last executing test programs: 3m29.938137341s ago: executing program 2 (id=263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000060a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021181500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ec140380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000b8"], 0x159c}}, 0x0) 3m29.853049067s ago: executing program 2 (id=265): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_gettime(r0, &(0x7f0000000080)) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = socket(0x2a, 0x2, 0x0) gettid() getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x1, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}]}}]}, 0x44}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40840}, 0x4020) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000d80), &(0x7f0000000dc0)=""/229, 0xe5, &(0x7f0000000f00)={&(0x7f0000000ec0)={'cryptd(blake2b-160)\x00'}}) 3m29.31705463s ago: executing program 2 (id=276): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x1, 0x0, 0x4}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) 3m29.239782189s ago: executing program 2 (id=278): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x3, 0x8069}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a4d057, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) r4 = dup(r0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0)=0x19) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000040)={0x18, 0x8, '\x00', 0x0, &(0x7f0000000000)=[0x0]}) 3m29.088554498s ago: executing program 2 (id=283): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x1, 0x0, 0x4}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000000)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 3m28.717174283s ago: executing program 2 (id=291): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc408, 0x8, 0xc1}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000980)) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x402) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000140), 0x634881, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000200)={0x1, 0xc1a, 0x56, &(0x7f0000000180)=""/86}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 3m28.593481047s ago: executing program 32 (id=291): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc408, 0x8, 0xc1}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000980)) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x402) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) r4 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000140), 0x634881, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000200)={0x1, 0xc1a, 0x56, &(0x7f0000000180)=""/86}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 3m2.16371674s ago: executing program 0 (id=792): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000010001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 3m2.10737864s ago: executing program 0 (id=796): sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf25190000000c00018008c1a9000100000064000180080003000300000008000100", @ANYRES32, @ANYBLOB="08000300000000001400020076657468315f746f5f627269646765000800030003"], 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x240008d4) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fsync(r0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x40}}, 0x300000c0) 3m2.103084828s ago: executing program 0 (id=798): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x890}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff00"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) 3m2.017823684s ago: executing program 0 (id=800): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r1) syz_fuse_handle_req(r1, &(0x7f000000a3c0)="61ddaf21c1282a5a6352f350c2f614ede5b0c406f5488574ed6fcb609ce20f648ee274c8dfeaa625b1fd332f70f776ae0b6e3f959c24f3876756c20e05c82079387520764f2446820d53242898a90e51c5b68297e39b7fcf558b450e9608326c3dc6704a054216a8c6f0d689e5eb6b8564854376910eff147682d2378b9c5b95a626493ce628b1bb6b524ed7e90ebe6eb0246399eac6d624dcf4e824be2de9c1d5d06eab13f2770577304eb676106fd9868a030192067ac009482e03a817f1abd909a94702479fe30b2594ca60b4acc37148cf04e8c0e76dd69e29d243596f8174129ac6ab9dbb79ace8f0fae14234845725102a027d4163f97f3971d207500defeaa2c7318f7e82e591701f9d3f78592ea7ec28806a53278a35a20251eeb2735fa9f37bf0045b5e6faf5f751c7ad31d8426be7b09027b2092f49247159a33b580d2691ebf00797962168bdc368f57282ce5b8526eacb80952ffba771626c0016b8a010546f0b4daf470814cee0ea418b76331c34616cea0459dbd1f196364c99e4a47bcdd64b518ef51833e6f8041fbbbe86e808bdbade7009985f2c4d7ffd76a0e7dc7d542bdee1d136d2096dfa997f98ac83c6341b306a3a8cf81642566d7777480d4dc61b0182f0d418ce95d74c9aadb182326d6671412a1f0c62c93a0ba873ff5daa4ece4b2fc73ed5b02b60890374acc0cd25cbf1707016a542fafd6af098f9737304c726712c8243dcd5eb15c0996e9e03dd741d519cb3e86ea214e20408c2cc5ea607585f1bfd268ba3084ffa69425512571d263fd1ae49b488b2964bd3e78943122006489cc22191dec2900a7fdf798c9f683461f2a7b940f4112b805dc077a7b99071b5b454f7c6d2b13a6b23091f74ecc65a24ac0d11e2ffd7332fb2b2b11aeec3c809d78cc2e168f126f38dddfe3e1d0ec1c6fb25f880690f97a70dc5fbea5d25dba3b24c01d9bd228c58deca660625511127a62220429c94be65d6ad4ce7e79e97af67931b46ccfabca5dbaea11e2dc76279b0244cc2845f31beff418fe4bd892d3676079d9d4eb0251dfead9e0a07a11c0a7e597ac89ec77de60a5f6e0ff4a62374856b8e1659e885d3a0d90293daa0c7bb041cbcd54bf098b66b2ddec28dcba4cfbad969e3b97e4bf680f901485d1cd4b231a9115c22ab2f911415ad0efe0eb7f4bee15c6de7d0f818acd687a117286f9e3c33df5206df918ea4ac52927487968d88f4a18d4889a4060f20487e4cec19250fe48a16b1f9f7250a6ab81fbaa2ad451a936ee98021bf859b9a635132a0dcf7530c0e2c84a459241a1fc9fe45b4a4f32fa8e95185db92660292ece6b5ddbb0b9f69bd7435cd4944f8ff2ed51172f0683fbae1013cde202498f2e1be54d1a2e17b3984b17d1994915a477c87697f465781e41b44c6a40ae035e75a4d9f9c0926bec533db0d4c26d605cb1ae225e692ed315062e8c3283716929e25a22b25105e018d81c07cb7600d1bae16d8beec33c88f1cdb52ac988b4677ed604c28ff1cdeeeb74c332dc526cff5ee935016984cabf117694cccabae944de4d2d2daff8f281b6434475b52c1910210598c684da99c108000a53d2ca03afd42b0200691d92341616353a22a8dacd8cb7eee85953b251236603d2ef1e450675f8d0f3cd0e28ef36457f79c267d836d14ed758148e979b9749ddcef14aec903939c69567a1697aae8f9ed72a16be0267a3a967727937f609720802570287c4e08641b9b7b979c6541add0e8600dd2d75a1dc0822ceb7a7e4e1afda2940d127f488589963b46417d7a7474545e5b08a621c1a7637b3fcb62b0aee10d999505907bd14033370e391f6192ff7d718e1db3ef861d30b2d477f11cd45ecb296d4babcccc34901165e3fcdbef6fa1ee478a97f7d21dc5562582d67c448ae352d3157d83e8ab0122a2bb056bdff8043a91b8f3abe4d788fe741483997a8e3fe126626a14b4243d3ff8ada8dd555c95d5e30b68cc053dfbbb61940cbb552cc1fe211ea5ea13cbfb6a577cde339282d84e92f866145e7b1de4d5a1705fc24fc8843f1a69f4c604adf0d715ad88c6a4ac80a35375662610e0ed07af9c4c76326716a77b106ef87782804ca353eaade28a1ca522d706282ebe48c0b23fd42b2e0297f5997d3aab40615f143e868c6aaf920bc827224946db3e3b3e65ea66dbfa5fe6c45dab930877852e86df251024e4ae46ee8e04cf40f2b3239f4df40062cfddada61700959deaeed3a44fb185ce51685fcab793184435b3e668e7d80820a613acde8d61e24571b9de7ce4581a4751d70a28e8d098660e81941fe40b6844a3204b512457194e100c995c75921569f735afee321080ed6310610887ca842001f5112c5af8c9083e3d088a404b48ee82e1e8be16fd493a2a643816488447706f3e86d2d0ed48f7397aad0cf105a4a71d928a15413ab3813e42478cf7a5be2e03d15ccb90a625863cb2ca1059110f90186cf4c370469f4d7e1ccda56ed9c427cce46e7d1c82641554ffa0c7c42697cbc754702b62be5ab03c995ac8cda3145959c440c4d6ead7d6398faf189de77645a05a54d6c33c9678daec6e5ac0048f91e15b2fdb808d712e662007da5e228ddc7370f575723a0018a1da70fa27e6624c8c75047eb584bf3399a8fce999df94f6fb54fb6c1fc954b1d899459fcd2f459e57c214ae590513ed268ed2d1114d8276642510a2eb99feecb58d8476550553a9f3d1f04c9bb442dae6dd84628b60cc9fd3c1e5c4fe3b9ad5f43b5d06e31ba4644f7499c03fd68cd2207027eeb1908a8022d70eb8fc8f55fee7be7e3af525d4fb1ab3e9b458246cbb5371e8145e1d04762c62068e03795a5a6b48d8643a83927c47000b7766e320e0ef2339d5423813e8d7845b939a9567745f6e2d6070764669c905ea77943a31f0df838a5d046f25d516bb654336f759c05dcc0febbbf1d214382a76fa09aa32be9799252f1d0fd8bacfe3f32574fdc82c6ed77f1c08d4aef88c157cbdac947346e3e015af60125d3e36ec6bd8dc5127c7ab1ed773c8beffc9dba99bd9fa1498a5a49bcce4ddb13fb85e256fcac569aab1c815527710d2c350c7cc84db5a7eb243227973fd5e2d1d8450077ececa0d96884c90ac0146d37b13f1aacc1eaddec3f0d475df6ceafe73f9076fcfeaf496efcae22d09745453a5e4776876ecfb1d004361f82f76b2bfba050d0fd5060f50fd74f9908a62649955e2f90e4ac4a4f0b29484cf80eebcbecb12db8586ee58443c181a59c046c657ecbb067a1e70d4c548e8b291a5aa681624747d9a52a6184a5fc82d824d9ab6156ec5fd73a038b38d86974e7a89b55a95b609e12c98f4168c0e48139749fce33397948224641e9823588858f82247d9abf8f84250564189676325e43944e888cef6918cd2b842b3a42751475a37656b3f04a02430705f16908d638212f69cf96d5311038e00e048468810d1cfefb0a9aeaf46d1bd31f7156a97542d9373abd3c069aa096486244389312031398a35e0ebca6668ed06dbe80290ac9a2a15ac9c208cdbcb2c1e18f008741649b4fe2ac1e6ca0a19980b6276fa09c5c0e67e748c1669add6fd4c70ba522be4428df305c3313929a4eec348f03fc6a6dfd1d6740a61230a977555b6b4d5165c98323871d750e80f9205231af03ab430a720dcaad03d113f38574ebada74f5b34a05a6abb7ba9b8b280401a3a21dd7e1e026deb438ed020d09fc93ffd7376ced7b5d6c9c35072c7f28ddb7fea3ffa7b7e6766892be2015c20e2cc7fa8bcb5832b97e964947ae940d5ce215ff3a0d74851d5735f3573d533cca9b3a89f9494f150cb732139cc2282304f6a375ee1062f6f850ebf89548973b6c5e7aee8b98b18b443332d3be20fea086653d52756b40ec4f08ad52f4d0a5a61004c700f070b83548670ef36dcbd8daf13ae6d382aaba3c3bac3c1efd953781d69e7365e1393d2c3f34d3dc91999ab9a545bc167e50ea6874fe8f49e93e452ad4710d7127c430ab2caf3ec1627e6a2a6a57604a5da490087991b68cd58d456f6818f22e38007e1628c6a78f6a8a321e3f0d5d5e1bc7f9ef53c4780b451dad949962c8a6a464b25cb161159b72f40fed8280daec34135f77373b9432f411b232e9374e9cb3fcd85a599c20d0b8e294835c60c2e034eb8385c507095c6eb6748180fd1ad97cb0a4b2ffa70c90891d373459538f4106078162bc46b425572466aa4769153b994698bbff1a98b5948e40d98bb2900445eebe95c4892bcb92b4c28b734ea7e106accc9836767e0881f970c9d69063dd918de44a484ef3f860b0dcec58f22b3f1a0abb9c0c2b6cd5bdacdc194f188588c0888d6abfa2d0b79d0b33a41e3b6a0f9fbf811ba20f346025b3a4be17eb5ce583b860cad5424bcaf1ef4a255678706052c1cae9cd77cc78639f975f07737b791831c64f0c974b23a5c428091b8b8e17a037ac3c6d56da4b4c7e4752736cbbc8d67b1b823e87d51ffc95fe9752e8479fc15a6fe7b96fbd7b93dc2144381c424ec7782d7f8b2637010dca11ccdaab1bad652a9ecd8b6ba2c116fa419c8582a0ccf754a294d9de5b457d9b1a4120fd53667862e50cb028e2f92c73a38f77ff57c93b410e7f3257bd56e5aa504f0643bd2bcfae2168046ad2737a36b21f6d993de1fe7b31e9ef7c79d545e5364b65011a6d26e0a2f1018a5280ca88d3d1e30c68195f8cf1a3ece813f22e44d83867c9f711218203d1adf2869ed89babca094b8def7ae0abd0245f522930db59c4b2eeec4d564bfdb931d435a986daba4b604d5bf30b1cfdf6960986ba0dab216dfd7ad95ca2555e0573d073dccd407ddd5ed7920c788aa0213aec90b38981a91bc370ede38d171648316d59478e66c068eec33295345162e9896ffc82f8d94b995d3a3a7a4f459e564632b5918b4fd850da380937655f19e2820376e7deb48edb0f5e295521a9a153f5ef69de397d88acc20be99779d7ea2c38445bd70aeeb68cc6c68c1bc603ab580b632866497a3dbcbfd933e2074323f66f1db73129eec8331c8872aa92a33e2180fc0cf2e28d198faef4421064b8435f37b5bfb9b531332b3b0838015fe848f0ce859db8706f2e53fb07ce4d0fd017d85ac9ce2943ab172f08b13c948c3778d2469257d412b1a5305526cc8dcb4a8645f825cca66a63b7134d8b7c760db6a8fa21f2df3456e9b460867303a9d53fb01db8548800d800e49c08c8d731bbf9a642206f4cc6673e4fc0f7106661abfde1eb8a8d384b26d88c16d15f238556ff4b205145d860228038430cd8a342bc15849afd81666b55b358e3ec584fa96f119b77495c4ec36616070237bb170fc04d3befebdaff66643814eb8519abaaf1e9bf939bf5bfefa33c32fe9909055393e383268e426436305b370867db76991ca600bf6211dece3b6b7b4dc5cd4569ff4538080fec318a9e0cce4a8cf26aca8359b503781aaedc2d58b0bb1a82c163425e678b488bdc7362d0be24a7a8238deb31482c332d4d385005ca84c836933b0fce21685ec067adb9490d1a416f83e36e6e3b87d05ab6973f4e359a1fb5a4dbf2ff6a85d235e50d893f222c2a7d84252be9015e104ee3609c83cafdd796a8422257c9ca9172888d91c0f2f2afe36dccada9a713cfc026cf25e113fc543d522e9254f5e129d7ffd61b43ee25bdd63545a81a2b086b616e23abd380a7bb8e54b8341f42c663da1fc8451f21da7315aea416e6856d4d45128dcd34a0f3aeb7aed00c54c348f38888b8c8fec59028d38344a92249c95943d3ff8608bc11406102ebe8269892b2e909bd82ba467aabef127713a0993df779ba7b0816a990566699e4926d75fd47c3f1b9cae3e58771a6ae8776fdb672ee70f215fd908d6dfddb8a2ad10f27b749fa6e67171848d70d3ae135ee3defb2546bb35a3ad2d8ac0e838ff8abb1cd733d80047bc8626960a257b704b43bf0390b7fee656ca7831d23e8ba940533c16c17de68270bb3b2d3bf142b34899b3a106cf9569b4f46f148297c61390733ff9f399c669122dd045187d0a35fe54b4f17e4090c56cfcfa47498b1701a855827d35cf3624624906f997092b010b1da616325a090770694d028fae9874a91f8d21fea85804956594b8252c24d05df5775148ecbf8ab38f131c268cc263f6a2dcd375acfbf39a2defc9869801a720d83add1ff01ac7fc389bc7e35c2eee2b44f808508e6e02ea31cf23ea9f2118bce520101e307b394e5fdd28e90870a327b0a1444b552b7227134a8e5397474a6c0e1ce89d918c899d292660ea44294e07b1645ff9e85f65156f92d55ae795e134250b5359dec6c31d4892d83f363cb09632bb738c4e7f351361adc3ab54776a5c55d6ff4895516c82cc6387b1a424f3af2bb0398d0d4a71fe44c5132b7ad5fdfa732bbcff9f02395df587714072caca65f5fc1215dc9068585e1fbcee22cd69c0386a6482230540ec9ff8e373018e4e2788b9502e5be3e3247f997800c68a634e4490c91d01144a63a7a55afbfa4f0ef5ad538aeec8ea203ef2716ff989e11ce4985263898b8e36b0d3386b816ce484e81404a01ac0ed9f18ef5643f93d46705c949acddca2b74ad53441090f658d22dd081aaf49a7bb07c93ab8dfb5213cba354b4d37d9899423d3b3d45e9463c506ccd69747162d2d64b54291d11fdc6c9b89114543d6948f10e68008973cc485df080b84e0d098f962715ba009f2aa1fb41f7199ea5b9b70df0e1c378da164f7257b4ed04a9fee7cc2de065ad35a60b882d78e26d5804942ed1f2bcf85fc63795fb9164a5f94ffe6bfbf838c9197bce2160d24f88dca14c3e733d18ff1fb7acb0ebdfc4e2ce268a676fb27cc34d4b6b5d7e8db29c020c4c498d793931b0fc7d91ad68d3d8463e36a267833edbdd7062f4d62aa9fd1cb7f8e561d3939bbfa118b897167168832c0aff17fb6cdcf75ad6ef0a18e2b37fb24c85d0866f2e5f191b2ef8fe9b5997635a74cb06aec67363435eb175559629c09316f96dc56de6c7785335d121fc2e4d47c2f50c37c5bf7950ae5de07b3b73830f4299d5009742d4eca98df821a95d244967a42b5a4f3375edc41c5281ca3104bd247c14e838912634d4764c1b6e440860d98f258aa8a24e8af643497366edc2b781aec0567451884aec0343ced1fbddfae585db1012a6d9245ad85c56aa33d5bc30307515bccc8d36d7848c99884db4a49d748e1953b4673e4286393fc97c233d529435faf7ed9f9aa64029814b7cd6a36c3dd9ca7be95e5c4d48e024a3d23651cc81c00a52e2fa2d094435ebdb4ae5be8e6b53cf628ddc87a4bc2dccc98ac38019c91789a40d103fb95785bde5992de08ecdca1dff2ab7cf5013420b3d29b8a7f0af455c4e86285422b986bdf482b87297061084b50684e936acbb075a84e720a2d03892efec7dc1af2fae2a7ce7725cf0d19f39403b273be262c7a4ff638898f6caf84bfb358c580ba4adfd8664bcc539b82792e39ab4f1d8393b1f98f6dd5aae14bc6b73feeeaef7c3accde4d9b098f2d5c7ed68621851f37d27980c4b44df095d865493eeef2724db90aa53a3c37bd345ea75b4e76e8878deae1b4f3204c2957f3806e36a03e995f7633de9b863ff6b3309d330ade917c82f3286d9500105755efac22a4220f457debd861df3c0925dc4ba8913cea12b8deb93cec87c972421bb8442ef2a2a9d638471108ae0152aefdc45eac6ff786dae370a21bfe1e5777df8070bcefba8596cb8f71a516b505b1f83de1129cee91d3a4d6383daac7b9de46a99bc34661f3d805d2e138a769fd6489e4d058a3ab35ccbc81251aa2f23f83d7740bd8869465634e10e114c62bdfd640d69cebf6e78eb0970fa442746f7c3bea77d8589ab131827a95b274dd63ea04fba4c822aed4f8d0cd83ed83177d90332c7e66f103d4eb1dffb9ec0f52094bc7324a7c59819dca343776d6adb6850e7e7e83e2316db1c32feb4ea1c6f47a2ee41bb09d0a931f4fa3cdf7ada2bac7fe5ae2b997e24b8f8c52b0bee1482b74af68b407f0d78f3767bdcb42557c9f3aff0c2c2ea7745a0f588b00a751c1c8d2124a8bfd4d7f756587d239cc43a8cae1d67cf15c73dc8569a1ebdd7b8559e969541a547c272e52d57e5924ced9afc87cd2cdcdf8e30f423ebe26170393ecec06afa093839fc3a10fdc3f9ae19e79e4df6a9af6027e1129a7a6cb4517607eac80fa2b5f7853fe84028a66976ec4b4af50abe9ca959b844d7b2ab94903efec6dfc99ed9df2c329c0e8449b4d2a0a5bc2506d170884d2c6ea8aefebcaaf2abbfa3c4d9e4d201369a47792124a7909e247dc98b777b60a30b1461d857f164e3df983d9a900f8b11bddbdcf47c29d483033c9250f30e268ddf97e0ecbdd99d6fb3dc4562bb75f8f1e03d1aec424293fa5fc786444411a512fc582a9b577d5e88fb9d6f7346bd489f6eb4296e576e25c45e114fb6a3d0b6b831fb4ffe7486daadf2f0ad78aad8f8f7eba17e524de06e81a5af9c1aa09019fcc51611afc45fd30b8ecd2a2ae19758a1ffa55f79cdf53ef1bb55e49cb58d8b291664be61586ace94c7b378d685e54aeee09af828a3ce7335f9d03f8daabcf3543b8099956f60913db6ab401a427aca83772df4fce9081409ab426dae09739b50a8ab4c04a6d2e63b2c4c0b5f7fbd9dc76722057ab6cefc9ccae3abf251259f999fe09dbe1232b8ecf0e26b3d88d13a1001840f6b5942359c3ac75bfc321d9504bcc0e3f4add741125941ece20b4f90416b1f14edb4ecb1ced79cef883aa1d5193f3efeeae7e103891ae4840978fbe74d2cc90b7e02b4d839f15c75576b74e05f7a8af71823317a851bf0ff9171bdb16ffa36f57ccdef61065a62d64ba434571db0d476995e2bf4f148f0a6276b2fad82f03b91fe53f9a7acff3ecdfcedcc1eae42e52e1f7443114b8edc8a9d5c8a55727f7ee1d20e1ca55b42e51b47fc4d2313458ab9a5f05c1411dc8f11e4c57d3fe87183763bd24cfb8dc583c82ce9c0abbeb76310666d2236e2ca164c66e6336fd571967f35b2b0ba847922f5aabf97aea061d19eb9cc3cd6e764da9651f9e66577d9c8870734fe8e03d20ba107e6e2997ef7c42f940b88410c6bf46635cb5e402113411a98c75e8cfd3760235d7a486bfeea1a1dc188b7886172ac66d45a4bd87f60b8502382888f3806e47ffb74d9aef2519e91536f7798b7c22ee70566e686ae2b577f6341f7c47dc1ae41f2af983b80f7db23a3466b4f14e2afd591b19d36375acbc0c8ebf21654c8cf44ea49103299eb1ac6e96bb282a33a6ea204aa266b7d627c53757daa176f6cde932e7e0342977dbf7d5668e8ba984bf05dc610e5450eb4c3dcf7965eedc9b168a9c274ef6a050e93234a9bb5488a5aefaea9c442729b5416dcee6bac23f238bea2f1f4615c863a3ff7c7a081558237f2097b9ffa869f4b69fa32784f62c0b7a458411efd3a9108735de667c63c34af2225e382a17600acecc118ac1f81ec5ed9a26fa966bee8dc6f55c17bbd89a94932bf930b081fd310ef94c490855453551e9eb809e9d568500e6662564b65701a721208dcbef9a07650f9faa5a503d37f2e1b1912fbfb437f1f4c2d4a830a2dcfae905d323fe9a6a01cc8d88ff82a26a1c228103396b6756659b6a8a9ff8b31494cd8bde6205d6f62e698d9ae43ec740fafc60d798a85e5f8598486b6e82f23506c6004ec2f733cde633c3b45d9ef14fb223c020a67f305e33b5d3b239b5026ca679004e212725a4090818734435247b918dc9c65d2f0c580722651217ce7a2dec34c0f8c49e3dc051c01f5d445dca8675339f5c8b30ddc19f51ffa9e9c513f5fc9892dbe5ee5bc148ebf3033635401c8675f0fb43e503d73cd432e3ae2f25bf29b4088a3193c208f5ba51882364202dc3eed6f3ab9a871b4afa960f1776cc92deb7098ae6f61af30e715ab60d44f378bbb79f8fb663de164a5f4f582e6a17fd7e553e677632d1e8489a8138bc780418de30c0a95ae3ec3b0cdee51901869acc318a6725c0c06273dc67d393129278225b9384d978512befdf449f85146fbbe92e6b52cf40028b13d77ccc68e7b65e0c1a25f1f9d17b06b17f216729684fec1b4c0c3fdaf40af5dd1a3f4492d49e018f60f41d91524bc5d750789fd39b6e69cb66b1d86b2c1405331e3e793fb38dc447161f1ba02cee1519b72727aee9ede2898c5195adb0dc1c29fe6eca6598c5612a7f98bfe0d1853e44f47c94ae57bfdaee16711135226c9b44440abbeca5ed53b0aa58d34fa0faf766087135599d7b88a04d5ba7d69c148f3ebaee211a06438146d762c9f85d9007a228edd7d71ad18fe69a1af0caa6176eade25bea11504c2f0498a450d4d265bf97dea5b23c10560c9844d761702a5814fb355827ed6f46bcebb61d0a06c21746625a438c38496a941f447c2150c9125990ff7feef9d551a7adcbe0fd828ef4397c0799507599899259f61ff914f76be6077d0daa67ac0ab9093ecd0f78455b605a7885cae38a88b2955cecd37f972841f440de12831263ae64c7c78970138a738bcc66aae8c1a5c3ca0e166dde9860bbfc4c7bdb854cdb3d94ad4c723b2de03a50dfd120041a9b3107a480e7e108f729484d0df0d8e47c3a6b7ce0376e642ec5a267a91dd2bb1f1b3fe56a5097edddba482627cf79b66801fdd4ecb733067ad52e8fb9970be01a397ede6a3eaee6b8524f8e1cf00e0c5aed165b8b1533afaaeeaa82153f9840760b58b8a12e8168956db4522f2dd5a13183cf861acb0c0bb2735ff5cb683f633bd99ba2bfa7f1fcdd0a54d3b4fa9a7d3de250d7e40bd7b3a829a4f04fd71c64ed4f2503094773b45fdd821688d10ced9da17089b7c954f7e4a7f3e56226abee46d7eb93a6f3d039a7cf3dc14c18dd7502aa0e29e1c54bd1c2182138e06326f3cd4cddcf1997c9739f9e4a0899ce919f20b2def0ff103e5a9e123a1db4a544d438f789a0ed26664523bd55902364f4a21b2a92fcc111392dcdcf7ac0ece18c474d47a11d544b64836a62e3e1e0e9d15f8066315f000b7d8603f772704ed5b96798f28e4f699a671023a4d49c5a1e30d14145b9179e4b0f3424fd46cc22ca48cde74904876cc037a04aee32b53d02e4869427b6b18bf0ce7b5ffb75268788ca5029d2d12b2df068219af12d4e17e56f83e581b0fd6cb7048204803342ab8b146b0c237d6ac7aeb2ee21550c00da60286994f1e7ca53de19d874f7bb27c8c5e263fa350448ea28f4ac0cdfdc4c0d5096f2ab328d089dacb5e87f0a29814e8461470a22ee8a4a318f5e2b5317a027da39789b7b17bdcc9b26bdad1ba5e4580f671a3179a9fde91408aa41a68f47c71c524f8e413557b0656cc2a67e36da5a07ee7c55b0877ecf41a8616ec20f59d370f3eff6b10e68a6c55feff6f52f498bc9ab77224a7548ccdfa3de41ff44ee4bd32295a42d9fdac1a4c8484a7383a6bd5e39cb0249e939fe7f53075d6d4a54bcfbaec50853c5e4bfda256665ed56dcd20fbd04a1d40c200223ddac36a7229df6003f335227a6bde261f7e2f7c980e7e522c68abc63601b3b1a9ebdd4530e4f33b9986f582300", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8000023) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='kvm_fpu\x00', r5, 0x0, 0x4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x18) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x800000000000001) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m1.937469247s ago: executing program 0 (id=805): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), r3) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)={0x14, r4, 0x401, 0x70bd28, 0x10000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000033c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x56}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m1.405725717s ago: executing program 0 (id=819): syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2004, 0x307}, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000200)={0x1d, r3}, 0x10) (async) bind$can_raw(r2, &(0x7f0000000200)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000040)=[{{0x3, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}], 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newtfilter={0x37e4, 0x2c, 0x10, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xf, 0xf}, {0xc, 0xfff1}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x37b4, 0x2, [@TCA_FLOW_ACT={0x140, 0x9, 0x0, 0x1, [@m_skbedit={0x13c, 0x2, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x27, 0xe, 0x0, 0x9, 0x7}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0x5}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}]}, {0xde, 0x6, "870e153c45db064e83c26dc564b70f307d84e1fd5297c08648518148fe76d29f3b82307a33499435d63216ffd48e9a0f35fbf6a9c2eb1c62a3c31b19fce4b80b4a63e49c729ec255d0ee2df910b17f541d08a1c567bc5b05c7b5ed4c18370283c9c5caa670794d9345c4d6d58dc302a27bf83e9fb91faa19cd57b4185b48593b497ee090283b342faf3a78f68a092b9332613b18356513cd1ac532f804f0badc8e710acbd2df0627630af0503e003412a52f25e230da0ba54dc7fe5b2630aa5025bf6caad4d8138335bd5dfdc3b5747c7de96a177f36cf8e2bf8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_POLICE={0x410, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x8, 0x1, 0x0, 0x2, 0x81, 0xe, 0x3, 0x10001, 0x5d3, 0x70000000, 0x4, 0x55, 0x1, 0x1, 0x7fff, 0x3, 0x5, 0x8, 0x1, 0x4, 0x10000, 0x5, 0xa1f, 0x0, 0x800, 0x3, 0x2, 0x4, 0x2, 0x8, 0x4, 0x3, 0xffff, 0x1, 0x8, 0x8, 0x4, 0x9, 0xa1, 0x9, 0x2, 0x3, 0x9, 0x9, 0x4, 0x4ff, 0x8, 0x2, 0x1ff, 0x7, 0x1, 0x0, 0x5, 0x4, 0xfed6, 0x10001, 0x2, 0x0, 0x3, 0xf8, 0x6, 0x4, 0x4, 0x4, 0x800, 0x3a2, 0x10000, 0x80000001, 0x5, 0x80, 0x0, 0xa6, 0x4, 0x1153, 0x4, 0x3, 0xffffffff, 0x1, 0x5, 0x2240, 0xfffffff8, 0xb9, 0x7, 0x5, 0x1ba, 0x4, 0x400, 0x7, 0x8, 0xc00, 0x0, 0xffffffff, 0xff, 0x9, 0x1, 0x754, 0x8, 0xffff, 0x7, 0x80, 0x9, 0xfffffd48, 0xc114, 0x5, 0x3, 0xd, 0x2, 0x3, 0x0, 0x8, 0xfffffffd, 0x80000000, 0x74173ee2, 0x4, 0x8001, 0x81, 0x3, 0x8a79b3d, 0x885, 0x8, 0x1, 0x6, 0x9, 0x2, 0xd5d, 0x5, 0x1, 0xfb, 0x8, 0x0, 0x2, 0x8, 0x1000, 0x4, 0xffffffff, 0x0, 0x81, 0x3, 0x6, 0x10, 0x1, 0x5dbf, 0xfffffffb, 0x4, 0x40, 0x7fffffff, 0xffff8001, 0x7, 0x200, 0x3ff, 0x9, 0x6, 0x200, 0x8, 0xfff, 0x80, 0x1, 0x9, 0x9, 0x400, 0x9, 0x2, 0x9, 0x5, 0x2351, 0xdab, 0x7f, 0xffff, 0x4, 0x7, 0x80000001, 0x9, 0x8001, 0x5, 0x78, 0xf013, 0x7, 0x3, 0x2, 0xeef, 0x9, 0x4, 0xfffffff7, 0x9, 0x1, 0x3, 0xb2, 0x8, 0x40, 0xfd, 0x80000000, 0xf739, 0x7, 0x7fffffff, 0x6, 0x96cd, 0x11, 0x4, 0x40, 0xcaa, 0x6, 0x144b, 0x3, 0x2, 0x3, 0x200a, 0xff, 0x3, 0xffffffff, 0x9, 0xffffff80, 0x1, 0x7, 0x5, 0x7, 0x3, 0x1, 0x2, 0x9, 0x3, 0xbba, 0x4bc7, 0x1, 0x101, 0x10, 0x81, 0x2, 0x800, 0xf, 0x3, 0x9, 0x4, 0xa, 0x9e2, 0x1, 0x100, 0xca, 0x0, 0x101, 0xb, 0x4, 0x401, 0x2, 0x80000001, 0x3, 0x80000001, 0x3, 0x0, 0x7, 0x4, 0x5, 0x549a, 0x3ff, 0x8001]}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x4}, @TCA_FLOW_ACT={0x3248, 0x9, 0x0, 0x1, [@m_police={0x3244, 0xb, 0x0, 0x0, {{0xb}, {0x31b8, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x28c, 0x7, 0x5, 0x3, 0x0, 0x7ff, 0x20c, 0x62, 0x3, 0xcb, 0x4, 0x1ff, 0xc26, 0x7, 0x3, 0x17d, 0x66, 0xaa, 0x5a, 0x64, 0x1, 0xa, 0xe233, 0x101, 0x7, 0x80000000, 0xffffff59, 0x2, 0xc1d1, 0x1, 0x8001, 0x8, 0xe, 0x9, 0xd12, 0x8000, 0x1, 0x101, 0x5, 0x6, 0x1, 0xfffeffff, 0x7, 0xb6d3, 0x3ff, 0x0, 0x800, 0x9, 0x9, 0x7, 0x4, 0x50000, 0x34, 0xfffffff1, 0x3, 0x9, 0xa31, 0x3, 0x3, 0x7, 0x80, 0x7, 0x400, 0x1, 0x2, 0x8, 0x3, 0x10, 0x4, 0x4, 0x8, 0xfff, 0xd55, 0xff, 0x2, 0x40, 0x6, 0x7, 0x8, 0xfffffffc, 0x8001, 0x9, 0x1ff, 0x1, 0x4492370b, 0x8, 0x6, 0x1858, 0xcef, 0xff, 0xb, 0x8001, 0xffffffff, 0x94d2, 0x14, 0x9, 0x8, 0xfffffe00, 0xee9, 0x562e5e20, 0x0, 0xff, 0x40, 0x0, 0x400, 0x37fb, 0x89, 0x1000, 0x0, 0x8, 0x5, 0x4, 0x8, 0x101, 0x52d1, 0x9, 0x0, 0x6c76, 0x9, 0x9, 0x40, 0x3, 0x322e, 0x6, 0x7ff, 0x62, 0x10001, 0xe5a1, 0x10001, 0x6fce, 0xffffffff, 0x0, 0x20, 0xdf, 0x0, 0x1, 0x8, 0x7, 0x41, 0x800, 0x4, 0x1, 0x2ef, 0x10, 0x100, 0x7, 0xba, 0xffff, 0x1, 0x43b, 0x3, 0x5, 0x9, 0x8, 0x8001, 0x9, 0x80, 0xfffffff8, 0x1, 0x100000, 0x800, 0x800, 0x40, 0xfffffff1, 0x7fffffff, 0x2, 0x80, 0x6, 0x2, 0x5, 0x2, 0xfe8, 0x38, 0x6, 0xffff99ca, 0x5, 0x7fffffff, 0x28, 0x5, 0x53, 0x0, 0x6, 0x0, 0x2d26, 0xa0, 0x2, 0x1, 0x38, 0x50, 0x5, 0x9e8, 0xffffff81, 0x5, 0x51a0, 0x3, 0x2, 0x0, 0x100, 0x3ff, 0xc, 0x3, 0x66d, 0x80, 0xb5e, 0xfffffffa, 0x10000, 0x0, 0x4, 0x1000000, 0x3, 0x9, 0xb04, 0x4, 0x7d, 0xffffff7f, 0x7, 0x7, 0x1, 0x4, 0x81, 0x5, 0x9, 0x200, 0x3, 0x81, 0x1, 0x6, 0x5, 0x1, 0x9, 0x5, 0x9, 0x7, 0x1, 0x0, 0x8, 0x1ff, 0xfffff000, 0x9, 0x8, 0xca, 0x6f, 0x80000, 0x2055, 0x1, 0x7, 0x80000000, 0x401, 0x1, 0xc, 0x6, 0x1, 0xfffffff9, 0x10000, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc0, 0x3400000, 0x0, 0x401, 0x8, 0xff, 0x23, 0x650, 0x200, 0x7fffffff, 0x1, 0x8, 0x9d7, 0x0, 0x8, 0x1, 0x0, 0x7, 0x7, 0x5, 0x4, 0x4, 0x7, 0x1, 0x40, 0xa, 0xfffffff9, 0x1, 0x2, 0x1156, 0x1, 0x6, 0xc0f9, 0x4, 0xbb48, 0x7fff, 0x81, 0x1, 0xb3a3, 0x80000000, 0x13a, 0x8, 0x7, 0x8, 0x6, 0x3, 0x5, 0x2, 0x0, 0x2, 0x6, 0x6, 0x9, 0x1, 0x2f, 0x5, 0xfffffffb, 0x7, 0xda6, 0x0, 0x80000001, 0x9, 0x81, 0x9, 0x81, 0x9, 0x0, 0x7, 0x9, 0x47, 0x9, 0x8, 0xfffffff9, 0x3, 0x5, 0xfffffffb, 0x4, 0x9ae, 0x7fffffff, 0x7, 0x5, 0x7fffffff, 0xe3c, 0x5bf, 0x2, 0x2, 0x5, 0x6, 0x3, 0x7f5, 0x3, 0x1, 0x6, 0x3, 0xf1e, 0x6, 0x2, 0x6, 0x80, 0x3, 0x3, 0xffffff3d, 0x1, 0xb, 0x7, 0x8, 0x1, 0x156, 0xfdb, 0x0, 0x5, 0x5, 0x400, 0x4, 0x8000, 0x4, 0x52316704, 0x857, 0xfffffeff, 0x7, 0x800, 0x8f5, 0x80000000, 0x81, 0x7, 0x8, 0x3, 0x4, 0x10, 0x2, 0x6, 0x7, 0x8, 0x1, 0x1a, 0x7e, 0xc1, 0x601, 0x8, 0x7, 0x3, 0x9, 0xd, 0x9, 0x3, 0x0, 0x3, 0xae5, 0xa1b, 0x5, 0x4, 0x0, 0x4, 0x9, 0x3, 0x5, 0x9e7e, 0x7f, 0x3, 0x8, 0x9, 0xf6e, 0x7ff, 0x1e, 0x80000001, 0x5, 0x1, 0xe, 0x5, 0x2, 0x5, 0x3, 0x8000, 0x8, 0x4, 0x3, 0x4, 0x8000, 0xb02, 0x4, 0x9, 0x7f, 0x6, 0x3e, 0x8001, 0x7, 0x4, 0x8, 0x3, 0x4, 0x4, 0x8, 0x0, 0x7, 0x9, 0xa, 0x4, 0xe804, 0x800, 0x7, 0xb, 0x8, 0x5, 0x6, 0x80000001, 0x8, 0xfffff505, 0x3ff, 0x1139, 0x5, 0x401, 0x4, 0x7, 0xa, 0xfffffff8, 0x13cb, 0x1, 0x0, 0x2934, 0x0, 0x800, 0x5, 0xc, 0x7, 0x7, 0x9, 0xfffffff8, 0x9, 0x7, 0x2, 0xffff, 0x40, 0x8, 0x101, 0x6a, 0x5, 0x7, 0x1, 0xf73a, 0xf, 0x1, 0xc5, 0x4d, 0x400, 0x3, 0x6, 0x18, 0x7fff, 0xb7, 0x0, 0x3bc, 0x80000000, 0x4, 0x4c18, 0x7, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc30, 0x1, 0x8, 0x100, 0x4, 0x3, 0x1, 0x0, 0x100, 0x9, 0x3, 0x8, 0xb, 0xd, 0x3, 0x1000, 0x2, 0xfffffff8, 0x3, 0x1000, 0x100, 0xfffffff8, 0x100, 0x41, 0x4, 0x1, 0x9, 0x3, 0x85, 0x80000001, 0x200, 0x8212, 0x200, 0x2, 0x4, 0x1000, 0x1, 0x100736e5, 0x3, 0x8, 0x83000000, 0x1, 0x9, 0xc, 0x80000001, 0x4, 0x7f, 0x9, 0x3, 0x8, 0x8, 0x4, 0x40, 0x9, 0x2, 0x8, 0x3551, 0xacf, 0x5b1, 0x7926, 0x3, 0x7, 0x70624371, 0x5, 0x9, 0xc, 0x0, 0x3ff, 0x4, 0x7, 0x4, 0x9, 0x7, 0xb, 0x3, 0x9, 0x7ff, 0x6, 0x2, 0x1, 0x0, 0x2, 0xdab, 0x5, 0x9, 0x0, 0x6, 0x8001, 0x5, 0x787, 0x200, 0x7c, 0x7fff, 0xffff0001, 0xfff, 0x8, 0x4, 0xffffffff, 0x524, 0x87f3, 0x2e2, 0x3, 0xfffffffb, 0x4, 0xe35, 0x6, 0x5, 0x9, 0x0, 0x8000, 0x4, 0x7fffffff, 0x6, 0xfffffffb, 0xffffff3d, 0xedaa, 0x3, 0xff, 0x7, 0x575c, 0x7, 0x6, 0x3ff, 0x4, 0x4, 0x7, 0x6, 0x8, 0x6, 0x3, 0xdff6, 0x3, 0x6, 0x5, 0x5, 0x6, 0x1, 0x5, 0x10001, 0xfffffff8, 0x4, 0x3, 0xfffffff8, 0x9, 0x68a, 0x6, 0xfffffff2, 0x7, 0xf, 0x5e, 0xf, 0x81, 0x8, 0xfad, 0x400, 0x9, 0x100, 0x1, 0xfffffff9, 0x6, 0x5, 0x3, 0x9, 0x3, 0x2e9, 0x6ec786b1, 0x0, 0x4, 0x3, 0x200, 0xe, 0x3, 0xe, 0x9, 0x1, 0x6c33, 0x0, 0xfb, 0x0, 0x1, 0x5, 0x7, 0x4, 0x3, 0x8001, 0x9, 0x3, 0x2, 0x9, 0x8, 0x80000000, 0xf, 0x3, 0x0, 0x0, 0x3, 0x0, 0x88bd, 0x1ff, 0x8001, 0x1000, 0x5, 0x3, 0xfffffffb, 0x6, 0xe, 0x1, 0x1, 0xfffffffa, 0x80000001, 0x1, 0x945e, 0x0, 0xa56, 0x8, 0x5, 0x83f7, 0x5, 0x93, 0x4, 0x5, 0x0, 0x9, 0x4, 0xf, 0x7fffffff, 0xbf9, 0x8, 0xf9, 0x4, 0x9, 0x2, 0x10001, 0x7d, 0xadc, 0x2, 0x1, 0x9, 0x8, 0x65eb, 0x6, 0x8, 0x0, 0x5, 0xffffffff, 0x0, 0x0, 0x3b98, 0x3, 0x2, 0x0, 0x1000, 0x5a, 0x7, 0xc25, 0xfffffe00]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x4, 0x2, 0x5, 0x0, 0x7, 0x100, 0x3, 0xffff7fff, 0x6, 0x6, 0xb, 0x6, 0x4, 0x3, 0x0, 0x9, 0x101, 0x4, 0x100, 0x0, 0x7fffffff, 0x6, 0x1, 0x4, 0x0, 0x101, 0x2, 0x5d5, 0x5, 0xf, 0x7a799e8e, 0x7fff, 0x7ff, 0x7ed4, 0x0, 0x0, 0x1ff, 0x2, 0x3, 0xc, 0x9, 0x100, 0x92b, 0x5, 0x0, 0x6, 0x8, 0xee93, 0x1, 0x6, 0x45, 0x0, 0x0, 0x1, 0x7, 0x81, 0xd97, 0x3, 0x1ff, 0x12f, 0x9, 0x8d21, 0x5, 0xffff, 0x40, 0xfffffffd, 0x8, 0x7, 0x26c, 0x0, 0x871, 0x4, 0x3, 0x2, 0x5, 0xfffffff7, 0x400, 0x2d, 0x5, 0xa, 0x40, 0x6, 0xfa8, 0x5, 0x8, 0x9, 0x8ed, 0x9, 0x8001, 0x0, 0xb, 0x8, 0x10001, 0x401, 0xc6, 0x2, 0xadd, 0xe, 0x1, 0x8, 0x4, 0x8, 0xbbf, 0x65, 0xf, 0x76, 0x80, 0x5, 0x10, 0x1000, 0x91, 0x3, 0xe8e, 0x81, 0x1, 0x5, 0x5, 0x3, 0x5, 0x7fffffff, 0x746, 0x9, 0x1, 0x5, 0x0, 0xd2400000, 0x1, 0x0, 0x2e9fe717, 0xffff, 0x40, 0x1, 0x8d2, 0x48d, 0x8f, 0x6, 0x8, 0xfff, 0x0, 0x8f4, 0x5, 0x6, 0x10001, 0x40, 0x400, 0x8000, 0x0, 0x5, 0xfffffffa, 0x0, 0x5, 0x4, 0x6, 0x6, 0x3ff, 0x0, 0x9, 0x709, 0x3, 0x7fffffff, 0x2, 0x3, 0x0, 0x3d26dfd6, 0x101, 0x81, 0x3ff, 0x8, 0x7, 0x7, 0xffff1cb7, 0x8, 0x9, 0xfffffffd, 0x1, 0x0, 0x0, 0x100, 0x4, 0x8, 0x2ed5, 0xfffff37a, 0x6882, 0x5, 0x3ff, 0x7fffffff, 0x252, 0x1, 0x0, 0x9bd, 0x8, 0x8, 0x6, 0x30, 0x7, 0x6, 0x3227, 0x800, 0x8cf, 0x7, 0x1, 0x2, 0x400, 0x7ff, 0x0, 0x1, 0x5, 0x8, 0x7, 0x0, 0x3, 0x7, 0x7d, 0x0, 0x5, 0x2, 0x8a6a, 0x2, 0x8001, 0x1, 0x6, 0x4, 0x1, 0x2, 0x2, 0x6, 0x0, 0x0, 0x1, 0x5, 0x9, 0x10, 0x1, 0x9, 0xe0c4, 0x5, 0xacc, 0x9, 0x6, 0x5, 0x5d95, 0xfffff77e, 0xc1, 0x4, 0x60, 0xfb51, 0x3, 0x4c, 0x4, 0x1000, 0x2, 0x7, 0xc2, 0xc8a3, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x5, 0x2, 0x200, 0x2, 0xd1c0, 0x8, 0x5, 0x7f, 0x1, 0x9, 0x0, 0xa50, 0x11, 0xe, 0xa11, 0xb, 0x7, 0x535, 0x7, 0x3, 0xff, 0x8, 0x0, 0x70ce, 0x18, 0x10000, 0x30, 0x0, 0x79b577f, 0x9, 0x8000, 0x4, 0xa, 0x4, 0x5, 0x6, 0x7, 0x8001, 0xeded, 0x8, 0x4, 0x2, 0xf, 0x79d4, 0xfffffffe, 0x5, 0x1, 0x3, 0xf7, 0x67a, 0x3, 0x4, 0x3902, 0x80000000, 0x100, 0x80, 0x200, 0x40000000, 0x6, 0x400, 0x4, 0x91c6, 0xfffffff8, 0x5, 0xd, 0xe, 0x2, 0x5, 0xf, 0xd, 0x2, 0x0, 0xffffff01, 0x3, 0x1, 0x8, 0x0, 0xed9, 0x7ff, 0xf, 0x3ff, 0x9, 0x3, 0x8, 0x4, 0xeece, 0xf, 0xb51f, 0x3, 0x8ce0, 0xffffffff, 0x1, 0xe, 0x80, 0x7fffffff, 0x80, 0x5, 0x8, 0xfffffffe, 0x2, 0xffff, 0x6, 0x9, 0x3a, 0x9, 0x45b3, 0x4, 0x8, 0x7f, 0x4, 0x2, 0x83a, 0x1, 0x6, 0x4c96, 0x851, 0x7, 0x7, 0x7, 0x0, 0x5, 0x80000000, 0x3ff, 0x2, 0x110, 0x1, 0x3cec822f, 0x6406b91a, 0x7, 0x9, 0x9, 0x8, 0x4, 0x9, 0x2, 0x6, 0x0, 0x80, 0x6, 0x5, 0xf02b, 0x2, 0xfbe, 0x7, 0x7, 0x80, 0x36, 0x800, 0x9, 0x5, 0x7ff, 0xa3c9, 0x62, 0x10000, 0xfffffff7, 0x2, 0x2, 0x5c1, 0xfc, 0xf, 0x6, 0xffff, 0x7, 0xff, 0x6, 0x10, 0x1000, 0x0, 0x479, 0x1, 0x6, 0x4, 0x0, 0x8, 0xe, 0x3, 0x1, 0x6, 0xd7, 0x5, 0x5, 0x9, 0xb, 0x1, 0x2, 0x4, 0x75a, 0x3, 0x4, 0x80000000, 0x8, 0x6fbc, 0x4, 0x1, 0x7, 0x9, 0x4, 0x0, 0x1, 0x6, 0x7, 0x7, 0x100, 0xc39a, 0x1708c000, 0xc, 0x2, 0x3, 0xbb5, 0x4, 0xffe00000, 0x94, 0x1, 0x9, 0x3, 0xff, 0x401, 0x5, 0x3, 0x2, 0x1d0, 0x2, 0x1, 0x4, 0x3, 0x8b, 0x5, 0x3, 0x2, 0x8, 0x7, 0x37b, 0x1, 0xfffffffe, 0x7, 0x3, 0x0, 0xffff, 0xc1c6, 0x5, 0x7dc, 0x0, 0x400, 0x9, 0x7, 0x0, 0x80000001, 0x5, 0x7, 0x48000000, 0x3c6a6222, 0x1, 0x8, 0x7, 0xfffffffd]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x8, 0x1f, 0x10000, 0x3, 0x1, 0x1e8, 0x8, 0x1, 0xb, 0x800, 0x9, 0x9, 0x3ff, 0x2cf, 0xa644, 0x6, 0x5, 0x5, 0x9, 0x5, 0x9, 0x6, 0x8, 0x6, 0xfb, 0xd, 0x8000, 0x7fffffff, 0x3, 0x8, 0x3, 0xfffffff9, 0x1, 0x91f, 0x6, 0x3, 0x9, 0xe7e, 0x8001, 0x3, 0x3ff, 0xf1, 0x7, 0x7, 0x82, 0x1, 0x10, 0x9, 0x8, 0x0, 0xc5a1, 0x7f, 0x7fffffff, 0x1, 0x7, 0xfffffffb, 0xd5, 0x0, 0x300000, 0x82a, 0x4, 0xc, 0x6, 0x9, 0x4, 0x5, 0x0, 0x0, 0x86, 0x5, 0x3, 0xffffffff, 0x7, 0x400, 0x9, 0x8, 0x2, 0x2, 0x8, 0x9, 0x8, 0x2, 0x9, 0x9, 0x1ff, 0xdb, 0x7, 0x1, 0x1, 0x9, 0xfff, 0x2, 0x8, 0x9, 0x8, 0x5, 0x3, 0x0, 0xb5, 0x3, 0x144b, 0x4, 0x0, 0x0, 0x8, 0x9, 0x4, 0xff, 0x9, 0x4, 0x40, 0x4, 0x6, 0x7, 0x5, 0x1, 0x2, 0xfffff668, 0x3d, 0x4, 0x5, 0x214c, 0x6f7, 0x3, 0x2, 0x3ff, 0x5, 0xf6, 0xb, 0xe1740bb2, 0xf, 0xb970, 0x10, 0x4, 0xfffffffc, 0xffff, 0x0, 0x8, 0x401, 0x1ff, 0x5, 0xfff, 0xa, 0xd6, 0x8, 0x9, 0x3, 0xff, 0x3a, 0x6, 0x8, 0x3ff, 0xc0e, 0x8db4, 0x4, 0x7, 0x72, 0x8001, 0x8, 0x80, 0x2, 0x7fff, 0x0, 0xa56, 0x195, 0x3, 0xfffff001, 0xffffff00, 0x4, 0x6, 0x6, 0x0, 0xe29, 0x3, 0xd69, 0x3, 0x100, 0x9, 0x8, 0x3, 0x10001, 0x4, 0x8, 0x3, 0xffffff7f, 0x800, 0x8, 0x1, 0xfffffff4, 0xcf, 0x3, 0x3, 0xb7, 0x1, 0xc, 0x3, 0x6, 0x5, 0x59, 0x0, 0x10001, 0xc, 0x0, 0x4, 0x5, 0x4, 0x1, 0x7, 0x2, 0x5, 0x1ff, 0x300000, 0x7, 0x1, 0x5, 0x1, 0x401, 0x239, 0x3c, 0xfffff86e, 0xc59, 0x7, 0x8, 0x10001, 0x55d, 0xfffffffa, 0x3, 0x10001, 0x6, 0x15f0, 0x4342, 0x0, 0x7, 0x2, 0x40, 0x4, 0xe, 0x5, 0x3, 0x5, 0x8, 0x7, 0xfffffff8, 0x10, 0x918, 0x80000000, 0x24, 0x7, 0x1, 0x8, 0x40, 0x17842fff, 0x195]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RESULT={0x8}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x900, 0x4, 0x2, 0xffff, 0x0, {0xbf, 0x1, 0x6, 0x400, 0xefa4, 0x100}, {0xab, 0x2, 0x4, 0x2, 0x4, 0x6}, 0x4, 0x8, 0xf}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x75, 0x7, 0x69, 0x7, 0x7, 0x3, 0xff, 0x6, 0xfffffc00, 0x80, 0x10000, 0x3, 0xff, 0x3f7d, 0x4, 0x7, 0x3f, 0x8, 0x4, 0x1, 0x6, 0xef, 0x8, 0x607, 0x6, 0x8, 0x1, 0x7ff, 0x3, 0x3, 0x0, 0x80000000, 0x7fff, 0x6, 0x7, 0x10000, 0x7, 0x6, 0xd, 0x7, 0x82, 0x401, 0x40000000, 0xbbec, 0x6, 0x800, 0x2ef, 0x0, 0x0, 0xfffffff9, 0x800, 0x3, 0xe, 0x0, 0xa1, 0x9, 0xe11, 0x4, 0xfffffff7, 0x8, 0x1, 0x4, 0x3, 0x9, 0x7, 0x7ff, 0x4, 0x9, 0x9d9, 0x7, 0x0, 0x4, 0x8, 0xfffffff7, 0x0, 0x2, 0xfff, 0x10, 0x3, 0xfffffc01, 0x2, 0x6, 0x100, 0xd77, 0x8001, 0x8, 0x3, 0x7, 0x6e, 0x2, 0x3, 0xffff, 0x1, 0x5, 0x6, 0x7, 0x9, 0x8, 0x8, 0x9, 0xe023, 0x1ff, 0x1, 0x49f9, 0x734, 0xe, 0x6c190f5e, 0x8, 0x401, 0x199, 0xff, 0x8, 0x6, 0x2, 0x2, 0x1, 0x24a0, 0x9be, 0x0, 0xd, 0x5, 0x200, 0x5, 0xfff, 0x5, 0x5, 0x9e, 0x3, 0xa, 0xfffffff9, 0x200, 0x3, 0x40, 0xe, 0x4, 0x1, 0x0, 0x5, 0xffffffff, 0x8, 0x8, 0xb, 0x4, 0x5, 0x5, 0x80000000, 0x851, 0x5, 0x7, 0xffffffff, 0x7, 0x43f9, 0x8, 0x9, 0x80000000, 0x7, 0x1, 0x4, 0x5, 0x6, 0x9, 0x46, 0x1, 0x1427, 0x511, 0x9, 0x9, 0x5, 0x1a9, 0x4, 0xb51, 0x4, 0x8, 0x8, 0x5, 0xfffffffb, 0xfffffffa, 0x1, 0x40, 0x8, 0xdb4e, 0x5, 0x6, 0x8000, 0x4, 0x8, 0xffff, 0x80000000, 0x4, 0xa, 0xf, 0x9, 0x8, 0x45f, 0xffff0001, 0xe0, 0x7, 0x2, 0x101, 0x3, 0x3, 0x100, 0x4, 0xd, 0x7, 0x80000001, 0x9, 0x10001, 0x3, 0xd, 0xffff, 0x2, 0x1, 0x8, 0x7fff, 0x3, 0x1c, 0x9, 0x0, 0x9, 0xa, 0x1, 0x6, 0xff, 0x8, 0x3, 0x5, 0x5, 0x2, 0x9, 0x9, 0x80000001, 0x8, 0x9, 0xb6, 0xfffffffe, 0x0, 0x7, 0x8, 0x4, 0x0, 0x6, 0xd, 0xfffff6a5, 0xfffffffa, 0xffffff81, 0x3, 0x600, 0x40000000, 0x1000, 0xfffffffb, 0x200, 0x3, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x4, 0xfffffffe, 0xc, 0x100, 0xf409, 0x2, 0x10000000, 0xc8, 0x6, 0xfffffff8, 0x2, 0x132bc115, 0x5, 0x6, 0xad, 0x5, 0x5, 0x7b, 0x5, 0xa1, 0x9, 0x8, 0x3, 0x3, 0xd9c7, 0xd, 0x3, 0x0, 0x1, 0x9, 0x3, 0x2, 0x6, 0x2, 0x7fd7, 0x4f2, 0x2, 0x2, 0xa178, 0x5, 0x5, 0xf77, 0xffff, 0xd1cc, 0x1, 0x600, 0x401, 0x9, 0xb, 0xc53f, 0x10001, 0x5, 0xffc, 0x5e92, 0x81, 0x8, 0x54, 0x7, 0x6, 0x6, 0xf64, 0x6, 0x2, 0x8, 0x7, 0x6, 0x10000, 0xfffffffd, 0x0, 0x9, 0x1d9f, 0x3, 0x4add, 0x4, 0x9, 0x0, 0x6, 0x7, 0x9, 0x5, 0x7, 0x7, 0xadde, 0x4, 0xe9, 0x1, 0xffffff7f, 0x80, 0x1000, 0x3, 0xc1, 0xdf, 0x5, 0x1, 0x9, 0x3c6dde03, 0x1, 0x3, 0x0, 0x3ff, 0x8, 0x7, 0x1, 0xad8e, 0x3, 0x3, 0x2, 0x0, 0x2, 0x80000001, 0xffffffff, 0x53ae, 0x4, 0x9a, 0xf, 0x800, 0x5, 0xfffffd10, 0x9, 0x439ad66c, 0x6b, 0x9f79, 0x10000, 0xffffff00, 0x1, 0x9de2, 0x16096f34, 0x7aa3, 0x2, 0x0, 0x9, 0x0, 0x80000000, 0xfffff665, 0xe7, 0x1, 0xffff4529, 0x1, 0x4, 0x3ff, 0x9, 0x2, 0x200, 0xa, 0x9, 0x6, 0x7, 0x82, 0x9, 0x5, 0x3ff, 0xcee, 0xffff, 0xa, 0x9, 0x6a5, 0x6, 0x6, 0x1, 0x7, 0x4, 0xf5e, 0x4, 0xbf5, 0x6, 0x6e25d1c3, 0x8, 0x5, 0x1, 0x6, 0x8, 0x3, 0x4, 0x80000001, 0x10000000, 0x3, 0x5, 0x200, 0x1, 0x7, 0x8, 0x64d, 0x0, 0xff, 0xd1, 0xc, 0x5, 0xffffff31, 0x3ff, 0x4, 0x8, 0xe936, 0x5, 0x400, 0x7fff, 0x8000, 0xffffffff, 0x4, 0x94, 0x800, 0x3, 0x2, 0x6, 0x7, 0x8, 0x2, 0x3, 0x8, 0x6, 0x7, 0x76cb, 0x7, 0x16, 0xfffffffe, 0xdb, 0xa2, 0x2, 0x29, 0x5, 0x6, 0x3, 0x6, 0x2, 0x5, 0x5, 0x200000, 0x3ff, 0x0, 0x6, 0x4, 0x1, 0x2, 0x2, 0xfffffffc, 0x2, 0x8b6, 0x0, 0x4, 0xc51, 0x6b3, 0x5, 0x6, 0x2, 0x8, 0x22b6, 0x80000001, 0x2, 0x4, 0x5, 0x3, 0x0, 0x10000, 0x76, 0x81]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffff0000, 0xffffff83, 0x7ff, 0x80000000, 0x3, 0x4, 0x8, 0x401, 0x8, 0x4, 0x8, 0x10001, 0x4, 0x1ff, 0xb, 0x55b, 0x0, 0x8, 0x0, 0x1, 0xa, 0x0, 0x2, 0xff, 0x18000, 0xfb, 0x14, 0x97, 0x6, 0xffffffff, 0x6, 0x0, 0xc00000, 0x5, 0x6, 0x5, 0x80, 0x0, 0x3, 0x3, 0xffffffff, 0x2, 0xe, 0x2, 0xe, 0x5, 0x0, 0x7fff, 0x4cd, 0x9, 0x3, 0x9, 0x6, 0xfffff800, 0x8000, 0x1000, 0x5, 0x8, 0x40, 0x9, 0x6, 0x0, 0x0, 0x0, 0x8, 0x2, 0x3, 0x9, 0x3, 0x4, 0x9, 0x2, 0x0, 0xffffffff, 0x0, 0x6, 0x6, 0x81, 0x8, 0x7, 0x9, 0x7fffffff, 0x79, 0x0, 0x0, 0x400, 0x101, 0x7f, 0x81, 0xf, 0xfffffff8, 0xffff3819, 0x3, 0x7fffffff, 0x19c, 0x0, 0x7df, 0x7, 0x9, 0x54aa2900, 0x4, 0x8, 0xfffff415, 0x800, 0x3, 0x5, 0x5, 0x3, 0x7, 0xfffffff8, 0x9, 0x81, 0x9, 0xfffffff7, 0x0, 0x3, 0x4, 0x4, 0xb3, 0x9, 0xe, 0x3, 0x2, 0xfffffffc, 0x5, 0x4, 0x80000000, 0x2, 0x1, 0x8001, 0x3, 0xfffffffe, 0x0, 0x0, 0x2, 0x7, 0xffff0e52, 0x80000001, 0x1, 0x400, 0x9, 0xa6c, 0x1, 0x81, 0x3, 0x10, 0x80c, 0x394, 0xc117, 0x400, 0x0, 0x2, 0x8, 0x7, 0x2, 0x5, 0x4ef, 0x1, 0x9, 0x2, 0x8, 0x2, 0x2, 0x4, 0xb1a, 0x9, 0x5e, 0x6, 0x4, 0x7, 0x5d, 0x31e, 0x5, 0xfffffffc, 0x3, 0x2, 0x2, 0x4, 0x6, 0xb, 0x200, 0x8, 0x6, 0x5, 0x368400, 0x9cb, 0x846, 0x4, 0x2, 0x4ed, 0x4, 0x2, 0x5, 0x8, 0x8, 0x2, 0x1, 0x5, 0x10, 0x400, 0x44, 0x9, 0x6, 0xff, 0x101, 0x76634845, 0x1, 0xffff, 0x7, 0x100, 0x0, 0x7, 0xc, 0x7, 0xffff2061, 0x200000, 0x10, 0xffff, 0xfffffff3, 0x7, 0x40, 0x8000, 0x8, 0xc69, 0x3, 0x6, 0x0, 0x9, 0x3, 0xfffffbff, 0x80000000, 0xf, 0xcd, 0x2, 0x3000, 0x1, 0x0, 0x100, 0x697, 0x0, 0xff, 0x2a, 0x5, 0x401, 0xe, 0x7fffffff, 0x80000000, 0x5, 0x4, 0x7ff, 0x778e, 0x7fffffff, 0x7, 0x4, 0x80, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x0, 0x2, 0x2, 0x6, {0x1, 0x2, 0x7, 0xacc, 0x800, 0x98}, {0x4, 0x0, 0x5, 0x7, 0x7, 0x2}, 0x2, 0xffffffff, 0xd9a6}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xf0000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x6, 0x8, 0xd8e6, 0xffffffff, 0x1, 0x401, 0x5, 0x4, 0x81, 0xf, 0x80, 0x401, 0x3, 0x3, 0x6, 0x8, 0x8, 0x0, 0x5, 0x4, 0x8, 0x55, 0x4, 0x3ff, 0x3ff, 0x0, 0x9, 0xd71, 0xd0cd, 0x2, 0x80000000, 0x4, 0x9, 0xe, 0xc, 0x2aef, 0x10, 0x4, 0x101, 0x9, 0x3, 0x100, 0x2, 0x3, 0x40000000, 0x6, 0x8, 0xc0e2, 0xc80, 0x5, 0x6, 0x14417ca, 0x7, 0xfffffffb, 0x8, 0x0, 0x2, 0x0, 0xfff, 0x81, 0x9, 0x7, 0x400, 0x100010, 0xd34, 0x8, 0x8, 0x4, 0x8, 0x2, 0x3, 0x123d, 0x3, 0x9, 0x9, 0x0, 0x56b, 0xe, 0x1, 0x7ff, 0x7, 0x8, 0x1, 0x80000001, 0x2, 0x2, 0x10, 0x3, 0x749, 0xf, 0x85, 0x1, 0x5, 0x4, 0x40, 0x1, 0x471be42d, 0x9d3, 0x153f, 0xffff, 0xcf20, 0x0, 0x5, 0x7, 0x10ab, 0x2, 0x0, 0x7f, 0x4543de80, 0xa, 0x2, 0x1, 0xffffb747, 0x8, 0x7, 0x1ff, 0xda81, 0x6, 0x375, 0xbac8, 0xf08b, 0x4, 0x101, 0x13, 0x1020000, 0x1000, 0x3, 0x2, 0x3ff, 0x0, 0x0, 0xfffffffe, 0x5, 0x6, 0x8, 0x7fff, 0x0, 0xfff, 0x7, 0x6, 0x3e2, 0x101, 0x7fffffff, 0x10000, 0x5, 0x10001, 0xb0, 0xe40f, 0xfffffc00, 0x9a, 0x80000000, 0x7, 0x7fff, 0xb4, 0xe, 0xfffffff7, 0x4, 0x6, 0x929, 0x0, 0x80000001, 0x8000, 0x0, 0x80000000, 0x10001, 0xa, 0x9, 0x80000000, 0x2, 0x4, 0x7fffffff, 0x9, 0x5, 0x2, 0x8, 0x200, 0xffffffba, 0x23d, 0xf, 0x8001, 0x63d9, 0x2, 0x2, 0xe8, 0xa456, 0x7, 0x7, 0x9, 0x276e, 0xbb, 0x401, 0x1, 0x5, 0xfffffff7, 0x682c1066, 0xff, 0x7, 0x81, 0x1, 0x7, 0x4, 0xfff, 0x6, 0x5, 0x2, 0x4c3c, 0x5b, 0x200, 0x800, 0x5, 0x6, 0x8fb0, 0x100, 0x6, 0xf, 0x2, 0x0, 0x6, 0x2, 0x1000, 0x6, 0x0, 0x2, 0x6, 0x7, 0x836, 0xfffffffe, 0xdd, 0x6, 0x6, 0x7, 0x4, 0x91, 0x8001, 0x101, 0x0, 0x5, 0x8, 0xfff, 0x2, 0x0, 0x6, 0x0, 0x9a3a, 0x9, 0x6, 0x10001, 0x10, 0xa1, 0x7, 0x6, 0x1000, 0x8, 0x8, 0x7fffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x3, 0x0, 0xe2, 0x6, 0x7, 0x1c90edbf, 0x3, 0x2, 0x756, 0x1fe0000, 0x5, 0x2, 0x0, 0x100, 0x1, 0xb4, 0xffff0001, 0x5, 0xffff38a7, 0x6, 0x1, 0x1, 0x1, 0x4, 0xcf, 0xe, 0x6, 0x920e, 0x4, 0x7, 0x4, 0x0, 0x9, 0x6, 0x0, 0x81, 0x5, 0x3, 0x6, 0xe69, 0x0, 0x5, 0x2, 0x2, 0x4, 0x100, 0x5, 0x9, 0x0, 0x4ae, 0x7, 0x3, 0x3, 0x3ff, 0x400, 0xc4, 0x80000000, 0x9, 0x1ff, 0xa, 0x3, 0x2, 0x6, 0xfffffe01, 0x9, 0x7, 0x7, 0xe, 0x9, 0x10001, 0xa, 0xa80, 0x3, 0x7, 0x7, 0x6, 0x1, 0xe5, 0xc8, 0x6, 0x9, 0x1, 0x1800, 0x71, 0xcd, 0x7, 0xb01, 0x8, 0x7, 0xb673, 0x7fffffff, 0x6, 0x3, 0x9, 0x1ff, 0xffffffff, 0x3ff, 0x1, 0x3, 0x7fffffff, 0x0, 0x8000, 0x4, 0x200, 0x0, 0x2, 0x401, 0x2, 0x84, 0x1, 0xfffffffa, 0x0, 0x800, 0xedc, 0x0, 0x7, 0xab, 0x9, 0x2, 0xfffffff7, 0xfffffff8, 0xb3, 0x101, 0x6882e35b, 0x0, 0xa6a, 0x7f, 0x2, 0x166, 0x1, 0x7, 0x1, 0x4, 0x3, 0xfffffff7, 0x4, 0xdf8, 0xf, 0x4, 0x5, 0x5, 0x9, 0xdfa0, 0x5, 0x1ff, 0x8, 0x5, 0x5, 0x1, 0x7, 0x9, 0x4, 0x8, 0x8000, 0x4, 0x9, 0x6, 0xfffffffe, 0x7, 0x2, 0x7fffffff, 0xf7, 0x0, 0x12000, 0xad, 0xe, 0x8d8b, 0x1, 0x6, 0x9, 0xd, 0x83, 0x100, 0x194, 0x8, 0x3, 0x400, 0x8, 0x2, 0x1, 0x0, 0x0, 0xfffffc01, 0xd, 0x7, 0x0, 0x4, 0x4, 0xabb6, 0x77b, 0xfffffe01, 0xa09, 0xb, 0x3, 0x2, 0x3, 0x5, 0x5, 0xfffff055, 0xffff, 0xbd0, 0x6, 0xfffffffe, 0x7, 0x6d5d0745, 0x81, 0x7, 0xfffffffb, 0x8, 0x2, 0x100, 0x7ff, 0x1, 0x7, 0x2, 0x5, 0x2, 0x6, 0xfffffffe, 0x2, 0x400, 0x1, 0x3, 0x7b9, 0x4, 0xdbb, 0x4, 0xde, 0xf, 0xfffffffa, 0x3, 0x2, 0xa55f, 0x8001, 0x5, 0x8, 0x4, 0x1, 0x7, 0x1, 0x777, 0xfff, 0x0, 0x8, 0x8000, 0x8, 0x5, 0x9, 0x7fff, 0x0, 0x1, 0xfffeffff, 0x546c4418, 0x9, 0x1f3]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7cb4}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xc0f, 0x0, 0x3, 0x7fffffff, 0x9, 0x101, 0x18, 0x7fffffff, 0xfffff800, 0x4, 0x4, 0x101, 0x400000, 0x1000, 0xff4, 0x0, 0x100, 0x7, 0x4, 0x58, 0x2d52ad15, 0xab5, 0x2, 0x4, 0x0, 0x5, 0x5346, 0x9, 0x3, 0xfffffffa, 0xff, 0x9, 0x0, 0x0, 0x3, 0x0, 0x3ff, 0x8b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, 0x10000, 0x3, 0x800, 0x7, 0x5d, 0xfffffff7, 0x6, 0x80000000, 0x3, 0xd99c, 0xaa48, 0x9, 0xfffffff3, 0xf, 0xfc3, 0xf376, 0x2, 0xc, 0x3, 0xf, 0x0, 0x1, 0x7, 0x1, 0x7, 0x9, 0x1, 0xfffffffa, 0x3, 0x0, 0x9, 0x9, 0x22e7, 0x3, 0x8000, 0x8000, 0xfffffffd, 0x5, 0x2, 0x6, 0x8, 0x0, 0x7fff, 0x4, 0x3, 0x9, 0x8000, 0x960, 0x8, 0x7, 0x3a5f31fc, 0x10001, 0x8, 0x5, 0x9, 0x1, 0x97, 0x7, 0x6, 0x7, 0x4, 0xf3bf, 0x8, 0xfffffffb, 0x10001, 0x1b532064, 0xffffffff, 0x80000001, 0xfffff049, 0x9, 0x6, 0x7, 0x3b, 0x3, 0x4, 0x8, 0x8000, 0x8, 0x3, 0x40, 0x7, 0xe, 0xc, 0x200, 0x7fffffff, 0x0, 0x0, 0x6, 0x7, 0x6, 0x7, 0x1, 0x1fa, 0x8, 0x1, 0xfff, 0x4, 0x7, 0x6, 0x885e, 0x4, 0x200, 0x80000000, 0x9, 0xfff, 0x9, 0xa, 0x9, 0xfffffc00, 0x27e4e3d7, 0x0, 0x7, 0x5, 0x32e, 0x3, 0x3, 0x6, 0x4, 0x7, 0x5, 0x4, 0x0, 0x80000001, 0x3, 0x3, 0xe3, 0x1, 0x8000, 0xbad3, 0x7, 0xffffff7a, 0x1, 0x4, 0x2, 0x1ff, 0x40000000, 0x81, 0x7e, 0x2a83, 0x8, 0x6, 0x7, 0x10, 0x96f, 0x7, 0x7, 0x200, 0x8, 0x800, 0x6000, 0x1, 0x4, 0xd, 0x2, 0x1ff, 0xc, 0x9, 0x1, 0x2, 0xfffffff9, 0x5, 0x6, 0x4, 0x3, 0x8, 0x6, 0x1, 0x9, 0x81, 0x8, 0x2, 0x9, 0x6, 0x9, 0x800, 0x7000, 0xe, 0x6, 0x80, 0x9, 0x6, 0x1, 0x5, 0xf767, 0xee, 0x1, 0x4, 0x3, 0x5, 0xb11, 0x0, 0xe124, 0x8, 0x5, 0x1, 0x80, 0x0, 0xfffffc00, 0xcda3, 0x80000000, 0xbbf86d6, 0x200, 0xffff, 0xffff7fff, 0x7, 0x0, 0x2, 0x9, 0x100]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x0, 0x4dfe, 0x6, 0x7, {0x8, 0x3, 0x8, 0x8001, 0x7fff, 0x6}, {0x6, 0x1, 0x7, 0x400, 0x7, 0x10000}, 0xffff, 0x9, 0x40}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1ff}]]}, {0x63, 0x6, "04462f3a47f27e97814370aed5f935903cdcb3c46fe4b8379fb9c8c26ef5225babc1f2227e0ad2a1f79a132abf95562edde4af5005394c56567a7edc8ac9df73af8e3854c97640151c04b74c14989bf61fad214ad6d2455caf64453a071eb8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xd, 0xf}}]}}]}, 0x37e4}, 0x1, 0x0, 0x0, 0x8c0}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r4, @ANYBLOB="0200ee050a0002"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) (async) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r4, @ANYBLOB="0200ee050a0002"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) 3m1.27992572s ago: executing program 33 (id=819): syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2004, 0x307}, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000200)={0x1d, r3}, 0x10) (async) bind$can_raw(r2, &(0x7f0000000200)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000040)=[{{0x3, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}], 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newtfilter={0x37e4, 0x2c, 0x10, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xf, 0xf}, {0xc, 0xfff1}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x37b4, 0x2, [@TCA_FLOW_ACT={0x140, 0x9, 0x0, 0x1, [@m_skbedit={0x13c, 0x2, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x27, 0xe, 0x0, 0x9, 0x7}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0x5}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}]}, {0xde, 0x6, "870e153c45db064e83c26dc564b70f307d84e1fd5297c08648518148fe76d29f3b82307a33499435d63216ffd48e9a0f35fbf6a9c2eb1c62a3c31b19fce4b80b4a63e49c729ec255d0ee2df910b17f541d08a1c567bc5b05c7b5ed4c18370283c9c5caa670794d9345c4d6d58dc302a27bf83e9fb91faa19cd57b4185b48593b497ee090283b342faf3a78f68a092b9332613b18356513cd1ac532f804f0badc8e710acbd2df0627630af0503e003412a52f25e230da0ba54dc7fe5b2630aa5025bf6caad4d8138335bd5dfdc3b5747c7de96a177f36cf8e2bf8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_POLICE={0x410, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x8, 0x1, 0x0, 0x2, 0x81, 0xe, 0x3, 0x10001, 0x5d3, 0x70000000, 0x4, 0x55, 0x1, 0x1, 0x7fff, 0x3, 0x5, 0x8, 0x1, 0x4, 0x10000, 0x5, 0xa1f, 0x0, 0x800, 0x3, 0x2, 0x4, 0x2, 0x8, 0x4, 0x3, 0xffff, 0x1, 0x8, 0x8, 0x4, 0x9, 0xa1, 0x9, 0x2, 0x3, 0x9, 0x9, 0x4, 0x4ff, 0x8, 0x2, 0x1ff, 0x7, 0x1, 0x0, 0x5, 0x4, 0xfed6, 0x10001, 0x2, 0x0, 0x3, 0xf8, 0x6, 0x4, 0x4, 0x4, 0x800, 0x3a2, 0x10000, 0x80000001, 0x5, 0x80, 0x0, 0xa6, 0x4, 0x1153, 0x4, 0x3, 0xffffffff, 0x1, 0x5, 0x2240, 0xfffffff8, 0xb9, 0x7, 0x5, 0x1ba, 0x4, 0x400, 0x7, 0x8, 0xc00, 0x0, 0xffffffff, 0xff, 0x9, 0x1, 0x754, 0x8, 0xffff, 0x7, 0x80, 0x9, 0xfffffd48, 0xc114, 0x5, 0x3, 0xd, 0x2, 0x3, 0x0, 0x8, 0xfffffffd, 0x80000000, 0x74173ee2, 0x4, 0x8001, 0x81, 0x3, 0x8a79b3d, 0x885, 0x8, 0x1, 0x6, 0x9, 0x2, 0xd5d, 0x5, 0x1, 0xfb, 0x8, 0x0, 0x2, 0x8, 0x1000, 0x4, 0xffffffff, 0x0, 0x81, 0x3, 0x6, 0x10, 0x1, 0x5dbf, 0xfffffffb, 0x4, 0x40, 0x7fffffff, 0xffff8001, 0x7, 0x200, 0x3ff, 0x9, 0x6, 0x200, 0x8, 0xfff, 0x80, 0x1, 0x9, 0x9, 0x400, 0x9, 0x2, 0x9, 0x5, 0x2351, 0xdab, 0x7f, 0xffff, 0x4, 0x7, 0x80000001, 0x9, 0x8001, 0x5, 0x78, 0xf013, 0x7, 0x3, 0x2, 0xeef, 0x9, 0x4, 0xfffffff7, 0x9, 0x1, 0x3, 0xb2, 0x8, 0x40, 0xfd, 0x80000000, 0xf739, 0x7, 0x7fffffff, 0x6, 0x96cd, 0x11, 0x4, 0x40, 0xcaa, 0x6, 0x144b, 0x3, 0x2, 0x3, 0x200a, 0xff, 0x3, 0xffffffff, 0x9, 0xffffff80, 0x1, 0x7, 0x5, 0x7, 0x3, 0x1, 0x2, 0x9, 0x3, 0xbba, 0x4bc7, 0x1, 0x101, 0x10, 0x81, 0x2, 0x800, 0xf, 0x3, 0x9, 0x4, 0xa, 0x9e2, 0x1, 0x100, 0xca, 0x0, 0x101, 0xb, 0x4, 0x401, 0x2, 0x80000001, 0x3, 0x80000001, 0x3, 0x0, 0x7, 0x4, 0x5, 0x549a, 0x3ff, 0x8001]}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x4}, @TCA_FLOW_ACT={0x3248, 0x9, 0x0, 0x1, [@m_police={0x3244, 0xb, 0x0, 0x0, {{0xb}, {0x31b8, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x28c, 0x7, 0x5, 0x3, 0x0, 0x7ff, 0x20c, 0x62, 0x3, 0xcb, 0x4, 0x1ff, 0xc26, 0x7, 0x3, 0x17d, 0x66, 0xaa, 0x5a, 0x64, 0x1, 0xa, 0xe233, 0x101, 0x7, 0x80000000, 0xffffff59, 0x2, 0xc1d1, 0x1, 0x8001, 0x8, 0xe, 0x9, 0xd12, 0x8000, 0x1, 0x101, 0x5, 0x6, 0x1, 0xfffeffff, 0x7, 0xb6d3, 0x3ff, 0x0, 0x800, 0x9, 0x9, 0x7, 0x4, 0x50000, 0x34, 0xfffffff1, 0x3, 0x9, 0xa31, 0x3, 0x3, 0x7, 0x80, 0x7, 0x400, 0x1, 0x2, 0x8, 0x3, 0x10, 0x4, 0x4, 0x8, 0xfff, 0xd55, 0xff, 0x2, 0x40, 0x6, 0x7, 0x8, 0xfffffffc, 0x8001, 0x9, 0x1ff, 0x1, 0x4492370b, 0x8, 0x6, 0x1858, 0xcef, 0xff, 0xb, 0x8001, 0xffffffff, 0x94d2, 0x14, 0x9, 0x8, 0xfffffe00, 0xee9, 0x562e5e20, 0x0, 0xff, 0x40, 0x0, 0x400, 0x37fb, 0x89, 0x1000, 0x0, 0x8, 0x5, 0x4, 0x8, 0x101, 0x52d1, 0x9, 0x0, 0x6c76, 0x9, 0x9, 0x40, 0x3, 0x322e, 0x6, 0x7ff, 0x62, 0x10001, 0xe5a1, 0x10001, 0x6fce, 0xffffffff, 0x0, 0x20, 0xdf, 0x0, 0x1, 0x8, 0x7, 0x41, 0x800, 0x4, 0x1, 0x2ef, 0x10, 0x100, 0x7, 0xba, 0xffff, 0x1, 0x43b, 0x3, 0x5, 0x9, 0x8, 0x8001, 0x9, 0x80, 0xfffffff8, 0x1, 0x100000, 0x800, 0x800, 0x40, 0xfffffff1, 0x7fffffff, 0x2, 0x80, 0x6, 0x2, 0x5, 0x2, 0xfe8, 0x38, 0x6, 0xffff99ca, 0x5, 0x7fffffff, 0x28, 0x5, 0x53, 0x0, 0x6, 0x0, 0x2d26, 0xa0, 0x2, 0x1, 0x38, 0x50, 0x5, 0x9e8, 0xffffff81, 0x5, 0x51a0, 0x3, 0x2, 0x0, 0x100, 0x3ff, 0xc, 0x3, 0x66d, 0x80, 0xb5e, 0xfffffffa, 0x10000, 0x0, 0x4, 0x1000000, 0x3, 0x9, 0xb04, 0x4, 0x7d, 0xffffff7f, 0x7, 0x7, 0x1, 0x4, 0x81, 0x5, 0x9, 0x200, 0x3, 0x81, 0x1, 0x6, 0x5, 0x1, 0x9, 0x5, 0x9, 0x7, 0x1, 0x0, 0x8, 0x1ff, 0xfffff000, 0x9, 0x8, 0xca, 0x6f, 0x80000, 0x2055, 0x1, 0x7, 0x80000000, 0x401, 0x1, 0xc, 0x6, 0x1, 0xfffffff9, 0x10000, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc0, 0x3400000, 0x0, 0x401, 0x8, 0xff, 0x23, 0x650, 0x200, 0x7fffffff, 0x1, 0x8, 0x9d7, 0x0, 0x8, 0x1, 0x0, 0x7, 0x7, 0x5, 0x4, 0x4, 0x7, 0x1, 0x40, 0xa, 0xfffffff9, 0x1, 0x2, 0x1156, 0x1, 0x6, 0xc0f9, 0x4, 0xbb48, 0x7fff, 0x81, 0x1, 0xb3a3, 0x80000000, 0x13a, 0x8, 0x7, 0x8, 0x6, 0x3, 0x5, 0x2, 0x0, 0x2, 0x6, 0x6, 0x9, 0x1, 0x2f, 0x5, 0xfffffffb, 0x7, 0xda6, 0x0, 0x80000001, 0x9, 0x81, 0x9, 0x81, 0x9, 0x0, 0x7, 0x9, 0x47, 0x9, 0x8, 0xfffffff9, 0x3, 0x5, 0xfffffffb, 0x4, 0x9ae, 0x7fffffff, 0x7, 0x5, 0x7fffffff, 0xe3c, 0x5bf, 0x2, 0x2, 0x5, 0x6, 0x3, 0x7f5, 0x3, 0x1, 0x6, 0x3, 0xf1e, 0x6, 0x2, 0x6, 0x80, 0x3, 0x3, 0xffffff3d, 0x1, 0xb, 0x7, 0x8, 0x1, 0x156, 0xfdb, 0x0, 0x5, 0x5, 0x400, 0x4, 0x8000, 0x4, 0x52316704, 0x857, 0xfffffeff, 0x7, 0x800, 0x8f5, 0x80000000, 0x81, 0x7, 0x8, 0x3, 0x4, 0x10, 0x2, 0x6, 0x7, 0x8, 0x1, 0x1a, 0x7e, 0xc1, 0x601, 0x8, 0x7, 0x3, 0x9, 0xd, 0x9, 0x3, 0x0, 0x3, 0xae5, 0xa1b, 0x5, 0x4, 0x0, 0x4, 0x9, 0x3, 0x5, 0x9e7e, 0x7f, 0x3, 0x8, 0x9, 0xf6e, 0x7ff, 0x1e, 0x80000001, 0x5, 0x1, 0xe, 0x5, 0x2, 0x5, 0x3, 0x8000, 0x8, 0x4, 0x3, 0x4, 0x8000, 0xb02, 0x4, 0x9, 0x7f, 0x6, 0x3e, 0x8001, 0x7, 0x4, 0x8, 0x3, 0x4, 0x4, 0x8, 0x0, 0x7, 0x9, 0xa, 0x4, 0xe804, 0x800, 0x7, 0xb, 0x8, 0x5, 0x6, 0x80000001, 0x8, 0xfffff505, 0x3ff, 0x1139, 0x5, 0x401, 0x4, 0x7, 0xa, 0xfffffff8, 0x13cb, 0x1, 0x0, 0x2934, 0x0, 0x800, 0x5, 0xc, 0x7, 0x7, 0x9, 0xfffffff8, 0x9, 0x7, 0x2, 0xffff, 0x40, 0x8, 0x101, 0x6a, 0x5, 0x7, 0x1, 0xf73a, 0xf, 0x1, 0xc5, 0x4d, 0x400, 0x3, 0x6, 0x18, 0x7fff, 0xb7, 0x0, 0x3bc, 0x80000000, 0x4, 0x4c18, 0x7, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc30, 0x1, 0x8, 0x100, 0x4, 0x3, 0x1, 0x0, 0x100, 0x9, 0x3, 0x8, 0xb, 0xd, 0x3, 0x1000, 0x2, 0xfffffff8, 0x3, 0x1000, 0x100, 0xfffffff8, 0x100, 0x41, 0x4, 0x1, 0x9, 0x3, 0x85, 0x80000001, 0x200, 0x8212, 0x200, 0x2, 0x4, 0x1000, 0x1, 0x100736e5, 0x3, 0x8, 0x83000000, 0x1, 0x9, 0xc, 0x80000001, 0x4, 0x7f, 0x9, 0x3, 0x8, 0x8, 0x4, 0x40, 0x9, 0x2, 0x8, 0x3551, 0xacf, 0x5b1, 0x7926, 0x3, 0x7, 0x70624371, 0x5, 0x9, 0xc, 0x0, 0x3ff, 0x4, 0x7, 0x4, 0x9, 0x7, 0xb, 0x3, 0x9, 0x7ff, 0x6, 0x2, 0x1, 0x0, 0x2, 0xdab, 0x5, 0x9, 0x0, 0x6, 0x8001, 0x5, 0x787, 0x200, 0x7c, 0x7fff, 0xffff0001, 0xfff, 0x8, 0x4, 0xffffffff, 0x524, 0x87f3, 0x2e2, 0x3, 0xfffffffb, 0x4, 0xe35, 0x6, 0x5, 0x9, 0x0, 0x8000, 0x4, 0x7fffffff, 0x6, 0xfffffffb, 0xffffff3d, 0xedaa, 0x3, 0xff, 0x7, 0x575c, 0x7, 0x6, 0x3ff, 0x4, 0x4, 0x7, 0x6, 0x8, 0x6, 0x3, 0xdff6, 0x3, 0x6, 0x5, 0x5, 0x6, 0x1, 0x5, 0x10001, 0xfffffff8, 0x4, 0x3, 0xfffffff8, 0x9, 0x68a, 0x6, 0xfffffff2, 0x7, 0xf, 0x5e, 0xf, 0x81, 0x8, 0xfad, 0x400, 0x9, 0x100, 0x1, 0xfffffff9, 0x6, 0x5, 0x3, 0x9, 0x3, 0x2e9, 0x6ec786b1, 0x0, 0x4, 0x3, 0x200, 0xe, 0x3, 0xe, 0x9, 0x1, 0x6c33, 0x0, 0xfb, 0x0, 0x1, 0x5, 0x7, 0x4, 0x3, 0x8001, 0x9, 0x3, 0x2, 0x9, 0x8, 0x80000000, 0xf, 0x3, 0x0, 0x0, 0x3, 0x0, 0x88bd, 0x1ff, 0x8001, 0x1000, 0x5, 0x3, 0xfffffffb, 0x6, 0xe, 0x1, 0x1, 0xfffffffa, 0x80000001, 0x1, 0x945e, 0x0, 0xa56, 0x8, 0x5, 0x83f7, 0x5, 0x93, 0x4, 0x5, 0x0, 0x9, 0x4, 0xf, 0x7fffffff, 0xbf9, 0x8, 0xf9, 0x4, 0x9, 0x2, 0x10001, 0x7d, 0xadc, 0x2, 0x1, 0x9, 0x8, 0x65eb, 0x6, 0x8, 0x0, 0x5, 0xffffffff, 0x0, 0x0, 0x3b98, 0x3, 0x2, 0x0, 0x1000, 0x5a, 0x7, 0xc25, 0xfffffe00]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x4, 0x2, 0x5, 0x0, 0x7, 0x100, 0x3, 0xffff7fff, 0x6, 0x6, 0xb, 0x6, 0x4, 0x3, 0x0, 0x9, 0x101, 0x4, 0x100, 0x0, 0x7fffffff, 0x6, 0x1, 0x4, 0x0, 0x101, 0x2, 0x5d5, 0x5, 0xf, 0x7a799e8e, 0x7fff, 0x7ff, 0x7ed4, 0x0, 0x0, 0x1ff, 0x2, 0x3, 0xc, 0x9, 0x100, 0x92b, 0x5, 0x0, 0x6, 0x8, 0xee93, 0x1, 0x6, 0x45, 0x0, 0x0, 0x1, 0x7, 0x81, 0xd97, 0x3, 0x1ff, 0x12f, 0x9, 0x8d21, 0x5, 0xffff, 0x40, 0xfffffffd, 0x8, 0x7, 0x26c, 0x0, 0x871, 0x4, 0x3, 0x2, 0x5, 0xfffffff7, 0x400, 0x2d, 0x5, 0xa, 0x40, 0x6, 0xfa8, 0x5, 0x8, 0x9, 0x8ed, 0x9, 0x8001, 0x0, 0xb, 0x8, 0x10001, 0x401, 0xc6, 0x2, 0xadd, 0xe, 0x1, 0x8, 0x4, 0x8, 0xbbf, 0x65, 0xf, 0x76, 0x80, 0x5, 0x10, 0x1000, 0x91, 0x3, 0xe8e, 0x81, 0x1, 0x5, 0x5, 0x3, 0x5, 0x7fffffff, 0x746, 0x9, 0x1, 0x5, 0x0, 0xd2400000, 0x1, 0x0, 0x2e9fe717, 0xffff, 0x40, 0x1, 0x8d2, 0x48d, 0x8f, 0x6, 0x8, 0xfff, 0x0, 0x8f4, 0x5, 0x6, 0x10001, 0x40, 0x400, 0x8000, 0x0, 0x5, 0xfffffffa, 0x0, 0x5, 0x4, 0x6, 0x6, 0x3ff, 0x0, 0x9, 0x709, 0x3, 0x7fffffff, 0x2, 0x3, 0x0, 0x3d26dfd6, 0x101, 0x81, 0x3ff, 0x8, 0x7, 0x7, 0xffff1cb7, 0x8, 0x9, 0xfffffffd, 0x1, 0x0, 0x0, 0x100, 0x4, 0x8, 0x2ed5, 0xfffff37a, 0x6882, 0x5, 0x3ff, 0x7fffffff, 0x252, 0x1, 0x0, 0x9bd, 0x8, 0x8, 0x6, 0x30, 0x7, 0x6, 0x3227, 0x800, 0x8cf, 0x7, 0x1, 0x2, 0x400, 0x7ff, 0x0, 0x1, 0x5, 0x8, 0x7, 0x0, 0x3, 0x7, 0x7d, 0x0, 0x5, 0x2, 0x8a6a, 0x2, 0x8001, 0x1, 0x6, 0x4, 0x1, 0x2, 0x2, 0x6, 0x0, 0x0, 0x1, 0x5, 0x9, 0x10, 0x1, 0x9, 0xe0c4, 0x5, 0xacc, 0x9, 0x6, 0x5, 0x5d95, 0xfffff77e, 0xc1, 0x4, 0x60, 0xfb51, 0x3, 0x4c, 0x4, 0x1000, 0x2, 0x7, 0xc2, 0xc8a3, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x5, 0x2, 0x200, 0x2, 0xd1c0, 0x8, 0x5, 0x7f, 0x1, 0x9, 0x0, 0xa50, 0x11, 0xe, 0xa11, 0xb, 0x7, 0x535, 0x7, 0x3, 0xff, 0x8, 0x0, 0x70ce, 0x18, 0x10000, 0x30, 0x0, 0x79b577f, 0x9, 0x8000, 0x4, 0xa, 0x4, 0x5, 0x6, 0x7, 0x8001, 0xeded, 0x8, 0x4, 0x2, 0xf, 0x79d4, 0xfffffffe, 0x5, 0x1, 0x3, 0xf7, 0x67a, 0x3, 0x4, 0x3902, 0x80000000, 0x100, 0x80, 0x200, 0x40000000, 0x6, 0x400, 0x4, 0x91c6, 0xfffffff8, 0x5, 0xd, 0xe, 0x2, 0x5, 0xf, 0xd, 0x2, 0x0, 0xffffff01, 0x3, 0x1, 0x8, 0x0, 0xed9, 0x7ff, 0xf, 0x3ff, 0x9, 0x3, 0x8, 0x4, 0xeece, 0xf, 0xb51f, 0x3, 0x8ce0, 0xffffffff, 0x1, 0xe, 0x80, 0x7fffffff, 0x80, 0x5, 0x8, 0xfffffffe, 0x2, 0xffff, 0x6, 0x9, 0x3a, 0x9, 0x45b3, 0x4, 0x8, 0x7f, 0x4, 0x2, 0x83a, 0x1, 0x6, 0x4c96, 0x851, 0x7, 0x7, 0x7, 0x0, 0x5, 0x80000000, 0x3ff, 0x2, 0x110, 0x1, 0x3cec822f, 0x6406b91a, 0x7, 0x9, 0x9, 0x8, 0x4, 0x9, 0x2, 0x6, 0x0, 0x80, 0x6, 0x5, 0xf02b, 0x2, 0xfbe, 0x7, 0x7, 0x80, 0x36, 0x800, 0x9, 0x5, 0x7ff, 0xa3c9, 0x62, 0x10000, 0xfffffff7, 0x2, 0x2, 0x5c1, 0xfc, 0xf, 0x6, 0xffff, 0x7, 0xff, 0x6, 0x10, 0x1000, 0x0, 0x479, 0x1, 0x6, 0x4, 0x0, 0x8, 0xe, 0x3, 0x1, 0x6, 0xd7, 0x5, 0x5, 0x9, 0xb, 0x1, 0x2, 0x4, 0x75a, 0x3, 0x4, 0x80000000, 0x8, 0x6fbc, 0x4, 0x1, 0x7, 0x9, 0x4, 0x0, 0x1, 0x6, 0x7, 0x7, 0x100, 0xc39a, 0x1708c000, 0xc, 0x2, 0x3, 0xbb5, 0x4, 0xffe00000, 0x94, 0x1, 0x9, 0x3, 0xff, 0x401, 0x5, 0x3, 0x2, 0x1d0, 0x2, 0x1, 0x4, 0x3, 0x8b, 0x5, 0x3, 0x2, 0x8, 0x7, 0x37b, 0x1, 0xfffffffe, 0x7, 0x3, 0x0, 0xffff, 0xc1c6, 0x5, 0x7dc, 0x0, 0x400, 0x9, 0x7, 0x0, 0x80000001, 0x5, 0x7, 0x48000000, 0x3c6a6222, 0x1, 0x8, 0x7, 0xfffffffd]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x8, 0x1f, 0x10000, 0x3, 0x1, 0x1e8, 0x8, 0x1, 0xb, 0x800, 0x9, 0x9, 0x3ff, 0x2cf, 0xa644, 0x6, 0x5, 0x5, 0x9, 0x5, 0x9, 0x6, 0x8, 0x6, 0xfb, 0xd, 0x8000, 0x7fffffff, 0x3, 0x8, 0x3, 0xfffffff9, 0x1, 0x91f, 0x6, 0x3, 0x9, 0xe7e, 0x8001, 0x3, 0x3ff, 0xf1, 0x7, 0x7, 0x82, 0x1, 0x10, 0x9, 0x8, 0x0, 0xc5a1, 0x7f, 0x7fffffff, 0x1, 0x7, 0xfffffffb, 0xd5, 0x0, 0x300000, 0x82a, 0x4, 0xc, 0x6, 0x9, 0x4, 0x5, 0x0, 0x0, 0x86, 0x5, 0x3, 0xffffffff, 0x7, 0x400, 0x9, 0x8, 0x2, 0x2, 0x8, 0x9, 0x8, 0x2, 0x9, 0x9, 0x1ff, 0xdb, 0x7, 0x1, 0x1, 0x9, 0xfff, 0x2, 0x8, 0x9, 0x8, 0x5, 0x3, 0x0, 0xb5, 0x3, 0x144b, 0x4, 0x0, 0x0, 0x8, 0x9, 0x4, 0xff, 0x9, 0x4, 0x40, 0x4, 0x6, 0x7, 0x5, 0x1, 0x2, 0xfffff668, 0x3d, 0x4, 0x5, 0x214c, 0x6f7, 0x3, 0x2, 0x3ff, 0x5, 0xf6, 0xb, 0xe1740bb2, 0xf, 0xb970, 0x10, 0x4, 0xfffffffc, 0xffff, 0x0, 0x8, 0x401, 0x1ff, 0x5, 0xfff, 0xa, 0xd6, 0x8, 0x9, 0x3, 0xff, 0x3a, 0x6, 0x8, 0x3ff, 0xc0e, 0x8db4, 0x4, 0x7, 0x72, 0x8001, 0x8, 0x80, 0x2, 0x7fff, 0x0, 0xa56, 0x195, 0x3, 0xfffff001, 0xffffff00, 0x4, 0x6, 0x6, 0x0, 0xe29, 0x3, 0xd69, 0x3, 0x100, 0x9, 0x8, 0x3, 0x10001, 0x4, 0x8, 0x3, 0xffffff7f, 0x800, 0x8, 0x1, 0xfffffff4, 0xcf, 0x3, 0x3, 0xb7, 0x1, 0xc, 0x3, 0x6, 0x5, 0x59, 0x0, 0x10001, 0xc, 0x0, 0x4, 0x5, 0x4, 0x1, 0x7, 0x2, 0x5, 0x1ff, 0x300000, 0x7, 0x1, 0x5, 0x1, 0x401, 0x239, 0x3c, 0xfffff86e, 0xc59, 0x7, 0x8, 0x10001, 0x55d, 0xfffffffa, 0x3, 0x10001, 0x6, 0x15f0, 0x4342, 0x0, 0x7, 0x2, 0x40, 0x4, 0xe, 0x5, 0x3, 0x5, 0x8, 0x7, 0xfffffff8, 0x10, 0x918, 0x80000000, 0x24, 0x7, 0x1, 0x8, 0x40, 0x17842fff, 0x195]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RESULT={0x8}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x900, 0x4, 0x2, 0xffff, 0x0, {0xbf, 0x1, 0x6, 0x400, 0xefa4, 0x100}, {0xab, 0x2, 0x4, 0x2, 0x4, 0x6}, 0x4, 0x8, 0xf}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x75, 0x7, 0x69, 0x7, 0x7, 0x3, 0xff, 0x6, 0xfffffc00, 0x80, 0x10000, 0x3, 0xff, 0x3f7d, 0x4, 0x7, 0x3f, 0x8, 0x4, 0x1, 0x6, 0xef, 0x8, 0x607, 0x6, 0x8, 0x1, 0x7ff, 0x3, 0x3, 0x0, 0x80000000, 0x7fff, 0x6, 0x7, 0x10000, 0x7, 0x6, 0xd, 0x7, 0x82, 0x401, 0x40000000, 0xbbec, 0x6, 0x800, 0x2ef, 0x0, 0x0, 0xfffffff9, 0x800, 0x3, 0xe, 0x0, 0xa1, 0x9, 0xe11, 0x4, 0xfffffff7, 0x8, 0x1, 0x4, 0x3, 0x9, 0x7, 0x7ff, 0x4, 0x9, 0x9d9, 0x7, 0x0, 0x4, 0x8, 0xfffffff7, 0x0, 0x2, 0xfff, 0x10, 0x3, 0xfffffc01, 0x2, 0x6, 0x100, 0xd77, 0x8001, 0x8, 0x3, 0x7, 0x6e, 0x2, 0x3, 0xffff, 0x1, 0x5, 0x6, 0x7, 0x9, 0x8, 0x8, 0x9, 0xe023, 0x1ff, 0x1, 0x49f9, 0x734, 0xe, 0x6c190f5e, 0x8, 0x401, 0x199, 0xff, 0x8, 0x6, 0x2, 0x2, 0x1, 0x24a0, 0x9be, 0x0, 0xd, 0x5, 0x200, 0x5, 0xfff, 0x5, 0x5, 0x9e, 0x3, 0xa, 0xfffffff9, 0x200, 0x3, 0x40, 0xe, 0x4, 0x1, 0x0, 0x5, 0xffffffff, 0x8, 0x8, 0xb, 0x4, 0x5, 0x5, 0x80000000, 0x851, 0x5, 0x7, 0xffffffff, 0x7, 0x43f9, 0x8, 0x9, 0x80000000, 0x7, 0x1, 0x4, 0x5, 0x6, 0x9, 0x46, 0x1, 0x1427, 0x511, 0x9, 0x9, 0x5, 0x1a9, 0x4, 0xb51, 0x4, 0x8, 0x8, 0x5, 0xfffffffb, 0xfffffffa, 0x1, 0x40, 0x8, 0xdb4e, 0x5, 0x6, 0x8000, 0x4, 0x8, 0xffff, 0x80000000, 0x4, 0xa, 0xf, 0x9, 0x8, 0x45f, 0xffff0001, 0xe0, 0x7, 0x2, 0x101, 0x3, 0x3, 0x100, 0x4, 0xd, 0x7, 0x80000001, 0x9, 0x10001, 0x3, 0xd, 0xffff, 0x2, 0x1, 0x8, 0x7fff, 0x3, 0x1c, 0x9, 0x0, 0x9, 0xa, 0x1, 0x6, 0xff, 0x8, 0x3, 0x5, 0x5, 0x2, 0x9, 0x9, 0x80000001, 0x8, 0x9, 0xb6, 0xfffffffe, 0x0, 0x7, 0x8, 0x4, 0x0, 0x6, 0xd, 0xfffff6a5, 0xfffffffa, 0xffffff81, 0x3, 0x600, 0x40000000, 0x1000, 0xfffffffb, 0x200, 0x3, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x4, 0xfffffffe, 0xc, 0x100, 0xf409, 0x2, 0x10000000, 0xc8, 0x6, 0xfffffff8, 0x2, 0x132bc115, 0x5, 0x6, 0xad, 0x5, 0x5, 0x7b, 0x5, 0xa1, 0x9, 0x8, 0x3, 0x3, 0xd9c7, 0xd, 0x3, 0x0, 0x1, 0x9, 0x3, 0x2, 0x6, 0x2, 0x7fd7, 0x4f2, 0x2, 0x2, 0xa178, 0x5, 0x5, 0xf77, 0xffff, 0xd1cc, 0x1, 0x600, 0x401, 0x9, 0xb, 0xc53f, 0x10001, 0x5, 0xffc, 0x5e92, 0x81, 0x8, 0x54, 0x7, 0x6, 0x6, 0xf64, 0x6, 0x2, 0x8, 0x7, 0x6, 0x10000, 0xfffffffd, 0x0, 0x9, 0x1d9f, 0x3, 0x4add, 0x4, 0x9, 0x0, 0x6, 0x7, 0x9, 0x5, 0x7, 0x7, 0xadde, 0x4, 0xe9, 0x1, 0xffffff7f, 0x80, 0x1000, 0x3, 0xc1, 0xdf, 0x5, 0x1, 0x9, 0x3c6dde03, 0x1, 0x3, 0x0, 0x3ff, 0x8, 0x7, 0x1, 0xad8e, 0x3, 0x3, 0x2, 0x0, 0x2, 0x80000001, 0xffffffff, 0x53ae, 0x4, 0x9a, 0xf, 0x800, 0x5, 0xfffffd10, 0x9, 0x439ad66c, 0x6b, 0x9f79, 0x10000, 0xffffff00, 0x1, 0x9de2, 0x16096f34, 0x7aa3, 0x2, 0x0, 0x9, 0x0, 0x80000000, 0xfffff665, 0xe7, 0x1, 0xffff4529, 0x1, 0x4, 0x3ff, 0x9, 0x2, 0x200, 0xa, 0x9, 0x6, 0x7, 0x82, 0x9, 0x5, 0x3ff, 0xcee, 0xffff, 0xa, 0x9, 0x6a5, 0x6, 0x6, 0x1, 0x7, 0x4, 0xf5e, 0x4, 0xbf5, 0x6, 0x6e25d1c3, 0x8, 0x5, 0x1, 0x6, 0x8, 0x3, 0x4, 0x80000001, 0x10000000, 0x3, 0x5, 0x200, 0x1, 0x7, 0x8, 0x64d, 0x0, 0xff, 0xd1, 0xc, 0x5, 0xffffff31, 0x3ff, 0x4, 0x8, 0xe936, 0x5, 0x400, 0x7fff, 0x8000, 0xffffffff, 0x4, 0x94, 0x800, 0x3, 0x2, 0x6, 0x7, 0x8, 0x2, 0x3, 0x8, 0x6, 0x7, 0x76cb, 0x7, 0x16, 0xfffffffe, 0xdb, 0xa2, 0x2, 0x29, 0x5, 0x6, 0x3, 0x6, 0x2, 0x5, 0x5, 0x200000, 0x3ff, 0x0, 0x6, 0x4, 0x1, 0x2, 0x2, 0xfffffffc, 0x2, 0x8b6, 0x0, 0x4, 0xc51, 0x6b3, 0x5, 0x6, 0x2, 0x8, 0x22b6, 0x80000001, 0x2, 0x4, 0x5, 0x3, 0x0, 0x10000, 0x76, 0x81]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffff0000, 0xffffff83, 0x7ff, 0x80000000, 0x3, 0x4, 0x8, 0x401, 0x8, 0x4, 0x8, 0x10001, 0x4, 0x1ff, 0xb, 0x55b, 0x0, 0x8, 0x0, 0x1, 0xa, 0x0, 0x2, 0xff, 0x18000, 0xfb, 0x14, 0x97, 0x6, 0xffffffff, 0x6, 0x0, 0xc00000, 0x5, 0x6, 0x5, 0x80, 0x0, 0x3, 0x3, 0xffffffff, 0x2, 0xe, 0x2, 0xe, 0x5, 0x0, 0x7fff, 0x4cd, 0x9, 0x3, 0x9, 0x6, 0xfffff800, 0x8000, 0x1000, 0x5, 0x8, 0x40, 0x9, 0x6, 0x0, 0x0, 0x0, 0x8, 0x2, 0x3, 0x9, 0x3, 0x4, 0x9, 0x2, 0x0, 0xffffffff, 0x0, 0x6, 0x6, 0x81, 0x8, 0x7, 0x9, 0x7fffffff, 0x79, 0x0, 0x0, 0x400, 0x101, 0x7f, 0x81, 0xf, 0xfffffff8, 0xffff3819, 0x3, 0x7fffffff, 0x19c, 0x0, 0x7df, 0x7, 0x9, 0x54aa2900, 0x4, 0x8, 0xfffff415, 0x800, 0x3, 0x5, 0x5, 0x3, 0x7, 0xfffffff8, 0x9, 0x81, 0x9, 0xfffffff7, 0x0, 0x3, 0x4, 0x4, 0xb3, 0x9, 0xe, 0x3, 0x2, 0xfffffffc, 0x5, 0x4, 0x80000000, 0x2, 0x1, 0x8001, 0x3, 0xfffffffe, 0x0, 0x0, 0x2, 0x7, 0xffff0e52, 0x80000001, 0x1, 0x400, 0x9, 0xa6c, 0x1, 0x81, 0x3, 0x10, 0x80c, 0x394, 0xc117, 0x400, 0x0, 0x2, 0x8, 0x7, 0x2, 0x5, 0x4ef, 0x1, 0x9, 0x2, 0x8, 0x2, 0x2, 0x4, 0xb1a, 0x9, 0x5e, 0x6, 0x4, 0x7, 0x5d, 0x31e, 0x5, 0xfffffffc, 0x3, 0x2, 0x2, 0x4, 0x6, 0xb, 0x200, 0x8, 0x6, 0x5, 0x368400, 0x9cb, 0x846, 0x4, 0x2, 0x4ed, 0x4, 0x2, 0x5, 0x8, 0x8, 0x2, 0x1, 0x5, 0x10, 0x400, 0x44, 0x9, 0x6, 0xff, 0x101, 0x76634845, 0x1, 0xffff, 0x7, 0x100, 0x0, 0x7, 0xc, 0x7, 0xffff2061, 0x200000, 0x10, 0xffff, 0xfffffff3, 0x7, 0x40, 0x8000, 0x8, 0xc69, 0x3, 0x6, 0x0, 0x9, 0x3, 0xfffffbff, 0x80000000, 0xf, 0xcd, 0x2, 0x3000, 0x1, 0x0, 0x100, 0x697, 0x0, 0xff, 0x2a, 0x5, 0x401, 0xe, 0x7fffffff, 0x80000000, 0x5, 0x4, 0x7ff, 0x778e, 0x7fffffff, 0x7, 0x4, 0x80, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x0, 0x2, 0x2, 0x6, {0x1, 0x2, 0x7, 0xacc, 0x800, 0x98}, {0x4, 0x0, 0x5, 0x7, 0x7, 0x2}, 0x2, 0xffffffff, 0xd9a6}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xf0000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x6, 0x8, 0xd8e6, 0xffffffff, 0x1, 0x401, 0x5, 0x4, 0x81, 0xf, 0x80, 0x401, 0x3, 0x3, 0x6, 0x8, 0x8, 0x0, 0x5, 0x4, 0x8, 0x55, 0x4, 0x3ff, 0x3ff, 0x0, 0x9, 0xd71, 0xd0cd, 0x2, 0x80000000, 0x4, 0x9, 0xe, 0xc, 0x2aef, 0x10, 0x4, 0x101, 0x9, 0x3, 0x100, 0x2, 0x3, 0x40000000, 0x6, 0x8, 0xc0e2, 0xc80, 0x5, 0x6, 0x14417ca, 0x7, 0xfffffffb, 0x8, 0x0, 0x2, 0x0, 0xfff, 0x81, 0x9, 0x7, 0x400, 0x100010, 0xd34, 0x8, 0x8, 0x4, 0x8, 0x2, 0x3, 0x123d, 0x3, 0x9, 0x9, 0x0, 0x56b, 0xe, 0x1, 0x7ff, 0x7, 0x8, 0x1, 0x80000001, 0x2, 0x2, 0x10, 0x3, 0x749, 0xf, 0x85, 0x1, 0x5, 0x4, 0x40, 0x1, 0x471be42d, 0x9d3, 0x153f, 0xffff, 0xcf20, 0x0, 0x5, 0x7, 0x10ab, 0x2, 0x0, 0x7f, 0x4543de80, 0xa, 0x2, 0x1, 0xffffb747, 0x8, 0x7, 0x1ff, 0xda81, 0x6, 0x375, 0xbac8, 0xf08b, 0x4, 0x101, 0x13, 0x1020000, 0x1000, 0x3, 0x2, 0x3ff, 0x0, 0x0, 0xfffffffe, 0x5, 0x6, 0x8, 0x7fff, 0x0, 0xfff, 0x7, 0x6, 0x3e2, 0x101, 0x7fffffff, 0x10000, 0x5, 0x10001, 0xb0, 0xe40f, 0xfffffc00, 0x9a, 0x80000000, 0x7, 0x7fff, 0xb4, 0xe, 0xfffffff7, 0x4, 0x6, 0x929, 0x0, 0x80000001, 0x8000, 0x0, 0x80000000, 0x10001, 0xa, 0x9, 0x80000000, 0x2, 0x4, 0x7fffffff, 0x9, 0x5, 0x2, 0x8, 0x200, 0xffffffba, 0x23d, 0xf, 0x8001, 0x63d9, 0x2, 0x2, 0xe8, 0xa456, 0x7, 0x7, 0x9, 0x276e, 0xbb, 0x401, 0x1, 0x5, 0xfffffff7, 0x682c1066, 0xff, 0x7, 0x81, 0x1, 0x7, 0x4, 0xfff, 0x6, 0x5, 0x2, 0x4c3c, 0x5b, 0x200, 0x800, 0x5, 0x6, 0x8fb0, 0x100, 0x6, 0xf, 0x2, 0x0, 0x6, 0x2, 0x1000, 0x6, 0x0, 0x2, 0x6, 0x7, 0x836, 0xfffffffe, 0xdd, 0x6, 0x6, 0x7, 0x4, 0x91, 0x8001, 0x101, 0x0, 0x5, 0x8, 0xfff, 0x2, 0x0, 0x6, 0x0, 0x9a3a, 0x9, 0x6, 0x10001, 0x10, 0xa1, 0x7, 0x6, 0x1000, 0x8, 0x8, 0x7fffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x3, 0x0, 0xe2, 0x6, 0x7, 0x1c90edbf, 0x3, 0x2, 0x756, 0x1fe0000, 0x5, 0x2, 0x0, 0x100, 0x1, 0xb4, 0xffff0001, 0x5, 0xffff38a7, 0x6, 0x1, 0x1, 0x1, 0x4, 0xcf, 0xe, 0x6, 0x920e, 0x4, 0x7, 0x4, 0x0, 0x9, 0x6, 0x0, 0x81, 0x5, 0x3, 0x6, 0xe69, 0x0, 0x5, 0x2, 0x2, 0x4, 0x100, 0x5, 0x9, 0x0, 0x4ae, 0x7, 0x3, 0x3, 0x3ff, 0x400, 0xc4, 0x80000000, 0x9, 0x1ff, 0xa, 0x3, 0x2, 0x6, 0xfffffe01, 0x9, 0x7, 0x7, 0xe, 0x9, 0x10001, 0xa, 0xa80, 0x3, 0x7, 0x7, 0x6, 0x1, 0xe5, 0xc8, 0x6, 0x9, 0x1, 0x1800, 0x71, 0xcd, 0x7, 0xb01, 0x8, 0x7, 0xb673, 0x7fffffff, 0x6, 0x3, 0x9, 0x1ff, 0xffffffff, 0x3ff, 0x1, 0x3, 0x7fffffff, 0x0, 0x8000, 0x4, 0x200, 0x0, 0x2, 0x401, 0x2, 0x84, 0x1, 0xfffffffa, 0x0, 0x800, 0xedc, 0x0, 0x7, 0xab, 0x9, 0x2, 0xfffffff7, 0xfffffff8, 0xb3, 0x101, 0x6882e35b, 0x0, 0xa6a, 0x7f, 0x2, 0x166, 0x1, 0x7, 0x1, 0x4, 0x3, 0xfffffff7, 0x4, 0xdf8, 0xf, 0x4, 0x5, 0x5, 0x9, 0xdfa0, 0x5, 0x1ff, 0x8, 0x5, 0x5, 0x1, 0x7, 0x9, 0x4, 0x8, 0x8000, 0x4, 0x9, 0x6, 0xfffffffe, 0x7, 0x2, 0x7fffffff, 0xf7, 0x0, 0x12000, 0xad, 0xe, 0x8d8b, 0x1, 0x6, 0x9, 0xd, 0x83, 0x100, 0x194, 0x8, 0x3, 0x400, 0x8, 0x2, 0x1, 0x0, 0x0, 0xfffffc01, 0xd, 0x7, 0x0, 0x4, 0x4, 0xabb6, 0x77b, 0xfffffe01, 0xa09, 0xb, 0x3, 0x2, 0x3, 0x5, 0x5, 0xfffff055, 0xffff, 0xbd0, 0x6, 0xfffffffe, 0x7, 0x6d5d0745, 0x81, 0x7, 0xfffffffb, 0x8, 0x2, 0x100, 0x7ff, 0x1, 0x7, 0x2, 0x5, 0x2, 0x6, 0xfffffffe, 0x2, 0x400, 0x1, 0x3, 0x7b9, 0x4, 0xdbb, 0x4, 0xde, 0xf, 0xfffffffa, 0x3, 0x2, 0xa55f, 0x8001, 0x5, 0x8, 0x4, 0x1, 0x7, 0x1, 0x777, 0xfff, 0x0, 0x8, 0x8000, 0x8, 0x5, 0x9, 0x7fff, 0x0, 0x1, 0xfffeffff, 0x546c4418, 0x9, 0x1f3]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7cb4}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xc0f, 0x0, 0x3, 0x7fffffff, 0x9, 0x101, 0x18, 0x7fffffff, 0xfffff800, 0x4, 0x4, 0x101, 0x400000, 0x1000, 0xff4, 0x0, 0x100, 0x7, 0x4, 0x58, 0x2d52ad15, 0xab5, 0x2, 0x4, 0x0, 0x5, 0x5346, 0x9, 0x3, 0xfffffffa, 0xff, 0x9, 0x0, 0x0, 0x3, 0x0, 0x3ff, 0x8b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, 0x10000, 0x3, 0x800, 0x7, 0x5d, 0xfffffff7, 0x6, 0x80000000, 0x3, 0xd99c, 0xaa48, 0x9, 0xfffffff3, 0xf, 0xfc3, 0xf376, 0x2, 0xc, 0x3, 0xf, 0x0, 0x1, 0x7, 0x1, 0x7, 0x9, 0x1, 0xfffffffa, 0x3, 0x0, 0x9, 0x9, 0x22e7, 0x3, 0x8000, 0x8000, 0xfffffffd, 0x5, 0x2, 0x6, 0x8, 0x0, 0x7fff, 0x4, 0x3, 0x9, 0x8000, 0x960, 0x8, 0x7, 0x3a5f31fc, 0x10001, 0x8, 0x5, 0x9, 0x1, 0x97, 0x7, 0x6, 0x7, 0x4, 0xf3bf, 0x8, 0xfffffffb, 0x10001, 0x1b532064, 0xffffffff, 0x80000001, 0xfffff049, 0x9, 0x6, 0x7, 0x3b, 0x3, 0x4, 0x8, 0x8000, 0x8, 0x3, 0x40, 0x7, 0xe, 0xc, 0x200, 0x7fffffff, 0x0, 0x0, 0x6, 0x7, 0x6, 0x7, 0x1, 0x1fa, 0x8, 0x1, 0xfff, 0x4, 0x7, 0x6, 0x885e, 0x4, 0x200, 0x80000000, 0x9, 0xfff, 0x9, 0xa, 0x9, 0xfffffc00, 0x27e4e3d7, 0x0, 0x7, 0x5, 0x32e, 0x3, 0x3, 0x6, 0x4, 0x7, 0x5, 0x4, 0x0, 0x80000001, 0x3, 0x3, 0xe3, 0x1, 0x8000, 0xbad3, 0x7, 0xffffff7a, 0x1, 0x4, 0x2, 0x1ff, 0x40000000, 0x81, 0x7e, 0x2a83, 0x8, 0x6, 0x7, 0x10, 0x96f, 0x7, 0x7, 0x200, 0x8, 0x800, 0x6000, 0x1, 0x4, 0xd, 0x2, 0x1ff, 0xc, 0x9, 0x1, 0x2, 0xfffffff9, 0x5, 0x6, 0x4, 0x3, 0x8, 0x6, 0x1, 0x9, 0x81, 0x8, 0x2, 0x9, 0x6, 0x9, 0x800, 0x7000, 0xe, 0x6, 0x80, 0x9, 0x6, 0x1, 0x5, 0xf767, 0xee, 0x1, 0x4, 0x3, 0x5, 0xb11, 0x0, 0xe124, 0x8, 0x5, 0x1, 0x80, 0x0, 0xfffffc00, 0xcda3, 0x80000000, 0xbbf86d6, 0x200, 0xffff, 0xffff7fff, 0x7, 0x0, 0x2, 0x9, 0x100]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x0, 0x4dfe, 0x6, 0x7, {0x8, 0x3, 0x8, 0x8001, 0x7fff, 0x6}, {0x6, 0x1, 0x7, 0x400, 0x7, 0x10000}, 0xffff, 0x9, 0x40}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1ff}]]}, {0x63, 0x6, "04462f3a47f27e97814370aed5f935903cdcb3c46fe4b8379fb9c8c26ef5225babc1f2227e0ad2a1f79a132abf95562edde4af5005394c56567a7edc8ac9df73af8e3854c97640151c04b74c14989bf61fad214ad6d2455caf64453a071eb8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xd, 0xf}}]}}]}, 0x37e4}, 0x1, 0x0, 0x0, 0x8c0}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r4, @ANYBLOB="0200ee050a0002"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) (async) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r4, @ANYBLOB="0200ee050a0002"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) 2m33.072372875s ago: executing program 1 (id=1413): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0xfffffffc, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0xffffff}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='1\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000ffdbdf251a000000040022800700210062620000"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40800) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000040)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 2m32.977450665s ago: executing program 1 (id=1414): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) (async) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async, rerun: 32) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) ioctl$sock_netdev_private(r1, 0x89f5, &(0x7f0000000000)) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) (async, rerun: 64) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r3, 0x0) (async, rerun: 64) socket$inet6(0xa, 0x2, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x89727a31546dcc45, 0x4}) (async) openat(r3, 0x0, 0x40140, 0x0) (async) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) (async) sendto$inet6(r0, &(0x7f0000000140)='H\\', 0x2, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x9, @loopback, 0xc5f}, 0x1c) 2m32.927386145s ago: executing program 1 (id=1415): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000017c0)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250801f2800c00180008ac0f000010000014000100fc00000000000000000000000000000008004400", @ANYRES32=0x0, @ANYBLOB="d90066802400328008004100b20000000800ca00ac1e000108003d00fcffffff0400c58004008a800800a180000b80c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb27a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26000000"], 0x118}, {&(0x7f00000006c0)={0x52c, 0x3d, 0x200, 0x70bd28, 0x25dfdbfd, "", [@generic="cda703fe45db4951af2afce753377be2c1b5d5f42ad44c7ed2e7a5aacbed93b9a8cbfdefb45deab7a0bfee9291c1d7c8fed0da942729b9e8f89fcc9fd5ed526ed18af2c41940d712705dce010521e0777bdd6bb4152eff28bde1df53887732700824dd7d446cd8fedef7dab02c01501890d95f93c081855dd9e58c86d28b44a8339f4b5929ce59d1e9c0d1e854b2e83f04f3fdbe07a2ba3ac8355b6cf3d6a93cd84e1786eddf65118c29f6f45544dfe0a42e971883c769af39b49d6c2ca51e64cd9166bb6c41819b96757b4948ea87501129cf02e21609ad199aad0674b71b39c3cb85926dbf90e1a60541b08876b9277c0f3cecb26be2cd", @nested={0x336, 0x1c, 0x0, 0x1, [@generic="aa0b6362ff4a6cf2fba2af53e507165212150d7d36da3f55949072c775773df63c9aad4eb9b173ef34f31c20b098c0833a99719dedbdebb759121e8b13f307e85cf2ec75f020347f0ffc6edbb203e5996420a5ef8ae65905a15c33025ae5dc62f2feae7be94e980a1bc7bcd857f85bacf4bbfddf4acb7273dfc9b1d9e1c3b0cb3df221175b077ecaccc3399c7e9b2940d54bed654937f5d17f595a81b914c169b5522d205c8912c699f18835f7ec6ef2ea9854a9fcb187295a50314b4f306bb35086db292171e447b6a20fb030b0a1c45f526c64ebafe6b9d4d724", @typed={0x8, 0x94, 0x0, 0x0, @uid}, @generic="80530cc38f95ca193b294a910b2af9a00786fdef13471453b42347dae69f16d4a8994b36f938ca50e741701d92d9e137ea29384115c5dc450e05deabdd5ceb1d74cc8019189f0e4fc0978bd68a93dfff095d2710870407c916dfb149", @generic="d0d0eb713a9081831ee8d74f10b1ae71d195209319859dd56f87d646acb996ab5cbdcddd5d344ba8c781b375ead98425ebc1e3fadc6b1d3a94c48e43b56918e8bb4b334b3c16b2f6d437ed6e2af068dd0f0fffaf118af80af9ad137530dbcbe8774c84acdd887972e10baae2f1ec39ae5fc0b5a8436f8b5fd5affb89d9701d313c2d35d30398a114db18c939be12bf4e8dd7171d686a5e46cef0ccf6fc0f99af8f9b01b7c18d85d7fcf0f27fecdc80c15f101dbf38", @typed={0x4, 0x70}, @generic="9b98267c832529f0f04c306f55a0c0ed15728e1c6cd3dddc23ba873d2cdac0b8cfec58554bf29016bf2a01650cca28e467796188e868668195f741ff53c9190c29b35aae1df5035bd7ef3207aa2ac7ce20f34b935f15454d4c5cbf8a4794834d78baf51f2097cae65307494a7bb995b7476a33db75ba5d47cb719bdbe21779eb678b1547c874dc198abed746328d51de72e5f82e1dcad01cee1758f95d98b92c51b4e350a56e212596c9c7c217f620bd522a4cc2ce5aad2edf5bc5bac733720f33c5fb544b24caafbb0a9686642ba582f1fc95952d8aa37364ed", @generic="2ae3015be67cc5dc3be9e6a8ed598c4d88e01cddb7224c215e333c625cea80810206ef0bbea9c85b44a81625f92b7bc569891ab2bf64a134f3293db49209e1e3e956c9e2b727fe2b9c077bdf95c44aa97480b7109148c0be600aa23c1baa5472"]}, @generic="8ad37a74917a36ffc7fc43dd61207c677df6f7dca272ac97cc52e024009971db8c037da81e2e8447e8c388aa492abec8fafdcb7426d1707b16ca94d134c5972acb664c45f126cb7af802f29e7ef330a1f4f81135bfcf5a8ec2b76d1dd26291cdd07d2e7b7f8dbfad788d771e5601c03cb9975128b8d1f386959f752a6b6519acff38b9343254ca1ca8b5a49f904ac78a8997018ee2977756cad1a1415778c6348203577a0c5074fc6e9972b4dc0c54948f3b0d16", @generic, @generic="2b115a8fbfc3cd2e124a6ceac21c9f28c571924ee16ea55135b4c5486227614fc8012a2f8ed82ddbf205e98b416921fe4b53b410b0a8f4f4"]}, 0x52c}, {&(0x7f0000000c00)={0x1b4, 0x26, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@nested={0xfa, 0xc, 0x0, 0x1, [@nested={0x4, 0xb3}, @typed={0x8, 0xd4, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x69}, @typed={0x14, 0x18, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="c21cfec7314ddfbeeafb6c0daf016138ed7f3b3ec6ad242ce6c37cc7db4c4af40d10c59710f6e05d5061387bbf1a3d014e342c71d599f421b9960000a3efa6febf2f90061b5f0e52fd741a18a06ebd89572380b43c71f4524cd4736923a96d5a07529e0591efa539fe5d32ac7e96e151d458e86385db829127dc4129c7b07de4d39bd5a4584a35b9ca1be470d0dfe88b8cf44bf327c42405b87e666ad6fa2bca4be24dae9b8d76852fdd0e548d84fb7e4ee287dfbdb259a29973e69fe64d1dadca1b9a44c75f0f879b17a172fb83", @nested={0x4, 0x50}]}, @nested={0x8, 0x51, 0x0, 0x1, [@nested={0x4, 0xda}]}, @generic="1e4ffb2748573cb028ba62b2f38da85e4811e830c7119f7e1f4499cbd5b6c79edeb947ceb318127fd5b0a13a28aa8ee1aa", @generic="0d7db759ef55d9f1de29c5880aec3b3108962069f20900645b6eff8827cc1ee7a9f15ead8337bd5407633334e9732f3175f675f6e2", @typed={0x8, 0x34, 0x0, 0x0, @uid}, @typed={0x8, 0x9b, 0x0, 0x0, @fd=r0}, @generic="95f4e3583288722c1f6ce2d3cdba", @nested={0x1c, 0x112, 0x0, 0x1, [@nested={0x4, 0x6a}, @typed={0x8, 0x27, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x8a}, @nested={0x4, 0x32}, @nested={0x4, 0x70}]}]}, 0x1b4}, {&(0x7f0000000dc0)={0x534, 0x19, 0x0, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x152, 0xa9, 0x0, 0x1, [@nested={0x4, 0x14c}, @typed={0x4, 0xb2}, @nested={0x4, 0x12d}, @generic="e54cf2fc3ee99a09045aba610d97f890be30907269eddf6d0bf9d9dcc2c312fb0e591619281399273bda718f97eca9c6f025dfd1167c3e03d040e3ebd5671ff432b3bc8f6a362835fd8f2f4e73c52f0b96bcba97a72bf99ec3a2d41fdd0779b5f4709ae7715394504b5db2849ae218621879477e7b34d142d5719feba5b001ddae828835aead94fcd09cae614c2c7017db065048a8681a0ec6f210735619358d93c2c2f12112a765f60da781dfe7c1e248e006345befce7ca2c0adc9bcae71ca25e173518316", @typed={0xc, 0xc6, 0x0, 0x0, @u64}, @typed={0x4, 0x95}, @generic="69e2d8298d568dd50cc57f6e55381e4ca539d86f56e8680051d74f6b643b533af38605d40bffa2953f8c22f7cd01663ebc576378803bcb103b0eb63c62d79e2a49d4040a1b4eab371379cc1ba1418583", @nested={0x4, 0x125}, @typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@remote}, @typed={0xd, 0x68, 0x0, 0x0, @str='^^#-%\x1f@!\x00'}]}, @typed={0x8, 0x8c, 0x0, 0x0, @fd=r2}, @nested={0xc, 0xd2, 0x0, 0x1, [@typed={0x8, 0x7f, 0x0, 0x0, @u32=0x522d}]}, @nested={0x37e, 0xf5, 0x0, 0x1, [@typed={0x8, 0x115, 0x0, 0x0, @pid}, @generic="4ccece6524f1db429687b30289ce5b5c6ddabb1023736a87fb41e437d735b26cd01e9cc90477fa42cae02ba5150821c81ead494434f5606264138b49f13c18bc9f881e35778ff5da1a3cd95f09eee74fbb664e6b85966fc7c83ab8125932", @typed={0x8, 0xfc, 0x0, 0x0, @u32=0xf847313}, @generic="a8fe0be2d09a2e30ce5ff54f667e6604a246649be512d109e8e97b110117f5f87c8268f360b7ffaa51d462e1acf33500a2afe5f4fd6e4a02c0bc1609c49cee6dc780118568445aaaba353b0fd82a8f2031c9a0562cec7f203845b25294527c127449ea83b7e3f9e9701d188dd4a5ecc9b148602ca960", @generic="6ef37489ac55e6c81dd96b7f981a094c8573538ac19f1f497c2ea843137d9f7b8bbce6a96c743a83abb1967af59a41b175a3674ed3e6648b9aa3a6da447fb792549100e5aa0aab5531995dce65c3d1dd768f786e25a847e378a85712997d1f224f05edb70d8b09ccfbd833ca459efa8d606c4daa368c1228f61c311b63c315bdee25968b81a1d726698825b8c89175aeba1c70d22fb495c613624635", @generic="36a26bf5f1fbbdf2269914650223ce296c6169b7dd115204aeb8e43f918a01d4af5befb18de306afccbe50277a805ba4c21fba5f4ed5076709b3b31727183e846443b66d83e08eedeac4aa586ed4c8d1a4b88899b81a65109cfa9ea8aa8571093957bab1acbb1f87167e09f3051d8af67ddf426984255d5ab84bb6dde13e7de826672bea271a8932966aab8af816d8fd22c28951a72539932b68a0f2ba4488b0e08956d8b93012da3067f8a71a67460a91a5c4c4", @typed={0xc, 0xe1, 0x0, 0x0, @str='upperdir'}, @generic="8e58c076e18fec202550c7dc6cf11d6b12a8e8cea054afdabd99a0fa68671c7d701da0140e6ada5309511630e5dc8bef9b037be3a207952d3bc1e959935b0460a5c88f17f9da9eac3872234a54bec1a06c81f1980d6373736ef00b1de5d3afd43c73811acde971f799c46fc66cef599c459f8a01e2b957cb13b656a66a498ae8c20b4baf65159583b255490de459921cebe9e430344e60906a40deb1ba1fca8ab0ad13e29204edfe60aa30c2dd9c3866a4e2bbc236fc7206624f1f4bb393e90706729224dbcad11f223be8371e62", @generic="b73bbbfb37c1d77778361042d5151ea42338addd", @generic="d5b32df8cdf8172a7da5f9c3239094a2074078e279841a4d716532c1118ce95b58f3f6591eb8a8dd902d7709f30f372f33a2f0436828d7c7d787e36c7a51ea29d058da52700bce6a5057822caeb211b5978808a98476dd70"]}, @generic="656393ff93c7d023d472864d107290a231b145b69246995aac78adf78bbd93e5973eb90dea987e51205a0ac986aa11e91b8d5a5cd92cb59185e51d"]}, 0x534}, {&(0x7f0000001300)={0x15c, 0x3d, 0x100, 0x70bd25, 0x25dfdbfc, "", [@typed={0x6e, 0x89, 0x0, 0x0, @binary="4b1224d7a89c03b1c29b76447f89627edf1ecd4dc649ab9288808723ed87bdf4e26b6df337dc0dd99cd88ee2f83761c04c7bd4d0f9e4a3a4257fa68f2fab404adac9cb6fcd390a33d4a87bbf96dd47bd675087aac4e59d2d10412c849abf9237f6c1bbee9e73cfbfeb0c"}, @typed={0x8, 0xb7, 0x0, 0x0, @u32=0x7}, @generic="8a60d08592b8bb0071b8715258384a858e16bf973d4b4cc52afebd427488a736cfe98db32a2cf661420f48de4984de08772e2a348c8fe01d93d3ec197c9c9034b06e958ed60c79c77742e66e214bf5273663a0a49c1a87bc6b1c90c34dab7923d8e4b209358281a9853b46a8dd52d203e45b81714a6fb0fb97398202fe2c2aef738508500ea233b4d19c2a0cffa08971272faeef81e4e0d044782a2006db2aa9d7f89b7df35eedf05a860b53c88fa1d5b3241493", @generic="7b4cecc6d8967a1f410e0a9b0388ee4fa6a15f640cb433e6eadfddea8aabc3"]}, 0x15c}, {&(0x7f0000001900)={0x428, 0x40, 0x10, 0x70bd25, 0x25dfdbfb, "", [@nested={0xbb, 0xbb, 0x0, 0x1, [@typed={0x8, 0x116, 0x0, 0x0, @pid}, @nested={0x4, 0x87}, @generic="f6f9f250fa260e7f9d460402407dfc6b90acb2ac785ecf0520e8fad78c4726a1d4ade6191135e5b21bc6986ae0541d622c1a6444cee334d86eac351a1d3c1e12b94acff824b8eaea9db391c7d4cf057c76303d57d5a13f1c03dda2c72f68c699c83a1d25dd7c545d877adc8517e021e8e7dbd1e1c4e5e5526e2ce53a7f070d39a0d558001ff5f5920965bfd49d212942e933dad50329d23cf2232d0e873d1d150381bfee2869514e38fb39"]}, @nested={0x337, 0xa4, 0x0, 0x1, [@generic="46cc6d60891758db48c4408b28b24b84dc8d1f749d8ef898e4ed918e9cdb1331b2136719fdd638c7d699d77ec96795dc89410a3f85374ffba83997930de5d3afc70f49", @typed={0xde, 0xea, 0x0, 0x0, @binary="99d4ab5ea914dbccc815bb1ea3f940955fcd81a87b93a77ac1f3f21fac745f7827bb344c795b533fc8d3c83bd545069912837da7961c5d4cfc43929b42f1cdd3e5e1ce4bfe22b78037f213b0cb2e4398147801b0f5997089575ebe8288f63c6d5f09dfb5db21afc26e46de7bd5bc1ff9ab58e8025bf275038c34a216b8e1692044da080cdb1111b14f2c8a3bc0dc591f7b83c92f420960726a94dc6ffaa72d2ab97a851391a59b51389462d4f14d9fa2613fa39fa1916150d60f40729ebb5bd7a6535ba2d9d8ff1b32bf1720ee683d00a9b18f18614cbc5779dd"}, @generic="abb4e09b299199b8303cb5a9575be57d0c753a23d9311a8fa862576144a07c00ad64412f749c46c19a492ab0afcafd11073c393b3cafc7db309d6fd37d512a8983b6149a", @generic="8e7383a8f93dd6f981f48cd10914b6760960304b82052dbba34d9de44d2c28d5194d6efc03ed9a2a185873f88de23b6d044562f1d1f33fb6eacfe3618f641fc567eb996e0761d27b1a76d73809ea68b18fe0021acb945158b02d5bc77d9031feeecb04778884da2d5e477b3da9b1782b996dbb491afe0e87d34254677c39788ce11cf0d02217d7faff2d9dd50685db144b4dd0cee4d7f07ac991d5c4acefb0339404a8ac6b7e9d5be449ce8209925bbce0eb76384141f54368aa80a92b9555abaa47d464a85a1019c51a5ed9f52ffa71383e64e43b3dc612bf1ec601145a6999ebd19cc8a4080f7a5fa3f1aa0d9dd5265e1a7591eef03bf2", @nested={0xd1, 0x39, 0x0, 0x1, [@generic="815d640bed069cb4692801b26ecfc63b5942d1bb9f6017d1151314533bae595cd98419983ba176fc64f497c4c3b6ff3b1539513274c3ec03d1a1a1bd08361a018094ca34d416b8508cdd220b9a875addb91b7bc04aa2d6aa23b1653ea77963a93def119beb6b33aa035d99ee7dfb325da0ba7952ae124016c63bcb68f8638c806b154942a69b4b44055c15aa02e340db725919544559090c53b128349e82922c4ba3a0f6e925227ad71f9e64b3c0c9a6be654de7be9fbe51da5e1aa30d0c0c76b1f81d9b14bfeb74b0", @nested={0x4, 0x114}]}]}, @typed={0x8, 0x52, 0x0, 0x0, @fd}, @nested={0x14, 0xc3, 0x0, 0x1, [@typed={0x6, 0x4b, 0x0, 0x0, @str=':\x00'}, @nested={0x4, 0xa5}, @nested={0x4, 0xe2}]}, @nested={0x8, 0x191, 0x0, 0x1, [@nested={0x4, 0x6a}]}]}, 0x428}, {&(0x7f0000001680)={0x18, 0x14, 0x300, 0x70bd28, 0x25dfdbfd, "", [@typed={0x8, 0x42, 0x0, 0x0, @uid}]}, 0x18}, {&(0x7f00000030c0)={0x34, 0x1b, 0xc36, 0x70bd28, 0x25dfdbfd, "", [@nested={0x4, 0x4e}, @typed={0x8, 0xbe, 0x0, 0x0, @pid}, @generic="f0f465e7f8c1b5071e2985227c6515d5c83c1bb5206877b9"]}, 0x34}], 0x8, 0x0, 0x0, 0x24002844}, 0x0) setuid(0x0) linkat(r2, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1400) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="11020000000073990a65f3c83b000000000100000028000180d46a29fef36b537a05004e210000140004001b0000000000000000000000000000010000"], 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0xc) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') read(r0, &(0x7f0000000240)=""/189, 0xbd) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022dbd7000ffdbdf251d0000000c009900050000002500000008000300", @ANYRES32=r5, @ANYBLOB="2b87af436d4058f6e4b3c2680111c661cfe7cace456905896608cdc393863b87e64cfdfd25c75146c215232d5435c8338cf78168df390e1c6de179f3d54ae0cedc1a898a049c3b528bdf0870addccfaf532c6cb9b6924f8a684fd37e2eb04e24e16bd498c3b3c760c050e951387c"], 0x28}}, 0x80) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045520, &(0x7f0000000040)=0xfffffffc) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) getdents64(r7, &(0x7f0000002080)=""/4097, 0x1001) ioctl$USBDEVFS_WAIT_FOR_RESUME(r2, 0x5523) r8 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x12b001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000007, 0x20010, 0xffffffffffffffff, 0x733cd000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xe8}, 0x1, 0x0, 0x0, 0x8080}, 0x4040040) ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe, 0x5, 0x6, 0xe30, 0x7fffffff, "c2a0da871813beebb98f6cd3d5e10363", 0x0, 0xfb, 0x42, 0xc, 0x0, 0x0, 0xfc}) 2m32.926974287s ago: executing program 1 (id=1416): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x5, 0x0, &(0x7f0000000600)) (async) getsockopt$inet6_tcp_int(r2, 0x6, 0x5, 0x0, &(0x7f0000000600)) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) clock_gettime(0x5, &(0x7f0000000240)={0x0, 0x0}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_settime(r6, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {r3, r4+10000000}}, 0x0) (async) timer_settime(r6, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {r3, r4+10000000}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000000000000000000040000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') lchown(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r8, 0x0, 0x0, 0x8001) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000200)={0x5, 0x10, 0xfa00, {&(0x7f0000000300), r9}}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112240000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112240000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x50, r1, 0x5, 0x1, 0x0, {{}, {@void, @val={0xc, 0x99, {0x80, 0x5e}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x50, r1, 0x5, 0x1, 0x0, {{}, {@void, @val={0xc, 0x99, {0x80, 0x5e}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 2m32.747855878s ago: executing program 1 (id=1417): mount(&(0x7f0000000140)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='qnx6\x00', 0x204001, 0x0) (fail_nth: 30) 2m32.327811246s ago: executing program 1 (id=1419): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 2m32.269697012s ago: executing program 34 (id=1419): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 1m45.276674842s ago: executing program 4 (id=2149): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d04}]}) r3 = syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x4a141) syz_usb_disconnect(0xffffffffffffffff) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, &(0x7f0000000100)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r4, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000002c0), 0xc, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0cba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34201113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed00083fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f61e00"}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000000b40)="f601", 0x2, 0x40040d1, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0x9, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e4, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0xb, 0x4, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x2, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000880)={r6}) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x0, 0x1, 0x32}, 0x18) ppoll(&(0x7f0000000200)=[{r7, 0x2004}, {r5, 0x400}, {r8, 0x201}], 0x3, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={[0xfffffffffffff4f9]}, 0x8) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m44.31717312s ago: executing program 4 (id=2166): syz_init_net_socket$ax25(0x3, 0x5, 0xcd00) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r1 = dup(r0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) (async) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0) (async) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x14, 0x2000, 0x0, 0x0, 0x0}) (async) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), 0x4) 1m44.316932755s ago: executing program 4 (id=2167): r0 = socket$igmp(0x2, 0x3, 0x2) setrlimit(0x9, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) io_setup(0x2008, &(0x7f00000007c0)) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000940)=0x200000000) write$vhost_msg_v2(r2, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f00000003c0)=""/126, 0xffffffffffffff83, 0x0, 0x0, 0x2}}, 0x48) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x11, 0xcf22, @vifc_lcl_addr=@local, @broadcast}, 0x10) 1m44.245742332s ago: executing program 4 (id=2170): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x91) umount2(&(0x7f0000000000)='./file0\x00', 0x1) r1 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1103, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) io_uring_enter(r1, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x35, {0x5, 0x1}, 0x1}, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x84) getdents64(r4, 0xfffffffffffffffe, 0x29) faccessat2(r0, 0x0, 0x138, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x11) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000000000090850002000000850000007600000095000810000000009500a500000000000000000000000000000078a066e1c6aa2d5c9d6d613249e74b030000002c59cb52cb6b0af374fe6c1016a393227de1bc3f0bf5fa236838c1bbbab3cba8909e070be85cc11fcdb3e4aa0cfdc77af6725064ea58b8e45989d307c983c7818e51a71c64008fe7968ca4815fc5c82037b3d6c3"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f0000000040)) 1m44.014227363s ago: executing program 4 (id=2172): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000040)={0x7, 0x3, 0x40, 0x10000, 'syz1\x00', 0x4000041}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYBLOB='\a']) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 47) 1m43.436714557s ago: executing program 4 (id=2181): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r2, 0x3}, &(0x7f0000000040)=0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'macvlan1\x00', 0x3}) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x1d9853b2099553e1) 1m43.360728685s ago: executing program 35 (id=2181): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r2, 0x3}, &(0x7f0000000040)=0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'macvlan1\x00', 0x3}) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x1d9853b2099553e1) 45.410877963s ago: executing program 6 (id=3320): syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) syz_io_uring_setup(0x235, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$kcm(0xa, 0x2, 0x3a) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet(0x2, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x7ffffcff, 0x1}) 45.409502997s ago: executing program 6 (id=3323): socket$netlink(0x10, 0x3, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000002880)) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000010480)={0x0, 0x0, &(0x7f0000010440)={&(0x7f00000102c0)={0x14, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x88c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000600)=""/174, 0x0, 0xae, 0x1, 0x3}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x400c0c4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000100)=0xffff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x2e, 0x3ff, 0xc, 0x2, 0x6}) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) socket(0x1d, 0x4, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 45.326765041s ago: executing program 6 (id=3324): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') syz_emit_ethernet(0xae, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400000126000400"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xcf}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0xa, 0x801, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f00000000c0)={0x5, 0x100}) getsockopt(r2, 0x29, 0x4b, 0x0, &(0x7f0000001ffc)) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000)={0x1, 0x1}) fsetxattr$security_evm(r0, &(0x7f0000000040), &(0x7f0000000080)=@v1={0x2, "3f6bfc5ead628b6fe068108234d5f197d692b7"}, 0x14, 0x0) 45.326318947s ago: executing program 6 (id=3325): r0 = socket$can_bcm(0x1d, 0x2, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x66) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r3 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x3328}], 0x1, 0x0, 0x0, 0x0) close(r4) write$FUSE_INIT(r3, &(0x7f0000000140)={0x50}, 0xffd3) read$FUSE(r3, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="02"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffdf06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x202, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xa0, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0x9, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x6, 0xe6, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0x7, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x6, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x8000, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x100, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x5, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0x0, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc3, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x101, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r6, &(0x7f0000000980)=[{&(0x7f0000000500)="be81", 0x20000}], 0x1, 0x5, 0xa, 0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001280)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) getresgid(&(0x7f0000001380), &(0x7f00000013c0), &(0x7f0000001400)=0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r9, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000001440)={{0x1, 0x1, 0x18, r2, {r7, r8}}, './file0\x00'}) 44.36307762s ago: executing program 6 (id=3329): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffdf06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x202, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xa0, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0x9, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x6, 0xe6, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0x7, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x6, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0x0, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x101, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) syz_open_dev$evdev(&(0x7f0000000200), 0xfffffffffffffff7, 0x2000) r0 = socket$inet6(0xa, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000001300), 0x9327, 0x20040) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1_to_team\x00', &(0x7f0000000040)=@ethtool_rxfh_indir={0x38}}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610430000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000100)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x32}, @TCA_ROUTE4_IIF={0x8, 0x4, r6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c044}, 0x240440d4) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000000c0)=""/3) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0d00000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="0000000000009197e7710fd52df6c974ad9fe8000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) 43.968661065s ago: executing program 6 (id=3330): r0 = socket$kcm(0x29, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000000)=0x4cb, 0x4) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x841, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24000090) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) copy_file_range(r0, &(0x7f0000000180)=0x2, r2, &(0x7f0000000200)=0x3, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7a}, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c811}, 0x20000010) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in=@initdev}}, &(0x7f00000004c0)=0xe8) fstat(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x2004008, &(0x7f0000000580)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x31, 0x67, 0x35, 0x78, 0x34, 0x6d, 0x74]}}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@measure}, {@smackfsroot={'smackfsroot', 0x3d, '#@%'}}, {@hash}, {@smackfshat={'smackfshat', 0x3d, '\"'}}, {@fowner_eq={'fowner', 0x3d, r5}}]}) mount$afs(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x20000, &(0x7f0000000700)={[{}, {@flock_write}, {@flock_local}, {@flock_strict}, {@flock_write}, {@flock_write}], [{@uid_gt={'uid>', r4}}, {@smackfshat}, {@euid_gt={'euid>', r4}}, {@hash}, {@uid_gt={'uid>', r4}}, {@fsname={'fsname', 0x3d, '$!##'}}]}) mount$binder(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x2000040, &(0x7f0000000840)={[{@stats}], [{@fowner_lt={'fowner<', r5}}, {@fowner_gt={'fowner>', r5}}, {@uid_eq={'uid', 0x3d, r5}}, {@context={'context', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}]}) r6 = getuid() newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r5, r6, r7) faccessat2(r1, &(0x7f0000000980)='./file0\x00', 0x1c6, 0x100) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x16, 0x8, 0x5, 0x2, 0x18800, r1, 0x4, '\x00', r3, r1, 0x0, 0x5, 0x5, 0x0, @value=r1, @void, @value=r1}, 0x50) tee(r9, r0, 0x10001, 0x2) listen(r1, 0xffff) write$P9_RLOCK(r1, &(0x7f0000000a40)={0x8, 0x35, 0x1, 0x1}, 0x8) close_range(0xffffffffffffffff, r2, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000a80)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x10) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000ac0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r10 = socket$nl_crypto(0x10, 0x3, 0x15) statx(0xffffffffffffff9c, &(0x7f0000000d00)='./file0/file0\x00', 0x4000, 0x40, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r10, r11, r8) ioctl$CDROMRESUME(r0, 0x5302) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000fc0)={&(0x7f0000000e40)="339cf28107f2922c9bf54ca23fcefbefc7e89bb5f361c87de84ed803e69fb8eb3afaa4a257e12cc3c26b9f76802a9429e2d1e5ab6bab10ff683604c2dfd8b65a0a9c6687a8a3e996afa8d3d5eb3bfe62ef3b", &(0x7f0000000ec0)=""/30, &(0x7f0000000f00)="6f90774105aa665fa4d79fc863929b91d4d3d4bae7a74f4098aa5b4837ba8219c54a04f7a1676aaa2c979585dc0dffb5a9645b6e81e640f7d15f2320f625", &(0x7f0000000f40)="12e568d0cec0bd3c9f97e2b8643facf103c868610d69a8011945321143a12322fdbf5daf24b0c05a96d0b2c7c291151710f8914f08ce564eaf134aa7aa85f6f3076c5bc006e92a082848df44b8b1e81edc6e183f7c7a76", 0x8, r1}, 0x38) writev(r2, &(0x7f0000001080)=[{&(0x7f0000001000)="db790adf89e3c89c1d0f70ebe9761c4a613849202e21e572c0bdf0eb283f5a2a126433e6d48be72e590c5db1e8dbcc03a7e161029a593650e55162dbaaa42bb2598861d476a4fe6e89af2e93f3ffc486335e11715abd299ab5dfbafc74415212d097ec2c02ff462b", 0x68}], 0x1) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000010c0)={@rand_addr=' \x01\x00', 0x4a, r3}) 43.88532289s ago: executing program 36 (id=3330): r0 = socket$kcm(0x29, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000000)=0x4cb, 0x4) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x841, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24000090) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) copy_file_range(r0, &(0x7f0000000180)=0x2, r2, &(0x7f0000000200)=0x3, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7a}, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c811}, 0x20000010) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in=@initdev}}, &(0x7f00000004c0)=0xe8) fstat(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x2004008, &(0x7f0000000580)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x31, 0x67, 0x35, 0x78, 0x34, 0x6d, 0x74]}}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@measure}, {@smackfsroot={'smackfsroot', 0x3d, '#@%'}}, {@hash}, {@smackfshat={'smackfshat', 0x3d, '\"'}}, {@fowner_eq={'fowner', 0x3d, r5}}]}) mount$afs(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x20000, &(0x7f0000000700)={[{}, {@flock_write}, {@flock_local}, {@flock_strict}, {@flock_write}, {@flock_write}], [{@uid_gt={'uid>', r4}}, {@smackfshat}, {@euid_gt={'euid>', r4}}, {@hash}, {@uid_gt={'uid>', r4}}, {@fsname={'fsname', 0x3d, '$!##'}}]}) mount$binder(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x2000040, &(0x7f0000000840)={[{@stats}], [{@fowner_lt={'fowner<', r5}}, {@fowner_gt={'fowner>', r5}}, {@uid_eq={'uid', 0x3d, r5}}, {@context={'context', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}]}) r6 = getuid() newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r5, r6, r7) faccessat2(r1, &(0x7f0000000980)='./file0\x00', 0x1c6, 0x100) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x16, 0x8, 0x5, 0x2, 0x18800, r1, 0x4, '\x00', r3, r1, 0x0, 0x5, 0x5, 0x0, @value=r1, @void, @value=r1}, 0x50) tee(r9, r0, 0x10001, 0x2) listen(r1, 0xffff) write$P9_RLOCK(r1, &(0x7f0000000a40)={0x8, 0x35, 0x1, 0x1}, 0x8) close_range(0xffffffffffffffff, r2, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000a80)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x10) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000ac0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r10 = socket$nl_crypto(0x10, 0x3, 0x15) statx(0xffffffffffffff9c, &(0x7f0000000d00)='./file0/file0\x00', 0x4000, 0x40, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r10, r11, r8) ioctl$CDROMRESUME(r0, 0x5302) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000fc0)={&(0x7f0000000e40)="339cf28107f2922c9bf54ca23fcefbefc7e89bb5f361c87de84ed803e69fb8eb3afaa4a257e12cc3c26b9f76802a9429e2d1e5ab6bab10ff683604c2dfd8b65a0a9c6687a8a3e996afa8d3d5eb3bfe62ef3b", &(0x7f0000000ec0)=""/30, &(0x7f0000000f00)="6f90774105aa665fa4d79fc863929b91d4d3d4bae7a74f4098aa5b4837ba8219c54a04f7a1676aaa2c979585dc0dffb5a9645b6e81e640f7d15f2320f625", &(0x7f0000000f40)="12e568d0cec0bd3c9f97e2b8643facf103c868610d69a8011945321143a12322fdbf5daf24b0c05a96d0b2c7c291151710f8914f08ce564eaf134aa7aa85f6f3076c5bc006e92a082848df44b8b1e81edc6e183f7c7a76", 0x8, r1}, 0x38) writev(r2, &(0x7f0000001080)=[{&(0x7f0000001000)="db790adf89e3c89c1d0f70ebe9761c4a613849202e21e572c0bdf0eb283f5a2a126433e6d48be72e590c5db1e8dbcc03a7e161029a593650e55162dbaaa42bb2598861d476a4fe6e89af2e93f3ffc486335e11715abd299ab5dfbafc74415212d097ec2c02ff462b", 0x68}], 0x1) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000010c0)={@rand_addr=' \x01\x00', 0x4a, r3}) 16.830585371s ago: executing program 8 (id=3805): syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) syz_io_uring_setup(0x235, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$kcm(0xa, 0x2, 0x3a) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet(0x2, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0xfffbff7f00000000, 0x1}) 16.730180099s ago: executing program 8 (id=3806): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x1, 0x800) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000480)={0x80000000, &(0x7f0000000340)=[{0x80000000}, {0x80000000}], 0x0}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d000905097a"], 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4601) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000140)={r2, 0x0, 0x0}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000000380)={0x3, 0xffffffffffffffff, 'id1\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e002e8970d8107040a60110000020000000455a1bc0009009c000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f5d6b26462f25a4d1c2e446b727f3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2210000000014d6d930dfe1d9c322fe040000005025ac227d3ae7ca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b69b5000000000000002a9ecbee", 0xd8}], 0x1}, 0x94) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x2, 0x4002004c4, 0xffe, 0x0, 0x0, 0xfffffffffffffffd, 0x9012, 0x0, 0xd57b, 0x0, 0x80], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r10 = openat$cgroup_ro(r4, &(0x7f0000000440)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) sendmsg$can_bcm(r10, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="060000000c0600000100000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESHEX=r3, @ANYBLOB="02000000010000000e000080080200005d2f9b62c96ba954"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008040) fallocate(r0, 0x52, 0xffff, 0x22a1) landlock_restrict_self(0xffffffffffffffff, 0x3) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC=r9], 0x17) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x9}, 0x50) 15.355212528s ago: executing program 8 (id=3829): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') socket$can_raw(0x1d, 0x3, 0x1) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400000126000400"}]}}}}}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xcf}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0xa, 0x801, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f00000000c0)={0x5, 0x100}) getsockopt(r2, 0x29, 0x4b, 0x0, &(0x7f0000001ffc)) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000)={0x1, 0x1}) fsetxattr$security_evm(r0, &(0x7f0000000040), &(0x7f0000000080)=@v1={0x2, "3f6bfc5ead628b6fe068108234d5f197d692b7"}, 0x14, 0x0) 15.354738538s ago: executing program 8 (id=3830): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x6020c0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf250b0000006c00058024000280080001001b000000080001000100000008000400b3000000080004000a000000080001"], 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x20000014) r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r4, &(0x7f0000000240)='./file0\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x48, 0x5, 0x73, 0xffe00003}, {0x6, 0x83, 0x6, 0x10400}]}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x70bd29, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0xfff2, 0xfff1}}}, 0x24}}, 0x40004) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100400000000000f4000040000000000700000000000000"]) ioctl$SG_IO(r3, 0x2285, 0x0) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f00000000c0)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 15.150979156s ago: executing program 8 (id=3831): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="800000001e0021002bbd700000000088002a0000006900010085951a710b54d4c53ad87f3a5fa9e26d623a8e5faa9bc780c391e7fef353a6ff67be1dc121718abba1c6b372235798e73af29221c8fd69d27df28887114d1e08f2a614cf9dbe589a263f98e46fecb21f412e43588f2d88cf0514a16e9ec346f19f740ce45d000000"], 0x80}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) r3 = fsmount(r0, 0x1, 0x0) r4 = openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000f80)) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x4, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000001880)={{0x1, 0x1, 0x18, r2}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x2}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}]}}]}, 0x40}}, 0x4048000) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000ec0)=@deltclass={0xa8, 0x29, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xffe0, 0x8}, {0xe, 0xe}, {0x8, 0xd}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5825}]}}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0xfc}}, @TCA_RATE={0x6, 0x5, {0x1, 0x4}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x24, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x0, 0xfffffffb, 0x6}}, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x8, 0x570}}]}}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x98, 0xff}}, @tclass_kind_options=@c_cbs={0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000fc0), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x278, 0x278, 0x1e0, 0x1e0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x2, 0x41}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x0, 0xfc}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xb78e19162b0a7f00, 0xffff00, 'pimreg1\x00', '\x00', {}, {0xff}, 0x0, 0x0, 0x10}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0xf}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'sit0\x00', 'wg2\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='\b\x00\x00\x00'], 0x4) 14.844399745s ago: executing program 8 (id=3835): syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) syz_io_uring_setup(0x235, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$kcm(0xa, 0x2, 0x3a) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet(0x2, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0xffffff7f00000000, 0x1}) 14.756798557s ago: executing program 37 (id=3835): syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) syz_io_uring_setup(0x235, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$kcm(0xa, 0x2, 0x3a) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet(0x2, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0xffffff7f00000000, 0x1}) 1.508293913s ago: executing program 7 (id=4108): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x1, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'io'}]}, 0x4) 1.421711802s ago: executing program 7 (id=4112): socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x88c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000600)=""/174, 0x0, 0xae, 0x1, 0x3}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x400c0c4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000100)=0xffff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x2e, 0x3ff, 0xc, 0x2, 0x6}) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) socket(0x1d, 0x4, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1.26924257s ago: executing program 7 (id=4113): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000280)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @remote, 0x99}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000290000000b000000e9ff0c0c000000001400000000000000290000000b000000000000f600000000"], 0x30}}], 0x1, 0x20008000) (fail_nth: 2) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) 1.225145918s ago: executing program 7 (id=4115): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) 1.220235569s ago: executing program 7 (id=4117): r0 = socket(0x10, 0x803, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000002c40)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) r3 = socket$inet6(0xa, 0x3, 0x5) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000000150000a00600"]) r7 = socket$l2tp6(0xa, 0x2, 0x73) r8 = dup3(r7, r3, 0x0) sendmmsg$inet6(r8, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @mcast1, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000000000290000000b"], 0x18}}], 0x1, 0x810) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000000280)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @remote, 0x99}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000290000000b000000e9ff0c0c000000001400000000000000290000000b000000000000f600000000"], 0x30}}], 0x1, 0x20008000) r10 = io_uring_setup(0x27d4, &(0x7f0000000080)={0x0, 0x81bf, 0x4, 0x3, 0x126}) syz_io_uring_setup(0x4253, &(0x7f0000000140)={0x0, 0xfeb, 0x0, 0x1, 0x4e, 0x0, r10}, &(0x7f0000000240), &(0x7f00000002c0)) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) 930.254156ms ago: executing program 9 (id=4123): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x101040) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000140000001f000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 876.147683ms ago: executing program 9 (id=4127): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x6, 0x6c1, 0x1000, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x85d7, 0x81, 0x7fffffff, 0x0, 0x7f, "caf26c551f08000000307a36749bdc0c1da50e", 0x3770, 0xfffffff3}) 759.915481ms ago: executing program 9 (id=4131): syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x235, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$kcm(0xa, 0x2, 0x3a) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet(0x2, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 695.286682ms ago: executing program 9 (id=4135): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) 642.556076ms ago: executing program 9 (id=4137): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) (async) r1 = fanotify_init(0x200, 0x0) (async) r2 = memfd_create(&(0x7f00000004c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00My0:\xc3\xad&\xbe\xa4\xd8\x9b\x96@r\x8c\xdc\xc0/j\x8f\x01(p\xbf\x9f\x8c=Q\x06\xa2\x99\xb7\x03?\xebX\xa6\x9d\x8e\xee\x16\xb7Zg\x87\xa3\x93mrEn\xda\xb7\xa1I#\x9eT\xab;\x16\x86\xed[\f\xf2P\x06\x8cjL\x12_0$ \x97)\xaf\x9b3\x06A\xa6A\xca\xd7\xcd\x02R\x8d\xe7\xcd\xee\x96\xac\x16\x0f\x1a\xfc\xca\x15\xf6`V\xa7\xe2R\x9e\xe3\xb4:\xadr\xd1>>*\xac\xabHt\xe3\xbf', 0x1) (async) accept4(r0, 0x0, &(0x7f00000001c0), 0x80000) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) (rerun: 32) r3 = dup(r2) fanotify_mark(r1, 0x1, 0x48001059, r3, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) keyctl$read(0xb, r4, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) mkdir(&(0x7f0000000040)='./file0\x00', 0x5) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xffff, 0x380000, @loopback}, 0x1c) 535.383467ms ago: executing program 9 (id=4139): prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101801) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000040)={0x770d, 0x1, [{0x1, 0x1}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc0100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 438.256157ms ago: executing program 5 (id=4142): socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x88c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000600)=""/174, 0x0, 0xae, 0x1, 0x3}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x400c0c4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000100)=0xffff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x2e, 0x3ff, 0xc, 0x2, 0x6}) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) socket(0x1d, 0x4, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 331.98735ms ago: executing program 5 (id=4143): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000280)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @remote, 0x99}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000290000000b000000e9ff0c0c000000001400000000000000290000000b000000000000f600000000"], 0x30}}], 0x1, 0x20008000) (fail_nth: 3) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) 213.67266ms ago: executing program 5 (id=4144): syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x235, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$kcm(0xa, 0x2, 0x3a) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet(0x2, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 167.719262ms ago: executing program 5 (id=4145): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb2521000000", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) 167.443048ms ago: executing program 3 (id=4146): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000280)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @remote, 0x99}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000290000000b000000e9ff0c0c000000001400000000000000290000000b000000000000f600000000"], 0x30}}], 0x1, 0x20008000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) 167.290892ms ago: executing program 7 (id=4147): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) geteuid() mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) splice(r1, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) close(0x4) 166.803626ms ago: executing program 5 (id=4148): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x7a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f60072f00fe8000000000000000000000000000bb00000000000000000000ffff00000000242188"], 0x0) 162.38799ms ago: executing program 3 (id=4149): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x101040) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000140000001f000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 86.651054ms ago: executing program 3 (id=4150): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3701) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff033}]}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='mr_dereg\x00', r5}, 0x18) (async) unshare(0x22020600) syz_open_procfs(0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x46f, 0x10000, @value=r4}, 0x28) (async) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x10) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400050000010000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0xc004) 86.042711ms ago: executing program 3 (id=4151): socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x88c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000600)=""/174, 0x0, 0xae, 0x1, 0x3}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x400c0c4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000100)=0xffff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x2e, 0x3ff, 0xc, 0x2, 0x6}) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) socket(0x1d, 0x4, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 627.651µs ago: executing program 3 (id=4152): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') socket$can_raw(0x1d, 0x3, 0x1) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x1, "000000000400000126000400"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xcf}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0xa, 0x801, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f00000000c0)={0x5, 0x100}) getsockopt(r2, 0x29, 0x4b, 0x0, &(0x7f0000001ffc)) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000)={0x1, 0x1}) fsetxattr$security_evm(r0, &(0x7f0000000040), &(0x7f0000000080)=@v1={0x2, "3f6bfc5ead628b6fe068108234d5f197d692b7"}, 0x14, 0x0) 317.424µs ago: executing program 5 (id=4153): syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x235, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$kcm(0xa, 0x2, 0x3a) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet(0x2, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 0s ago: executing program 3 (id=4154): r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000802, r1, &(0x7f0000000140)={0x303a, 0xfffffffffffffff8, 0xffffffffffffffff, 0x9, 0x2, 0x7, 0x3, 0x9, 0x5}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x6) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0xce) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="02c92012000e000500"], 0x17) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x9}, 0x50) kernel console output (not intermixed with test programs): ss `syz.7.3207'. [ 222.867615][T23862] usb usb8: usbfs: process 23862 (syz.7.3207) did not claim interface 0 before use [ 222.870782][T23862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23862 comm=syz.7.3207 [ 223.050989][T23876] mkiss: ax0: crc mode is auto. [ 223.136923][T23894] xt_hashlimit: size too large, truncated to 1048576 [ 223.428282][T23934] xt_hashlimit: size too large, truncated to 1048576 [ 223.918555][ T5945] Bluetooth: hci1: unexpected event for opcode 0x1407 [ 224.556151][T23975] netlink: del zone limit has 4 unknown bytes [ 224.598169][T23979] xt_hashlimit: size too large, truncated to 1048576 [ 224.648396][T23987] usb usb8: usbfs: process 23987 (syz.5.3241) did not claim interface 5 before use [ 224.654784][T23987] usb usb8: usbfs: process 23987 (syz.5.3241) did not claim interface 0 before use [ 224.706142][T23990] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 224.840399][T24008] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 224.845168][T24008] overlayfs: missing 'lowerdir' [ 224.849045][T24008] program syz.6.3246 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.849723][T24010] xt_hashlimit: size too large, truncated to 1048576 [ 224.995964][T24029] usb usb8: usbfs: process 24029 (syz.6.3252) did not claim interface 5 before use [ 224.999405][T24029] usb usb8: usbfs: process 24029 (syz.6.3252) did not claim interface 0 before use [ 225.040367][T24035] netlink: zone id is out of range [ 225.042678][T24035] netlink: zone id is out of range [ 225.045191][T24035] netlink: set zone limit has 8 unknown bytes [ 225.088117][T24040] __nla_validate_parse: 4 callbacks suppressed [ 225.088133][T24040] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3257'. [ 225.102159][T24046] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3259'. [ 225.115527][T24049] xt_hashlimit: size too large, truncated to 1048576 [ 225.273157][T24063] usb usb8: usbfs: process 24063 (syz.6.3264) did not claim interface 5 before use [ 225.276949][T24063] usb usb8: usbfs: process 24063 (syz.6.3264) did not claim interface 0 before use [ 225.431783][ T5945] Bluetooth: hci4: command 0x1003 tx timeout [ 225.436589][ T5940] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 225.560460][ T53] usb 11-1: new full-speed USB device number 12 using dummy_hcd [ 225.719336][ T53] usb 11-1: device descriptor read/64, error -71 [ 225.976074][ T53] usb 11-1: new full-speed USB device number 13 using dummy_hcd [ 226.114948][ T53] usb 11-1: device descriptor read/64, error -71 [ 226.214069][T24130] kvm: pic: non byte write [ 226.218618][ T5940] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 226.252675][ T53] usb usb11-port1: attempt power cycle [ 226.316892][T24141] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3276'. [ 226.359131][T24143] usb usb8: usbfs: process 24143 (syz.7.3277) did not claim interface 5 before use [ 226.363486][T24143] usb usb8: usbfs: process 24143 (syz.7.3277) did not claim interface 0 before use [ 226.370864][T24138] random: crng reseeded on system resumption [ 226.610317][T24167] bond2: Unable to set up delay as MII monitoring is disabled [ 226.617020][T24167] bond2 (unregistering): Released all slaves [ 226.638939][ T53] usb 11-1: new full-speed USB device number 14 using dummy_hcd [ 226.645940][T24237] FAULT_INJECTION: forcing a failure. [ 226.645940][T24237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.653215][T24237] CPU: 0 UID: 0 PID: 24237 Comm: syz.7.3284 Not tainted syzkaller #0 PREEMPT(full) [ 226.653240][T24237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 226.653252][T24237] Call Trace: [ 226.653273][T24237] [ 226.653280][T24237] dump_stack_lvl+0x16c/0x1f0 [ 226.653339][T24237] should_fail_ex+0x512/0x640 [ 226.653369][T24237] _copy_from_iter+0x29f/0x1720 [ 226.653399][T24237] ? __pfx__copy_from_iter+0x10/0x10 [ 226.653421][T24237] ? rcu_is_watching+0x12/0xc0 [ 226.653447][T24237] ? trace_kmalloc+0x2b/0xd0 [ 226.653465][T24237] ? __kmalloc_noprof+0x34f/0x880 [ 226.653490][T24237] ? kernfs_fop_write_iter+0x237/0x570 [ 226.653514][T24237] kernfs_fop_write_iter+0x19a/0x570 [ 226.653535][T24237] vfs_write+0x7d3/0x11d0 [ 226.653549][T24237] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 226.653566][T24237] ? __pfx___mutex_lock+0x10/0x10 [ 226.653583][T24237] ? __pfx_vfs_write+0x10/0x10 [ 226.653617][T24237] ksys_write+0x12a/0x250 [ 226.653635][T24237] ? __pfx_ksys_write+0x10/0x10 [ 226.653659][T24237] do_syscall_64+0xcd/0xfa0 [ 226.653688][T24237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.653706][T24237] RIP: 0033:0x7f8fc738efc9 [ 226.653722][T24237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.653739][T24237] RSP: 002b:00007f8fc81ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 226.653758][T24237] RAX: ffffffffffffffda RBX: 00007f8fc75e5fa0 RCX: 00007f8fc738efc9 [ 226.653769][T24237] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000006 [ 226.653780][T24237] RBP: 00007f8fc81ce090 R08: 0000000000000000 R09: 0000000000000000 [ 226.653791][T24237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.653801][T24237] R13: 00007f8fc75e6038 R14: 00007f8fc75e5fa0 R15: 00007ffccb77c1c8 [ 226.653826][T24237] [ 226.661785][ T53] usb 11-1: device descriptor read/8, error -71 [ 226.792303][T24245] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3286'. [ 226.886101][T24270] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 226.925019][T24258] kvm: pic: non byte write [ 226.930557][ T5940] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 226.963208][T24276] tmpfs: Unknown parameter '18446744073709551615' [ 226.991772][ T53] usb 11-1: new full-speed USB device number 15 using dummy_hcd [ 227.024667][ T53] usb 11-1: device descriptor read/8, error -71 [ 227.089722][T24288] fuse: Unknown parameter 'FdXq"~t[àÄ`õÍUó¢gX‡1‹0x0000000000000006' [ 227.141559][ T53] usb usb11-port1: unable to enumerate USB device [ 227.198275][T24304] bond0: Error: Cannot enslave bond to itself. [ 227.471096][T24320] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 227.522286][T24322] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3303'. [ 227.526734][T24322] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3303'. [ 227.530605][T24322] tmpfs: Invalid gid '0x00000000ffffffff' [ 227.704501][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 227.704513][ T40] audit: type=1326 audit(2000000155.009:28845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24333 comm="syz.7.3305" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fc738efc9 code=0x0 [ 228.116195][ T40] audit: type=1400 audit(2000000155.393:28846): avc: denied { write } for pid=24336 comm="syz.3.3306" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 228.184419][T24342] hashlimit_mt_check_common: 7 callbacks suppressed [ 228.184430][T24342] xt_hashlimit: size too large, truncated to 1048576 [ 228.239290][T24344] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 228.444572][T24351] xt_hashlimit: size too large, truncated to 1048576 [ 228.500105][T24355] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 228.587785][T24367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3315'. [ 228.615147][T24367] 8021q: adding VLAN 0 to HW filter on device bond2 [ 228.738268][ T5945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 228.744711][ T5945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 228.744791][T24397] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 228.746536][T24417] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3318'. [ 228.748922][ T5945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 228.755158][T24397] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3316'. [ 228.759698][ T5945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 228.764880][ T5945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 228.808145][T24422] netlink: 180 bytes leftover after parsing attributes in process `syz.7.3321'. [ 228.900431][T24434] usb usb8: usbfs: process 24434 (syz.6.3324) did not claim interface 5 before use [ 228.952756][ T40] audit: type=1400 audit(2000000156.178:28847): avc: denied { create } for pid=24437 comm="syz.6.3325" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 229.041384][ T40] audit: type=1400 audit(2000000156.253:28848): avc: denied { append } for pid=24437 comm="syz.6.3325" name="cpuset.effective_cpus" dev="9p" ino=72876245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 229.051269][T24412] chnl_net:caif_netlink_parms(): no params data found [ 229.108016][ T40] audit: type=1400 audit(2000000156.319:28849): avc: denied { ioctl } for pid=24437 comm="syz.6.3325" path="/488/file0/cpuset.effective_cpus" dev="9p" ino=72876245 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 229.151824][T24412] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.154153][T24412] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.156832][T24412] bridge_slave_0: entered allmulticast mode [ 229.161106][T24412] bridge_slave_0: entered promiscuous mode [ 229.166590][T24412] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.168852][T24412] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.171255][T24412] bridge_slave_1: entered allmulticast mode [ 229.176569][T24412] bridge_slave_1: entered promiscuous mode [ 229.223233][T24412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.229832][T24412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.284547][T24412] team0: Port device team_slave_0 added [ 229.289282][T24412] team0: Port device team_slave_1 added [ 229.340016][T24412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.342254][T24412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.350964][T24412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.355454][T24412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.357898][T24412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.366927][T24412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.426716][T24412] hsr_slave_0: entered promiscuous mode [ 229.430008][T24412] hsr_slave_1: entered promiscuous mode [ 229.432798][T24412] debugfs: 'hsr0' already exists in 'hsr' [ 229.435156][T24412] Cannot create hsr debugfs directory [ 229.599433][T24412] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.641091][T25428] xt_hashlimit: size too large, truncated to 1048576 [ 229.696662][T25430] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 229.756182][T24412] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.894132][T24412] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.987325][T24412] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.123591][T24412] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 230.128533][T24412] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 230.134214][T24412] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 230.141688][T24412] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 230.205424][T24412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.219846][T24412] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.229395][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.231784][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.243415][ T1201] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.246412][ T1201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.364963][T24412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.496746][T24412] veth0_vlan: entered promiscuous mode [ 230.502485][T24412] veth1_vlan: entered promiscuous mode [ 230.511110][ T5937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 230.515085][ T5937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 230.518327][ T5937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.521048][T24412] veth0_macvtap: entered promiscuous mode [ 230.524151][ T5937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.525362][T24412] veth1_macvtap: entered promiscuous mode [ 230.527393][ T5937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 230.535731][T24412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.545705][T24412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.552262][ T46] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.556048][ T46] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.560228][ T46] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.570653][ T1201] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.610265][ T1201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.612805][ T1201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.632942][ T1201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.635544][ T1201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.689349][T25503] xt_hashlimit: size too large, truncated to 1048576 [ 230.807224][T25473] chnl_net:caif_netlink_parms(): no params data found [ 230.831040][T25600] usb usb8: usbfs: process 25600 (syz.5.3332) did not claim interface 5 before use [ 230.921280][T25473] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.924079][T25473] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.927415][T25473] bridge_slave_0: entered allmulticast mode [ 230.930161][T25473] bridge_slave_0: entered promiscuous mode [ 230.933230][T25473] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.935567][T25473] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.938788][T25473] bridge_slave_1: entered allmulticast mode [ 230.941463][T25473] bridge_slave_1: entered promiscuous mode [ 230.988007][T25473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.991563][ T5937] Bluetooth: hci0: command tx timeout [ 230.996975][T25652] kvm: pic: non byte write [ 230.998355][T25473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.043486][T25473] team0: Port device team_slave_0 added [ 231.047105][T25473] team0: Port device team_slave_1 added [ 231.096619][T25473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.100736][T25473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.112052][T25473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.113309][T26158] __nla_validate_parse: 1 callbacks suppressed [ 231.113318][T26158] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3334'. [ 231.118416][T25473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.118612][T26158] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3334'. [ 231.122350][T25473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.124727][T26158] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3334'. [ 231.128193][T25473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.140044][T26158] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3334'. [ 231.214976][T25473] hsr_slave_0: entered promiscuous mode [ 231.220009][T25473] hsr_slave_1: entered promiscuous mode [ 231.222316][T25473] debugfs: 'hsr0' already exists in 'hsr' [ 231.224210][T25473] Cannot create hsr debugfs directory [ 231.237297][T26200] FAULT_INJECTION: forcing a failure. [ 231.237297][T26200] name failslab, interval 1, probability 0, space 0, times 0 [ 231.241573][T26200] CPU: 3 UID: 0 PID: 26200 Comm: syz.5.3335 Not tainted syzkaller #0 PREEMPT(full) [ 231.241589][T26200] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 231.241595][T26200] Call Trace: [ 231.241610][T26200] [ 231.241615][T26200] dump_stack_lvl+0x16c/0x1f0 [ 231.241652][T26200] should_fail_ex+0x512/0x640 [ 231.241695][T26200] ? fs_reclaim_acquire+0xae/0x150 [ 231.241710][T26200] should_failslab+0xc2/0x120 [ 231.241722][T26200] __kmalloc_noprof+0xdd/0x880 [ 231.241742][T26200] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 231.241764][T26200] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 231.241782][T26200] tomoyo_realpath_from_path+0xc2/0x6e0 [ 231.241804][T26200] ? tomoyo_profile+0x47/0x60 [ 231.241830][T26200] tomoyo_path_number_perm+0x245/0x580 [ 231.241860][T26200] ? tomoyo_path_number_perm+0x237/0x580 [ 231.241886][T26200] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 231.241914][T26200] ? find_held_lock+0x2b/0x80 [ 231.241958][T26200] ? find_held_lock+0x2b/0x80 [ 231.241978][T26200] ? hook_file_ioctl_common+0x145/0x410 [ 231.242006][T26200] ? __fget_files+0x20e/0x3c0 [ 231.242029][T26200] security_file_ioctl+0x9b/0x240 [ 231.242050][T26200] __x64_sys_ioctl+0xb7/0x210 [ 231.242078][T26200] do_syscall_64+0xcd/0xfa0 [ 231.242104][T26200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.242120][T26200] RIP: 0033:0x7f925938efc9 [ 231.242133][T26200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.242148][T26200] RSP: 002b:00007f925a2e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 231.242163][T26200] RAX: ffffffffffffffda RBX: 00007f92595e5fa0 RCX: 00007f925938efc9 [ 231.242172][T26200] RDX: 0000200000000040 RSI: 00000000402c542c RDI: 0000000000000004 [ 231.242183][T26200] RBP: 00007f925a2e3090 R08: 0000000000000000 R09: 0000000000000000 [ 231.242193][T26200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.242202][T26200] R13: 00007f92595e6038 R14: 00007f92595e5fa0 R15: 00007ffc33a30b08 [ 231.242225][T26200] [ 231.242233][T26200] ERROR: Out of memory at tomoyo_realpath_from_path. [ 231.488393][T25473] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 231.492952][T25473] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 231.498064][T25473] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 231.502381][T25473] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 231.531190][T25473] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.534358][T25473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.584717][T25473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.592176][T26516] /dev/nullb0: Can't lookup blockdev [ 231.598652][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.614259][T25473] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.624798][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.627865][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.635431][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.637831][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.661084][T26519] xt_hashlimit: size too large, truncated to 1048576 [ 231.756985][T25473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.892311][T25473] veth0_vlan: entered promiscuous mode [ 231.900162][T25473] veth1_vlan: entered promiscuous mode [ 231.924820][T25473] veth0_macvtap: entered promiscuous mode [ 231.930995][T25473] veth1_macvtap: entered promiscuous mode [ 231.932167][ T5940] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 231.933673][ T5937] Bluetooth: hci4: command 0x1003 tx timeout [ 231.958340][T26535] kvm: pic: non byte write [ 231.967337][T25473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.980444][T25473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.986867][ T1179] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.990598][ T1179] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.999075][ T1179] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.002429][ T1179] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.055196][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.058359][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.082150][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.085249][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.145950][T26554] batman_adv: batadv0: Adding interface: dummy0 [ 232.148620][T26554] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.159285][T26554] batman_adv: batadv0: Interface activated: dummy0 [ 232.163391][T26549] ip6t_srh: unknown srh invflags 4000 [ 232.166097][T26554] batadv0: mtu less than device minimum [ 232.169620][T26554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 232.174685][T26554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 232.179873][T26554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 232.184963][T26554] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 232.238125][T26563] xt_hashlimit: size too large, truncated to 1048576 [ 232.334015][T26577] xt_hashlimit: size too large, truncated to 1048576 [ 232.351928][T26580] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3348'. [ 232.354747][T26580] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3348'. [ 232.398614][T26583] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3349'. [ 232.426023][T26583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.433737][T26620] usb usb8: usbfs: process 26620 (syz.8.3351) did not claim interface 5 before use [ 232.520751][T26634] xt_hashlimit: size too large, truncated to 1048576 [ 232.580934][T26636] FAULT_INJECTION: forcing a failure. [ 232.580934][T26636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.586329][T26636] CPU: 2 UID: 0 PID: 26636 Comm: syz.3.3357 Not tainted syzkaller #0 PREEMPT(full) [ 232.586345][T26636] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 232.586351][T26636] Call Trace: [ 232.586355][T26636] [ 232.586360][T26636] dump_stack_lvl+0x16c/0x1f0 [ 232.586380][T26636] should_fail_ex+0x512/0x640 [ 232.586396][T26636] _copy_from_user+0x2e/0xd0 [ 232.586410][T26636] user_termios_to_kernel_termios+0x21/0x30 [ 232.586424][T26636] set_termios+0x233/0x880 [ 232.586435][T26636] ? find_held_lock+0x2b/0x80 [ 232.586450][T26636] ? __pfx_set_termios+0x10/0x10 [ 232.586462][T26636] ? __lock_acquire+0xb8a/0x1c90 [ 232.586486][T26636] tty_mode_ioctl+0x4ef/0xd30 [ 232.586498][T26636] ? __pfx_tty_mode_ioctl+0x10/0x10 [ 232.586515][T26636] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 232.586529][T26636] ? __pfx_n_tty_ioctl+0x10/0x10 [ 232.586538][T26636] n_tty_ioctl_helper+0x4b/0x2b0 [ 232.586551][T26636] n_tty_ioctl+0x7f/0x370 [ 232.586562][T26636] ? __pfx_n_tty_ioctl+0x10/0x10 [ 232.586571][T26636] tty_ioctl+0x700/0x1680 [ 232.586586][T26636] ? __pfx_tty_ioctl+0x10/0x10 [ 232.586600][T26636] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 232.586617][T26636] ? hook_file_ioctl_common+0x145/0x410 [ 232.586635][T26636] ? selinux_file_ioctl+0x180/0x270 [ 232.586646][T26636] ? selinux_file_ioctl+0xb4/0x270 [ 232.586657][T26636] ? __pfx_tty_ioctl+0x10/0x10 [ 232.586672][T26636] __x64_sys_ioctl+0x18e/0x210 [ 232.586689][T26636] do_syscall_64+0xcd/0xfa0 [ 232.586705][T26636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.586716][T26636] RIP: 0033:0x7f2a11b8efc9 [ 232.586725][T26636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.586736][T26636] RSP: 002b:00007f2a0fdee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.586746][T26636] RAX: ffffffffffffffda RBX: 00007f2a11de5fa0 RCX: 00007f2a11b8efc9 [ 232.586753][T26636] RDX: 0000200000000040 RSI: 00000000402c542c RDI: 0000000000000004 [ 232.586759][T26636] RBP: 00007f2a0fdee090 R08: 0000000000000000 R09: 0000000000000000 [ 232.586765][T26636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.586771][T26636] R13: 00007f2a11de6038 R14: 00007f2a11de5fa0 R15: 00007ffe10c68e28 [ 232.586785][T26636] [ 232.626482][T26653] xt_hashlimit: size too large, truncated to 1048576 [ 232.712366][ T5940] Bluetooth: hci1: command tx timeout [ 232.719830][T26662] usb usb8: usbfs: process 26662 (syz.5.3362) did not claim interface 5 before use [ 232.758768][ T40] audit: type=1400 audit(2000000159.732:28850): avc: denied { setattr } for pid=26665 comm="syz.3.3364" name="/" dev="9p" ino=72876087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.786356][ T5937] Bluetooth: hci4: sending frame failed (-49) [ 232.790710][ T5940] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 232.993255][T26697] xt_hashlimit: size too large, truncated to 1048576 [ 233.051379][T26702] net_ratelimit: 15 callbacks suppressed [ 233.051424][T26702] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 233.076448][T26700] FAULT_INJECTION: forcing a failure. [ 233.076448][T26700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.081701][T26700] CPU: 3 UID: 0 PID: 26700 Comm: syz.5.3370 Not tainted syzkaller #0 PREEMPT(full) [ 233.081721][T26700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 233.081731][T26700] Call Trace: [ 233.081738][T26700] [ 233.081744][T26700] dump_stack_lvl+0x16c/0x1f0 [ 233.081772][T26700] should_fail_ex+0x512/0x640 [ 233.081795][T26700] _copy_to_user+0x32/0xd0 [ 233.081823][T26700] simple_read_from_buffer+0xcb/0x170 [ 233.081850][T26700] proc_fail_nth_read+0x197/0x240 [ 233.081870][T26700] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 233.081890][T26700] ? rw_verify_area+0xcf/0x6c0 [ 233.081913][T26700] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 233.081932][T26700] vfs_read+0x1e4/0xcf0 [ 233.081950][T26700] ? __pfx___mutex_lock+0x10/0x10 [ 233.081966][T26700] ? __pfx_vfs_read+0x10/0x10 [ 233.081987][T26700] ? __fget_files+0x20e/0x3c0 [ 233.082009][T26700] ksys_read+0x12a/0x250 [ 233.082024][T26700] ? __pfx_ksys_read+0x10/0x10 [ 233.082039][T26700] ? fput+0x9b/0xd0 [ 233.082063][T26700] do_syscall_64+0xcd/0xfa0 [ 233.082088][T26700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.082104][T26700] RIP: 0033:0x7f925938d9dc [ 233.082118][T26700] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 233.082134][T26700] RSP: 002b:00007f925a2e3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 233.082150][T26700] RAX: ffffffffffffffda RBX: 00007f92595e5fa0 RCX: 00007f925938d9dc [ 233.082160][T26700] RDX: 000000000000000f RSI: 00007f925a2e30a0 RDI: 0000000000000005 [ 233.082170][T26700] RBP: 00007f925a2e3090 R08: 0000000000000000 R09: 0000000000000000 [ 233.082179][T26700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.082189][T26700] R13: 00007f92595e6038 R14: 00007f92595e5fa0 R15: 00007ffc33a30b08 [ 233.082214][T26700] [ 233.159261][T26705] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3371'. [ 233.225907][ T5940] Bluetooth: hci0: command tx timeout [ 233.506055][ T40] audit: type=1400 audit(2000000160.434:28851): avc: denied { associate } for pid=26737 comm="syz.3.3382" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 233.579490][T26735] kvm: pic: non byte write [ 233.583453][ T5940] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 233.649876][ T40] audit: type=1400 audit(2000000160.565:28852): avc: denied { block_suspend } for pid=26732 comm="syz.5.3381" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 233.652826][T26734] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.3381'. [ 233.697530][T26749] netlink: 180 bytes leftover after parsing attributes in process `syz.7.3383'. [ 233.758763][T26753] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.771579][T26753] bond1: (slave batadv1): Opening slave failed [ 234.061160][ T40] audit: type=1400 audit(2000000160.957:28853): avc: denied { write } for pid=26798 comm="syz.7.3388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 234.067528][ T40] audit: type=1400 audit(2000000160.957:28854): avc: denied { read } for pid=26798 comm="syz.7.3388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 234.075446][ T40] audit: type=1400 audit(2000000160.957:28855): avc: denied { ioctl } for pid=26798 comm="syz.7.3388" path="socket:[75291]" dev="sockfs" ino=75291 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 234.140876][T26806] hashlimit_mt_check_common: 1 callbacks suppressed [ 234.140889][T26806] xt_hashlimit: size too large, truncated to 1048576 [ 234.307509][T26810] kvm: pic: non byte write [ 234.310168][ T5937] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 234.536174][T26828] netlink: 'syz.3.3393': attribute type 13 has an invalid length. [ 234.569349][T26828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.936732][ T5937] Bluetooth: hci1: command tx timeout [ 234.951988][T26918] kvm: pic: non byte write [ 234.954573][ T5937] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 235.103004][T26937] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 235.166786][ T40] audit: type=1400 audit(2000000161.986:28856): avc: denied { read } for pid=26936 comm="syz.7.3404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 235.167335][T26946] binder: 26936:26946 unknown command 1024 [ 235.176501][T26946] binder: 26936:26946 ioctl c0306201 200000000300 returned -22 [ 235.192831][ T937] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 235.374592][ T937] usb 13-1: Using ep0 maxpacket: 16 [ 235.377585][ T937] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.381227][ T937] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.384254][ T937] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 235.388870][ T937] usb 13-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 235.391715][ T937] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.395505][ T937] usb 13-1: config 0 descriptor?? [ 235.438770][ T5937] Bluetooth: hci0: command tx timeout [ 235.449036][ T40] audit: type=1400 audit(2000000162.248:28857): avc: denied { unmount } for pid=19119 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 235.829313][ T937] HID 045e:07da: Invalid code 65791 type 1 [ 235.832355][ T937] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/0003:045E:07DA.000D/input/input56 [ 235.839927][ T937] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 235.888144][T26982] xt_hashlimit: size too large, truncated to 1048576 [ 235.942287][T26984] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 235.952284][ T5940] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 235.952342][ T5937] Bluetooth: hci4: command 0x1003 tx timeout [ 236.021256][ T40] audit: type=1400 audit(2000000162.790:28858): avc: denied { append } for pid=26989 comm="syz.7.3415" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 236.021391][T26991] binder: 26989:26991 ioctl c0306201 2000000003c0 returned -14 [ 236.125214][T26992] serio: Serial port ptm0 [ 236.223213][T27008] usb usb8: usbfs: process 27008 (syz.7.3420) did not claim interface 5 before use [ 236.322647][T27019] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 236.326174][T27019] overlayfs: missing 'lowerdir' [ 236.535722][T27027] qnx6: unable to set blocksize [ 236.555555][T27028] netlink: 'syz.7.3424': attribute type 4 has an invalid length. [ 236.583645][T27027] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 236.622014][T27030] __nla_validate_parse: 14 callbacks suppressed [ 236.622032][T27030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3426'. [ 236.698430][T27034] xt_hashlimit: size too large, truncated to 1048576 [ 236.806674][T27038] usb usb8: usbfs: process 27038 (syz.5.3429) did not claim interface 5 before use [ 237.097362][T27053] batman_adv: batadv0: Adding interface: dummy0 [ 237.100192][T27053] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.110904][T27053] batman_adv: batadv0: Interface activated: dummy0 [ 237.117006][T27053] batadv0: mtu less than device minimum [ 237.120227][T27053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.125648][T27053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.130838][T27053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.135206][T27053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.139014][T27053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.142872][T27053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 237.154303][ T5940] Bluetooth: hci1: command tx timeout [ 237.185089][T27055] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3434'. [ 237.188245][T27055] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3434'. [ 237.192629][T27057] tmpfs: Unknown parameter '01777777777777777777777' [ 237.206582][ T1179] Bluetooth: hci4: Frame reassembly failed (-84) [ 237.228923][T27062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3436'. [ 237.260936][T27064] xt_hashlimit: size too large, truncated to 1048576 [ 237.316457][T27067] FAULT_INJECTION: forcing a failure. [ 237.316457][T27067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.322718][T27067] CPU: 1 UID: 0 PID: 27067 Comm: syz.3.3437 Not tainted syzkaller #0 PREEMPT(full) [ 237.322744][T27067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 237.322754][T27067] Call Trace: [ 237.322773][T27067] [ 237.322780][T27067] dump_stack_lvl+0x16c/0x1f0 [ 237.322835][T27067] should_fail_ex+0x512/0x640 [ 237.322867][T27067] _copy_from_iter+0x29f/0x1720 [ 237.322893][T27067] ? __pfx__copy_from_iter+0x10/0x10 [ 237.322915][T27067] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 237.322944][T27067] copy_page_from_iter+0xde/0x180 [ 237.322970][T27067] tun_build_skb.constprop.0+0x2e8/0x1510 [ 237.323004][T27067] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 237.323027][T27067] ? unwind_get_return_address+0x59/0xa0 [ 237.323048][T27067] ? arch_stack_walk+0xa6/0x100 [ 237.323083][T27067] ? _kstrtoull+0x145/0x200 [ 237.323112][T27067] tun_get_user+0x149c/0x3cc0 [ 237.323148][T27067] ? __pfx_tun_get_user+0x10/0x10 [ 237.323174][T27067] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 237.323204][T27067] ? find_held_lock+0x2b/0x80 [ 237.323227][T27067] ? tun_get+0x191/0x370 [ 237.323255][T27067] tun_chr_write_iter+0xdc/0x210 [ 237.323282][T27067] vfs_write+0x7d3/0x11d0 [ 237.323301][T27067] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 237.323326][T27067] ? __pfx_vfs_write+0x10/0x10 [ 237.323341][T27067] ? find_held_lock+0x2b/0x80 [ 237.323376][T27067] ksys_write+0x12a/0x250 [ 237.323393][T27067] ? __pfx_ksys_write+0x10/0x10 [ 237.323416][T27067] do_syscall_64+0xcd/0xfa0 [ 237.323445][T27067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.323463][T27067] RIP: 0033:0x7f2a11b8da7f [ 237.323479][T27067] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 237.323494][T27067] RSP: 002b:00007f2a0fdcd000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 237.323512][T27067] RAX: ffffffffffffffda RBX: 00007f2a11de6090 RCX: 00007f2a11b8da7f [ 237.323524][T27067] RDX: 000000000000007a RSI: 00002000000003c0 RDI: 00000000000000c8 [ 237.323536][T27067] RBP: 00007f2a0fdcd090 R08: 0000000000000000 R09: 0000000000000000 [ 237.323547][T27067] R10: 000000000000007a R11: 0000000000000293 R12: 0000000000000001 [ 237.323577][T27067] R13: 00007f2a11de6128 R14: 00007f2a11de6090 R15: 00007ffe10c68e28 [ 237.323603][T27067] [ 237.440900][ T40] audit: type=1326 audit(2000000164.118:28859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27069 comm="syz.3.3439" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a11b8efc9 code=0x0 [ 237.441170][T27070] xt_hashlimit: size too large, truncated to 1048576 [ 237.497410][T27075] xt_hashlimit: size too large, truncated to 1048576 [ 237.663217][ T5937] Bluetooth: hci0: command tx timeout [ 237.761465][T27094] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3445'. [ 237.775985][ T61] usb 13-1: USB disconnect, device number 2 [ 237.817049][T27110] xt_hashlimit: size too large, truncated to 1048576 [ 237.825271][T27112] kernel profiling enabled (shift: 34) [ 237.828888][T27112] profiling shift: 34 too large [ 237.910519][T27116] xt_hashlimit: size too large, truncated to 1048576 [ 238.145810][T27135] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3456'. [ 238.239614][T27151] xt_hashlimit: size too large, truncated to 1048576 [ 238.240020][T27149] pim6reg: entered allmulticast mode [ 238.246151][T27149] pim6reg: left allmulticast mode [ 238.372541][T27162] netlink: 180 bytes leftover after parsing attributes in process `syz.7.3464'. [ 238.376470][T27162] netlink: 180 bytes leftover after parsing attributes in process `syz.7.3464'. [ 238.415509][ T40] audit: type=1400 audit(2000000165.026:28860): avc: denied { read } for pid=27167 comm="syz.7.3466" name="usbmon5" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 238.491404][T27176] 9pnet_virtio: no channels available for device syz [ 238.502925][T27178] max out of range [ 238.549764][T27183] xt_hashlimit: size too large, truncated to 1048576 [ 238.685600][T27188] netlink: 'syz.3.3470': attribute type 21 has an invalid length. [ 238.729010][T27192] overlayfs: failed to resolve './file2': -2 [ 238.816742][T27198] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3475'. [ 238.820396][T27198] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3475'. [ 238.911691][T27202] net_ratelimit: 14 callbacks suppressed [ 238.911708][T27202] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 239.093484][T27211] FAULT_INJECTION: forcing a failure. [ 239.093484][T27211] name failslab, interval 1, probability 0, space 0, times 0 [ 239.097592][T27211] CPU: 3 UID: 0 PID: 27211 Comm: syz.3.3479 Not tainted syzkaller #0 PREEMPT(full) [ 239.097608][T27211] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 239.097615][T27211] Call Trace: [ 239.097619][T27211] [ 239.097624][T27211] dump_stack_lvl+0x16c/0x1f0 [ 239.097643][T27211] should_fail_ex+0x512/0x640 [ 239.097656][T27211] ? fs_reclaim_acquire+0xae/0x150 [ 239.097670][T27211] should_failslab+0xc2/0x120 [ 239.097682][T27211] __kmalloc_noprof+0xdd/0x880 [ 239.097697][T27211] ? tomoyo_encode2+0x100/0x3e0 [ 239.097712][T27211] ? tomoyo_encode2+0x100/0x3e0 [ 239.097722][T27211] tomoyo_encode2+0x100/0x3e0 [ 239.097736][T27211] tomoyo_encode+0x29/0x50 [ 239.097747][T27211] tomoyo_realpath_from_path+0x18f/0x6e0 [ 239.097763][T27211] tomoyo_path_number_perm+0x245/0x580 [ 239.097779][T27211] ? tomoyo_path_number_perm+0x237/0x580 [ 239.097797][T27211] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 239.097813][T27211] ? find_held_lock+0x2b/0x80 [ 239.097839][T27211] ? find_held_lock+0x2b/0x80 [ 239.097851][T27211] ? hook_file_ioctl_common+0x145/0x410 [ 239.097868][T27211] ? __fget_files+0x20e/0x3c0 [ 239.097881][T27211] security_file_ioctl+0x9b/0x240 [ 239.097895][T27211] __x64_sys_ioctl+0xb7/0x210 [ 239.097911][T27211] do_syscall_64+0xcd/0xfa0 [ 239.097927][T27211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.097938][T27211] RIP: 0033:0x7f2a11b8efc9 [ 239.097947][T27211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.097957][T27211] RSP: 002b:00007f2a0fdee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.097967][T27211] RAX: ffffffffffffffda RBX: 00007f2a11de5fa0 RCX: 00007f2a11b8efc9 [ 239.097974][T27211] RDX: 0000200000000080 RSI: 00000000c02c564a RDI: 0000000000000003 [ 239.097980][T27211] RBP: 00007f2a0fdee090 R08: 0000000000000000 R09: 0000000000000000 [ 239.097986][T27211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.097992][T27211] R13: 00007f2a11de6038 R14: 00007f2a11de5fa0 R15: 00007ffe10c68e28 [ 239.098006][T27211] [ 239.098017][T27211] ERROR: Out of memory at tomoyo_realpath_from_path. [ 239.250324][T27215] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 239.367635][T27224] usb usb8: usbfs: process 27224 (syz.3.3484) did not claim interface 5 before use [ 239.374738][ T5937] Bluetooth: hci4: command 0x1003 tx timeout [ 239.374738][ T5945] Bluetooth: hci1: command tx timeout [ 239.379628][ T5940] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 239.520366][T27242] FAULT_INJECTION: forcing a failure. [ 239.520366][T27242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.526287][T27242] CPU: 3 UID: 0 PID: 27242 Comm: syz.3.3490 Not tainted syzkaller #0 PREEMPT(full) [ 239.526308][T27242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 239.526317][T27242] Call Trace: [ 239.526322][T27242] [ 239.526327][T27242] dump_stack_lvl+0x16c/0x1f0 [ 239.526351][T27242] should_fail_ex+0x512/0x640 [ 239.526370][T27242] _copy_from_user+0x2e/0xd0 [ 239.526388][T27242] video_usercopy+0xee2/0x1720 [ 239.526411][T27242] ? __pfx___video_do_ioctl+0x10/0x10 [ 239.526430][T27242] ? selinux_kernel_read_file+0x80/0x130 [ 239.526446][T27242] ? __pfx_video_usercopy+0x10/0x10 [ 239.526478][T27242] v4l2_ioctl+0x1bd/0x250 [ 239.526497][T27242] ? __pfx_v4l2_ioctl+0x10/0x10 [ 239.526517][T27242] __x64_sys_ioctl+0x18e/0x210 [ 239.526538][T27242] do_syscall_64+0xcd/0xfa0 [ 239.526559][T27242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.526572][T27242] RIP: 0033:0x7f2a11b8efc9 [ 239.526583][T27242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.526596][T27242] RSP: 002b:00007f2a0fdee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.526610][T27242] RAX: ffffffffffffffda RBX: 00007f2a11de5fa0 RCX: 00007f2a11b8efc9 [ 239.526618][T27242] RDX: 0000200000000080 RSI: 00000000c02c564a RDI: 0000000000000003 [ 239.526627][T27242] RBP: 00007f2a0fdee090 R08: 0000000000000000 R09: 0000000000000000 [ 239.526634][T27242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.526642][T27242] R13: 00007f2a11de6038 R14: 00007f2a11de5fa0 R15: 00007ffe10c68e28 [ 239.526661][T27242] [ 239.581885][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 239.581928][ T40] audit: type=1400 audit(2000000166.073:28864): avc: denied { read } for pid=27244 comm="syz.7.3491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 239.587058][T27245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27245 comm=syz.7.3491 [ 239.634554][T27253] usb usb8: usbfs: process 27253 (syz.7.3494) did not claim interface 5 before use [ 239.679159][T27261] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 239.711812][T27263] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 239.715031][T27263] SELinux: failed to load policy [ 239.730702][T27267] gretap0: entered promiscuous mode [ 239.733377][T27267] gretap0: left promiscuous mode [ 239.803509][ T5940] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 239.819013][ T40] audit: type=1400 audit(2000000166.335:28865): avc: denied { ioctl } for pid=27279 comm="syz.3.3503" path="socket:[77167]" dev="sockfs" ino=77167 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 239.856160][T27285] usb usb8: usbfs: process 27285 (syz.3.3505) did not claim interface 5 before use [ 239.866038][T27289] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 240.046425][T27313] sp0: Synchronizing with TNC [ 240.060224][T27318] /dev/nullb0: Can't lookup blockdev [ 240.064683][ T5998] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 240.067406][ T5998] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 240.071770][ T5998] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 240.074025][ T5998] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 240.076441][ T5998] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 240.078960][ T5998] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 240.082024][ T5998] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 240.084315][ T5998] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 240.086583][ T5998] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 240.088828][ T5998] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 240.094558][ T5998] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [sy] on syz0 [ 240.133235][T27334] binder: 27332:27334 ioctl c0306201 0 returned -14 [ 240.428907][T27373] usb usb8: usbfs: process 27373 (syz.8.3528) did not claim interface 5 before use [ 240.546807][ T5937] Bluetooth: hci4: sending frame failed (-49) [ 240.552145][ T5940] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 240.588300][T27390] hashlimit_mt_check_common: 3 callbacks suppressed [ 240.588312][T27390] xt_hashlimit: size too large, truncated to 1048576 [ 240.806491][T27404] xt_hashlimit: size too large, truncated to 1048576 [ 240.862191][ T40] audit: type=1400 audit(2000000167.317:28866): avc: denied { connect } for pid=27403 comm="syz.7.3536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 240.915918][ T5940] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 241.023286][T27334] binder: 27332:27334 ioctl c0306201 200000000380 returned -14 [ 241.066586][T27425] usb usb8: usbfs: process 27425 (syz.5.3539) did not claim interface 5 before use [ 241.175734][ T40] audit: type=1326 audit(2000000167.607:28867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27447 comm="syz.8.3542" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc458efc9 code=0x50000 [ 241.183317][ T40] audit: type=1326 audit(2000000167.607:28868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27447 comm="syz.8.3542" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc458efc9 code=0x50000 [ 241.191659][ T40] audit: type=1326 audit(2000000167.607:28869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27447 comm="syz.8.3542" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc458efc9 code=0x50000 [ 241.199134][ T40] audit: type=1326 audit(2000000167.607:28870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27447 comm="syz.8.3542" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc458efc9 code=0x50000 [ 241.207067][ T40] audit: type=1326 audit(2000000167.607:28871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27447 comm="syz.8.3542" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc458efc9 code=0x50000 [ 241.214418][ T40] audit: type=1326 audit(2000000167.607:28872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27447 comm="syz.8.3542" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc458efc9 code=0x50000 [ 241.221571][ T40] audit: type=1326 audit(2000000167.607:28873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27447 comm="syz.8.3542" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc458efc9 code=0x50000 [ 241.268849][ T5940] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 241.299621][T27463] xt_hashlimit: size too large, truncated to 1048576 [ 241.464235][T27471] usb usb8: usbfs: process 27471 (syz.5.3550) did not claim interface 5 before use [ 241.553133][T27482] misc userio: Invalid payload size [ 241.580189][ T5937] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 241.697086][T27493] xt_hashlimit: size too large, truncated to 1048576 [ 241.835186][T27499] usb usb8: usbfs: process 27499 (syz.7.3561) did not claim interface 5 before use [ 241.869923][T27501] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 241.973815][ T5937] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 243.483860][T27523] tipc: Enabling of bearer rejected, failed to enable media [ 243.489332][T27523] netlink: 'syz.3.3568': attribute type 3 has an invalid length. [ 243.571025][T27527] usb usb8: usbfs: process 27527 (syz.3.3570) did not claim interface 5 before use [ 243.650570][ T5937] Bluetooth: hci4: command 0x1003 tx timeout [ 243.651095][ T5940] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 243.767239][T27537] overlayfs: conflicting lowerdir path [ 244.248381][T27543] netlink: 'syz.5.3573': attribute type 10 has an invalid length. [ 244.251427][T27543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.254639][T27543] batadv0: mtu less than device minimum [ 244.257041][T27543] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 244.261732][T27543] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 244.265644][T27543] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 244.269532][T27543] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 244.274007][T27543] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 244.277943][T27543] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 244.282162][T27543] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 244.286246][T27543] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 244.290178][T27543] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 244.294383][T27543] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 244.298451][T27543] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 244.314293][T27543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.319371][T27543] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 244.597191][T27560] xt_hashlimit: size too large, truncated to 1048576 [ 244.744692][T27567] __nla_validate_parse: 7 callbacks suppressed [ 244.744709][T27567] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3581'. [ 244.754342][T27570] netlink: 180 bytes leftover after parsing attributes in process `syz.8.3582'. [ 244.758258][T27570] netlink: 180 bytes leftover after parsing attributes in process `syz.8.3582'. [ 244.800063][T27575] erofs (device nbd8): cannot find valid erofs superblock [ 244.808096][T27575] bridge_slave_0: default FDB implementation only supports local addresses [ 244.836358][T27577] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 244.841577][T27577] SELinux: failed to load policy [ 244.934840][T27590] xt_hashlimit: size too large, truncated to 1048576 [ 245.047412][T27600] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3592'. [ 245.050263][T27600] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3592'. [ 245.052258][T27599] netlink: 'syz.8.3593': attribute type 13 has an invalid length. [ 245.289962][T27621] xt_hashlimit: size too large, truncated to 1048576 [ 245.454211][T27638] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3604'. [ 245.457167][T27638] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3604'. [ 245.471004][ T5937] Bluetooth: hci4: sending frame failed (-49) [ 245.474340][ T5940] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 245.596578][ T6017] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 245.756950][ T6017] usb 10-1: Using ep0 maxpacket: 32 [ 245.761731][ T6017] usb 10-1: config 1 interface 0 altsetting 102 endpoint 0x2 has an invalid bInterval 209, changing to 11 [ 245.766328][ T6017] usb 10-1: config 1 interface 0 has no altsetting 0 [ 245.771361][ T6017] usb 10-1: New USB device found, idVendor=0eef, idProduct=c002, bcdDevice= 0.40 [ 245.775069][ T6017] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.778661][ T6017] usb 10-1: Product: Ñ— [ 245.780443][ T6017] usb 10-1: Manufacturer: à°‰ [ 245.782423][ T6017] usb 10-1: SerialNumber: ﳿ [ 246.221222][T27624] /dev/nullb0: Can't lookup blockdev [ 246.228643][ T6017] usbhid 10-1:1.0: can't add hid device: -71 [ 246.230683][ T6017] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 246.234349][ T6017] usb 10-1: USB disconnect, device number 17 [ 246.799018][T27672] xt_hashlimit: size too large, truncated to 1048576 [ 246.991815][T27678] netlink: 'syz.5.3613': attribute type 1 has an invalid length. [ 247.017809][T27678] bond2: (slave geneve2): making interface the new active one [ 247.023699][T27678] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 247.026542][ T1257] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 247.030370][ T1257] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 247.033364][ T1257] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 247.036240][ T1257] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 247.066252][T27715] loop2: detected capacity change from 0 to 7 [ 247.069618][T27715] Dev loop2: unable to read RDB block 7 [ 247.072258][T27715] loop2: AHDI p1 p2 p3 [ 247.074155][T27715] loop2: partition table partially beyond EOD, truncated [ 247.077218][T27715] loop2: p1 start 1601398130 is beyond EOD, truncated [ 247.080073][T27715] loop2: p2 start 1702059890 is beyond EOD, truncated [ 247.115353][T27721] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3615'. [ 247.118322][T27721] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3615'. [ 247.298957][T27734] usb usb8: usbfs: process 27734 (syz.5.3618) did not claim interface 5 before use [ 247.333143][T27736] FAULT_INJECTION: forcing a failure. [ 247.333143][T27736] name failslab, interval 1, probability 0, space 0, times 0 [ 247.338231][T27736] CPU: 1 UID: 0 PID: 27736 Comm: syz.5.3619 Not tainted syzkaller #0 PREEMPT(full) [ 247.338253][T27736] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 247.338265][T27736] Call Trace: [ 247.338273][T27736] [ 247.338281][T27736] dump_stack_lvl+0x16c/0x1f0 [ 247.338310][T27736] should_fail_ex+0x512/0x640 [ 247.338330][T27736] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 247.338359][T27736] should_failslab+0xc2/0x120 [ 247.338378][T27736] kmem_cache_alloc_node_noprof+0x78/0x770 [ 247.338402][T27736] ? __alloc_skb+0x2b2/0x380 [ 247.338427][T27736] ? __alloc_skb+0x2b2/0x380 [ 247.338443][T27736] ? __pfx_netlink_insert+0x10/0x10 [ 247.338462][T27736] __alloc_skb+0x2b2/0x380 [ 247.338481][T27736] ? __pfx___alloc_skb+0x10/0x10 [ 247.338501][T27736] ? netlink_autobind.isra.0+0x158/0x370 [ 247.338531][T27736] netlink_alloc_large_skb+0x69/0x140 [ 247.338556][T27736] netlink_sendmsg+0x698/0xdd0 [ 247.338584][T27736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.338613][T27736] ____sys_sendmsg+0xa98/0xc70 [ 247.338657][T27736] ? copy_msghdr_from_user+0x10a/0x160 [ 247.338678][T27736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.338719][T27736] ___sys_sendmsg+0x134/0x1d0 [ 247.338740][T27736] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.338760][T27736] ? __lock_acquire+0x622/0x1c90 [ 247.338812][T27736] __sys_sendmsg+0x16d/0x220 [ 247.338834][T27736] ? __pfx___sys_sendmsg+0x10/0x10 [ 247.338871][T27736] do_syscall_64+0xcd/0xfa0 [ 247.338897][T27736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.338915][T27736] RIP: 0033:0x7f925938efc9 [ 247.338928][T27736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.338944][T27736] RSP: 002b:00007f925a2e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.338962][T27736] RAX: ffffffffffffffda RBX: 00007f92595e5fa0 RCX: 00007f925938efc9 [ 247.338972][T27736] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001d [ 247.338982][T27736] RBP: 00007f925a2e3090 R08: 0000000000000000 R09: 0000000000000000 [ 247.338992][T27736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.339002][T27736] R13: 00007f92595e6038 R14: 00007f92595e5fa0 R15: 00007ffc33a30b08 [ 247.339028][T27736] [ 247.547768][ T40] kauditd_printk_skb: 34574 callbacks suppressed [ 247.547780][ T40] audit: type=1800 audit(2000000173.564:63448): pid=27744 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.5.3622" name="/newroot/66/bus/#381//deleted" dev="tmpfs" ino=381 res=0 errno=0 [ 247.572751][T27744] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 247.712274][T27753] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3624'. [ 247.754317][T27755] xt_hashlimit: size too large, truncated to 1048576 [ 247.917244][T27766] usb usb8: usbfs: process 27766 (syz.5.3627) did not claim interface 5 before use [ 248.448539][T27793] FAULT_INJECTION: forcing a failure. [ 248.448539][T27793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.452863][T27793] CPU: 1 UID: 0 PID: 27793 Comm: syz.5.3636 Not tainted syzkaller #0 PREEMPT(full) [ 248.452878][T27793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 248.452884][T27793] Call Trace: [ 248.452898][T27793] [ 248.452903][T27793] dump_stack_lvl+0x16c/0x1f0 [ 248.452941][T27793] should_fail_ex+0x512/0x640 [ 248.452962][T27793] _copy_from_iter+0x29f/0x1720 [ 248.452976][T27793] ? __alloc_skb+0x200/0x380 [ 248.452990][T27793] ? __pfx__copy_from_iter+0x10/0x10 [ 248.453002][T27793] ? netlink_autobind.isra.0+0x158/0x370 [ 248.453022][T27793] netlink_sendmsg+0x820/0xdd0 [ 248.453039][T27793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.453058][T27793] ____sys_sendmsg+0xa98/0xc70 [ 248.453075][T27793] ? copy_msghdr_from_user+0x10a/0x160 [ 248.453088][T27793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.453110][T27793] ___sys_sendmsg+0x134/0x1d0 [ 248.453124][T27793] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.453136][T27793] ? __lock_acquire+0x622/0x1c90 [ 248.453168][T27793] __sys_sendmsg+0x16d/0x220 [ 248.453182][T27793] ? __pfx___sys_sendmsg+0x10/0x10 [ 248.453203][T27793] do_syscall_64+0xcd/0xfa0 [ 248.453220][T27793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.453230][T27793] RIP: 0033:0x7f925938efc9 [ 248.453239][T27793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.453250][T27793] RSP: 002b:00007f925a2e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.453261][T27793] RAX: ffffffffffffffda RBX: 00007f92595e5fa0 RCX: 00007f925938efc9 [ 248.453268][T27793] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001d [ 248.453274][T27793] RBP: 00007f925a2e3090 R08: 0000000000000000 R09: 0000000000000000 [ 248.453280][T27793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.453287][T27793] R13: 00007f92595e6038 R14: 00007f92595e5fa0 R15: 00007ffc33a30b08 [ 248.453300][T27793] [ 248.641257][T27799] batman_adv: batadv0: Interface deactivated: dummy0 [ 248.644562][T27799] batman_adv: batadv0: Removing interface: dummy0 [ 248.680498][T27801] input: syz1 as /devices/virtual/input/input57 [ 248.846237][T27823] FAULT_INJECTION: forcing a failure. [ 248.846237][T27823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.852056][T27823] CPU: 3 UID: 0 PID: 27823 Comm: syz.3.3645 Not tainted syzkaller #0 PREEMPT(full) [ 248.852079][T27823] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 248.852091][T27823] Call Trace: [ 248.852098][T27823] [ 248.852105][T27823] dump_stack_lvl+0x16c/0x1f0 [ 248.852135][T27823] should_fail_ex+0x512/0x640 [ 248.852160][T27823] _copy_to_user+0x32/0xd0 [ 248.852184][T27823] simple_read_from_buffer+0xcb/0x170 [ 248.852214][T27823] proc_fail_nth_read+0x197/0x240 [ 248.852236][T27823] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 248.852263][T27823] ? rw_verify_area+0xcf/0x6c0 [ 248.852291][T27823] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 248.852309][T27823] vfs_read+0x1e4/0xcf0 [ 248.852327][T27823] ? __pfx___mutex_lock+0x10/0x10 [ 248.852344][T27823] ? __pfx_vfs_read+0x10/0x10 [ 248.852366][T27823] ? __fget_files+0x20e/0x3c0 [ 248.852391][T27823] ksys_read+0x12a/0x250 [ 248.852406][T27823] ? __pfx_ksys_read+0x10/0x10 [ 248.852429][T27823] do_syscall_64+0xcd/0xfa0 [ 248.852461][T27823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.852495][T27823] RIP: 0033:0x7f2a11b8d9dc [ 248.852511][T27823] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 248.852527][T27823] RSP: 002b:00007f2a0fdee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 248.852545][T27823] RAX: ffffffffffffffda RBX: 00007f2a11de5fa0 RCX: 00007f2a11b8d9dc [ 248.852557][T27823] RDX: 000000000000000f RSI: 00007f2a0fdee0a0 RDI: 0000000000000007 [ 248.852568][T27823] RBP: 00007f2a0fdee090 R08: 0000000000000000 R09: 0000000000000000 [ 248.852578][T27823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.852586][T27823] R13: 00007f2a11de6038 R14: 00007f2a11de5fa0 R15: 00007ffe10c68e28 [ 248.852608][T27823] [ 248.857510][ T40] audit: type=1400 audit(2000000174.790:63449): avc: denied { listen } for pid=27810 comm="syz.5.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 248.932607][ T40] audit: type=1400 audit(2000000174.799:63450): avc: denied { accept } for pid=27810 comm="syz.5.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.007691][T27833] usb usb8: usbfs: process 27833 (syz.3.3649) did not claim interface 5 before use [ 249.063222][T27841] xt_hashlimit: size too large, truncated to 1048576 [ 249.171839][T27851] xt_hashlimit: size too large, truncated to 1048576 [ 249.413071][T27888] usb usb8: usbfs: process 27888 (syz.5.3660) did not claim interface 5 before use [ 249.425278][ T40] audit: type=1400 audit(2000000175.323:63451): avc: denied { mounton } for pid=27889 comm="syz.3.3661" path="/330/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 249.433674][ T40] audit: type=1400 audit(2000000175.323:63452): avc: denied { remount } for pid=27889 comm="syz.3.3661" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 249.451372][T27895] xt_hashlimit: size too large, truncated to 1048576 [ 249.501858][T27903] xt_hashlimit: size too large, truncated to 1048576 [ 249.728866][T27925] block nbd5: shutting down sockets [ 249.752928][T27934] netlink: 'syz.8.3677': attribute type 1 has an invalid length. [ 249.757937][T27938] xt_hashlimit: size too large, truncated to 1048576 [ 249.772944][T27934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 249.785623][T27934] vlan2: entered promiscuous mode [ 249.787342][T27934] bond1: entered promiscuous mode [ 250.089243][T28011] xt_hashlimit: size too large, truncated to 1048576 [ 250.198567][T28024] batman_adv: batadv0: Interface deactivated: dummy0 [ 250.201578][T28024] batman_adv: batadv0: Removing interface: dummy0 [ 250.247378][T28030] __nla_validate_parse: 9 callbacks suppressed [ 250.247389][T28030] netlink: 180 bytes leftover after parsing attributes in process `syz.8.3695'. [ 250.254685][T28030] netlink: 180 bytes leftover after parsing attributes in process `syz.8.3695'. [ 250.289538][T28032] FAULT_INJECTION: forcing a failure. [ 250.289538][T28032] name failslab, interval 1, probability 0, space 0, times 0 [ 250.293708][T28032] CPU: 3 UID: 0 PID: 28032 Comm: syz.8.3696 Not tainted syzkaller #0 PREEMPT(full) [ 250.293723][T28032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 250.293729][T28032] Call Trace: [ 250.293733][T28032] [ 250.293737][T28032] dump_stack_lvl+0x16c/0x1f0 [ 250.293757][T28032] should_fail_ex+0x512/0x640 [ 250.293769][T28032] ? __kmalloc_noprof+0xca/0x880 [ 250.293786][T28032] should_failslab+0xc2/0x120 [ 250.293798][T28032] __kmalloc_noprof+0xdd/0x880 [ 250.293813][T28032] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 250.293834][T28032] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 250.293850][T28032] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 250.293870][T28032] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 250.293887][T28032] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 250.293908][T28032] ? bpf_lsm_capable+0x9/0x10 [ 250.293920][T28032] ? security_capable+0x7e/0x260 [ 250.293936][T28032] ? ns_capable+0xd7/0x110 [ 250.293950][T28032] genl_rcv_msg+0x55c/0x800 [ 250.293961][T28032] ? __pfx_genl_rcv_msg+0x10/0x10 [ 250.293972][T28032] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 250.293991][T28032] netlink_rcv_skb+0x158/0x420 [ 250.294006][T28032] ? __pfx_genl_rcv_msg+0x10/0x10 [ 250.294016][T28032] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 250.294037][T28032] ? netlink_deliver_tap+0x1ae/0xd30 [ 250.294053][T28032] genl_rcv+0x28/0x40 [ 250.294067][T28032] netlink_unicast+0x5aa/0x870 [ 250.294083][T28032] ? __pfx_netlink_unicast+0x10/0x10 [ 250.294103][T28032] netlink_sendmsg+0x8c8/0xdd0 [ 250.294120][T28032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.294140][T28032] ____sys_sendmsg+0xa98/0xc70 [ 250.294156][T28032] ? copy_msghdr_from_user+0x10a/0x160 [ 250.294170][T28032] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.294192][T28032] ___sys_sendmsg+0x134/0x1d0 [ 250.294206][T28032] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.294218][T28032] ? __lock_acquire+0x622/0x1c90 [ 250.294250][T28032] __sys_sendmsg+0x16d/0x220 [ 250.294264][T28032] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.294286][T28032] do_syscall_64+0xcd/0xfa0 [ 250.294303][T28032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.294314][T28032] RIP: 0033:0x7febc458efc9 [ 250.294323][T28032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.294333][T28032] RSP: 002b:00007febc54f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.294344][T28032] RAX: ffffffffffffffda RBX: 00007febc47e5fa0 RCX: 00007febc458efc9 [ 250.294351][T28032] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001d [ 250.294357][T28032] RBP: 00007febc54f8090 R08: 0000000000000000 R09: 0000000000000000 [ 250.294363][T28032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.294369][T28032] R13: 00007febc47e6038 R14: 00007febc47e5fa0 R15: 00007ffc7520d0c8 [ 250.294383][T28032] [ 250.417674][T28036] usb usb8: usbfs: process 28036 (syz.8.3698) did not claim interface 5 before use [ 250.448204][ T40] audit: type=1400 audit(2000000176.277:63453): avc: denied { name_bind 0x1000000 } for pid=28039 comm="syz.8.3700" path="socket:[80939]" dev="sockfs" ino=80939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 250.479919][T28046] xt_hashlimit: size too large, truncated to 1048576 [ 250.594312][T28057] FAULT_INJECTION: forcing a failure. [ 250.594312][T28057] name failslab, interval 1, probability 0, space 0, times 0 [ 250.598959][T28057] CPU: 0 UID: 0 PID: 28057 Comm: syz.5.3706 Not tainted syzkaller #0 PREEMPT(full) [ 250.598983][T28057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 250.598994][T28057] Call Trace: [ 250.599000][T28057] [ 250.599009][T28057] dump_stack_lvl+0x16c/0x1f0 [ 250.599040][T28057] should_fail_ex+0x512/0x640 [ 250.599062][T28057] ? __kmalloc_noprof+0xca/0x880 [ 250.599090][T28057] should_failslab+0xc2/0x120 [ 250.599112][T28057] __kmalloc_noprof+0xdd/0x880 [ 250.599136][T28057] ? ethnl_default_set_doit+0x170/0x9d0 [ 250.599164][T28057] ? ethnl_default_set_doit+0x170/0x9d0 [ 250.599182][T28057] ethnl_default_set_doit+0x170/0x9d0 [ 250.599210][T28057] genl_family_rcv_msg_doit+0x209/0x2f0 [ 250.599241][T28057] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 250.599279][T28057] ? bpf_lsm_capable+0x9/0x10 [ 250.599298][T28057] ? security_capable+0x7e/0x260 [ 250.599327][T28057] ? ns_capable+0xd7/0x110 [ 250.599351][T28057] genl_rcv_msg+0x55c/0x800 [ 250.599373][T28057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 250.599392][T28057] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 250.599447][T28057] netlink_rcv_skb+0x158/0x420 [ 250.599475][T28057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 250.599494][T28057] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 250.599531][T28057] ? netlink_deliver_tap+0x1ae/0xd30 [ 250.599559][T28057] genl_rcv+0x28/0x40 [ 250.599585][T28057] netlink_unicast+0x5aa/0x870 [ 250.599614][T28057] ? __pfx_netlink_unicast+0x10/0x10 [ 250.599645][T28057] netlink_sendmsg+0x8c8/0xdd0 [ 250.599676][T28057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.599716][T28057] ____sys_sendmsg+0xa98/0xc70 [ 250.599746][T28057] ? copy_msghdr_from_user+0x10a/0x160 [ 250.599770][T28057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.599811][T28057] ___sys_sendmsg+0x134/0x1d0 [ 250.599836][T28057] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.599857][T28057] ? __lock_acquire+0x622/0x1c90 [ 250.599915][T28057] __sys_sendmsg+0x16d/0x220 [ 250.599952][T28057] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.599993][T28057] do_syscall_64+0xcd/0xfa0 [ 250.600023][T28057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.600042][T28057] RIP: 0033:0x7f925938efc9 [ 250.600059][T28057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.600076][T28057] RSP: 002b:00007f925a2e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.600094][T28057] RAX: ffffffffffffffda RBX: 00007f92595e5fa0 RCX: 00007f925938efc9 [ 250.600106][T28057] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001d [ 250.600116][T28057] RBP: 00007f925a2e3090 R08: 0000000000000000 R09: 0000000000000000 [ 250.600127][T28057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.600137][T28057] R13: 00007f92595e6038 R14: 00007f92595e5fa0 R15: 00007ffc33a30b08 [ 250.600165][T28057] [ 250.719215][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.811388][T28069] usb usb8: usbfs: process 28069 (syz.5.3709) did not claim interface 5 before use [ 250.884941][ T40] audit: type=1400 audit(2000000176.688:63454): avc: denied { append } for pid=28074 comm="syz.5.3712" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 250.893944][T28075] CIFS mount error: No usable UNC path provided in device string! [ 250.893944][T28075] [ 250.898746][T28075] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 251.004405][T28088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3716'. [ 251.167729][T20298] e1000 0000:00:06.0 eth0: Reset adapter [ 251.206305][T28098] SELinux: syz.8.3720 (28098) set checkreqprot to 1. This is no longer supported. [ 251.206347][ T40] audit: type=1400 audit(2000000176.987:63455): avc: denied { setcheckreqprot } for pid=28096 comm="syz.8.3720" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 251.214108][T28099] usb usb8: usbfs: process 28099 (syz.3.3719) did not claim interface 5 before use [ 251.233465][T28098] xt_hashlimit: size too large, truncated to 1048576 [ 251.285321][T20298] e1000 0000:00:06.0 eth0: Reset adapter [ 251.299260][T28102] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3721'. [ 251.303406][T28102] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3721'. [ 251.424419][T20298] e1000 0000:00:06.0 eth0: Reset adapter [ 253.145528][ T5940] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 253.145580][ T5937] Bluetooth: hci4: command 0x1003 tx timeout [ 253.578530][ C3] net_ratelimit: 13 callbacks suppressed [ 253.578550][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.745627][ T9] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 254.803912][ T5940] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 254.861177][T28134] netlink: 'syz.3.3728': attribute type 2 has an invalid length. [ 254.867959][T28134] netlink: 'syz.3.3728': attribute type 1 has an invalid length. [ 254.912814][T28136] usb usb8: usbfs: process 28136 (syz.8.3731) did not claim interface 5 before use [ 254.961143][T28144] fuse: Bad value for 'fd' [ 254.986437][T28150] netlink: 180 bytes leftover after parsing attributes in process `syz.7.3735'. [ 254.989794][T28150] netlink: 180 bytes leftover after parsing attributes in process `syz.7.3735'. [ 255.057219][T28175] xt_hashlimit: size too large, truncated to 1048576 [ 255.063292][ T5940] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 255.128978][T28182] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 255.186245][T28188] usb usb8: usbfs: process 28188 (syz.3.3742) did not claim interface 5 before use [ 255.272826][ T40] audit: type=1400 audit(2000000180.784:63456): avc: denied { write } for pid=28193 comm="syz.7.3744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 255.278774][T28196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3745'. [ 255.280086][ T40] audit: type=1400 audit(2000000180.794:63457): avc: denied { mount } for pid=28195 comm="syz.3.3745" name="/" dev="configfs" ino=3108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 255.282331][ T1201] Bluetooth: hci4: Frame reassembly failed (-84) [ 255.290781][ T40] audit: type=1400 audit(2000000180.794:63458): avc: denied { connect } for pid=28195 comm="syz.3.3745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 255.290824][ T40] audit: type=1400 audit(2000000180.794:63459): avc: denied { ioctl } for pid=28195 comm="syz.3.3745" path="socket:[82258]" dev="sockfs" ino=82258 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 255.310475][T28200] syz_tun: entered allmulticast mode [ 255.358041][T28200] bond2: Unable to set down delay as MII monitoring is disabled [ 255.362200][T28200] bond2 (unregistering): Released all slaves [ 255.481730][ T5937] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 255.652837][T28279] usb usb8: usbfs: process 28279 (syz.7.3751) did not claim interface 5 before use [ 255.743688][T28283] netlink: 180 bytes leftover after parsing attributes in process `syz.7.3753'. [ 255.747541][T28283] netlink: 180 bytes leftover after parsing attributes in process `syz.7.3753'. [ 255.938014][T28299] usb usb8: usbfs: process 28299 (syz.8.3760) did not claim interface 5 before use [ 255.941468][T28299] usb usb8: usbfs: process 28299 (syz.8.3760) did not claim interface 0 before use [ 256.149414][T28315] netlink: 180 bytes leftover after parsing attributes in process `syz.8.3764'. [ 256.155294][T28315] netlink: 180 bytes leftover after parsing attributes in process `syz.8.3764'. [ 256.304085][T28333] netlink: 7064 bytes leftover after parsing attributes in process `syz.8.3770'. [ 256.307809][T28333] openvswitch: netlink: Flow key attr not present in new flow. [ 256.330140][T28336] usb usb8: usbfs: process 28336 (syz.5.3771) did not claim interface 5 before use [ 256.334764][T28336] usb usb8: usbfs: process 28336 (syz.5.3771) did not claim interface 0 before use [ 256.466464][ T40] audit: type=1400 audit(2000000181.907:63460): avc: denied { read } for pid=28345 comm="syz.5.3775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 256.488758][T28353] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3778'. [ 256.510417][T28357] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3780'. [ 256.515041][T28357] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3780'. [ 256.545116][T28359] usb usb8: usbfs: process 28359 (syz.8.3781) did not claim interface 5 before use [ 256.549081][T28359] usb usb8: usbfs: process 28359 (syz.8.3781) did not claim interface 0 before use [ 256.565648][ T40] audit: type=1400 audit(2000000182.000:63461): avc: denied { lock } for pid=28354 comm="syz.7.3779" path="socket:[80548]" dev="sockfs" ino=80548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 256.584740][T28364] IPv4: Oversized IP packet from 172.20.20.24 [ 256.586938][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 256.589099][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 256.591990][T28364] program syz.8.3783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.598260][T28366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=542 sclass=netlink_route_socket pid=28366 comm=syz.5.3784 [ 256.615842][ T40] audit: type=1400 audit(2000000182.047:63462): avc: denied { map } for pid=28365 comm="syz.5.3784" path="/133/file0/cgroup.kill" dev="9p" ino=72876255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 256.626917][ T40] audit: type=1400 audit(2000000182.047:63463): avc: denied { execute } for pid=28365 comm="syz.5.3784" path="/133/file0/cgroup.kill" dev="9p" ino=72876255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 256.658654][ T40] audit: type=1800 audit(2000000182.084:63464): pid=28372 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.3786" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 256.668620][ T40] audit: type=1326 audit(2000000182.084:63465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28371 comm="syz.7.3786" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fc738efc9 code=0x7ff00000 [ 256.843488][T28383] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3790'. [ 256.890326][T28386] "syz.5.3791" (28386) uses obsolete ecb(arc4) skcipher [ 256.906657][T28387] usb usb8: usbfs: process 28387 (syz.8.3792) did not claim interface 5 before use [ 257.009648][T28398] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3795'. [ 257.129867][T28411] usb usb8: usbfs: process 28411 (syz.5.3798) did not claim interface 0 before use [ 257.280324][T28419] usb usb8: usbfs: process 28419 (syz.8.3801) did not claim interface 5 before use [ 257.422527][ T5937] Bluetooth: hci4: command 0x1003 tx timeout [ 257.423198][ T5940] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 257.622248][T28443] dlm: non-version read from control device 0 [ 257.762108][T28449] usb usb8: usbfs: process 28449 (syz.5.3810) did not claim interface 5 before use [ 257.796977][ T937] usb 13-1: new full-speed USB device number 3 using dummy_hcd [ 257.971020][ T937] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 257.974910][ T937] usb 13-1: config 0 interface 0 has no altsetting 0 [ 257.981450][ T937] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 257.984779][ T937] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 257.988127][ T937] usb 13-1: Product: syz [ 257.994066][ T937] usb 13-1: Manufacturer: syz [ 257.995918][ T937] usb 13-1: SerialNumber: syz [ 258.000495][ T937] usb 13-1: config 0 descriptor?? [ 258.007114][ T937] usb 13-1: selecting invalid altsetting 0 [ 258.025899][T28467] XFS (nbd3): no-recovery mounts must be read-only. [ 258.175746][T28483] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 258.215700][T28485] usb usb8: usbfs: process 28485 (syz.3.3820) did not claim interface 5 before use [ 258.303870][ T6017] usb 13-1: USB disconnect, device number 3 [ 258.705766][ T5940] Bluetooth: hci2: command 0x0419 tx timeout [ 258.873788][T28522] usb usb8: usbfs: process 28522 (syz.8.3829) did not claim interface 5 before use [ 259.050199][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.053489][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.395196][ T1257] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.518198][ T1257] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.615895][ T1257] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.635512][T28554] usb usb8: usbfs: process 28554 (syz.3.3839) did not claim interface 5 before use [ 259.739977][ T1257] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.751402][ T5937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 259.756986][ T5937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 259.759965][ T5937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 259.766500][ T5937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 259.774960][ T5937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 259.848145][T28576] i2c i2c-1: Invalid block write size 34 [ 259.856971][T28576] overlay: Bad value for 'workdir' [ 259.928458][ T1257] bridge_slave_1: left allmulticast mode [ 259.930332][ T1257] bridge_slave_1: left promiscuous mode [ 259.932873][ T1257] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.937510][ T1257] bridge_slave_0: left allmulticast mode [ 259.939323][ T1257] bridge_slave_0: left promiscuous mode [ 259.941530][ T1257] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.018355][T28605] usb usb8: usbfs: process 28605 (syz.5.3849) did not claim interface 5 before use [ 260.350098][ T1257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.355009][ T1257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.358973][ T1257] bond0 (unregistering): Released all slaves [ 260.456683][ T1257] bond1 (unregistering): Released all slaves [ 260.612478][T28562] chnl_net:caif_netlink_parms(): no params data found [ 260.726487][T28803] usb usb8: usbfs: process 28803 (syz.5.3857) did not claim interface 5 before use [ 260.770347][T28562] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.773472][T28562] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.776768][T28562] bridge_slave_0: entered allmulticast mode [ 260.781647][T28562] bridge_slave_0: entered promiscuous mode [ 260.784915][T28562] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.787440][T28562] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.789946][T28562] bridge_slave_1: entered allmulticast mode [ 260.796169][T28562] bridge_slave_1: entered promiscuous mode [ 260.901768][ T1257] hsr_slave_0: left promiscuous mode [ 260.905697][ T1257] hsr_slave_1: left promiscuous mode [ 260.911089][ T1257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.914736][ T1257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.918241][ T1257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.922518][ T1257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.961718][ T1257] veth1_macvtap: left promiscuous mode [ 260.964129][ T1257] veth0_macvtap: left promiscuous mode [ 260.966676][ T1257] veth1_vlan: left promiscuous mode [ 260.968944][ T1257] veth0_vlan: left promiscuous mode [ 261.574452][T29053] overlayfs: failed to resolve './bus': -2 [ 261.925177][ T1257] team0 (unregistering): Port device team_slave_1 removed [ 261.960035][ T5940] Bluetooth: hci1: command tx timeout [ 262.036915][ T1257] team0 (unregistering): Port device team_slave_0 removed [ 262.041569][ T5937] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 262.057202][ T5940] Bluetooth: hci4: command 0x1003 tx timeout [ 262.730503][T28562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.748377][T28562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.785016][T29112] __nla_validate_parse: 20 callbacks suppressed [ 262.785027][T29112] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3862'. [ 262.825213][T28562] team0: Port device team_slave_0 added [ 262.828538][T28562] team0: Port device team_slave_1 added [ 262.867714][T29231] usb usb8: usbfs: process 29231 (syz.7.3865) did not claim interface 5 before use [ 262.869708][T29248] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3866'. [ 262.877765][T29248] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3866'. [ 262.905713][T28562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.911441][T28562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.920188][T28562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.924971][T28562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.932738][T28562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.943604][T28562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.971654][T29340] fuse: Bad value for 'fd' [ 263.020031][T28562] hsr_slave_0: entered promiscuous mode [ 263.022311][ T1151] Bluetooth: hci4: Frame reassembly failed (-84) [ 263.032578][T28562] hsr_slave_1: entered promiscuous mode [ 263.036970][T28562] debugfs: 'hsr0' already exists in 'hsr' [ 263.039362][T28562] Cannot create hsr debugfs directory [ 263.045489][T29458] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3873'. [ 263.213045][T28562] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 263.220631][T28562] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 263.227232][T28562] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 263.233005][T29685] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3878'. [ 263.234620][T28562] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 263.236236][T29685] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3878'. [ 263.302123][T28562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.326289][T28562] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.331559][T29698] fuse: Bad value for 'fd' [ 263.333850][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.336325][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.343064][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.345309][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.364150][T29698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3881'. [ 263.472354][T29709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3884'. [ 263.480720][T28562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.546006][T29716] netlink: 182 bytes leftover after parsing attributes in process `syz.3.3886'. [ 263.586669][ T40] kauditd_printk_skb: 28048 callbacks suppressed [ 263.586686][ T40] audit: type=1400 audit(2000000188.566:91514): avc: denied { create } for pid=29719 comm="syz.3.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 263.620274][T28562] veth0_vlan: entered promiscuous mode [ 263.623151][T29723] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3888'. [ 263.625296][T28562] veth1_vlan: entered promiscuous mode [ 263.647099][T28562] veth0_macvtap: entered promiscuous mode [ 263.650763][T28562] veth1_macvtap: entered promiscuous mode [ 263.663487][T28562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.671726][T28562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.677589][ T1201] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.680233][ T1201] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.683499][ T1201] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.686364][ T1201] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.734088][ T1201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.737256][ T1201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.750413][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.753021][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.840362][ T5940] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 263.842973][T29742] Bluetooth: MGMT ver 1.23 [ 263.844683][T29742] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 263.931813][T29750] Invalid source name [ 263.933125][T29750] UBIFS error (pid: 29750): cannot open "/dev/sg0", error -22 [ 264.057992][ T40] audit: type=1400 audit(2000000189.005:91515): avc: denied { write } for pid=29761 comm="syz.3.3898" path="socket:[85183]" dev="sockfs" ino=85183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 264.070591][ T40] audit: type=1400 audit(2000000189.015:91516): avc: denied { accept } for pid=29761 comm="syz.3.3898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 264.151597][T29773] sch_fq: defrate 0 ignored. [ 264.180516][ T5940] Bluetooth: hci1: command tx timeout [ 264.221156][T29782] netlink: 'syz.5.3905': attribute type 1 has an invalid length. [ 264.241022][T29782] 8021q: adding VLAN 0 to HW filter on device bond3 [ 264.804784][T29843] usb usb8: usbfs: process 29843 (syz.9.3915) did not claim interface 5 before use [ 264.896964][ T40] audit: type=1400 audit(2000000189.791:91517): avc: denied { map } for pid=29852 comm="syz.9.3919" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 264.904531][ T40] audit: type=1400 audit(2000000189.791:91518): avc: denied { execute } for pid=29852 comm="syz.9.3919" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 265.008202][T29865] FAULT_INJECTION: forcing a failure. [ 265.008202][T29865] name failslab, interval 1, probability 0, space 0, times 0 [ 265.014103][T29865] CPU: 3 UID: 0 PID: 29865 Comm: syz.9.3924 Not tainted syzkaller #0 PREEMPT(full) [ 265.014120][T29865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 265.014126][T29865] Call Trace: [ 265.014143][T29865] [ 265.014148][T29865] dump_stack_lvl+0x16c/0x1f0 [ 265.014181][T29865] should_fail_ex+0x512/0x640 [ 265.014200][T29865] ? __kmalloc_noprof+0xca/0x880 [ 265.014216][T29865] should_failslab+0xc2/0x120 [ 265.014229][T29865] __kmalloc_noprof+0xdd/0x880 [ 265.014243][T29865] ? ethnl_default_notify+0x1be/0xa40 [ 265.014261][T29865] ? ethnl_default_notify+0x1be/0xa40 [ 265.014273][T29865] ethnl_default_notify+0x1be/0xa40 [ 265.014289][T29865] ? __pfx_ethnl_default_notify+0x10/0x10 [ 265.014308][T29865] ? ethnl_set_coalesce+0xb8/0x170 [ 265.014326][T29865] ? __pfx_ethnl_set_coalesce+0x10/0x10 [ 265.014339][T29865] ? __pfx_ethnl_default_notify+0x10/0x10 [ 265.014352][T29865] ethnl_notify+0xc2/0x200 [ 265.014367][T29865] ethnl_default_set_doit+0x401/0x9d0 [ 265.014394][T29865] genl_family_rcv_msg_doit+0x209/0x2f0 [ 265.014414][T29865] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 265.014435][T29865] ? bpf_lsm_capable+0x9/0x10 [ 265.014446][T29865] ? security_capable+0x7e/0x260 [ 265.014463][T29865] ? ns_capable+0xd7/0x110 [ 265.014476][T29865] genl_rcv_msg+0x55c/0x800 [ 265.014488][T29865] ? __pfx_genl_rcv_msg+0x10/0x10 [ 265.014498][T29865] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 265.014518][T29865] netlink_rcv_skb+0x158/0x420 [ 265.014532][T29865] ? __pfx_genl_rcv_msg+0x10/0x10 [ 265.014543][T29865] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 265.014563][T29865] ? netlink_deliver_tap+0x1ae/0xd30 [ 265.014579][T29865] genl_rcv+0x28/0x40 [ 265.014593][T29865] netlink_unicast+0x5aa/0x870 [ 265.014610][T29865] ? __pfx_netlink_unicast+0x10/0x10 [ 265.014630][T29865] netlink_sendmsg+0x8c8/0xdd0 [ 265.014647][T29865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.014667][T29865] ____sys_sendmsg+0xa98/0xc70 [ 265.014685][T29865] ? copy_msghdr_from_user+0x10a/0x160 [ 265.014698][T29865] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.014721][T29865] ___sys_sendmsg+0x134/0x1d0 [ 265.014735][T29865] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.014747][T29865] ? __lock_acquire+0x622/0x1c90 [ 265.014782][T29865] __sys_sendmsg+0x16d/0x220 [ 265.014795][T29865] ? __pfx___sys_sendmsg+0x10/0x10 [ 265.014818][T29865] do_syscall_64+0xcd/0xfa0 [ 265.014835][T29865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.014846][T29865] RIP: 0033:0x7f61ff38efc9 [ 265.014855][T29865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.014866][T29865] RSP: 002b:00007f62001d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.014876][T29865] RAX: ffffffffffffffda RBX: 00007f61ff5e5fa0 RCX: 00007f61ff38efc9 [ 265.014883][T29865] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001d [ 265.014889][T29865] RBP: 00007f62001d8090 R08: 0000000000000000 R09: 0000000000000000 [ 265.014895][T29865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 265.014901][T29865] R13: 00007f61ff5e6038 R14: 00007f61ff5e5fa0 R15: 00007ffee8ef47e8 [ 265.014916][T29865] [ 265.031489][T29867] xt_hashlimit: size too large, truncated to 1048576 [ 265.206912][ T5937] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 265.207502][ T5940] Bluetooth: hci4: command 0x1003 tx timeout [ 265.267556][T29880] xt_hashlimit: size too large, truncated to 1048576 [ 265.307883][ T53] usb 14-1: new full-speed USB device number 2 using dummy_hcd [ 265.388648][T29884] usb usb8: usbfs: process 29884 (syz.5.3930) did not claim interface 5 before use [ 265.476415][ T53] usb 14-1: config 179 has an invalid interface number: 65 but max is 0 [ 265.479156][ T53] usb 14-1: config 179 has an invalid descriptor of length 139, skipping remainder of the config [ 265.482893][ T53] usb 14-1: config 179 has no interface number 0 [ 265.485451][ T53] usb 14-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 265.490843][ T53] usb 14-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 265.494508][ T53] usb 14-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 265.498563][ T53] usb 14-1: Product: syz [ 265.551392][T29897] misc userio: Begin command sent, but we're already running [ 265.721802][ T53] usb 14-1: USB disconnect, device number 2 [ 265.804812][ T40] audit: type=1400 audit(2000000190.633:91519): avc: denied { append } for pid=29907 comm="syz.5.3935" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 265.915737][T29916] netlink: 'syz.5.3937': attribute type 1 has an invalid length. [ 265.919697][ T40] audit: type=1400 audit(2000000190.745:91520): avc: denied { append } for pid=29915 comm="syz.5.3937" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 266.029525][T29925] xt_hashlimit: size too large, truncated to 1048576 [ 266.084542][T29927] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 266.289283][T29937] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 266.354897][T29945] usb usb8: usbfs: process 29945 (syz.9.3949) did not claim interface 5 before use [ 266.371784][T29947] xt_hashlimit: size too large, truncated to 1048576 [ 266.404089][ T5937] Bluetooth: hci1: command tx timeout [ 266.453754][T29959] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 266.498866][T29967] FAULT_INJECTION: forcing a failure. [ 266.498866][T29967] name failslab, interval 1, probability 0, space 0, times 0 [ 266.505882][T29967] CPU: 1 UID: 0 PID: 29967 Comm: syz.9.3957 Not tainted syzkaller #0 PREEMPT(full) [ 266.505906][T29967] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 266.505917][T29967] Call Trace: [ 266.505923][T29967] [ 266.505930][T29967] dump_stack_lvl+0x16c/0x1f0 [ 266.505960][T29967] should_fail_ex+0x512/0x640 [ 266.505978][T29967] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 266.506006][T29967] should_failslab+0xc2/0x120 [ 266.506025][T29967] kmem_cache_alloc_node_noprof+0x78/0x770 [ 266.506048][T29967] ? do_raw_spin_lock+0x12c/0x2b0 [ 266.506065][T29967] ? __alloc_skb+0x2b2/0x380 [ 266.506089][T29967] ? __alloc_skb+0x2b2/0x380 [ 266.506106][T29967] __alloc_skb+0x2b2/0x380 [ 266.506125][T29967] ? __pfx___alloc_skb+0x10/0x10 [ 266.506143][T29967] ? trace_rpm_usage+0x18e/0x210 [ 266.506162][T29967] ? ethnl_ops_complete+0xaf/0xd0 [ 266.506186][T29967] ethnl_default_notify+0x56a/0xa40 [ 266.506210][T29967] ? __pfx_ethnl_default_notify+0x10/0x10 [ 266.506241][T29967] ? ethnl_set_coalesce+0xb8/0x170 [ 266.506259][T29967] ? __pfx_ethnl_set_coalesce+0x10/0x10 [ 266.506287][T29967] ? __pfx_ethnl_default_notify+0x10/0x10 [ 266.506307][T29967] ethnl_notify+0xc2/0x200 [ 266.506330][T29967] ethnl_default_set_doit+0x401/0x9d0 [ 266.506355][T29967] genl_family_rcv_msg_doit+0x209/0x2f0 [ 266.506383][T29967] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 266.506417][T29967] ? bpf_lsm_capable+0x9/0x10 [ 266.506435][T29967] ? security_capable+0x7e/0x260 [ 266.506460][T29967] ? ns_capable+0xd7/0x110 [ 266.506481][T29967] genl_rcv_msg+0x55c/0x800 [ 266.506500][T29967] ? __pfx_genl_rcv_msg+0x10/0x10 [ 266.506516][T29967] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 266.506547][T29967] netlink_rcv_skb+0x158/0x420 [ 266.506570][T29967] ? __pfx_genl_rcv_msg+0x10/0x10 [ 266.506586][T29967] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 266.506620][T29967] ? netlink_deliver_tap+0x1ae/0xd30 [ 266.506646][T29967] genl_rcv+0x28/0x40 [ 266.506668][T29967] netlink_unicast+0x5aa/0x870 [ 266.506694][T29967] ? __pfx_netlink_unicast+0x10/0x10 [ 266.506727][T29967] netlink_sendmsg+0x8c8/0xdd0 [ 266.506753][T29967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.506786][T29967] ____sys_sendmsg+0xa98/0xc70 [ 266.506812][T29967] ? copy_msghdr_from_user+0x10a/0x160 [ 266.506832][T29967] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.506869][T29967] ___sys_sendmsg+0x134/0x1d0 [ 266.506891][T29967] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.506910][T29967] ? __lock_acquire+0x622/0x1c90 [ 266.506968][T29967] __sys_sendmsg+0x16d/0x220 [ 266.506989][T29967] ? __pfx___sys_sendmsg+0x10/0x10 [ 266.507027][T29967] do_syscall_64+0xcd/0xfa0 [ 266.507053][T29967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.507069][T29967] RIP: 0033:0x7f61ff38efc9 [ 266.507083][T29967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.507098][T29967] RSP: 002b:00007f62001d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.507114][T29967] RAX: ffffffffffffffda RBX: 00007f61ff5e5fa0 RCX: 00007f61ff38efc9 [ 266.507124][T29967] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001d [ 266.507134][T29967] RBP: 00007f62001d8090 R08: 0000000000000000 R09: 0000000000000000 [ 266.507144][T29967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 266.507153][T29967] R13: 00007f61ff5e6038 R14: 00007f61ff5e5fa0 R15: 00007ffee8ef47e8 [ 266.507179][T29967] [ 266.668712][T29970] xt_hashlimit: size too large, truncated to 1048576 [ 266.733037][T29975] usb usb8: usbfs: process 29975 (syz.7.3960) did not claim interface 5 before use [ 266.787240][T29980] batman_adv: batadv0: Adding interface: dummy0 [ 266.789838][T29980] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.797463][T29980] batman_adv: batadv0: Interface activated: dummy0 [ 266.804989][T29980] batadv0: mtu less than device minimum [ 266.807250][T29980] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.810897][T29980] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.814665][T29980] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.818261][T29980] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.821841][T29980] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.825532][T29980] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.829117][T29980] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.832987][T29980] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.868203][T29987] xt_hashlimit: size too large, truncated to 1048576 [ 266.951561][T29994] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 267.017695][T30004] usb usb8: usbfs: process 30004 (syz.5.3970) did not claim interface 5 before use [ 267.074377][T30015] netlink: 'syz.3.3977': attribute type 22 has an invalid length. [ 267.088722][T30020] xt_hashlimit: size too large, truncated to 1048576 [ 267.217907][T30015] netlink: 'syz.3.3977': attribute type 22 has an invalid length. [ 267.240367][ T5937] Bluetooth: hci2: Malformed Event: 0x02 [ 267.242105][ T8582] hid (null): global environment stack underflow [ 267.243431][ T5937] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 267.245198][ T40] audit: type=1400 audit(2000000191.989:91521): avc: denied { ioctl } for pid=30037 comm="syz.7.3979" path="/dev/uhid" dev="devtmpfs" ino=1296 ioctlcmd=0x941c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 267.245257][ T8582] hid (null): invalid report_size 33875 [ 267.261619][ T8582] hid (null): unknown global tag 0xe [ 267.267092][ T8582] hid-generic 0009:0001:0004.000F: global environment stack underflow [ 267.271089][ T8582] hid-generic 0009:0001:0004.000F: item 0 1 1 11 parsing failed [ 267.274556][ T8582] hid-generic 0009:0001:0004.000F: probe with driver hid-generic failed with error -22 [ 267.430943][ T53] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 267.592526][ T53] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 267.595935][ T53] usb 10-1: config 179 has an invalid descriptor of length 139, skipping remainder of the config [ 267.600245][ T53] usb 10-1: config 179 has no interface number 0 [ 267.603348][ T53] usb 10-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 267.610354][ T53] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 267.614058][ T53] usb 10-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 267.617324][ T53] usb 10-1: Product: syz [ 267.838499][ T8582] usb 10-1: USB disconnect, device number 18 [ 268.047449][T30084] usb usb8: usbfs: process 30084 (syz.7.3997) did not claim interface 5 before use [ 268.069980][T30086] xt_hashlimit: size too large, truncated to 1048576 [ 268.166194][T30096] __nla_validate_parse: 19 callbacks suppressed [ 268.166211][T30096] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4000'. [ 268.220564][T30104] usb usb8: usbfs: process 30104 (syz.9.4008) did not claim interface 5 before use [ 268.413003][T30120] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4005'. [ 268.416921][T30120] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4005'. [ 268.460362][T30128] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4007'. [ 268.535898][T30143] xt_hashlimit: size too large, truncated to 1048576 [ 268.538434][T30144] xt_hashlimit: size too large, truncated to 1048576 [ 268.629891][ T5937] Bluetooth: hci1: command tx timeout [ 268.735712][ T8582] usb 14-1: new full-speed USB device number 3 using dummy_hcd [ 268.898351][ T8582] usb 14-1: config 179 has an invalid interface number: 65 but max is 0 [ 268.903077][ T8582] usb 14-1: config 179 has an invalid descriptor of length 139, skipping remainder of the config [ 268.907889][T30171] usb usb8: usbfs: process 30171 (syz.5.4022) did not claim interface 5 before use [ 268.908324][ T8582] usb 14-1: config 179 has no interface number 0 [ 268.912055][T30173] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4023'. [ 268.913892][ T8582] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 268.920897][ T8582] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 268.924550][ T8582] usb 14-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 268.930097][ T8582] usb 14-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 268.932949][ T8582] usb 14-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 268.935431][ T8582] usb 14-1: Product: syz [ 268.940916][T30134] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 268.959438][T30180] netlink: 'syz.7.4025': attribute type 21 has an invalid length. [ 268.962667][T30180] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4025'. [ 268.992091][T30187] random: crng reseeded on system resumption [ 269.126362][T30201] usb usb8: usbfs: process 30201 (syz.5.4033) did not claim interface 5 before use [ 269.164981][ T8582] usb 14-1: USB disconnect, device number 3 [ 269.179146][T30211] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4035'. [ 269.414028][ T5937] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 269.448303][T30240] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4040'. [ 269.451666][T30240] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4040'. [ 269.735997][T30274] usb usb8: usbfs: process 30274 (syz.9.4053) did not claim interface 5 before use [ 269.976973][T30303] usb usb8: usbfs: process 30303 (syz.9.4063) did not claim interface 5 before use [ 270.116957][ T1151] Bluetooth: hci4: Frame reassembly failed (-84) [ 270.142269][T30307] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 270.168313][ T61] usb 12-1: new full-speed USB device number 13 using dummy_hcd [ 270.351449][ T61] usb 12-1: config 179 has an invalid interface number: 65 but max is 0 [ 270.354867][ T61] usb 12-1: config 179 has an invalid descriptor of length 139, skipping remainder of the config [ 270.358995][ T61] usb 12-1: config 179 has no interface number 0 [ 270.361702][ T61] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 270.366111][ T61] usb 12-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 270.370375][ T61] usb 12-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 270.376925][ T61] usb 12-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 270.380611][ T61] usb 12-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 270.383235][ T61] usb 12-1: Product: syz [ 270.386793][T30294] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 270.605920][ T5998] usb 12-1: USB disconnect, device number 13 [ 270.807070][T30335] netlink: 180 bytes leftover after parsing attributes in process `syz.9.4071'. [ 270.839651][T30340] MTD: Couldn't look up './bus': -15 [ 270.840190][ T40] audit: type=1400 audit(2000000195.346:91522): avc: denied { mounton } for pid=30337 comm="syz.9.4073" path="/42/bus" dev="tmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 270.872179][ T40] audit: type=1400 audit(2000000195.374:91523): avc: denied { mount } for pid=30342 comm="syz.9.4074" name="/" dev="pstore" ino=5535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 270.873523][T30343] hashlimit_mt_check_common: 4 callbacks suppressed [ 270.873538][T30343] xt_hashlimit: size too large, truncated to 1048576 [ 270.882669][ T40] audit: type=1400 audit(2000000195.374:91524): avc: denied { remount } for pid=30342 comm="syz.9.4074" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 271.006130][ T40] audit: type=1400 audit(2000000195.505:91525): avc: denied { unmount } for pid=28562 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 271.030608][T30352] FAULT_INJECTION: forcing a failure. [ 271.030608][T30352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.036077][T30352] CPU: 1 UID: 0 PID: 30352 Comm: syz.9.4077 Not tainted syzkaller #0 PREEMPT(full) [ 271.036101][T30352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 271.036113][T30352] Call Trace: [ 271.036119][T30352] [ 271.036126][T30352] dump_stack_lvl+0x16c/0x1f0 [ 271.036157][T30352] should_fail_ex+0x512/0x640 [ 271.036183][T30352] _copy_from_user+0x2e/0xd0 [ 271.036206][T30352] copy_msghdr_from_user+0x98/0x160 [ 271.036229][T30352] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 271.036257][T30352] ? __pfx__kstrtoull+0x10/0x10 [ 271.036286][T30352] ___sys_sendmsg+0xfe/0x1d0 [ 271.036311][T30352] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.036345][T30352] ? find_held_lock+0x2b/0x80 [ 271.036384][T30352] __sys_sendmmsg+0x200/0x420 [ 271.036410][T30352] ? __pfx___sys_sendmmsg+0x10/0x10 [ 271.036442][T30352] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 271.036485][T30352] ? fput+0x9b/0xd0 [ 271.036508][T30352] ? ksys_write+0x1ac/0x250 [ 271.036525][T30352] ? __pfx_ksys_write+0x10/0x10 [ 271.036548][T30352] __x64_sys_sendmmsg+0x9c/0x100 [ 271.036572][T30352] ? lockdep_hardirqs_on+0x7c/0x110 [ 271.036594][T30352] do_syscall_64+0xcd/0xfa0 [ 271.036622][T30352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.036638][T30352] RIP: 0033:0x7f61ff38efc9 [ 271.036664][T30352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.036681][T30352] RSP: 002b:00007f62001d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 271.036699][T30352] RAX: ffffffffffffffda RBX: 00007f61ff5e5fa0 RCX: 00007f61ff38efc9 [ 271.036711][T30352] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 271.036721][T30352] RBP: 00007f62001d8090 R08: 0000000000000000 R09: 0000000000000000 [ 271.036731][T30352] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001 [ 271.036742][T30352] R13: 00007f61ff5e6038 R14: 00007f61ff5e5fa0 R15: 00007ffee8ef47e8 [ 271.036767][T30352] [ 271.211385][T30365] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 271.214667][ T40] audit: type=1400 audit(2000000195.692:91526): avc: denied { relabelto } for pid=30364 comm="syz.3.4083" name="437" dev="tmpfs" ino=2397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:clock_device_t:s0" [ 271.221925][T30367] xt_hashlimit: size too large, truncated to 1048576 [ 271.224026][ T40] audit: type=1400 audit(2000000195.692:91527): avc: denied { associate } for pid=30364 comm="syz.3.4083" name="437" dev="tmpfs" ino=2397 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:clock_device_t:s0" [ 271.234425][T30369] usb usb8: usbfs: process 30369 (syz.7.4084) did not claim interface 5 before use [ 271.419939][T30394] team_slave_0: entered promiscuous mode [ 271.422238][T30394] team_slave_1: entered promiscuous mode [ 271.426184][T30394] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 271.458451][T30401] xt_hashlimit: size too large, truncated to 1048576 [ 271.487656][T30404] usb usb8: usbfs: process 30404 (syz.7.4096) did not claim interface 5 before use [ 271.513879][T30406] net_ratelimit: 16 callbacks suppressed [ 271.513891][T30406] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 271.643984][ T6003] usb 14-1: new full-speed USB device number 4 using dummy_hcd [ 271.816163][ T6003] usb 14-1: config 179 has an invalid interface number: 65 but max is 0 [ 271.819573][ T6003] usb 14-1: config 179 has an invalid descriptor of length 139, skipping remainder of the config [ 271.823677][ T6003] usb 14-1: config 179 has no interface number 0 [ 271.826530][ T6003] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 271.831040][ T6003] usb 14-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 271.835113][ T6003] usb 14-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 271.841120][ T6003] usb 14-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 271.845035][ T6003] usb 14-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 271.848575][ T6003] usb 14-1: Product: syz [ 271.852898][T30386] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 272.071914][ T6003] usb 14-1: USB disconnect, device number 4 [ 272.306512][ T5940] Bluetooth: hci4: command 0x1003 tx timeout [ 272.307063][ T5937] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 272.642538][ T5937] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 272.654650][T30438] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 272.691426][T30445] usb usb8: usbfs: process 30445 (syz.9.4105) did not claim interface 5 before use [ 272.868482][T30492] batman_adv: batadv0: Interface deactivated: dummy0 [ 272.879503][T30492] batman_adv: batadv0: Removing interface: dummy0 [ 272.885931][T30499] FAULT_INJECTION: forcing a failure. [ 272.885931][T30499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.891369][T30499] CPU: 0 UID: 0 PID: 30499 Comm: syz.7.4113 Not tainted syzkaller #0 PREEMPT(full) [ 272.891394][T30499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 272.891406][T30499] Call Trace: [ 272.891414][T30499] [ 272.891422][T30499] dump_stack_lvl+0x16c/0x1f0 [ 272.891452][T30499] should_fail_ex+0x512/0x640 [ 272.891483][T30499] _copy_from_user+0x2e/0xd0 [ 272.891506][T30499] move_addr_to_kernel+0x65/0x170 [ 272.891525][T30499] __copy_msghdr+0x386/0x470 [ 272.891548][T30499] copy_msghdr_from_user+0xc1/0x160 [ 272.891571][T30499] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 272.891599][T30499] ? __pfx__kstrtoull+0x10/0x10 [ 272.891629][T30499] ___sys_sendmsg+0xfe/0x1d0 [ 272.891652][T30499] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.891687][T30499] ? find_held_lock+0x2b/0x80 [ 272.891726][T30499] __sys_sendmmsg+0x200/0x420 [ 272.891752][T30499] ? __pfx___sys_sendmmsg+0x10/0x10 [ 272.891783][T30499] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 272.891820][T30499] ? fput+0x9b/0xd0 [ 272.891842][T30499] ? ksys_write+0x1ac/0x250 [ 272.891859][T30499] ? __pfx_ksys_write+0x10/0x10 [ 272.891879][T30499] __x64_sys_sendmmsg+0x9c/0x100 [ 272.891901][T30499] ? lockdep_hardirqs_on+0x7c/0x110 [ 272.891926][T30499] do_syscall_64+0xcd/0xfa0 [ 272.891953][T30499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.891972][T30499] RIP: 0033:0x7f8fc738efc9 [ 272.891987][T30499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.892003][T30499] RSP: 002b:00007f8fc81ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 272.892020][T30499] RAX: ffffffffffffffda RBX: 00007f8fc75e5fa0 RCX: 00007f8fc738efc9 [ 272.892031][T30499] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 272.892042][T30499] RBP: 00007f8fc81ce090 R08: 0000000000000000 R09: 0000000000000000 [ 272.892053][T30499] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001 [ 272.892063][T30499] R13: 00007f8fc75e6038 R14: 00007f8fc75e5fa0 R15: 00007ffccb77c1c8 [ 272.892088][T30499] [ 272.979750][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.121603][T30518] usb usb8: usbfs: process 30518 (syz.9.4119) did not claim interface 5 before use [ 273.220149][T30525] xt_hashlimit: size too large, truncated to 1048576 [ 273.333166][T30536] netlink: 'syz.9.4123': attribute type 10 has an invalid length. [ 273.350091][T30540] xt_hashlimit: size too large, truncated to 1048576 [ 273.406008][T30549] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 273.441845][T30551] usb usb8: usbfs: process 30551 (syz.5.4129) did not claim interface 5 before use [ 273.526897][T30563] __nla_validate_parse: 5 callbacks suppressed [ 273.526915][T30563] netlink: 180 bytes leftover after parsing attributes in process `syz.5.4134'. [ 273.532342][T30563] netlink: 180 bytes leftover after parsing attributes in process `syz.5.4134'. [ 273.571899][T30567] xt_hashlimit: size too large, truncated to 1048576 [ 273.728802][T30579] usb usb8: usbfs: process 30579 (syz.9.4139) did not claim interface 0 before use [ 273.737752][ T40] audit: type=1400 audit(2000000198.058:91528): avc: denied { search } for pid=30576 comm="syz.5.4140" name="/" dev="configfs" ino=3108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 273.748341][ T40] audit: type=1400 audit(2000000198.058:91529): avc: denied { search } for pid=30576 comm="syz.5.4140" name="/" dev="configfs" ino=3108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 273.758832][ T40] audit: type=1400 audit(2000000198.058:91530): avc: denied { read open } for pid=30576 comm="syz.5.4140" path="/" dev="configfs" ino=3108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 273.795183][T30583] usb usb8: usbfs: process 30583 (syz.5.4141) did not claim interface 5 before use [ 273.881641][T30587] FAULT_INJECTION: forcing a failure. [ 273.881641][T30587] name failslab, interval 1, probability 0, space 0, times 0 [ 273.887146][T30587] CPU: 3 UID: 0 PID: 30587 Comm: syz.5.4143 Not tainted syzkaller #0 PREEMPT(full) [ 273.887171][T30587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 273.887182][T30587] Call Trace: [ 273.887190][T30587] [ 273.887198][T30587] dump_stack_lvl+0x16c/0x1f0 [ 273.887250][T30587] should_fail_ex+0x512/0x640 [ 273.887270][T30587] ? __kmalloc_noprof+0xca/0x880 [ 273.887297][T30587] should_failslab+0xc2/0x120 [ 273.887318][T30587] __kmalloc_noprof+0xdd/0x880 [ 273.887342][T30587] ? sock_kmalloc+0x111/0x170 [ 273.887372][T30587] ? sock_kmalloc+0x111/0x170 [ 273.887396][T30587] sock_kmalloc+0x111/0x170 [ 273.887423][T30587] ____sys_sendmsg+0x52a/0xc70 [ 273.887456][T30587] ? copy_msghdr_from_user+0x10a/0x160 [ 273.887478][T30587] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.887509][T30587] ? __pfx__kstrtoull+0x10/0x10 [ 273.887542][T30587] ___sys_sendmsg+0x134/0x1d0 [ 273.887566][T30587] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.887601][T30587] ? find_held_lock+0x2b/0x80 [ 273.887640][T30587] __sys_sendmmsg+0x200/0x420 [ 273.887666][T30587] ? __pfx___sys_sendmmsg+0x10/0x10 [ 273.887697][T30587] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 273.887735][T30587] ? fput+0x9b/0xd0 [ 273.887757][T30587] ? ksys_write+0x1ac/0x250 [ 273.887773][T30587] ? __pfx_ksys_write+0x10/0x10 [ 273.887793][T30587] __x64_sys_sendmmsg+0x9c/0x100 [ 273.887816][T30587] ? lockdep_hardirqs_on+0x7c/0x110 [ 273.887841][T30587] do_syscall_64+0xcd/0xfa0 [ 273.887868][T30587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.887886][T30587] RIP: 0033:0x7f925938efc9 [ 273.887901][T30587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.887917][T30587] RSP: 002b:00007f925a2e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 273.887934][T30587] RAX: ffffffffffffffda RBX: 00007f92595e5fa0 RCX: 00007f925938efc9 [ 273.887945][T30587] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 273.887955][T30587] RBP: 00007f925a2e3090 R08: 0000000000000000 R09: 0000000000000000 [ 273.887966][T30587] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001 [ 273.887976][T30587] R13: 00007f92595e6038 R14: 00007f92595e5fa0 R15: 00007ffc33a30b08 [ 273.888001][T30587] [ 274.066028][T30594] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4145'. [ 274.109126][T30598] netlink: 'syz.3.4149': attribute type 10 has an invalid length. [ 274.111607][T30600] xt_hashlimit: size too large, truncated to 1048576 [ 274.319937][T20980] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 274.324907][T20980] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 274.327401][ T40] audit: type=1400 audit(2000000198.610:91531): avc: denied { write } for pid=5913 comm="syz-executor" path="pipe:[2951]" dev="pipefs" ino=2951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 274.330031][T20980] CPU: 3 UID: 0 PID: 20980 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 274.341056][T20980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 274.345273][T20980] RIP: 0010:klist_put+0x4d/0x1b0 [ 274.347181][T20980] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 9c f2 0c [ 274.354474][T20980] RSP: 0018:ffffc90006c7f9a0 EFLAGS: 00010202 [ 274.356822][T20980] RAX: dffffc0000000000 RBX: ffff888052c8a460 RCX: ffffffff826540dd [ 274.359856][T20980] RDX: 000000000000000b RSI: ffffffff8b5602f5 RDI: 0000000000000058 [ 274.363044][T20980] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 274.366115][T20980] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 274.369127][T20980] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 274.372139][T20980] FS: 0000000000000000(0000) GS:ffff8880d6d0a000(0000) knlGS:0000000000000000 [ 274.375476][T20980] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.378059][T20980] CR2: 00007f9259372c60 CR3: 00000000340a9000 CR4: 0000000000352ef0 [ 274.381131][T20980] Call Trace: [ 274.382425][T20980] [ 274.383646][T20980] device_del+0x1d8/0x9f0 [ 274.385371][T20980] ? __pfx_device_del+0x10/0x10 [ 274.387284][T20980] ? netdev_unregister_kobject+0x2da/0x540 [ 274.389617][T20980] unregister_netdevice_many_notify+0x14d6/0x25c0 [ 274.392311][T20980] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 274.394947][T20980] ? __pfx___mutex_lock+0x10/0x10 [ 274.396957][T20980] unregister_netdevice_queue+0x305/0x3f0 [ 274.399283][T20980] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 274.401899][T20980] ? rtnl_net_dev_lock+0x28/0x360 [ 274.403977][T20980] ? rtnl_net_dev_lock+0x146/0x360 [ 274.406126][T20980] ? rtnl_lock+0x9/0x20 [ 274.407874][T20980] ? rtnl_net_dev_lock+0x146/0x360 [ 274.410029][T20980] unregister_netdev+0x1f/0x60 [ 274.412026][T20980] bnep_session+0x224e/0x2d80 [ 274.413982][T20980] ? __pfx_bnep_session+0x10/0x10 [ 274.416021][T20980] ? do_raw_spin_lock+0x12c/0x2b0 [ 274.418001][T20980] ? __pfx_woken_wake_function+0x10/0x10 [ 274.420352][T20980] ? rcu_is_watching+0x12/0xc0 [ 274.422327][T20980] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 274.424735][T20980] ? lockdep_hardirqs_on+0x7c/0x110 [ 274.426921][T20980] ? __kthread_parkme+0x19e/0x250 [ 274.428955][T20980] ? __pfx_bnep_session+0x10/0x10 [ 274.431024][T20980] kthread+0x3c5/0x780 [ 274.432648][T20980] ? __pfx_kthread+0x10/0x10 [ 274.434397][T20980] ? rcu_is_watching+0x12/0xc0 [ 274.436469][T20980] ? __pfx_kthread+0x10/0x10 [ 274.438363][T20980] ret_from_fork+0x675/0x7d0 [ 274.440220][T20980] ? __pfx_kthread+0x10/0x10 [ 274.442122][T20980] ret_from_fork_asm+0x1a/0x30 [ 274.444144][T20980] [ 274.445500][T20980] Modules linked in: [ 274.447374][T20980] ---[ end trace 0000000000000000 ]--- [ 274.452614][T20980] RIP: 0010:klist_put+0x4d/0x1b0 [ 274.454704][T20980] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 9c f2 0c [ 274.462747][T20980] RSP: 0018:ffffc90006c7f9a0 EFLAGS: 00010202 [ 274.465365][T20980] RAX: dffffc0000000000 RBX: ffff888052c8a460 RCX: ffffffff826540dd [ 274.468765][T20980] RDX: 000000000000000b RSI: ffffffff8b5602f5 RDI: 0000000000000058 [ 274.472312][T20980] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 274.475801][T20980] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 274.479351][T20980] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 274.482577][T20980] FS: 0000000000000000(0000) GS:ffff8880d6d0a000(0000) knlGS:0000000000000000 [ 274.486131][T20980] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.488899][T20980] CR2: 00007f9259372c60 CR3: 000000000e182000 CR4: 0000000000352ef0 [ 274.492097][T20980] Kernel panic - not syncing: Fatal exception [ 274.495189][T20980] Kernel Offset: disabled [ 274.496903][T20980] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:31:40 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff820a2de1 RDX=0000000000000000 RSI=ffffffff8bf06dc0 RDI=0000000000000000 RBP=0000000000000004 RSP=ffffc9000384f818 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000007cdd R12=ffff888024f62788 R13=fffffbfff21044ee R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff81a30d70 RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7740d17d60 CR3=000000003f30d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fc7412fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fc7412fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fc7412fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fc7412ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fc741307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fc741315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fc75b74a8 00007f8fc75b74a0 00007f8fc75b7498 00007f8fc75b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fc811d100 00007f8fc75b7460 00007f8fc75b0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8fc75b74b8 00007f8fc75b74b0 00007f8fc75b74a8 00007f8fc75b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffffffff8e3c4460 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8e3c4460 RBP=0000000000000002 RSP=ffffc900006a08f8 R8 =0000000000000000 R9 =0000000000000000 R10=ffffc900006a09e0 R11=00000000000062dd R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8198ebbe RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f70671a3300 ffffffff 00c00000 GS =0000 ffff8880d6b0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c35200b CR3=000000002b67f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=ad4051c3d1344b90 a7a933d1494e0b21 ad4051c3d1344b90 a7a933d1494e0b21 ad4051c3d1344b90 a7a933d1494e0b21 ad4051c3d1344b90 a7a933d1494e0b21 ZMM18=f17cbd300d395744 ce8960ba0679580e f17cbd300d395744 ce8960ba0679580e f17cbd300d395744 ce8960ba0679580e f17cbd300d395744 ce8960ba0679580e ZMM19=b817000000000000 0000000000000005 b817000000000000 0000000000000004 b817000000000000 0000000000000003 b817000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 007c000000900000 00a8000000c00000 00d8000000f00000 01140000000a0000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0080000000010000 0000000000000000 01ca000000000271 9c40000000180000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00240000000e0014 000c000000080004 0020000e00000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000103c 0000000300000008 0004000800100008 0000000c02000000 ZMM25=ce8960bace8960ba ce8960bace8960ba ce8960bace8960ba ce8960bace8960ba ce8960bace8960ba ce8960bace8960ba ce8960bace8960ba ce8960bace8960ba ZMM26=0d3957440d395744 0d3957440d395744 0d3957440d395744 0d3957440d395744 0d3957440d395744 0d3957440d395744 0d3957440d395744 0d3957440d395744 ZMM27=f17cbd30f17cbd30 f17cbd30f17cbd30 f17cbd30f17cbd30 f17cbd30f17cbd30 f17cbd30f17cbd30 f17cbd30f17cbd30 f17cbd30f17cbd30 f17cbd30f17cbd30 ZMM28=000000500000004f 0000004e0000004d 0000004c0000004b 0000004a00000049 0000004800000047 0000004600000045 0000004400000043 0000004200000041 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=b6170000b6170000 b6170000b6170000 b6170000b6170000 b6170000b6170000 b6170000b6170000 b6170000b6170000 b6170000b6170000 b6170000b6170000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=00000000000000f0 RCX=ffffffff819befb1 RDX=0000000000000001 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000078fb80 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff920000f1f73 R13=0000000000000200 R14=ffff88802ecfa480 R15=ffffc9000078fc50 RIP=ffffffff81bd0510 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe10c65eb0 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 002330302f233030 2f6273752f737562 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ff412fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ff412fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ff412fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ff412ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ff41307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ff41315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ff5b74a8 00007f61ff5b74a0 00007f61ff5b7498 00007f61ff5b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f620011d100 00007f61ff5b7460 00007f61ff5b0004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ff5b74b8 00007f61ff5b74b0 00007f61ff5b74a8 00007f61ff5b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000bfc ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85295155 RDI=ffffffff9add6740 RBP=ffffffff9add6700 RSP=ffffc90006c7f3a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000035 R14=ffffffff9add6700 R15=ffffffff852950f0 RIP=ffffffff8529517f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6d0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9259372c60 CR3=00000000340a9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 002330302f233030 2f6273752f737562 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ff412fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ff412fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ff412fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ff412ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ff41307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ff41315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ff5b74a8 00007f61ff5b74a0 00007f61ff5b7498 00007f61ff5b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f620011d100 00007f61ff5b7460 00007f61ff5b0004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f61ff5b74b8 00007f61ff5b74b0 00007f61ff5b74a8 00007f61ff5b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000bfc ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000