last executing test programs: 5m2.408297868s ago: executing program 32 (id=1129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newqdisc={0xfffffffffffffffc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xe, 0xffff}, {0xc}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000011) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@delqdisc={0x0, 0x25, 0x800, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfffd}, {0x0, 0x6}, {0xfff4, 0x3}}, [@TCA_EGRESS_BLOCK={0x0, 0xe, 0x54}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0xfffffff2}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x22e}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x2d}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 4m56.122167089s ago: executing program 33 (id=1038): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x2e, 0x21, 0x0, 0xfffffffc, {0x9}}, 0x14}}, 0x4048010) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_emit_ethernet(0x123, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0x1, [0x383, 0xdf0, 0x39f, 0x7b5]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r5 = inotify_init1(0x80000) inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x10000000) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e24, 0x400, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}}, 0x6, 0xc9ca}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000640)={r7, @in6={{0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, 0x9, 0x4fad, 0x2, 0x3ff, 0x0, 0x26b0b581, 0x99}, &(0x7f0000000280)=0x9c) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000640)={r7, @in6={{0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, 0x9, 0x4fad, 0x2, 0x3ff, 0x0, 0x26b0b581, 0x99}, &(0x7f0000000280)=0x9c) inotify_add_watch(r5, &(0x7f00000002c0)='./file0\x00', 0xa4000140) ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) 4m46.404706267s ago: executing program 0 (id=1352): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@deltaction={0x24, 0x18, 0x1, 0x10000004, 0x25dfdbff, {0xa}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x24}}, 0x20004000) flock(r6, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002480)=@newtfilter={0x6b10, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x6ae4, 0x2, [@TCA_BPF_POLICE={0x54, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x3, 0x4, 0x9, 0x8, {0x8, 0x2, 0x10, 0x8, 0xff, 0x7fffffff}, {0x9, 0x1, 0x7fff, 0x9, 0x4, 0x200}, 0x6, 0x6, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x20000000000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ff}]}, @TCA_BPF_ACT={0x6a78, 0x1, [@m_tunnel_key={0x104, 0xd, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x34}}]}, {0x86, 0x6, "5fe47bd4d56098c2a9da36f63424e92ff828f0d3d0f53b2ee7900acb8c885af69d5cde4057f90c0c67cfcc31b56dd440520a5c3a47b9a710b9962be0945a6036be2c46aed778b72c58f2ae4520537ec24c5de17d76b424e26f176c7567005519d6c55cbf9127874730a693e37579d5aafd6e83930ba2430be22ad2f736ac2864b4d5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x1040, 0x11, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xb746}, @TCA_MPLS_LABEL={0x8, 0x5, 0x94cc9}]}, {0x1004, 0x6, "8e6916a4e2cd1d74be0c181cee93bd4ac4259446d0d6f3739512f510b1e79927066491fd0980a3f1ba2670486a067f5a43a7a487e3012a36a870a65029bf80f771d875c5a437ac09410fcb0279f5b6fc3f3be2bdbc214de0faa4d9334ec7488a058900a898c1f0b4ca656f9f880f9c935606dbef4c5ba6bfce581490a14a761bd52e1373bec26222b7dfe5011a5543f0caba7e8387cd2dfe0b51656426783d91c404ae27490c0f8d2cc0faad06b918ae79f69c427d300ceecb4831ba8f862589dd0811b3f32048731f96c8d34a883f4f032e88e7de78971eb748d247b3b9a9198d600e695a4df7472398e1071ea87db95a3b1e11dc91d9e019be4ac9497cbf7f7d1054cd075f65b1be77a827bd99f7e11fe1f100f3dfe3f3c3f83761461a37099cd3ffe9624466d398fc812d4c503c8fbaa77c2977bf326f70e3a20d84b01820f571585d150be8c8872aeeed16b81e01401da72634f07f07be271a4bdb9da594329c56a026cebaf65161a92db4d37606fe8ccf828b995407fff4b079f03eba8595c15f84dc29b09ad95040c3d629c2f87ab9a9e8491e5a24cc9215dc353f3e72e9f2ab52547c085ce59c5b31f0aed2342e21e3ef7e43181bf4fb8d2b62748e59018453d78a36d71da76273114fe9e75b470a4fbf8a6cd874cc11450df39e07019c610f065e939d798ecfb547afb40ec2ef52bccefb82d53e77c92cc47d987e28b6c8bfb11d7ed5e5c243904200f5a4233453364590e29aaf99e724ffb5ebfd489cf4c6f93a05d3cd4301f52d791b2775610a00dca80bfb207f8bfb5c8b48613ab381522b2e3eaad831d273d1d4a58f998d654fb24965fc6faf10ac18b38a33ad6b56c28af452643e13d74309df99e76abac6e326771a41500947725a154efb7d6b8f8ad8022f8a0f2d6f3c1a807099fe2c3a484385075f580a80a16a83572034d1f07f4d20f6289c3497958fd2ec3b7daecbb06774a15c0301bfcfaaf83939d8bd2fca7bb06ff8e280649a163bff07e55fdd749f3231f6a675bcf3155cc505bc895b7e0d82ec8f9054b1135f62368ed1bb1be497d38c91a8caf333dbc0ec45d3c79e7906da0a0f01ff7277337e9646f71e530b3ce2296da02df4fe20c9257e812b46062a65d956ba4561bb6e88f43a017624dca572d1248a161648a9e62335b4d670735b299f521fb9609319050802bc75d1932fbd071fc3967c9cbc4d93250da9e1325712ae17bae7583769b2aa6b528f5c57b569d74527374b38892416a2843db9b0466bddedda4d8b74bfaa51ddb524e7b90297359ffbf3d07dc0cb98918f6f85975e4f6ecfe683f86db722a25860527917b43da0fde7c34fe2702c77806d1a046cd7362f97ae65aaec847e6e4037648cb155150576f7d731de8b55f6849da6bf6150c8e3cbd0f7b580c93e1ebe80763243c72cdc115b22698d499fa1a978c4676e3813dbe877442624248a932073f4ab8df849f22604fc8d9edaa70def477c712b9573ba461403a1054d0ab081c58c7a0591973d4e23cc8b6fae0c8ff5d662862a3b380f4ab259cc5df85df5e52506933e6fddffdecae9e52511b18330b9853583b0ae92ede20727be9db1f1b65a60e026c33aac5eb0a20b57ed54aff20747565692bb3ca589292c79b2a54b8c048e3e96585167fe6d6648e7ff080c8b90377713e740420dd0cd66a252665b311ef4bf38e1c44bde7ff72f112041554fc4b714030b06a2de11be0758c10914e13b34fe2be4f1787fa1f6d70501d279ebabc7ef65b4849f15a467134c5efbeef4b1d7ef03e757283cd550981f03215e528f70f58063bd557945f2b7f86035da1e574474cee2da70dfe93614d11d5dc46bdea3bf263d6841d5a76897a4dad9aff24f25f0115ec66960bbd1f6b661130f6c0a210a88887d26cea2d4e0ead2e59b60b0f2471dfec7cab815a58da71ee4a2c9adc38099197aed00dd3c6019a4a7f87b4f0c907265d91b331ad6064787c23073e2a0670b8c9d9166a4125d7adfe18fb0692c24fcc963e0c7bb9f72d55fd5dbff63750299bff8a386b7cdf962ed080ac80162caa7d1ee5f06a34c6a23efe58c68dbff26164a90db06c5d72f99c3caada8df200fca6ce34cca155df6907dd8ac981ff4e44497c2df52cc2c6b97b053af2f109380f1fde9249a0875e4d418f78c7d63376f4e5256270ec0cdbd5042a579bfa40888a9be03bb3c3c95d52825d7b648395cb04b0512721f449423984f8b9dfcd06a55153c43df39acd94622f9d05d4c990e8741d941913a587151c0f480d18fe33d64d2b5658f81f00b622a89738f142518608031daaf41fc3ccab132b10516be585079e30ca1f1fd6bdb3ac0b19640f7c03826e520203036bbdb53523844f6ff5da6f8a2caebb4332f810c876fd66613f0575f35d8ae922087fd6a3355bb0006f6b47177bfd66d6f9df30a147039c34d36e57a5563dc410eca0b07d5e19ce6c9bb25ea51f6ee8ca8d12f1cee72bdb5ef3677a185a988d5f342d6a936c864b1275d8a3c95ffc04cb815146a9fbcdf406687a667323ff6f4686e17363b7329aa71226f50129e35a606efdede9297f43d76b90b94af61e2cdfa43ed973239b9f17d3788953d7d9113151b99256bc97749c3c0cf099adb5884a0c025a51ee7c40f2489116e99017e678af19154e153d36100d8bec8900aded574a804c35f6491e7589ae7425aa2b99978100de70ff71de3b97d7f8ee225e2485a940fb51470a4e565e8d296ed4f81dc012d723d6762a54f1709e62e76c8988e89131a53f122d087585b0e5526ff90c338ae2f1b4fd51e68c48790cdec64bfb4aad0b698b10cec88d0dea94b547196f618141293ca05557f8730c7b187e25d929e054c0ffd7e2327e113324004657044756618367e11c8c72629f64a353885771ab2770173aa84e0a2302e775691469a41d291071cc7db04aa9839b9e0eda4fb7d3589a2a93f40d45e85837877fb2bf82af1d46a70ded2d9e6617b20571dcf5e4080b34a791af888dc43b1ccf3be7660f985943d9caa65274693d764c5c1103e354841d3f95b12786989827ccc4b471a6a4ad0299b16adcb4409e6ec55ccc2fd2e9ca95d73adf3ee4e0e92bbd2c15e8f21a1b6088572bd3ef3ec2aabd87f89d94d53ed67be39f2888c7cdc9b93054a8899ec3da4c68137f59fb8dc3f2fd6418d00025f62cd54ebddc1140073d98d56bd20860a7749474ce44908048e6b74a1cdb2f46864cb0efb54dc2d28697b729791c22011d37ed4e5371739736719b2f891cc72d04b8b3a12cfbeda9b6d0a0ca6f5150ebc8b72ac6dd21787ab84db32d355644cda66e9b9aea4c0cf828ab0cf794dccad51781566f52f0ad6260821ffd11f3b009a0b33d490f936719e111f1769887354eb5306585a5e0f83abe30ceab2dfcf11bccfb1c555d74ab6e4ea02fa67162e1426d46bee998931751d32deaf19425e58e2026254082a02cc9e2369e7e0d719c8c21426ebf6b7ae1e172c962b46fe4f4746d5f04981e1c8055bc3ad56e614cbdfa7cfba919af2604b456ca671dbbe309eaf9d0858688f9086fb36e2e870ba9d0dea6e59eb38a45a40a3e399bcd5b0512f3b1ee7ee2db2cc1b9ff1deec51a3fb2531cfc6705d135ec35c9e31140020a4dc7303f64e5b3e93268f9967a976303ffb8e1f21aaa3d6564ea888d2c9c051c5cba66e975e343eb0c0d2fff57229eb6976e0a46c3e3835d587810a6d0e62185318bc4ef7388ed7433c172b6e924346855336191dfb9cb6232dbcd349a48f843aeb565ffd8b38fd8e3efb01755384f4b26118d8978ccaff6f8370c4d7a7f5e54cb7b6cf14abc2f80eb4ed942e09a7433333c352e1352def8c7eecf54138452058cc123b2f1e73d3fb60eb0bea0d8c3f83e485e37f5571c8759f692084be941c5c0db3a02acd09037be3c811b8ed8c460900c74ab4b623ad9876725003a4e69e56476b5d1b4dd986b2ecfb75a4f74bf7520838c090a52d219ff7c7777067c69ff6e98cef08b8f8ea903b5ef0a47b9c9a0de2803a852d44faf76f66be70a83676339e5e5c740c8864eb57c282152886e0d7d043f0b6e4427e47b44f3e74973fdbdfd2dbabb268921562fdf0fd7c049f243865eb3a22dc70a610b6a430de66230fb9569fc2532fcb5a91be9bc7dff09aa492f776c90b6a5d508439c3d63349a8e8408cc8019145318bcff20e209351f4c2929d30cb3609dbcdce35bd0f93ff29e244cd3ef727712e64612a8f0c0dabc1b975441f19938a7d8356a644f8f59dec5b513fb336a9d52cbb7e598a6c1becd5c23083e11e8fc3573b789815a6c0d12feb9eeb032a9fbce12679379adb37e37cff67195c9149120488a4ca1992a1eaf69a3f99dd280a1286f526fabb74ce567c917e9db84781a2ab5935d5a70562803acd39bc7f8992eebcd481f2a648a7e063d4841d0db747acb0e2a58f3a5b3eebd9d81012ef2bdfe3970f99e6a52d2bc53a3b0011a1a11c107cf1d8bf9c22117d254400ab69e2897e1a03cc9f500bd95497620b4875c06df60621a939466d90a0415f7039650e2740a90e115739b8495c35125f2030353fca7a061251fc7c2ff56947db4eec2704c5e01e0ae5602ca1d746ae367ae65bf3c42851921efed9b09c2ffca4cba31da4cc870bc251a8ba4b79919ebd6a184ac373d49c3fee1d611311d1217ae753f5ca52bb66f0662d43b06815631e623ee55fcdac6da4662cdb147d04d4cc79548bb0bce5ffe98fd503a02d2a7a7fc47d5d7e7bdafc95901b3f326372d89e313ee3158ba6273dfde660f3eec643ce00073340b69b554bf343a9ec8d7fba1cef7b2905213363cfa105df5389e32ce148d380d00c043606605e1695f16430248d01aa5a15fa0c2c37af419eae18322680e6ee0fcd791173325ec0b410cbca0169a4eaccf55bf2796bbb5c9617811930b32a1bf36abef0c26096ad4f893815e43acce39dd2e0dd04034e7980cf1aa1acc6890e04756bf0d5ae153f93c4e60005d53d3a8bbe1fb9102de5ddc94b41c2f31b95ae87021d0c458528db04f461d22b856baa8ff4fea48e4d0fb1b307d364beabb38afea51f8a9bad75c043d94a59315c5966568e320e9833723a86d6377919eb93e7152d403ba62e87caa18d897cba32fb2632ab3758551ffc362c0725a35c8050cea76cc61fc052a3a73123d9642fd12ba7f021dc158ce5cf7b8d688ce6d37881c43c09aad72de834a6ca492422c5bf71dd9257012b31c1d42c6d1182e3ceddd4824d066f2fe1d43d11c1d87b51efa50a79dccca2fa04197a05a018e550e80f21ec967dd80081b4c7fa4770f0912b1fde09ff8a7957d7688ec17389c4392686dbe9f419c4b89ca02560f6a6141a4d15a9128d1f78379025baef932a27f2487a95ab3192e0c8f2579b767e0baab1fc5929bcef31102e647f3d71383906c0f35cbaab750afb11f58bca3fa71d4faeb3aad2b74fdfc4296ffcda16978a8881d418b84c2a7ee0c42d960c23d6b6d2dc45bc0837b49d39028d4ee8d343322c46e6d37dbe9a0747764773810f48fe28a08aaf751a2063d2b685ed9653104686f8c66db68b749d8f817bb9c1e4f9913d5860270332812109946702ecd4d3f5c4a4e6421cef596d5397bb4c01078fdfea21140dc0e90df32eac2cc8343000871b4952f7d94a2f7821edee48c3679220d2013f6438260dc9e1a7a186931a842a9cd1daff9fae1503c180b8357e23b2d8bae8c6283036feee25f1f04ce2c30e0ed93a9b3404b8e00631eb6aeee56f005ff5295cec6462a08c845934aeb4328eff24da6526751c27ad21d28f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_pedit={0x2b88, 0x16, 0x0, 0x0, {{0xa}, {0x2b54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x81, 0x10000, 0x20000000, 0xb, 0x3}, 0x7f, 0x8, [{0x0, 0x9, 0xcc, 0x1, 0xdd, 0xf}, {0x0, 0x7ac, 0x3, 0x4, 0x2, 0x8}, {0x82ac, 0x7, 0xf, 0x5, 0x9, 0xd1a}, {0x0, 0xe47f, 0xfff8, 0xf9e, 0xfff, 0x8001}]}, [{0x3d8, 0x773f, 0x80, 0x4, 0x778, 0x3}, {0x4, 0x7, 0xa2, 0x7fffffff, 0x70dc1031, 0x2}, {0x0, 0x6, 0x5, 0x3, 0xff11, 0x4}, {0x9, 0x0, 0x78, 0x80000001, 0x81, 0x10}, {0x7, 0x0, 0x10001, 0x8, 0x9, 0x1}, {0x40000000, 0x5, 0x6, 0x2, 0x4, 0xfb4}, {0x1, 0x7f, 0x7, 0xfff, 0x7f}, {0x4, 0x1, 0x3, 0xdce, 0x7, 0x2}, {0x1, 0x5, 0x40, 0x9, 0x7fff, 0x9}, {0x3178, 0x6000, 0xae5, 0xd21, 0x3ff, 0x8}, {0x7, 0xf33, 0x2, 0x10001, 0x4, 0x2}, {0x10000, 0x3, 0x1, 0x4, 0x6, 0xffffffff}, {0x3, 0x3, 0xe896, 0x6, 0x8001, 0x53}, {0x2, 0x1179, 0x7, 0x80000001, 0x7fffffff, 0x3}, {0x7fff, 0x7ff, 0x8, 0xffff47fa, 0x856c, 0x800}, {0x3, 0x7ff, 0x170, 0x5, 0x1c14, 0x1}, {0x3ff, 0xbaf, 0x9, 0x3, 0x20b, 0x10000}, {0x40, 0x57d2, 0x5, 0x80000000, 0x5, 0x8}, {0x0, 0x1, 0xc5ec, 0xfffffff9, 0xe, 0x7f}, {0x5, 0x8, 0x6, 0x244, 0x7f, 0x7}, {0x5, 0x800000, 0x8000, 0x10001, 0x9, 0x7f}, {0x5, 0xe00000, 0x1, 0x9, 0x0, 0x69b}, {0x413fc712, 0x5, 0x7fffffff, 0x7, 0x8, 0x7}, {0x2, 0x7ff, 0x7, 0x8000, 0x2, 0x3}, {0x2, 0x6dc453a9, 0xcc08, 0xfffffffd, 0xfffffffd, 0xea93}, {0x9, 0x4, 0xffffffff, 0x3, 0x8, 0x1185}, {0x5, 0x0, 0x0, 0xfffffffc, 0x1, 0x1d}, {0x2, 0x2, 0x2e4, 0x6, 0x2c52, 0x3}, {0x2, 0x7, 0x8, 0x9, 0x6, 0x7}, {0x5, 0x7ff, 0x8, 0x6, 0xa}, {0x2, 0x9, 0xf, 0x0, 0x3, 0x6}, {0x3, 0x2227, 0x8, 0x7, 0x800, 0x3}, {0x10000, 0x3, 0x1e, 0x7, 0xb, 0x400}, {0x2, 0x9, 0x80000000, 0x3, 0xb04, 0x8938}, {0x4, 0xa, 0xa, 0x0, 0xec3, 0x4}, {0x1, 0x18a8, 0x3, 0x6, 0x8, 0x3}, {0x7, 0x7, 0x0, 0x5da, 0x5, 0x8}, {0x0, 0x3f, 0xfffff000, 0x40, 0x8, 0x9}, {0xd, 0x1, 0x2, 0x3, 0x800, 0x2}, {0x7, 0x86, 0x5, 0x7, 0xe, 0x10001}, {0x6, 0x8000, 0x4, 0xb4, 0x2, 0xfffffffc}, {0x81, 0x7fffffff, 0x8, 0x1, 0x4, 0xfffffff3}, {0x1, 0x4, 0x85e, 0x9, 0xd, 0x7}, {0x1, 0x8, 0x1, 0xc, 0xcf, 0x3}, {0xfff80000, 0xfffffffb, 0x5, 0x10000, 0x10, 0x8}, {0xfd0, 0x1, 0x7, 0x3ff, 0x4}, {0xa5a7, 0x5, 0x4, 0x6, 0x33b, 0x8}, {0x7, 0x200, 0x8, 0x8, 0x40, 0x4}, {0x1, 0x7, 0x401, 0xf774, 0x9, 0x65ca}, {0x1, 0x6, 0x5, 0xcd, 0xa9ea, 0x4}, {0x7, 0xf, 0x9, 0xffff0000, 0x6, 0x3086}, {0x4, 0x8, 0x7, 0xc, 0x6, 0x6}, {0x7f, 0x920, 0x4, 0xffff, 0x3, 0x6}, {0xff, 0x7, 0x8, 0xf48, 0x2, 0x7}, {0x8, 0x81, 0x5, 0x10d4, 0x1, 0x4}, {0x2, 0x1e, 0x8, 0x6, 0x1891, 0x2}, {0xf7e2, 0x5, 0xa, 0x1, 0x10000, 0x17f}, {0x7, 0x5, 0x0, 0xffffffff, 0x81, 0x780}, {0x6, 0x3, 0x2800000, 0x3, 0x8, 0x5}, {0x0, 0x8, 0x3d6c339a, 0x81, 0x7ff, 0x69}, {0x4, 0x1ff, 0x3, 0x100, 0x3, 0x9}, {0x7, 0x0, 0xa, 0x5, 0x718, 0x5}, {0x2d58, 0x3, 0x80000001, 0x9, 0xf054, 0x1ff}, {0x44, 0x8, 0x9, 0xc9ba, 0x4, 0x6}, {0x29, 0x0, 0x1ff, 0x1, 0x8, 0x6}, {0x401, 0xca03, 0x4, 0x0, 0x1ed, 0x4}, {0x0, 0x9, 0x9, 0x8, 0xffff8000, 0x8}, {0x3, 0xffffffff, 0xffffffff, 0xe, 0x3, 0x726}, {0x80000001, 0x7f, 0x3, 0x6, 0x0, 0x3}, {0x6, 0x401, 0x5, 0x1ff, 0x3, 0xc952}, {0x2, 0x4, 0xee, 0x1, 0x2, 0x8}, {0x8000, 0x3, 0xf9b, 0x3, 0x1, 0x6123}, {0x0, 0x9648, 0xffffffeb, 0x80000001, 0x4, 0x5}, {0x8001, 0x2000, 0x40, 0x3, 0x401, 0x8000}, {0x7, 0x7fff, 0x6, 0x2, 0x1821, 0x2}, {0xfffffffb, 0x3, 0x7, 0x6, 0xfffff801, 0x60000}, {0xfffffff7, 0x8, 0x8, 0x9, 0x1, 0x8}, {0x5, 0x8, 0x9, 0x3, 0x35dd, 0x5}, {0xc, 0x2, 0x2, 0x8, 0x5, 0xfffffff1}, {0x1000, 0x8, 0x3, 0x5, 0x10, 0x6}, {0xbb, 0xd3f, 0x7, 0x2, 0x9, 0x2}, {0x101, 0x8, 0xffffff81, 0x9, 0x40, 0xfffffffb}, {0x6, 0x7fff, 0x2, 0xf9b, 0x1800, 0x9}, {0x3, 0x3ff, 0x2e0, 0x9, 0x5, 0x3}, {0x10, 0x3, 0x1, 0x7, 0xab, 0x3}, {0x80000001, 0x1ff, 0x4, 0x3fdb, 0x7, 0x6}, {0xec5, 0x8001, 0x2, 0x2, 0x3}, {0xe, 0x81, 0x2, 0x1, 0x1, 0x5}, {0x7, 0x9, 0xfffffffc, 0x3ff, 0xa473, 0x4}, {0xd, 0x6, 0x3, 0x40, 0xe, 0xf6}, {0x117, 0x4ed, 0x3, 0xfffff391, 0x100, 0x3}, {0xffffb3ec, 0x3c0, 0x528, 0x80000000, 0xfb14, 0x5}, {0x8, 0x8, 0x5, 0x7, 0x1, 0x40}, {0x5, 0xffffffff, 0x1, 0x9, 0xf, 0x6}, {0x7858, 0x1b, 0x57a, 0x2, 0x9, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1000, 0x71cfae1c}, {0x6, 0x7f, 0xff, 0x8, 0x5, 0x2}, {0x5, 0x4, 0x300, 0x9, 0xff, 0xfffffbff}, {0x1, 0x2, 0xffff7fff, 0xffffffff, 0x1, 0x5}, {0x6, 0x8001, 0x4, 0x2, 0x2, 0x6}, {0x6, 0x401, 0x1, 0x1e, 0xff, 0x400}, {0x8000, 0x1, 0x0, 0x1000, 0x7, 0x4}, {0x7, 0x0, 0x7bd, 0x101, 0x1, 0x80000000}, {0xd18, 0x40, 0xbc, 0x3, 0x2, 0x7}, {0x6, 0xf, 0x6, 0x6, 0x2, 0x9}, {0x5, 0x7fffffff, 0xfffffffc, 0x2, 0x3, 0x10001}, {0x5, 0x6, 0x0, 0x4, 0xe, 0xb9d}, {0x2, 0x1, 0x84, 0xfffffffd, 0xffff7af9, 0x1}, {0x200, 0x56, 0x2, 0x6, 0x3, 0x7fff}, {0x80, 0x3, 0x9, 0x100, 0x9, 0x1}, {0xffffffd2, 0x2, 0x8, 0x2c, 0x2, 0x8}, {0x40, 0x96d, 0xf62, 0x10, 0x80000001, 0x5}, {0x0, 0x2, 0x1, 0x3, 0x5, 0x1}, {0x1, 0xb, 0x7, 0xcda, 0xdaab, 0x7}, {0x1ff, 0x3b, 0x5, 0x7ff, 0x400, 0x8f2b}, {0x6, 0x3, 0xbd, 0xfffffe00, 0x4, 0x8001}, {0x10001, 0x6, 0x6, 0x40, 0x4, 0xc}, {0x6, 0x877, 0x0, 0x4, 0x6f2, 0x7}, {0x3, 0x7, 0x10001, 0x200, 0xfd99}, {0xbd23, 0x3, 0x2, 0xffff, 0x1, 0x75c9}, {0x2, 0x2, 0x4fd2, 0x5, 0x6c72812e, 0x1}, {0x7, 0x10, 0x5, 0xcc, 0x8, 0xffff3edc}, {0x4, 0x5, 0xe, 0x5, 0x2df0f32e, 0x933}, {0x7ff, 0x7, 0x4, 0xffff, 0x2, 0x9}, {0x9553, 0x8, 0x10000, 0xfff, 0x2, 0xffff}, {0xd, 0xaa, 0x9, 0x9, 0xffffffff, 0x7}, {0xffffffff, 0x40, 0x7fffffff, 0x4, 0x5, 0x2300}, {0x7f, 0xffffffff, 0x8, 0x3, 0x2, 0x6}], [{0x3, 0x1}, {0x5}, {}, {0x3}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x2}, {0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x1, 0x1}, {0x2}, {0x4}, {0xb3332cd60dc8c194}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x4f14670d4ccb7247, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x3}, {0x9a17f21ecb1ce4fd}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x3}, {}, {}, {0x3}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {}, {0x6}, {0x5}, {0x5, 0x1}, {0x0, 0x6fec2f9dddf1e59a}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x5, 0x2, 0x5, 0x3, 0x3ff}, 0x6f, 0x80, [{0x2, 0xa, 0x3, 0x3, 0xfffffbff, 0x5}, {0x8, 0x3c, 0x0, 0x95c, 0x7fff, 0x1}, {0xffff, 0xe, 0x8, 0x9, 0x9, 0x6}]}, [{0x47, 0x80000000, 0xe, 0x3, 0x5, 0x4}, {0x1, 0x80000001, 0x9, 0x3, 0x2, 0x9}, {0xfffffc8d, 0xf72, 0x6, 0x6, 0xc52, 0x9}, {0xffffffff, 0xffff, 0x1, 0xf, 0xd, 0x2}, {0x4856, 0x8, 0x10001, 0x1, 0xffff, 0x6}, {0x8000, 0x6, 0x8000, 0xfffff283, 0x984d, 0x5}, {0x7fffffff, 0xfffffffe, 0x6, 0x914d, 0x1, 0x433}, {0xfffffffe, 0x80000001, 0x19a0, 0x7, 0x80, 0x2}, {0x8, 0x3, 0x800, 0x1, 0x9, 0xb}, {0xd3b4, 0x8001, 0x10, 0x80000000, 0x3, 0xa}, {0x80, 0x101, 0x1000, 0x5, 0x3, 0x8}, {0xfffffffd, 0x22e, 0x0, 0x3, 0xc6, 0x4}, {0x8, 0x8, 0x100, 0x6, 0xffffffff, 0x6}, {0x9, 0x7, 0x9, 0x400, 0x9, 0x6}, {0x5, 0x0, 0x8, 0x80000001, 0x3c7, 0xae}, {0x101, 0x97d, 0xfe, 0xd95, 0x0, 0x6}, {0x7fffffff, 0x5, 0x6, 0x8000, 0x2, 0x2}, {0xa88, 0x3, 0x1, 0x5, 0x2, 0x6576d29e}, {0x40, 0x5, 0x80, 0x5, 0x308e, 0xd95a}, {0x7, 0x1, 0x3e96, 0x80, 0x6, 0x7}, {0x3, 0x6, 0x0, 0xf45, 0x800, 0x66cf}, {0x0, 0x7, 0x3, 0x0, 0x170f, 0xfffff001}, {0x4, 0x4, 0xd3, 0x8001, 0x1000, 0xffffffff}, {0x1, 0x10, 0x6, 0x18, 0x5, 0x4}, {0x5, 0x0, 0x5, 0x2, 0x1, 0xfffffffe}, {0x7, 0xfffffff8, 0x95, 0xb, 0x7}, {0x9, 0x4, 0x6, 0x6, 0x9, 0x9}, {0x6, 0x800, 0x4, 0x101, 0x8, 0x2}, {0x2, 0x1, 0x2, 0x7, 0xfffffffa, 0xfffffffc}, {0xd, 0x40, 0xffffee38, 0x0, 0x4, 0x8}, {0x7fffffff, 0x8000, 0x4, 0x8557, 0x6, 0x5}, {0x5eb, 0xd, 0x8, 0x2, 0x6, 0xf}, {0x6, 0x200, 0x3, 0x7, 0x4, 0x2}, {0x44727bda, 0x5, 0xffffffff, 0x9, 0x6, 0x2}, {0xc, 0xfffffffe, 0xbee, 0x7, 0x1, 0x5}, {0x1000, 0x3ff, 0x0, 0x401, 0x5, 0x5}, {0xf5f, 0x8, 0x2, 0xfffffff9, 0xf8, 0x6}, {0x7c59, 0x3, 0x37cd3037, 0xfffffffa, 0x4, 0x7}, {0x3, 0x1, 0x53a4, 0xe3, 0x4, 0x5}, {0x5, 0x0, 0x9bd, 0x1ff, 0x1, 0x6}, {0x4, 0xfffffe01, 0x7ff, 0x2, 0x1, 0x6}, {0x4, 0xfffffffe, 0x3, 0x1, 0xf, 0xc4a7}, {0x4000, 0x5b, 0x5551, 0x7, 0x9, 0x4f6}, {0x1, 0x2, 0x3, 0x3, 0x101}, {0x1, 0x7, 0x8000, 0x8, 0x2, 0x6}, {0x4, 0xffff12af, 0x4, 0x8, 0x1, 0x8}, {0x4, 0x93, 0xfffffff9, 0xa, 0x0, 0x6}, {0x4, 0x0, 0x8, 0x2, 0x1000, 0x7}, {0x80000001, 0x1, 0x5, 0xd88b, 0x9, 0x3}, {0xfffffffe, 0x1, 0x0, 0x6fa, 0x2, 0xfffffffc}, {0x8001, 0x7, 0xad, 0xffffff80, 0xfffffffc, 0x4}, {0x8, 0x8, 0xfffff000, 0x81, 0x3, 0xec8}, {0x3, 0x5, 0x7, 0x0, 0x401, 0x77d}, {0xff, 0x9, 0x76, 0xe44b, 0x125, 0xf95c}, {0x562a9366, 0x7, 0x62, 0x2c70, 0x1, 0x200}, {0x200, 0x4, 0x42ac, 0x1, 0x79, 0xc}, {0x2, 0x6, 0xbb000000, 0x3, 0x4, 0x1}, {0x9, 0x9, 0x9, 0x8c390, 0x8, 0x5}, {0x8, 0x0, 0x5, 0x8, 0xc, 0x6}, {0x7fff, 0x5da, 0x9, 0x5, 0x800, 0x4}, {0x6, 0x4, 0x5, 0x1, 0x59e, 0x10}, {0x40000, 0x99fd, 0x9be8, 0x3, 0x6, 0x80000000}, {0x5, 0x1, 0x3, 0x6, 0x72a0, 0x7}, {0x4, 0x3ff, 0xb24, 0x24000000, 0x7, 0x5}, {0xffff, 0x2, 0x9, 0x8, 0x5, 0x3}, {0x40, 0x2, 0x4, 0x4, 0x7fff, 0x8}, {0x8, 0xffff0001, 0x7, 0x91, 0x4, 0xffffffff}, {0x10000, 0x81, 0x3, 0x7, 0x5, 0x3}, {0x8, 0x9, 0x3, 0x8001, 0x7ff, 0x81}, {0x7, 0xe, 0x6, 0x0, 0x1, 0x2}, {0x1ff, 0x6, 0x3, 0xa, 0x6, 0x7f}, {0x6, 0x58a, 0x3, 0x9, 0x1}, {0x0, 0x5, 0x8a68, 0x101, 0x800, 0x5}, {0x80000000, 0xfffffffc, 0x6, 0x4, 0x7fffffff}, {0x5, 0xd2e9, 0x9, 0x1, 0x80, 0x401}, {0x6, 0xe, 0x3, 0x200, 0xfffffbff}, {0x40, 0x1ff, 0xa, 0x6, 0xfffffff9, 0x7fff}, {0x6, 0xb207, 0x8d3, 0x0, 0xd, 0xa1}, {0x100, 0x6, 0x0, 0x100, 0x100}, {0x0, 0xffffffff, 0x1, 0x800, 0x0, 0x3}, {0x1, 0x7fffffff, 0x2, 0x1, 0x6, 0x8000}, {0x8, 0x6, 0x8, 0x80, 0x1, 0xfffffffa}, {0x3, 0xb, 0x0, 0x3, 0x9, 0x80000000}, {0x0, 0x9, 0xffffffff, 0xfffffff4, 0x40, 0xe}, {0x4, 0x1, 0xd60, 0x2, 0x6, 0x7fff}, {0x0, 0xffff0000, 0x5, 0x7, 0x1ff, 0x7}, {0x5, 0x8, 0xffffffff, 0x8, 0x4, 0x9}, {0x44, 0x1ff, 0x2, 0x2, 0x9, 0x6}, {0xe, 0x80000001, 0x8, 0x9b, 0x10001, 0x81}, {0x0, 0xda, 0xffffffff, 0x4, 0x7fffffff, 0x2}, {0xfffffffd, 0xfffffc01, 0x7, 0x0, 0x2, 0x4}, {0x6, 0x610, 0x10000, 0x0, 0x5, 0x2b7}, {0x20080000, 0x9fa6, 0x100, 0x10000, 0xfffff801, 0x5}, {0x9, 0x5, 0x1, 0x5, 0x938, 0x7}, {0x9, 0x3, 0xb4a, 0x1, 0x5, 0xf9f}, {0x3, 0x400, 0x2, 0x4, 0x2, 0x7}, {0x9, 0x8, 0x6, 0x2, 0x7, 0x3}, {0x8, 0x0, 0x4, 0xfffffff1, 0xf, 0x6}, {0x9, 0xfffffff8, 0x1, 0x3, 0x2, 0x4}, {0x7, 0x7, 0x8001, 0x5, 0x3a, 0xfffffff9}, {0xffffffff, 0xb5e, 0x1, 0x4, 0x9, 0x1000}, {0x1, 0x8, 0x10000000, 0x4, 0x8, 0x6}, {0x5, 0x2000, 0x400, 0xfffffff8, 0xd8b4, 0x101}, {0x2, 0x8, 0x80000000, 0x5, 0x9}, {0xfffffff9, 0x61f, 0x9, 0xe, 0x3, 0x4}, {0x7, 0x2b8, 0x30000000, 0x200, 0x7, 0x6}, {0xfffffff8, 0x1ff, 0x8001, 0x6f81, 0x4, 0x9}, {0x70, 0x6, 0xd, 0x7, 0x3, 0xffff}, {0x1, 0x0, 0x80, 0x1000, 0xffffffff, 0xac5}, {0x653c, 0xd0a, 0x62c, 0x55, 0x9, 0xf4}, {0x5, 0x7, 0x2, 0x6, 0x100, 0x2}, {0xa, 0x4, 0x0, 0x4, 0x0, 0x5}, {0x100, 0xc3e92ce, 0x9b, 0x1000, 0x7, 0x800}, {0x800, 0xfffffffc, 0x3, 0x9, 0xacb, 0x39}, {0x1, 0x6, 0x800, 0xfffff164, 0x77f, 0x4}, {0x8, 0x2, 0x13, 0xb, 0xffffffff, 0x2}, {0x3cae, 0x3, 0x6, 0x4, 0x3ff, 0x5}, {0x0, 0x40, 0x5, 0xfffffe00, 0x9, 0x4a}, {0x6, 0xf8, 0x1, 0x1, 0x6, 0x1}, {0x8001, 0x3, 0x10000, 0xa, 0x0, 0x4}, {0x0, 0xfffffff1, 0x7, 0x10000, 0x9, 0x7f}, {0x3, 0x0, 0xfffffff9, 0x135f, 0xb3d7, 0x3}, {0x5, 0x2df, 0x401, 0x9, 0x9, 0x200}, {0xff, 0x9e, 0x5, 0x6, 0x329, 0x8000}, {0x40000, 0x80000000, 0x3ff, 0x9, 0x50, 0xb}, {0x1472, 0x8, 0x2, 0x2, 0x157, 0x8}, {0x26, 0x8, 0x9, 0x2, 0xffff, 0x1ff}, {0x7b, 0x0, 0x40, 0x89, 0x7, 0x80000001}], [{0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x3}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x1}, {0x4, 0x1}, {}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0xfe9783655443db8f, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x2}, {0x5}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x5}, {0x1}, {0x5}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {}, {}, {0x4}, {0x2, 0x1}, {0x4}, {0x1, 0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x8b0ffc3ab5875e4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2}, {0x4}, {0x2}, {0x2, 0x1}, {0x1}, {0x2}, {}, {0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x150f95b058b43d3b}, {0x2}, {0x1}, {0x4, 0x1}]}}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x5, 0x1a7db578, 0x0, 0x2}, 0x8, 0x5, [{0x8, 0x198, 0x7, 0x8, 0x4, 0x1}, {0xdf, 0x7, 0x3, 0x9, 0xaf1, 0x3}, {0x9, 0xa3e, 0x4, 0x0, 0x2, 0xaf}]}, [{0x0, 0x5, 0x8, 0x9, 0x0, 0xdf}, {0xfffffffe, 0x5, 0xfffffffb, 0x3, 0x0, 0x37}, {0xe, 0x0, 0x9, 0x2, 0x0, 0x2}, {0x0, 0x1, 0x800, 0xfffff1e9, 0x8, 0x1ff}, {0x22, 0x3f4, 0xfc67, 0x3, 0x6, 0x5}, {0x2, 0x586, 0xd, 0x80000000, 0xb37f, 0x2f9}, {0x3, 0xdf, 0x3e, 0xf, 0x8, 0x50}, {0x3, 0x6, 0x7, 0x2, 0x4, 0x8}, {0xf4c0, 0x5, 0x1, 0xffffff7f, 0x40, 0x2}, {0x7f, 0x5805, 0xba, 0xaf8, 0x3, 0x2}, {0x9, 0x7fff, 0x7, 0x7f, 0x5ae, 0xca7}, {0x3, 0x800, 0x7f, 0x4, 0x9, 0x1}, {0x1, 0x9, 0xfca, 0x81, 0xa83, 0xfffffffb}, {0x4, 0x3, 0x3, 0x7, 0x6, 0xac}, {0xfffffffb, 0x9, 0x3a, 0x3, 0x4, 0x9}, {0x2, 0x101, 0x7, 0x61f, 0xc000, 0x7}, {0xd4feab1, 0x1, 0x9, 0x9, 0x9, 0x80000001}, {0x4, 0x339a599e, 0x8, 0x8, 0x3, 0x4}, {0x8, 0xc4, 0x1c, 0x9, 0x6}, {0xd, 0x9d59, 0x0, 0x6, 0x1, 0x79}, {0xd, 0x0, 0x9, 0xfffffffc, 0x8, 0x81}, {0x3, 0x5, 0x2, 0xf34, 0xffffffff, 0x5}, {0x6, 0x1, 0x10000, 0x1, 0x0, 0x3}, {0xb, 0x0, 0x1, 0x2, 0x3, 0xd}, {0xfffffffa, 0x0, 0x8, 0x8, 0x937, 0x5}, {0x394f, 0x0, 0x2, 0x8000, 0x5, 0x4}, {0x8fc1, 0x100, 0xb2, 0xfdc4, 0x9, 0x80}, {0x9, 0x2, 0x9, 0x8, 0xdd}, {0x81d, 0x9, 0x1, 0x8, 0x1e, 0x400}, {0x5, 0x2, 0x6, 0x0, 0x7, 0x3}, {0x7, 0x9, 0x100000, 0xda, 0x7ff, 0x277}, {0x9, 0xffffffff, 0x1ff, 0x2, 0x300000, 0x6}, {0x9a11, 0x5, 0x1, 0x7, 0x5, 0x17b381c6}, {0x2, 0x2, 0x8, 0xb983, 0x7, 0x400}, {0x6, 0x1, 0x4, 0xffffff88, 0x2d, 0x7}, {0x6, 0xfffffffa, 0x0, 0x0, 0xfffffffa, 0x1}, {0x1ff, 0x4, 0x3, 0x81, 0x0, 0x351d3d17}, {0x8, 0x7f, 0x0, 0x1, 0x80000001, 0x8001}, {0x8, 0x8, 0xe, 0xff, 0x3, 0x7}, {0x9, 0x2, 0x6, 0xfffffffd, 0x4, 0xff}, {0x8, 0x101, 0x9, 0x95, 0x8, 0xff}, {0x6, 0x4815, 0x9, 0xffffffff, 0x1, 0x5}, {0x0, 0x5, 0xe00, 0x8, 0x73, 0x6}, {0x7, 0x1, 0x2, 0x3, 0xfffffffd, 0x101}, {0x9, 0x3, 0xc, 0x7fffffff, 0xffffff2e, 0x5}, {0x4, 0x1ff, 0x25de, 0x6, 0x2, 0x3}, {0x6ea3, 0x0, 0xe, 0x5, 0xe3b2, 0xd8}, {0x2, 0x0, 0x7, 0x4, 0x8000000, 0x9}, {0x0, 0x0, 0x2, 0xdf6, 0x9, 0x3}, {0x80, 0x778, 0x6, 0xfffffff1, 0xe, 0xb}, {0xfffffffc, 0x7, 0x6, 0x8, 0x2, 0x5}, {0x400, 0x5, 0x3, 0x0, 0x7, 0x9}, {0x6, 0x9, 0x9, 0x4a, 0x0, 0x2}, {0x7ff, 0x10000, 0xd, 0x200, 0x7, 0x1}, {0x63, 0x9, 0x0, 0x6, 0x10, 0x3}, {0x0, 0x0, 0x68e0000, 0x3, 0x3, 0x4}, {0x5, 0x5, 0x5, 0x9, 0x80000000, 0x8}, {0x81, 0xe, 0x2, 0x100, 0x9, 0xe4}, {0x5, 0x3, 0x5, 0x26, 0x0, 0x8392}, {0x0, 0x5, 0x6, 0xfffffffa, 0x2, 0x1b8}, {0x4, 0x1, 0x40, 0xfffffffe, 0x6, 0x9}, {0x0, 0x200, 0x3, 0x7, 0xf765, 0x4}, {0x2, 0x6, 0x7, 0x8, 0x80, 0x7}, {0x5, 0x2, 0x0, 0x5, 0xfffffff8, 0x4}, {0x3, 0x0, 0x8, 0x3, 0x8, 0x101}, {0x7, 0x4, 0x9, 0x9, 0xde, 0x8}, {0x673, 0xfffffffd, 0xf10, 0x7fff, 0x400, 0x401}, {0x40, 0x6, 0xfffffffd, 0x401, 0xe, 0x4}, {0xfa, 0x2, 0x0, 0x8, 0x7}, {0x7fff, 0x9, 0xfffffffd, 0x0, 0x9, 0x7f}, {0x9, 0x0, 0xc1, 0x401, 0x1000, 0x3}, {0xdad, 0x9d97, 0x1, 0x2f5, 0x1, 0x94}, {0x81, 0x741, 0x8, 0x2, 0x8, 0x10001}, {0x5, 0x7, 0x0, 0x4, 0x4658, 0x7}, {0xfffffeff, 0x3, 0x7, 0x2, 0x0, 0x9}, {0x0, 0x6, 0x6, 0x2, 0x7fff, 0x9}, {0xffffffff, 0x6, 0xff0, 0x0, 0x2, 0x1}, {0x8, 0xa425, 0xa8, 0xef1, 0x9, 0x1}, {0xfff, 0x8, 0xd6, 0x4295, 0x8, 0x1}, {0x8000, 0x6, 0x6, 0xffffff00, 0x8, 0x668}, {0x5, 0x0, 0x9, 0x7, 0x5, 0xffffff7d}, {0x1d, 0x9, 0x2, 0xbe73, 0xffff, 0x9}, {0x5, 0x9588, 0x10, 0x8, 0x5, 0x7}, {0x800, 0x9, 0x9, 0x3, 0x6, 0x1}, {0x2, 0x8c, 0x3, 0x8000, 0x5, 0x1}, {0x9, 0x7f, 0x6, 0x1, 0x6, 0x7ff}, {0x114, 0x3, 0x5, 0x834, 0x800, 0x6}, {0x5, 0x9, 0x9, 0x7ff, 0x3, 0x9}, {0x80000000, 0x9, 0x4, 0x5, 0x16ce, 0x1}, {0x100, 0x7, 0x4, 0x6, 0xf, 0xffffffff}, {0x8, 0x5, 0x3, 0x9, 0x5, 0x3}, {0x3, 0xfffffff8, 0x8, 0x6f, 0x676, 0x8}, {0x5e21, 0x9, 0x4, 0x2, 0x400, 0xfff}, {0x0, 0x3, 0x5, 0x6, 0x4181de18, 0x5}, {0x1, 0x1bb0, 0xfa9, 0xffff, 0x0, 0x3}, {0x10, 0x1, 0x80000000, 0x7, 0x5, 0x3a3}, {0x5, 0x9, 0x6, 0x4, 0x9, 0x40}, {0x6, 0x0, 0x1, 0x5, 0xfffffff9, 0xd}, {0x8, 0x7, 0x2, 0x4, 0x52b, 0x200}, {0xf9, 0x5, 0x10000, 0x0, 0xa}, {0x1, 0x5, 0x3, 0xdc7, 0x4, 0xa}, {0x7, 0x80, 0xb, 0x19b1, 0x2, 0x2}, {0xf22, 0x6, 0x0, 0x7, 0xd4a}, {0x2, 0x100, 0x6, 0xc, 0x8, 0xb}, {0x0, 0xe, 0x2, 0x8, 0x401, 0x200}, {0xb67a, 0x4, 0x1, 0x9, 0xffff, 0x6}, {0x3, 0x6ea9, 0x400, 0x7, 0x9, 0x4}, {0xfffffff1, 0x59, 0x8, 0x1, 0x1, 0xff}, {0x10001, 0x7, 0x6, 0xf219, 0x7, 0xff}, {0x8, 0x2, 0xfffffbff, 0xfffffffe, 0x2, 0x1}, {0xfffffffd, 0xffffff81, 0x7fff, 0xfffffffe, 0x73eb, 0x4}, {0x73, 0x3, 0x5, 0x6, 0x6, 0xfffffffc}, {0x1ff, 0x0, 0xa48, 0xfffffc11, 0x40000000, 0x1}, {0x24, 0x3, 0x4d424b4f, 0x8, 0x1ca, 0x1}, {0x0, 0x0, 0x9, 0x2511, 0xa6, 0xdf3}, {0x2, 0x3ce4, 0xe5, 0xa4, 0x5, 0x2}, {0x3000000, 0xfffffff9, 0x5, 0x8, 0x9, 0xa2}, {0x1, 0xfffffff9, 0x1ec, 0x0, 0x2, 0x4}, {0xff, 0x5, 0x0, 0x7, 0x101, 0x5ffb}, {0x0, 0x8000, 0x8, 0x0, 0x3, 0xd}, {0x7, 0xb58, 0x84d3, 0x9, 0x8, 0x9}, {0xc, 0x0, 0xf4, 0x8, 0x1000, 0x8}, {0x0, 0x6e2, 0xff, 0x0, 0x3214, 0x8}, {0x7f, 0x2, 0x6, 0x20000000, 0xdd, 0x80000001}, {0x1, 0x5, 0x7fffffff, 0xc, 0xe, 0x1}, {0x8, 0x329, 0x6, 0x6, 0x8001, 0x2}, {0xfddd, 0xfaa2, 0x10, 0x5, 0xc, 0x8000}, {0x1, 0x43d8873e, 0x2, 0x1, 0x4}], [{0x2, 0x1}, {}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2}, {0x2}, {0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x7}, {0x1, 0x1}, {0x4}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0xf, 0x1}, {0x2, 0x4a3ba2394295858b}, {0x9302829e33069eb3, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x5}, {0x2}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0xae65de7e6da9a9bb, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x4}, {0x3}, {0xb81c2cb65139d01e, 0x1}, {}, {0x1}, {}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x4413436535a03de5}, {}, {0x1, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x6, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x5}, {0x5}, {0x1, 0x1}, {0x4, 0x1}], 0x1}}]}, {0xb, 0x6, "3cc11bb75e81b0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_pedit={0x2c40, 0x4, 0x0, 0x0, {{0xa}, {0x2b84, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x60, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x3, 0x7, 0xf, 0x2, 0x400}, 0x3, 0xb0, [{0x7, 0x5, 0x8, 0x7, 0x6, 0xfb}, {0xca30, 0x8, 0xe, 0x9, 0x4800000, 0x4}, {0x9, 0x5, 0x1, 0xb1334cd, 0x1, 0xda}, {0x401, 0x7f, 0xd7b, 0x5, 0xfffffffe, 0x200}]}, [{0x81, 0x8, 0x0, 0x6, 0x1, 0x2}, {0x8000, 0x6, 0xf412, 0x597c, 0xc, 0x4}, {0x1, 0x5, 0x0, 0x1, 0x453}, {0x0, 0x6, 0x3, 0x2, 0x1, 0x10}, {0x0, 0x8, 0x4, 0x401, 0x3, 0xfffffffa}, {0xd, 0x4, 0x8, 0x3ff, 0x3, 0x8}, {0x6, 0x1ff, 0x6, 0x5, 0x401, 0x9}, {0x5, 0x8, 0x2, 0x91a7, 0x5, 0x4}, {0xa6c, 0x7, 0x0, 0x1000, 0x8e4, 0x40}, {0x3, 0xfffffff7, 0x78, 0x9, 0x1a, 0x3}, {0x7fffffff, 0x9, 0x80000000, 0x4ee3, 0xcb, 0xfffffffe}, {0x0, 0xb, 0x80, 0xf53d, 0xde1, 0xc458}, {0x80000001, 0x4, 0x1f6, 0xa0b2, 0x81}, {0x9, 0x0, 0x800, 0x2, 0xffffffff, 0x90}, {0x3, 0xfffffffb, 0xc590, 0x4, 0x6, 0x3}, {0x100, 0x7, 0xfffffff5, 0x8, 0x2a16, 0xa}, {0x8cc2, 0xf3, 0x6, 0x0, 0x1003, 0x8b}, {0x4, 0x53b, 0x5, 0x2, 0xf4}, {0x3, 0x6, 0x2, 0x3, 0x101, 0xfb}, {0x1, 0xd, 0x4, 0x4, 0x5, 0xfffffffd}, {0xdca, 0x94, 0x80000001, 0x0, 0xfffffffe, 0x200}, {0x630, 0x0, 0x9, 0x7, 0x7, 0x1}, {0x4, 0x10, 0x64, 0x7, 0x3, 0x3}, {0x4, 0x0, 0x1, 0x3, 0xd, 0x3}, {0x1, 0x9, 0x8, 0x4, 0x0, 0x5}, {0x40000, 0x9, 0x8, 0x0, 0xc, 0x101}, {0xfffffffe, 0xff, 0x6, 0x9, 0xb8, 0x6}, {0x2, 0x1, 0x1, 0xe0, 0x4, 0x8000}, {0x28, 0x4, 0x8, 0x0, 0x5, 0x80000001}, {0x9, 0x1, 0x7, 0x0, 0x401, 0x1}, {0x40e, 0xa, 0x1, 0xffff, 0xf, 0xc6}, {0xf, 0x7, 0x1, 0x51, 0x5, 0x1000}, {0x6, 0x10, 0x1, 0x1, 0x8, 0xed}, {0x0, 0x1, 0x2, 0x8000, 0xd, 0x5}, {0x8000, 0x6, 0x6, 0x6, 0x2, 0x4}, {0x9, 0x3, 0x3, 0x8, 0x7, 0x7fdf}, {0x3, 0x2, 0x5, 0x7ff, 0x8001, 0x7}, {0xd8, 0x2, 0x9, 0x4, 0x5, 0x7e}, {0x62e8, 0x7ff, 0x20, 0x100, 0x4, 0x5}, {0xa, 0x5, 0x1000, 0x73e, 0x44, 0x8}, {0x2, 0x4, 0x8000, 0x7, 0x6, 0x401}, {0x8, 0x7f, 0x200, 0x3ff, 0x100, 0x4f9}, {0x1, 0x1, 0xc, 0x10001, 0x4}, {0x200, 0x9, 0xb4, 0x6, 0x2, 0x9}, {0x3, 0x894, 0x5, 0x80000001, 0xc442, 0x8}, {0x10001, 0x1, 0x7, 0x5, 0x6, 0x380}, {0x7934, 0x224, 0x6, 0xffff0000, 0x5, 0x100}, {0x9, 0x8, 0x10, 0xc, 0x1, 0x3}, {0x4, 0x5, 0x3, 0x4, 0x6, 0x80000000}, {0xea, 0x8001, 0x9, 0x3, 0x8, 0x6a}, {0xfffeffff, 0x1, 0x80000001, 0x8, 0x40, 0x8}, {0x4, 0x8, 0xfffffffa, 0xd, 0xb90, 0x1}, {0x248000, 0xf, 0xab, 0xa34, 0x0, 0xa4}, {0x8, 0x7, 0x80, 0x8, 0x1, 0x5}, {0x9, 0x3, 0x7fff, 0xe8, 0xa6, 0x3}, {0x8001, 0x3, 0x3, 0x577, 0x8001, 0x1}, {0x7e240ccf, 0x1, 0x8, 0x7f, 0x5, 0xfffffff8}, {0x2, 0x0, 0x8, 0x1, 0x56f, 0x9}, {0x8, 0x2, 0x81, 0x8, 0x9, 0xf}, {0x2, 0x1fe3, 0x5, 0x80, 0x6, 0x2}, {0x6, 0x1, 0x5, 0x6, 0xf5a, 0xf}, {0xb, 0x2, 0x1413, 0x6, 0x5, 0x8}, {0x8, 0x1, 0xffffffff, 0x7, 0x1ff, 0xf5d}, {0x8, 0x7, 0x7, 0x3ff, 0x22844, 0x6}, {0x2, 0xffffff96, 0x5288a835, 0x6, 0x1, 0x430}, {0x9, 0x32, 0x2, 0x3, 0x924f, 0x40}, {0x6, 0x400, 0xfffffff8, 0x2, 0x1, 0xa22}, {0x1ff, 0x4, 0x4, 0x292, 0x1, 0xa96e}, {0x5, 0x5, 0x7, 0x9, 0x6}, {0x2, 0x1, 0x6, 0x4, 0x6, 0x8}, {0x299, 0x7, 0x4, 0xfffffff0, 0x648f49a, 0x8}, {0x9ea1, 0x1, 0x6, 0x9, 0x7, 0x40}, {0x0, 0x0, 0x5, 0x5, 0x5, 0x8}, {0x2, 0x2, 0x86d, 0x2, 0x9, 0x6}, {0x0, 0x3, 0x10, 0x1, 0x4, 0x8}, {0x400000, 0x6, 0x0, 0xfffff001, 0x3d7, 0xa}, {0xeb71, 0x98b, 0x0, 0x17, 0x3ff, 0x7}, {0xa, 0x870b, 0x16e, 0x27, 0x2, 0x2}, {0x0, 0x1, 0x3, 0xff, 0xd, 0x5c8}, {0xffffb170, 0x100, 0x8, 0x4, 0x800, 0x2}, {0x3, 0x80, 0x80000001, 0x2, 0xae, 0x101}, {0x40000000, 0x5, 0xbb4, 0x6, 0xaa, 0x1}, {0xffffff81, 0xe, 0x8, 0x3, 0x9, 0x9}, {0x3f, 0x1, 0x8, 0x7, 0xe00, 0x5}, {0x1, 0x8000, 0x8, 0x8000, 0xffff, 0x4}, {0xc, 0x7, 0xfffffff7, 0x8, 0x9, 0x4}, {0x4, 0x2, 0x6, 0x7, 0x10001, 0x5}, {0xf, 0x6, 0xe062, 0x3ff, 0x0, 0xfff}, {0x2b9, 0xffff0ceb, 0x6, 0x81, 0x101, 0x8}, {0xff, 0x5b7, 0x51, 0x1, 0x7d, 0x8}, {0x0, 0x180, 0x7f, 0x7, 0xb853, 0xffffff01}, {0x5, 0x9, 0x1134, 0x80, 0x218, 0xa5c}, {0x100, 0x2, 0x9, 0xe, 0xffff, 0xffffff87}, {0x5, 0x2, 0x2, 0x1000, 0x4, 0xffff}, {0x8000, 0x6, 0x3, 0xa, 0x0, 0x9}, {0xfd, 0x3, 0xd3, 0x3, 0x9, 0xb5a}, {0x42, 0x9a5, 0x1691, 0x6db672b, 0x211265c0, 0x1}, {0x9, 0xa8cc, 0x7, 0x7f, 0x0, 0x8}, {0x8, 0x3, 0x2ec, 0x5, 0x7, 0x71b}, {0x0, 0x100, 0x0, 0x8001, 0x6, 0x8}, {0xd093, 0x7, 0xa01, 0x5, 0x2, 0xa8}, {0x96ea, 0x8, 0x8, 0x3f, 0x8}, {0x6, 0xfff, 0x9, 0xffffffff, 0x2800000, 0x9}, {0x2df, 0x5, 0x0, 0x10, 0x0, 0xd3}, {0x3, 0x80000000, 0x1, 0x0, 0x7, 0x6dc7}, {0xfffffffc, 0xbae, 0x851, 0x3, 0xd6e3, 0xa}, {0x1, 0x4, 0x10, 0x101, 0x80, 0x4}, {0x0, 0xe, 0x8000, 0x0, 0x1, 0x8}, {0x307, 0x4, 0x7, 0x9c, 0x7, 0x57}, {0x8, 0x0, 0xe0000000, 0x44, 0x3, 0x5}, {0x9, 0x3, 0x6, 0x9, 0x0, 0x6}, {0x2, 0xbe, 0xe, 0x624d, 0x4, 0x7}, {0x0, 0x6, 0x80000001, 0x7, 0x8, 0x1}, {0x5, 0x1, 0x5, 0x1b3, 0x1, 0x5}, {0xb, 0x9, 0x6, 0x3, 0x3ff, 0xc}, {0x0, 0x3, 0xfffffff9, 0x3, 0x0, 0x401}, {0x800, 0x5, 0x53, 0x6, 0xfffffff7, 0x3}, {0x4, 0x0, 0x4, 0x8, 0x3ff, 0xd}, {0x1, 0x4, 0xffffff93, 0x4, 0x1b521b7a, 0x2}, {0x2, 0x30b8, 0x8, 0xf, 0x704, 0x3c}, {0x101, 0x9, 0x6, 0x200000, 0x8, 0x5}, {0x5, 0x8, 0x3, 0xe, 0xffff8001, 0xe449}, {0xe11f, 0x194, 0x5, 0x8, 0x10, 0x815}, {0x3e, 0x872, 0x7, 0x5, 0x0, 0x8}, {0x1, 0x8, 0xfffff000, 0x1, 0x40, 0x7f}, {0x5, 0xfffffffa, 0x8000, 0xc4b, 0x6, 0x6}, {0xffff11ab, 0x9, 0x81, 0xd, 0x8, 0xeb}, {0x8eb6, 0x2, 0x5, 0x3, 0x800, 0x7}], [{0x4}, {}, {0x1, 0x2}, {0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x5}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x5}, {0x3}, {0x5, 0x1}, {0x5}, {0x3}, {0x5}, {0x2}, {0x4}, {0x1}, {}, {0x2}, {0x5, 0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x31f3e6b2980e2f8c}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x1}, {}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0xed5def277ceb2ad0, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x3}, {0x2}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x9033911a98ddf60e}, {0x5}, {0x1, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x5}, {0x3, 0x1}, {0xd, 0x1}, {}, {0x5}, {0x1, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x4a21, 0xbe, 0x6, 0x2e18, 0x3}, 0x2, 0x11, [{0xf109, 0x3fa3, 0xed, 0x0, 0x2, 0xa}, {0x5, 0x7, 0x3d, 0x4, 0x80000000, 0x6}, {0xffffffff, 0x97, 0x0, 0xb11, 0x1, 0x7f}]}, [{0x80, 0xffffff2a, 0x9, 0x9, 0x6, 0xbd6f}, {0x8a, 0x7, 0x8, 0x3, 0xb3, 0xffff}, {0x0, 0x8000, 0xffffffff, 0xc, 0xfffffffd, 0x101}, {0x34, 0x0, 0xf, 0x983d, 0x3, 0x3fec}, {0x0, 0x1, 0x3, 0x8, 0x400, 0xfffffffd}, {0x7, 0x80000000, 0x0, 0xfffffffa, 0x9, 0x10000}, {0x53f, 0xe, 0x400, 0x6, 0x8, 0x7}, {0xde78, 0x7, 0xce82, 0x80000000, 0x21, 0x1000}, {0x401, 0x0, 0x1, 0x9, 0x9, 0x9f9}, {0x5, 0x7fff, 0x2, 0x8b23, 0xaca, 0x3}, {0x26b, 0x0, 0x80000000, 0x9, 0x8, 0x9}, {0x3, 0x3, 0x8, 0x4, 0x9, 0x5}, {0x2, 0x28e, 0x2, 0xfffffffe, 0xd961465, 0x3ea38376}, {0xae26, 0xffff7fff, 0x10001, 0x10000000, 0x5, 0x1}, {0x6, 0x8, 0x1000, 0x400, 0xfffffffd, 0x2}, {0x2, 0x2, 0x401, 0xfffffffa, 0xb, 0x8001}, {0xe5c4, 0x8001, 0x9, 0x9, 0x200, 0x10001}, {0x7fffffff, 0x5722, 0x10001, 0x2eac3e2e, 0x7a740c66, 0x1}, {0x8, 0x4, 0x1, 0x7, 0x2000000, 0x3ff}, {0x9, 0x8, 0xae4e, 0x5, 0xfff, 0x5}, {0x6, 0x7, 0x5, 0x2, 0xf1, 0x4}, {0x9, 0x9, 0x0, 0x4, 0x1, 0xffffd01e}, {0xeefc, 0xb3, 0x7fffffff, 0xd08a, 0x9}, {0xffffffff, 0x3, 0x5, 0x7, 0x5, 0x9}, {0x1ff, 0x4, 0xfffff02d, 0x9, 0x8, 0x4dd}, {0x401, 0x0, 0x5, 0xfffffff8, 0x8, 0x7}, {0x10, 0x0, 0xea1, 0xffffffff, 0x8, 0x6d}, {0x5, 0x4, 0x5, 0x4, 0x8, 0x100}, {0x3e, 0xdb, 0xa, 0x4, 0x2, 0x1}, {0x86, 0x7fff, 0x4, 0xed8, 0x100, 0xf}, {0x7, 0xfffffff7, 0x1, 0x8, 0x1ff, 0x7}, {0x1, 0x2, 0x2, 0x0, 0x71e, 0x2}, {0x7, 0x9, 0x1, 0x7fffffff, 0x3, 0x4}, {0xe431, 0x8, 0x8, 0x9, 0x80000000, 0x80000000}, {0x81, 0x7, 0x0, 0x0, 0x0, 0x71}, {0x0, 0x1, 0x8, 0xd1, 0xfffffff7, 0x2}, {0x0, 0x3e, 0x7, 0x1, 0x6}, {0x1, 0x5b2, 0x80000001, 0x2, 0x2, 0xa3a}, {0x9da, 0x7, 0xa, 0x0, 0x200}, {0x5d, 0x9, 0x3, 0x9, 0xae6e, 0x95}, {0x0, 0x1a7, 0x0, 0x3, 0x9, 0xf}, {0x4, 0x39, 0x3, 0xe, 0x40, 0x6}, {0x3, 0x8000, 0x3ff, 0x13b, 0x9, 0x3}, {0x4, 0x1, 0x8, 0x8000, 0x7, 0xffffffff}, {0x2, 0x6, 0x7, 0x7, 0xe, 0x18c1}, {0x6, 0x5, 0x4b5e, 0x3, 0x9, 0xf06e}, {0x8, 0xc2f, 0x0, 0xb662, 0x5c2d, 0x4}, {0x4, 0x31, 0x9, 0x5, 0x8}, {0x401, 0x7fff, 0x2, 0x2, 0x8, 0xd}, {0x40000000, 0x7f4, 0x6, 0x0, 0x4, 0x1826addf}, {0x2, 0x1, 0x4, 0x3, 0x6, 0x2}, {0x401, 0x7, 0x3, 0x7, 0x9, 0x67b}, {0x2, 0xfffff211, 0x3, 0x2, 0x8, 0x4}, {0x1, 0x8, 0x9, 0x2, 0x2, 0x7}, {0x9, 0x7ff, 0x8c, 0x2, 0x7, 0x3}, {0x4, 0x9, 0x6, 0x8, 0x8, 0x4}, {0x0, 0x4, 0xffffffff, 0x4, 0x1, 0x5}, {0x5, 0x4, 0x1, 0x7, 0x5, 0x7}, {0xffffff80, 0x73, 0x64, 0x9, 0x5, 0x5c3e6a71}, {0x5, 0x0, 0x2, 0x8, 0x6, 0x3}, {0x30a9, 0x0, 0x3f, 0x10000, 0x5, 0x3}, {0x3, 0x5c79, 0x5, 0x7, 0x5, 0x9}, {0xd2, 0x9, 0xc9, 0x354b, 0x9, 0x1}, {0xffff, 0x1, 0x80000000, 0x7, 0xffffffff, 0x10001}, {0x9, 0x3, 0x5, 0x4, 0x7, 0x76f0}, {0x7, 0xa67, 0x0, 0x3, 0x6, 0xfffff801}, {0x7, 0x0, 0x5, 0xa, 0x5, 0x3}, {0x8, 0x2, 0x3, 0x8, 0xffff, 0x7}, {0x1, 0xfffffff0, 0xf4d, 0x3, 0xf}, {0x10000, 0x9, 0x8, 0x9, 0x10001, 0x200}, {0x4, 0xd78, 0x9, 0x4, 0x4, 0x7fff}, {0x6, 0x55, 0xd6c, 0x5, 0x0, 0x7fff}, {0x3, 0xfffffffb, 0x8, 0xfffffff7, 0x8, 0x9}, {0xd, 0x2, 0x1, 0x9, 0xb, 0x7}, {0xb, 0x5, 0x3, 0x800, 0x80, 0x5}, {0x100, 0x80000001, 0x81, 0xd2d9, 0x3, 0x5}, {0x9, 0x27da191b, 0x80, 0x2, 0x3, 0xf63e}, {0x7, 0x7, 0x7ff, 0x3, 0x200, 0x9}, {0x10001, 0x2, 0x113, 0x8, 0x3, 0x81}, {0x1, 0x5, 0x6, 0x2, 0xb, 0xf}, {0x5, 0x0, 0xe57, 0x6, 0xfffffffa, 0x2}, {0x6, 0xff, 0x5, 0x1, 0x488a, 0x519bb2ad}, {0x7, 0x4, 0x4, 0x8, 0xa9, 0x200}, {0x7, 0x200, 0x9c19, 0x8, 0x6}, {0x2, 0x400, 0x6, 0x1ff, 0x8001, 0xae}, {0xfffff000, 0x9, 0x401, 0x5, 0xa808, 0x7}, {0x6, 0x101, 0x8, 0x57f64c59, 0x7, 0xb8}, {0xb3, 0xd50, 0x3, 0x6fd, 0x9, 0x80000001}, {0x5, 0xe778, 0x909f, 0x10001, 0xfffffffc, 0x2}, {0x3, 0x9, 0x2, 0x4, 0x9, 0xf}, {0x7, 0x10, 0x8, 0x4, 0x3b, 0xffffffff}, {0x47b0, 0x28, 0x9, 0x9, 0x2, 0x5}, {0x5, 0xdde7, 0x1, 0x401, 0x7ff, 0x9}, {0x6, 0x7, 0x7, 0x3, 0x2, 0x2}, {0x18, 0x100, 0xa7f3, 0x75, 0x4, 0x1}, {0x8, 0x8000, 0xe, 0x85, 0x4, 0xfffffff8}, {0x7, 0x5, 0x8, 0x7, 0x80000001, 0x8}, {0x0, 0x100, 0xfc000000, 0xfffffffe, 0x7976, 0xbfb}, {0x9, 0x8, 0x9, 0xfff, 0x40, 0xebd}, {0x8, 0x26, 0x2, 0x7, 0xfffffff9, 0x7}, {0xfffffffb, 0x8, 0x2, 0x7, 0x47f6, 0x1}, {0x393ffcd1, 0x6, 0xff, 0x1, 0x5, 0x3ff}, {0x1, 0x4, 0x10, 0xe, 0x9, 0x3}, {0x79bb, 0x4, 0x10001, 0xffffffff, 0x9, 0x9}, {0x55, 0x8, 0x8, 0x7fe6, 0x6, 0x4}, {0x8, 0x3, 0x9, 0x7a5, 0x400, 0x8f7}, {0x9, 0x3, 0x33, 0x7, 0x9, 0x1000}, {0x8001, 0x2, 0x29f9, 0x9, 0x7, 0x5}, {0xff, 0x4, 0x1, 0x4d, 0x5}, {0xa2e9, 0x5, 0x101, 0x14a5, 0x101, 0x6}, {0x0, 0x40, 0x1000, 0x9, 0x19c8, 0x8}, {0xd9b, 0x0, 0x2, 0xfffffffa, 0x9, 0x933}, {0x9, 0x40, 0x947e, 0x10001, 0x2, 0x4}, {0x80, 0x8001, 0x6, 0x1, 0xfffffff8, 0x3}, {0x7db, 0x6, 0x43, 0x9, 0x400}, {0x4, 0x1, 0x5, 0x8, 0xa00d, 0x2}, {0x6, 0x200, 0x9, 0x3, 0x569, 0xf9}, {0x8, 0x81, 0x9, 0x1, 0x2, 0x8}, {0xfffffffa, 0xc, 0x3, 0x3, 0x3, 0x1}, {0x7, 0xdcc, 0x7ff, 0xef, 0x1, 0x10}, {0x7, 0x3, 0x38, 0x100, 0x1, 0x6}, {0x0, 0x7, 0x2, 0x8, 0x5, 0x10000}, {0x1ff, 0xfffffff9, 0x5094, 0xc, 0x4, 0x4}, {0x8000, 0x2, 0x8001, 0x4, 0x827c, 0x1f}, {0x3, 0xac, 0x0, 0x0, 0x8, 0x52b7278}, {0x4, 0x1, 0x401, 0x8, 0x0, 0x114}, {0x1, 0x2, 0x80000001, 0x0, 0x6, 0x6}, {0x2, 0x2, 0xffffff81, 0x9, 0x5, 0x6}], [{0x4, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x952937ac4adb6d06}, {0x3}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0xb}, {}, {0x0, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x1}, {0x3}, {0x3}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x5}, {0x4}, {0x4}, {0x4}, {0x2, 0x1}, {0x4}, {0xf06c1e9dbed31162, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x6, 0x1}, {}, {0x5}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0xe12e03df30ec11cd, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x3}], 0x1}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xffffff30, 0x10001, 0x0, 0xff, 0xfffffffe}, 0x9, 0x6, [{0xfff, 0xb405, 0x7, 0x9, 0x0, 0x800}]}, [{0x5, 0x9, 0x10000, 0xffff, 0x1, 0xd24d}, {0x7, 0xffff11e1, 0x0, 0xe64, 0xe, 0xfffffff8}, {0x7f, 0x40, 0x3, 0x10001, 0x753c, 0x40}, {0x8, 0x2, 0x0, 0x5, 0x1, 0xffffffff}, {0x101, 0x5, 0x5, 0x5, 0x0, 0xcb7}, {0x5, 0x4, 0x6, 0x6, 0x5, 0x1}, {0x9, 0x5, 0x1ff, 0x100, 0x0, 0x8}, {0x1, 0xfffffffc, 0x9, 0x5, 0x80, 0x7}, {0x2, 0x0, 0xe473, 0x9, 0x7ff, 0x563}, {0x9, 0x30, 0x970, 0x4, 0xffffffff, 0x9}, {0x1b, 0x6, 0x1, 0x2, 0x5, 0x9}, {0x62, 0xfffffff7, 0x10, 0x1, 0x1}, {0xe4, 0x7, 0xb, 0x8, 0x1, 0x6}, {0x33e, 0x8, 0xe789, 0x7, 0x9, 0x71e4}, {0x4000000, 0x80, 0x9, 0xfffff497, 0x10001, 0x7}, {0x37d, 0x11, 0x6, 0x5, 0x10, 0x1ff}, {0x8, 0x79, 0xb7, 0x5, 0x3ff, 0xd2}, {0x6, 0x1, 0x5, 0x7fffffff, 0xff, 0xfff}, {0x3, 0x8, 0x9, 0x7fffffff, 0x400, 0x10}, {0x71ea, 0x9, 0x9, 0x3, 0xe, 0x2}, {0x10, 0xbf, 0x94e, 0xb, 0x9, 0x9}, {0x5, 0x3d1ba5fa, 0xffffffff, 0x7, 0x4, 0xff}, {0xb, 0xfffffff8, 0x0, 0x7, 0xfffffffb, 0xfffffffa}, {0x1, 0x7, 0xa95d, 0x5, 0xc, 0x80}, {0xffffffff, 0x7f, 0x8, 0x4, 0xf, 0x6}, {0x400, 0x6, 0x6, 0x4a2, 0x6fb, 0x8}, {0x6, 0x2c, 0xb9, 0xdd0, 0x7, 0x7}, {0x50, 0x0, 0xfdd4, 0x1, 0x7, 0xffffffff}, {0x10000, 0xc8a8, 0x9, 0x0, 0x81, 0x2}, {0x2, 0x7f, 0x4c4, 0x3, 0x6, 0x7ff}, {0x7, 0x4, 0x4, 0x7, 0x7f, 0x6}, {0x9, 0x10000, 0x10, 0x0, 0x7, 0x1}, {0xfff, 0x6c, 0x8, 0x6, 0x1000, 0x3}, {0x1, 0x2, 0x4, 0x40, 0x7ff, 0xaf75}, {0x65f, 0x7, 0x80000000, 0x8, 0x40, 0x8d74}, {0x8001, 0x7, 0x6, 0x9cb, 0xfffffff9, 0x8}, {0x0, 0xe, 0x5, 0x3, 0x0, 0x1}, {0x25d, 0x1b, 0xb, 0x4, 0x4, 0x997}, {0x2, 0x100, 0x4, 0x9, 0x5, 0x100}, {0x7, 0x9, 0x2, 0x2, 0xcb33, 0x1}, {0xcc, 0x3, 0x8, 0xeba0, 0x5, 0x6}, {0x9, 0x7ff, 0xffffff6e, 0x5, 0xf, 0x40}, {0x3, 0x8aa, 0x3, 0x4, 0x40, 0x2}, {0xfffffff7, 0x5, 0x0, 0xa5, 0x4, 0x80000000}, {0x28000, 0x9, 0xea, 0x4c, 0x5, 0x731}, {0x2, 0x7fff, 0xb9, 0xf, 0x3, 0xfffffffc}, {0x4, 0x4, 0x0, 0x5, 0x1, 0x80}, {0x6, 0x8001, 0xfb7c, 0x5, 0xc, 0xdf3}, {0x9, 0x8001, 0xbbe7, 0x7, 0xece, 0x8}, {0x9, 0xb, 0x6, 0x7ff, 0x7}, {0x95, 0x6, 0x4, 0xffffffff, 0x2, 0xff}, {0x1, 0x7, 0x0, 0x4, 0x4e5, 0x8000}, {0x8, 0xae2, 0x9, 0x7, 0x4, 0xdea}, {0x4, 0x1, 0x3, 0x8, 0x3, 0x2}, {0x7fffffff, 0x8000, 0x8, 0xb, 0x2, 0x5}, {0x0, 0x100, 0x4dc1, 0x4, 0x4f2, 0x3e8806a8}, {0x92, 0xb79, 0x4, 0x2, 0x2, 0x3}, {0x5, 0x3, 0x419, 0x6, 0x0, 0x7}, {0xb, 0x101, 0x9, 0xd, 0x40, 0xf}, {0x0, 0xfffffff0, 0x7, 0x6, 0x5}, {0xffffffff, 0x7, 0x1, 0x4, 0x5, 0x6}, {0x6, 0x3, 0x3, 0x8, 0x1, 0xc63e}, {0x1, 0x3, 0x800, 0x8, 0x10001, 0x6}, {0x4, 0x6, 0x10, 0x7fff, 0x8, 0x9}, {0xffff, 0xffffffff, 0xfff, 0x0, 0x917, 0x80000000}, {0xffff, 0x9, 0x538c, 0xfffff801, 0x10001, 0x3}, {0x3, 0x800, 0x0, 0x8, 0x705, 0x1}, {0xbe10, 0xc2fa, 0x401, 0xe, 0x5, 0x99}, {0xa17, 0x9, 0xd001, 0x2, 0x200, 0xffffffff}, {0x5, 0x1, 0x1, 0x0, 0xc, 0x7fffffff}, {0x5, 0x2, 0xa371, 0x7ff, 0x89b, 0x400}, {0x8, 0x10001, 0x6, 0x5, 0x100, 0x80000000}, {0xd26, 0x6d, 0x0, 0x81, 0x7a9}, {0xffff8001, 0x2, 0xedf5, 0x0, 0x1000, 0xfffffff0}, {0x0, 0x2, 0x0, 0x4, 0x9, 0x1}, {0x2, 0x7, 0x8, 0x8, 0x6, 0x81}, {0xfffff801, 0x0, 0x4, 0x4, 0x4, 0x1}, {0x8, 0x6, 0xd, 0x9, 0x34d1}, {0x2, 0x4, 0x0, 0x9, 0x0, 0x32d6}, {0x0, 0x3, 0x9, 0xc7, 0x0, 0x80000001}, {0x80000001, 0x6, 0xffff, 0x2, 0x8c5, 0x3ff}, {0x5b, 0x5, 0x0, 0xb, 0xfffffffa, 0x5}, {0x6, 0xff, 0x8, 0x2, 0x7, 0x9}, {0x5, 0x3f, 0x3e, 0x60c, 0x0, 0x6}, {0x6, 0xec, 0x7ff, 0x6, 0x0, 0x3}, {0x0, 0x3, 0xc, 0x8, 0x8, 0x7}, {0x6ef, 0x1000, 0xfff, 0x3, 0x9, 0x9}, {0x9, 0x28f0, 0x3, 0x5, 0x6, 0x1}, {0x2, 0x1, 0xe3, 0x8, 0x3, 0x3c}, {0x10001, 0x55, 0x40, 0x23b, 0x1, 0x81}, {0x10000, 0x2, 0x5, 0x6, 0x1, 0x6}, {0xba, 0x9, 0xf, 0x10001, 0x1, 0x3}, {0x5, 0x3, 0x5, 0x8, 0xfffffffb, 0xfff}, {0xe421, 0x80000001, 0x9, 0x5, 0x7086a0c0, 0x9}, {0x8, 0x24000, 0x8, 0xffffffff, 0x7, 0x8}, {0x8d, 0x4, 0x3, 0x1, 0x5, 0x3}, {0x0, 0x21, 0xffffffae, 0x49cf, 0x2, 0x83}, {0x5, 0x8, 0x6, 0x9, 0xf3a8, 0x2}, {0x2ed3, 0x8, 0x7, 0x1, 0xa, 0xfffffff7}, {0x79f, 0xea1, 0x7b3, 0xd, 0x7f, 0x40}, {0x8c, 0x1, 0x6, 0xffffff6f, 0xfffffffa, 0x8}, {0x2, 0x5, 0x11, 0xffffff00, 0x1000, 0x5}, {0x9, 0x101, 0x7f, 0x0, 0x0, 0x2e}, {0x4, 0x2, 0x17d, 0x6, 0x11, 0x7fff}, {0xd677, 0x7fff, 0xffffffff, 0xffff, 0x1ff, 0x3}, {0xfffffffa, 0x5c71, 0x400, 0x3, 0x3, 0xfffffff9}, {0x64be, 0x4, 0x80000001, 0x1, 0xfff, 0xffffffff}, {0x100, 0xf, 0x4, 0x80000001, 0x80000000, 0xfffffffe}, {0x777, 0x900, 0x8, 0xf7c1, 0x8, 0x80}, {0xa, 0xa3, 0x9, 0x5, 0x2, 0x974}, {0xb, 0x1, 0x101, 0x8, 0x7, 0x7fffffff}, {0x4, 0x2, 0xfffffff8, 0x9, 0x101, 0x4}, {0x7fff, 0x7, 0x247, 0x7fffffff, 0x8, 0x9}, {0x10001, 0xe15f, 0x1e59b109, 0x3ff, 0x5543, 0x6}, {0xffff, 0x8, 0x8, 0x1, 0x6, 0x4}, {0x6, 0x400, 0x3, 0xd7, 0x1, 0x80000000}, {0x10000, 0x80000001, 0x800, 0x1, 0xa, 0x25}, {0xffff5b9a, 0x2, 0x4, 0x18000, 0x9, 0xd}, {0x2, 0x5, 0x80, 0xb713, 0x9, 0x1b59}, {0x8, 0x4035, 0xffffffff, 0xd36, 0x10e5, 0x8}, {0x6, 0x270, 0x5, 0x5, 0x4, 0x7ff}, {0x1, 0x2, 0xfffffff7, 0x7ff, 0xfff, 0x6}, {0x5, 0xffff, 0x8001, 0x6, 0x0, 0x7}, {0x5, 0x7, 0x200, 0xc, 0x9, 0x3}, {0x75d4, 0x4, 0x8, 0x7ff, 0x81, 0x7}, {0x80000001, 0xffff, 0x9, 0xf361, 0x3}, {0x2, 0x7ff, 0x4, 0xa, 0x5a, 0x800000}, {0x3, 0x5, 0x2b5, 0xfffffff7, 0x1, 0x1}], [{0x3, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x2}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x2, 0x9050e580b08daa2c}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x6, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x7}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x2}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x1}, {}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x1}, {0x5, 0x1}, {}, {0x1, 0x752529d2fbc066e3}, {0x1, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x2}, {0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x3}, {}, {0x0, 0x1}]}}]}, {0x94, 0x6, "6d305bf4138c462af054a432cc112fcaf18b579c2af541a49ea88d5cf5bf2804b38b165bfc66de4b08112e16f691e76d29725968754f54308e0e234d8ecea5233adea99663727b70e5fe47a5ab0671b7e2467881ebe336a910c33d1c02d630e1276e6eb87406d3ab813cc87e6b5634d679f9ebb8d684ee0af64cb62a6f9975d5ae842ef62c0db9b93a2d689628bca25a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x168, 0xa, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc3, 0x7, 0xffffffffffffffff, 0x1000, 0x1ff}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x3, 0x7, 0x6, 0x800}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x6, 0x10000000, 0x5, 0xfffffffc}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7ff, 0x9, 0x2, 0x0, 0x99c}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x4, 0x10000000, 0xffffff01, 0x5}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xff, 0x5, 0x4, 0x7}, 0x0, r3}}]}, {0x79, 0x6, "c09b6d572da35756db9ec1a91490d5b58137121641817aaa54f28b8e22ba29485f78eb4afbf1063c4143f0672d0a36c36564b835f1881864fd6b126988f53e96ee57d64c146c82e4930d24adfb4f0424ce2389053a1b28136d63791ea12f42f95df8452685fbdd8258d1b7711236caf7a562780000"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_BPF_FD={0x8, 0x6, r6}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x6b10}, 0x1, 0x0, 0x0, 0x810}, 0x4000080) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000780)='loginuid\x00') read$FUSE(r8, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') preadv(r9, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/181, 0xb5}], 0x1, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newnexthop={0x2c, 0x68, 0x1, 0x70bd2d, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x4}, {0x2, 0x7}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x40004) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in=@remote, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x0, 0xa, 0x2, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x2, @mcast1, 0x8}, 0x1c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) 4m46.235735388s ago: executing program 0 (id=1357): openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400040, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xfffffffe) execveat(r3, &(0x7f0000000480)='./file2/file0\x00', 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r5, &(0x7f0000005980)=[{{&(0x7f0000000080)={0xa, 0x4e25, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12140, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x11, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000ff0700de000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000182b0000", @ANYRES32, @ANYBLOB="0000000006000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000140)="660f1bd366b8010000000f01c1baf80c66b8396b078a66efbafc0cec2ef30fc7f8dae93e363e0fc776fc0f01d00fb3ef660f38f89e00880f231b", 0x3a}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x99, 0x0, 0xffff, 0x10000, 0x7000, '\x00', 0xc54}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) 4m46.026547994s ago: executing program 0 (id=1359): r0 = socket(0xa, 0x5, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0x980915, 0x8}) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000000)={0x22, &(0x7f0000000140)=[{0x17, '\x00', @data=0x4, 0xbd}]}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x2, @broadcast}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x10}}], 0x30}, 0x0) (async) r5 = semget(0x1, 0x4, 0x39c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={0x24, r7, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) write$6lowpan_enable(r4, &(0x7f0000000040)='1', 0x1) (async) semop(r5, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x0, 0x5b7a, 0x800}], 0x2) (async) semop(r5, &(0x7f00000001c0)=[{0x1, 0xbbdd, 0x1000}], 0x1) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000540)="23ec", 0x2}], 0x1, &(0x7f0000000140)=[@dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x20, 0x4855}, 0x24000052) 4m45.136698523s ago: executing program 0 (id=1378): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mkdir(0x0, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)={0x38, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1a}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xa0}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xc40) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r3, 0x4) listen(r3, 0x5) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x1015, 0x1) umount2(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010101}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x40}]}}}]}, 0x40}}, 0x0) fanotify_init(0x20, 0x8000) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000180)={0x9, 0x30, [0x6, 0x7, 0x0, 0x8], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 4m45.076343763s ago: executing program 0 (id=1381): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000002280)='net/ip_tables_matches\x00') pread64(r1, &(0x7f0000000780)=""/185, 0xb9, 0x3c) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r2, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) (async) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f00000022c0)=""/7, 0x214000, 0x0, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) (async) socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000040)=0x38089, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002240)={'veth1_to_hsr\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x4, r5}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000003080500000000000000000032c0a42ee8465a5478513e4c096c52430300000a05000300"], 0x28}}, 0x40000) (async) r7 = socket$inet(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRES32=r7], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8}, &(0x7f0000000340), &(0x7f0000000380)=r9}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0xa00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000040)={0x18, r2}) 4m44.753401587s ago: executing program 0 (id=1387): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="400100001000010000000000fddbdf25fc0200000000000000000000000000000000000000000000000000000000000040000000000300030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000001040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000a000100000000000000000008002300630f0000480001"], 0x140}}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad"], 0x0, 0x8}, 0x94) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000000)) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x2d8}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 4m44.684996488s ago: executing program 34 (id=1387): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="400100001000010000000000fddbdf25fc0200000000000000000000000000000000000000000000000000000000000040000000000300030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000001040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000a000100000000000000000008002300630f0000480001"], 0x140}}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad"], 0x0, 0x8}, 0x94) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000000)) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000ab00200000e0a03000000000000000000020000090900020073797a3100000000900203800c02008008000340000000000c0004400000000000000008f4010a80240002800800034000000001080003400000000208000180fffffffc08000180fffffffd2c000280080006000000000208000180fffffffe08000180fffffffe080003400000000208000180ffffffffb9000100f9c4ff8f676100340a7ae91f7c392c916953657c2d7f8ceb389dab733df790ebef1190b323d973a678a46f2ea26534f0dc540a3c967903744d4a657904f3d94e661437762d41b88989d22c089a3e05e144b3c8a7df9adebb5e6f0b8601c7010a1beb653f83a1d732363e98ec2450520757ef47053c810bf72961d432f330b07e6719b2b3c98723c34a9a42d75d2797694a38bdc695fe3de85f5c71d547a1ed07c37e8b669a75949e229b978f33caa0af0f525a7a6d567940257c9b000000e200010078b68ae78e9ee8f3a43fb02ff7f9ef43f55851f1508f1b5e62f17d62ac0b3075e30d683a9bc293db931a3f9dae0150574be5f2f2a3e772336c98f96d4281f008189ec1c23b10ac8f4192a92813324d4df4034f78ab67348e71191987fd9a7b61ce8445a42867c8fa455a1df938d745ad154b4b7403d35c182bcf8ab521827a1595092a60a74233b76c20f5f19a5a6091f7d24fd3315a2126c9a80efa5961cdc9ef4b91bfe51aff055a5a150965f15bdbba9ddda6a1219ede917ecb6fe0831e7e26d393dcd3a71ac27645962583c98dba50f32197e77261a428747b0b55010000240000800c000540ffffffff8000000108000340000000020c00054000000000000000025c00008008000340000000014d0006404fb86080cc434314c3835f37a5284aa9f0a726bc35453c7ab0c7c028aa60fd744be22b1ec36376228bed976b3c04c7bb6a86f83bee640cc83f2491849d5b6832cd219bc28728d9f205000000140000001100010000000000000000000300000ac04201c64bcdfa4064c908d2fae65418d84c9c51672e3f71cbf0eece79360487b06b48cb4068e93f0f7c8f53d12696c01391735703fd90eca16fa8ccbc09194a8ff71732a4ddf5159e73cd80b4a024ff902e36"], 0x2d8}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 4m11.536853496s ago: executing program 5 (id=2027): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1000, 0x40}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x1000000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m11.535565965s ago: executing program 5 (id=2028): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0xce20, @multicast1}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) (async, rerun: 32) listen(r1, 0x0) (async, rerun: 32) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01864c2, &(0x7f0000000040)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f0000000140)={0x0, r4, 0xfffffffffffffff8, 0x80000000, 0x4}) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}]}}) (rerun: 64) 4m10.572928226s ago: executing program 5 (id=2044): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8942, &(0x7f00000014c0)={'ip6tnl0\x00', @ifru_names='vlan0\x00'}) syz_emit_ethernet(0x34, &(0x7f0000000140)={@local, @local, @val={@val={0x88a8, 0x7, 0x1, 0x2}, {0x8100, 0x0, 0x0, 0x2}}, {@generic={0x0, "ca3b550efe6a6b028bd5ae1ea9c06cf474cc8e34d93143bfece3d6941699"}}}, &(0x7f00000000c0)={0x0, 0x1, [0x207, 0xca4, 0x77e, 0xfa5]}) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x5, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) (async) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x5, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100), 0x4890) (async) sendmsg$kcm(r2, &(0x7f0000000100), 0x4890) 4m10.496111393s ago: executing program 5 (id=2045): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) (async) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) (async) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x2) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fsopen(0x0, 0x1) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x1, r3, 0xff, 0x7, 0xa, 0x1ff, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x1, r3, 0xff, 0x7, 0xa, 0x1ff, 0x1}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_CONTROL(r5, 0x40086414, &(0x7f00000000c0)={0x3, 0x8}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 4m10.436324023s ago: executing program 5 (id=2047): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x7ff, 0x12) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x70bd2d, 0x25dfdbfc, {0x2, 0x20, 0x2d, 0xcb, r4}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_RT_PRIORITY={0x8, 0x9, 0xe4b}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x4010094) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r5, 0x89e6, &(0x7f0000000a80)={0xc0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 4m10.164587258s ago: executing program 5 (id=2053): r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80901) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) close_range(r1, r0, 0x0) r2 = fsmount(r1, 0x1, 0x4) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000000c0)=0xffffffff873dc8d6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) socket(0x8, 0x800, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000180)=r4) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f00000001c0), 0x4) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000200)={{0x9, 0xc273, 0xab, 0x3}, 'syz0\x00', 0x37}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{0x8, 0xd4, 0xc0, 0x67dc}, {0x2, 0x2d, 0xc, 0x4}, {0x0, 0x2, 0x2, 0x45}]}) r5 = open(&(0x7f0000000300)='./file0\x00', 0x12200, 0xc0) r6 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000340)) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000480)={r6, &(0x7f0000000380)='@,){/\'\x00', 0x200, &(0x7f00000003c0)={@align=0x5, {0x6, 0x80, 0x9, 0x9}}, 0x6, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0x3}) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f00000004c0)=0x1) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000500)={0xcf4d, 0x4, {0xffffffffffffffff}, {0xee00}, 0x1, 0x6}) r9 = syz_open_procfs(r8, &(0x7f0000000540)='net/rfcomm\x00') ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000580)=0xb) r10 = socket$inet_udplite(0x2, 0x2, 0x88) close_range(r10, r0, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x2040, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r11, 0x6612) r12 = syz_open_pts(r7, 0x404880) ioctl$TIOCGPKT(r12, 0x80045438, &(0x7f0000000600)) read$alg(r9, &(0x7f0000000640)=""/183, 0xb7) ioctl$FE_DISHNETWORK_SEND_LEGACY_CMD(r5, 0x6f50, 0x8) 4m10.073026293s ago: executing program 35 (id=2053): r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80901) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) close_range(r1, r0, 0x0) r2 = fsmount(r1, 0x1, 0x4) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000000c0)=0xffffffff873dc8d6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) socket(0x8, 0x800, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000180)=r4) setsockopt$inet6_tcp_int(r0, 0x6, 0x11, &(0x7f00000001c0), 0x4) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000200)={{0x9, 0xc273, 0xab, 0x3}, 'syz0\x00', 0x37}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{0x8, 0xd4, 0xc0, 0x67dc}, {0x2, 0x2d, 0xc, 0x4}, {0x0, 0x2, 0x2, 0x45}]}) r5 = open(&(0x7f0000000300)='./file0\x00', 0x12200, 0xc0) r6 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000340)) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000480)={r6, &(0x7f0000000380)='@,){/\'\x00', 0x200, &(0x7f00000003c0)={@align=0x5, {0x6, 0x80, 0x9, 0x9}}, 0x6, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0x3}) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f00000004c0)=0x1) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000500)={0xcf4d, 0x4, {0xffffffffffffffff}, {0xee00}, 0x1, 0x6}) r9 = syz_open_procfs(r8, &(0x7f0000000540)='net/rfcomm\x00') ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000580)=0xb) r10 = socket$inet_udplite(0x2, 0x2, 0x88) close_range(r10, r0, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x2040, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r11, 0x6612) r12 = syz_open_pts(r7, 0x404880) ioctl$TIOCGPKT(r12, 0x80045438, &(0x7f0000000600)) read$alg(r9, &(0x7f0000000640)=""/183, 0xb7) ioctl$FE_DISHNETWORK_SEND_LEGACY_CMD(r5, 0x6f50, 0x8) 3m45.4541246s ago: executing program 4 (id=2500): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) preadv2(r1, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000280)="7800000018002507b9409b14ffff00000214ae04020206050a02040c430009003f000405100000000d0085a168d0bf46d389516a9069921a4b0005000a00000049935ade4a460c89b6ec0cff3959547f5000000000c902007a00004a324004001600040000d5808bd3e30a37e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 3m45.382995361s ago: executing program 4 (id=2501): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x39, 0x0, 0x1e00, 0x21}, 0x94) (async) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2, 0x25, 0x2, @void}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000108008000"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f00000001c0)={0x1, 0x0, 0xc1, r2, 0xfffffc80}, 0xc) (async) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r5, 0x9, 0x0, @void}, 0x10) 3m45.382021119s ago: executing program 4 (id=2502): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1e}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1e}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) 3m45.286289313s ago: executing program 4 (id=2503): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_LOCAL={0x8, 0x7, @private=0xa010102}]}}}]}, 0x40}}, 0x50) 3m45.200038962s ago: executing program 4 (id=2504): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000180)=0x4000000) (async) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000540)="00214797357e0e", 0x7}], 0x1, 0x739, 0x1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x1}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000300)={r3, 0x100}, &(0x7f0000000340)=0x8) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') (async) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r5, 0x8010aebb, &(0x7f00000001c0)={0x4}) r6 = socket$packet(0x11, 0x2, 0x300) (async) r7 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r7, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r7, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r8, 0xffffffff80000900, 0xee00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lseek(r7, 0x80000, 0x3) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0xc1d0, &(0x7f0000000200)={0x11, 0x8100, r11, 0x1, 0xe0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) (async) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x12, 0x10, 0x70bd25, 0x25dfdbfd, {0x1e, 0x1, 0x4, 0x4, {0x4e20, 0x4e22, [0x8000, 0x4978351a, 0x8, 0xfffffffe], [0xca43, 0x388, 0xe, 0xff], r10, [0x7f, 0x53]}, 0x1ff, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x34, 0x1, "5583658d28eafe5cc7cb5dacb69b1cfdb8dbc8e624dcec0ca5fa2216ba9f961c51a9a643e4350d028ab54c122bebd5c2"}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008044) 3m45.023232321s ago: executing program 4 (id=2505): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x40010) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = creat(&(0x7f0000000240)='./file0\x00', 0xa8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x104, r5, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1ab1df9d0ca7b80b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="8dd4ff1dd54adaa169745052f75ece2a38d6f5e90dd8763e"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="37a83b7b732266418ffc63c91a6d67c3f250e97aa2b429df06513c86dfe15b9b"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="ad9d6febcb5c72f950009148097f7182190ea16e6de5e949a8b3a9768890605e"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a6af9513e77e2713cfb7e51a9f6f54a13d35c155ab12156f091fa99890fec0d0"}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="8f36a9997384aa0610b7793c5bd18e3f67ef0292544b89aa8f613dfedf9690df"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="dce5696d629d5439596ec6cba2d76192"}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x12}, 0x4) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r2) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xb}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffe}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x819) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100001047fff00"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002800128009000100766574680000000018000280140001000000", @ANYBLOB="cd5e134eddb180e8b17edb25f2f06d8381addb795643d0c5eccdb833f05b5c45a869a4fbaf5d33ab064ef26186c59bff3201b066a92674922a9b683cac8b6c776c72165c26d9e34bee1ccd47bbd36ac6dd025f696bb5d848684752dc60f9ff64d364b23a879d0635d4fde18dc2072f"], 0x48}}, 0xc881) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x1, 0x8, 0x3}, 0x14) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r9 = accept$alg(r8, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)='|', 0x1}], 0x1, 0x0, 0x0, 0x40011}, 0x20048000) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x11}, 0x4000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x80}}, 0x15) r11 = socket$key(0xf, 0x3, 0x2) getsockname$packet(r4, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmmsg(r11, &(0x7f00000000c0), 0x2c8, 0x0) syz_emit_ethernet(0x15, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @multicast, @void, {@mpls_mc={0x8848, {[{0x4}], @llc={@llc={0xbc, 0xaa, "9a"}}}}}}, 0x0) 3m44.915378692s ago: executing program 36 (id=2505): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x40010) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = creat(&(0x7f0000000240)='./file0\x00', 0xa8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x104, r5, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1ab1df9d0ca7b80b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="8dd4ff1dd54adaa169745052f75ece2a38d6f5e90dd8763e"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="37a83b7b732266418ffc63c91a6d67c3f250e97aa2b429df06513c86dfe15b9b"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="ad9d6febcb5c72f950009148097f7182190ea16e6de5e949a8b3a9768890605e"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a6af9513e77e2713cfb7e51a9f6f54a13d35c155ab12156f091fa99890fec0d0"}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="8f36a9997384aa0610b7793c5bd18e3f67ef0292544b89aa8f613dfedf9690df"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="dce5696d629d5439596ec6cba2d76192"}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x12}, 0x4) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r2) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xb}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffe}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x819) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100001047fff00"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002800128009000100766574680000000018000280140001000000", @ANYBLOB="cd5e134eddb180e8b17edb25f2f06d8381addb795643d0c5eccdb833f05b5c45a869a4fbaf5d33ab064ef26186c59bff3201b066a92674922a9b683cac8b6c776c72165c26d9e34bee1ccd47bbd36ac6dd025f696bb5d848684752dc60f9ff64d364b23a879d0635d4fde18dc2072f"], 0x48}}, 0xc881) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x1, 0x8, 0x3}, 0x14) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r9 = accept$alg(r8, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)='|', 0x1}], 0x1, 0x0, 0x0, 0x40011}, 0x20048000) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x11}, 0x4000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x80}}, 0x15) r11 = socket$key(0xf, 0x3, 0x2) getsockname$packet(r4, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmmsg(r11, &(0x7f00000000c0), 0x2c8, 0x0) syz_emit_ethernet(0x15, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @multicast, @void, {@mpls_mc={0x8848, {[{0x4}], @llc={@llc={0xbc, 0xaa, "9a"}}}}}}, 0x0) 3m36.525825263s ago: executing program 1 (id=2626): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x2, 0x6, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) landlock_restrict_self(r3, 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1a, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x483b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x4c, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40402, 0x0) ioctl$IOMMU_IOAS_UNMAP(r7, 0x3b86, &(0x7f00000000c0)={0x18, 0x0, 0x7ff, 0x1}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002500)={r6, r2, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, &(0x7f0000000140), 0x6, 0x0, 0x1}}, 0x40) 3m36.34569286s ago: executing program 1 (id=2627): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1100, 0x40}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000030801020000000000000000030000011400048008000740bffffff9080002400010100005000300060000003ef2e8991f2b3ff155c46e48d34196c7d380c3a2cb1c04987a9ea09e45ab496934707ba1e414ab0ad5ea5f043148f1bd646e4631a3ab22b781267ee7572eef4b2e27ab2937bdffe2024dc1f33ed6f1578dc79272c5"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000100)=0x51f, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r6, 0x0, 0x4ffe6, 0x0) r7 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) r8 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x2) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0xc4, 0x0, &(0x7f00000007c0)=[@increfs_done={0x40106308, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000c00)=""/4096, 0x1000, 0x1, 0xf}, @fda={0x66646185, 0x8, 0x1, 0x3a}, @ptr={0x70742a85, 0x0, &(0x7f0000000500)=""/135, 0x87, 0x0, 0x33}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}}, @enter_looper, @free_buffer={0x40086303, r7}, @enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000740)={@ptr={0x70742a85, 0x1, &(0x7f0000000640)=""/219, 0xdb, 0x2, 0x27}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x81}}, &(0x7f00000002c0)={0x0, 0x28, 0x40}}}, @free_buffer={0x40086303, r8}], 0x18, 0x0, &(0x7f00000003c0)="01c0fcca19418d5f213e35e3954fc5dba3292be3bb5c7a95"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000bc0)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x0, 0x8, 0xa, 0xb, 0xffffffffffffffc0}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000000)='GPL\x00'}, 0x94) 3m35.476004918s ago: executing program 1 (id=2634): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x42c2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@can={{0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "17da54adc1ff3123"}, 0x10}, 0x1, 0x0, 0x0, 0x4048011}, 0x11) r2 = semget(0x1, 0x4, 0x39c) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x6]) semop(r2, &(0x7f00000000c0)=[{}], 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$IPC_INFO(r2, 0x0, 0x3, &(0x7f00000000c0)=""/24) recvmmsg(r0, &(0x7f0000003880)=[{{&(0x7f0000000bc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000540)=""/86, 0x56}], 0x1, &(0x7f0000000d00)}, 0xa}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000d40)=""/150, 0x96}, {&(0x7f0000000e00)=""/207, 0xcf}, {&(0x7f0000000f00)=""/24, 0x18}, {&(0x7f0000000f40)=""/95, 0x5f}, {&(0x7f0000000fc0)=""/218, 0xda}, {&(0x7f0000000400)=""/260, 0x104}], 0x6, &(0x7f0000001240)=""/4096, 0x1000}, 0x7e2}, {{&(0x7f0000002240)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000003540)=[{&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/16, 0x10}, {&(0x7f0000003300)=""/19, 0x13}, {&(0x7f0000003340)=""/58, 0x3a}, {&(0x7f0000003380)=""/2, 0x2}, {&(0x7f00000033c0)=""/52, 0x34}, {&(0x7f0000003400)=""/10, 0xa}, {&(0x7f0000003440)=""/214, 0xd6}], 0x8, &(0x7f00000035c0)=""/12, 0xc}, 0x6}, {{&(0x7f0000003600)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000003800), 0x0, &(0x7f0000003840)=""/52, 0x34}}], 0x4, 0x0, &(0x7f0000003980)={0x77359400}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYRESHEX=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) clock_gettime(0x0, &(0x7f0000000b40)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000400), 0x9}, 0x5}], 0x1, 0x12180, &(0x7f0000000b80)={r5, r6+60000000}) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000140)=0x2000) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10000000000204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r8, 0x0) ppoll(&(0x7f0000000040)=[{r7, 0x20}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r7, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000000)=0x4000) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x24000811}, 0x40) 3m34.595731291s ago: executing program 1 (id=2643): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x2, 0x0, 0x4}}, 0x2e) r2 = semget$private(0x0, 0x20000000102, 0x0) semop(r2, &(0x7f0000000380)=[{0x2, 0xffff}], 0x1) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000100)=[0x81]) semtimedop(r2, &(0x7f0000000000)=[{}, {}], 0x2, 0x0) semctl$IPC_RMID(r2, 0x0, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x300, 0x0, 0x2, 0x9, 0x0, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0xe}, 0x300, 0x0, 0x2, 0x2, 0xffff, 0xb}, 0x20) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) semctl$IPC_RMID(r2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x40, r4, 0x1, 0x1070bd2f, 0x4, {0x5}, [@L2TP_ATTR_COOKIE={0x0, 0xf, 0x7e84}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_COOKIE={0x0, 0xf, 0xfffffffffffffff7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x800000000000009}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) timerfd_create(0x8, 0x800) r6 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r7, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000000)=0x1) write$dsp(r7, &(0x7f0000000480)="75d512d39077459e67ee110daaf0413bc745ef85bc9f2141d513969bd8000000", 0x1000c) 3m34.446064109s ago: executing program 1 (id=2644): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x5a201) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(0xee01, r1, r1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xfffc, 0x0, 0x6, 0x0, 0x0, 0x120, 0x2000, 0x0, r3, r4, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x400400, 0x0) r6 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f00000007c0)=0x42000401, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r7, 0xb5d6) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000006180)={0x540, 0x2, 0x1, 0x301, 0x70bd25, 0x25dfdbfc, {0x7}, [@typed={0x14, 0xd0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @typed={0x8, 0x159, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x11, 0x41, 0x0, 0x0, @str='/dev/comedi3\x00'}, @nested={0x1c3, 0x18, 0x0, 0x1, [@generic="32a453e9b8b8369cfbd81b05c38fb073204acc5718acf5e611c898aa1d379446a5fef94034225b58b5cc1681920bd0ceda58bb1e5f5210c5b613f57f6df5c724a9204a98160ae604bef3380f36afb7d15893b6ce93c1c5f39692a20eb2b65ae36608878b1761", @nested={0x4, 0x90}, @generic="b875b0cbc1db5c44643cb50154f70b06c6d3cfdc10086fae88a6eb9113f43bd1f9be435704d84ffb14de4af2111a0c5c6600d6d154b3e459bf30151c546b7e0014950bda444c0d28d68be31a6951211ec180f90e16c5ab5f337f5061839763e19aa0e30dc315969a06345522e4fb4d68571cc709a6cfa562194507bbcc", @typed={0xd7, 0x52, 0x0, 0x0, @binary="efafc01fb2fcc9fb897564df8ec42fd810ed0b46f404e22bcd7006d0bffa6fd06e2a531049166d54c6201d52ff78f69fa60347fd5909c1d637a479078631debe1baa1517c164ad95a96381c25ab6776e45f7f19063adc1835e36a31ad6adaad205e7d2ba8ed72e77d209e0c87b114bcf3088b7946861f002ae6dea417996a88c499dfa8d7e198a254530dac4830c0ddba8ade674b8e934ebcb88e8083c6298124b0e6d8873ca2b1623197c405b6829cce5869972ffc7e398ce724023422a7231b07ddfdabcfc05605ca04cf3ace20cb07d7dbf"}]}, @nested={0x160, 0x4e, 0x0, 0x1, [@typed={0x8, 0x104, 0x0, 0x0, @ipv4=@broadcast}, @generic="66a7d47e3e9ab846fddd8a2c0b90dbdc1cf351d136eeda62e7f5f77f42b69960d1ccb1a291ad26c550e589a3687a914986715c9a05981fcacad67b52f08f47dc31dd8012d2617e3a69d407f14273d14948a59f3289a5bed28ecb3b346d046d9c9ce5", @generic="42e4c369ae4ebe40d668e0f69551156c17eedab7d186c5d8c876832eaf22faceeab5d5af8dd9e3794dbf4cda0e60e942e28f469a", @generic="0ddca9ca5c59714543a583eb89391f025a16a3ae9962097f84e192cf0cfa55d02182bd2459cc5ee1e5b7db4133f1faccdb983df35666d06b24e5d44ae742de632b1b8d3aea1e3e8318d25018b5873f5114b933c1695d14d4562df0b118b27b071b8755dd6637649cdc1857aee7d37b925a1f16517480b330e43e718a9ab1c2e3eb3ba5f831887151e5cbfab5a734032055cd99b4ca22edd06412a734dc1690e9d6e7cbf3cd1ed43d34a67b2c8edf6c155924e469c02d2be969ef2888e039"]}, @nested={0x1b2, 0x84, 0x0, 0x1, [@typed={0x7, 0x7c, 0x0, 0x0, @str=':)\x00'}, @typed={0x8, 0xc1, 0x0, 0x0, @uid=r1}, @typed={0x8, 0x53, 0x0, 0x0, @uid=r3}, @typed={0x8, 0xaf, 0x0, 0x0, @fd=r5}, @generic="0b34b7be13489493583723b44c81e89e7a5b5b1cadcd6c2782cf532c490ac3c90fc8689fae1eb08797c802b41aab06017c6f86ba0582f211397591600c3c2ea94cadafdb3819f03834135b8e72266a5b9e1c66ad56cbb389196677118ca5aabc117237f8d0f3c0f0b7ac2ca0473ae5850bfcacb7d069643c0fc948363b82792c5568d06f96a7b54e8c4fe5692aa8910b613f32b5983064a35aa9b8be9b01e3f2fce2aa0624d5dbd2c78ee18bd89ba402bfdea44f1a19cf7a077e1857047a", @generic="8a89d6", @generic="56a00773b8aa1e309f6a0f43a0a8e00d568699e4969230c0156cc42c6e39bd4c862d0cdd37e45b3a1c0ee8f57e3cd0efb05ae347864c313e4d9a21a6e255b2ab599265acb9d718f2ef8aadf4023af163c292859f6091471815cebfd9449bfb7e7d1180126bf3a3646e264b2fa47e98fbe914cd0416733c8528ee5819b0862738e6063c17c8d42bf84bd380e31be6cbfae87dc753438f031b41ae018f38bfb3427081f6d4b0a1e7c809f9c95c60a4cabcef85598fc7265699d35a865c6b4ec493ee5be765e8", @typed={0x8, 0x7f, 0x0, 0x0, @uid=r3}]}, @typed={0x8, 0x150, 0x0, 0x0, @pid=r6}, @typed={0x11, 0xcd, 0x0, 0x0, @str='/dev/comedi3\x00'}, @typed={0x8, 0xe1, 0x0, 0x0, @u32=0x2}]}, 0x540}, 0x1, 0x0, 0x0, 0x8880}, 0x4000081) fanotify_init(0x60, 0x0) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000300)={'pcmmio\x00', [0x4f23, 0x2, 0x1, 0x4000, 0x1, 0xd, 0xa, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x4006, 0xfff, 0x1, 0x6, 0x105, 0xf7fffffe, 0x1, 0x2, 0x1, 0x8, 0x927, 0x2, 0x401, 0xd, 0xe69, 0x6, 0x10008, 0x6, 0x1cdc, 0xfbfffff8]}) 3m34.152468725s ago: executing program 1 (id=2647): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x80400, 0x0, 0x80}, &(0x7f00000001c0), &(0x7f0000001540)) (async) syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x80400, 0x0, 0x80}, &(0x7f00000001c0), &(0x7f0000001540)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) setreuid(0xee00, 0x0) setreuid(0xee00, 0x0) (async) setreuid(0xee00, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) r4 = getpid() syz_clone3(&(0x7f00000014c0)={0x200000000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), {0x21}, &(0x7f0000000380)=""/4096, 0x1000, &(0x7f0000001380)=""/237, &(0x7f0000001480)=[r3, r4, r3, r3, r3], 0x5, {r2}}, 0x58) socket$netlink(0x10, 0x3, 0x9) 3m34.066262302s ago: executing program 37 (id=2647): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x80400, 0x0, 0x80}, &(0x7f00000001c0), &(0x7f0000001540)) (async) syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x80400, 0x0, 0x80}, &(0x7f00000001c0), &(0x7f0000001540)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) setreuid(0xee00, 0x0) setreuid(0xee00, 0x0) (async) setreuid(0xee00, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) r4 = getpid() syz_clone3(&(0x7f00000014c0)={0x200000000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), {0x21}, &(0x7f0000000380)=""/4096, 0x1000, &(0x7f0000001380)=""/237, &(0x7f0000001480)=[r3, r4, r3, r3, r3], 0x5, {r2}}, 0x58) socket$netlink(0x10, 0x3, 0x9) 2m35.758040995s ago: executing program 6 (id=3564): r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a00050002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) 2m35.755908008s ago: executing program 6 (id=3566): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x10b643, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x604000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000140)={0x0, 0x4, 0x1, 'queue0\x00', 0x9}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x402000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x30, r6, 0x2140dcfffd4d4d7f, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "2635eb6f2d8ab086368aa4cec5d828e0"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, r6, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x32}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x60}, 0x1, 0x0, 0x0, 0x40008c1}, 0x880) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000640)={'bridge_slave_0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@bridge_setlink={0xb0, 0x13, 0xa2f, 0x70bd2b, 0x0, {0x7, 0x0, 0x68, r10, 0xc40, 0x27025}, [@IFLA_LINKINFO={0x90, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x80, 0x4, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x7c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5ae7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0xfffffff8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x200}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x10000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xb, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x91, 0x7fff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x5}}]}]}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x2404409c}, 0x40000) r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd29, 0x25dfdc00, {0x7, 0x0, 0x0, r14, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NDA_VLAN={0x6, 0x5, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004001}, 0x4040004) r15 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r12, r15, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="66b9200001c00f324f3066b9800000c00f326635008000000f300f01d72e363e0f01ca0fbb9d0e0066b9820000c00f32440f20c066350d000000440f22c03e3e0f01c4c1ef00", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000480)={0x3, 0x4, 0xf50}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000300)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}}) ioctl$KVM_RUN(r15, 0xae80, 0x0) 2m35.134986653s ago: executing program 6 (id=3579): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4c001}, 0x4040095) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/97, 0x61}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001540)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xffeb, 0x1}, {0x0, 0x5}, {0x5, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x300a, 0x5cbf, 0x7fffffff, 0x7}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004004}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)=ANY=[@ANYBLOB="140000002e00f10326bd7000fdffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044080) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000019c0)=ANY=[@ANYBLOB="200000002e00090027bd70000000000004"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) recvmsg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0xba1b474e0b1c775a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c00000010"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x9, 0x7, 0xfffff001}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 2m34.755728288s ago: executing program 6 (id=3580): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000003480)=0x2, 0x4) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, r2, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfffffff7}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8315}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x1) 2m34.65468416s ago: executing program 6 (id=3581): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00', 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x196) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x201, 0x4000003e, r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x4, 0x12) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000240e2000010000000000000000000a801002000000011200010014000100fe80000000000000000000000000002d08000f00ffffffff14000200fc0200000000e574fee02ffa0b3dbba9ad000000000000000000000800040004000000"], 0x54}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)={0x20, r7, 0x301, 0x70bd29, 0x25dfdbf8, {0x24}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x27f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008891) 2m34.54069677s ago: executing program 6 (id=3583): r0 = socket$inet6(0xa, 0x3, 0x5) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x8d}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2}}}}}}}, 0x0) 2m19.556531515s ago: executing program 38 (id=3583): r0 = socket$inet6(0xa, 0x3, 0x5) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x8d}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2}}}}}}}, 0x0) 1m1.172749773s ago: executing program 8 (id=5219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a3200000000050004000000000005000500020000000500010006000000140007"], 0x58}}, 0x20000000) 1m1.104149569s ago: executing program 8 (id=5220): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0xdc47}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x1000, 0x3, 0x71}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r0, 0xd44, 0x44c1, 0x7, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) 1m1.030360094s ago: executing program 8 (id=5221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1m0.635545314s ago: executing program 8 (id=5224): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x3243015, 0x0) 1m0.512256532s ago: executing program 8 (id=5225): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0x481824ec, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x42000000, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0xe000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x436d, 0xc000, 0x2c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m0.187850673s ago: executing program 8 (id=5229): unshare(0x62040200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000002000018787000000000000000200000008000a00ff070000080004"], 0x34}}, 0x0) 1m0.01026515s ago: executing program 39 (id=5229): unshare(0x62040200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000002000018787000000000000000200000008000a00ff070000080004"], 0x34}}, 0x0) 5.916341712s ago: executing program 2 (id=6240): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_open_dev$evdev(&(0x7f00000002c0), 0xfffffffffffff001, 0x38000) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000340)={0x56, 0x4, 0x2, {0x4, 0x3}, {0x9, 0x7175}, @rumble={0x42b2, 0x3}}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x0, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x2a, 0x84, 0x0, 0xb}, {0xd000, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x4, 0xfa, 0x5}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x0, 0x5, 0x5, 0x4, 0x92, 0x49}, {0xffff1000, 0xeeef0000, 0x1b, 0x7, 0x1, 0x40, 0x2, 0x10, 0xfa, 0x29, 0x9, 0x9}, {0x9000, 0x40000, 0xf, 0x9, 0x5, 0x1, 0x7, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x4000, 0x1000, 0xe, 0x0, 0xad, 0x2, 0x5, 0x4, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x10000, 0xc, 0x0, 0xcd, 0x5, 0x5, 0x26, 0xa, 0x6, 0x1, 0x6}, {0x1, 0xeeef0000, 0xd, 0xe, 0x13, 0x3e, 0x3, 0x0, 0x9, 0x5, 0x0, 0x8}, {0x100000, 0x405}, {0x80a0000, 0x81}, 0x60000010, 0x0, 0x40000, 0x61, 0x5, 0xa800, 0x800f900, 0x0, [0x6, 0xfffffffffffffffe, 0x3, 0x1]}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f0000000100)={0x1ff, 0x1, 0x54000, 0x1000, &(0x7f0000001000/0x1000)=nil, 0xfff}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b031407e0ff640f0212475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r8, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xea}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0xfffc}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20044800) 5.714720261s ago: executing program 2 (id=6242): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f00000000c0)=[{0x1a, '\x00', @data=0x8, 0x7fffffff}]}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x101101, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x7, 0x6}) 5.713477105s ago: executing program 2 (id=6243): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000022c0)={&(0x7f0000000380)={0x8, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000140)="08003b117c12383dda", 0x9}, {&(0x7f0000000780)="91f5b382b75355dc8ffadbe16344c65234a3a20e1bf591e2070c5aa1219e794fb8c88410a31010bed555b89ed162834f8825a1c0a151573ccdb50370c86539cc834273185bfc17b3a37862ed25aa0e9128cfadf103edaae32fa2f3190423cd7a685b6b2fc3b74fa172da3409539b960148e086a4af98c7a39a233d8aa78febe8e4e8d7a2cfc07a1f95aabf63eec060de16c89666760a25512fcedc0e1731e50f654c4cb26a60fff49f1da2d21e28733aeec32bb7e2d04612251e5cf2c9e05021a3d5e9ffb8ea59ef0196ba958b2f826ffb44dc0b21af035f77043fb8e5ed6afd0f1dfb2e854c388905da2f7d0d1ca480eb2a7ee2a8c245bf87ec5bfad2db9cecc9d228e14772204663f40ace34d6858f8bb718651db01a17d3907674c31cd59f5d3a77ddce6e5bd317842ce08c61ad60fce8667d38b8bf8f63db5bbfe3b89e2ba41809b8b33c6068f1eb2b55d2f516cc26b6ae48cc6782faebc39ec690a7e38607561460c42f18bc21a84cac1ca320e368e14490d77f9cf176e241b889a1b6c9331c189becfcb3c119e0c5d59ca79d54bb88584fd625f4e93411a2c8d39ecbe8dcec3804c744c230f51dfd29bc76e8993093bdbadf3d05e4073223418cdf9966b038e9cd6c293ddf6eccbf06ccaabe0c6601044cb92b53c7a16c1bc47717b179d3d4108ca903385295676764cd946287871de89355746ef30f83191bc1b019fc04eee28b801fb5ea6ea87cae0aa3063bef9ce936c21b5cc9c742cee7e69d28d23fd26ebbdfff5e33cd4a7587a7f0c2a364afbcebe01fd377d28afc0c9317e2843857ffce30a3cca79f78c4ed59c859011d99bc3b566ed7ab073a253a09c701a8c1da38669b224411f5c6a4020a56f9182aa9643055551220c97b4a6e4a95f2d9acecf2e7a1e83e71472e80131b0df03eeed4dcbaed433981761c518d3ad67321972ea1b44ceed8976296ffc773e130f4b789de3cf27228f2d2e836014c8af150f49cc380722ede78bf3b3b77dc22e0e24736dc996533cdd802ac576796b893a3f53ea4d30c344ae97260d00a85d8f6c742693b8797ce54682171767e96b3a4c8d4d3cf52f354680e11b156374335eb08c02fa6c45cc631db09cb9a458e5bc5aa10d89ca1201c0b5e5f82d85917680c23161cde906ae25ed5370c025a7412edd2c15fde413718a9d951020809283898ceafb739a79076625494fa7397c8f6b422d4467a03ad76b43b9f11085a118e568c5fda3f5616b53918a16b3a681edff65653a187329eb02929a4f55cd6cff8f5efc1126a2ba06078a24ca2ee63ccb9389457f88d90f74dac2a6ca172248251a399d745766e1bcfe8c45b005d8f6f5668384bcce9a26b0b2e499b1f9552a46d6e5932382c9b000f20555a00f4c51892ec13fe5fd2c89619f5e6b8c781f30e330d4e2c4e8e7af9001d7ffb1528a3a850c1d2b37a6e02cc5aff49861e9b32f57e4cd55c918eae90f8396f4034f3e316dd9b9c40aafd13ee9aa6a0a7c9d167f04d682bab152455cc74e4adca7b464f71c8e2dff826a98793a335f43d9e71d0efd79974efaaf233b6a60cb85d6b1ecaba42349dbc9143bac74661d1fd10a97e3ace31a3bebd7c3d1f0a3f7b7d6df9eef73960965fce951e5674e8076217f3e259e0835a060f8d67527228fcb4a002f0eeb27c2e46c0e19bce6d08181a118f482b25bb562e1434e3fecef8b36591dc7beb83f9647410ac129060e1de8a000268e6686f92e1b0fd3ff87d2bf8c5e58de0e897471a462520ce843f806884db140fd208d1dbe8db1ac00bcf9a6b030a54bcca8255a57dcd02db68d2988016fadc9b85d945785b92b66075f44cd232bc20e7bde7cf40711f1200dd6f70f8ab7cabcf05f7bfe3d31c436346bc72a84cfe30672084f05d6a4fe8308a175e570d9a85cb286790244933ae4156e80c5765b31d0783939f6e48befde5881fb51e6ab3a26100a64af4cd63569f81f92179427b5a5f9d5a2b689ffd55c71057045d77b33d5f0001b54a2014657167f546b244bae451c580fc4c7affbdaa2a2887812ce58068721131c29c128da8583ee0488f9c00020000b30998c56eecee0a4210593fb367c2c8c9788349c5682047ddbfc33469e29bf021a7cfed22bc5dd8dd87082db150c02ffce2cd0a723ee1c90a9d29d3766c110eb8fa060d752ed70d6d1c2deaf33c1eaa5196f380738a4bf2ed1190454534216ba33ee8f2c70fc4552b4101799dba130ffec4cbf99f42c362f20bbe42a6e4d97c3ca22b70cef23f9b2dd21cabf9cae231a897596c353d2e1ce93a449eb7367a9b5531927600e61286cf68fbffd66d8ddec18ef6525d96b93e9b428a9fca7645392799c9336eff4786422b2457a0b02c113ed8321a44a539d939e3559e5cc4f3a436a988bf8535603f8fbba2eead18086c8db5a9e61d88656c5d243ebe283b2fb87202bfacbc0be2277083074c18e737eb9a2f8706be5de3276ad96f28d5d2bd37b1d0db9a3ca8c101cb38c6d3c1d0350e181e5c70ef12ab10550bcdc90e4c1f2d3715fcde9abb6a068460cc3e075a6be0066b5f98eaf11a5b07d2903d9706cc7e8b2f21f483db71b46180f34042842d9f979c04cd80a7f75c9c458827996c3f53906648a70daf14cc34cdf39a5d66f0a817a8a635c58abdc1f0d24feaaed433b4c928ad5348d1c207626296d65518ab6ee828634f96e8a3fa5610d91b12d74bfd4fb93a73fe2d9cb0fe7e16a6e22dbd01abd0e6c864d620cb76a0967440d03a436f95e6cca010cda1695e2c894c9d1adbb08d0e3cdc8db8f4defd0460ec92a02721ab205c887f880cb751f1a114c8bd28dadc9f5703f5e6e2a0b2ff62acb6426354392ddccdcfb4e784e28cad88d5d47282d1e4400ca49d08b40ff2aa248650325a931d191b1a3a329181f14e31805d50f0d4278a86f2f94a4f14fd7556e9b41fea9f31cd84d8fb5c6c611143a55ace96f70e79e65ca4234e7425b45d23de744e466689268ade7fd5e3a57339775a9b3c355d70bbe5ee781f695ea16a076f74a8a31eb61c649d970add1dbd4326cc7e854bbda920de94c3b019f2a7db0b77844fadd01a2b5e5b3ecf3b588a77d626e649c21bb2dab5c2908ebbbdc1bc8bbcaaf9a4d741b5bba4714d9e934c8f3e2202e3dac9021b0ace2db6dbaefde4bfc639700d42030f23ef14885ddafddace797161b618fe7ef342bd244f41f0bc185a01e5c2a4100d574a7b280dc50a9f12d8c7803c8654718207a8eecbda80e8717b7a0a1b0b916a756de32cc456fe9fc32cf2dee803793aa280879757cf3f19896139d053af80e496691a6ace5661155d8ed54e4e71a5f02a68006635db89e61662918066d2a9b68f1ea5ee873af8762d59ec8d6ca3d7793835efd4e1b16f81859688d351323c0b7650f5fd80369ca9c4724f7b1402b6a00d7ef89ffd6e5b544af34b0ab56cb22cfc4f4825300d33ea6038161bebb19e9bd256b7db15c37f24e3157a77b00ac2c089ca8ec55caf581f227b65c1a24b0c073f78666220ee7efa6372d7cc0b881c4aedcdd68f19718552fc6a35219970919af7c7e96a9936f510b11a77c01bf08cfdac90f2bca365e8d3ead55cadb5a96c74e37715f2c9a3394a704d1c37162253f48250a8114cf863cc868c562a982a486df82e61c229c8b7ea3263541489086002b92a8c3ee9497154e2478a14adf20684d97c4cba1ccdb80dcc9ff129887b4e73bfdf508548c28912bcead514514b12b55b2c275afe7ae51cfd7e8b47218abdf29373688056d2ffa102e3e678a779bcc3fe709b45117dacf2927991391a46d03b7809da65000eb200ae198942192e530fd01f9ebd4be56a57c8d5875d8274d72879512c9b8088fdf67e7f51afd521c6a8af02eaf823fd1a5f8e972308df586770a4d7a34480de31a5c6e2f7228ab4a8fadfb17ef082c04d90c980bae2f2b49cf0f5359625c223aecc36986339dbceca42bf3c1eae7a6521738f94cf0084f75e281855c5b3851533776d7230f600193e5dc3b00783c04adc2392bffd636d9c396b5d0cb6be9d27a28664a3c50a2d88875444774edc80da0689aee42c4cb8bdff5ece54a55980276ccbe593202dafddedd07a67ce1b5fc9aafa8d36f5f120e2b688223e59ebb1fd1aa849f05c744b9bc45f731a0bc05095ec89023cb33a28285d532d18da6a9b7293098168c8dfabbf36fba4787010418af5c8634099f015c2e5e22d760e25f7435c98b0b562f40059ee105e68260e4cf00a828d0753a2e2112c3df8a5006b2ec0a6ded1dd12380b96f875ee9d76a0b2db337c9812ecac8e3ce1a54a28d7affdb6abadc9e09ca593904f6e47ad11abe9414792e1b01013449d8f540d4e027a5ed28443eef456714b91fe9ea07eb7e6a1030f96e9453e3c7f1d632b2b993f20f5459dd98dc7e196d4ff363132477650f5933754a0dc64e1fab98533e43734f24168aef05f0a92e1f62532e3d5e4476efdb972dc1901cb375003d26f2122791b13c3953187e3618d1b6850aeb6830183b468e84c0c9d05e67cab9d7e890059f50ac2eaced08d50602c2fac37cf79d3f737547f5fa97291515bf933f5dbf4feb9d2ca9cb2b33955ea3c2777400f54d10d9fdc605a173cfd847ebd4c8183c6e97ce04c920d667380fb1c9ed52aae94ea11e8dbb3385863172d7edcd2717fc90277af64dce295225405dbe24bb2c5e8e52294680d7482503d1e1a6bb8c9c074489234e637c6123360e5340b453f57f7472578783112db12fd36c9b302a27644c237c4d3a9d678e168c8f1271843dca989c2e142d6665a47aad34a70ef2c67c86c3874a45f6ded041540afc5fb447003e6ae5762db3e852e0b17d8554d4a389b98cc833031e04f4af8cc508e61951f28a53965f0e628f08446ce2a55d3adba6d429eaa56ee4df0d1a7326e0300e2f6d8dcd9d0104b98b2fcd9091e2c8d7b8c74d3531fa42065f3c9a0412e48caad5da90f5d827dc429e9a82a75cdf2af997f6940820bb984aa4b73b0481f431cbf9c8f873a12cdd694491aaea82379f1024289fe86847ce434a12043c3edb5d776eaefda4301a42c40232e1269c7c0c47929d30ddc65f101be29e5453d78087c1631e78295823f68c4ce65d542f761483ee4576276e61e5703f0ed4b08cdc228f03fede47513f84f41e8658df605d2cc626bb35887798cef9f46f6ed3e639adf37d97874557abc36401efd185add3e190893727e4481dba6ca32dca057a8d7f3eec9f0813ad093c71b258d8677eab4b98c2e5f489a7e02c974f0d21b1bcd618605f431bd3831e1ab8f2955b3a2ecf337e41a2aca1d417e01aba344decf2f5010635fd3e2d00c91803a66bf01f04400b7ebcfd6c4232018af4c0d4a3646dd1ea0661d80ecf4ebf3069147505a2df4bdc1a6c0f68491fcfc9ba6229a7adad7d0b1c17c168036db04dc8ea732729ebd20aab36ae8a8ad0d9d57df7978194f913f00d4cefae1acb8c54b18fa2669c3fac48affdd1b6463e1144ccf384e60f2e1cc8bf6d3cf694b519957af66081bcae49f34a7ba426494d9efdae5633d6b68d95084914b50d6edf0860072f0841507aa1c639fac220aa93bb28348737fe24c65237d7100da98f6bdb3ed81dd30126a0aaa7969328c27460d79693ffc8d56779f03f79636b72229dd546924bc9aa5668bbd8deece616a32dc914f98933f956267e738a7e700d922801dbc87fade3a99247c9b48fef7a066013e71cf845e8c527ea695d713750f29140740a0d15318609cb1cb5bd35f1f974bd941f663ef83c831f4a0b77e9ccf54a2489500000000000000", 0x1000}, {&(0x7f0000000200)="39062ffd1376a633299dc9ae65582c3bdef1452a5735c18d10263395872eb88ce8a47751ae49c2daaead6262c863507e1414b6de6f2838e02d339bb95617013a3f5dbb52a58a845c4a6c66624a8e3f9bb5ccf4b01aa9d909016af5676642b7e4ee12d16d", 0x64}, {&(0x7f00000003c0)="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", 0x11e}], 0x5}, 0x4044880) 5.626952457s ago: executing program 2 (id=6244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.62421791s ago: executing program 2 (id=6245): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, 0x0, 0xc8) dup3(r1, r0, 0x0) 5.542795113s ago: executing program 2 (id=6247): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000340)=ANY=[], 0x4) 2.239042121s ago: executing program 3 (id=6284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x870bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xce17}]}}]}, 0x44}}, 0x2) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00073c002400000000ff8800000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 2.129930036s ago: executing program 7 (id=6289): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.129609055s ago: executing program 3 (id=6290): socket(0x400000000010, 0x3, 0x0) (async) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0xfff1}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000008, 0x38011, 0xffffffffffffffff, 0x2c8ad000) 2.128872387s ago: executing program 7 (id=6291): r0 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x121}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xa1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.047256821s ago: executing program 3 (id=6293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES16=r1, @ANYRES64=r1], 0x54}, 0x1, 0x0, 0x0, 0x24008005}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000040)=0xfffffff8) r4 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r4, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x30}, 0x4000010) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_emit_ethernet(0x32, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004500002400000000008890780000681d000800c1060799ac6b7481457b609ff299f70000000000000890780200000000000000"], 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0xa, 0xfffc}}, [@TCA_RATE={0x6, 0x5, {0x63, 0xb8}}]}, 0x2c}}, 0x4000010) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r8, &(0x7f0000000180)={0x2, 0x0, @broadcast, 0x2}, 0x10) ioctl$EXT4_IOC_GETSTATE(r8, 0x40046629, &(0x7f0000000100)) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000400)={0x0, @llc={0x1a, 0x30c, 0x2, 0xe6, 0x6, 0x81, @link_local}, @l2tp={0x2, 0x0, @multicast1}, @vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x52c5ed08, 0x3, 0x9}) r9 = socket$rds(0x15, 0x5, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x610302, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r11, @ANYBLOB='\x00@', @ANYRES32=r12, @ANYBLOB="e0005a800c000080050004000000000030000180050004000100000014000500010002003e00ff00ff0701010900cc00050007000200000005000400020000009c00018038000200151e493e4132380300510e0f0d332c03203040395737102852162f384b171a1520293b0c2e22124e39174018241b00411b1110100500070001000000050004000100000005000400020000003e0002000b3d2f420a2005153618203d4a430027293a3a331c3f2f3c382c043f1a4d401d452d323919332810423a571e18510e13204f050c1b003a48040e0000050006000200000004000180"], 0xfc}}, 0x4015) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000140)=0x6) ioctl$PPPIOCSFLAGS1(r10, 0x40047459, &(0x7f00000001c0)=0x4000) pwritev(r10, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x6}], 0x1, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f0000000000), 0x4) bind$bt_hci(r5, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0xa) 2.047012394s ago: executing program 7 (id=6294): move_pages(0x0, 0x3, &(0x7f0000001000)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x800000}, 0x10}, 0x94) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000006800000068000000040000000000000005000007"], 0x0, 0x84, 0x0, 0x1}, 0x28) execve(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000010c0)={[&(0x7f0000001080)=']m\x00', &(0x7f0000001100)='\x00\x00\x87D7\x9f\x1f\x19e\xac\xf2\xb0\vT\xed\x88\x80\x00\x97O|\xf8\v\x9c\x91I\xb4\xb5V,0g4YH\x8e\xef\xe0Z\xbf\xf0\x98\x93\xf8O1u\xe5\xe4:O?\b\xddE\x8d\x8b\xaf*\xf5\x92n\x8b\x1dr\xe5\x87\x15\xcf#{\x7f\x15\xc5@\xe5!\"\xcb\x19\xc4?\xb8o\x86\xa1\xb8\xf1\ng\"\xe7\xa8\xe0\xe1B\x87\xb7a.\xe9\xc6\x17\xdd0\x908Y\xf7\xfb|\x18\x85k.\xb9\x97J\x88\"\x03TQ7\x039\xc0F\x83-Q*\x18\x10b\x1a\x95u\x85\xcc\x81\x1du\x87\x8f\xa5a\xf8h\xe3\xf5\x03DY\\UO\x1e/J\xd5\xd229r/A\x13\xed\xd0\x18\r4\xd9\xc7\'\xce\x1d\xa2.\x93\xfa{w\x90T0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) write$tun(r2, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) fchdir(0xffffffffffffffff) r5 = io_uring_setup(0x67bb, &(0x7f0000000280)) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) io_uring_enter(r5, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000001200)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0081000000dd60f53a0400303a00fe80000000000000000000000000ffbbff0200000000000000000000000000010200f878000005006050835900000000fc010000000000000000000000000000fc02000000000000000000000000000000bd972b7f394bf7704f3b9a241a16f182d72640d2728beaf36a530db501909ec46f9801f5b91985d444d295a10e4c7b72158d7bb9c9697baa858ffb0ff21f0221f37d505661e67679be2841310282bb3cb6508608af7e835b0c2d062ab95429a3faa9b2662b484db1849b90ede9bb83089819c8d1c9bf542bcd7964323536ce9e89bd7b24a21a91d60994289093c42b3ef032d8972c33819a3417ce2bd8725f67a237bf3c7168dffb388c03c90d39d59d677d7a52770e94486b0ca80d0ef064319ceaddf18e736fe7bce361b7d79d6be0ae7c1c9d94a87bfedb2e562367da375b0ebfbc80e1fea94c22c3a37fd5f2bb50c834f2069d352f274dfd55fe754ab00404a086b406afeada37b1fe18755d72cc7efd3335381571c6a81308dd9af3608908b7ef1d13fd28ef2f0de75aca42adcc5f894415cf747fc14d4995c0ed32d1fe240282bcf54c59189c00aec00daf40e3756806cd7f134b0fcd10c284325a218882eb899893c1eb38e6457deac163cfa0bd57d8c2a517574a0355c20bd2be53a8b4269f8d9fa022305717eeb54b5cac896af65fb87a501e3ee8bc1bbfaf0c"], 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x12}, 0x48000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/106, 0x6a, 0x1, &(0x7f0000000180)=""/72, 0x48}, &(0x7f0000000200)=0x40) 2.046480498s ago: executing program 3 (id=6295): r0 = socket$inet6(0xa, 0x3, 0x5) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb8100000086dd60f53a0400303a00fe800000000000000000003a000000bbff020000000000000000000000000001"], 0x0) 1.950130283s ago: executing program 7 (id=6296): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') setreuid(0xee00, 0xee00) open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000008"], 0xf0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000001c0)=0x2a) syz_emit_ethernet(0xc6, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaa23bbbbbbbbbbbb88a80600810043000800450000b0000000000011907800000000000000004e2220009c907801000000040000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af5c4cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037a90c77bc6282405367d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6900000064000000000000000000009a3efbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe0900"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x0, 0x0, 0x0, @generic=0x7}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.948907411s ago: executing program 7 (id=6298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000f00)={0xf0f002, 0x804}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r2, 0x0, 0x0, 0x80000) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {&(0x7f0000000880)}, {&(0x7f0000000540)="b4e007f06d056aa0367c73", 0xb}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980", 0x14}, {&(0x7f0000000500)="741f5b18fef5626f1262b8ebb6140e06e89cd78863b82dc7f8", 0x19}, {0x0}, {&(0x7f0000000ac0)}], 0x7, 0x4d9e, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x24040000) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2115aaaaef6dd8a, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x40107447, &(0x7f0000000180)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r8, &(0x7f0000000000)="14000000140005b7ffccca38b9000000010860eb", 0x14) write$cgroup_type(r7, &(0x7f0000000280), 0x9) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000300)="0f300fc72a0f6968aa6766c7442400000000006766c7442402000001006766c744240600000000670f011c2475df0fb3ff66b8fa7f00000f23c80f21f866350c0010000f23f80f797e3a660f38817e5d670f01c3"}], 0x108, 0x18, 0x0, 0x0) 1.805765326s ago: executing program 3 (id=6299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x870bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xce17}]}}]}, 0x44}}, 0x2) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00073c002400000000ff8800000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 1.710368289s ago: executing program 3 (id=6303): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='8'], 0x38}}, 0x20000000) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x4000040) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000023c0)={0x340, 0x2e, 0x1, 0x70bd25, 0x0, "", [@nested={0x4, 0x119}, @nested={0x32c, 0x11, 0x0, 0x1, [@nested={0x328, 0xcf, 0x0, 0x1, [@nested={0x322, 0x146, 0x0, 0x1, [@nested={0x1c, 0x37, 0x0, 0x1, [@nested={0xc, 0xca, 0x0, 0x1, [@typed={0x8, 0x2e, 0x0, 0x0, @u32=0x6}]}, @typed={0x8, 0x22, 0x0, 0x0, @ipv4=@empty}, @typed={0x4, 0x6b}]}, @typed={0x8, 0x124, 0x0, 0x0, @u32=0x7}, @nested={0x1f1, 0x6c, 0x0, 0x1, [@generic="8b82111c59", @nested={0x1d0, 0x10f, 0x0, 0x1, [@nested={0x1c9, 0x11b, 0x0, 0x1, [@generic="44e4ba7c0b0ff113b095b181686c69e6901606a6035b241060d1ba9b116c80da82d5b88cc6363112ecfcfe146d3396e45fbbf0a08b22fd28c11b96cceeebb143edb758f38e41e6198a4aac1b4f64403c0297fdc66d55feb17b3a47961e32432008a761d761630abd62e074f1aeda6ad0a673e1e2f1ef46c79d906ae0a1b56a1cb49371c5044e8535c676535532d332e91b4270db1184a76120ede03ed5473adf06033298dbeef6a61dc38f79dcbab66a59547791ab5c867c0e0244d06d7eeb09d3b84e9bad5626f647e62bd3f0", @typed={0x5, 0x6b, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x105, 0x0, 0x0, @u64=0xfffffffffffffffd}, @typed={0xc1, 0x82, 0x0, 0x0, @binary="9da6d2cfd0d56814fd84a9b4e09bfefb7e71aa6b1338a2f4b0bcf5b7da34e38272c0fb396e8da9fe6bafa86982b217883dc0a99d6f8cc8d02d65ac33bf40d09bc28a90cbe72d692943aa8ec74169b9f54f99da2135cef1a3b948b4bb65653d617abfa325b7ece7ef3a395ab715205e14add6497c4d4ccd9950c466a2121433263671d206265ab7a4afb86bcfc88d39c8da199e34acdfd9f19a20d74af1508d9ef7e25cbdbcb597005c8fd2c532208d87b50f917122d979574773357159"}, @generic="ea8e54f0deb6d4df4fed8cacb160ad53bc0360eeda91dd56", @typed={0x8, 0xb8, 0x0, 0x0, @pid}]}]}, @nested={0x4, 0xef}, @nested={0x4}, @typed={0x4, 0xfe}, @nested={0x4, 0x62}, @nested={0x4, 0x87}, @nested={0x4, 0x76}]}, @typed={0x8, 0x65, 0x0, 0x0, @pid}, @typed={0x8, 0x2b, 0x0, 0x0, @ipv4=@multicast2}, @generic="db89061eb9fbad2bf82b2a9418649da868c869b4397ab66e7f39863979f0bdf348067f0b5606ca8cdcb5b5080280648f010c688d62984d051b094fe343cb1fa22295cdcf66ca2b1cc8152ecb85f43f28d04aa546812ddb957608dc2f3b52e0e98745cc4aa9b20ab28754d0d7c05b9139d8ff8509fbe0d7d56d5710ea94b935782d99259af1a87cf89bcca8f33c9878df0b153753b7ccc2d3d65b5d8e92f7230c8b3b3d434ce7cd2f1e8dbf2cbfca3103a770996f13ed41af6f046964853f276bf8c18987b616eb8c1c752f52389cd54b7a7874ba1d9b4d2612518c8c3c9220ded49fd5ff56d71b5b5569f9421c6d", @typed={0x8, 0xb8, 0x0, 0x0, @u32=0xfffffff8}]}]}]}]}, 0x340}], 0x1, 0x0, 0x0, 0x84}, 0x300) fchdir(r2) (async) fchdir(r2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0xe7) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r7, 0x3b71, &(0x7f0000000080)={0x20, 0x2, 0x0, 0x8, 0x6}) (async) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r7, 0x3b71, &(0x7f0000000080)={0x20, 0x2, 0x0, 0x8, 0x6}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) 842.068685ms ago: executing program 7 (id=6305): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x1002, r2, 0x0) write(r5, &(0x7f0000000380)='f', 0x1) tee(r4, r3, 0x3, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010126bd7000fbdbdf250d0000000500197751000000050007001700000006000a0020000000050017000900000006000800a0aa0000050018000b00000005001b000100000005001a0004000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x100, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) 779.976416ms ago: executing program 9 (id=6306): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 597.683642ms ago: executing program 9 (id=6307): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x64e10, 0x36a01}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GUARD={0x5, 0x5, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000200)={@random="a5050f0000b5", @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {@private}]}]}}}}}}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x42}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8048802) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r10 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r10, &(0x7f00000002c0)={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010026b87aeabbc900bbc9000f302f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x67}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 91.269773ms ago: executing program 9 (id=6308): r0 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) io_uring_enter(r3, 0x76a3, 0xb49b, 0x19, &(0x7f0000000100)={[0x101]}, 0x8) tkill(r2, 0x39) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x2004}) 75.755156ms ago: executing program 9 (id=6309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c00044000000000000000011400"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 438.573µs ago: executing program 9 (id=6310): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000000c0)=0x7f, 0x4) sendmsg(r0, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, 0x0}, 0x700000000000000) 0s ago: executing program 9 (id=6311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x870bd2b, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xce17}]}}]}, 0x44}}, 0x2) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00073c002400000000ff8800000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) kernel console output (not intermixed with test programs): t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 330.479770][T20668] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4355'. [ 330.548901][T20670] vxfs: unable to read disk superblock at 1 [ 330.551959][T20670] vxfs: unable to read disk superblock at 8 [ 330.554642][T20670] vxfs: can't find superblock. [ 330.629669][T20677] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4359'. [ 330.938738][T20702] loop5: detected capacity change from 0 to 7 [ 330.942628][ T5934] Dev loop5: unable to read RDB block 7 [ 330.944728][ T5934] loop5: AHDI p1 [ 330.946425][ T5934] loop5: partition table partially beyond EOD, truncated [ 330.961775][T20702] Dev loop5: unable to read RDB block 7 [ 330.964392][T20702] loop5: AHDI p1 [ 330.966318][T20702] loop5: partition table partially beyond EOD, truncated [ 331.121527][T20708] netlink: 172 bytes leftover after parsing attributes in process `syz.7.4371'. [ 331.163946][T20711] 8021q: adding VLAN 0 to HW filter on device bond7 [ 331.168107][T20711] bond7: entered promiscuous mode [ 331.172395][T20711] bond0: (slave bond7): Enslaving as an active interface with an up link [ 331.185765][T20714] netlink: 'syz.7.4373': attribute type 21 has an invalid length. [ 331.544203][T20733] loop5: detected capacity change from 0 to 7 [ 331.548212][T20735] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4379'. [ 331.549195][ T5934] Dev loop5: unable to read RDB block 7 [ 331.553676][ T5934] loop5: AHDI p1 [ 331.554972][ T5934] loop5: partition table partially beyond EOD, truncated [ 331.559423][T20733] Dev loop5: unable to read RDB block 7 [ 331.562379][T20733] loop5: AHDI p1 [ 331.568792][T20733] loop5: partition table partially beyond EOD, truncated [ 331.675404][T20743] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4382'. [ 331.857658][T20746] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4383'. [ 331.862426][T20746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20746 comm=syz.8.4383 [ 331.876539][T20746] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4383'. [ 332.108229][T20765] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4389'. [ 333.688887][T20788] netlink: 'syz.9.4398': attribute type 10 has an invalid length. [ 333.759829][T20791] syzkaller0: mtu less than device minimum [ 333.763038][T20790] tipc: Enabled bearer , priority 0 [ 334.134410][T20800] loop5: detected capacity change from 0 to 7 [ 334.138364][T20800] Dev loop5: unable to read RDB block 7 [ 334.141783][T20800] loop5: AHDI p1 [ 334.143751][T20800] loop5: partition table partially beyond EOD, truncated [ 334.346778][ T40] audit: type=1400 audit(1772161060.476:35169): avc: denied { mounton } for pid=20809 comm="syz.2.4404" path="/118/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 334.635694][T20826] SELinux: syz.9.4409 (20826) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 334.835461][ T34] tipc: Node number set to 3424312647 [ 335.536600][T20830] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2511 sclass=netlink_xfrm_socket pid=20830 comm=syz.2.4410 [ 335.635301][ T40] audit: type=1400 audit(1772161061.696:35170): avc: denied { write } for pid=20834 comm="syz.2.4411" name="file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 336.658292][ T40] audit: type=1400 audit(1772161062.653:35171): avc: denied { bind } for pid=20863 comm="syz.2.4416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 336.777853][T20866] __nla_validate_parse: 5 callbacks suppressed [ 336.777870][T20866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4416'. [ 336.897209][T20870] tmpfs: Unknown parameter 'mpˆÛ—\«½™]yvþ__r' [ 336.931151][T20872] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4419'. [ 336.938089][T20872] 9p: Bad value for 'rfdno' [ 337.025153][T20877] xt_hashlimit: size too large, truncated to 1048576 [ 337.112440][T20879] program syz.2.4421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.121713][T20878] delete_channel: no stack [ 337.399367][T20893] netlink: 'syz.2.4426': attribute type 3 has an invalid length. [ 337.442903][T20892] netlink: 'syz.2.4426': attribute type 39 has an invalid length. [ 337.451708][T20892] bridge0: port 4(syz_tun) entered disabled state [ 337.472410][T20892] syz_tun (unregistering): left allmulticast mode [ 337.476332][T20892] syz_tun (unregistering): left promiscuous mode [ 337.479383][T20892] bridge0: port 4(syz_tun) entered disabled state [ 338.139641][T20902] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4429'. [ 338.621404][ T40] audit: type=1326 audit(1772161064.492:35172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20910 comm="syz.2.4431" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6659c799 code=0x7ffc0000 [ 338.629567][ T40] audit: type=1326 audit(1772161064.492:35173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20910 comm="syz.2.4431" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6659c799 code=0x7ffc0000 [ 339.115256][ T40] audit: type=1400 audit(1772161064.952:35174): avc: denied { mounton } for pid=20915 comm="syz.8.4433" path="/503/file0" dev="tmpfs" ino=2657 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 339.115440][T20917] Invalid source name [ 339.125254][T20917] UBIFS error (pid: 20917): cannot open "./file0", error -22 [ 339.368616][T20935] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4438'. [ 339.445603][T20940] fuse: Bad value for 'fd' [ 339.515025][T20945] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20003 [ 339.729785][T20961] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 339.732312][T20961] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 339.736268][T20961] cramfs: wrong magic [ 339.742081][T20963] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 339.745508][T20963] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 339.753072][T20963] cramfs: wrong magic [ 339.799623][T20967] netlink: 'syz.2.4448': attribute type 21 has an invalid length. [ 339.802859][T20967] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4448'. [ 339.892308][ T40] audit: type=1400 audit(1772161065.684:35175): avc: denied { cmd } for pid=20976 comm="syz.8.4451" path="socket:[98314]" dev="sockfs" ino=98314 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 339.892809][T20977] 9pnet_virtio: no channels available for device syz [ 340.046478][T20982] kvm: kvm [20981]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 340.051750][T20982] kvm: kvm [20981]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 340.107337][T20990] netlink: 356 bytes leftover after parsing attributes in process `syz.9.4454'. [ 340.132650][T20992] openvswitch: netlink: Flow key attr not present in new flow. [ 340.172490][T20995] xt_hashlimit: size too large, truncated to 1048576 [ 340.238570][T20995] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4457'. [ 340.305128][T21004] ¾x9ÿ: left allmulticast mode [ 340.307053][T21004] ¾x9ÿ: left promiscuous mode [ 340.309003][T21004] bridge0: port 1(1¾x9ÿ) entered disabled state [ 340.314356][T21004] bridge_slave_1: left allmulticast mode [ 340.316342][T21004] bridge_slave_1: left promiscuous mode [ 340.318233][T21004] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.325693][T21004] bond0: (slave bond_slave_0): Releasing backup interface [ 340.337274][T21004] bond0: (slave bond_slave_1): Releasing backup interface [ 340.342316][T21004] team_slave_0: left promiscuous mode [ 340.346933][T21004] team0: Port device team_slave_0 removed [ 340.353847][T21004] team_slave_1: left promiscuous mode [ 340.358716][T21004] team0: Port device team_slave_1 removed [ 340.362678][T21004] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 340.613295][T21030] xt_hashlimit: size too large, truncated to 1048576 [ 340.665567][T15029] usb 14-1: new low-speed USB device number 19 using dummy_hcd [ 340.700418][T21035] netlink: 'syz.2.4465': attribute type 1 has an invalid length. [ 340.826425][T15029] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 340.830468][T15029] usb 14-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 340.833869][T15029] usb 14-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 340.835082][T21044] cgroup: name respecified [ 340.840777][T15029] usb 14-1: string descriptor 0 read error: -22 [ 340.842997][T15029] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 340.851559][T15029] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.858687][T21001] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 341.008872][T21054] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 341.012647][T21054] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 341.021117][T21054] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 341.094071][T15029] cdc_ncm 14-1:1.0: bind() failure [ 341.109032][T15029] cdc_ncm 14-1:1.1: CDC Union missing and no IAD found [ 341.114278][T15029] cdc_ncm 14-1:1.1: bind() failure [ 341.119448][T15029] usb 14-1: USB disconnect, device number 19 [ 341.205548][T21069] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4476'. [ 341.324602][T21076] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4479'. [ 341.364279][T21072] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 341.469136][ T40] audit: type=1400 audit(1772161067.166:35176): avc: denied { setattr } for pid=21071 comm="syz.2.4477" name="file0" dev="overlay" ino=75497539 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 341.482033][ T40] audit: type=1400 audit(1772161067.176:35177): avc: denied { write open } for pid=21071 comm="syz.2.4477" path=2F202864656C6574656429 dev="tmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 341.492979][ T40] audit: type=1400 audit(1772161067.185:35178): avc: denied { read } for pid=21071 comm="syz.2.4477" dev="tmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 341.502662][ T40] audit: type=1400 audit(1772161067.185:35179): avc: denied { link } for pid=21071 comm="syz.2.4477" name="#764" dev="tmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 341.504333][T21081] netlink: 'syz.8.4480': attribute type 39 has an invalid length. [ 341.527615][ T40] audit: type=1400 audit(1772161067.213:35180): avc: denied { connect } for pid=21079 comm="syz.7.4481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 341.535979][ T40] audit: type=1400 audit(1772161067.223:35181): avc: denied { unlink } for pid=18670 comm="syz-executor" name="file0" dev="tmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 341.657379][T21084] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4483'. [ 342.089503][T21120] i2c i2c-1: Invalid block write size 34 [ 342.255489][T21130] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4494'. [ 342.267335][T21124] xt_CT: No such helper "pptp" [ 342.535316][T21144] tipc: Enabling of bearer rejected, failed to enable media [ 342.600505][T21156] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4503'. [ 342.766663][T21171] loop5: detected capacity change from 0 to 7 [ 342.771330][T21171] Dev loop5: unable to read RDB block 7 [ 342.773915][T21171] loop5: AHDI p1 [ 342.776723][T21171] loop5: partition table partially beyond EOD, truncated [ 342.825249][ T40] audit: type=1400 audit(1772161068.433:35182): avc: denied { bind } for pid=21177 comm="syz.8.4514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 342.891187][T21177] delete_channel: no stack [ 342.946312][ T5975] usb 14-1: new high-speed USB device number 20 using dummy_hcd [ 342.953225][T21192] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4516'. [ 342.957773][T21192] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4516'. [ 342.963735][T21187] program syz.2.4515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.968783][T21194] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4517'. [ 343.117018][T21202] wg1 speed is unknown, defaulting to 1000 [ 343.127459][ T5975] usb 14-1: Using ep0 maxpacket: 32 [ 343.132264][ T5975] usb 14-1: config index 0 descriptor too short (expected 156, got 27) [ 343.135957][ T5975] usb 14-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 343.140943][ T5975] usb 14-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 343.146589][ T5975] usb 14-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 343.164160][ T5975] usb 14-1: config 0 interface 0 has no altsetting 0 [ 343.170717][ T5975] usb 14-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 343.177082][ T5975] usb 14-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 343.191358][ T5975] usb 14-1: Product: syz [ 343.201809][ T5975] usb 14-1: Manufacturer: syz [ 343.204577][ T5975] usb 14-1: SerialNumber: syz [ 343.207199][ T40] audit: type=1400 audit(1772161068.790:35183): avc: denied { write } for pid=21207 comm="syz.7.4521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 343.211653][ T5975] usb 14-1: config 0 descriptor?? [ 343.228857][ T5975] ldusb 14-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 343.239564][ T5975] ldusb 14-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 343.246049][ T40] audit: type=1400 audit(1772161068.837:35184): avc: denied { watch } for pid=21209 comm="syz.2.4522" path="/153/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 343.247246][T21210] mac80211_hwsim hwsim46 : renamed from wlan1 (while UP) [ 343.276737][ T40] audit: type=1400 audit(1772161068.865:35185): avc: denied { unmount } for pid=18670 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 343.309853][T21216] pimreg: entered allmulticast mode [ 343.349760][T21215] pimreg: left allmulticast mode [ 343.355071][T21221] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4525'. [ 343.359452][T21222] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4525'. [ 343.663601][T21242] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4528'. [ 343.686136][ T5938] Bluetooth: hci5: Malformed LE Event: 0x0b [ 343.713876][T16299] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.717901][T16299] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.746990][T16299] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.749943][T16299] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.817509][T21249] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4532'. [ 343.822384][T21252] ldusb 14-1:0.0: Write buffer overflow, 2147479232 bytes dropped [ 343.827687][T21252] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4504'. [ 343.833227][T21252] openvswitch: netlink: Flow actions attr not present in new flow. [ 343.865740][T21255] overlayfs: failed to clone upperpath [ 344.041660][ T6001] usb 14-1: USB disconnect, device number 20 [ 344.050950][ T6001] ldusb 14-1:0.0: LD USB Device #0 now disconnected [ 344.182275][ T6019] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 344.355418][ T6019] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 344.359984][ T6019] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 344.364647][ T6019] usb 12-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.372274][ T6019] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 344.377032][ T6019] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.380621][ T6019] usb 12-1: Product: syz [ 344.382497][ T6019] usb 12-1: Manufacturer: syz [ 344.385573][ T6019] usb 12-1: SerialNumber: syz [ 344.401503][ T6019] hub 12-1:1.0: bad descriptor, ignoring hub [ 344.403921][ T6019] hub 12-1:1.0: probe with driver hub failed with error -5 [ 344.610747][ T6019] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 345.084219][T21296] sctp: [Deprecated]: syz.9.4551 (pid 21296) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.084219][T21296] Use struct sctp_sack_info instead [ 345.583901][T21259] usb 12-1: reset high-speed USB device number 13 using dummy_hcd [ 345.588086][T21259] usb 12-1: device reset changed ep0 maxpacket size! [ 345.596205][ T7472] usb 12-1: USB disconnect, device number 13 [ 345.612359][ T7472] usblp0: removed [ 345.759424][ T7472] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 345.785099][T21320] netlink: 'syz.2.4562': attribute type 1 has an invalid length. [ 345.951404][ T7472] usb 12-1: Using ep0 maxpacket: 16 [ 345.979157][ T7472] usb 12-1: unable to get BOS descriptor or descriptor too short [ 345.993302][ T7472] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 345.997839][ T7472] usb 12-1: can't read configurations, error -71 [ 346.102970][T21337] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 346.532778][T21360] xt_hashlimit: size too large, truncated to 1048576 [ 347.011767][ T830] hid_parser_main: 4086 callbacks suppressed [ 347.011790][ T830] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 347.032943][ T830] hid-generic 0000:0000:0000.000D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 347.308809][T21408] tipc: Enabled bearer , priority 10 [ 347.738854][T21438] __nla_validate_parse: 7 callbacks suppressed [ 347.738871][T21438] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4615'. [ 348.048662][T21448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4618'. [ 348.503627][T21485] Cannot find add_set index 46338 as target [ 348.927109][T21501] wg1 speed is unknown, defaulting to 1000 [ 349.972556][ T40] audit: type=1800 audit(1772161075.142:35186): pid=21573 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.4670" name="bus" dev="tmpfs" ino=2525 res=0 errno=0 [ 350.034684][T21577] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4675'. [ 350.137723][T21582] bridge0: port 3(team0) entered disabled state [ 350.144233][T21582] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.147750][T21582] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.170362][T21582] netlink: 'syz.2.4677': attribute type 16 has an invalid length. [ 350.173498][T21582] netlink: 'syz.2.4677': attribute type 17 has an invalid length. [ 350.186256][T21582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 350.226255][T21584] IPv6: Can't replace route, no match found [ 350.553934][ T40] audit: type=1326 audit(1772161075.686:35187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21598 comm="syz.2.4685" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6659c799 code=0x7ffc0000 [ 350.566841][ T40] audit: type=1326 audit(1772161075.686:35188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21598 comm="syz.2.4685" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6659c799 code=0x7ffc0000 [ 350.578100][ T40] audit: type=1326 audit(1772161075.696:35189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21598 comm="syz.2.4685" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6659c799 code=0x7ffc0000 [ 350.595169][ T40] audit: type=1326 audit(1772161075.696:35190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21598 comm="syz.2.4685" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6659c799 code=0x7ffc0000 [ 350.605600][ T40] audit: type=1326 audit(1772161075.696:35191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21598 comm="syz.2.4685" exe="/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fce6659c799 code=0x7ffc0000 [ 350.613043][ T40] audit: type=1326 audit(1772161075.696:35192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21598 comm="syz.2.4685" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6659c799 code=0x7ffc0000 [ 350.629636][ T40] audit: type=1326 audit(1772161075.696:35193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21598 comm="syz.2.4685" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6659c799 code=0x7ffc0000 [ 350.639195][ T40] audit: type=1326 audit(1772161075.696:35194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21598 comm="syz.2.4685" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fce6659c799 code=0x7ffc0000 [ 350.657723][ T40] audit: type=1326 audit(1772161075.696:35195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21598 comm="syz.2.4685" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fce6659c799 code=0x7ffc0000 [ 351.020717][T21627] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4697'. [ 351.242202][T21642] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 351.537402][T21648] binder: 21647:21648 ioctl 3b70 200000000500 returned -22 [ 351.543971][T21648] binder: 21647:21648 ioctl c0306201 2000000001c0 returned -14 [ 351.869214][T21679] sctp: [Deprecated]: syz.9.4717 (pid 21679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 351.869214][T21679] Use struct sctp_sack_info instead [ 351.977132][T21690] wg1 speed is unknown, defaulting to 1000 [ 351.977254][T21692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4723'. [ 352.701650][T21746] team0: entered promiscuous mode [ 352.704008][T21746] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.706871][T21746] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4748'. [ 352.712165][T21746] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 352.758994][T21750] geneve2: entered promiscuous mode [ 352.763958][ T1205] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 352.767951][ T1205] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 352.774347][ T1205] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 352.777972][ T1205] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 353.202988][T21775] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4763'. [ 353.225860][ T5936] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 353.232298][ T5936] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 353.236018][ T5936] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 353.239214][ T5936] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 353.242294][ T5936] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 353.281678][T21776] wg1 speed is unknown, defaulting to 1000 [ 353.462030][T21782] ieee802154 phy1 wpan1: encryption failed: -22 [ 353.541397][T16298] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.609740][T21776] chnl_net:caif_netlink_parms(): no params data found [ 353.674833][T16298] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.729932][T21776] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.734820][T21776] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.737665][T21776] bridge_slave_0: entered allmulticast mode [ 353.741733][T21776] bridge_slave_0: entered promiscuous mode [ 353.783640][T16298] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.789822][T21776] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.792519][T21776] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.795861][T21776] bridge_slave_1: entered allmulticast mode [ 353.798823][T21776] bridge_slave_1: entered promiscuous mode [ 353.828892][T21776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.834030][T21776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.854122][T21776] team0: Port device team_slave_0 added [ 353.857578][T21776] team0: Port device team_slave_1 added [ 353.872781][T21776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.875091][T21776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.886255][T21776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.915744][T16298] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.928962][T21776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.932103][T21776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.943213][T21776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.996169][T21776] hsr_slave_0: entered promiscuous mode [ 354.000140][T21776] hsr_slave_1: entered promiscuous mode [ 354.003315][T21776] debugfs: 'hsr0' already exists in 'hsr' [ 354.005849][T21776] Cannot create hsr debugfs directory [ 354.118989][T21812] netlink: 'syz.9.4775': attribute type 2 has an invalid length. [ 354.122393][T21812] netlink: 'syz.9.4775': attribute type 1 has an invalid length. [ 354.127527][T21812] netlink: 'syz.9.4775': attribute type 1 has an invalid length. [ 354.349740][T16298] bond8 (unregistering): (slave ip6erspan0): Releasing active interface [ 354.506565][T16298] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 354.510774][T16298] bridge1 (unregistering): left promiscuous mode [ 354.513037][T16298] bridge1 (unregistering): left allmulticast mode [ 354.564106][ T830] SELinux: failure in sel_netif_sid_slow(), invalid network interface (79) [ 354.660503][T16298] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 354.663534][T16298] bridge2 (unregistering): left promiscuous mode [ 354.665655][T16298] bridge2 (unregistering): left allmulticast mode [ 354.743624][ T830] SELinux: failure in sel_netif_sid_slow(), invalid network interface (81) [ 354.934264][T16298] bond3 (unregistering): (slave bridge3): Removing an active aggregator [ 354.940136][T16298] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 355.195499][T16298] bond7 (unregistering): (slave bridge6): Releasing active interface [ 355.449639][ T5936] Bluetooth: hci4: command tx timeout [ 355.588719][T16298] bond0 (unregistering): Released all slaves [ 355.595134][T16298] bond1 (unregistering): Released all slaves [ 355.607660][T16298] bond2 (unregistering): Released all slaves [ 355.616007][T16298] bond3 (unregistering): Released all slaves [ 355.625115][T16298] bond4 (unregistering): Released all slaves [ 355.635466][T16298] bond5 (unregistering): Released all slaves [ 355.645518][T16298] bond6 (unregistering): Released all slaves [ 355.655326][T16298] bond7 (unregistering): Released all slaves [ 355.665225][T16298] bond8 (unregistering): Released all slaves [ 355.676088][T16298] bond9 (unregistering): Released all slaves [ 355.792336][T21825] tipc: Enabling of bearer rejected, failed to enable media [ 355.810846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 356.226169][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 356.226187][ T40] audit: type=1326 audit(1772161081.016:35197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21876 comm="syz.2.4794" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce6659c799 code=0x0 [ 356.283697][T21880] random: crng reseeded on system resumption [ 356.458886][T21776] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 356.482102][T21776] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 356.495695][T21776] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 356.531323][T21776] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 356.601748][T21776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.612605][T21776] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.624460][ T1205] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.626797][ T1205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.654306][ T1205] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.657542][ T1205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.707297][T21776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.766024][T16298] hsr_slave_0: left promiscuous mode [ 356.778656][T16298] hsr_slave_1: left promiscuous mode [ 356.794657][T16298] veth0_macvtap: left allmulticast mode [ 356.797168][T16298] veth0_macvtap: left promiscuous mode [ 356.799601][T16298] veth1_vlan: left promiscuous mode [ 357.019673][T21901] Falling back ldisc for ttyS3. [ 357.253232][T21776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.317030][T21913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4801'. [ 357.508772][T21776] veth0_vlan: entered promiscuous mode [ 357.518266][T21776] veth1_vlan: entered promiscuous mode [ 357.549995][T21776] veth0_macvtap: entered promiscuous mode [ 357.555357][T21776] veth1_macvtap: entered promiscuous mode [ 357.568725][T21776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.576335][T21776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.585055][T16295] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.590461][T16295] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.594803][T16295] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.601216][T16295] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.663981][ T5936] Bluetooth: hci4: command tx timeout [ 357.678210][T16298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.681025][T16298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.708238][ T1205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.711268][ T1205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.809645][T21933] netlink: 88 bytes leftover after parsing attributes in process `syz.8.4807'. [ 358.138792][ T40] audit: type=1804 audit(1772161082.799:35198): pid=21960 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.4819" name="/newroot/518/bus" dev="tmpfs" ino=2740 res=1 errno=0 [ 358.146800][ T40] audit: type=1800 audit(1772161082.799:35199): pid=21960 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.4819" name="bus" dev="tmpfs" ino=2740 res=0 errno=0 [ 358.211240][T21964] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4821'. [ 358.394757][T21971] SELinux: failed to load policy [ 358.434798][ T40] audit: type=1400 audit(1772161083.080:35200): avc: denied { read } for pid=21977 comm="syz.9.4827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 358.737455][T22011] tipc: Enabling of bearer rejected, already enabled [ 358.745215][T22013] xt_hashlimit: size too large, truncated to 1048576 [ 358.760009][T22011] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 358.764218][T22011] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 358.791012][T22011] tipc: Resetting bearer [ 358.882819][ T40] audit: type=1400 audit(1772161083.503:35201): avc: denied { map } for pid=22014 comm="syz.8.4844" path="socket:[100750]" dev="sockfs" ino=100750 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 358.895036][T22027] hub 8-0:1.0: USB hub found [ 358.899350][T22027] hub 8-0:1.0: 1 port detected [ 359.213350][T22046] xt_hashlimit: size too large, truncated to 1048576 [ 359.482583][T22065] veth3: entered promiscuous mode [ 359.498456][T22067] ip6erspan0: entered promiscuous mode [ 359.814948][T22086] syzkaller0: entered promiscuous mode [ 359.817375][T22086] syzkaller0: entered allmulticast mode [ 359.869721][ T5936] Bluetooth: hci4: command tx timeout [ 360.508503][T22121] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4888'. [ 360.606412][ T40] audit: type=1400 audit(1772161085.126:35202): avc: denied { watch watch_reads } for pid=22124 comm="syz.8.4891" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 360.823471][T22135] GUP no longer grows the stack in syz.2.4895 (22135): 200000004000-20000000a000 (200000002000) [ 360.831808][T22135] CPU: 1 UID: 0 PID: 22135 Comm: syz.2.4895 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.831847][T22135] Tainted: [L]=SOFTLOCKUP [ 360.831855][T22135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 360.831895][T22135] Call Trace: [ 360.831903][T22135] [ 360.831912][T22135] dump_stack_lvl+0x100/0x190 [ 360.832272][T22135] gup_vma_lookup.cold+0x83/0x96 [ 360.832328][T22135] __get_user_pages+0x241/0x34d0 [ 360.832420][T22135] ? find_held_lock+0x2b/0x80 [ 360.832487][T22135] ? mtree_load+0x311/0xa40 [ 360.832724][T22135] ? __pfx___get_user_pages+0x10/0x10 [ 360.832756][T22135] get_user_pages_remote+0x3d2/0xb10 [ 360.832780][T22135] ? mas_new_root+0x690/0x6e0 [ 360.832806][T22135] ? __pfx_get_user_pages_remote+0x10/0x10 [ 360.832829][T22135] ? __access_remote_vm+0x84d/0xa70 [ 360.832882][T22135] __access_remote_vm+0x3ba/0xa70 [ 360.832914][T22135] ? do_raw_spin_lock+0x128/0x260 [ 360.832936][T22135] ? __pfx___access_remote_vm+0x10/0x10 [ 360.832966][T22135] ? alloc_pages_noprof+0x233/0x390 [ 360.833021][T22135] proc_pid_cmdline_read+0x4f2/0x8c0 [ 360.833105][T22135] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 360.833135][T22135] ? rw_verify_area+0xce/0x6d0 [ 360.833168][T22135] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 360.833192][T22135] vfs_readv+0x5d8/0x8d0 [ 360.833225][T22135] ? __pfx_vfs_readv+0x10/0x10 [ 360.833274][T22135] ? __fget_files+0x21f/0x3d0 [ 360.833301][T22135] ? do_preadv+0x1ac/0x270 [ 360.833325][T22135] do_preadv+0x1ac/0x270 [ 360.833353][T22135] ? __pfx_do_preadv+0x10/0x10 [ 360.833388][T22135] do_syscall_64+0x106/0xf80 [ 360.833409][T22135] ? clear_bhb_loop+0x40/0x90 [ 360.833433][T22135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.833453][T22135] RIP: 0033:0x7fce6659c799 [ 360.833498][T22135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.833517][T22135] RSP: 002b:00007fce6748d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 360.833551][T22135] RAX: ffffffffffffffda RBX: 00007fce66815fa0 RCX: 00007fce6659c799 [ 360.833565][T22135] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 360.833578][T22135] RBP: 00007fce66632bd9 R08: 00000000fffffff9 R09: 0000000000000000 [ 360.833590][T22135] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 360.833603][T22135] R13: 00007fce66816038 R14: 00007fce66815fa0 R15: 00007ffd88e23b88 [ 360.833631][T22135] [ 360.868732][T22137] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4896'. [ 361.270265][T22154] sctp: [Deprecated]: syz.2.4904 (pid 22154) Use of struct sctp_assoc_value in delayed_ack socket option. [ 361.270265][T22154] Use struct sctp_sack_info instead [ 361.321490][T22155] wg1 speed is unknown, defaulting to 1000 [ 361.569076][ T40] audit: type=1400 audit(1772161086.027:35203): avc: denied { validate_trans } for pid=22158 comm="syz.2.4905" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 362.086304][ T5936] Bluetooth: hci4: command tx timeout [ 362.159446][T22189] wg1 speed is unknown, defaulting to 1000 [ 362.201436][ T40] audit: type=1400 audit(1772161086.618:35204): avc: denied { accept } for pid=22195 comm="syz.9.4920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 362.256900][T22198] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4921'. [ 362.703498][T22223] wg1 speed is unknown, defaulting to 1000 [ 363.550236][T22245] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 363.765192][T22259] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 363.772203][T22259] bond3 (unregistering): Released all slaves [ 364.010011][T22265] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4948'. [ 364.092529][T22271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4951'. [ 364.096403][T22271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.098855][T22271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.179331][T22271] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 364.181818][T22271] batman_adv: batadv0: Removing interface: ipvlan2 [ 364.605690][T22303] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4963'. [ 364.670553][T22309] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4965'. [ 364.840931][T22328] netlink: 'syz.9.4970': attribute type 10 has an invalid length. [ 364.843829][T22328] netlink: 256 bytes leftover after parsing attributes in process `syz.9.4970'. [ 365.778262][T22362] SELinux: Context 0x0000000000000006 is not valid (left unmapped). [ 365.817660][T22364] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4979'. [ 366.014950][T22384] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4988'. [ 366.378203][ T40] audit: type=1326 audit(1772161090.531:35205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22402 comm="syz.7.4996" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a62f9c799 code=0x7ffc0000 [ 366.389199][ T40] audit: type=1326 audit(1772161090.531:35206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22402 comm="syz.7.4996" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a62f9c799 code=0x7ffc0000 [ 366.400133][ T40] audit: type=1326 audit(1772161090.540:35207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22402 comm="syz.7.4996" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2a62f9c799 code=0x7ffc0000 [ 366.409300][ T40] audit: type=1326 audit(1772161090.549:35208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22404 comm="syz.7.4996" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2a62f5cfce code=0x7ffc0000 [ 366.419590][ T40] audit: type=1326 audit(1772161090.549:35209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22402 comm="syz.7.4996" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a62f9c799 code=0x7ffc0000 [ 366.427464][ T40] audit: type=1326 audit(1772161090.549:35210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22402 comm="syz.7.4996" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a62f9c799 code=0x7ffc0000 [ 366.435579][ T40] audit: type=1326 audit(1772161090.559:35211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22402 comm="syz.7.4996" exe="/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f2a62f9c799 code=0x7ffc0000 [ 366.560840][ T40] audit: type=1326 audit(1772161090.700:35212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22404 comm="syz.7.4996" exe="/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f2a62f9c799 code=0x7ffc0000 [ 367.051703][T22422] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5004'. [ 367.779102][T15029] IPVS: starting estimator thread 0... [ 367.784452][T22464] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 367.884533][T22472] IPVS: using max 46 ests per chain, 110400 per kthread [ 367.898746][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 367.898766][ T40] audit: type=1400 audit(1772161091.966:35216): avc: denied { listen } for pid=22479 comm="syz.8.5029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 368.337590][T22499] wg1 speed is unknown, defaulting to 1000 [ 368.356350][T22501] netlink: 126588 bytes leftover after parsing attributes in process `syz.8.5038'. [ 369.203140][ T40] audit: type=1400 audit(1772161093.186:35217): avc: denied { shutdown } for pid=22529 comm="syz.9.5049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 369.358937][T22542] syz_tun: entered allmulticast mode [ 369.370567][T22541] syz_tun: left allmulticast mode [ 369.394550][T22546] xt_hashlimit: size too large, truncated to 1048576 [ 369.634508][ T40] audit: type=1326 audit(1772161093.590:35218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22566 comm="syz.9.5065" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d8699c799 code=0x0 [ 369.727072][T22576] tipc: Started in network mode [ 369.729719][T22576] tipc: Node identity 5e265b092ba7, cluster identity 4711 [ 369.733054][T22576] tipc: Enabled bearer , priority 0 [ 369.737480][T22576] syzkaller0: entered promiscuous mode [ 369.740794][T22576] syzkaller0: entered allmulticast mode [ 369.744272][T22576] tipc: Resetting bearer [ 369.769037][T22576] tipc: Resetting bearer [ 370.219714][T22589] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5073'. [ 370.254991][T22591] netlink: 108 bytes leftover after parsing attributes in process `syz.8.5074'. [ 370.340404][ T6001] IPVS: starting estimator thread 0... [ 370.418447][ T1935] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 370.435870][ T1935] hid-generic 0000:0000:0000.000E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 370.444638][T22596] IPVS: using max 46 ests per chain, 110400 per kthread [ 370.506795][T22605] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5080'. [ 370.574482][T22609] netlink: 'syz.9.5082': attribute type 4 has an invalid length. [ 370.825406][ T6001] tipc: Node number set to 1971411721 [ 370.895945][T22618] tipc: Started in network mode [ 370.898085][T22618] tipc: Node identity 7a64ec0b8ff3, cluster identity 4711 [ 370.901159][T22618] tipc: Enabled bearer , priority 0 [ 370.905106][T22618] syzkaller0: entered promiscuous mode [ 370.907416][T22618] syzkaller0: entered allmulticast mode [ 370.929490][T22618] tipc: Resetting bearer [ 370.938505][T22617] tipc: Resetting bearer [ 370.959457][T22617] tipc: Disabling bearer [ 371.660845][T22654] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.664073][T22654] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.755702][T22654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.762706][T22654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.870940][ T1205] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.874515][ T1205] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.881086][ T1205] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.884075][ T1205] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.951886][T22672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.993247][T22672] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 371.996476][T22672] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 372.003059][T22672] veth1_vlan: left promiscuous mode [ 372.005022][ T40] audit: type=1400 audit(1772161095.813:35219): avc: denied { setopt } for pid=22674 comm="syz.9.5111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 372.012890][T22672] veth0_vlan: left promiscuous mode [ 372.020319][T22672] veth0_vlan: entered promiscuous mode [ 372.025441][T22672] veth1_vlan: entered promiscuous mode [ 372.031203][T22672] veth1_macvtap: left promiscuous mode [ 372.034057][T22672] veth0_macvtap: left promiscuous mode [ 372.037851][T22672] veth0_macvtap: entered promiscuous mode [ 372.044982][T22672] veth1_macvtap: entered promiscuous mode [ 372.056652][T22672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 372.059794][T22672] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 372.092303][ T1205] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 372.096771][ T1205] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 372.099975][ T1205] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 372.114727][ T1205] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 372.358011][T22699] Falling back ldisc for ttyS3. [ 373.277458][T22733] syzkaller0: entered promiscuous mode [ 373.280238][T22733] syzkaller0: entered allmulticast mode [ 373.305091][T22733] netlink: 144 bytes leftover after parsing attributes in process `syz.8.5135'. [ 373.367572][T22745] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 373.415111][T22749] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5141'. [ 373.838892][T22771] xt_CT: You must specify a L4 protocol and not use inversions on it [ 374.499326][ T5975] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 374.508228][ T5975] hid-generic 0000:0000:0000.000F: hidraw1: HID v0.00 Device [syz1] on syz0 [ 374.565379][T22786] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5155'. [ 374.570274][T22786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22786 comm=syz.8.5155 [ 374.575289][T22786] netlink: 'syz.8.5155': attribute type 1 has an invalid length. [ 374.609022][T22786] bond1: (slave geneve2): making interface the new active one [ 374.613528][T22786] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 374.617123][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 374.619774][T22786] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5155'. [ 374.620662][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 374.629918][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 374.634418][T22786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.637181][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 374.660809][T22790] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.5156'. [ 375.007423][ T29] kernel read not supported for file /vcs (pid: 29 comm: kworker/1:0) [ 375.594939][T22857] syzkaller0: entered promiscuous mode [ 375.597080][T22857] syzkaller0: entered allmulticast mode [ 375.624544][T22857] netlink: 144 bytes leftover after parsing attributes in process `syz.7.5186'. [ 375.862108][T22871] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5190'. [ 376.006677][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 376.013796][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 376.019509][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 376.024033][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 376.028288][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 376.063705][T22877] wg1 speed is unknown, defaulting to 1000 [ 376.344338][T22877] chnl_net:caif_netlink_parms(): no params data found [ 376.439429][T22877] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.443332][T22877] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.446999][T22877] bridge_slave_0: entered allmulticast mode [ 376.451730][T22877] bridge_slave_0: entered promiscuous mode [ 376.470836][ T40] audit: type=1326 audit(1772161100.007:35220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22903 comm="syz.2.5201" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6659c799 code=0x7ffc0000 [ 376.480329][ T40] audit: type=1326 audit(1772161100.007:35221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22903 comm="syz.2.5201" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6659c799 code=0x7ffc0000 [ 376.491097][ T40] audit: type=1326 audit(1772161100.007:35222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22903 comm="syz.2.5201" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fce6659c799 code=0x7ffc0000 [ 376.502323][ T40] audit: type=1326 audit(1772161100.007:35223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22903 comm="syz.2.5201" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6659c799 code=0x7ffc0000 [ 376.512279][ T40] audit: type=1326 audit(1772161100.007:35224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22903 comm="syz.2.5201" exe="/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fce6659c799 code=0x7ffc0000 [ 376.516672][ T1145] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.521238][ T40] audit: type=1326 audit(1772161100.017:35225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22903 comm="syz.2.5201" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6659c799 code=0x7ffc0000 [ 376.525911][ T1145] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.529533][T15029] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 376.534979][ T40] audit: type=1326 audit(1772161100.017:35226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22903 comm="syz.2.5201" exe="/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fce6659c799 code=0x7ffc0000 [ 376.535024][ T40] audit: type=1326 audit(1772161100.017:35227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22903 comm="syz.2.5201" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6659c799 code=0x7ffc0000 [ 376.535058][ T40] audit: type=1326 audit(1772161100.017:35228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22903 comm="syz.2.5201" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6659c799 code=0x7ffc0000 [ 376.536165][T15029] hid-generic 0000:0000:0000.0010: hidraw1: HID v0.00 Device [syz1] on syz0 [ 376.586344][T22877] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.589515][T22877] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.595242][T22877] bridge_slave_1: entered allmulticast mode [ 376.600614][T22877] bridge_slave_1: entered promiscuous mode [ 376.665316][T22877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.691605][ T1145] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.695665][ T1145] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.708246][T22877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.737900][T22877] team0: Port device team_slave_0 added [ 376.744994][T22877] team0: Port device team_slave_1 added [ 376.775346][T22877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.778626][T22877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.791783][T22877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.799222][T22877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.802432][T22877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.815187][T22877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.850377][ T1145] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.854754][ T1145] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.882643][T22877] hsr_slave_0: entered promiscuous mode [ 376.885275][T22877] hsr_slave_1: entered promiscuous mode [ 376.887642][T22877] debugfs: 'hsr0' already exists in 'hsr' [ 376.889495][T22877] Cannot create hsr debugfs directory [ 376.930701][T22918] netem: change failed [ 376.980866][ T1145] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.984520][ T1145] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.067969][ T1935] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 377.074445][ T1935] hid-generic 0000:0000:0000.0011: hidraw1: HID v0.00 Device [syz1] on syz0 [ 377.175696][ T1145] bridge_slave_1: left allmulticast mode [ 377.177840][ T1145] bridge_slave_1: left promiscuous mode [ 377.179822][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.239281][T22936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5213'. [ 377.523474][ T1145] bond3 (unregistering): (slave bridge2): Releasing active interface [ 377.730497][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.735472][ T1145] bond_slave_0: left promiscuous mode [ 377.740472][ T1145] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 377.746543][ T1145] @0Ù: left promiscuous mode [ 377.754382][ T1145] bond0 (unregistering): (slave bond4): Releasing backup interface [ 377.757864][ T1145] bond4 (unregistering): left promiscuous mode [ 377.761990][ T1145] bond0 (unregistering): (slave bond7): Releasing backup interface [ 377.784624][ T1145] bond7 (unregistering): left promiscuous mode [ 377.788012][ T1145] bond0 (unregistering): Released all slaves [ 377.796422][ T1145] bond1 (unregistering): Released all slaves [ 377.812784][ T1145] bond2 (unregistering): Released all slaves [ 377.824800][ T1145] bond3 (unregistering): Released all slaves [ 377.838660][ T1145] bond4 (unregistering): Released all slaves [ 377.853811][ T1145] bond5 (unregistering): Released all slaves [ 377.865821][ T1145] bond6 (unregistering): Released all slaves [ 377.889895][ T1145] bond7 (unregistering): Released all slaves [ 377.931509][T22936] team_slave_0 (unregistering): left promiscuous mode [ 377.935463][T22936] team_slave_0 (unregistering): left allmulticast mode [ 377.940183][T22936] team0: Failed to send options change via netlink (err -105) [ 377.943892][T22936] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 377.949919][T22936] team0: Port device team_slave_0 removed [ 378.163767][ T1145] tipc: Disabling bearer [ 378.191030][ T1145] tipc: Disabling bearer [ 378.196558][ T1145] tipc: Left network mode [ 378.201537][ T5938] Bluetooth: hci1: command tx timeout [ 379.058067][ T5936] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 379.067127][ T5936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 379.071245][ T5936] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 379.081831][ T5936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 379.087984][ T5936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 379.168369][T22981] tipc: Resetting bearer [ 379.200071][ T1145] hsr_slave_0: left promiscuous mode [ 379.203209][ T1145] hsr_slave_1: left promiscuous mode [ 379.217584][ T1145] veth1_macvtap: left promiscuous mode [ 379.409067][ T1148] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.412777][ T1148] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.416951][ T1148] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.446462][ T1148] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.495178][T22989] wg1 speed is unknown, defaulting to 1000 [ 379.499997][T22877] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 379.519757][T22877] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 379.535737][T22877] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 379.558665][T22877] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 379.699841][T22877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.713882][T22877] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.727409][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.730052][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.745489][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.748944][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.871321][ T1145] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 379.905057][T22989] chnl_net:caif_netlink_parms(): no params data found [ 379.998936][T22989] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.001786][T22989] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.006613][T22989] bridge_slave_0: entered allmulticast mode [ 380.009654][T22989] bridge_slave_0: entered promiscuous mode [ 380.013461][T22989] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.017658][T22989] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.020683][T22989] bridge_slave_1: entered allmulticast mode [ 380.024572][T22989] bridge_slave_1: entered promiscuous mode [ 380.052687][T22989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.059192][T22989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.094677][ T1145] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 380.153255][T22989] team0: Port device team_slave_0 added [ 380.187383][T22989] team0: Port device team_slave_1 added [ 380.208603][T22877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.418387][ T5938] Bluetooth: hci1: command tx timeout [ 380.525817][T22989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.528412][T22989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.541084][T22989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.606779][ T1145] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 380.618283][T22989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.620947][T22989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.629192][T22989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.658943][T22989] hsr_slave_0: entered promiscuous mode [ 380.661739][T22989] hsr_slave_1: entered promiscuous mode [ 380.665478][T22989] debugfs: 'hsr0' already exists in 'hsr' [ 380.668163][T22989] Cannot create hsr debugfs directory [ 380.715176][ T1145] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 380.936189][T23069] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5247'. [ 380.987501][T22877] veth0_vlan: entered promiscuous mode [ 380.996800][ T1145] bridge_slave_1: left allmulticast mode [ 380.999976][ T1145] bridge_slave_1: left promiscuous mode [ 381.002909][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.009712][ T1145] bridge_slave_0: left allmulticast mode [ 381.012256][ T1145] bridge_slave_0: left promiscuous mode [ 381.014856][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.113480][ T1145] bond1 (unregistering): (slave geneve2): Releasing active interface [ 381.206373][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.211506][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.215654][ T1145] bond0 (unregistering): Released all slaves [ 381.222735][ T1145] bond1 (unregistering): Released all slaves [ 381.236212][T22877] veth1_vlan: entered promiscuous mode [ 381.271145][ T5938] Bluetooth: hci3: command tx timeout [ 381.289561][T22877] veth0_macvtap: entered promiscuous mode [ 381.297263][T22877] veth1_macvtap: entered promiscuous mode [ 381.321840][T22877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.328058][T22877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.425316][ T46] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.451317][ T46] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.457388][ T46] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.460413][ T46] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.563338][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.570102][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.637365][T16299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.640994][T16299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.745186][T22989] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 381.753799][T22989] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 381.765298][T22989] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 381.774588][T22989] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 381.839245][ T1145] hsr_slave_0: left promiscuous mode [ 381.841895][ T1145] hsr_slave_1: left promiscuous mode [ 381.844169][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.847223][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.953313][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 381.961806][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 382.119067][T22989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.136831][T22989] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.148241][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.151368][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.170665][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.174031][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.424608][T22989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.476828][T23131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5259'. [ 382.486023][T22989] veth0_vlan: entered promiscuous mode [ 382.494373][T22989] veth1_vlan: entered promiscuous mode [ 382.516075][T22989] veth0_macvtap: entered promiscuous mode [ 382.524968][T22989] veth1_macvtap: entered promiscuous mode [ 382.539850][T22989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.547922][ T1145] IPVS: stop unused estimator thread 0... [ 382.557405][T22989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.570179][ T218] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.578658][ T218] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.584497][ T218] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.589747][ T218] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.638649][ T5938] Bluetooth: hci1: command tx timeout [ 383.500231][ T5938] Bluetooth: hci3: command tx timeout [ 383.681806][T23156] syzkaller0: left promiscuous mode [ 383.684599][T23156] veth3: left promiscuous mode [ 384.853252][ T5938] Bluetooth: hci1: command tx timeout [ 385.159251][T23104] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.216129][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.219662][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.239934][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.243350][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.707135][ T5938] Bluetooth: hci3: command tx timeout [ 385.814342][T23232] tipc: Enabled bearer , priority 0 [ 385.827529][T23232] syzkaller0: entered promiscuous mode [ 385.830299][T23232] syzkaller0: entered allmulticast mode [ 385.856637][T23232] tipc: Resetting bearer [ 385.861178][T23231] tipc: Resetting bearer [ 385.883075][T23231] tipc: Disabling bearer [ 385.983082][T23237] netlink: 104 bytes leftover after parsing attributes in process `syz.7.5298'. [ 386.887798][T23311] team0 (unregistering): left allmulticast mode [ 386.891267][T23311] team_slave_1: left allmulticast mode [ 386.893896][T23311] team0 (unregistering): left promiscuous mode [ 386.896710][T23311] team_slave_1: left promiscuous mode [ 386.898995][T23311] bridge0: port 3(team0) entered disabled state [ 386.904993][T23311] team0 (unregistering): Failed to send options change via netlink (err -105) [ 386.909328][T23311] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 386.921265][T23311] team0 (unregistering): Port device team_slave_1 removed [ 387.041450][ T40] audit: type=1326 audit(1772161109.923:35229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23322 comm="syz.7.5329" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a62f9c799 code=0x7ffc0000 [ 387.052960][ T40] audit: type=1326 audit(1772161109.923:35230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23322 comm="syz.7.5329" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a62f9c799 code=0x7ffc0000 [ 387.063178][ T40] audit: type=1326 audit(1772161109.932:35231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23322 comm="syz.7.5329" exe="/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f2a62f9c799 code=0x7ffc0000 [ 387.072776][ T40] audit: type=1326 audit(1772161109.932:35232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23322 comm="syz.7.5329" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a62f9c799 code=0x7ffc0000 [ 387.081805][ T40] audit: type=1326 audit(1772161109.932:35233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23322 comm="syz.7.5329" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a62f9c799 code=0x7ffc0000 [ 387.089453][ T40] audit: type=1326 audit(1772161109.932:35234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23322 comm="syz.7.5329" exe="/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f2a62f9c799 code=0x7ffc0000 [ 387.097680][ T40] audit: type=1326 audit(1772161109.942:35235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23322 comm="syz.7.5329" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a62f9c799 code=0x7ffc0000 [ 387.105678][ T40] audit: type=1326 audit(1772161109.942:35236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23322 comm="syz.7.5329" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a62f9c799 code=0x7ffc0000 [ 387.113519][ T40] audit: type=1326 audit(1772161109.942:35237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23322 comm="syz.7.5329" exe="/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f2a62f9c799 code=0x7ffc0000 [ 387.121120][ T40] audit: type=1326 audit(1772161109.942:35238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23322 comm="syz.7.5329" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a62f9c799 code=0x7ffc0000 [ 387.491814][T23339] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.923095][ T5938] Bluetooth: hci3: command tx timeout [ 388.186291][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.199723][T23375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5348'. [ 388.619362][T23388] syzkaller0: entered promiscuous mode [ 388.621051][T23388] syzkaller0: entered allmulticast mode [ 389.246156][T23439] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5378'. [ 389.388262][T23454] ip6erspan0: entered promiscuous mode [ 389.580720][T23480] ip6erspan0: entered promiscuous mode [ 390.468310][T23578] wg1 speed is unknown, defaulting to 1000 [ 391.663411][T23675] syzkaller0: entered promiscuous mode [ 391.666598][T23675] syzkaller0: entered allmulticast mode [ 392.461602][T23747] syzkaller0: entered promiscuous mode [ 392.463839][T23747] syzkaller0: entered allmulticast mode [ 393.322841][T23847] ip6erspan0: entered promiscuous mode [ 393.366721][T23851] wg1 speed is unknown, defaulting to 1000 [ 393.394537][T23857] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5561'. [ 394.218436][T23937] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5595'. [ 394.858550][T23957] wg1 speed is unknown, defaulting to 1000 [ 395.225576][T24000] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5622'. [ 395.229288][T24000] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5622'. [ 395.252234][T24000] geneve3: entered promiscuous mode [ 395.254073][T24000] geneve3: entered allmulticast mode [ 395.326682][T24005] wg1 speed is unknown, defaulting to 1000 [ 395.798408][T24058] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5646'. [ 396.139011][T24101] wg1 speed is unknown, defaulting to 1000 [ 396.494179][T24135] syzkaller0: entered promiscuous mode [ 396.496197][T24135] syzkaller0: entered allmulticast mode [ 397.143461][T24158] wg1 speed is unknown, defaulting to 1000 [ 397.295121][T24167] syzkaller0: entered promiscuous mode [ 397.297116][T24167] syzkaller0: entered allmulticast mode [ 397.511086][T24185] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5690'. [ 397.809662][T24213] loop5: detected capacity change from 0 to 7 [ 397.815780][ T5934] Dev loop5: unable to read RDB block 7 [ 397.818064][ T5934] loop5: AHDI p1 [ 397.819654][ T5934] loop5: partition table partially beyond EOD, truncated [ 397.828440][T24213] Dev loop5: unable to read RDB block 7 [ 397.832979][T24213] loop5: AHDI p1 [ 397.834313][T24213] loop5: partition table partially beyond EOD, truncated [ 397.901644][T24220] syzkaller0: entered promiscuous mode [ 397.913367][T24220] syzkaller0: entered allmulticast mode [ 400.623190][T24235] wg1 speed is unknown, defaulting to 1000 [ 400.702907][T24245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5710'. [ 400.898080][T24260] loop5: detected capacity change from 0 to 7 [ 400.901439][ T5934] Dev loop5: unable to read RDB block 7 [ 400.903419][ T5934] loop5: AHDI p1 [ 400.904731][ T5934] loop5: partition table partially beyond EOD, truncated [ 400.914876][T24260] Dev loop5: unable to read RDB block 7 [ 400.916758][T24260] loop5: AHDI p1 [ 400.920134][T24260] loop5: partition table partially beyond EOD, truncated [ 400.972055][T24258] syzkaller0: entered promiscuous mode [ 400.974651][T24258] syzkaller0: entered allmulticast mode [ 403.880377][T24309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5736'. [ 404.076389][T24321] FAULT_INJECTION: forcing a failure. [ 404.076389][T24321] name failslab, interval 1, probability 0, space 0, times 0 [ 404.080760][T24321] CPU: 0 UID: 0 PID: 24321 Comm: syz.7.5739 Tainted: G L syzkaller #0 PREEMPT(full) [ 404.080778][T24321] Tainted: [L]=SOFTLOCKUP [ 404.080782][T24321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 404.080790][T24321] Call Trace: [ 404.080795][T24321] [ 404.080800][T24321] dump_stack_lvl+0x100/0x190 [ 404.080826][T24321] should_fail_ex.cold+0x5/0xa [ 404.080844][T24321] ? tomoyo_encode2+0xfb/0x3c0 [ 404.080910][T24321] should_failslab+0xc2/0x120 [ 404.080932][T24321] __kmalloc_noprof+0xe0/0x850 [ 404.080952][T24321] tomoyo_encode2+0xfb/0x3c0 [ 404.080967][T24321] tomoyo_encode+0x29/0x50 [ 404.080979][T24321] tomoyo_realpath_from_path+0x18c/0x690 [ 404.080999][T24321] tomoyo_path_number_perm+0x23c/0x580 [ 404.081020][T24321] ? tomoyo_path_number_perm+0x22e/0x580 [ 404.081038][T24321] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 404.081070][T24321] ? find_held_lock+0x2b/0x80 [ 404.081084][T24321] ? __fget_files+0x215/0x3d0 [ 404.081094][T24321] ? hook_file_ioctl_common+0x146/0x410 [ 404.081113][T24321] ? __fget_files+0x21f/0x3d0 [ 404.081125][T24321] security_file_ioctl+0xd3/0x230 [ 404.081139][T24321] __x64_sys_ioctl+0xb7/0x210 [ 404.081155][T24321] do_syscall_64+0x106/0xf80 [ 404.081169][T24321] ? clear_bhb_loop+0x40/0x90 [ 404.081183][T24321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.081194][T24321] RIP: 0033:0x7f2a62f9c799 [ 404.081205][T24321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.081216][T24321] RSP: 002b:00007f2a63f18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 404.081227][T24321] RAX: ffffffffffffffda RBX: 00007f2a63215fa0 RCX: 00007f2a62f9c799 [ 404.081234][T24321] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 404.081240][T24321] RBP: 00007f2a63f18090 R08: 0000000000000000 R09: 0000000000000000 [ 404.081247][T24321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.081253][T24321] R13: 00007f2a63216038 R14: 00007f2a63215fa0 R15: 00007ffda473e308 [ 404.081267][T24321] [ 404.081283][T24321] ERROR: Out of memory at tomoyo_realpath_from_path. [ 404.263666][T24335] wg1 speed is unknown, defaulting to 1000 [ 404.340102][T24339] syzkaller0: entered promiscuous mode [ 404.342694][T24339] syzkaller0: entered allmulticast mode [ 404.396998][T24343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5750'. [ 404.719276][T24355] xt_hashlimit: size too large, truncated to 1048576 [ 406.908299][T24369] FAULT_INJECTION: forcing a failure. [ 406.908299][T24369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.914278][T24369] CPU: 1 UID: 0 PID: 24369 Comm: syz.7.5759 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.914297][T24369] Tainted: [L]=SOFTLOCKUP [ 406.914301][T24369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 406.914308][T24369] Call Trace: [ 406.914347][T24369] [ 406.914352][T24369] dump_stack_lvl+0x100/0x190 [ 406.914485][T24369] should_fail_ex.cold+0x5/0xa [ 406.914501][T24369] __kvm_read_guest_page+0x186/0x250 [ 406.914547][T24369] kvm_fetch_guest_virt+0x128/0x1a0 [ 406.914564][T24369] __do_insn_fetch_bytes+0x5ef/0x7c0 [ 406.914578][T24369] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 406.914593][T24369] ? find_held_lock+0x2b/0x80 [ 406.914613][T24369] x86_decode_insn+0x3ca/0x6d80 [ 406.914636][T24369] ? __pfx_x86_decode_insn+0x10/0x10 [ 406.914650][T24369] ? vmx_cache_reg+0x54f/0x7b0 [ 406.914666][T24369] ? init_decode_cache+0xd/0x2a0 [ 406.914680][T24369] ? init_emulate_ctxt+0x415/0x6d0 [ 406.914695][T24369] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 406.914715][T24369] ? rcu_qs+0x2a/0xe0 [ 406.914759][T24369] x86_emulate_instruction+0x7a3/0x1f80 [ 406.914787][T24369] ? __pfx_handle_io+0x10/0x10 [ 406.914803][T24369] handle_io+0x233/0x2d0 [ 406.914824][T24369] vmx_handle_exit+0x84d/0x1f40 [ 406.914848][T24369] vcpu_run+0x34cf/0x5ca0 [ 406.914877][T24369] ? __pfx_vcpu_run+0x10/0x10 [ 406.914906][T24369] ? complete_emulated_mmio+0x39d/0x7f0 [ 406.914930][T24369] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 406.914950][T24369] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 406.914978][T24369] kvm_vcpu_ioctl+0x730/0x1730 [ 406.915003][T24369] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 406.915028][T24369] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 406.915046][T24369] ? do_vfs_ioctl+0x226/0x13e0 [ 406.915104][T24369] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 406.915119][T24369] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 406.915152][T24369] ? __fget_files+0x215/0x3d0 [ 406.915162][T24369] ? hook_file_ioctl_common+0x146/0x410 [ 406.915181][T24369] ? selinux_file_ioctl+0x139/0x290 [ 406.915192][T24369] ? selinux_file_ioctl+0xb4/0x290 [ 406.915204][T24369] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 406.915220][T24369] __x64_sys_ioctl+0x18e/0x210 [ 406.915236][T24369] do_syscall_64+0x106/0xf80 [ 406.915364][T24369] ? clear_bhb_loop+0x40/0x90 [ 406.915379][T24369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.915390][T24369] RIP: 0033:0x7f2a62f9c799 [ 406.915401][T24369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.915411][T24369] RSP: 002b:00007f2a63f18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 406.915437][T24369] RAX: ffffffffffffffda RBX: 00007f2a63215fa0 RCX: 00007f2a62f9c799 [ 406.915444][T24369] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 406.915450][T24369] RBP: 00007f2a63f18090 R08: 0000000000000000 R09: 0000000000000000 [ 406.915456][T24369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.915462][T24369] R13: 00007f2a63216038 R14: 00007f2a63215fa0 R15: 00007ffda473e308 [ 406.915477][T24369] [ 407.067771][T24375] netlink: 'syz.2.5760': attribute type 1 has an invalid length. [ 407.083143][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 407.083165][ T40] audit: type=1400 audit(1772161128.722:35242): avc: denied { remount } for pid=24374 comm="syz.2.5760" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 407.096861][T24375] bond3: entered promiscuous mode [ 407.099841][T24375] 8021q: adding VLAN 0 to HW filter on device bond3 [ 407.151756][T24382] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5762'. [ 407.259711][T24390] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5765'. [ 407.478291][T24398] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5769'. [ 407.498074][T24400] xt_hashlimit: size too large, truncated to 1048576 [ 407.600217][T24410] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5774'. [ 407.604344][T24412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5781'. [ 407.741567][T24420] wg1 speed is unknown, defaulting to 1000 [ 407.815809][T24430] FAULT_INJECTION: forcing a failure. [ 407.815809][T24430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.820931][T24430] CPU: 3 UID: 0 PID: 24430 Comm: syz.9.5782 Tainted: G L syzkaller #0 PREEMPT(full) [ 407.820951][T24430] Tainted: [L]=SOFTLOCKUP [ 407.820956][T24430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 407.820963][T24430] Call Trace: [ 407.820970][T24430] [ 407.820976][T24430] dump_stack_lvl+0x100/0x190 [ 407.821001][T24430] should_fail_ex.cold+0x5/0xa [ 407.821017][T24430] _copy_from_user+0x2e/0xd0 [ 407.821072][T24430] move_addr_to_kernel+0x65/0x170 [ 407.821220][T24430] copy_msghdr_from_user+0x417/0x4f0 [ 407.821235][T24430] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 407.821255][T24430] ___sys_sendmsg+0x106/0x1e0 [ 407.821270][T24430] ? __pfx____sys_sendmsg+0x10/0x10 [ 407.821299][T24430] __sys_sendmsg+0x170/0x220 [ 407.821310][T24430] ? __pfx___sys_sendmsg+0x10/0x10 [ 407.821329][T24430] do_syscall_64+0x106/0xf80 [ 407.821341][T24430] ? clear_bhb_loop+0x40/0x90 [ 407.821355][T24430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.821367][T24430] RIP: 0033:0x7fd43df9c799 [ 407.821379][T24430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.821389][T24430] RSP: 002b:00007fd43edf1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.821402][T24430] RAX: ffffffffffffffda RBX: 00007fd43e215fa0 RCX: 00007fd43df9c799 [ 407.821409][T24430] RDX: 0000000000000000 RSI: 0000200000002c40 RDI: 0000000000000003 [ 407.821415][T24430] RBP: 00007fd43edf1090 R08: 0000000000000000 R09: 0000000000000000 [ 407.821422][T24430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.821428][T24430] R13: 00007fd43e216038 R14: 00007fd43e215fa0 R15: 00007ffe924999b8 [ 407.821442][T24430] [ 407.934187][T24437] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5785'. [ 408.000881][T24439] FAULT_INJECTION: forcing a failure. [ 408.000881][T24439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.005265][T24439] CPU: 0 UID: 0 PID: 24439 Comm: syz.7.5786 Tainted: G L syzkaller #0 PREEMPT(full) [ 408.005285][T24439] Tainted: [L]=SOFTLOCKUP [ 408.005289][T24439] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 408.005296][T24439] Call Trace: [ 408.005301][T24439] [ 408.005307][T24439] dump_stack_lvl+0x100/0x190 [ 408.005331][T24439] should_fail_ex.cold+0x5/0xa [ 408.005346][T24439] __kvm_read_guest_page+0x186/0x250 [ 408.005364][T24439] kvm_vcpu_read_guest+0x69/0xe0 [ 408.005377][T24439] read_emulate+0x2b/0x50 [ 408.005394][T24439] emulator_read_write_onepage+0x2e2/0xb20 [ 408.005415][T24439] emulator_read_write+0x1d1/0x5c0 [ 408.005433][T24439] read_emulated+0x12c/0x290 [ 408.005450][T24439] x86_emulate_insn+0x7a4/0x4ad0 [ 408.005469][T24439] ? __pfx_x86_emulate_insn+0x10/0x10 [ 408.005484][T24439] ? init_emulate_ctxt+0x415/0x6d0 [ 408.005498][T24439] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 408.005513][T24439] ? rcu_qs+0x2a/0xe0 [ 408.005527][T24439] ? rcu_is_watching+0x12/0xc0 [ 408.005540][T24439] x86_emulate_instruction+0xb1c/0x1f80 [ 408.005557][T24439] ? __pfx_handle_io+0x10/0x10 [ 408.005568][T24439] handle_io+0x233/0x2d0 [ 408.005580][T24439] vmx_handle_exit+0x84d/0x1f40 [ 408.005594][T24439] vcpu_run+0x34cf/0x5ca0 [ 408.005612][T24439] ? __pfx_vcpu_run+0x10/0x10 [ 408.005628][T24439] ? complete_emulated_mmio+0x39d/0x7f0 [ 408.005642][T24439] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 408.005654][T24439] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 408.005671][T24439] kvm_vcpu_ioctl+0x730/0x1730 [ 408.005688][T24439] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 408.005703][T24439] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 408.005719][T24439] ? do_vfs_ioctl+0x226/0x13e0 [ 408.005735][T24439] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 408.005750][T24439] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 408.005768][T24439] ? __fget_files+0x215/0x3d0 [ 408.005778][T24439] ? hook_file_ioctl_common+0x146/0x410 [ 408.005796][T24439] ? selinux_file_ioctl+0x139/0x290 [ 408.005808][T24439] ? selinux_file_ioctl+0xb4/0x290 [ 408.005820][T24439] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 408.005836][T24439] __x64_sys_ioctl+0x18e/0x210 [ 408.005856][T24439] do_syscall_64+0x106/0xf80 [ 408.005868][T24439] ? clear_bhb_loop+0x40/0x90 [ 408.005882][T24439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.005893][T24439] RIP: 0033:0x7f2a62f9c799 [ 408.005903][T24439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.005913][T24439] RSP: 002b:00007f2a63f18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 408.005924][T24439] RAX: ffffffffffffffda RBX: 00007f2a63215fa0 RCX: 00007f2a62f9c799 [ 408.005931][T24439] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 408.005937][T24439] RBP: 00007f2a63f18090 R08: 0000000000000000 R09: 0000000000000000 [ 408.005944][T24439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.005950][T24439] R13: 00007f2a63216038 R14: 00007f2a63215fa0 R15: 00007ffda473e308 [ 408.005964][T24439] [ 408.426330][T24460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5795'. [ 408.516628][T24462] wg1 speed is unknown, defaulting to 1000 [ 408.759834][T24474] xt_hashlimit: size too large, truncated to 1048576 [ 408.824768][T24482] FAULT_INJECTION: forcing a failure. [ 408.824768][T24482] name failslab, interval 1, probability 0, space 0, times 0 [ 408.832531][T24482] CPU: 3 UID: 0 PID: 24482 Comm: syz.3.5802 Tainted: G L syzkaller #0 PREEMPT(full) [ 408.832552][T24482] Tainted: [L]=SOFTLOCKUP [ 408.832557][T24482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 408.832565][T24482] Call Trace: [ 408.832570][T24482] [ 408.832575][T24482] dump_stack_lvl+0x100/0x190 [ 408.832600][T24482] should_fail_ex.cold+0x5/0xa [ 408.832616][T24482] should_failslab+0xc2/0x120 [ 408.832635][T24482] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 408.832650][T24482] ? dst_alloc+0x99/0x1a0 [ 408.832696][T24482] ? widen_string+0xdb/0x2f0 [ 408.832715][T24482] dst_alloc+0x99/0x1a0 [ 408.832732][T24482] rt_dst_alloc+0x35/0x3a0 [ 408.832767][T24482] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 408.832788][T24482] ip_route_output_key_hash+0x118/0x2b0 [ 408.832804][T24482] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 408.832824][T24482] ? find_held_lock+0x2b/0x80 [ 408.832842][T24482] ip_route_output_flow+0x27/0x150 [ 408.832859][T24482] udp_sendmsg+0x1a77/0x2890 [ 408.832930][T24482] ? __pfx_udplite_getfrag+0x10/0x10 [ 408.832949][T24482] ? __pfx_udp_sendmsg+0x10/0x10 [ 408.832961][T24482] ? tomoyo_supervisor+0x1e7/0x1340 [ 408.832980][T24482] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 408.832999][T24482] ? up_write+0x290/0x4f0 [ 408.833017][T24482] ? __lock_acquire+0x4a5/0x2630 [ 408.833037][T24482] udpv6_sendmsg+0x156c/0x2f60 [ 408.833075][T24482] ? find_held_lock+0x2b/0x80 [ 408.833093][T24482] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 408.833129][T24482] ? __local_bh_enable_ip+0x9e/0x120 [ 408.833144][T24482] ? lockdep_hardirqs_on+0x78/0x100 [ 408.833155][T24482] ? inet_autobind+0x145/0x1a0 [ 408.833169][T24482] ? __local_bh_enable_ip+0x9e/0x120 [ 408.833183][T24482] ? inet_autobind+0x14a/0x1a0 [ 408.833195][T24482] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 408.833213][T24482] ? inet6_sendmsg+0x105/0x140 [ 408.833240][T24482] inet6_sendmsg+0x105/0x140 [ 408.833251][T24482] ____sys_sendmsg+0x704/0xc30 [ 408.833268][T24482] ? __pfx_____sys_sendmsg+0x10/0x10 [ 408.833289][T24482] ___sys_sendmsg+0x190/0x1e0 [ 408.833305][T24482] ? __pfx____sys_sendmsg+0x10/0x10 [ 408.833336][T24482] __sys_sendmsg+0x170/0x220 [ 408.833348][T24482] ? __pfx___sys_sendmsg+0x10/0x10 [ 408.833368][T24482] do_syscall_64+0x106/0xf80 [ 408.833380][T24482] ? clear_bhb_loop+0x40/0x90 [ 408.833393][T24482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.833405][T24482] RIP: 0033:0x7f7f25f9c799 [ 408.833415][T24482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.833425][T24482] RSP: 002b:00007f7f26f31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.833438][T24482] RAX: ffffffffffffffda RBX: 00007f7f26215fa0 RCX: 00007f7f25f9c799 [ 408.833445][T24482] RDX: 0000000000000000 RSI: 0000200000002c40 RDI: 0000000000000003 [ 408.833458][T24482] RBP: 00007f7f26f31090 R08: 0000000000000000 R09: 0000000000000000 [ 408.833465][T24482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.833472][T24482] R13: 00007f7f26216038 R14: 00007f7f26215fa0 R15: 00007ffd92d60908 [ 408.833486][T24482] [ 408.929137][T24484] FAULT_INJECTION: forcing a failure. [ 408.929137][T24484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.942745][T24484] CPU: 0 UID: 0 PID: 24484 Comm: syz.7.5803 Tainted: G L syzkaller #0 PREEMPT(full) [ 408.942766][T24484] Tainted: [L]=SOFTLOCKUP [ 408.942770][T24484] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 408.942778][T24484] Call Trace: [ 408.942783][T24484] [ 408.942788][T24484] dump_stack_lvl+0x100/0x190 [ 408.942813][T24484] should_fail_ex.cold+0x5/0xa [ 408.942829][T24484] _copy_to_user+0x32/0xd0 [ 408.942847][T24484] simple_read_from_buffer+0xcb/0x170 [ 408.942882][T24484] proc_fail_nth_read+0x1af/0x230 [ 408.942902][T24484] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.942918][T24484] ? rw_verify_area+0xce/0x6d0 [ 408.942932][T24484] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.942947][T24484] vfs_read+0x1e4/0xb30 [ 408.942965][T24484] ? __pfx_vfs_read+0x10/0x10 [ 408.942980][T24484] ? __fget_files+0x215/0x3d0 [ 408.942995][T24484] ? __fget_files+0x21f/0x3d0 [ 408.943009][T24484] ksys_read+0x12a/0x250 [ 408.943025][T24484] ? __pfx_ksys_read+0x10/0x10 [ 408.943045][T24484] do_syscall_64+0x106/0xf80 [ 408.943059][T24484] ? clear_bhb_loop+0x40/0x90 [ 408.943073][T24484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.943085][T24484] RIP: 0033:0x7f2a62f5cfce [ 408.943095][T24484] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 408.943106][T24484] RSP: 002b:00007f2a63f17fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 408.943119][T24484] RAX: ffffffffffffffda RBX: 00007f2a63f186c0 RCX: 00007f2a62f5cfce [ 408.943126][T24484] RDX: 000000000000000f RSI: 00007f2a63f180a0 RDI: 0000000000000006 [ 408.943133][T24484] RBP: 00007f2a63f18090 R08: 0000000000000000 R09: 0000000000000000 [ 408.943140][T24484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.943146][T24484] R13: 00007f2a63216038 R14: 00007f2a63215fa0 R15: 00007ffda473e308 [ 408.943161][T24484] [ 409.108667][T24493] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5805'. [ 409.222049][T24499] wg1 speed is unknown, defaulting to 1000 [ 409.612037][T24516] loop5: detected capacity change from 0 to 7 [ 409.626896][T24516] Dev loop5: unable to read RDB block 7 [ 409.629315][T24516] loop5: AHDI p1 [ 409.631037][T24516] loop5: partition table partially beyond EOD, truncated [ 409.731702][T24527] fuse: Bad value for 'group_id' [ 409.735458][T24527] fuse: Bad value for 'group_id' [ 409.757421][T24527] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5815'. [ 409.818845][T24531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5819'. [ 409.981249][T24542] wg1 speed is unknown, defaulting to 1000 [ 410.586590][T24566] loop5: detected capacity change from 0 to 7 [ 410.589800][T24566] Dev loop5: unable to read RDB block 7 [ 410.592677][T24566] loop5: AHDI p1 [ 410.594571][T24566] loop5: partition table partially beyond EOD, truncated [ 411.100902][T24600] xt_hashlimit: size too large, truncated to 1048576 [ 411.243588][T24606] loop5: detected capacity change from 0 to 7 [ 411.248778][ T5934] Dev loop5: unable to read RDB block 7 [ 411.250876][ T5934] loop5: AHDI p1 [ 411.253378][ T5934] loop5: partition table partially beyond EOD, truncated [ 411.259139][T24606] Dev loop5: unable to read RDB block 7 [ 411.261498][T24606] loop5: AHDI p1 [ 411.263136][T24606] loop5: partition table partially beyond EOD, truncated [ 412.920316][T24679] netlink: 'syz.2.5879': attribute type 10 has an invalid length. [ 412.928601][T24679] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 412.961649][T24681] xt_hashlimit: size too large, truncated to 1048576 [ 413.071214][T24687] __nla_validate_parse: 4 callbacks suppressed [ 413.071267][T24687] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5882'. [ 413.354195][T24713] xt_hashlimit: size too large, truncated to 1048576 [ 413.550640][T24722] trusted_key: encrypted_key: master key parameter '' is invalid [ 413.859930][T24732] loop5: detected capacity change from 0 to 7 [ 413.863909][ T5934] Dev loop5: unable to read RDB block 7 [ 413.866020][ T5934] loop5: AHDI p1 [ 413.867292][ T5934] loop5: partition table partially beyond EOD, truncated [ 413.876049][T24732] Dev loop5: unable to read RDB block 7 [ 413.878105][T24732] loop5: AHDI p1 [ 413.879654][T24732] loop5: partition table partially beyond EOD, truncated [ 414.758769][T24766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5913'. [ 414.810276][T24766] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5913'. [ 415.206293][ T34] libceph: connect (1)[c::]:6789 error -101 [ 415.208684][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 415.308696][T24794] ceph: No mds server is up or the cluster is laggy [ 415.396638][T24821] loop5: detected capacity change from 0 to 7 [ 415.399351][T24821] Dev loop5: unable to read RDB block 7 [ 415.401736][T24821] loop5: AHDI p1 [ 415.403465][T24821] loop5: partition table partially beyond EOD, truncated [ 415.603180][T24849] netlink: 'syz.2.5942': attribute type 1 has an invalid length. [ 415.606114][T24849] netlink: 760 bytes leftover after parsing attributes in process `syz.2.5942'. [ 415.691933][T24864] loop5: detected capacity change from 0 to 7 [ 415.697500][T24864] Dev loop5: unable to read RDB block 7 [ 415.699382][T24864] loop5: AHDI p1 [ 415.701106][T24864] loop5: partition table partially beyond EOD, truncated [ 415.874860][T24886] xt_hashlimit: size too large, truncated to 1048576 [ 416.038809][T24904] loop5: detected capacity change from 0 to 7 [ 416.043342][T24904] Dev loop5: unable to read RDB block 7 [ 416.046250][T24904] loop5: AHDI p1 [ 416.047905][T24904] loop5: partition table partially beyond EOD, truncated [ 416.126696][ T40] audit: type=1400 audit(1772161137.202:35243): avc: denied { setattr } for pid=24910 comm="syz.9.5965" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 416.137623][T24915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5966'. [ 416.256874][T24929] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5970'. [ 416.278357][T24929] bond1: entered promiscuous mode [ 416.280836][T24929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 416.290112][T24929] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5970'. [ 416.293737][T24929] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5970'. [ 416.296738][T24929] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5970'. [ 416.329685][T24929] bond1: (slave sit2): refused to change device type [ 416.366581][T24936] loop5: detected capacity change from 0 to 7 [ 416.373549][T24939] xt_hashlimit: size too large, truncated to 1048576 [ 416.378969][ T5934] Dev loop5: unable to read RDB block 7 [ 416.379717][T24940] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000700 undefined [ 416.380935][ T5934] loop5: AHDI p1 [ 416.385875][ T5934] loop5: partition table partially beyond EOD, truncated [ 416.390767][T24936] Dev loop5: unable to read RDB block 7 [ 416.392826][T24936] loop5: AHDI p1 [ 416.393994][T24936] loop5: partition table partially beyond EOD, truncated [ 416.517134][T24946] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.521140][T24946] bridge_slave_1: left allmulticast mode [ 416.523571][T24946] bridge_slave_1: left promiscuous mode [ 416.528092][T24946] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.626285][T24959] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5982'. [ 416.713976][T24965] loop5: detected capacity change from 0 to 7 [ 416.717270][T24965] Dev loop5: unable to read RDB block 7 [ 416.726833][T24965] loop5: AHDI p1 [ 416.728600][T24965] loop5: partition table partially beyond EOD, truncated [ 416.755450][ T5936] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 416.782894][ T5936] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 416.788990][ T5936] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 416.798176][ T5936] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 416.802351][ T5936] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 416.876042][T24966] wg1 speed is unknown, defaulting to 1000 [ 417.148926][T24966] chnl_net:caif_netlink_parms(): no params data found [ 417.180484][T24989] loop5: detected capacity change from 0 to 7 [ 417.183736][T24989] Dev loop5: unable to read RDB block 7 [ 417.192866][T24989] loop5: AHDI p1 [ 417.194668][T24989] loop5: partition table partially beyond EOD, truncated [ 417.295988][T24966] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.298408][T24966] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.300966][T24966] bridge_slave_0: entered allmulticast mode [ 417.304329][T24966] bridge_slave_0: entered promiscuous mode [ 417.307996][T24966] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.310505][T24966] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.314744][T24966] bridge_slave_1: entered allmulticast mode [ 417.317839][T24966] bridge_slave_1: entered promiscuous mode [ 417.358635][T24966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.365248][T24966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.437559][T24966] team0: Port device team_slave_0 added [ 417.443925][T24966] team0: Port device team_slave_1 added [ 417.468948][T24966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.472084][T24966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.483317][T24966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.492843][T24966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.496716][T24966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.506713][T24966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.514408][T25008] xt_hashlimit: size too large, truncated to 1048576 [ 417.564665][T24966] hsr_slave_0: entered promiscuous mode [ 417.567585][T24966] hsr_slave_1: entered promiscuous mode [ 417.577237][T24966] debugfs: 'hsr0' already exists in 'hsr' [ 417.579696][T24966] Cannot create hsr debugfs directory [ 417.637070][T25017] netlink: 'syz.7.6002': attribute type 6 has an invalid length. [ 417.640481][T25017] netlink: 'syz.7.6002': attribute type 5 has an invalid length. [ 417.644935][T25017] netlink: 'syz.7.6002': attribute type 4 has an invalid length. [ 417.778962][ T218] bridge_slave_1: left allmulticast mode [ 417.781196][ T218] bridge_slave_1: left promiscuous mode [ 417.785237][ T218] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.790298][ T218] bridge_slave_0: left allmulticast mode [ 417.792223][ T218] bridge_slave_0: left promiscuous mode [ 417.794990][ T218] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.841378][ T9] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 417.943162][ T218] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 418.011150][ T218] bond1 (unregistering): (slave bridge1): Releasing active interface [ 418.137612][ T218] tipc: Disabling bearer [ 418.329219][ T218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.333248][ T218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.337023][ T218] bond0 (unregistering): Released all slaves [ 418.342142][ T218] bond1 (unregistering): Released all slaves [ 418.353329][ T218] bond2 (unregistering): Released all slaves [ 418.362586][ T218] bond3 (unregistering): Released all slaves [ 418.602347][T25055] syzkaller0: entered promiscuous mode [ 418.607473][T25055] syzkaller0: entered allmulticast mode [ 418.770274][T25080] __nla_validate_parse: 3 callbacks suppressed [ 418.770294][T25080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6020'. [ 418.978873][ T5938] Bluetooth: hci4: command tx timeout [ 419.619147][T25092] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6024'. [ 421.193283][ T5938] Bluetooth: hci4: command tx timeout [ 421.339300][ T218] tipc: Left network mode [ 421.555410][T25107] wg1 speed is unknown, defaulting to 1000 [ 421.753394][T24966] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 421.762255][T24966] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 421.777541][ T218] hsr_slave_0: left promiscuous mode [ 421.780512][ T218] hsr_slave_1: left promiscuous mode [ 421.985385][T24966] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 421.996012][T24966] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 422.072329][T24966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.083512][T24966] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.090163][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.093349][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.105582][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.108817][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.159908][T25130] loop5: detected capacity change from 0 to 7 [ 422.167665][ T5934] Dev loop5: unable to read RDB block 7 [ 422.169594][ T5934] loop5: AHDI p1 [ 422.170908][ T5934] loop5: partition table partially beyond EOD, truncated [ 422.196510][T25130] Dev loop5: unable to read RDB block 7 [ 422.200018][T25130] loop5: AHDI p1 [ 422.201928][T25130] loop5: partition table partially beyond EOD, truncated [ 422.339376][ T40] audit: type=1400 audit(1772161143.037:35244): avc: denied { setopt } for pid=25137 comm="syz.3.6033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 422.341459][T24966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.391306][T25140] syzkaller0: entered promiscuous mode [ 422.393346][T25140] syzkaller0: entered allmulticast mode [ 422.432190][T24966] veth0_vlan: entered promiscuous mode [ 422.474315][T24966] veth1_vlan: entered promiscuous mode [ 422.501324][T24966] veth0_macvtap: entered promiscuous mode [ 422.516033][T24966] veth1_macvtap: entered promiscuous mode [ 422.534730][T24966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.545320][T24966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.555742][T16295] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.569059][T16295] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.572393][T16295] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.575624][T16295] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.709265][T25148] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6038'. [ 422.734964][T16299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.738002][T16299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.772923][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.775672][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.910697][T25164] wg1 speed is unknown, defaulting to 1000 [ 423.191262][T25195] loop5: detected capacity change from 0 to 7 [ 423.194737][T25195] Dev loop5: unable to read RDB block 7 [ 423.199603][T25195] loop5: AHDI p1 [ 423.201019][T25195] loop5: partition table partially beyond EOD, truncated [ 423.277060][T25197] wg1 speed is unknown, defaulting to 1000 [ 423.410651][ T5938] Bluetooth: hci4: command tx timeout [ 423.438559][T25212] team0: Port device vlan3 added [ 423.486054][T25221] wg1 speed is unknown, defaulting to 1000 [ 423.490047][T25225] loop5: detected capacity change from 0 to 7 [ 423.493515][ T5934] Dev loop5: unable to read RDB block 7 [ 423.496357][ T5934] loop5: AHDI p1 [ 423.497822][ T5934] loop5: partition table partially beyond EOD, truncated [ 423.502801][T25225] Dev loop5: unable to read RDB block 7 [ 423.505407][T25225] loop5: AHDI p1 [ 423.508757][T25225] loop5: partition table partially beyond EOD, truncated [ 423.511575][T25228] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6061'. [ 423.786315][T25256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6072'. [ 423.807977][T25258] loop5: detected capacity change from 0 to 7 [ 423.814963][T25258] Dev loop5: unable to read RDB block 7 [ 423.828895][T25258] loop5: AHDI p1 [ 423.830721][T25258] loop5: partition table partially beyond EOD, truncated [ 423.847468][ T34] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 423.885418][T25260] wg1 speed is unknown, defaulting to 1000 [ 424.019596][ T34] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 424.028583][ T34] usb 8-1: config 0 has no interface number 0 [ 424.031522][ T34] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 424.036369][ T34] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 424.042299][ T34] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 424.047834][ T34] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 424.052403][ T34] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 424.056829][ T34] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 424.059874][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.074946][ T34] usb 8-1: config 0 descriptor?? [ 424.078734][T25237] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 424.096656][ T34] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 424.132041][T25272] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 424.132247][T25271] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 424.143890][T25270] trusted_key: encrypted_key: insufficient parameters specified [ 424.194752][T25271] bond1: option xmit_hash_policy: invalid value (6) [ 424.201147][T25271] bond1 (unregistering): Released all slaves [ 424.316889][T25278] NILFS (nbd7): device size too small [ 424.332137][T25237] can0: slcan on ttynull. [ 424.552697][T25282] can0 (unregistered): slcan off ttynull. [ 424.559691][ T6002] usb 8-1: USB disconnect, device number 10 [ 424.572707][ T6002] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 424.625794][ T34] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 424.628842][T25295] loop5: detected capacity change from 0 to 7 [ 424.633252][T25295] Dev loop5: unable to read RDB block 7 [ 424.635942][T25295] loop5: AHDI p1 [ 424.638992][T25295] loop5: partition table partially beyond EOD, truncated [ 424.649857][ T5934] udevd[5934]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 424.762729][T25304] xt_hashlimit: size too large, truncated to 1048576 [ 424.789670][ T34] usb 12-1: Using ep0 maxpacket: 16 [ 424.795066][ T34] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.804502][ T34] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.809892][ T34] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 424.815848][ T34] usb 12-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 424.821910][ T34] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.830322][ T34] usb 12-1: config 0 descriptor?? [ 424.994790][ T40] audit: type=1400 audit(1772161145.523:35245): avc: denied { write } for pid=25319 comm="syz.9.6090" name="/" dev="configfs" ino=3117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 425.012516][ T40] audit: type=1400 audit(1772161145.542:35246): avc: denied { unmount } for pid=22877 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 425.268933][ T34] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 425.279547][ T34] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 425.282866][ T34] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 425.285639][ T34] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 425.289877][ T34] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 425.293294][ T34] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 425.296249][ T34] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 425.299467][ T34] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 425.302058][ T34] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 425.305067][ T34] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 425.311237][ T34] HID 045e:07da: Invalid code 65791 type 1 [ 425.322182][ T34] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/0003:045E:07DA.0012/input/input31 [ 425.348707][ T34] microsoft 0003:045E:07DA.0012: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 425.483268][T23079] usb 12-1: USB disconnect, device number 16 [ 425.616991][ T5938] Bluetooth: hci4: command tx timeout [ 425.632549][ T40] audit: type=1400 audit(1772161146.123:35247): avc: denied { remount } for pid=25342 comm="syz.2.6098" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 425.635365][T25343] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6098'. [ 425.721044][T25347] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6100'. [ 425.769937][T25349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6101'. [ 425.775354][T25349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6101'. [ 426.172566][T25357] loop5: detected capacity change from 0 to 7 [ 426.176178][T25357] Dev loop5: unable to read RDB block 7 [ 426.178923][T25357] loop5: AHDI p1 [ 426.180272][T25357] loop5: partition table partially beyond EOD, truncated [ 426.491449][T25371] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 426.512622][ T1029] usb 14-1: new high-speed USB device number 21 using dummy_hcd [ 426.686197][T25380] binder: Unknown parameter 'st€è¹Qà' [ 426.708477][ T1029] usb 14-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 426.711680][ T1029] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.714478][ T1029] usb 14-1: Product: syz [ 426.716442][ T1029] usb 14-1: Manufacturer: syz [ 426.725629][ T1029] usb 14-1: SerialNumber: syz [ 426.728950][ T1029] usb 14-1: config 0 descriptor?? [ 426.732509][ T1029] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 426.747790][ T1029] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 426.757771][ T1029] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 426.760861][ T1029] usb 14-1: media controller created [ 426.779562][ T1029] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 426.828625][ T1029] DVB: Unable to find symbol mt352_attach() [ 426.867867][ T1029] DVB: Unable to find symbol nxt6000_attach() [ 426.869973][ T1029] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 426.881057][ T1029] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb14/14-1/input/input32 [ 426.896698][ T1029] dvb-usb: schedule remote query interval to 1000 msecs. [ 426.899817][ T1029] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 426.903526][ T1029] dvb-usb: bulk message failed: -22 (7/0) [ 426.905374][ T1029] dvb-usb: bulk message failed: -22 (7/0) [ 426.954986][T25359] dvb-usb: bulk message failed: -22 (7/0) [ 426.960290][ T1029] usb 14-1: USB disconnect, device number 21 [ 426.990677][ T1029] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 427.628687][T25424] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 427.730550][T25434] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6129'. [ 427.904505][T25439] ptrace attach of "/syz-executor exec"[25441] was attempted by "/syz-executor exec"[25439] [ 427.964622][ T40] audit: type=1400 audit(1772161148.309:35248): avc: denied { listen } for pid=25444 comm="syz.9.6134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 428.124432][T25460] qrtr: Invalid version 0 [ 428.204817][T25465] wg1 speed is unknown, defaulting to 1000 [ 428.208180][T25462] netlink: 'syz.3.6140': attribute type 1 has an invalid length. [ 428.212040][T25462] netlink: 'syz.3.6140': attribute type 2 has an invalid length. [ 428.216175][T25462] netlink: 'syz.3.6140': attribute type 1 has an invalid length. [ 428.219370][T25462] netlink: 'syz.3.6140': attribute type 3 has an invalid length. [ 428.222351][T25462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6140'. [ 428.265704][T25473] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6143'. [ 428.381083][T25477] loop5: detected capacity change from 0 to 7 [ 428.384860][T25477] Dev loop5: unable to read RDB block 7 [ 428.387459][T25477] loop5: AHDI p1 [ 428.391032][T25477] loop5: partition table partially beyond EOD, truncated [ 428.428916][ T40] audit: type=1400 audit(1772161148.741:35249): avc: denied { append } for pid=25481 comm="syz.9.6147" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 428.482217][T25489] qrtr: Invalid version 0 [ 428.837560][T25504] wg1 speed is unknown, defaulting to 1000 [ 428.881734][T25508] loop5: detected capacity change from 0 to 7 [ 428.886063][ T5934] Dev loop5: unable to read RDB block 7 [ 428.888182][ T5934] loop5: AHDI p1 [ 428.894884][ T5934] loop5: partition table partially beyond EOD, truncated [ 428.905472][T25508] Dev loop5: unable to read RDB block 7 [ 428.908125][T25508] loop5: AHDI p1 [ 428.910008][T25508] loop5: partition table partially beyond EOD, truncated [ 428.952128][T25511] qrtr: Invalid version 0 [ 429.113506][ T5938] Bluetooth: hci3: command tx timeout [ 429.429359][T25537] loop5: detected capacity change from 0 to 7 [ 429.433960][ T5934] Dev loop5: unable to read RDB block 7 [ 429.435892][ T5934] loop5: AHDI p1 [ 429.437124][ T5934] loop5: partition table partially beyond EOD, truncated [ 429.443340][T25537] Dev loop5: unable to read RDB block 7 [ 429.445474][T25537] loop5: AHDI p1 [ 429.446774][T25537] loop5: partition table partially beyond EOD, truncated [ 429.461147][ T40] audit: type=1400 audit(1772161149.716:35250): avc: denied { watch_sb } for pid=25538 comm="syz.2.6168" path="/32/file0" dev="tmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 429.941115][T25549] openvswitch: netlink: Key type 333 is out of range max 32 [ 430.039947][T25561] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 430.418205][T25577] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 430.427006][T25577] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6177'. [ 430.430035][T25577] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 430.458239][T25581] loop5: detected capacity change from 0 to 7 [ 430.461778][ T5934] Dev loop5: unable to read RDB block 7 [ 430.463752][ T5934] loop5: AHDI p1 [ 430.465220][ T5934] loop5: partition table partially beyond EOD, truncated [ 431.051232][T25606] tipc: Started in network mode [ 431.053595][T25606] tipc: Node identity ac14140f, cluster identity 4711 [ 431.056925][T25606] tipc: New replicast peer: 255.255.255.255 [ 431.061436][T25606] tipc: Enabled bearer , priority 10 [ 431.065477][T25606] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6189'. [ 431.069428][T25606] tipc: Disabling bearer [ 431.220344][T25581] Dev loop5: unable to read RDB block 7 [ 431.223042][T25581] loop5: AHDI p1 [ 431.225168][T25581] loop5: partition table partially beyond EOD, truncated [ 431.272592][T25619] xt_hashlimit: size too large, truncated to 1048576 [ 431.464766][T25630] netlink: 'syz.2.6198': attribute type 3 has an invalid length. [ 431.500038][ T40] audit: type=1400 audit(1772161151.620:35251): avc: denied { name_bind } for pid=25631 comm="syz.2.6199" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 431.543649][T25636] netlink: 'syz.7.6200': attribute type 1 has an invalid length. [ 431.544184][ T40] audit: type=1400 audit(1772161151.667:35252): avc: denied { write } for pid=25635 comm="syz.7.6200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 431.549214][T25636] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 431.631837][T25648] gtp0: entered promiscuous mode [ 431.637224][T25648] team0: Refused to change device type [ 431.656908][T25650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6205'. [ 431.732454][T25654] xt_hashlimit: size too large, truncated to 1048576 [ 431.872183][T25663] wg1 speed is unknown, defaulting to 1000 [ 431.983604][ T5938] Bluetooth: hci4: ACL packet for unknown connection handle 100 [ 432.313763][T25703] wg1 speed is unknown, defaulting to 1000 [ 432.359709][T25711] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6224'. [ 432.371776][T25705] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6222'. [ 432.374697][T25705] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6222'. [ 432.380737][ T40] audit: type=1400 audit(1772161152.455:35253): avc: denied { setattr } for pid=25704 comm="syz.9.6222" name="nbd9" dev="devtmpfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 432.847452][T25751] wg1 speed is unknown, defaulting to 1000 [ 433.102957][T25760] IPv4: Oversized IP packet from 172.20.20.24 [ 433.106653][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 433.109577][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 433.218434][T25763] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 433.295943][T25768] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6244'. [ 433.325690][ T53] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 433.358561][T25772] qrtr: Invalid version 0 [ 433.414357][T25779] wg1 speed is unknown, defaulting to 1000 [ 433.494776][ T53] usb 12-1: Using ep0 maxpacket: 8 [ 433.499103][ T53] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 433.503291][ T53] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 433.509642][ T53] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 433.514714][ T53] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 433.519781][ T53] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 433.526185][ T53] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 433.531008][ T53] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.769051][ T53] usb 12-1: usb_control_msg returned -32 [ 433.772261][ T53] usbtmc 12-1:16.0: can't read capabilities [ 433.849747][T25793] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6253'. [ 433.948802][T25798] loop5: detected capacity change from 0 to 7 [ 433.952277][T25798] Dev loop5: unable to read RDB block 7 [ 433.955245][T25798] loop5: AHDI p1 [ 433.956668][T25798] loop5: partition table partially beyond EOD, truncated [ 434.104537][T25808] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6259'. [ 434.107579][T25808] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 434.432008][T25818] 9p: Bad value for 'rfdno' [ 434.436975][T25818] binder: BINDER_SET_CONTEXT_MGR already set [ 434.439716][T25818] binder: 25817:25818 ioctl 4018620d 200000000040 returned -16 [ 434.513904][T25823] netlink: 56 bytes leftover after parsing attributes in process `syz.9.6265'. [ 434.546816][T25821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6264'. [ 434.726363][T25828] xt_hashlimit: size too large, truncated to 1048576 [ 434.815633][ T24] usb 12-1: USB disconnect, device number 17 [ 434.819611][T25832] netlink: zone id is out of range [ 434.822008][T25832] netlink: zone id is out of range [ 434.824328][T25832] netlink: zone id is out of range [ 434.827083][T25832] netlink: zone id is out of range [ 434.830072][T25832] netlink: zone id is out of range [ 434.832248][T25832] netlink: zone id is out of range [ 434.932039][T25839] wg1 speed is unknown, defaulting to 1000 [ 435.448224][T25852] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 435.448486][T25851] overlayfs: upper fs does not support file handles, falling back to index=off. [ 435.584577][ T40] audit: type=1804 audit(1772161155.457:35254): pid=25858 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.6276" name="/newroot/229/file1/file0" dev="9p" ino=75497539 res=1 errno=0 [ 435.644710][T25862] qrtr: Invalid version 0 [ 435.751859][T25864] input: syz0 as /devices/virtual/input/input33 [ 436.584280][T25774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.649763][T25907] tmpfs: Bad value for 'mpol' [ 436.741861][T25919] __nla_validate_parse: 9 callbacks suppressed [ 436.741877][T25919] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6286'. [ 436.753066][T25921] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6286'. [ 436.862225][T25940] bridge0: entered promiscuous mode [ 436.878786][T25942] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6292'. [ 436.921061][T25950] xt_hashlimit: size too large, truncated to 1048576 [ 437.142613][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 437.152105][T25977] qrtr: Invalid version 213 [ 438.068548][ T5938] Bluetooth: hci2: command 0x0c1a tx timeout [ 438.071181][ T24] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 438.074505][ T24] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 438.182022][T26015] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6306'. [ 438.376740][T26017] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.427849][T26017] vlan4: entered promiscuous mode [ 438.430438][T26017] bridge0: entered promiscuous mode [ 438.512500][T26017] kvm: kvm [26016]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 438.518673][T26017] kvm: kvm [26016]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 438.990737][T26028] syzkaller0: entered promiscuous mode [ 438.993369][T26028] syzkaller0: entered allmulticast mode [ 439.091622][ T5938] Bluetooth: hci3: command tx timeout [ 440.285619][ T24] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 440.288460][ T24] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 440.294167][ C1] ------------[ cut here ]------------ [ 440.297305][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci1 [ 440.300573][ C1] WARNING: kernel/workqueue.c:2270 at __queue_work+0xd08/0x1150, CPU#1: syz.9.6311/26027 [ 440.304857][ C1] Modules linked in: [ 440.307032][ C1] CPU: 1 UID: 0 PID: 26027 Comm: syz.9.6311 Tainted: G L syzkaller #0 PREEMPT(full) [ 440.310911][ C1] Tainted: [L]=SOFTLOCKUP [ 440.312394][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 440.315739][ C1] RIP: 0010:__queue_work+0xd0c/0x1150 [ 440.317488][ C1] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 04 04 00 00 48 8d 3d 88 9d 0c 0f 48 8b 75 18 <67> 48 0f b9 3a e9 2a f7 ff ff e8 35 cd 38 00 90 0f 0b 90 e9 b2 f5 [ 440.324629][ C1] RSP: 0018:ffffc900006a0be8 EFLAGS: 00010046 [ 440.326940][ C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11005696151 [ 440.330196][ C1] RDX: ffff888039e55978 RSI: ffffffff8a8341c0 RDI: ffffffff90dc6fe0 [ 440.333732][ C1] RBP: ffff88802b4b0a70 R08: 0000000000000005 R09: 0000000000000000 [ 440.337169][ C1] R10: 0000000000000100 R11: 0000000000000000 R12: ffff888039e55800 [ 440.340567][ C1] R13: 1ffff920000d418f R14: ffffffff81cfe370 R15: 0000000000000001 [ 440.344221][ C1] FS: 00005555561b8500(0000) GS:ffff8880d6447000(0000) knlGS:0000000000000000 [ 440.348574][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 440.351452][ C1] CR2: 00007f1de71d0000 CR3: 000000004fea7000 CR4: 0000000000352ef0 [ 440.354766][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 440.357490][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 440.361240][ C1] Call Trace: [ 440.362823][ C1] [ 440.364107][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 440.366551][ C1] call_timer_fn+0x19a/0x670 [ 440.368631][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 440.370871][ C1] ? __run_timers+0x560/0xb30 [ 440.373069][ C1] ? __run_timers+0x560/0xb30 [ 440.375283][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 440.377891][ C1] __run_timers+0x570/0xb30 [ 440.379832][ C1] ? __pfx___run_timers+0x10/0x10 [ 440.382162][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 440.384479][ C1] run_timer_base+0x114/0x190 [ 440.386620][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 440.388980][ C1] run_timer_softirq+0x1a/0x50 [ 440.391238][ C1] handle_softirqs+0x1eb/0x9e0 [ 440.393421][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 440.395731][ C1] __irq_exit_rcu+0xef/0x150 [ 440.397941][ C1] irq_exit_rcu+0x9/0x30 [ 440.399992][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 440.402677][ C1] [ 440.404155][ C1] [ 440.405618][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 440.408362][ C1] RIP: 0010:lockdep_unregister_key+0x12b/0x1d0 [ 440.411073][ C1] Code: e8 da dd ff ff 48 83 2d 5a ed 48 14 01 89 c3 e8 2b e0 ff ff 9c 58 f6 c4 02 0f 85 8a 00 00 00 f7 c5 00 02 00 00 74 01 fb 84 db <75> 40 5b 5d 41 5c e9 3a 95 09 00 9c 58 f6 c4 02 0f 84 16 ff ff ff [ 440.419516][ C1] RSP: 0018:ffffc90006037a60 EFLAGS: 00000246 [ 440.422320][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 440.425645][ C1] RDX: 0000000000000000 RSI: ffffffff8df63e51 RDI: ffffffff8c1af120 [ 440.428944][ C1] RBP: 0000000000000246 R08: 000000000007ba2f R09: ffffffff963ce07e [ 440.432287][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: ffffffff97926c78 [ 440.435447][ C1] R13: ffff88802207c000 R14: ffff88802207c4d0 R15: 0000000000000100 [ 440.439018][ C1] __qdisc_destroy+0x172/0x560 [ 440.441432][ C1] qdisc_put+0xb0/0xf0 [ 440.443567][ C1] shutdown_scheduler_queue+0xa5/0x160 [ 440.445785][ C1] dev_shutdown+0xb3/0x440 [ 440.447756][ C1] unregister_netdevice_many_notify+0xd56/0x2580 [ 440.450509][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 440.453103][ C1] ? ref_tracker_alloc+0x307/0x590 [ 440.455528][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 440.458645][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 440.461344][ C1] ? linkwatch_fire_event+0x211/0x270 [ 440.463619][ C1] ? netif_carrier_off+0xa8/0xc0 [ 440.465723][ C1] unregister_netdevice_queue+0x30b/0x3c0 [ 440.468226][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 440.470924][ C1] ? linkwatch_schedule_work+0x16f/0x1a0 [ 440.473515][ C1] ? linkwatch_fire_event+0x74/0x270 [ 440.476050][ C1] __tun_detach+0x1173/0x1480 [ 440.478309][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 440.480455][ C1] tun_chr_close+0xc2/0x220 [ 440.482484][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 440.484712][ C1] __fput+0x3ff/0xb40 [ 440.486705][ C1] task_work_run+0x150/0x240 [ 440.489000][ C1] ? __pfx_task_work_run+0x10/0x10 [ 440.491287][ C1] exit_to_user_mode_loop+0x100/0x4a0 [ 440.493669][ C1] do_syscall_64+0x67c/0xf80 [ 440.495593][ C1] ? clear_bhb_loop+0x40/0x90 [ 440.497674][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.500270][ C1] RIP: 0033:0x7fd43df9c799 [ 440.502371][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.510763][ C1] RSP: 002b:00007ffe92499b18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 440.514631][ C1] RAX: 0000000000000000 RBX: 00007ffe92499c00 RCX: 00007fd43df9c799 [ 440.518487][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 440.522109][ C1] RBP: 000000000006952d R08: 0000000000000001 R09: 0000000000000000 [ 440.525313][ C1] R10: 0000001b31a20000 R11: 0000000000000246 R12: 00007ffe92499c40 [ 440.528419][ C1] R13: 00007fd43e215fac R14: 0000000000069587 R15: 00007fd43e215fa0 [ 440.531848][ C1] [ 440.533379][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 440.536773][ C1] CPU: 1 UID: 0 PID: 26027 Comm: syz.9.6311 Tainted: G L syzkaller #0 PREEMPT(full) [ 440.540630][ C1] Tainted: [L]=SOFTLOCKUP [ 440.542184][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 440.545937][ C1] Call Trace: [ 440.547396][ C1] [ 440.548631][ C1] dump_stack_lvl+0x100/0x190 [ 440.550685][ C1] vpanic+0x552/0x970 [ 440.552658][ C1] ? __pfx_vpanic+0x10/0x10 [ 440.554712][ C1] panic+0xd1/0xe0 [ 440.556377][ C1] ? __pfx_panic+0x10/0x10 [ 440.558280][ C1] ? check_panic_on_warn+0x1f/0x90 [ 440.560538][ C1] check_panic_on_warn.cold+0x19/0x34 [ 440.562887][ C1] ? __queue_work+0xd08/0x1150 [ 440.564843][ C1] __warn.cold+0x191/0x348 [ 440.566349][ C1] __report_bug+0x296/0x3d0 [ 440.568399][ C1] ? __queue_work+0xd08/0x1150 [ 440.570563][ C1] ? __pfx___report_bug+0x10/0x10 [ 440.572964][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 440.575519][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 440.577293][ C1] ? _raw_spin_lock_irqsave+0x52/0x60 [ 440.579016][ C1] ? look_up_lock_class+0x64/0x120 [ 440.580722][ C1] report_bug_entry+0xe1/0x290 [ 440.582317][ C1] ? __queue_work+0xd0c/0x1150 [ 440.583998][ C1] handle_bug+0x1c9/0x2a0 [ 440.585685][ C1] exc_invalid_op+0x17/0x50 [ 440.587384][ C1] asm_exc_invalid_op+0x1a/0x20 [ 440.589082][ C1] RIP: 0010:__queue_work+0xd0c/0x1150 [ 440.591025][ C1] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 04 04 00 00 48 8d 3d 88 9d 0c 0f 48 8b 75 18 <67> 48 0f b9 3a e9 2a f7 ff ff e8 35 cd 38 00 90 0f 0b 90 e9 b2 f5 [ 440.597707][ C1] RSP: 0018:ffffc900006a0be8 EFLAGS: 00010046 [ 440.600373][ C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11005696151 [ 440.603947][ C1] RDX: ffff888039e55978 RSI: ffffffff8a8341c0 RDI: ffffffff90dc6fe0 [ 440.607663][ C1] RBP: ffff88802b4b0a70 R08: 0000000000000005 R09: 0000000000000000 [ 440.611248][ C1] R10: 0000000000000100 R11: 0000000000000000 R12: ffff888039e55800 [ 440.614833][ C1] R13: 1ffff920000d418f R14: ffffffff81cfe370 R15: 0000000000000001 [ 440.618307][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 440.620849][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 440.623158][ C1] ? __queue_work+0xcda/0x1150 [ 440.625306][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 440.628196][ C1] call_timer_fn+0x19a/0x670 [ 440.630439][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 440.632742][ C1] ? __run_timers+0x560/0xb30 [ 440.634775][ C1] ? __run_timers+0x560/0xb30 [ 440.636854][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 440.639393][ C1] __run_timers+0x570/0xb30 [ 440.641402][ C1] ? __pfx___run_timers+0x10/0x10 [ 440.643726][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 440.646020][ C1] run_timer_base+0x114/0x190 [ 440.648356][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 440.650794][ C1] run_timer_softirq+0x1a/0x50 [ 440.653021][ C1] handle_softirqs+0x1eb/0x9e0 [ 440.655198][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 440.657508][ C1] __irq_exit_rcu+0xef/0x150 [ 440.659516][ C1] irq_exit_rcu+0x9/0x30 [ 440.661402][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 440.664092][ C1] [ 440.665575][ C1] [ 440.666986][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 440.669604][ C1] RIP: 0010:lockdep_unregister_key+0x12b/0x1d0 [ 440.672288][ C1] Code: e8 da dd ff ff 48 83 2d 5a ed 48 14 01 89 c3 e8 2b e0 ff ff 9c 58 f6 c4 02 0f 85 8a 00 00 00 f7 c5 00 02 00 00 74 01 fb 84 db <75> 40 5b 5d 41 5c e9 3a 95 09 00 9c 58 f6 c4 02 0f 84 16 ff ff ff [ 440.680763][ C1] RSP: 0018:ffffc90006037a60 EFLAGS: 00000246 [ 440.683547][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 440.686824][ C1] RDX: 0000000000000000 RSI: ffffffff8df63e51 RDI: ffffffff8c1af120 [ 440.690302][ C1] RBP: 0000000000000246 R08: 000000000007ba2f R09: ffffffff963ce07e [ 440.693795][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: ffffffff97926c78 [ 440.696839][ C1] R13: ffff88802207c000 R14: ffff88802207c4d0 R15: 0000000000000100 [ 440.700056][ C1] __qdisc_destroy+0x172/0x560 [ 440.702155][ C1] qdisc_put+0xb0/0xf0 [ 440.704010][ C1] shutdown_scheduler_queue+0xa5/0x160 [ 440.706368][ C1] dev_shutdown+0xb3/0x440 [ 440.708218][ C1] unregister_netdevice_many_notify+0xd56/0x2580 [ 440.710854][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 440.713530][ C1] ? ref_tracker_alloc+0x307/0x590 [ 440.715604][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 440.718626][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 440.721348][ C1] ? linkwatch_fire_event+0x211/0x270 [ 440.724039][ C1] ? netif_carrier_off+0xa8/0xc0 [ 440.726435][ C1] unregister_netdevice_queue+0x30b/0x3c0 [ 440.728986][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 440.731651][ C1] ? linkwatch_schedule_work+0x16f/0x1a0 [ 440.734038][ C1] ? linkwatch_fire_event+0x74/0x270 [ 440.736364][ C1] __tun_detach+0x1173/0x1480 [ 440.738438][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 440.740700][ C1] tun_chr_close+0xc2/0x220 [ 440.742720][ C1] ? __pfx_tun_chr_close+0x10/0x10 [ 440.745065][ C1] __fput+0x3ff/0xb40 [ 440.747062][ C1] task_work_run+0x150/0x240 [ 440.749273][ C1] ? __pfx_task_work_run+0x10/0x10 [ 440.751484][ C1] exit_to_user_mode_loop+0x100/0x4a0 [ 440.753834][ C1] do_syscall_64+0x67c/0xf80 [ 440.755860][ C1] ? clear_bhb_loop+0x40/0x90 [ 440.757911][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.760568][ C1] RIP: 0033:0x7fd43df9c799 [ 440.762512][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.771606][ C1] RSP: 002b:00007ffe92499b18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 440.775210][ C1] RAX: 0000000000000000 RBX: 00007ffe92499c00 RCX: 00007fd43df9c799 [ 440.778611][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 440.781522][ C1] RBP: 000000000006952d R08: 0000000000000001 R09: 0000000000000000 [ 440.784183][ C1] R10: 0000001b31a20000 R11: 0000000000000246 R12: 00007ffe92499c40 [ 440.786916][ C1] R13: 00007fd43e215fac R14: 0000000000069587 R15: 00007fd43e215fa0 [ 440.790000][ C1] [ 440.792217][ C1] Kernel Offset: disabled [ 440.793876][ C1] Rebooting in 86400 seconds..