc_core: IR keymap rc-dvico-portable not found [ 148.856276][ T9] Registered IR keymap rc-empty [ 148.861030][ T9] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 148.869908][ T9] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input21 [ 148.879507][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 148.881914][ T9] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 148.984074][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 149.093815][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 149.149173][ T5147] usb 5-1: USB disconnect, device number 13 [ 149.323269][ T8015] input: syz0 as /devices/virtual/input/input22 [ 149.374529][ T5147] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 149.595413][ T8022] FAULT_INJECTION: forcing a failure. [ 149.595413][ T8022] name failslab, interval 1, probability 0, space 0, times 0 [ 149.599879][ T8022] CPU: 1 UID: 0 PID: 8022 Comm: syz.3.550 Not tainted syzkaller #0 PREEMPT(full) [ 149.599900][ T8022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 149.599910][ T8022] Call Trace: [ 149.599916][ T8022] [ 149.599923][ T8022] dump_stack_lvl+0x100/0x190 [ 149.599947][ T8022] should_fail_ex.cold+0x5/0xa [ 149.599973][ T8022] should_failslab+0xc2/0x120 [ 149.599992][ T8022] __kmalloc_cache_noprof+0x7a/0x6f0 [ 149.600014][ T8022] ? bpf_uprobe_multi_link_attach+0xe0c/0x13d0 [ 149.600030][ T8022] ? kfree+0x223/0x6c0 [ 149.600054][ T8022] bpf_uprobe_multi_link_attach+0xe0c/0x13d0 [ 149.600073][ T8022] ? find_held_lock+0x2b/0x80 [ 149.600092][ T8022] ? __fget_files+0x215/0x3d0 [ 149.600114][ T8022] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 149.600130][ T8022] ? __fget_files+0x21f/0x3d0 [ 149.600152][ T8022] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 149.600178][ T8022] __sys_bpf+0x3faf/0x4b90 [ 149.600197][ T8022] ? __pfx___sys_bpf+0x10/0x10 [ 149.600211][ T8022] ? get_pid_task+0x106/0x250 [ 149.600234][ T8022] ? proc_fail_nth_write+0x9f/0x220 [ 149.600257][ T8022] ? find_held_lock+0x2b/0x80 [ 149.600281][ T8022] ? find_held_lock+0x2b/0x80 [ 149.600301][ T8022] ? ksys_write+0x190/0x250 [ 149.600322][ T8022] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 149.600341][ T8022] ? kernel_write+0x5f3/0x6c0 [ 149.600370][ T8022] ? fput+0x79/0x100 [ 149.600389][ T8022] ? ksys_write+0x1ac/0x250 [ 149.600409][ T8022] __ia32_sys_bpf+0x79/0xf0 [ 149.600425][ T8022] ? lockdep_hardirqs_on+0x78/0x100 [ 149.600442][ T8022] __do_fast_syscall_32+0xe7/0x950 [ 149.600461][ T8022] ? lockdep_hardirqs_on+0x78/0x100 [ 149.600481][ T8022] do_fast_syscall_32+0x32/0x70 [ 149.600500][ T8022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 149.600519][ T8022] RIP: 0023:0xf707efcc [ 149.600533][ T8022] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 149.600547][ T8022] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 149.600563][ T8022] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00000000800003c0 [ 149.600573][ T8022] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.600582][ T8022] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 149.600590][ T8022] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 149.600599][ T8022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.600620][ T8022] [ 149.776195][ T8028] netlink: 'syz.0.551': attribute type 1 has an invalid length. [ 149.814746][ T8028] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.819524][ T8028] bond1: (slave bond2): making interface the new active one [ 149.822659][ T8028] bond1: (slave bond2): Enslaving as an active interface with an up link [ 149.853774][ T8028] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 150.683267][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.554'. [ 151.688408][ T8059] binder: 8052:8059 ioctl 81e8943c 80000c00 returned -22 [ 151.738770][ T5147] IPVS: starting estimator thread 0... [ 151.832372][ T8060] IPVS: using max 45 ests per chain, 108000 per kthread [ 152.322396][ T8058] nbd1: detected capacity change from 0 to 128 [ 152.443322][ T8080] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 152.520336][ T5749] block nbd1: Receive control failed (result -104) [ 152.521847][ T62] block nbd1: Receive control failed (result -32) [ 152.713564][ T1037] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 152.844179][ T8093] overlayfs: missing 'lowerdir' [ 152.871710][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 152.871720][ T40] audit: type=1326 audit(1777123382.613:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.3.565" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707efcc code=0x0 [ 152.896625][ T1037] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.903106][ T1037] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.906635][ T1037] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.911695][ T1037] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.916203][ T1037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.921435][ T1037] usb 5-1: config 0 descriptor?? [ 153.355746][ T1037] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 153.861998][ T40] audit: type=1326 audit(1777123383.593:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8112 comm="syz.4.573" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707efcc code=0x0 [ 154.572550][ C0] plantronics 0003:047F:FFFF.0005: usb_submit_urb(ctrl) failed: -1 [ 154.702386][ T10] usb 5-1: reset high-speed USB device number 14 using dummy_hcd [ 155.042710][ T8137] fuse: Bad value for 'group_id' [ 155.045207][ T8137] fuse: Bad value for 'group_id' [ 155.530861][ T1037] usb 5-1: USB disconnect, device number 14 [ 155.546510][ T8146] tmpfs: Cannot retroactively limit size [ 155.616733][ T8151] FAULT_INJECTION: forcing a failure. [ 155.616733][ T8151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.632690][ T8151] CPU: 3 UID: 0 PID: 8151 Comm: syz.1.580 Not tainted syzkaller #0 PREEMPT(full) [ 155.632706][ T8151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.632712][ T8151] Call Trace: [ 155.632715][ T8151] [ 155.632719][ T8151] dump_stack_lvl+0x100/0x190 [ 155.632734][ T8151] should_fail_ex.cold+0x5/0xa [ 155.632748][ T8151] _copy_from_iter+0x1f4/0x1690 [ 155.632789][ T8151] ? __lock_acquire+0x4a5/0x2630 [ 155.632800][ T8151] ? __lock_acquire+0x4a5/0x2630 [ 155.632810][ T8151] ? __pfx__copy_from_iter+0x10/0x10 [ 155.632827][ T8151] ? _parse_integer_limit+0x17f/0x1d0 [ 155.632844][ T8151] tun_get_user+0x265/0x3c20 [ 155.632862][ T8151] ? aa_file_perm+0x7f3/0x14d0 [ 155.632878][ T8151] ? __pfx_tun_get_user+0x10/0x10 [ 155.632893][ T8151] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 155.632910][ T8151] ? find_held_lock+0x2b/0x80 [ 155.632923][ T8151] ? tun_get+0x191/0x370 [ 155.632935][ T8151] ? tun_get+0x191/0x370 [ 155.632951][ T8151] tun_chr_write_iter+0xdc/0x200 [ 155.632967][ T8151] vfs_write+0x6ac/0x1070 [ 155.632980][ T8151] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 155.632996][ T8151] ? __pfx_vfs_write+0x10/0x10 [ 155.633006][ T8151] ? find_held_lock+0x2b/0x80 [ 155.633027][ T8151] ksys_write+0x12a/0x250 [ 155.633039][ T8151] ? __pfx_ksys_write+0x10/0x10 [ 155.633049][ T8151] ? ksys_write+0x1ac/0x250 [ 155.633061][ T8151] ? rcu_is_watching+0x12/0xc0 [ 155.633075][ T8151] __do_fast_syscall_32+0xe7/0x950 [ 155.633089][ T8151] ? lockdep_hardirqs_on+0x78/0x100 [ 155.633102][ T8151] do_fast_syscall_32+0x32/0x70 [ 155.633120][ T8151] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.633134][ T8151] RIP: 0023:0xf7f98fcc [ 155.633143][ T8151] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 155.633153][ T8151] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 155.633164][ T8151] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 155.633171][ T8151] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 155.633177][ T8151] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.633183][ T8151] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 155.633189][ T8151] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.633201][ T8151] [ 155.892634][ T8156] binder: 8154:8156 ioctl 81e8943c 80000c00 returned -22 [ 155.902587][ T58] IPVS: starting estimator thread 0... [ 155.950979][ T8170] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input23 [ 155.994378][ T8164] IPVS: using max 46 ests per chain, 110400 per kthread [ 156.035383][ T8174] tmpfs: Cannot retroactively limit size [ 156.138973][ T8180] netlink: 'syz.0.592': attribute type 1 has an invalid length. [ 156.152752][ T8180] 8021q: adding VLAN 0 to HW filter on device bond3 [ 156.164183][ T8155] nbd2: detected capacity change from 0 to 128 [ 156.180308][ T62] block nbd2: Receive control failed (result -104) [ 156.180664][ T5749] block nbd2: Receive control failed (result -32) [ 156.205624][ T8180] bond3: (slave veth3): Enslaving as an active interface with a down link [ 156.261111][ T8180] bond3: (slave veth0_to_bond): making interface the new active one [ 156.265599][ T8180] veth0_to_bond: entered promiscuous mode [ 156.267810][ T8180] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 156.285081][ T8180] vlan3: entered allmulticast mode [ 156.286836][ T8180] veth0_to_bond: entered allmulticast mode [ 156.290914][ T8180] bond3: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 156.639651][ T1037] libceph: connect (1)[c::]:6789 error -101 [ 156.642692][ T1037] libceph: mon0 (1)[c::]:6789 connect error [ 156.684265][ T8195] ceph: No mds server is up or the cluster is laggy [ 157.438055][ T8229] netlink: 'syz.1.606': attribute type 4 has an invalid length. [ 157.453118][ T8229] overlayfs: failed to get inode (-116) [ 157.456334][ T8229] overlayfs: failed to get inode (-116) [ 157.488236][ T8232] vlan2: entered allmulticast mode [ 157.490100][ T8232] bond0: entered allmulticast mode [ 157.492242][ T8232] bond_slave_0: entered allmulticast mode [ 157.495022][ T8232] bond_slave_1: entered allmulticast mode [ 157.885694][ T8257] FAULT_INJECTION: forcing a failure. [ 157.885694][ T8257] name failslab, interval 1, probability 0, space 0, times 0 [ 157.889829][ T8257] CPU: 1 UID: 0 PID: 8257 Comm: syz.0.616 Not tainted syzkaller #0 PREEMPT(full) [ 157.889843][ T8257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.889854][ T8257] Call Trace: [ 157.889858][ T8257] [ 157.889863][ T8257] dump_stack_lvl+0x100/0x190 [ 157.889879][ T8257] should_fail_ex.cold+0x5/0xa [ 157.889893][ T8257] should_failslab+0xc2/0x120 [ 157.889905][ T8257] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 157.889926][ T8257] ? skb_clone+0x190/0x400 [ 157.889947][ T8257] skb_clone+0x190/0x400 [ 157.889967][ T8257] netlink_deliver_tap+0xaed/0xcc0 [ 157.889996][ T8257] netlink_unicast+0x62b/0x850 [ 157.890022][ T8257] ? __pfx_netlink_unicast+0x10/0x10 [ 157.890043][ T8257] netlink_sendmsg+0x8b0/0xda0 [ 157.890058][ T8257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.890073][ T8257] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 157.890091][ T8257] ____sys_sendmsg+0x9e1/0xb70 [ 157.890105][ T8257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.890119][ T8257] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.890138][ T8257] ___sys_sendmsg+0x190/0x1e0 [ 157.890153][ T8257] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.890173][ T8257] ? find_held_lock+0x2b/0x80 [ 157.890196][ T8257] __sys_sendmsg+0x170/0x220 [ 157.890206][ T8257] ? __pfx___sys_sendmsg+0x10/0x10 [ 157.890215][ T8257] ? __fget_files+0x21f/0x3d0 [ 157.890231][ T8257] ? ksys_write+0x1ac/0x250 [ 157.890244][ T8257] ? rcu_is_watching+0x12/0xc0 [ 157.890259][ T8257] __do_fast_syscall_32+0xe7/0x950 [ 157.890272][ T8257] ? lockdep_hardirqs_on+0x78/0x100 [ 157.890285][ T8257] do_fast_syscall_32+0x32/0x70 [ 157.890299][ T8257] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.890312][ T8257] RIP: 0023:0xf7f65fcc [ 157.890321][ T8257] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 157.890331][ T8257] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 157.890343][ T8257] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 157.890349][ T8257] RDX: 0000000024000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.890355][ T8257] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.890361][ T8257] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 157.890367][ T8257] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.890380][ T8257] [ 157.935123][ T8259] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 158.326210][ T40] audit: type=1326 audit(1777123388.073:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8273 comm="syz.3.621" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707efcc code=0x0 [ 158.338752][ T8277] blk_print_req_error: 27 callbacks suppressed [ 158.338765][ T8277] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.348651][ T8277] buffer_io_error: 27 callbacks suppressed [ 158.348662][ T8277] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.364712][ T8277] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.372593][ T8277] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.378645][ T8277] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.386298][ T8277] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.395560][ T8277] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.403444][ T8277] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.408856][ T8277] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.412189][ T8277] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.415330][ T8277] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.418323][ T8277] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.422454][ T8277] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.425328][ T8277] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.428155][ T8277] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.431104][ T8277] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.433926][ T8277] ldm_validate_partition_table(): Disk read failed. [ 158.436140][ T8277] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.441171][ T8277] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.447706][ T8277] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.450654][ T8277] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.453623][ T8277] Dev nbd0: unable to read RDB block 0 [ 158.456503][ T8277] nbd0: unable to read partition table [ 158.456547][ T8284] [ 158.459086][ T8284] ====================================================== [ 158.461279][ T8284] WARNING: possible circular locking dependency detected [ 158.463470][ T8284] syzkaller #0 Not tainted [ 158.464971][ T8284] ------------------------------------------------------ [ 158.467151][ T8284] syz.4.624/8284 is trying to acquire lock: [ 158.469047][ T8284] ffff888026664360 (sk_lock-AF_INET){+.+.}-{0:0}, at: inet_shutdown+0x67/0x410 [ 158.471885][ T8284] [ 158.471885][ T8284] but task is already holding lock: [ 158.474196][ T8284] ffff888013dd2e68 (&nsock->tx_lock){+.+.}-{4:4}, at: sock_shutdown+0x15e/0x200 [ 158.477010][ T8284] [ 158.477010][ T8284] which lock already depends on the new lock. [ 158.477010][ T8284] [ 158.480207][ T8284] [ 158.480207][ T8284] the existing dependency chain (in reverse order) is: [ 158.482997][ T8284] [ 158.482997][ T8284] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 158.485383][ T8284] __mutex_lock+0x1a4/0x1b10 [ 158.486986][ T8284] nbd_queue_rq+0x428/0x1080 [ 158.488603][ T8284] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 158.490526][ T8284] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 158.492645][ T8284] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 158.494689][ T8284] blk_mq_run_hw_queue+0x23c/0x670 [ 158.496456][ T8284] blk_mq_dispatch_list+0x51d/0x1360 [ 158.498290][ T8284] blk_mq_flush_plug_list+0x130/0x600 [ 158.500147][ T8284] __blk_flush_plug+0x2c4/0x4b0 [ 158.501833][ T8284] __submit_bio+0x584/0x6c0 [ 158.503416][ T8284] submit_bio_noacct_nocheck+0x543/0xbf0 [ 158.505335][ T8284] submit_bio_noacct+0xd18/0x2000 [ 158.507069][ T8284] submit_bh_wbc+0x681/0x890 [ 158.508777][ T8284] block_read_full_folio+0x4c8/0x8e0 [ 158.510677][ T8284] filemap_read_folio+0xfc/0x3b0 [ 158.512418][ T8284] do_read_cache_folio+0x2d7/0x6b0 [ 158.514221][ T8284] read_part_sector+0xd1/0x370 [ 158.515917][ T8284] adfspart_check_ICS+0x91/0x7d0 [ 158.517657][ T8284] bdev_disk_changed+0x7a3/0x1250 [ 158.519448][ T8284] blkdev_get_whole+0x187/0x290 [ 158.521165][ T8284] bdev_open+0x2c7/0xe40 [ 158.522688][ T8284] blkdev_open+0x34e/0x4f0 [ 158.524168][ T8284] do_dentry_open+0x6d8/0x1660 [ 158.525829][ T8284] vfs_open+0x82/0x3f0 [ 158.527311][ T8284] path_openat+0x208c/0x31a0 [ 158.528975][ T8284] do_file_open+0x20e/0x430 [ 158.530585][ T8284] do_sys_openat2+0x10d/0x1e0 [ 158.532239][ T8284] __x64_sys_openat+0x12d/0x210 [ 158.533959][ T8284] do_syscall_64+0x10b/0xf80 [ 158.535585][ T8284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.537611][ T8284] [ 158.537611][ T8284] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 158.539903][ T8284] __mutex_lock+0x1a4/0x1b10 [ 158.541540][ T8284] nbd_queue_rq+0xba/0x1080 [ 158.543145][ T8284] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 158.545070][ T8284] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 158.547215][ T8284] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 158.549285][ T8284] blk_mq_run_hw_queue+0x23c/0x670 [ 158.551073][ T8284] blk_mq_dispatch_list+0x51d/0x1360 [ 158.552922][ T8284] blk_mq_flush_plug_list+0x130/0x600 [ 158.554791][ T8284] __blk_flush_plug+0x2c4/0x4b0 [ 158.556487][ T8284] __submit_bio+0x584/0x6c0 [ 158.558091][ T8284] submit_bio_noacct_nocheck+0x543/0xbf0 [ 158.559967][ T8284] submit_bio_noacct+0xd18/0x2000 [ 158.561720][ T8284] submit_bh_wbc+0x681/0x890 [ 158.563344][ T8284] block_read_full_folio+0x4c8/0x8e0 [ 158.565187][ T8284] filemap_read_folio+0xfc/0x3b0 [ 158.566919][ T8284] do_read_cache_folio+0x2d7/0x6b0 [ 158.568732][ T8284] read_part_sector+0xd1/0x370 [ 158.570435][ T8284] adfspart_check_ICS+0x91/0x7d0 [ 158.572171][ T8284] bdev_disk_changed+0x7a3/0x1250 [ 158.573939][ T8284] blkdev_get_whole+0x187/0x290 [ 158.575602][ T8284] bdev_open+0x2c7/0xe40 [ 158.577151][ T8284] blkdev_open+0x34e/0x4f0 [ 158.578732][ T8284] do_dentry_open+0x6d8/0x1660 [ 158.580414][ T8284] vfs_open+0x82/0x3f0 [ 158.581914][ T8284] path_openat+0x208c/0x31a0 [ 158.583537][ T8284] do_file_open+0x20e/0x430 [ 158.585148][ T8284] do_sys_openat2+0x10d/0x1e0 [ 158.586758][ T8284] __x64_sys_openat+0x12d/0x210 [ 158.588425][ T8284] do_syscall_64+0x10b/0xf80 [ 158.590048][ T8284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.592067][ T8284] [ 158.592067][ T8284] -> #4 (set->srcu){.+.+}-{0:0}: [ 158.594282][ T8284] __synchronize_srcu+0xa2/0x300 [ 158.596003][ T8284] blk_mq_quiesce_queue+0x149/0x1c0 [ 158.597811][ T8284] elevator_switch+0x17b/0x7e0 [ 158.599525][ T8284] elevator_change+0x352/0x530 [ 158.601232][ T8284] elevator_set_default+0x29e/0x360 [ 158.603040][ T8284] blk_register_queue+0x48e/0x630 [ 158.604809][ T8284] __add_disk+0x73f/0xe40 [ 158.606360][ T8284] add_disk_fwnode+0x118/0x5c0 [ 158.608039][ T8284] nbd_dev_add+0x77a/0xb10 [ 158.609657][ T8284] nbd_init+0x291/0x2b0 [ 158.611173][ T8284] do_one_initcall+0x121/0x750 [ 158.612853][ T8284] kernel_init_freeable+0x6ea/0x7b0 [ 158.614656][ T8284] kernel_init+0x1f/0x1e0 [ 158.616218][ T8284] ret_from_fork+0x72b/0xd50 [ 158.617846][ T8284] ret_from_fork_asm+0x1a/0x30 [ 158.619547][ T8284] [ 158.619547][ T8284] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 158.622003][ T8284] __mutex_lock+0x1a4/0x1b10 [ 158.623627][ T8284] elevator_change+0x1bc/0x530 [ 158.625319][ T8284] elevator_set_none+0x92/0xf0 [ 158.626998][ T8284] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 158.629009][ T8284] nbd_start_device+0x1a6/0xbd0 [ 158.630718][ T8284] nbd_genl_connect+0xff2/0x1a40 [ 158.632445][ T8284] genl_family_rcv_msg_doit+0x214/0x300 [ 158.634378][ T8284] genl_rcv_msg+0x560/0x800 [ 158.635981][ T8284] netlink_rcv_skb+0x159/0x420 [ 158.637662][ T8284] genl_rcv+0x28/0x40 [ 158.639094][ T8284] netlink_unicast+0x585/0x850 [ 158.640755][ T8284] netlink_sendmsg+0x8b0/0xda0 [ 158.642415][ T8284] ____sys_sendmsg+0x9e1/0xb70 [ 158.644063][ T8284] ___sys_sendmsg+0x190/0x1e0 [ 158.645707][ T8284] __sys_sendmsg+0x170/0x220 [ 158.647321][ T8284] __do_fast_syscall_32+0xe7/0x950 [ 158.649126][ T8284] do_fast_syscall_32+0x32/0x70 [ 158.650817][ T8284] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.652957][ T8284] [ 158.652957][ T8284] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 158.655611][ T8284] blk_alloc_queue+0x610/0x790 [ 158.657269][ T8284] blk_mq_alloc_queue+0x174/0x290 [ 158.659025][ T8284] __blk_mq_alloc_disk+0x29/0x120 [ 158.660785][ T8284] nbd_dev_add+0x492/0xb10 [ 158.662360][ T8284] nbd_init+0x291/0x2b0 [ 158.663859][ T8284] do_one_initcall+0x121/0x750 [ 158.665545][ T8284] kernel_init_freeable+0x6ea/0x7b0 [ 158.667382][ T8284] kernel_init+0x1f/0x1e0 [ 158.668972][ T8284] ret_from_fork+0x72b/0xd50 [ 158.670602][ T8284] ret_from_fork_asm+0x1a/0x30 [ 158.672276][ T8284] [ 158.672276][ T8284] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 158.674345][ T8284] fs_reclaim_acquire+0xc4/0x100 [ 158.676058][ T8284] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 158.678066][ T8284] __alloc_skb+0x140/0x710 [ 158.679644][ T8284] tcp_stream_alloc_skb+0x34/0x660 [ 158.681429][ T8284] tcp_sendmsg_locked+0x13cd/0x4500 [ 158.683230][ T8284] tcp_sendmsg+0x2e/0x50 [ 158.684758][ T8284] inet_sendmsg+0xb9/0x140 [ 158.686337][ T8284] sock_write_iter+0x4ea/0x5a0 [ 158.688018][ T8284] vfs_write+0x6ac/0x1070 [ 158.689586][ T8284] ksys_write+0x1f8/0x250 [ 158.691132][ T8284] do_syscall_64+0x10b/0xf80 [ 158.692757][ T8284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.694770][ T8284] [ 158.694770][ T8284] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 158.697240][ T8284] __lock_acquire+0x14b8/0x2630 [ 158.698888][ T8284] lock_acquire+0x1b1/0x370 [ 158.700461][ T8284] lock_sock_nested+0x41/0xf0 [ 158.702120][ T8284] inet_shutdown+0x67/0x410 [ 158.703716][ T8284] nbd_mark_nsock_dead+0xae/0x5c0 [ 158.705485][ T8284] sock_shutdown+0x16b/0x200 [ 158.707115][ T8284] nbd_ioctl+0x25e/0xd30 [ 158.708672][ T8284] compat_blkdev_ioctl+0x682/0x7b0 [ 158.710465][ T8284] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 158.712361][ T8284] __do_fast_syscall_32+0xe7/0x950 [ 158.714149][ T8284] do_fast_syscall_32+0x32/0x70 [ 158.715848][ T8284] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.718006][ T8284] [ 158.718006][ T8284] other info that might help us debug this: [ 158.718006][ T8284] [ 158.721160][ T8284] Chain exists of: [ 158.721160][ T8284] sk_lock-AF_INET --> &cmd->lock --> &nsock->tx_lock [ 158.721160][ T8284] [ 158.725011][ T8284] Possible unsafe locking scenario: [ 158.725011][ T8284] [ 158.727319][ T8284] CPU0 CPU1 [ 158.729035][ T8284] ---- ---- [ 158.730750][ T8284] lock(&nsock->tx_lock); [ 158.732161][ T8284] lock(&cmd->lock); [ 158.734198][ T8284] lock(&nsock->tx_lock); [ 158.736362][ T8284] lock(sk_lock-AF_INET); [ 158.737778][ T8284] [ 158.737778][ T8284] *** DEADLOCK *** [ 158.737778][ T8284] [ 158.740318][ T8284] 2 locks held by syz.4.624/8284: [ 158.741883][ T8284] #0: ffff888027c30a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x155/0xd30 [ 158.744756][ T8284] #1: ffff888013dd2e68 (&nsock->tx_lock){+.+.}-{4:4}, at: sock_shutdown+0x15e/0x200 [ 158.747707][ T8284] [ 158.747707][ T8284] stack backtrace: [ 158.749594][ T8284] CPU: 2 UID: 0 PID: 8284 Comm: syz.4.624 Not tainted syzkaller #0 PREEMPT(full) [ 158.749608][ T8284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.749614][ T8284] Call Trace: [ 158.749619][ T8284] [ 158.749624][ T8284] dump_stack_lvl+0x100/0x190 [ 158.749637][ T8284] print_circular_bug.cold+0x178/0x1c7 [ 158.749654][ T8284] check_noncircular+0x146/0x160 [ 158.749672][ T8284] __lock_acquire+0x14b8/0x2630 [ 158.749682][ T8284] ? __mutex_lock+0x26d/0x1b10 [ 158.749696][ T8284] lock_acquire+0x1b1/0x370 [ 158.749705][ T8284] ? inet_shutdown+0x67/0x410 [ 158.749721][ T8284] lock_sock_nested+0x41/0xf0 [ 158.749735][ T8284] ? inet_shutdown+0x67/0x410 [ 158.749747][ T8284] inet_shutdown+0x67/0x410 [ 158.749759][ T8284] nbd_mark_nsock_dead+0xae/0x5c0 [ 158.749776][ T8284] sock_shutdown+0x16b/0x200 [ 158.749802][ T8284] nbd_ioctl+0x25e/0xd30 [ 158.749813][ T8284] ? __pfx_nbd_ioctl+0x10/0x10 [ 158.749825][ T8284] ? find_held_lock+0x2b/0x80 [ 158.749839][ T8284] ? __pfx_nbd_ioctl+0x10/0x10 [ 158.749849][ T8284] compat_blkdev_ioctl+0x682/0x7b0 [ 158.749861][ T8284] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 158.749877][ T8284] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 158.749888][ T8284] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 158.749899][ T8284] __do_fast_syscall_32+0xe7/0x950 [ 158.749913][ T8284] do_fast_syscall_32+0x32/0x70 [ 158.749926][ T8284] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.749938][ T8284] RIP: 0023:0xf707efcc [ 158.749947][ T8284] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 158.749958][ T8284] RSP: 002b:00000000f544c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 158.749968][ T8284] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000000ab04 [ 158.749975][ T8284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.749981][ T8284] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.749986][ T8284] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 158.749992][ T8284] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.750002][ T8284] [ 158.832359][ T8284] block nbd4: shutting down sockets [ 158.915722][ T8291] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 167.522480][ T70] veth0_to_bond: left promiscuous mode