last executing test programs: 17m5.9680089s ago: executing program 32 (id=123): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r4}) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000a40)=0xfff) fchownat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x50, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x4, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4004e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f00000002c0)=0x3) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x7a) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634e250fb5b", 0x10}, {&(0x7f0000002400)="a18d55b6456bac655039b6a674900d579347393e35fdeed1fa8f68a4b05addbeeb0fbefbde6bcf26771ea0fdc771a23b3fb0462475833a25704ba4e839ef72c08766edbf2dafc979b1d9652f1c53fb2e2103f0a9f761bea9623c0673bd281cfce139ddb9aaa0c712059e85784fcd6fd8d48f99fc8147ef98dcc988d989d4c301", 0x80}], 0x2, 0x0, 0x0, 0x8000}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00), 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) gettid() r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) 8m49.310411074s ago: executing program 33 (id=3832): socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000280)={0x0, 0x1c2e, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r7, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x10) 7m57.84357263s ago: executing program 34 (id=4104): landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x97a}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=@newtaction={0x1560, 0x30, 0x10, 0x0, 0x0, {}, [{0x154c, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x80f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x1504, 0x1e, 0x0, 0x0, {{0xb}, {0x14cc, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x3, 0xfff, 0x7f, 0x80, 0x1, 0xd, 0x80, 0x89, 0x6d, 0x9, 0xff, 0x0, 0x8000, 0x8, 0x0, 0x4, 0x7fd, 0xe5e, 0x8, 0xd0ba, 0x7, 0x6, 0x6, 0x3, 0x8, 0x0, 0x400, 0x7, 0x7, 0x3, 0x0, 0x0, 0x200, 0x5, 0x994, 0x4, 0x50000, 0xffff, 0xfff, 0x5, 0x4, 0x1, 0x4, 0x83e800, 0x9, 0x0, 0x6, 0x101, 0x8, 0x7, 0x0, 0x4, 0x9, 0x2, 0x2, 0x4, 0x9, 0x1ff, 0x8, 0x8, 0x3, 0x93d, 0x7, 0x5, 0x101, 0x5, 0x10000, 0x0, 0x1, 0x2, 0x4, 0xe32a, 0x3, 0x2, 0x0, 0x4, 0xfffffff9, 0x8048, 0x7, 0x6, 0x5, 0xffffffc9, 0x1, 0x5, 0x9, 0xffff5f8f, 0x9, 0x5, 0xb85, 0x6, 0xffff, 0xa1, 0x6, 0xfff, 0xff, 0x3, 0x0, 0x7, 0x1, 0x100, 0x6, 0xc, 0x5, 0xfffffff8, 0x3c, 0x543, 0x5, 0x7f, 0x7, 0xfffffffd, 0xfffffff3, 0x5, 0x4, 0x0, 0x6, 0x7f, 0x40, 0x9, 0x8, 0x5, 0x24, 0xad9b, 0x3, 0x5, 0x2, 0xa, 0x8, 0x7fffffff, 0xfffffffc, 0x43e, 0x100, 0x3, 0x8001, 0x80, 0x8f, 0x63, 0x683, 0x8, 0x2, 0x4, 0xffff7fff, 0x5, 0x0, 0x7ff, 0x9, 0x0, 0x401, 0x9, 0x6, 0x0, 0x8, 0x7, 0x7, 0x3, 0x0, 0x5, 0x7, 0xff, 0x1, 0x2b2, 0x4, 0x8, 0xf31e, 0xffffffff, 0xd40, 0x7, 0x5, 0x6, 0xfffffff7, 0x8, 0x1, 0x7fff, 0x5, 0x7, 0xa50, 0xd, 0x0, 0x4, 0xf0e, 0x7, 0x0, 0x401, 0x9, 0x9, 0x0, 0x49, 0x3, 0x0, 0x0, 0x5, 0x6, 0x401, 0x8001, 0xf3d, 0x8, 0x3, 0xa, 0x7ff, 0x233, 0xfff, 0x4, 0x2, 0xd717, 0x10, 0x6, 0x8, 0x8000, 0x200, 0xe, 0x64, 0x7c57, 0x1, 0x7, 0x6, 0x5, 0x5, 0x0, 0xaf, 0xf, 0x7ff, 0x401, 0x1, 0xef4, 0xde, 0x1, 0x800, 0x3, 0x8, 0x6, 0x40, 0x7, 0x10, 0x4, 0x9, 0x7fffffff, 0x1ff, 0x4, 0x5129, 0x4, 0x80000000, 0x8, 0x538, 0xe66, 0x8, 0xb, 0x8, 0x9, 0xffffff9a, 0x1, 0xd62b, 0x6, 0xb, 0x7ec, 0xfffffab3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5346}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fff, 0x0, 0x7fffffff, 0x80, 0x4, {0x8e, 0x0, 0x5, 0x6, 0x6, 0x6}, {0xf, 0x1, 0x4, 0x3ff, 0x101, 0x80000001}, 0xffffffff, 0x5, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x4, 0x7, 0x3, 0x8, 0x7, 0x80000000, 0x1, 0x0, 0x93a, 0x8, 0xa8c, 0x3, 0x8, 0x0, 0x3, 0x2, 0xffff, 0xfff, 0x1, 0x5, 0x9, 0x80000000, 0x401, 0xc, 0x6, 0x8, 0x5, 0xffffff3f, 0x4, 0x9, 0x4, 0x4, 0x5, 0x1, 0x5, 0x4, 0x2, 0x1, 0x0, 0x33b0, 0x10000, 0x401, 0x10001, 0x70, 0x4, 0xff, 0x80000001, 0x6, 0xfffff000, 0xd, 0x7, 0x1, 0x2, 0x2, 0x6, 0x100, 0x8000, 0x1fc2, 0x0, 0x0, 0x2, 0x3, 0x6, 0x6, 0x7, 0xdfc, 0x6, 0x9, 0x1000, 0x4, 0x3ff, 0x8, 0x0, 0xc8e8, 0xbf000000, 0x10001, 0x1e0, 0x5, 0x9b50, 0x9, 0x0, 0x4, 0x0, 0x89, 0x4611, 0x4, 0x0, 0xc, 0xfffffff9, 0x7f, 0x7, 0x1, 0x7, 0x8, 0xffd540e4, 0x1b8, 0x0, 0x2, 0x3, 0x10, 0xc4, 0x5, 0x4, 0x2, 0x7, 0x3, 0xa, 0xfffff6e9, 0x1, 0x5, 0x1ff, 0x2, 0x0, 0x5, 0x8001, 0x89, 0x4, 0x0, 0x9, 0x0, 0x1, 0x6f07, 0x9, 0x7ff, 0x1000, 0xffffffff, 0x3, 0x3ff, 0x6, 0x637, 0x3, 0x7f, 0xda, 0xa9b, 0x7, 0x6, 0x6, 0x7, 0xffffff00, 0x2, 0x5, 0x80000001, 0x0, 0x0, 0xe7, 0x1, 0x1, 0x5, 0xbc9e, 0x1, 0xfe92c91, 0x5, 0x6, 0x9, 0x0, 0x2c1, 0x3, 0x7, 0xff, 0x8, 0x7, 0x34, 0x7, 0x40, 0x1, 0x4, 0x101, 0x1, 0xe3, 0xfffffffe, 0x138b2bd4, 0x1, 0x1, 0x9, 0xffff, 0x800, 0x9, 0x400, 0x3, 0x9, 0x8, 0x740, 0x1000, 0x401, 0x0, 0x5, 0x6, 0x8000, 0x1, 0xa, 0x0, 0xfff, 0x6, 0x8, 0x6, 0x841, 0x2, 0x3, 0x7, 0x79, 0x1c57, 0x26a, 0x5, 0x9, 0x8, 0x3, 0x9, 0x1f6, 0x6, 0x5, 0x8, 0xffff7fff, 0x0, 0x7, 0xfffffffe, 0x800, 0x8, 0x100, 0x5, 0x5, 0x9, 0x4, 0x8, 0xb8, 0x3, 0x7fffffff, 0x6, 0x3, 0x7, 0x74, 0xc306, 0x6, 0xc2, 0x80000001, 0xb, 0xfffffffb, 0x1, 0x1, 0x9, 0x0, 0x7ff, 0xed, 0x7f, 0xe, 0x7d, 0x4, 0xe6e, 0x8000000, 0x3, 0xffffff00, 0x5, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x0, 0xffffffff, 0x4, 0x2, 0x7, 0x1, 0x8, 0xfc, 0x8000, 0x9, 0x80000001, 0xc56, 0x8001, 0x9, 0x3ff, 0x5, 0x8e4, 0x578b, 0x80000000, 0x2, 0x2, 0x0, 0xffff2b12, 0x9, 0x8, 0x3, 0x5, 0xc, 0x6e8, 0x5, 0x92, 0x10000, 0x6, 0x6e8b, 0x0, 0x80000001, 0xb0, 0x1, 0xe0, 0x2, 0x7, 0xae3f5e1, 0x8, 0x5, 0x4, 0x0, 0x8, 0x7f, 0x3, 0x1ff, 0x8, 0x6, 0x2, 0x80000001, 0x4, 0x400, 0x80000000, 0x9, 0x8, 0x5, 0x2, 0x7fff, 0xc, 0x8, 0xfffffffd, 0x0, 0x7, 0xf7e, 0x7, 0x2, 0x80000001, 0x31, 0xab, 0xffff, 0x7, 0x5, 0x5, 0x7f, 0x3, 0x0, 0x6, 0x5, 0x1, 0xa, 0xe, 0x6, 0x8b8, 0x1000, 0x2, 0x35aac70f, 0x55, 0xffff, 0x0, 0x4, 0x6, 0x6, 0x1d0, 0x0, 0xd, 0x3, 0x0, 0xffffffff, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0xe, 0x3, 0x4, 0x2, 0x5, 0xeb6, 0x6, 0xffffff74, 0x80000001, 0x81, 0xb, 0x9, 0xb8, 0xfffffffb, 0x8, 0x8, 0x101, 0x23d, 0x9, 0xffffffff, 0x6, 0x100, 0x7, 0x5, 0x8, 0xfffffffb, 0x0, 0xfffffffb, 0xd, 0x493, 0x2, 0xc, 0xa, 0x3, 0x7fffffff, 0xa9d, 0x2, 0x3, 0x6, 0x8, 0x2, 0x1, 0x2, 0x0, 0x10000, 0xfff, 0xffffff0c, 0x8, 0xfffffc00, 0x0, 0x1, 0x7fff, 0x10000, 0x1, 0x2, 0x9, 0x2, 0x7, 0x0, 0xffffffff, 0x800, 0x2, 0x80000001, 0xff, 0x8, 0xffffffff, 0x5, 0x5, 0x34, 0x6d18e749, 0x3, 0x59d, 0x7, 0xa, 0x8, 0x3, 0x2000000, 0x0, 0x0, 0x7fffffff, 0x1, 0x7, 0x5, 0xc15c, 0x4, 0x3, 0x0, 0x5, 0x0, 0xffffffff, 0x1, 0x1, 0x3, 0x0, 0x98d7, 0x83d4, 0x591, 0x0, 0x6f7, 0xfffffffd, 0xfffffff9, 0x3, 0x6, 0x40, 0x0, 0x80000001, 0x2, 0x0, 0x1, 0x9, 0x100, 0x1, 0x9, 0x6, 0xfff, 0xfffffff9, 0x6, 0x0, 0x1, 0x8a4f, 0xfffffffc, 0x76, 0x7fff, 0x31, 0x453, 0x1, 0x1, 0x5, 0x8, 0x400, 0x4, 0x40, 0xd5d5, 0x7990, 0x1b, 0x6, 0x400, 0x66e2, 0xf54, 0x8, 0x40400000, 0xfff, 0x6, 0xcf6d, 0x8, 0x24, 0x196]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffff18d, 0x7, 0x0, 0x3, 0x28f, {0xa, 0x0, 0x4, 0x0, 0x9}, {0x2d, 0x0, 0x4, 0x4, 0x0, 0x1}, 0x9, 0xf, 0x67}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1, 0x9, 0x14fe2e5f, 0xe, 0x8001, 0x40, 0xa0000000, 0x5, 0x401, 0x3a83a220, 0x1, 0x5, 0x3, 0xc000000, 0x1, 0x0, 0xffffffc0, 0x3, 0x7, 0x6c3, 0x5, 0x10, 0x6, 0x1, 0x9, 0x10001, 0x3, 0x0, 0x4, 0x80, 0x80000001, 0x1, 0x4, 0x6, 0x7, 0xad, 0x80000001, 0xe, 0x6, 0x4, 0x2, 0x80, 0xfffffffc, 0x1, 0x7, 0x2, 0x6, 0xfffffff8, 0x2f, 0xe85, 0x9, 0x2a13, 0x101, 0x2, 0xdf97, 0x9c, 0x1, 0x80000001, 0xf87, 0x5a7, 0x100, 0x9, 0x4, 0x800, 0x8, 0x2, 0xfffffff9, 0x6, 0x80000002, 0x4, 0x8, 0x7, 0x7000000, 0x4f69ce4f, 0x4, 0x6, 0x8, 0x1, 0xffff, 0x0, 0x9, 0x0, 0x8, 0x8, 0xfffffff7, 0x8, 0x5, 0xffffffa5, 0x7fff, 0x6, 0x5, 0x1, 0xc5f1, 0x6, 0x7ff, 0x1, 0x7fffffff, 0x5, 0x4, 0x4, 0x2, 0x4, 0x6, 0x9, 0x4, 0x3, 0x1, 0x8, 0xe083, 0x8d5c, 0x3cb, 0x2, 0x9, 0x2, 0xf8, 0x2, 0x3, 0x7, 0x1, 0x8, 0xfffffffc, 0x101, 0x7, 0x3ff, 0x5, 0x4, 0x10005, 0x2354, 0xc7, 0x572, 0xfff, 0xfffffffc, 0x3, 0x5ee3, 0x7, 0x1, 0x2, 0x5, 0xa, 0x6, 0x8000, 0x2, 0xa, 0x0, 0x2c6, 0x4, 0x8, 0x0, 0x7fff, 0x15, 0xa3, 0x4, 0x7, 0x7, 0x0, 0x8, 0x5, 0x10001, 0x6, 0x4, 0x1, 0x8, 0x2, 0x3, 0x5, 0x0, 0xba0, 0x6, 0x1, 0x79, 0x3, 0x3ff, 0x6, 0x7, 0x9, 0x101, 0x3, 0x0, 0xfffffff8, 0xfff, 0x3, 0x3, 0x2, 0x5, 0x1, 0x6, 0xffffffff, 0x9d2, 0x2, 0x2, 0x1, 0x0, 0x280, 0x3, 0xff, 0x5, 0x7, 0xd3, 0x0, 0x298, 0x122a, 0x79, 0xa63, 0x4, 0x2, 0x7, 0x1, 0xad, 0x3, 0x6, 0xf, 0x2, 0x1000, 0x10001, 0x1, 0xe8, 0xf7, 0x5, 0x7, 0xffff, 0x1, 0xdf, 0x1, 0x5, 0x7fff, 0x6, 0x4, 0x406c64cb, 0x1, 0x80, 0x7da1, 0x0, 0xffffffff, 0x8, 0x1, 0xffffff7f, 0x9, 0xd, 0x7, 0x4, 0x9, 0x0, 0x6, 0x4e, 0x3, 0x10, 0x13, 0x80000000, 0x1, 0x4018, 0x4, 0x2, 0x1, 0x26b, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x80, 0x94, 0x2, 0x9, 0x9, 0x0, 0x7e, 0x2, 0x0, 0x2, 0x1ff, 0xfe27, 0xfffffffe, 0x4, 0x42, 0x6, 0x6, 0x7, 0xa9, 0x2, 0x9d, 0x8000000, 0x2, 0x9, 0x9, 0xfc, 0x4, 0x3, 0x3, 0x7, 0x40, 0x2, 0x3, 0x7, 0x0, 0x9, 0xe9, 0xdd, 0x2, 0x9, 0x6dce, 0x6, 0xfffffffe, 0xac0c, 0x4, 0x7a, 0xf4d9, 0x9, 0x4, 0x1, 0x9, 0xfffffffd, 0x0, 0xf, 0x9, 0x1, 0x200, 0x8001, 0x4, 0x8001, 0x3ff, 0x0, 0x1, 0x8001, 0xe0f9, 0x1000, 0x5, 0xbf, 0x1, 0xf, 0x34fa, 0xfffffff9, 0x1, 0x40, 0x5, 0x7ff8000, 0x1ff, 0xccdc, 0x4, 0xfffffffd, 0xfffffffb, 0x7, 0x20000000, 0x923, 0x80000000, 0x2, 0x6, 0x6, 0x2, 0xa5, 0x200, 0x51b, 0x7, 0x3, 0x80000000, 0x8, 0x100, 0x5, 0x9, 0x3221, 0x1, 0xfffffff6, 0x9, 0x8, 0xe, 0x2, 0x6, 0x7f, 0xffff, 0x4, 0x4, 0x5, 0x6, 0x1, 0xf, 0x7, 0x6000, 0x8, 0x1, 0x19, 0x0, 0x10, 0x101, 0x9, 0x8, 0x3, 0xfffff000, 0x9, 0x3, 0x8, 0x8bb1, 0xffff, 0x8, 0x6, 0x7fff, 0x0, 0x6, 0x18f9, 0xd3, 0x9, 0x9, 0x8, 0x6add37a, 0x0, 0x6, 0x2, 0x81, 0x3, 0x7c, 0x5, 0x13, 0xc, 0x7, 0x80000001, 0x2, 0x16c, 0x8, 0x2, 0x4, 0xfee, 0x149, 0x7, 0x4f5, 0xfe80, 0x1000, 0x1, 0x7f, 0x6, 0x0, 0x4, 0x6, 0xfffffff7, 0x7, 0xfffffffd, 0xfffffff9, 0xfffffff8, 0x38901ed8, 0x4f, 0x1ff, 0x7, 0xaba, 0x9, 0xc, 0x6, 0x101, 0x7, 0x3816, 0xc, 0xf6e, 0x9, 0x7ff, 0x2, 0x1ff, 0x8000, 0xe, 0x5, 0xfffffffb, 0x7f, 0x1, 0x7135, 0xfff, 0xf, 0x1, 0xfffffffc, 0x1, 0x8, 0xc, 0xe, 0x4, 0x6, 0x6, 0xc, 0x7fffffff, 0x80000001, 0x8, 0xff, 0x5, 0x4, 0x2, 0x4, 0x8000, 0x1, 0x33, 0x200, 0x3ca4, 0xfffffffe, 0x7, 0x0, 0x5, 0x3ff, 0x4, 0x9, 0x8001, 0xc, 0xd, 0x520, 0xa, 0x40, 0x6, 0x5, 0xe, 0x2, 0x8, 0x81, 0x8, 0x3ff, 0x9, 0xad, 0x3, 0x4, 0x4, 0xfffffffb, 0x1, 0x8, 0x6]}]]}, {0xd, 0x6, "2b2cbcf63d6ab5ddd7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x1560}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) capset(&(0x7f0000000440)={0x20071026}, &(0x7f0000000480)={0x5, 0x6, 0x1e000000, 0x5, 0xf592, 0x87923d91}) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000002080)=ANY=[@ANYRES8=r1, @ANYRESHEX=r1, @ANYRESHEX, @ANYBLOB="fe14cf6bf379683621f0dfd5140780783b74cea3c772fa327ea3dd44aa19f48b490f3ece0129339a0f7c82c9e42dadab2c9f141800ce1d66be174f1b0e2e5afa4900e038fa60395b4a3b3b0391e9ea9b7e1739565750b478da62fba9e92332cb3767663e1eb7bdd55f968b9703039ab27531374a93665b4b7aa693e2f4d3618b6380a57e0619141f9c12adf298035df0951eabc49be47e8d38ff3e8fdb20745170764fdaa2fffbcf2e8d30c67b8842dbac755dc33fb6d0fd412f037a9e40f0549fe389e1b017a706b1d4238aed7cfa4e9634b0ba4f47126ff7e3e5a100dad481", @ANYRESDEC=r1, @ANYRES32=r1, @ANYRES8=0x0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r3, &(0x7f0000000700)=ANY=[@ANYBLOB="7f454c46050500030600000000000000020003"], 0x98) close(r3) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbc, &(0x7f00000008c0)=[@in6={0xa, 0x4e21, 0x400, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xef}, @in6={0xa, 0x4e24, 0x89, @dev={0xfe, 0x80, '\x00', 0x32}, 0x80}, @in6={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e21, 0xf56d, @dev={0xfe, 0x80, '\x00', 0xb}, 0x1}, @in6={0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @empty}]}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000980)={r7, @in6={{0xa, 0x4e24, 0x4, @mcast2, 0xfffffffe}}, 0x5, 0x1, 0x4, 0x0, 0x22, 0x3, 0x8}, 0x9c) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) r8 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="7de7f3849fcc049ae009916bde652302268c31f91048cfd946fe09b5c03b47ccb4ca9a8dbe646f6e5f6d6dd9c9536a517daeba501b18ff634b601789484f69b5d02ce5c367c89e3811ee18a5e5e4ac18be21af91bb82fa4f47b191cbdcc3ef5fa4893586093763f1b16347af0a390cf353f651c33dff61e67c9ab1c7143c", 0x7e, 0xfffffffffffffff8) r9 = add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="1537d7b34e3f2aa59f903f5cd50dd9056aae4d07f2db95b420bc00e27c66df6be1b0eed41585c678a6edbd8462c05de1c7595ff36a49713c5c4a43541ca8d05f2ddce3b5a7576f56277e3770a9a6bb13023409498e1f2a159cc4c2d973319bafafdfd939372452d7c5", 0x69, 0xffffffffffffffff) request_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500)=',(-)*}^:\\([\x00', 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000540)={r8, r9, r9}, &(0x7f0000003200)=""/196, 0xc4, &(0x7f00000006c0)={&(0x7f0000000740)={'wp256-generic\x00'}, &(0x7f0000002200)="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", 0x1000}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7m44.603327756s ago: executing program 35 (id=4088): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000009c0)="9ab994209497df12bf343790ec2639acefa4ab13f301deb729ac1f7adde441f171c166b8954a9db4736df223e28eb753575a430f5359f9b374c0ae89bbf578b4be22a9ed273d", 0x46}], 0x1}}], 0x1, 0xc8040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 6m57.033973388s ago: executing program 36 (id=4431): bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/profiling', 0x2, 0x184) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000340)={0x2d, 0x8, 0xfa00, {0xffffffffffffffff, 0x93d192c45c209ba3}}, 0x10) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000300)={0x80000004}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) getegid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000003c0)=0x1002, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r3, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfc, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) 2m9.992269552s ago: executing program 37 (id=5765): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x1c, 0x1f4, 0xd0, 0x11, 0x148, 0x0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xff000000, 'wg1\x00', 'dvmrp0\x00', {}, {0xff}, 0x67, 0x3, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x2, 0x1, 0x3, 0x3, 0x3], 0x1}, {0x3, [0x1, 0x7, 0x0, 0x7, 0x1, 0x4], 0x2, 0x7}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0xffffffff, 'macvtap0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x250) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061041a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @mcast1, 0xffffffff}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)='\t', 0x1}], 0x1}}], 0x1, 0x0) r3 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001300)={0x0, 0xe}, 0x8) 1m48.958838497s ago: executing program 38 (id=5868): syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$tun(0xffffff9c, &(0x7f0000000180), 0x90240, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x11e, 0x1, 0x0, &(0x7f0000000000)) 1m26.960458767s ago: executing program 2 (id=5985): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = getpid() syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000240)="ad000000000037eb00800000f1cfb65c", 0x10) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xc040}, 0x8800) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003940)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x4) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x3e9, 0x8, 0x70bd28, 0x25dfdbff, {0x42, 0x1, 0x0, r1, 0xe, 0x8, 0xfffff000, 0xc23, 0x0, 0xfeed, 0x5}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='contention_end\x00', r0}, 0x18) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$pptp(0x18, 0x1, 0x2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0xc8, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9a}, {0x6, 0x11, 0x8bac}, {0x8, 0x13, 0x7f}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x7}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7ffd}, {0x8, 0x13, 0xf}, {0x5}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000040000701fcffffff0100ec00017c655800001000fe7f0c"], 0x34}, 0x1, 0x0, 0x0, 0x24040011}, 0xc000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_SET_MSRS(r4, 0xc048aeca, &(0x7f0000000440)={0x1, 0x0, [{0xa93, 0x0, 0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x3, 0x8, 0x8}, 0x50) 1m26.806086418s ago: executing program 2 (id=5986): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4000}) r1 = socket(0x10, 0x803, 0x0) r2 = openat$sequencer2(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00000000c0)=0x5, 0x4) ioctl$SNDCTL_TMR_SOURCE(r2, 0xc0045406) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) close_range(r6, 0xffffffffffffffff, 0x2) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000e40)={0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x2}], 0x1000000000000142) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) r10 = openat$ipvs(0xffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x1c, r11, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xe0c5}, 0x80) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r10, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x48, r11, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x2}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9033}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_HEADER={0x4}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x2, r9, 0x2, &(0x7f0000000000)) 1m26.685853061s ago: executing program 2 (id=5989): openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0xc4) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}]}) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) 1m26.571131591s ago: executing program 2 (id=5990): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000077911b800000000001801000020646c25000000000020"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xfffffffffffffffb}, 0x75) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 1m26.050926608s ago: executing program 2 (id=5994): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x10}, {0x8, 0x1, 0x0, 0x0, 0x8, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x3}}, 0xb8}}, 0x0) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) syz_open_procfs(r2, &(0x7f0000000140)='mountinfo\x00') socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x242, 0x100) pipe2$9p(&(0x7f0000001900), 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) dup(r3) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m25.912870352s ago: executing program 39 (id=5994): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x10}, {0x8, 0x1, 0x0, 0x0, 0x8, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x3}}, 0xb8}}, 0x0) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) syz_open_procfs(r2, &(0x7f0000000140)='mountinfo\x00') socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x242, 0x100) pipe2$9p(&(0x7f0000001900), 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) dup(r3) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 36.416092725s ago: executing program 3 (id=6399): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x4, 0x109a00) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x1, 0x5, 0x1010, 0xb, 0x1, 0xc, 0x2, 0x310}}) r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendfile(r1, r1, 0x0, 0x7f03) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000040), 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x37a}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_create_resource$binfmt(0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r6 = getpid() syz_pidfd_open(r6, 0x0) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680500000082762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000280)) 36.151745316s ago: executing program 3 (id=6400): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x181000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xc728, 0x10108, 0x2}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x1}, @generic={0x5, 0x0, 0x0, 0x2}, @jmp, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='GPL\x00'}, 0x90) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) (async) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) (async) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) (async, rerun: 64) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffff8, 'syz1\x00', 0x4}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x24, 'syz0\x00', 0x0}) (rerun: 64) 35.20468105s ago: executing program 3 (id=6405): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000077911b800000000001801000020646c25000000000020"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xfffffffffffffffb}, 0x75) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc000700801956ab00000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 35.135449533s ago: executing program 3 (id=6406): syz_clone3(&(0x7f0000000080)={0x1000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(r0, r0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000900)="d8000000180081054e81f782db4cb9040220080406037c09e8fe55a10a0015400200142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 35.107147533s ago: executing program 3 (id=6407): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x4440, 0xf7fc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x80}}, 0x50) 34.592442492s ago: executing program 3 (id=6409): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$netlink(0x10, 0x3, 0x15) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000280)={0x2d, 0x0, 0x1f}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000840}, 0x41) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) dup3(r4, r6, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r7) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r7, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000120040000000008108000008000300", @ANYRES32, @ANYBLOB="0a0006000802110000010000060066008e8800001c0033"], 0x50}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x402) ioctl$I2C_RDWR(r9, 0x707, &(0x7f00000002c0)={&(0x7f0000000000)=[{0x6, 0x0, 0x1, &(0x7f00000001c0)="84"}], 0x1}) 34.386046392s ago: executing program 40 (id=6409): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$netlink(0x10, 0x3, 0x15) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000280)={0x2d, 0x0, 0x1f}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000840}, 0x41) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) dup3(r4, r6, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r7) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r7, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000120040000000008108000008000300", @ANYRES32, @ANYBLOB="0a0006000802110000010000060066008e8800001c0033"], 0x50}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x402) ioctl$I2C_RDWR(r9, 0x707, &(0x7f00000002c0)={&(0x7f0000000000)=[{0x6, 0x0, 0x1, &(0x7f00000001c0)="84"}], 0x1}) 25.846798171s ago: executing program 8 (id=6491): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x1004007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000000)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c80, 0x0) 25.7534509s ago: executing program 8 (id=6493): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) signalfd(r2, &(0x7f0000000000)={[0x24, 0xffffffff]}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) preadv(r3, &(0x7f0000000540)=[{&(0x7f00000020c0)=""/4083, 0xff3}], 0x1, 0x200020, 0x0) mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x2000000, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=virtio,version=9p2000.u,directio,cache=loose,access=', @ANYRESDEC=0xee01]) utimes(&(0x7f0000000640)='./file0\x00', 0x0) 25.657073652s ago: executing program 8 (id=6494): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newtaction={0xd4, 0x30, 0x1, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_ct={0x68, 0x2, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9f, 0x11e41e7a, 0x20000000, 0x0, 0xf}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_LABELS={0x14, 0x7, "93f3fc7c3c7800e7ddf6b4b05ee0ef96"}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x6, 0xffffffffffffffff, 0xb}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x844}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r1, 0x1) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x24008818, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r5, 0x0, 0x7ffff000, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000440)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}], &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, &(0x7f00000004c0)={r6}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r8, 0x6, 0x6, 0x0, &(0x7f0000000380)) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x14c}}, 0x4c0c8) tkill(r3, 0xb) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000300)={0x0, {0x7ff, 0x6, 0x7, 0x1ff}}) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 22.230098537s ago: executing program 8 (id=6510): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) umount2(0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x4440, 0xf7fc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x80}}, 0x50) 22.13668219s ago: executing program 8 (id=6511): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) dup2(r0, r0) clock_gettime(0x0, &(0x7f0000000040)) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) socket(0x28, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$pptp(0x18, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 21.534118833s ago: executing program 8 (id=6512): ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="580100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000002021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0a010102000000000000000000002000000004d632000000e0000002000000000000000000000000000000000000000000000000000000000100000000000000010000000000008001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f0000000000000000fdffffffffffffff0000000000000000000000002cbd700000350000020000005000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r2], 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 21.395148991s ago: executing program 41 (id=6512): ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="580100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000002021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0a010102000000000000000000002000000004d632000000e0000002000000000000000000000000000000000000000000000000000000000100000000000000010000000000008001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f0000000000000000fdffffffffffffff0000000000000000000000002cbd700000350000020000005000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r2], 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 14.196700407s ago: executing program 0 (id=6562): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='ext4_sync_fs\x00', r0}, 0x18) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x2, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180008000200000000000000000000e4ffffff00"/32], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 14.131198675s ago: executing program 0 (id=6563): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x14, r1, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) read$FUSE(r2, &(0x7f00000034c0)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1, 0x8, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044880}, 0xc010) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d14, &(0x7f0000000000)=0xb) 14.129573134s ago: executing program 0 (id=6564): r0 = syz_open_dev$cec(&(0x7f0000000280), 0x0, 0xc0240) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="beef915d564c90c200"/24, 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aa4a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x48}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538", 0x58}], 0x2, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000000c0)={0xa, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="66a896f65b64882885602fe70ca670a787231baadce98457643205c05e79aa925ceb2640b4595b2c49be2d1d8539b9457bec26e07a0b03bd4cf386d84864ef03ca672c1a8612b9f28dabde4a8037e35f486ddf456767fba8576e7660d751ed505496025eb89ac72804931a408afce008af82952b8ef5de4b9459139c52bb9f2aeb42550bc1e20813777dadc682779fda76608c2ba93c3414e09f", @ANYRESHEX=r2, @ANYRESDEC=r0, @ANYRES64=r2, @ANYRESDEC=r0, @ANYRES16=r3], 0x10}, 0x1, 0x7}, 0x40000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)=0x5, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') r5 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) fsopen(0x0, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_open_procfs(0x0, 0x0) read$FUSE(r6, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r7, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRESHEX=r4], 0x8) syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10000000}}], 0x1, 0x8014) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$SIOCAX25GETINFOOLD(r8, 0x5411, &(0x7f0000000000)) mmap(&(0x7f000002b000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x8010, 0xffffffffffffffff, 0x525dc000) 13.750313747s ago: executing program 0 (id=6568): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) (fail_nth: 2) write$FUSE_INIT(r0, 0x0, 0x0) 13.634981532s ago: executing program 0 (id=6570): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)={0x24, 0x11, 0x1, 0x0, 0x0, "", [@nested={0xc, 0x3, 0x0, 0x0, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x514}]}, @typed={0x8, 0x36, 0x0, 0x0, @fd}]}, 0x24}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000380)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'veth1_to_bridge\x00', {0x2}, 0x102}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000a80)={0x0, 'veth0_vlan\x00', {0xffe}, 0x2b1}) 13.28736963s ago: executing program 0 (id=6575): r0 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r0, 0x0) 13.206561367s ago: executing program 42 (id=6575): r0 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r0, 0x0) 12.25359943s ago: executing program 9 (id=6592): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000077911b800000000001801000020646c25000000000020"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xfffffffffffffffb}, 0x75) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019fd8061500000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 11.962570787s ago: executing program 9 (id=6593): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r5, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='xfs\x00', 0x400080, &(0x7f00000001c0)='discard') setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4004, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d5cb90fc3970eeccc14e036cffcd4a71fe140efe5224d16468fa25518532bb10242903a578802b3bd61f26d23993cf629048dfe8a6f3b2b14a1bb41e42f749a4976373906b21948749fed4c120945d038f1ac85ec739e0a0ae60508adda42828567a23dd5a13a73bcbd646f2909d35fd4afd64e4eea0a83e79f338ce3b9df389736e9f276be24dff313bf80ba8dd60c8997e1a16f0d84c5d9b54782c9474acbcefcbbd45032eaa52adb0651744ebe251e01f3ae4812f3c0", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r7, &(0x7f00000021c0)={0x2020}, 0x2020) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 10.993677167s ago: executing program 9 (id=6601): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x60000000, 0x0, 0x18, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x50) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) sendto$inet6(r0, &(0x7f0000000b80)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x5e2, 0x2001, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_open_dev$hidraw(&(0x7f0000000000), 0x5, 0x10400) read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_INIT(r1, 0x0, 0x0) 10.932872846s ago: executing program 9 (id=6603): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x8c) write$FUSE_INIT(r0, 0x0, 0x0) 10.854928732s ago: executing program 9 (id=6604): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000077911b800000000001801000020646c25000000000020"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xfffffffffffffffb}, 0x75) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc00070080194b5344520000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 10.380634063s ago: executing program 4 (id=6607): ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="580100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000002021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 10.293175128s ago: executing program 4 (id=6608): r0 = syz_open_dev$sndctrl(&(0x7f00000014c0), 0x2, 0x181802) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, 0xfffffffffffffffe) 10.292989278s ago: executing program 9 (id=6609): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) (fail_nth: 5) write$FUSE_INIT(r0, 0x0, 0x0) 10.292318376s ago: executing program 4 (id=6610): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x81, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xc0, r2, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xbc}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xffff9a02}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xd}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0xff}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x2}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x3}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x9}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x3}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfffffffc}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x23, 0x24, [{0x5d, 0x1}, {0x48, 0x1}, {0x30, 0x1}, {0x1b}, {0x30}, {0x24, 0x1}, {0x6c}, {0x3}, {0x48, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x36}, {0x37, 0x1}, {0x6, 0x1}, {0x60, 0x1}, {0x18, 0x1}, {0x6c, 0x1}, {0xc}, {0xc}, {0x18}, {0x30}, {0x2, 0x1}, {0x36, 0x1}, {0x24, 0x1}, {0x4}, {0xc}, {0x6}, {0x33}, {0x12}, {0x5, 0x1}, {0x5}]}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x484}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x41) (async) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000200)={0xd, 0x81, 0x7ba3, 0xb, 0x2}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)={@empty, @broadcast, 0x19, 0x20}}) r3 = openat$hpet(0xffffff9c, &(0x7f00000002c0), 0x42000, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000300)={0x11, @local, 0x4e22, 0x0, 'wrr\x00', 0x20, 0x7, 0x65}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000340)={0x3b, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x4, 'sed\x00', 0x20, 0x3, 0x72}, 0x2c) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0xa, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000480)="94a9f8dcbf099d4c579089baa44fed3facc2ba0b95ec8577b28567081a7460", 0x1f) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'pimreg\x00', &(0x7f00000004c0)=@ethtool_sset_info={0x37, 0x67e8, 0x5, [0x7fffffff, 0x8, 0x4, 0x81, 0x8, 0x8, 0x1, 0x36, 0x4]}}) (async) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000540), 0x4) r5 = getpgrp(0xffffffffffffffff) r6 = syz_open_procfs(r5, &(0x7f0000000580)='fd/3\x00') setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f00000005c0)='wg0\x00', 0x4) (async) getsockname$packet(r6, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000700)=0x14) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r3, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000780)=[0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0], 0x0, 0x29, &(0x7f0000000800)=[{}], 0x8, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x7d, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000a40)={'wg2\x00', 0x0}) sendmsg$inet(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)="62e8557e971bcd3839a06b97392d58e376d11fe2b3bee611b631be4e3768b2b4c18910a8e743dc0aec879e9d11162e2e2810929290a48d98c3d029b4153e19692bfefad639e8cfdf3a0f5ae225dfd77ac60db91c9c563f77d7068d08e6d4", 0x5e}], 0x1, &(0x7f0000000a80)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r7, @loopback, @loopback}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r8, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r9, @private=0xa010101, @remote}}}, @ip_ttl={{0x10, 0x0, 0x2, 0xb}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x3}}], 0x68}, 0x80) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r10, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x64, r11, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, ')\\%,}'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) (async) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000cc0)) (async) socketpair(0xf, 0xa, 0x9, &(0x7f0000000d00)) ioctl$I2C_TENBIT(r3, 0x704, 0x0) (async) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000d40)={'veth1_to_team\x00', {0x2, 0x4e24, @loopback}}) 10.21804212s ago: executing program 43 (id=6609): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) (fail_nth: 5) write$FUSE_INIT(r0, 0x0, 0x0) 10.173221888s ago: executing program 4 (id=6612): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x700) write$FUSE_INIT(r0, 0x0, 0x0) 10.120974026s ago: executing program 4 (id=6614): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x840, 0x191) (async) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xa0000000}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r3 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 7.889774606s ago: executing program 5 (id=6619): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x6}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x64102, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000240)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x81) close(r6) r7 = socket$caif_stream(0x25, 0x1, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) write$FUSE_DIRENTPLUS(r6, 0x0, 0x520) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x541b, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r9, r6}, 0xc) 7.825447451s ago: executing program 4 (id=6620): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=@FILEID_UDF_WITH_PARENT={0x14}, &(0x7f0000000280), 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0xebc, &(0x7f0000000340)={0x0, 0x855b, 0x4, 0x1, 0x15}, &(0x7f0000000040), &(0x7f00000000c0)) syz_io_uring_setup(0x6057, &(0x7f00000003c0)={0x0, 0x5185, 0x4000, 0x2, 0x390, 0x0, r4}, &(0x7f0000000440), &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000f0001000000a0bae040936e7de1b53964d2ada98bfc8bbb27d1a47023497eec69a04fc99c840fec066f4cd3f901cb88e7907fd9da0fb2c7087f333c5167cc68bc7c69c0b0e34981c1438ae1b0a4c2"], 0x3c}}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioprio_get$pid(0x3, 0x0) 7.765165573s ago: executing program 44 (id=6620): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=@FILEID_UDF_WITH_PARENT={0x14}, &(0x7f0000000280), 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0xebc, &(0x7f0000000340)={0x0, 0x855b, 0x4, 0x1, 0x15}, &(0x7f0000000040), &(0x7f00000000c0)) syz_io_uring_setup(0x6057, &(0x7f00000003c0)={0x0, 0x5185, 0x4000, 0x2, 0x390, 0x0, r4}, &(0x7f0000000440), &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000f0001000000a0bae040936e7de1b53964d2ada98bfc8bbb27d1a47023497eec69a04fc99c840fec066f4cd3f901cb88e7907fd9da0fb2c7087f333c5167cc68bc7c69c0b0e34981c1438ae1b0a4c2"], 0x3c}}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioprio_get$pid(0x3, 0x0) 6.957563183s ago: executing program 5 (id=6622): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x4, 0x109a00) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x1, 0x5, 0x1010, 0xb, 0x1, 0xc, 0x2, 0x310}}) r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000040), 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x37a}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_create_resource$binfmt(0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r6 = getpid() syz_pidfd_open(r6, 0x0) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680500000082762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000280)) 6.75278689s ago: executing program 5 (id=6623): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) dup2(r0, r0) clock_gettime(0x0, &(0x7f0000000040)) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) socket(0x28, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$pptp(0x18, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6.683335174s ago: executing program 5 (id=6624): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0xf00) write$FUSE_INIT(r0, 0x0, 0x0) 6.614220866s ago: executing program 5 (id=6625): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000077911b800000000001801000020646c25000000000020"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xfffffffffffffffb}, 0x75) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019ffffaa550000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 6.274811835s ago: executing program 5 (id=6626): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x10}, {0x8, 0x1, 0x0, 0x0, 0x8, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x200000000000000, 0xfffffffffffffffa}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x3}}, 0xb8}}, 0x0) 6.23524539s ago: executing program 45 (id=6626): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x10}, {0x8, 0x1, 0x0, 0x0, 0x8, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x200000000000000, 0xfffffffffffffffa}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x3}}, 0xb8}}, 0x0) 5.299558234s ago: executing program 6 (id=6576): r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xc000000b}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) close_range(r3, r4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0x8800000) recvmmsg(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001b80)=""/112, 0x70}], 0x1}}], 0x1, 0x700, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r7, &(0x7f0000002080)={0x2020}, 0x54) 3.75578122s ago: executing program 6 (id=6628): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00'], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='mm_khugepaged_scan_pmd\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount$binderfs(0x0, &(0x7f0000000500)='./binderfs\x00', &(0x7f0000000540), 0x3000002, &(0x7f00000005c0)=ANY=[@ANYBLOB='017777\"77777,\x00'/29]) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x20, 0x700, 0x0, 0x676, {{0x1e, 0x4, 0x3, 0x8, 0x78, 0x65, 0x0, 0x6, 0x4, 0x0, @broadcast, @broadcast, {[@lsrr={0x83, 0x17, 0x81, [@multicast1, @multicast1, @multicast1, @broadcast, @rand_addr=0x64010100]}, @ssrr={0x89, 0x1f, 0xfe, [@loopback, @local, @rand_addr=0x64010101, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @noop, @rr={0x7, 0x27, 0xb8, [@private=0xa010101, @loopback, @multicast1, @local, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast2, @empty]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000048c0)=@newtaction={0x6848, 0x30, 0x8, 0x70bd28, 0x25dfdbfb, {}, [{0x2274, 0x1, [@m_sample={0x1048, 0x19, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x8, 0x20000000, 0x8, 0x2}}]}, {0x1004, 0x6, "ee1cba566b0d7faf569b0d5aab04968aef561a38bd23faeaba72b1674516d604261a79fb12e2943de3680a46b412269d2de20b719dec58aa24726956c200efb204061b4ad2218ef0d2600b677858023ec5f3b824430d693404eb0c72f0ff5b9714ac7d7c347475a536f087c1e2cf57f0c51ef734348c6c92575c4222c52d01b4b7a651cd8299a3631f7ab303e65a22a27ca1a5decd5c7cfbf7f083d805df7bcae79c11addaa6489484fdd76a1ca4bb77190e70e0689125e4671fbd2748bf117e1083c8422231bdd79db30164ffeefae78ca828ce3a0a593eb6b75a26117addde2e87eddbad3603eaa31baa791f621f8ec991ce592391b850a453a5820b748cb893e4791102c9b231d57be2c84f2270f20cdb93a046377fb0c8742c28fc00af6abfc9d08c4e6d3e56a806f1fe378365691b6bfa8ced46738e4a80974ffbe3fe577ba247f10fe136a417256058be8899aa64e960226bb2eca2cf57a3c97c5516c2587fca47ab5dc62ac87122060d95d4c8ee69a2e13f1cbc641f2613b3a18e7136a956a04fce5ca3be77ce4b0481414496c7cf82eb2d3284f17ba02bc8e98465c9ef085e4dd4fe6605e667cdaeb79643716aa2aa9c50201f5da61d587a2c912723f1162d43330c1c1772070b74dea272b7009cc674633ebed3521a083926ac42154e88ed777516e81ea78c812ba980790ff97c8c1ee92d2cbc392d36c8b3f80fa7f6ef44781ebddafa4fded10bfefe2d68fc45f5dd0050a3945eaad18962ed95b25d74acbdac0bcb6d88d587486f05f73aa424f9decc9a744103f2cdef33900bba197a70d97f3295356ed365cde64c214fb1e542dce76e881adcdb3f4172c81587c61e40cb2feb62433dddb14fcd13df051973b7886ba547809d79d8671de39afae36764b4c4d4599fcd2a6cc8c5c72b9e19b4c83e3b2707c830e1240e0571f4499ce319540cbc2256518608a421ecc22bbca72ca25b3e326af1f2dabdae132d581ee81fdf10c5c5564e2ede3b4a8382ec41e94a62d0a09f7474b429d0a1df572a5e5169480d07a2dd4d051eee93494fbfb7f467bbd3f111e00f2a64870a254a61ab0a2967c532c2b1b91098526d6f6f28b566d0ac0943a141190d0619cb0f7d3decc588180ebe2840485f0fd0785dd4215b8643e7c806498124e2fc99c34ce425c292ffa615d084175cad6bed51531ed44be8d4936b37823989145571427304b5332bf745a699a05d96bfa48f63e2ba22625abf8603af9c2ab86a05ae4f7d7d9fcfeaff05f5a9fbf0868e780feb824db566def451fa3863a320647968abc41fa64160a6d71f72cb1fee9039e2979e1c5933fd068506f95ef2aef55085f938ae1aaa87efd8ff2168fadc13f9e85282dc1cc1c0ca5efbcd2ae57c62e17fc9bbba2b43e13819bf745e1742c0b9ab12e6761ff9e03d977b92f81e7e79ce0773f9133ec715413cb939f7f847ddd91c1d4e96b50355a77988e49069ce128bc5e39492613ee3aa03b9265b13482482e5bc3dc77edab239ec56cc917a5b5098367dbb7223aa48fdb8feb025f00ea50ea5193d5cdda24fb0e9d4418cbe4592761fe560fb15c39060f2514531d2185a1f536f6fdb00fa2908f796492efe086748077cf99518970f186c91cf1c24003fb375b347b822c3c9c8cc9f69eaffe2547eac9ff73d662fd6b77483906ed176853260b5cc13d08b843c8e46a88da8fa2ed2ababad26e27873c93571693d9cd05f441e98d93ec88d61105a7d47a20574b47b16cbec7cbf8426758f33546cf70fe92aa747f55ad3e00b207440c63d8ef866cebe1c0630120313354a539ee94aa5871eeff33525d0e6f3b89d7aeca4e9eb229a872f4ba7b59e2235b83f4d3adf97ac4ed5486581d34a89467ba3589ad0c872f523c5146725d043fb47f3f9aadf80793f2c7fcc7a2a171103d1aa0f91341b722d19cb639f07e8cbb6761b96f346cedde4e38f5589b07b943c6a36f2864bdf1e74ea63edadc8c6824116b5bf8a765d1738c064511af09edaf7e072db504107fcd976c1976c7ab4c370de9c248147ad4e41cfffbecb894e046a22ab05caf7e6cbf674d3b98147fb82cae227e60623679fbd368e66d0893d37facce40d93f606d50e949b16780db28d67060479372994ecc4679919a2e29d787770c896f88c5c8952d56b669c9c3487e340e60ce52b1f3149665d385f630f09983c44b291973ff50c1727a250cf58d5cbb8bee2e680fce40aed090c676975688130856a33b741792c17910291c4b582a306ef0170dc90811d070a3b3461050ddb77daeb1728594f81b226930a413f594dbd0aa208d912f48f4a676219a35d90453e5babffc15959a2c87821b7c8942597f5909106cf6f610331282a6b877b006f98e2473ae6c6f64db57bd774c4399c93f59197cb5ee715a2f2b41e750fc965ac442029e2c6da246d2730fad38f19aff6bb67ddd7e251061f65e4afba7c70047a602c56e40e8ab0a7392f237e679956a48c9b00329336b94bc2db53383cd67b5a076fef791a7d1298645ed680d2b955ecfb0036686f118fea08a27f372820701529e873b5e059f1ddf413831bd7d6d93f0aa5814e61f78413a4f1656bde316830490061e85b3478fbd6da85cbeb8febf7b485f26242a16b20740debd672cfd6f6e4cc2c9068435f403a0e3a4e37743b582f15c335bcaf773e74e84b63f135f8f6c7a9ae8bf3fbad7bbf950f17b7c69349858c968b976ea72feb2ef9f50152dba03b4e2a62ce426585c845904f3bcb774762918c27bb5f0622cd82f6018bd63d6d3d0522cce7d1142f6d5654255dda80dcc8db1370b1a4be08fc7dbaab4f2356192caeee29b700c6f08253917881ffb21a2f20b7cc4226c3700b8a49141d4290361667ec4239900f300c5a48ceedff4659f72cf1372668bee297232960ced623779800ca2d4e3a0703bec224c633abea533d10ee971d8016276b5ae30d590fd0a62317387755370618aeba69731d6b996e35c3388a7c47f9df94ef7c686964065bc04b7d7fbeccf4418bdba9870af9b216ddf1b258af998dc59e726e9d5d410d779ce1a75a75b1bc8f6617381abbc601b0b5aa902e88d7069a85cbfc788c1f47c3cef0bf4dcc109bbfc0eebfbeaa84f5e1903dbe06f250606d8f0379f15549a6ee214ea9b5800ae0b848618d3841e524fa78e00dfbdedc605e96cf6ff783ee20be3774dbd5c90a4787801e34823f74bb4ca9beb4be981904f719acbf19f3816e4afd775a9d93387479ece3ff0e4eb9d585c8ae334b294f3301e52acf579853ab8b79200eb7114bd6e61392f6b9797eccdfdf76d8ac7f545a6de86e7ca03737254b8093f4fd22cd2750578fd94ba6afb35c412449ccad0f82c8f402f3a54998c5a0de243c52078ee05d3e6b6f4f21be51015bf6b4ec904db6fce40b13d1a87b0fdcff51a693b1a17781d8218e45733780171c1e300852fac56080cb82164c23f64bb11692eb6301d3dc750b96e8077717fc48c15202ef383010ccacc4328e817bdaaebdce274a51919a7bca52b16690a1d504e5846565f84855a093c47e6d39dceca3266b00f78b571ff3a6e626bd1637a64bcdff7243703a32b57a1336d41a15f79bd3208300fe9ecd3ca9fbfbe46ac8d1dc8a9e15fd995b42fbe2e48be58b26138beb7a1a1d3d7ea05739502d32192f73668c91c05ccf53d363cd3d46ddcf97f98dce9f8fad4545dcc17ae6fda0e952556b385f3623e53e33dba1a4f68d36e5cac32e66835dbc408f223cd1e0a490f2bccccf5b63bbc671788068cb3e254536ea0226230327985174be08d1477c92cf4cecede8c314c8c9e2dcbc2fe75544dda42f5595853f5813741bea3ea082e5922b0fe9a00f335de067ccf273004c0ed2d748c64010cee37abceb7534cf2b419759cb61157ec1d7172f0de967b0f373073eb7ab3ffa172187ae6dd9ae7f446fea91963355f4d8fd26ddebf01e734604da06960a1acb82df30fa207539bebbcafba63459da13d3616b2ed1b69b51448b59ea1f863f1f1fde52a3a3881b267009859ff398e759f67e9b1570c730d41b53d866e741615acba357d3f2974f7cba981c40b7428d38a8b23c5f888093d97f0f334fccc6d6f36e975e2a16daaff2af62bcae78f77a8fd290be25b9f1946a33501b6bdddb876dae92ac840a772144bcf2251660dad3a25881063ae23ba9087ea1de4fdfe1ea0a903b182071b607d59609a11fc978214395c22107760e8f8839488670504c3ba89d13bb1fd23c4195be9e0f2ecefcb3d15e85e05ec7ff46dc4a3b1d96aa72f4c61f3859f0519c2fdbe7738b235ce7b492f4dc82087af0f0fba33bbb9ba8291fb9f5acda9be882d825eb5e0123c7e80c0a04b3effca7e5a7c73f36a4aa630281256565fbe6f8236801e2e6605dcfa4eca5176833f337670689604cf529c65f99dee54e9e8ebb57eeeeeb52f92333e6b3a5cb05d60c4e06ce2497d08fb714d8c58e36477f7908847b784447e010da6bdbd38ccad9590dfb65957dd6764799f31198cd5131165f0a1fc68363c482f86e9be43d0166105147bdfe1454ecb3e5006a81e79d5ec8b4c9394af1d1f749873f170ef0cf6ff3c116ac950c7cd3654d30fb7f00d551434448ef34192b055240acaff76e0e8b3c879d7b66dbf5881255f1ffdb6ab0f99e679946c36f19870a849336088ee91a36ac80838420c418ba79f26df4eb07509df2b99073e03667ca8549385216d613a78d5c822533be3649ea07f9dbed7e6fdb71dbb4d308d790700b788042fc7c9409d060d35b75e92518090f9e03c79f17a0cce6e74af84ade8c5c1b5372dc0b2c897ed9cb35f3c6588f2d4eb23684fb00f68187c589ee9376c411efeb99efa276512fa3d5c0039d3200961a8afbb1de6d7de12921d69e03756ae0804c08166866a2de90df3a195bc9abc35ac9668794d559a8a0c478963095a4f67238133323fce64848a3b8592521c3105d3286a54efa85ce71085cf8c82a4c5cc8c0ce0fbffb0b35d8b223843497e22ec8195e8a1b9396b3a8e23859000ce8ed2894575d71eadcda10a1c5654d6966eb6e9ec644a70a8cecb455198dc1e3e1339a3602b60c0fc7ab8241cabb66a7b716c0f1d665d1f5e6e3cef141c343ec04469ed85860cddc37dab8b7fe0e266d3be2ff3fa07a566ce5a5ff3bbacf000d81ffbda292e049a79191bde18b86b4e686b57cd5491eb7a7140b57ffb694f4e91f783a58b6e974f7a7dc294f04bf933ddac6921451ffeb886e7498a4b7a664fb01a482bfa264e5d1a5e4e8b28122932c3bc97a5e3257b4f722f9cc7eca8c127efc9277ff946c5ea0245f76c55c4926e8a97cbc006f5bb39d056bc4c0e7003936fb2feb31be507fa80781340785326e10c3406e608d1f40d55a16549f368648b78f51caac5660f02be4de71a7f78c45b4f1e858a97bf5bb399ea6135a93965c97f0a5027d8e96b39bcca2994a6296612631112e1937d7085053109ab65af5c0b9e764c6b860e5f10e7c845f35cd374b5641f6457943085a6c43d0217b27189530f1ce1808ce89958d196528845b7ee7bb86746cb28d9931e69a4b2130c2c1ed7e6bd0eeceec1f325e34708d7c3374ca3ed32771164634594f698290fc57dc5003485247d411cd93f459ce48f31aa1cc7c0511428686417b869e8ccc33abcc012089571ded3b3d833e76fcc4027290e5a2ac4b45ad84906c5522ac24ffb3efbfeaf9986856f011d104cda84184c4853239cc15b9e7e39dbefc8a30a20aa589a8d8f1438c7677f586e3b4ebf58fb9914ff47aea1a3134eb3549d385a2ea3e28"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x1c0, 0x7, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x4, 0xca, 0x8}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3a, 0x7, 0x90cc, 0x2143}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x4, 0x10000000, 0x9}, 0xede}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x812f, 0x8, 0x6, 0x4, 0x7}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x400, 0xcd46, 0x2, 0xfffffffd, 0x7}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x8, 0x2, 0x7}, 0x81}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcb, 0x10000, 0x0, 0x4, 0xffff0001}}}]}, {0xcb, 0x6, "903cf70d46a730ccedeeb44f938096daa28598ba9e453027b13c83edf15a5f1d6acc2d29daccf94484461cf4b25dd48432a65c6633cc5e23d482351d9b14069393ed92dd5aaf057d3d0d72a21eddfb7500115fc412181dd8734493db1d3be24670e9fc0a2dd3e7e1ace250095be421aa26cc929da1392f068bcda3c6caec43d1d18155604b9d62a7a0ae3b59fe516171e4f554dec2dd6681aad635c2e875406e98b78358398c2f19a6de1f58c4d319873e511908d74a2fef61a54e2c8bfdea30ef49f296c14853"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x1068, 0x18, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff, 0xe}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x1, 0x5, 0xea, 0x5}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x47}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x2d24, 0x1, [@m_skbmod={0x7c, 0x7, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, {0x18, 0x6, "4ecd3f3f2071d2407693331d40097bd5ba86452b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0xa4, 0x7, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x19e0, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffff800, 0x4, 0x3, 0xafa5, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x14f, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x20da, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xc82, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x4639, 0x7, 0x200, 0x9}}]}, {0x15, 0x6, "f423dba8591d23321b1185d17420da7743"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mirred={0x158, 0xf, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x1, 0x8, 0x18120, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x5, 0x10000000, 0x7, 0x3}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7c64, 0xef, 0x10000000, 0x448c, 0x3ff}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x8, 0x7, 0x3, 0x7}, 0x4}}]}, {0xab, 0x6, "00aef8fdcf720fb5530c0ebdb299b077cf9d829f4ccb1dbdc3cb23acf4f3db67853302d33f55cf7562799d761380df120661221c813e7c37db90948f9e3463880911dcbc4ac7cdfd3c1e37ddbf66d3c001fcba31af8a5a4fc24c56596f08f2c7257f963d1318db6af8f84b8b17aaa252f1f3398879b964ffe3bbf8876a8fdf3f935e213e9246d83215be467ffbf80e715ff816fff16c7447a0f167fe27a9bba6c0a9ab7d56b5f1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0x2aa8, 0x1, 0x0, 0x0, {{0xb}, {0x2a58, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x10}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x77a, 0x3, 0x7, {0x73, 0x0, 0xa, 0x3, 0x7, 0xffffffff}, {0x2, 0x2, 0x0, 0x1, 0xff, 0x80000000}, 0x9, 0x40}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x4, 0x80000001, 0x7, 0x0, 0x8, 0xd4, 0x3, 0x7, 0x6, 0xfffffff8, 0x7, 0x0, 0x1, 0x9, 0x59, 0xffff3694, 0x6, 0x80000001, 0xa, 0x4, 0x7ff, 0x2, 0x8, 0x100, 0x7, 0x9, 0x400, 0x5, 0x7, 0x6, 0x80000001, 0x21, 0xe42, 0x10000, 0x9ffe, 0x2, 0xd, 0x0, 0x9, 0x0, 0x7a2, 0x2, 0x172, 0x1000, 0x1, 0x2, 0x4, 0x1, 0xb, 0x40, 0x6, 0xc2, 0x4, 0x3, 0x0, 0x8, 0x2, 0x5, 0x3ff, 0x7, 0x800, 0xe, 0x5, 0x3, 0x120, 0x729, 0xfffffff9, 0xffff8001, 0x6, 0xfff, 0xfffeffff, 0x4, 0x9, 0x8, 0x4, 0x8001, 0x68, 0x6, 0x8, 0x8, 0xf0, 0x5, 0x1, 0x4, 0x5, 0x8, 0x7, 0xd, 0x8, 0x402, 0x62, 0x14d07567, 0x1, 0x0, 0xf, 0x6, 0x3, 0x6, 0x9, 0x2, 0x5, 0x41, 0x7, 0x8000, 0x5, 0x1, 0x9, 0x10000, 0x100, 0x8, 0x5, 0xff, 0x3, 0x9, 0x7, 0xfffffffd, 0x6, 0x7, 0x3, 0x5eb4, 0x23, 0x7, 0x2, 0x4, 0x4, 0x1, 0x8, 0x39c, 0x9, 0x1, 0x7fffffff, 0x2, 0x8, 0x6, 0x4, 0x1, 0xff, 0x7fffffff, 0x4, 0x1, 0x2, 0x6, 0x2, 0x4, 0x8, 0xb, 0xc, 0x7, 0x8, 0x3ba, 0xd1, 0x38, 0x39, 0x4, 0xfffffff9, 0x8, 0x4, 0x4, 0xd, 0xa, 0x6, 0x7, 0xfffffffa, 0x6, 0x7ff, 0xfffff800, 0x7, 0x10, 0xff, 0x8000000, 0x0, 0x9, 0x4, 0xc3, 0x3, 0x8000, 0xc, 0x10, 0x0, 0x80000000, 0x7f, 0x80000000, 0x5, 0x5, 0x4dd, 0x98cf, 0x4, 0x101, 0x6, 0xa2d, 0xfff, 0x94d5, 0xc, 0x0, 0x732abe48, 0x40, 0xd1bb, 0x80, 0x7fff, 0x8, 0x2, 0xfffff001, 0x1, 0xfffffffe, 0x4, 0x3, 0x2, 0x5, 0x5, 0x7, 0xffff, 0x8, 0x3, 0xe, 0x9, 0x2, 0x36c, 0x75f, 0x8, 0x3, 0x634a, 0x7, 0x3f68, 0x5, 0xebac, 0x80, 0x2, 0x5, 0x5, 0x5, 0x1, 0xf, 0x7, 0x100, 0x0, 0xab7, 0xc, 0x10000, 0x3, 0x5df9, 0x3, 0x4, 0x3, 0xfffffafd, 0x3, 0x9, 0x9, 0x10001, 0x9, 0x200, 0x4, 0x9, 0x1ff, 0x8000, 0xfffffffc]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x2, 0x0, 0x100, 0x2, {0x6, 0x0, 0x6, 0x6, 0x0, 0xfffffffe}, {0x9, 0x2, 0x3, 0x1, 0xe2, 0x1}, 0x4, 0x7fffffff, 0x1}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7f}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9000000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x1, 0x6, 0x7ff, 0x80, 0x2914, 0x401, 0x1, 0x2, 0x36000000, 0x1, 0x9, 0x4b, 0x2, 0x1, 0x7, 0x6a9, 0x6a57816e, 0x5, 0xb8c5, 0x7, 0xffff, 0x7585, 0x3, 0xfffffffa, 0x6, 0x7, 0x7955930, 0x101, 0x1, 0x3a, 0x6, 0xb, 0xfffffbff, 0xb9, 0x2, 0x9, 0x5, 0x7, 0x9, 0x1, 0x5fa4, 0x7, 0x9, 0xad9, 0x3, 0xd4, 0x3, 0x8, 0x7, 0x7, 0x6, 0x0, 0x1, 0x3b7, 0x8, 0x1ff, 0x7107, 0x2, 0x0, 0x9bd, 0x3, 0x7, 0x4, 0x7fffffff, 0x300, 0x6, 0x7, 0x944, 0x1, 0x1, 0x0, 0x3b79, 0xd9, 0x20, 0x4, 0x9, 0xd, 0x2, 0x9, 0x9, 0x9, 0x6, 0x7, 0x1, 0x7f, 0x3, 0x6, 0x0, 0x400, 0x4, 0x8, 0x3, 0x5, 0xd, 0x2, 0x4, 0x5, 0xf, 0x8, 0x200, 0x0, 0x5cc, 0x5d90, 0x200, 0x0, 0xb392, 0x0, 0x4f, 0x4, 0x4, 0x0, 0x9, 0x405, 0x2, 0x3, 0xb, 0x5, 0x800, 0x4b, 0xfffffff9, 0x1, 0x9, 0x5948, 0x654, 0x7d, 0x5, 0x9b, 0xe, 0x6, 0x1c0, 0x8, 0x7, 0x9562, 0x2, 0x8, 0x1, 0x2, 0x7ff, 0x0, 0x7, 0x7, 0x3ff, 0x9, 0x4, 0x1000, 0x9, 0x2956, 0x6, 0x9, 0xd952, 0x3, 0xe6, 0xffffff01, 0x8, 0xa2a, 0xf1ba, 0x2, 0x80000001, 0x1, 0x0, 0x4, 0x3, 0xa37c, 0xf3d, 0x1ff, 0x36a, 0x4, 0x10001, 0x3, 0x7, 0x5, 0x2, 0x5, 0x7f, 0x1, 0x3, 0x6, 0x5, 0x8, 0x3, 0x0, 0x98, 0xb21c, 0xb12d, 0x10, 0x1, 0xfa1, 0x200, 0x1, 0x0, 0xdb3a, 0x6, 0x4, 0x4f6, 0xa5, 0x0, 0x8, 0xffffa997, 0x1, 0x4, 0x5, 0x1, 0x0, 0x1, 0x6, 0x7, 0x7fff, 0xf, 0x0, 0x1, 0x8, 0x5, 0x8, 0x9, 0xfffff001, 0x4, 0x8, 0x4, 0xa, 0x5, 0x5, 0x7, 0x6d898b7e, 0x1, 0x100, 0x1, 0xffffffff, 0x8, 0x9, 0x3ff, 0x7, 0x2, 0x9a, 0x5, 0x6, 0xff, 0x5, 0x424, 0x3, 0xdeed, 0x2, 0x5, 0x4, 0xffffffff, 0x0, 0x7f, 0x400, 0x8000, 0x2, 0x9, 0xd0d0, 0x80000000, 0x6, 0x78, 0xe8]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x2050000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa, 0xff, 0x9, 0x4, 0x4, 0x5, 0x4, 0x2, 0x0, 0xff, 0xe102, 0x3, 0x8001, 0xf, 0x3, 0x7f, 0x8, 0xad9d, 0x3, 0xff, 0xc, 0x200, 0x8929, 0x3, 0x2, 0x8, 0x9, 0x5, 0x0, 0x5, 0x737b, 0xa16, 0x6, 0xfffffffd, 0x9, 0xf4, 0x7, 0x6, 0x0, 0x3, 0x8, 0x10000000, 0x5, 0x3, 0x6, 0x9, 0x9aa9, 0x68f3b6e0, 0x6, 0x1, 0xfffffffe, 0xffff, 0xff, 0x9, 0x6, 0x2b99, 0xe8, 0x2, 0x1, 0x749, 0x8, 0x2, 0x21c7, 0xeb, 0x400, 0x9, 0x7fffffff, 0x7be, 0x6000, 0x2, 0x6, 0x3ff, 0x9, 0x2, 0x0, 0x4, 0x10001, 0x2, 0x2, 0x1, 0x94c4, 0xffffffff, 0x5, 0x7fffffff, 0xfff, 0x0, 0xb, 0xc, 0x80000000, 0x3, 0x800, 0x7fffffff, 0xd3000000, 0x10, 0x0, 0x3, 0x6a, 0x80, 0x8, 0xc, 0x800, 0x1, 0x4, 0x337d, 0x81c, 0x8, 0x1, 0x8, 0x2, 0x7, 0x5, 0x2, 0x9, 0x7, 0x1f7, 0x2, 0x80, 0x4, 0x2, 0x1ff, 0x5, 0x80000001, 0x9, 0xffff, 0x0, 0x96, 0x2, 0xffffffff, 0x3, 0x1, 0xf, 0x1f0, 0xf, 0x8, 0x5, 0x4, 0x771, 0x4, 0xfffffffd, 0x100, 0x3, 0x7, 0xc00, 0x8001, 0xffff, 0x800, 0x0, 0x8, 0x6a, 0x6, 0x0, 0x200, 0x8, 0x3, 0xd, 0x1, 0x8, 0xf, 0x4, 0x800, 0x7, 0x1, 0xffff, 0xb, 0x400000, 0x4, 0x2, 0x6, 0x10001, 0xc8fc, 0x3, 0x5a4, 0x0, 0x9, 0xd, 0x5, 0x8, 0x10001, 0x7, 0x8, 0x7, 0x3, 0x7, 0x2, 0x3, 0x5, 0x80000001, 0x0, 0x4, 0x3, 0x0, 0x400, 0x5, 0x7, 0xb, 0x7f, 0x2, 0x7f, 0xb, 0xfffffff5, 0x0, 0x3, 0x3, 0x97e2, 0x3, 0x0, 0xc, 0x6, 0x9, 0x9, 0xfffffffe, 0x8000, 0x21, 0x8001, 0x6, 0xfffffffa, 0xc, 0xd, 0xbc5, 0x1, 0x4, 0x3ff, 0x1, 0x0, 0x2d4, 0x80000001, 0x0, 0x9, 0x1, 0xfffffeff, 0x0, 0x3, 0xf8, 0x5c5e, 0xff, 0x100, 0x4, 0x10001, 0x0, 0xf1f, 0x9, 0x10000, 0x2, 0x10001, 0xa, 0x7, 0x0, 0x4, 0x9, 0x6, 0x1, 0x8, 0x7ff, 0x400, 0x8, 0xb7a]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x1000, 0xd0, 0x9, 0x1, 0x769, 0xcf9, 0x1, 0x7, 0x7fffffff, 0xfdf, 0x9, 0x7fff, 0x401, 0x0, 0x3, 0x6, 0xc7a7, 0x7fff, 0x3921b813, 0x4, 0x81, 0x800, 0x0, 0x8, 0x42, 0x7, 0x9, 0x1, 0x6, 0x1f5, 0x87e6, 0xf, 0x8, 0x7a, 0x4, 0x1, 0xffffffc0, 0x1, 0x3, 0x81, 0x9, 0x4, 0x1000, 0x9, 0xf065502, 0x2, 0x4, 0x0, 0x8001, 0x7, 0x10, 0x4, 0xd, 0x200, 0x3, 0x7fffffff, 0xfc, 0xe36d, 0x86d8, 0x8, 0xf, 0x800, 0x3, 0x8, 0x81b, 0xba, 0x6, 0x7, 0x1, 0xa, 0x2, 0x7, 0x4, 0x0, 0x4, 0x5, 0x4, 0x8, 0x4, 0x401, 0x40, 0x1ff, 0x8, 0xc26d, 0x1, 0x1b76, 0x80000000, 0x9, 0x3936, 0x6, 0x2, 0xfffffff3, 0x7fff, 0xffffffff, 0x1, 0x1, 0x0, 0x9, 0xfb9, 0x0, 0x8, 0x3, 0xfffffffa, 0x1, 0x7f, 0x6, 0xc, 0x579b, 0x1, 0xf, 0x8, 0xffff, 0x2b1, 0xc24, 0x0, 0x1000, 0x100, 0x5, 0x8, 0x4, 0xfffffc01, 0x3, 0x0, 0x0, 0x180000, 0x3, 0xa, 0xb, 0x7fff, 0xb147, 0x0, 0x80000001, 0x3, 0x3, 0x9, 0x9, 0x22b, 0x400, 0x5a8b, 0xfffffffb, 0x3, 0x5a, 0x5, 0x3ff, 0xa, 0x200, 0x1, 0x7, 0x8, 0xa, 0xf, 0x2, 0x0, 0x3ff, 0xfff, 0xefd, 0x100, 0xffffffff, 0x0, 0xfffffff5, 0x101, 0x47, 0xfffffe01, 0xfffffffd, 0xfffffffa, 0x2ff4, 0x80, 0x9, 0x1, 0xfffffe00, 0x8, 0x2, 0x0, 0x80000000, 0x0, 0x4, 0x4, 0x8, 0x0, 0xa, 0x9, 0x21, 0x100, 0xf, 0x2, 0x2, 0x0, 0xc, 0x6, 0x1, 0x45b1, 0x4, 0x8, 0x80000000, 0x8, 0x1, 0x2, 0x4a62, 0x9, 0x1, 0x9, 0x200, 0x10000, 0x9cd, 0x7, 0x4, 0x2, 0x80, 0x5, 0x1, 0x3ff, 0x1000, 0x1000, 0xffffffff, 0x101000, 0x4, 0x8, 0x4, 0x2, 0x0, 0x0, 0x9, 0x33, 0xcb3, 0x1, 0x3, 0x8, 0x5, 0x7, 0x4, 0x200, 0x4, 0x2, 0x10001, 0xa, 0x6, 0x4, 0x5, 0x771d, 0xb13, 0x4b0, 0x1, 0xdd30, 0xe, 0x40, 0x7f, 0xa77, 0x9, 0x7fffffff, 0x0, 0x7, 0x400, 0x34bd, 0x2]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}, @TCA_POLICE_RATE={0x404, 0x2, [0xb, 0x5, 0xe, 0xc, 0x92a, 0x37, 0x6, 0x4, 0x6, 0x9, 0x6, 0x6, 0x1ff, 0x7, 0x1, 0x2, 0xfffffffd, 0x8, 0x8000, 0x100, 0x10000, 0x1, 0x1, 0x800, 0x8, 0x81, 0x1, 0x2, 0x1, 0xbda, 0x1, 0x4, 0x7fffffff, 0x5, 0x3, 0x3, 0x10001, 0x1, 0x9, 0x7a1, 0xd, 0x8, 0x4, 0xdfd4, 0x8, 0x5, 0x0, 0x800, 0x10, 0xfffffe00, 0x1, 0x7, 0x6, 0x400, 0x7, 0x3, 0x6, 0xf9, 0x6, 0x2, 0x8, 0x4, 0x0, 0x10, 0x5, 0x0, 0xfffffff8, 0xfff, 0x4572, 0x7ff, 0x5, 0x3, 0x1, 0x3, 0x1, 0x200, 0x9, 0xd, 0x1000, 0x1, 0x9, 0xdc, 0x5, 0x10, 0x7, 0x5, 0x80, 0x5, 0x8001, 0x1, 0x9, 0x4, 0x0, 0x6, 0x5, 0x6, 0x8000, 0x7f, 0xa7f, 0x0, 0x9, 0x1, 0x7f, 0x40, 0x5, 0x28c5, 0x5, 0x8, 0x8, 0x5, 0x4f3, 0x8, 0x5, 0xfffffff8, 0x0, 0x943, 0x3, 0xfffff404, 0x7, 0xc, 0xd, 0x3, 0x7, 0x9, 0x1, 0x6, 0x7, 0x3, 0xe, 0x101, 0x7fffffff, 0xea3, 0x7, 0x4b93277c, 0x3, 0x15, 0x401, 0x3f, 0x0, 0x8, 0x7, 0x5, 0x1, 0xeacd, 0x7ff, 0xa657, 0x9, 0x3, 0x3, 0x1, 0x53, 0x2c73, 0x290, 0x1, 0x9, 0xd, 0x9, 0x59, 0xa, 0x5, 0x2, 0x14245472, 0x6bf3f058, 0x7, 0x200, 0x7, 0x2, 0xfffffffd, 0xdc, 0x0, 0x4, 0x3, 0x5, 0x7, 0x1, 0x1, 0x5, 0x1, 0x10000, 0x7fff, 0x4, 0x9, 0x80, 0x3, 0x2, 0x8, 0xf4, 0x65, 0x6, 0x3, 0x6, 0xd0, 0x9a, 0x4, 0x20, 0x7fff, 0x3, 0x400, 0x8, 0x6, 0x2, 0x6f0d, 0xfffffff9, 0x3, 0x0, 0x40, 0x4, 0x401, 0x9, 0xffff, 0x9, 0x7, 0x6, 0x2, 0x3c5d, 0x401, 0xfffffff8, 0x5, 0x3, 0x6, 0x3, 0x400, 0xdf, 0x3, 0x0, 0x8, 0x8, 0x7, 0x0, 0xffe00000, 0x101, 0xfff, 0x85b7, 0x7, 0x6, 0x2, 0x3, 0x5, 0x7f, 0x7ff, 0x4, 0x0, 0x3, 0x1, 0x2c9e, 0x1, 0x0, 0x10, 0x6, 0x5, 0x1, 0x0, 0x4, 0x7, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xf}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x1, 0x3, 0x3, 0xac, {0x3, 0x0, 0x5, 0x7, 0x0, 0x1000}, {0x2, 0x2, 0x6, 0x0, 0x7ff, 0x9}, 0x8, 0x1, 0x7fffffff}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff7, 0x8, 0x9, 0x2, 0x2, {0x7, 0x0, 0xb, 0x232, 0x0, 0x703}, {0xd, 0x2, 0x1, 0x9, 0xffff, 0x4}, 0xfffffffe, 0x7, 0x6ad}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xb12, 0x9, 0xfff, 0x9, 0x3, 0x4, 0x5, 0xe89, 0x4, 0x2, 0x8, 0xb7, 0x7, 0x80000000, 0x6, 0x0, 0xab, 0x3, 0x2, 0x2122, 0x428, 0x40, 0x0, 0x80000000, 0x9, 0x4, 0x1, 0x8001, 0x375, 0x24, 0x5, 0x200, 0x9, 0x7, 0x0, 0x5, 0x9, 0x2, 0x1, 0x5, 0x8, 0xa9, 0x7, 0x4, 0x400, 0x1000, 0x7, 0x1, 0x3, 0x5, 0x8, 0x0, 0x4, 0x3, 0x7, 0x0, 0x9, 0x7, 0x500, 0x1, 0x7, 0x2, 0x0, 0x6d0, 0x1, 0xfffffffa, 0x8, 0x8, 0x1000, 0x0, 0x8001, 0x9, 0x7, 0x3, 0x80000000, 0x5, 0xffff0001, 0x1000, 0x900000, 0x1, 0x80000000, 0x5, 0xfffffffb, 0x4, 0xd, 0x1, 0x8000, 0x6, 0x80000001, 0x5, 0xffffffff, 0x9, 0x3, 0x6, 0xcc, 0x4, 0x6, 0x1, 0x5, 0x3, 0x4, 0x4, 0x3, 0x7, 0x3, 0x2, 0xffffffff, 0x3ff, 0x100, 0x7, 0x5, 0xa9a, 0x14, 0x0, 0x800, 0x9, 0x8, 0x6, 0x1ff, 0x0, 0x1, 0x4, 0xfff, 0x49, 0xd3, 0x9, 0x0, 0x6, 0xfffffffe, 0x8, 0x3480, 0x40, 0xff, 0x4, 0xf, 0xff, 0x4, 0x5, 0x5, 0x2, 0x10000, 0x4, 0x1, 0x7, 0x2, 0x9982, 0x9, 0x10001, 0x2, 0x1ff, 0x2, 0x4, 0x4, 0x8, 0x3, 0x5, 0x4, 0x6, 0x81, 0x4, 0x8, 0x157c, 0x7e99, 0xff, 0x4, 0x40, 0xe, 0xd, 0x0, 0x9d1, 0x6, 0x7, 0x1, 0x5, 0x3828, 0x2, 0x3, 0x7, 0x4, 0x6, 0x2, 0x3, 0x5, 0x2, 0x4, 0x5, 0x9, 0x8, 0x2, 0x533a, 0xa4, 0xa080a9b1, 0x7ff, 0x0, 0xd0, 0xe, 0x8000, 0x8, 0x2, 0x1f, 0x100, 0x1, 0x0, 0x400, 0x3, 0x96eb, 0x120, 0x2, 0x7fff, 0x0, 0x71c, 0x9, 0x1, 0x1000001, 0x3, 0x6, 0x0, 0x3, 0x3, 0x7fffffff, 0x5, 0x5, 0x5, 0x10001, 0x8, 0xbc0, 0x8001, 0x7, 0x4, 0x802, 0x40, 0x60000000, 0x3, 0x5, 0x2, 0x8, 0x200, 0x4, 0x9, 0xffffffff, 0x10001, 0xfffffff7, 0x167, 0x8, 0xfffffb56, 0x2, 0x1, 0x400, 0x10000, 0x3, 0x80000001, 0x3, 0xe511, 0x3, 0x80]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4000, 0x4, 0x3339, 0xd, 0x7fff, 0xf7, 0x6, 0x64c, 0xf, 0xfffff800, 0x8, 0x5, 0x5513, 0x64, 0x11, 0x800000, 0x1, 0x9, 0x4, 0xfffffffe, 0x3ee, 0x2, 0xf, 0x1, 0x4, 0x8a6, 0x9, 0x200, 0x10000, 0xf, 0x10000, 0x7, 0x5, 0x2, 0x9, 0x5, 0x9, 0xd, 0xfffff9a6, 0x7, 0x81, 0x7, 0x7fff, 0x862, 0x8, 0x7, 0x30000000, 0x8, 0x0, 0x3ff, 0x1, 0xd02d, 0x8, 0x2, 0x8, 0x9, 0x4, 0xb, 0xfffffffc, 0x9, 0x5, 0x7, 0x0, 0x0, 0x0, 0xcbd, 0xa3, 0x2, 0x7fff, 0x9, 0x792, 0x4, 0x0, 0x5, 0x2, 0x7f, 0x4, 0x3, 0xa, 0x2, 0x2, 0xf, 0x7, 0x8, 0x200, 0xff, 0x4, 0x80000001, 0x1ce9, 0x23, 0xb45, 0x8, 0x4, 0x401, 0xb, 0x4, 0x8f, 0x5, 0x0, 0xd4, 0x4, 0xff, 0x9, 0xff, 0x9, 0x2, 0xe513, 0x4, 0x80000000, 0x8, 0x401, 0x200, 0x401, 0x1, 0x7ff, 0x98, 0x8, 0xc, 0xa2c0, 0x0, 0x9, 0x1, 0x9, 0xc74, 0x5, 0x7, 0x4, 0x7, 0xf939, 0x1, 0xbeb6, 0x10000, 0x3, 0x401, 0x477, 0x9, 0x10000, 0x9, 0x5, 0x1, 0x10, 0xb, 0x0, 0xff, 0xff, 0x7, 0x5, 0x7, 0x200, 0x1, 0xfffff801, 0x1, 0x9e83, 0x1, 0x3, 0x8, 0x4, 0x0, 0x4, 0xa4, 0x651, 0x9, 0x80000000, 0x101, 0x10000, 0x1, 0x9, 0xff, 0x1ff, 0xe27, 0x7, 0x5, 0xa8d, 0xffff, 0x0, 0x400, 0x7, 0x40000000, 0x6, 0x4, 0x0, 0x4, 0x5, 0xfc, 0x6, 0x8, 0x7, 0x3, 0x0, 0xf294, 0x1, 0x0, 0x1, 0x3, 0x6, 0x2, 0x2, 0x0, 0x9, 0x200, 0x7, 0x1, 0x4, 0x4fe7, 0x8000, 0xfffffff7, 0x80, 0x9, 0x7, 0x8, 0x8f85d1ec, 0x0, 0x8, 0x1, 0x1, 0x9, 0x4, 0xfffff4d6, 0x6a95, 0x4, 0x1, 0x401, 0x1, 0xfffffffa, 0x7f, 0x7, 0x9, 0x2, 0x5, 0x7, 0x9, 0xb, 0x3ff, 0xfffff001, 0x5, 0x1, 0x6, 0x4, 0x81, 0xd004, 0x7, 0x2ad0482e, 0x5bd, 0xa26, 0xe5f0, 0x6, 0x2, 0x7fff, 0xfffffffa, 0x5, 0x3, 0x400, 0xdd, 0x6, 0x8, 0x904a]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1cf8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x619}, @TCA_POLICE_RESULT={0x8, 0x5, 0x200}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x5, 0x7, 0x2, 0x2, 0x4000, 0x5, 0x8, 0x2, 0x400, 0xe677, 0x4, 0x1, 0x9, 0x6, 0x40, 0xffff, 0x0, 0x5, 0x5, 0x8, 0x4, 0x6000000, 0xc, 0xe7b, 0x3, 0x7ff, 0x7, 0x79, 0x0, 0x5, 0x8000, 0x8, 0x7, 0x6, 0x9, 0x8, 0x7, 0x2, 0x34, 0x81, 0x5, 0xcd, 0x0, 0x12, 0xf43e, 0xffffff22, 0x4, 0xb7d, 0x3, 0x800, 0x1, 0x101, 0x7, 0x10001, 0x7fffffff, 0x2, 0xfffffffa, 0x80000001, 0x80000001, 0x200, 0x7fff, 0x5380, 0x8, 0x6, 0x6, 0x0, 0x2, 0x80, 0x9, 0x2, 0x4, 0x1026, 0x8, 0x1, 0x80, 0xb, 0x4, 0x5, 0x9, 0x6, 0x9, 0x3, 0x4, 0x4, 0x7, 0x7fffffff, 0x4d23, 0xfffffff8, 0x6, 0x7, 0xffffffff, 0x5, 0x7, 0x6, 0x1000, 0x8, 0x0, 0x6, 0x7, 0x8, 0x1, 0x1ff, 0x7c5, 0x6, 0x7, 0x8a, 0x1, 0x1, 0xfff, 0xffffffff, 0x10e9, 0x8, 0x3ac, 0x3, 0x3, 0x5, 0x8001, 0x3, 0x5ccc, 0x1, 0x9, 0x9, 0x3, 0x4, 0x3, 0x8000, 0xcdf, 0x9, 0x1, 0x4, 0x0, 0x8, 0x10000, 0x6fbc27b, 0x7b88732, 0x2, 0xe, 0x1, 0x1, 0x5, 0x9, 0x10, 0x1, 0x8, 0x8, 0xd, 0x50, 0xc9, 0x4, 0x0, 0x10001, 0xb, 0x71, 0x10001, 0x435, 0xbcf5, 0xffff0001, 0x9, 0x80000000, 0x200, 0x10000, 0xe, 0x8, 0x2, 0x7, 0xc, 0x20000000, 0x9, 0x5, 0x8, 0x9, 0x1, 0x9, 0x1, 0x0, 0x4, 0x8, 0x8, 0x4, 0xfffffff8, 0x2, 0x4, 0x1, 0x3, 0x80, 0xd, 0x2, 0xf8000000, 0x8792, 0xa, 0xab, 0x4, 0x8, 0x7, 0x3, 0x3, 0xc0000000, 0x4, 0x81, 0x4, 0x4, 0x8001, 0x401, 0x1b, 0x0, 0x8, 0x1, 0x9, 0x2, 0x4, 0x400, 0xf5b, 0x2, 0x9, 0x6d8, 0x4, 0x7, 0x65e, 0x3, 0x85, 0x100, 0x6, 0x6, 0x6, 0x400, 0x76, 0x4, 0x1, 0x4, 0x4, 0x8, 0x8, 0xf, 0x8, 0xffff, 0x6e7e8c44, 0x0, 0xffffffff, 0x7, 0x7fff, 0x8, 0xc, 0x7, 0x4, 0x10000, 0x6c8, 0x996, 0x8, 0x7, 0x0, 0x0, 0xb4f9, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffa}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x3, 0x8, 0x3, 0x2, 0x100, 0x6, 0x68, 0xc, 0xe15, 0x1, 0x1, 0x5ed12b71, 0xffffffff, 0x0, 0x9, 0x4, 0x57af, 0x2, 0x3, 0xb381, 0x5, 0x8, 0x7fffffff, 0x7, 0x3, 0x785b, 0x6, 0x5, 0x4, 0x7, 0x7fff, 0x1, 0x8df, 0x6, 0xfffffff8, 0x0, 0x9, 0x3, 0x1000, 0x9b, 0xff, 0x5, 0xffff, 0x8, 0x969, 0x0, 0x0, 0x1, 0x2, 0xba1d, 0x9, 0x100, 0x80000000, 0x10000, 0x6, 0xb, 0x59, 0x8ac6, 0x9, 0xfffffffc, 0x7f, 0xfffffffb, 0xffff0001, 0x8, 0x9, 0xd8ad, 0x7a, 0x2, 0x2, 0xcec5, 0x4, 0x8, 0x1, 0x0, 0x8, 0x8, 0xfffffff8, 0x9, 0xd59, 0x3, 0x5, 0x5, 0x10000, 0x101, 0x4, 0x6, 0x3, 0x4, 0x7, 0x5, 0x7, 0x6, 0xfffffff9, 0x1ff, 0x9, 0x5, 0x9, 0x5, 0x5, 0x6, 0xffffffff, 0x5, 0x3, 0x1, 0x7, 0x7, 0x401, 0x2, 0x9, 0x3, 0x928, 0x4, 0x4, 0x8, 0x2, 0x800, 0x7f, 0x951b, 0x10001, 0x9, 0x447, 0x7fff, 0xfffff6d2, 0x3, 0x5c, 0xa, 0x2, 0xc, 0x5, 0x5, 0x4, 0xc8, 0xb08b, 0x80000000, 0x81, 0x1, 0x4, 0x800, 0x800, 0x6, 0x8, 0x3, 0x200, 0x9, 0x8, 0x9, 0x4, 0x9, 0x8, 0x2, 0x5, 0xd12, 0xfffffff9, 0x0, 0xbe0, 0x5, 0x5, 0x8, 0x8000, 0x3, 0x4, 0x53d, 0x3, 0x254d58b1, 0x2, 0x80000001, 0xc653, 0x6, 0x43, 0xffff8000, 0xd11f, 0x6, 0x5, 0x6, 0x400, 0x7fff, 0x2, 0x5, 0x66498682, 0xfff, 0x80, 0xfc6c2af, 0x5, 0x71, 0x0, 0xa934, 0x5, 0x9, 0x3, 0x80000001, 0xffff0000, 0x3, 0x8, 0x9, 0x7, 0x200, 0xb2d, 0xfffffffa, 0x9, 0x1, 0x4, 0x8, 0x74b, 0x5, 0x3, 0x80000001, 0x2, 0x8, 0x400, 0xf39, 0x5, 0x2, 0x4, 0xd8, 0x347, 0xdd5c, 0x4, 0x0, 0x3, 0x200, 0x0, 0xac, 0x4, 0x5, 0x401, 0x3854, 0xb, 0x24000000, 0x5, 0x7, 0x3, 0x6, 0x9, 0x7, 0x10000, 0x9, 0x6, 0x3cf, 0x7, 0x6, 0xfffffff7, 0xffff, 0x7, 0x2ab9, 0x4, 0xf, 0x200, 0x9, 0x9, 0x8, 0xf8, 0xff, 0xcde, 0x8, 0x3]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7e}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe48f, 0x20000000, 0x8001, 0x1, 0x3, {0x3, 0x0, 0x5, 0xda, 0x9, 0x2}, {0xc0, 0x1, 0x9, 0x100, 0xf3, 0x7}, 0x1c14, 0x8, 0x80}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x6, 0x81, 0xffff, 0x7, {0x0, 0x1, 0x827d, 0x7, 0x8, 0x70}, {0x2, 0x2, 0x15, 0x2, 0x3, 0x7}, 0x9, 0x1, 0x96}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x1, 0xb68, 0x1, 0x11d, 0x8, 0xb, 0xe8, 0x1ff, 0x1ff, 0x6, 0xffff8000, 0x9, 0x0, 0xffffffff, 0x5, 0xffff, 0x3, 0x90a, 0x1, 0x2, 0x2, 0x5, 0xffff, 0xc9, 0x80000001, 0x6, 0x10, 0x8001, 0x3, 0x7, 0x0, 0x0, 0x1, 0x33, 0x818, 0x1000, 0x8, 0xf5, 0x7fffffff, 0x7, 0x2, 0x3, 0x8, 0xd0, 0xfffffc01, 0x926e, 0xe, 0x8, 0x9, 0x6, 0x7, 0x0, 0x4e, 0x8, 0xd, 0x80000001, 0x6508, 0x4f5, 0x5, 0xc, 0xb, 0x34, 0x4, 0x6, 0x1, 0x3, 0x1ff, 0x6, 0x5, 0x41c1, 0x8, 0x1, 0x6, 0x1, 0x2, 0x9, 0x5, 0x4, 0x10001, 0xfffffff7, 0x3174, 0x3, 0x8, 0x4, 0x7ff, 0x4, 0x4, 0xb, 0x80000001, 0x8, 0xfffff478, 0x8, 0x0, 0x7, 0x8, 0x9, 0x433, 0x6, 0x2, 0x905f, 0x95c, 0x2, 0x2d7, 0x5, 0x3, 0x24446c88, 0x3, 0xffffffff, 0xfffffffd, 0x0, 0x0, 0x91b6, 0x752c, 0xf, 0x5, 0xffffffc0, 0x6, 0x8, 0xfffffb32, 0x0, 0x4, 0x5, 0xfffffff8, 0x4, 0x200, 0x9, 0x7f, 0x1, 0x3ff, 0x0, 0x6da, 0x7, 0x3, 0x0, 0xfffffffe, 0x5, 0x3, 0xb8e, 0x7e, 0x9, 0x30, 0x7, 0x7fffffff, 0x10000, 0x40000000, 0xd77, 0x33, 0xbf, 0xc, 0x6, 0x6, 0x8000, 0x8, 0x8, 0x4, 0x400, 0xaca, 0x7, 0x8, 0x401, 0x3, 0x3, 0x4, 0x2, 0xff, 0x8, 0x1, 0x10, 0x3, 0x0, 0x2, 0x6, 0x996, 0x6, 0x9, 0x4, 0x9a2b9f, 0x4, 0x5, 0x6, 0x3, 0x4, 0xd46, 0x80, 0x8, 0x5, 0x3, 0x8, 0x8, 0x9, 0xb, 0x75, 0x4, 0xd, 0x7fffffff, 0x8, 0x2, 0x3, 0xb, 0x1, 0x8, 0x7, 0x87, 0x81, 0x2789d283, 0x2, 0x7da, 0x4, 0x4, 0x40084558, 0x5, 0x9, 0x29e, 0x2, 0x1, 0x4, 0xff, 0x3ff, 0x8, 0x1, 0xa8, 0x2, 0x6, 0x0, 0x8, 0x7, 0x4, 0x1, 0x2, 0x9, 0x0, 0x0, 0x91f, 0xffff, 0x7, 0x0, 0x84, 0x9, 0x9, 0xa7ff, 0xa, 0x4, 0x1, 0x1, 0x400, 0xffffffff, 0xcaefb77e, 0x5, 0x2, 0x5, 0xfffffff9, 0x2, 0x200, 0x5, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1e}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}]]}, {0x27, 0x6, "bdee522ec8c18752cea9045beb003485b5451c2c2029cdfeafb2acd55fdbabef487e2e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x17f8, 0x1, [@m_nat={0x13c, 0xa, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x3, 0x3}, @private=0xa010101, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x7f, 0xffffffffffffffff, 0x80000001, 0x885}, @remote, @remote, 0xffffff00}}]}, {0xc3, 0x6, "1e4624e0d5a6a0bd64cc1d11f6f73828f1475fc077b1bb185325d7eaef22384751f042c9472d423ad41523973b157f6278298bdaeb267d0f3f4e369160f0fd3e700f433dd08b1cbb122997a17b02cfc89c0048e1276693a2ecb5fd56a6d143a406c48d50aaba578a99c1ebeafb6434cb239c4c52e8a705ef5abc61514a44564d2c4609b5e041f15ea796181bde505e3bf6298d9f0d741ee750d32bea6e5970906de55cd42a0112bb1dd28e995558f9441c14e3abed4621b0a0a2f124e5ef80"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x124, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x2, 0x8, 0x4552, 0x2}}]}, {0xd5, 0x6, "fa78b6e1e5e54cbbac5f16c47547bf925065984de09f061de959316f1cbc5f5d095e6fe017c13d12795a3cb73539d000299d2d52015e92c7ac9779f53dd82fa37195f053c1d71ab8af8426dcd3fdb92d62e7be90923840c5a6ab4bf1604a84971e4bb57610c2f3b31a3425409a16350bb9c88a6b2006a075629e20c39f811e70eb5156156c50c053f9f4d7db6ed347ccf613efcc0b361e3a3e5a8231d51f2ac7b6e4f508ad2afe83d2b6c03a2c78040991c11272425784b8fce9b26ee459dd4aba72f156f51c260f78efa1ac660271128c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_nat={0x107c, 0x7, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4afb, 0x9, 0x3, 0x6, 0x10000}, @loopback, @broadcast, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fd58d36, 0x456c, 0x1, 0xcf, 0x2}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, 0x0, 0x1}}]}, {0x1004, 0x6, "bb975208204e829dc932c2af547f7416bd94fb1c31de10fdb34b62742fbe31c85b47baf0a7827022e560718c91807b11fb3a4334f334b36414a71fe1c2911fe7e1204d696ce424c6710799beb785c7b914e282c3db79fa3979025dca39910a67e5c230497a1a88207f90f059ee8c675eeaf4d8de356ea5a098fbd3c652bf3e4a31fdd153e0b75ef00c03459723ef372d113679cef1428c00d8e25c5464bf2cb2bd77067b2c344dc4b9c0bb32bc1780d8cb15f94894394bb170ede34a04710d41339d30f87129de3e5c77811fd6e28a32758b1cecc9c92b6fb8e09fa17c33aa924a75b41ef16dc64316a23ba96f7c72b701c447bf0edaae73e23b4517900d8a7367ef60b52332808bbf5d861a24c4d774b40d99b19be7fb1a17be6f9bdff8f10a071056d336e98e9524901f602d5d211987ebdaf3306d291c6dd7c1bc10299fc7c6714b0528a74fe88955413517ce4ae7714d40540ae247c2e634a61bdd27701810294fd2832e72ef115470301106881e57b2cd6768b458e3a2b1660f83b5434c54f2a203ddb9415b60d2274bca5b50005da34029d899b347a27ae89f746eaaaa1f682c95f401ba7ca184495fc5774cf59debde3d595f6ebd04720c57753512f5b3f7b0dedd47270681fb236febf0ad38e4a1efa4930fac4177c12ab03362786a13c081295464178149c32931e888ef63d14bbb04b629e6339a820a9e88ec79d363215bf02486a7839e7719b972763e861396eebd9a421aa086b97a887106baf84a0b52e16eef26586ca906d14bf98b85d93fb509ed1ae86b5b854009817fc59880a7f496b84b1ef545c908713c2621ae10ba576a0c592bf43969a905e3ee55057fc45561a38c7f11f4a9e4fb9a523e2dad0b4680b1942c263b74c8a0ef43cee36512a275ead9d63d43143df790ffc63e8697269637901d56037fb4eadde9433220ab0cad0dfc60254f3b39a0243b27be8ca12b070fef3a337eff4f83f1d0df31b7ce355857e27fed4ef4ccfae4dd94fdea8cd6e54c82e7c00154c1762f2a3ade36b6f4d05bf100b945bd584ea06a908aa18c8e736be164ef64a5188df0143aacdbd8c7e83904ee9ff356b4c7b608c545e95c6aef2a7037187082c11e2a7fb77223438f5fe77880761807d8506afc38308467f71bab9a5edf390c4b8305f68bd6fb8d5ea776b45dfe0d972eb085f436c65dc867037166bf00318ae0987ec79a899d706f7b9d8ce5eb52bf83cdc9bb6309131876f0499ea697cf6445c3f38c5d453e04df7d693f2950b65bd4f6fd105c55cf4005d3e213f6441404d04d212fc68db0d29d4f3d8678a6ab45b5ccb827d1b57f61ff168f55bf4759f65717c8945437e8db73ae3681de4c87ef30608979ee36e484359d0dafc5229eb4044fb02729e8ef8c8fb39f8dde479329a08cd27f2a988177dfcc690f38a2332e5cccbc4a14aff2cd228374255d0674ae05de053c09d898b9152147a7c1f212ffad2afcc9fe793c993a47365176b91394f2ad0ed8b89c1312e7226e94baf83842b80cb3e3664cf006904b7fc21ba7a3623d330bf45a5d22b69114d15ce8f8811835b79dffc899e7b8b88c8919e95e774b44530ebd4dad208b2d0abdb72d6ba4cc48f5d384b4ae1465fae4e06ff61340d63590bc7f123685f40dcd9752aa85d6f7645675c2a9ddfdc3d7bd1f00093b0e1c750d7443ddd648073da9a9697bb210554a98bb0d2d507ad4c2a2a30f66b3f13ef1f26906c202432f5b254362a81ac050901fa4575c544887f91f77e4ec0937dbac944f7766b0801623c744bce3e1c748137d7515b14b438e24ecc9ca3488de6dce8008e409a1501ed53172af59dc05c331f6aee46ec0a6cd126d03c7940fe7defa910890c6e805127f87ca1d12780ed50a21d849b6ee5208e243136e4d00b590905876436e07d97e79fc2ce4b2804dbbf02d4845a13536e99ecb18bffcdc4e36dfecc06344b1f651a7e2fcc1315ae139696fd2c62f71f0b0ea14833e2e45737d1db3f10cb438150c81a57f3e4f2f1f8c593b8748560dc3e39c8482f551b81c05a8e94aac8906a564c74823df013ac6eeb4f4d40ecc7a47b883da368e54ce72942314531e174169f0c50b4149a635183601e57ec64b000622acc5646db35f7595468e3000ad2c944e5bdc326d29010e0829cdc3160516821d66614dbd638f267c15cba546cb31ac42a4b44288118e7e358496155d1cf17cc4cc0bb351fbe0cc3523ba709d1b5245db6b1f1cc9ea33c3eb2eabb83279b57495c61e15a865a6a2ae61dda102e1376531d54c524c11802e125d4da38bf261d5fb02ee218aea262e5399f56a521d39ef4c0ae672dab20edbfb61dcb5bedc804a3199dd34737a44eed3e777478a624383d8d259a93d3766882b89d0975759a43ea65701689be6f2915dc06430e1a678c455f76de06aedd2d152bd45e8124671be5ef150610d3d78860a42c3b122bced0674c2419263faf89bba89f79808cc2ca763d5a57b375de70c4ec7be6591fcd0f514f044170ff28956d9ebbc51d9deaaf06c0c7add3ba9371e83159e10a0ed4d1ec0c70fcac96f73e57115d0d9d29745056ee547c3a83c02cc7027ee9cd75f5f20d8e9106e5b6cbc315c55c812ccf163d93ffae20409d2210f6f807d221fe3f9cc985c0adbf98a2deeb52cd7f2534d24c68a1e9f1686d5efeefc926632ac2d427faa2c759d7b66f0e9604a48d9d813c30602b90dae07e999ecd68d696d7ca6e293cab963fb46ec881af9f5bfc1fd79b54c661be6c8f63dedf619840013055f3223b8a284e51a1b34ae818a09aad217dc616320102cdc463b09b03e7da82dc43cc36640ee1192671fb1ef7a1589e193ad9df089457fc0a96d76b86d7a034d40e238280854e4ca677c7365894e07bb9ebfb39198723a68c80e8fffc33669dae0830fb7b4305ade766f25d278eaaddd1b3405a19afd9e1e97e107088569eff0140036cb7a269169de5438cd55a6b4e8d86682cd9e4d7d21bae15177ea86c8bff986b2341b2d502d0be029393c43932735661732f9aac73e89b1aa0381d11ebe84fa676a3e6027271453257392a7c34e9eaa064cb6e0c7995b32260c1abae5f42a599f7222d6d7983bac851a81469be6311b7759e9ce0c61ed8e377cd696c2a235dfe722b36e33d9776bff5367278c0667342d26a6c40fd0404a884877f55cc80b07286c4a93eadfeb22376a8df43c85ad0f6e5c4474618bd756f29967c19feb241785704a3283b6263199ff8904d25cf27f88902971efcbbdf9d934caba30ad336315abfe79dc273b99614c45ac49af4c9fe20007163d9756fc7a6895290d69ca21a9c8e22c609916339c91ff1e71bb1cbb630b71f55eee50eaa2ff8cba37b0b8cd7b7211b55d70ab11bb3d343b60a76ae9f2beaff869f96429643fd74de480755326de41c37336b26e22bfd45aa4b5048a684cb20109642ae1c44d612f7f23aebf82f05c243b33568c8f7bd52c87d65804989a5426dfa9ba4a1c0598a4657fe0fdb3d363c4c8968edb436353c9ea0fc7fb6906c1c9f408c9656891b999d3b948e6df5a9b443f75c029aad29050cd708c1209e179f89bd479d7f9c4d3fa70e26740d927c040bb4e14f14fe85828bf19a1707da1561229c0a41d4a1d009c0a318f16372b150f8b0b006b7b643d758c488994c636bc2b562363444a9fcaeed90dec0f0522ee19a8a5b708ecf57d1f0aa0166712330d62ed09068deb090b036cb29e54e36c5f56c0c56bc44f2c4e9376d6706c5f13e44b1e257e3a107e749d16402b7aa0a6ee09d6df698afcdc2a852a00b47af5c1dbe0e20b18ba76a729c34ab8b53a56e273446be7b863ae19f315175789318c213dda46f514a8047a019dec805c0a39b4c8a553eb89e48459492bcb9ae5f72fad7d2a03514738dfc53571876e0a2e66a767e9f1095cefd9fb397de872634f33953a62de9ba8e636c58c7545f8c92c842bb75191d680fff27b0a6fe1a2fede99c2f6cca1a8dc4b6e267f1acbf4f88892310f8aeca02ca371b1448ca37166bc3cdef024dfcb5688b3f259993d974fb10010c9a60a41459bafd7940673861c5b6b499750a580fbaaa153b61d0b2fb79cd75c669119143b9f8c750edd605e3126e50ddd4f227dbf45f819e67e40a93986175d8dc1735abedf87562abd4d62df0d7ba8bd2ca12ddce4f2920637eef4215d43d7ed3c79f93eb54b75c69a7f67731945c7d8d133bcd15b623ad42bc6d02504a49ed69a4af207cfe539b6624557694fc8e9ac319fb714ee245ca62eab40ee0bd67170f061b5bf6af8b31fd9278cf8727b19a9704d1ceb203c3a2ab8a09731e63f90ba7695342838620bf2134c9efd61c6d95297fa4c219d048a1f70eec19fb2b1fc87be63308420afc1ef692a92f0618e54fa0492b60694352b4b1846ec584517d7232f9aa0f4015a44432709caaa58927a09657a84193e5f83d204e9dbc7f6822c89539eb9724b92fa7c7636aca0353e2e6f8f52bd3185bd8d12180fef746852fa1d695b22e93aaa358f73c6c93e00bcd489e3e4d79f097f514404ca3a72e42f6ac165d15836c8da6fb111d8055c3491513adb4680862abe5679324d1dbb5786a51e98979e802088b0ce4a01373c841889eaf5c0c92d184e59d6cda270d109f5b7f38311094211ca4ee1d12f60bbe3ccb25152fc7a6f361121766a92ddc64e55ee5e1457057f993a2f5042102ac9bd077d6a016caadc2db264a9df93a9a836168e7ea6828430a6f74eb5ea0ad4b9cf5f2f278a0fab6963e5e43377d734c05609f53dec0eeea5df906ea9338aa93b8bdb523901cb43872bc7e6ba891fd3f62f844acb9b3bfb830bba6af3b3a6e7b961b979f82bfc7b05e0721114476a2e3532664eb85c2f7e60a3370119b58a75acb147421efd34b2ab9d2d03cfcc0b157a3e11867b94242a724ee01358b78be795de2ec7bb66e6cd02d71c908cbc408fa23491f7e253ef8120129fcd34d9907e43a16564f5401657e4793a6e2f0ef43abd54e2a54b5e4f7ea9b46e7816242f827d4db1b2e395b1eded34a3d185d0c650befebabaeecb4b3a2fbaacd8bcf5d106f70c162dc091d02861e1d40e5a1612352f6d5cde18b5f37379c26669c6ee36fdf87120c2c01d5e977254029d7d612bf8df9041d0208940cf15611605be5a04d0a73c70b2668a08f90fe119ba2749cabb907b1c96c8cf36f37be936b9f907271c34bc08d6e1c6e85d998895d9dae27546996b5e40375c5b819bb4a2627a3fda5b90c48761524b13351395cf821960a1e3bbc4886a71b99d29b305e1712ad996b56e0db91aebf5183d69d2d1b318419252de180ab71a5920581995d29806c369e0c5e163008634102107dda0b1e644c805e7969b82cd5163ff928eafc9e2f6d7323b79286b882f35ef872906b27de15ea167acb77318b5ede7b6c7a455e25dd622854f50f495354bd265ee11250a09128d5e7db234c657305149e992a2595c4d4fba47f646d3d97e208cc71b3d36685e0806ee281346d127a0a83da3e36facc2e7dbab4293231c03b00627838d6f5037ca1ffc2acec7bd908793491169fd3773937998f98697357912212e4ddf988db0d0534b4b877c644a180390d64bc4e5b62f16f99a85ca4707c5e48098d5da52739ab29ab9c44d6139b914a30478b5a40add6e9616c26b3dfc25547aec9bfa4aac8ce4f35785b627f19b49233cc466be294cb3979103e317d425398ba6e6df71f29e132c2f1b5db5b371c53edeba6670b974b62ed8ba7f01030e9cbf927e96ed0c52704cffa3ffad5aa73d683c5e6a08c9f47f95"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_gact={0xd8, 0xf, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8000, 0xfffff800, 0x1, 0x3d1, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x9, 0x6, 0x6, 0x7fff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x8, 0x3, 0x8, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8001, 0x3, 0x2, 0x9, 0x200}}]}, {0x4c, 0x6, "9a2e5e2bc1805f9a598a2ddf91a131780e8a34e6a22267e149edca394b9e848b23dffc17a6dc05c3b811d7c95f3e986fd9dbed2126b9cc82629a8d826670ebc60794c0f81a075475"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_connmark={0x1c4, 0x17, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x6b0, 0x5, 0x7, 0x6}, 0x9b9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5f296e7f, 0x7, 0x3, 0x80000000, 0xfff}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x7fff, 0x2, 0xa81f, 0x2}, 0xc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa6bd, 0xfffffffc, 0x3, 0xe1b, 0x4}, 0x62d7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x48800, 0x3, 0x8, 0xe}, 0x45f6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x2, 0x20000000, 0xe, 0x4}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x21f, 0x6, 0x4, 0x4, 0x3}, 0x40}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff42, 0x5, 0x8, 0x6, 0x6}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x7ff, 0x3000000a, 0x17, 0x1}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd3, 0x9, 0x4, 0x800, 0x35dc0000}, 0x3ff}}]}, {0x7b, 0x6, "41ec51acc3d14657ea18186cd0d815afa9654d50bdfe89d93e70389cfefc342f3aa11a219a53258e4a4fd8b1daf2ca72850ea7ad27842b7876c8e1a695b42ba16a3cae313ee9c42ec937cef6fcbf3e4d392e94a5b8e8510a66e6bd4e6fe4037538f0fbbc9616d614e4cd7a5e198c02201567ec6f3f10f8"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0xc0, 0xe, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x0, 0x4, 0xa16, 0xffff}}]}, {0x7c, 0x6, "7f4d9d4540d9c6be3c2ab8aa31472c026e76457f315fcfca4cab9b8123325cddb938e63cb9903a76f338c72b13bec993fbc1292b81c2f4dba198f39deb67a2a74e34a203b34309e2322ee195f2ac42629ce0e6ccf8c20ecbf35007fcf3b87b9e0ced64748f949fb78e7fe69c3f4e3679e75048889432cb5d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0xa0, 0x9, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x3}]}, {0x6d, 0x6, "1eddc138591c86971148efdd0e6d4bde0e32bd7d0a2ac5c399399668265be5fa125df953cc53adf0cba38293d14377b133e6f7a35f2fc4609f6432ec1ea3083aa7fe6683483007e63f2468e9f794d887ea969291d89ddd9f4a85ed279f24317c24e6973b1f704fe43e"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x11c, 0x12, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_ZONE={0x6, 0x4, 0x2528}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "e7db1cc7ec31587017ba4e3a46e3d9fe"}]}, {0xc5, 0x6, "0ea06ee1d04f0d19e32bdd5e55856689dd936cdc20849af6ad4e019de4e4ce1fadd0580d765a4b3a04a029e699ae7c201757a5c934a7ce635f659fd99e357732ff8357ed85bef0d4bf792ec7d39b1515dc29b93d4878fff22dde4f5078654ce1d0ac6838d0c8e5e1c76019aaa8575c7eae451130624fdac88cd471fd16101e88460305ecc4e374f27c09d6caca9594a743bbfa4b4c3412ae4269c8db991c636e73f9627b598cd55446ef7e081732d0a3700aa09c5dd6d519057cbf5e5cf8108910"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0xa4, 0x1, [@m_ctinfo={0xa0, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xde}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}]}, {0x4b, 0x6, "f4565f83da0c1245e7a21511dab9ea27647060df39fc0005414919cde3b37537e2a249d32eb9b35070ee4d885b4344613bb1e1348f2ed9d7fd36cc385ae026da7f3be1ed934969"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x6848}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x1b, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_usbip_server_init(0x6) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x0, 0x5004) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f000000c2c0)=[0x0], 0x1}, 0x58) 2.191849532s ago: executing program 6 (id=6629): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x4, 0x109a00) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x1, 0x5, 0x1010, 0xb, 0x1, 0xc, 0x2, 0x310}}) r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000040), 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x37a}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_create_resource$binfmt(0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r6 = getpid() syz_pidfd_open(r6, 0x0) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680500000082762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000280)) 2.018187805s ago: executing program 6 (id=6631): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x8c00) write$FUSE_INIT(r0, 0x0, 0x0) 1.961931996s ago: executing program 6 (id=6632): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x44000) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nicvf0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x81) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44101}, 0x4044041) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440), r2) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000500)={[0x7ff, 0x7fff]}, 0x8, 0x800) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r5, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, ']^!'}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) (async, rerun: 64) ppoll(&(0x7f0000000640)=[{r8}], 0x1, &(0x7f0000000680)={0x0, 0x3938700}, &(0x7f00000006c0)={[0x85, 0xffff]}, 0x8) (rerun: 64) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000700)='./cgroup/syz1\x00', 0x1ff) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r9) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r10, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10, 0x1c}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x24000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), r0) (async) socket$kcm(0x29, 0x0, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000008c0)={'wpan3\x00'}) (async, rerun: 64) socket$inet(0x2, 0x5, 0x8) (async, rerun: 64) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000900)={0x1, 0x0, [{0x8db, 0x0, 0x3}]}) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000980), r2) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r13, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000011}, 0x40048d2) (async, rerun: 32) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), r2) (rerun: 32) sendmsg$IEEE802154_SET_MACPARAMS(r12, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r14, 0x8, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) (async) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000c40)="602eb280e311495cb477df04d6e636ad7c4649184725c9a1aa304bd39c94706593fed0fe1e7ee405077532752347bc0e2b490b2ffa390b63d1be0cb9b71f0b21e6af7ef30fb8f5eeb63dd24b84ee82507711ee6dc937e823eb0de5b45c0a4eb9b123afad75ba18d9650901f4827fee03499de4ac01d1c04a10b7b4e8aae730488086b793131a909ef46bf6f0a6bc0f17ca7343e2643d59ccb386346bbc", 0x9d) 1.646861145s ago: executing program 1 (id=6635): r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xc000000b}) socket(0x28, 0x5, 0x0) userfaultfd(0x801) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x1c, r8, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000040c0)={0x2020}, 0x2020) 1.567329825s ago: executing program 6 (id=6636): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fff}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fff}, 0x18) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x14, &(0x7f00000002c0)=@framed={{0x18, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000f80)={0x10}, 0x5}, {&(0x7f00000021c0)={0x10}, 0x10}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vimc0(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) 1.448567584s ago: executing program 46 (id=6636): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fff}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fff}, 0x18) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x14, &(0x7f00000002c0)=@framed={{0x18, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000f80)={0x10}, 0x5}, {&(0x7f00000021c0)={0x10}, 0x10}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vimc0(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) 1.438754977s ago: executing program 1 (id=6638): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x4, 0x109a00) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x1, 0x5, 0x1010, 0xb, 0x1, 0xc, 0x2, 0x310}}) r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000040), 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x37a}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_create_resource$binfmt(0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r6 = getpid() syz_pidfd_open(r6, 0x0) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680500000082762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000280)) 1.438509065s ago: executing program 7 (id=6621): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioperm(0x5, 0x8, 0x8000000000005) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x48c41, 0x0) flock(r2, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) open$dir(&(0x7f0000000080)='./cgroup\x00', 0x40000, 0x81) syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r6 = dup(r3) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) r7 = socket(0x10, 0x80002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x3}}, 0xffcc) syz_emit_ethernet(0xae, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9200783afffc010000000000000000000000000001ff0200000000000000000000000000013c010000000000000106000000000000000804040340030000005bd1000000000000000000000000fc010000000000000000000000000009fc010000000000000000000000000001fe8000000000000000000000000000aa32000b0164000000820090780008000000000000000000000001000000000000"], 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r10, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) 1.141203531s ago: executing program 1 (id=6639): r0 = syz_open_procfs(0x0, &(0x7f0000001200)='net/snmp6\x00') read$FUSE(r0, &(0x7f0000001340)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x6, 0x5}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r3}, 0xc) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000300)={r5, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}}}, &(0x7f00000001c0)=0x84) write$FUSE_INIT(r1, 0x0, 0x0) 571.700388ms ago: executing program 2 (id=6627): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, 0xf71}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f00000001c0)=0x6, 0x4) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRESDEC=r3, @ANYRESHEX=r3, @ANYBLOB="08000500", @ANYRESDEC=r4], 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x109c, 0x24, 0x400, 0x70bd2a, 0x25dfdbfd, {0x12}, [@typed={0x14, 0x33, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x8, 0xb2, 0x0, 0x0, @ipv4=@local}, @generic="413ce1d1426a7de50297759db98d5c9fbc3fd41ba255accb66ee9f1f05107179e5a0df39cebc00c47f9296bc71c0d14b23947506b06346271216c8fa4de2e46da77f6d69dee4d0f92a913a004735a8baaba9308a5fb5d3a91ba395509c52", @nested={0x1004, 0x91, 0x0, 0x1, [@generic="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"]}, @typed={0x8, 0xd7, 0x0, 0x0, @u32=0x651f}]}, 0x109c}, 0x1, 0x0, 0x0, 0x4008041}, 0x40000) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x45, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, 0x0, 0x2050}, [@IFLA_EXT_MASK={0x0, 0x1d, 0x3}]}, 0x40}}, 0x0) 438.40388ms ago: executing program 7 (id=6640): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) dup2(r0, r0) clock_gettime(0x0, &(0x7f0000000040)) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) socket(0x28, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$pptp(0x18, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 362.290242ms ago: executing program 7 (id=6641): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x1000000) write$FUSE_INIT(r0, 0x0, 0x0) 308.08946ms ago: executing program 7 (id=6642): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) fspick(0xffffffffffffffff, 0x0, 0x0) (async) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) r6 = dup(r5) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) (async) r7 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80141, 0x0) (async) ftruncate(r7, 0x200004) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x101, 0x1, 0x927, 0x8000, r7, 0xfffffc00, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @value=r6}, 0x50) syz_emit_ethernet(0x46, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r9, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}, {}], 0x3, 0x1c000) (async) shutdown(r9, 0x0) (async) sendfile(r6, r7, 0x0, 0x80001d00c0d1) 230.973234ms ago: executing program 7 (id=6643): ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="580100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000002021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 216.83106ms ago: executing program 1 (id=6644): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r0 = openat$sndseq(0xffffff9c, &(0x7f0000000080), 0x42) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a45321, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a45321, 0x0) 216.256354ms ago: executing program 7 (id=6645): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r1 = openat$cdrom(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$CDROM_NEXT_WRITABLE(r1, 0x5394, &(0x7f0000000280)) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) socketpair(0x11, 0xa, 0xffff, &(0x7f0000000440)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000b40)="b6417e016f53624c98e8ad2f41066c1635b36800d27be497484089d19b10c7a5ecc7e3add22570bc968411eb23587a840fcbab0b3f3b77144da0529bf9782fb0db0826210e69454cb3b8689ee20aa96edc3e05a15d054b6905abb715103f0f430df4834b4645019140f81e07f25f3301000000d90084bf072bcad19c783db850320000000000000000", 0x89}, {0x0}, {&(0x7f0000000000)="da1af446d275239424bbfcaa5bdc56b5b7276687b26c240b3a73b12c23c4ffd985e6e0ce94f0d6d2799a85aa2626bea7606a4e1944012bf9c3f74e194b76192c638988f7e5528f020041999078b4f11bb949e27dbe9a2c07415b216b85b4d674efe06472bf0b328a0b19e2e121ec77ac4a6151a60c5f7703e913f720ec2b75613e55d18d1f115c4b05031a94ff000000000000008756b502b32939268cb064fec5ff9f5d8e57964ab185795b5254de", 0xa8ab60faed3ede98}, {&(0x7f00000001c0)="b39c2ffd891add40004bbb01e435a37f29d36e98477ca9d4e38c4e96dd9e1245a2abf2bb2e12aed6", 0x28}, {&(0x7f0000000800)="dea1f523e465231c7513a9eba8e3034a886e6db26ba2320a50562ca4f0540eaa92474485c85b82ef6facbdba46ba9b71d804a8aa01e7bfb3100371ca128a28485290af034ee74a7e2c8c6b549b16f5075922d2df586771ae8531767837d83c674b4829610999a875a91112ac5d962154e3fd2ecca39811c0ac01377918520c969a41e86d3bb3ba9b96a08c726849ee8c", 0x90}], 0x2151) 94.202206ms ago: executing program 1 (id=6646): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x4, 0x109a00) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x1, 0x5, 0x1010, 0xb, 0x1, 0xc, 0x2, 0x310}}) r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x1, 0x8000000004007, 0xac, 0x3, 0x4, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000040), 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x37a}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_create_resource$binfmt(0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r6 = getpid() syz_pidfd_open(r6, 0x0) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680500000082762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000280)) 0s ago: executing program 1 (id=6647): epoll_create1(0x80000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r0, r1, 0x0, 0x4) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000100)={{0xf000, 0xfec00000, 0xa, 0xff, 0x6, 0x7, 0x4, 0xfa, 0x80, 0xb3, 0x0, 0x9}, {0x0, 0x7000, 0x0, 0x2, 0x4, 0x2, 0x1, 0x5, 0xe, 0x9, 0x3, 0x5b}, {0x4, 0xe000, 0xb, 0xe, 0x3, 0xd, 0x0, 0x5, 0x7, 0x6, 0x2, 0x7f}, {0x10000, 0xffffffff, 0x10, 0x8, 0x40, 0x5, 0x2, 0x10, 0x4, 0x10, 0x1, 0x8}, {0x100000, 0x4000, 0xe, 0xf, 0xf, 0xb, 0xd8, 0xd, 0x5, 0x7, 0x5, 0x6}, {0xeeee0000, 0x3000, 0xa, 0x4, 0xfe, 0xe, 0xf9, 0x6, 0x40, 0x0, 0x80, 0x6}, {0x50000, 0x6000, 0xe, 0x7, 0x10, 0x5, 0x5, 0x0, 0x4, 0xf4, 0xf, 0x7}, {0x1, 0x2000, 0xd, 0x1, 0xe4, 0xe, 0xb8, 0x6, 0x9, 0x2, 0x8}, {0xa000, 0x2000}, {0xf000, 0x3}, 0x10010, 0x0, 0xeeee8000, 0xc0, 0x2, 0x1, 0xe6c73000, [0x0, 0x3, 0x9, 0x1]}) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000000)={0xa65343460ccae45f}) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f0000000040)={0x11}) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000002080)={0x2020}, 0x54) kernel console output (not intermixed with test programs): 000 RDI: 0000000000000000 [ 1060.687605][T26267] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1060.687615][T26267] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1060.687625][T26267] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1060.687650][T26267] [ 1060.943273][T26282] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6230'. [ 1060.947238][T26282] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6230'. [ 1061.016134][T26278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1061.026352][T26278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1061.148475][T26038] libceph: connect (1)[c::]:6789 error -101 [ 1061.150676][T26038] libceph: mon0 (1)[c::]:6789 connect error [ 1061.163077][T24971] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.166394][T24971] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.173784][T24971] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.183756][T24971] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.204525][T26296] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 1061.262346][T26300] fuse: Unknown parameter 'user_i00000000000000000000' [ 1061.494155][T26038] libceph: connect (1)[c::]:6789 error -101 [ 1061.505637][T26038] libceph: mon0 (1)[c::]:6789 connect error [ 1061.637509][T26316] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1061.639719][T26316] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1061.642883][T26316] vhci_hcd vhci_hcd.0: Device attached [ 1061.720326][T26321] Bluetooth: MGMT ver 1.23 [ 1061.848424][T26290] ceph: No mds server is up or the cluster is laggy [ 1061.954240][ T6035] usb 56-1: SetAddress Request (10) to port 0 [ 1061.957044][ T6035] usb 56-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1061.969002][T26325] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6240'. [ 1061.979248][T26325] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6240'. [ 1062.275233][T26333] program syz.0.6242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1062.279796][T26317] vhci_hcd: connection reset by peer [ 1062.290473][T25139] vhci_hcd vhci_hcd.9: stop threads [ 1062.292857][T25139] vhci_hcd vhci_hcd.9: release socket [ 1062.306801][T25139] vhci_hcd vhci_hcd.9: disconnect device [ 1062.393326][T26337] fuse: Unknown parameter 'user_id00000000000000000000' [ 1062.767162][ T54] usb 38-1: device descriptor read/8, error -110 [ 1062.809164][T26038] usb 13-1: new full-speed USB device number 27 using dummy_hcd [ 1062.994386][T26038] usb 13-1: config 0 has an invalid interface number: 1 but max is 0 [ 1062.997941][T26038] usb 13-1: config 0 has no interface number 0 [ 1063.000289][T26038] usb 13-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 29599, setting to 64 [ 1063.004262][T26038] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1063.008465][T26038] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.014545][T26038] usb 13-1: config 0 descriptor?? [ 1063.017739][T26340] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1063.034017][T26038] iowarrior 13-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1063.217652][ T54] usb usb38-port1: attempt power cycle [ 1063.238742][ T6182] usb 13-1: USB disconnect, device number 27 [ 1063.406749][T24752] IPVS: starting estimator thread 0... [ 1063.518075][T26350] IPVS: using max 25 ests per chain, 60000 per kthread [ 1063.546479][T26356] netlink: 104 bytes leftover after parsing attributes in process `syz.9.6251'. [ 1063.550353][T26356] netlink: 104 bytes leftover after parsing attributes in process `syz.9.6251'. [ 1063.603757][T26359] fuse: Unknown parameter 'user_id00000000000000000000' [ 1063.627374][T26361] openvswitch: netlink: Unknown key attributes 2 [ 1063.840763][ T54] usb usb38-port1: unable to enumerate USB device [ 1064.349144][T26365] loop5: detected capacity change from 0 to 36 [ 1064.352013][T26365] loop5: AHDI p1 p2 [ 1064.353761][T26365] loop5: p1 start 1702000233 is beyond EOD, truncated [ 1064.455645][T26393] fuse: Unknown parameter 'user_id00000000000000000000' [ 1064.808706][ T54] usb 13-1: new high-speed USB device number 28 using dummy_hcd [ 1064.968618][ T54] usb 13-1: Using ep0 maxpacket: 8 [ 1064.981417][ T54] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1064.986267][ T54] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1064.991081][ T54] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1064.995444][ T54] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1065.002999][ T54] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1065.008186][ T54] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.241004][ T54] usb 13-1: GET_CAPABILITIES returned 0 [ 1065.241814][T26428] fuse: Bad value for 'fd' [ 1065.243018][ T54] usbtmc 13-1:16.0: can't read capabilities [ 1065.353598][T24752] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 1065.503252][T24752] usb 14-1: device descriptor read/64, error -71 [ 1065.583576][T26038] usb 13-1: USB disconnect, device number 28 [ 1065.616845][T26442] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1065.619087][T26442] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1065.622377][T26442] vhci_hcd vhci_hcd.0: Device attached [ 1065.663709][T26449] vhci_hcd: connection closed [ 1065.663925][T14184] vhci_hcd vhci_hcd.0: stop threads [ 1065.691644][T14184] vhci_hcd vhci_hcd.0: release socket [ 1065.693477][T14184] vhci_hcd vhci_hcd.0: disconnect device [ 1065.781306][T24752] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 1065.890242][T26456] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1065.893228][T26456] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1065.897130][T26456] vhci_hcd vhci_hcd.0: Device attached [ 1065.923482][T24752] usb 14-1: device descriptor read/64, error -71 [ 1066.038827][T24752] usb usb14-port1: attempt power cycle [ 1066.067161][T26462] fuse: Bad value for 'fd' [ 1066.187468][ T6182] usb 44-1: SetAddress Request (19) to port 0 [ 1066.190709][ T6182] usb 44-1: new SuperSpeed USB device number 19 using vhci_hcd [ 1066.257341][T26469] Bluetooth: MGMT ver 1.23 [ 1066.401170][T24752] usb 14-1: new high-speed USB device number 13 using dummy_hcd [ 1066.423342][T24752] usb 14-1: device descriptor read/8, error -71 [ 1066.505043][T26458] vhci_hcd: connection reset by peer [ 1066.508060][T18850] vhci_hcd vhci_hcd.3: stop threads [ 1066.510399][T18850] vhci_hcd vhci_hcd.3: release socket [ 1066.519288][T18850] vhci_hcd vhci_hcd.3: disconnect device [ 1066.679125][T24752] usb 14-1: new high-speed USB device number 14 using dummy_hcd [ 1066.701041][T24752] usb 14-1: device descriptor read/8, error -71 [ 1066.736217][T26485] __nla_validate_parse: 2 callbacks suppressed [ 1066.736233][T26485] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6288'. [ 1066.818499][T24752] usb usb14-port1: unable to enumerate USB device [ 1067.165590][T26489] FAULT_INJECTION: forcing a failure. [ 1067.165590][T26489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1067.171121][T26489] CPU: 2 UID: 0 PID: 26489 Comm: syz.0.6289 Tainted: G L syzkaller #0 PREEMPT(full) [ 1067.171140][T26489] Tainted: [L]=SOFTLOCKUP [ 1067.171144][T26489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1067.171151][T26489] Call Trace: [ 1067.171155][T26489] [ 1067.171160][T26489] dump_stack_lvl+0x16c/0x1f0 [ 1067.171182][T26489] should_fail_ex+0x512/0x640 [ 1067.171197][T26489] _copy_to_user+0x32/0xd0 [ 1067.171212][T26489] do_devinfo_ioctl+0x646/0x830 [ 1067.171242][T26489] ? __pfx_do_devinfo_ioctl+0x10/0x10 [ 1067.171261][T26489] ? kasan_save_track+0x14/0x30 [ 1067.171277][T26489] ? kasan_save_free_info+0x3b/0x60 [ 1067.171288][T26489] ? __kasan_slab_free+0x5f/0x80 [ 1067.171302][T26489] ? kfree+0x2f8/0x6e0 [ 1067.171313][T26489] ? tomoyo_path_number_perm+0x470/0x580 [ 1067.171326][T26489] ? security_file_ioctl_compat+0x9b/0x240 [ 1067.171340][T26489] ? __ia32_compat_sys_ioctl+0xc3/0x370 [ 1067.171353][T26489] ? __do_fast_syscall_32+0xe8/0x680 [ 1067.171373][T26489] comedi_unlocked_ioctl+0x21d6/0x2eb0 [ 1067.171389][T26489] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1067.171408][T26489] ? kasan_quarantine_put+0x10a/0x240 [ 1067.171423][T26489] ? lockdep_hardirqs_on+0x7c/0x110 [ 1067.171442][T26489] ? find_held_lock+0x2b/0x80 [ 1067.171457][T26489] ? tomoyo_path_number_perm+0x295/0x580 [ 1067.171472][T26489] ? tomoyo_path_number_perm+0x18d/0x580 [ 1067.171486][T26489] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1067.171500][T26489] comedi_compat_ioctl+0x1ed/0xda0 [ 1067.171512][T26489] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 1067.171523][T26489] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1067.171542][T26489] ? do_vfs_ioctl+0x128/0x14f0 [ 1067.171555][T26489] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1067.171573][T26489] ? find_held_lock+0x2b/0x80 [ 1067.171586][T26489] ? hook_file_ioctl_common+0x144/0x410 [ 1067.171603][T26489] ? __fget_files+0x20e/0x3c0 [ 1067.171619][T26489] ? __fput_deferred+0x480/0x480 [ 1067.171632][T26489] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 1067.171644][T26489] __ia32_compat_sys_ioctl+0x242/0x370 [ 1067.171660][T26489] __do_fast_syscall_32+0xe8/0x680 [ 1067.171679][T26489] do_fast_syscall_32+0x32/0x80 [ 1067.171689][T26489] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1067.171703][T26489] RIP: 0023:0xf701d579 [ 1067.171713][T26489] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1067.171724][T26489] RSP: 002b:00000000f540d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1067.171736][T26489] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080b06401 [ 1067.171743][T26489] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 1067.171750][T26489] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1067.171756][T26489] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1067.171763][T26489] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1067.171777][T26489] [ 1067.174615][T26488] fuse: Bad value for 'fd' [ 1067.275213][T26494] loop9: detected capacity change from 0 to 7 [ 1067.312062][T26494] Dev loop9: unable to read RDB block 7 [ 1067.315288][T26494] loop9: unable to read partition table [ 1067.317974][T26494] loop9: partition table beyond EOD, truncated [ 1067.323137][T26494] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1067.384704][ T6035] usb 56-1: device descriptor read/8, error -110 [ 1067.609236][T26508] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1067.611806][T26508] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1067.615016][T26508] vhci_hcd vhci_hcd.0: Device attached [ 1067.746706][T26515] FAULT_INJECTION: forcing a failure. [ 1067.746706][T26515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1067.757500][T26515] CPU: 1 UID: 0 PID: 26515 Comm: syz.8.6299 Tainted: G L syzkaller #0 PREEMPT(full) [ 1067.757520][T26515] Tainted: [L]=SOFTLOCKUP [ 1067.757524][T26515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1067.757531][T26515] Call Trace: [ 1067.757536][T26515] [ 1067.757542][T26515] dump_stack_lvl+0x16c/0x1f0 [ 1067.757578][T26515] should_fail_ex+0x512/0x640 [ 1067.757594][T26515] _copy_to_user+0x32/0xd0 [ 1067.757608][T26515] simple_read_from_buffer+0xcb/0x170 [ 1067.757625][T26515] proc_fail_nth_read+0x197/0x240 [ 1067.757645][T26515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1067.757665][T26515] ? rw_verify_area+0xcf/0x6c0 [ 1067.757679][T26515] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1067.757698][T26515] vfs_read+0x1e4/0xcf0 [ 1067.757714][T26515] ? __pfx___mutex_lock+0x10/0x10 [ 1067.757734][T26515] ? __pfx_vfs_read+0x10/0x10 [ 1067.757748][T26515] ? find_held_lock+0x2b/0x80 [ 1067.757766][T26515] ? __fget_files+0x20e/0x3c0 [ 1067.757787][T26515] ksys_read+0x12a/0x250 [ 1067.757802][T26515] ? __pfx_ksys_read+0x10/0x10 [ 1067.757818][T26515] ? fput+0x70/0xf0 [ 1067.757831][T26515] __do_fast_syscall_32+0xe8/0x680 [ 1067.757850][T26515] do_fast_syscall_32+0x32/0x80 [ 1067.757861][T26515] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1067.757876][T26515] RIP: 0023:0xf7fe5579 [ 1067.757885][T26515] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1067.757895][T26515] RSP: 002b:00000000f54d6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1067.757907][T26515] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54d6620 [ 1067.757914][T26515] RDX: 000000000000000f RSI: 00000000f7476ff4 RDI: 0000000000000000 [ 1067.757920][T26515] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1067.757927][T26515] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1067.757933][T26515] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1067.757953][T26515] [ 1067.812944][ T6035] usb usb56-port1: attempt power cycle [ 1068.004967][T26524] Cannot find add_set index 2 as target [ 1068.073044][T26526] input: syz0 as /devices/virtual/input/input97 [ 1068.126397][T26530] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6304'. [ 1068.129899][T26530] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6304'. [ 1068.288593][T26539] loop6: detected capacity change from 0 to 524288000 [ 1068.393065][T26544] /dev/nullb0: Can't open blockdev [ 1068.485719][T26512] vhci_hcd: connection closed [ 1068.488723][T26549] fuse: Unknown parameter '0xffffffffffffffff' [ 1068.507521][T18850] vhci_hcd vhci_hcd.3: stop threads [ 1068.509330][T18850] vhci_hcd vhci_hcd.3: release socket [ 1068.511669][T18850] vhci_hcd vhci_hcd.3: disconnect device [ 1068.733506][ T6035] usb usb56-port1: unable to enumerate USB device [ 1069.240673][T26563] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1069.384249][T24752] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 1069.508347][T26575] overlayfs: failed to resolve './file0': -2 [ 1069.558308][T24752] usb 5-1: device descriptor read/64, error -71 [ 1069.822180][T24752] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 1069.971838][T24752] usb 5-1: device descriptor read/64, error -71 [ 1069.981856][T26588] ubi31: detaching mtd0 [ 1070.006265][T26588] ubi31: mtd0 is detached [ 1070.089724][T24752] usb usb5-port1: attempt power cycle [ 1070.104844][T26588] bond2: peer notification delay (512) is not a multiple of miimon (5), value rounded to 510 ms [ 1070.114413][T26591] netlink: 104 bytes leftover after parsing attributes in process `syz.9.6323'. [ 1070.117584][T26591] netlink: 104 bytes leftover after parsing attributes in process `syz.9.6323'. [ 1070.120129][T26588] bond2 (unregistering): Released all slaves [ 1070.474279][T24752] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 1070.496219][T24752] usb 5-1: device descriptor read/8, error -71 [ 1070.773630][T24752] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 1070.806303][T24752] usb 5-1: device descriptor read/8, error -71 [ 1070.932157][T24752] usb usb5-port1: unable to enumerate USB device [ 1071.373110][T26626] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6335'. [ 1071.390830][T26626] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6335'. [ 1071.399978][T26628] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6336'. [ 1071.403912][T26629] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6336'. [ 1071.408653][T26628] netlink: 140 bytes leftover after parsing attributes in process `syz.9.6336'. [ 1071.575531][ T6182] usb 44-1: device descriptor read/8, error -110 [ 1072.014656][ T6182] usb usb44-port1: attempt power cycle [ 1072.323863][T26038] usb 13-1: new high-speed USB device number 29 using dummy_hcd [ 1072.633751][T26038] usb 13-1: Using ep0 maxpacket: 8 [ 1072.636822][T26038] usb 13-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1072.640636][T26038] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.644962][ T6182] usb usb44-port1: unable to enumerate USB device [ 1072.649379][T26038] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1072.652620][T26038] pvrusb2: ********** [ 1072.654430][T26038] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1072.659290][T26038] pvrusb2: Important functionality might not be entirely working. [ 1072.662985][T26038] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1072.667692][T26038] pvrusb2: ********** [ 1072.955077][ T6182] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1073.668178][ T6182] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1073.672183][ T6182] usb 8-1: config 1 has an invalid descriptor of length 160, skipping remainder of the config [ 1073.675492][ T6182] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1073.678514][ T6182] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 73, changing to 10 [ 1073.682213][ T6182] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50983, setting to 1024 [ 1073.687191][ T6182] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1073.690297][ T6182] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1073.693019][ T6182] usb 8-1: Product: syz [ 1073.694414][ T6182] usb 8-1: Manufacturer: syz [ 1073.697542][T26671] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1073.700691][ T6182] cdc_wdm 8-1:1.0: skipping garbage [ 1073.702647][ T6182] cdc_wdm 8-1:1.0: skipping garbage [ 1073.705132][ T6182] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1073.707095][ T6182] cdc_wdm 8-1:1.0: Unknown control protocol [ 1073.735149][ T2483] pvrusb2: Invalid write control endpoint [ 1073.797655][ T2483] pvrusb2: Invalid write control endpoint [ 1073.800561][ T2483] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1073.803638][ T2483] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1073.806072][ T2483] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1073.809453][ T2483] pvrusb2: Device being rendered inoperable [ 1073.812519][ T2483] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1073.814922][ T2483] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 1073.817755][ T2483] pvrusb2: Attached sub-driver cx25840 [ 1073.819595][ T2483] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1073.822947][ T2483] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1075.136920][T26684] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6340'. [ 1075.179041][T26686] loop9: detected capacity change from 0 to 7 [ 1075.185135][T26686] Dev loop9: unable to read RDB block 7 [ 1075.191304][T26686] loop9: unable to read partition table [ 1075.196064][T26686] loop9: partition table beyond EOD, truncated [ 1075.199896][T26686] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1075.425677][T26703] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6355'. [ 1075.468232][T26703] kvm: pic: non byte read [ 1075.472660][T26703] kvm: pic: non byte read [ 1075.477500][T26703] kvm: pic: non byte read [ 1075.481714][T26703] kvm: pic: single mode not supported [ 1075.481834][T26703] kvm: pic: level sensitive irq not supported [ 1075.484881][T26703] kvm: pic: non byte read [ 1075.491250][T26703] kvm: pic: single mode not supported [ 1075.491266][T26703] kvm: pic: level sensitive irq not supported [ 1075.494121][T26703] kvm: pic: non byte read [ 1075.500055][T26703] kvm: pic: single mode not supported [ 1075.500503][T26703] kvm: pic: non byte read [ 1075.506648][T26703] kvm: pic: non byte read [ 1075.511268][T26703] kvm: pic: non byte read [ 1075.515139][T26703] kvm: pic: level sensitive irq not supported [ 1075.515629][T26703] kvm: pic: non byte read [ 1075.835206][ T6035] usb 8-1: USB disconnect, device number 43 [ 1075.987275][T26717] loop9: detected capacity change from 0 to 7 [ 1075.990438][T26717] Dev loop9: unable to read RDB block 7 [ 1075.992880][T26717] loop9: unable to read partition table [ 1075.995330][T26717] loop9: partition table beyond EOD, truncated [ 1075.997807][T26717] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1076.675720][T26731] 9p: Bad value for 'rfdno' [ 1076.943332][T26737] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6366'. [ 1076.949296][T26737] batadv1: entered allmulticast mode [ 1076.965053][T26037] usb 13-1: USB disconnect, device number 29 [ 1077.080847][T26746] loop9: detected capacity change from 0 to 7 [ 1077.083428][T26746] Dev loop9: unable to read RDB block 7 [ 1077.085661][T26746] loop9: unable to read partition table [ 1077.088411][T26746] loop9: partition table beyond EOD, truncated [ 1077.091213][T26746] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1077.130940][T26748] xt_HMARK: spi-set and port-set can't be combined [ 1077.149278][T26748] overlayfs: failed lookup in lower (newroot/483, name='file1', err=-40): overlapping layers [ 1077.861716][ T54] usb 14-1: new high-speed USB device number 15 using dummy_hcd [ 1077.952213][T26776] loop9: detected capacity change from 0 to 7 [ 1077.954626][T26776] Dev loop9: unable to read RDB block 7 [ 1077.956791][T26776] loop9: unable to read partition table [ 1077.959531][T26776] loop9: partition table beyond EOD, truncated [ 1077.961643][T26776] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1078.000577][T24752] IPVS: starting estimator thread 0... [ 1078.032703][ T54] usb 14-1: Using ep0 maxpacket: 8 [ 1078.054934][ T54] usb 14-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1078.059384][ T54] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.068432][ T54] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1078.072130][ T54] pvrusb2: ********** [ 1078.073842][ T54] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1078.080430][ T54] pvrusb2: Important functionality might not be entirely working. [ 1078.083313][ T54] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1078.090036][ T54] pvrusb2: ********** [ 1078.111107][T26779] IPVS: using max 48 ests per chain, 115200 per kthread [ 1078.492329][ T2483] pvrusb2: Invalid write control endpoint [ 1078.622102][ T2483] pvrusb2: Invalid write control endpoint [ 1078.663277][ T2483] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1078.666933][ T2483] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1078.669424][ T2483] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1078.673300][ T2483] pvrusb2: Device being rendered inoperable [ 1078.679414][ T2483] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1078.682437][ T2483] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 1078.686427][ T2483] pvrusb2: Attached sub-driver cx25840 [ 1078.688776][ T2483] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1078.693004][ T2483] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1079.012852][T26790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6384'. [ 1079.042424][T26793] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6378'. [ 1079.114664][T26769] kexec: Could not allocate control_code_buffer [ 1079.232120][T26799] fuse: Unknown parameter '0x0000000000000003' [ 1079.299099][T26804] loop9: detected capacity change from 0 to 7 [ 1079.302160][T26804] Dev loop9: unable to read RDB block 7 [ 1079.305054][T26804] loop9: unable to read partition table [ 1079.307883][T26804] loop9: partition table beyond EOD, truncated [ 1079.310619][T26804] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1079.519437][T26811] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1079.765273][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 1079.765284][ T40] audit: type=1326 audit(2000000305.911:7246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26805 comm="syz.3.6391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1079.785830][ T40] audit: type=1326 audit(2000000305.911:7247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26805 comm="syz.3.6391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1079.794310][ T40] audit: type=1326 audit(2000000305.911:7248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26805 comm="syz.3.6391" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1079.844591][ T40] audit: type=1326 audit(2000000305.986:7249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26805 comm="syz.3.6391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1079.869241][ T40] audit: type=1326 audit(2000000305.986:7250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26805 comm="syz.3.6391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1079.888583][ T40] audit: type=1326 audit(2000000306.024:7251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26805 comm="syz.3.6391" exe="/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1079.904997][T26832] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6394'. [ 1079.908941][ T40] audit: type=1326 audit(2000000306.024:7252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26805 comm="syz.3.6391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1079.916570][ T40] audit: type=1326 audit(2000000306.024:7253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26805 comm="syz.3.6391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1079.934745][ T40] audit: type=1326 audit(2000000306.024:7254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26805 comm="syz.3.6391" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1080.116195][ T40] audit: type=1326 audit(2000000306.230:7255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26805 comm="syz.3.6391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1080.487294][T26843] fuse: Unknown parameter '0x0000000000000003' [ 1080.849046][T26037] usb 14-1: USB disconnect, device number 15 [ 1081.265280][T26862] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1081.696193][T26869] loop9: detected capacity change from 0 to 7 [ 1081.698407][T26869] Dev loop9: unable to read RDB block 7 [ 1081.700199][T26869] loop9: unable to read partition table [ 1081.701956][T26869] loop9: partition table beyond EOD, truncated [ 1081.703813][T26869] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1081.784715][T26871] netlink: 'syz.3.6406': attribute type 21 has an invalid length. [ 1081.787554][T26871] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6406'. [ 1081.790630][T26871] netlink: 'syz.3.6406': attribute type 5 has an invalid length. [ 1081.793346][T26871] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6406'. [ 1082.425465][T26880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.429666][T26881] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1082.433462][T26880] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1082.645253][T26887] loop9: detected capacity change from 0 to 7 [ 1082.646644][T13161] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1082.650346][T26887] Dev loop9: unable to read RDB block 7 [ 1082.652589][T26037] hid_parser_main: 8 callbacks suppressed [ 1082.652604][T26037] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1082.654917][T13161] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1082.670876][T26887] loop9: unable to read partition table [ 1082.673550][T26887] loop9: partition table beyond EOD, truncated [ 1082.676148][T26887] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1082.676241][T13161] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1082.686031][T13161] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1082.689742][T13161] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1082.693795][T26037] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1082.724625][T26037] IPVS: starting estimator thread 0... [ 1082.747718][T26894] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20003 [ 1082.754858][T26890] can: request_module (can-proto-0) failed. [ 1082.755710][T26886] lo speed is unknown, defaulting to 1000 [ 1082.815526][T26884] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6413'. [ 1082.819403][T26884] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6413'. [ 1082.835588][T26893] IPVS: using max 48 ests per chain, 115200 per kthread [ 1082.926487][T26904] fuse: Unknown parameter '0x0000000000000003' [ 1083.295523][T26921] FAULT_INJECTION: forcing a failure. [ 1083.295523][T26921] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.299764][T26921] CPU: 2 UID: 0 PID: 26921 Comm: syz.0.6423 Tainted: G L syzkaller #0 PREEMPT(full) [ 1083.299783][T26921] Tainted: [L]=SOFTLOCKUP [ 1083.299787][T26921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1083.299795][T26921] Call Trace: [ 1083.299799][T26921] [ 1083.299804][T26921] dump_stack_lvl+0x16c/0x1f0 [ 1083.299826][T26921] should_fail_ex+0x512/0x640 [ 1083.299839][T26921] ? fs_reclaim_acquire+0xae/0x150 [ 1083.299858][T26921] should_failslab+0xc2/0x120 [ 1083.299876][T26921] __kmalloc_noprof+0xeb/0x910 [ 1083.299888][T26921] ? tomoyo_encode2+0x100/0x3e0 [ 1083.299906][T26921] ? tomoyo_encode2+0x100/0x3e0 [ 1083.299920][T26921] tomoyo_encode2+0x100/0x3e0 [ 1083.299937][T26921] tomoyo_encode+0x29/0x50 [ 1083.299951][T26921] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1083.299968][T26921] ? tomoyo_profile+0x47/0x60 [ 1083.299986][T26921] tomoyo_path_number_perm+0x245/0x580 [ 1083.299998][T26921] ? tomoyo_path_number_perm+0x237/0x580 [ 1083.300012][T26921] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1083.300039][T26921] ? find_held_lock+0x2b/0x80 [ 1083.300059][T26921] ? hook_file_ioctl_common+0x144/0x410 [ 1083.300076][T26921] ? __fget_files+0x20e/0x3c0 [ 1083.300091][T26921] ? __fput_deferred+0x480/0x480 [ 1083.300105][T26921] security_file_ioctl_compat+0x9b/0x240 [ 1083.300120][T26921] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1083.300136][T26921] __do_fast_syscall_32+0xe8/0x680 [ 1083.300169][T26921] do_fast_syscall_32+0x32/0x80 [ 1083.300180][T26921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1083.300195][T26921] RIP: 0023:0xf701d579 [ 1083.300204][T26921] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1083.300215][T26921] RSP: 002b:00000000f540d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1083.300226][T26921] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000007c80 [ 1083.300233][T26921] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1083.300240][T26921] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1083.300246][T26921] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1083.300253][T26921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1083.300267][T26921] [ 1083.300327][T26921] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1083.399080][T25067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1083.402134][T26916] /dev/sr0: Can't open blockdev [ 1083.409033][T25067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1083.413031][T25067] bond0 (unregistering): Released all slaves [ 1083.417395][T25067] bond1 (unregistering): Released all slaves [ 1083.470347][T26927] fuse: Unknown parameter '0x0000000000000003' [ 1083.485436][T26886] chnl_net:caif_netlink_parms(): no params data found [ 1083.605579][T26933] netlink: 'syz.0.6426': attribute type 10 has an invalid length. [ 1083.616504][T26933] syz_tun: entered promiscuous mode [ 1083.622362][T26933] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1083.651486][T26886] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.655880][T26886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.658368][T26886] bridge_slave_0: entered allmulticast mode [ 1083.661197][T26886] bridge_slave_0: entered promiscuous mode [ 1083.694301][T26886] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.697243][T26886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.709430][T26886] bridge_slave_1: entered allmulticast mode [ 1083.718212][T26886] bridge_slave_1: entered promiscuous mode [ 1083.779970][T25067] hsr_slave_0: left promiscuous mode [ 1083.783375][T25067] hsr_slave_1: left promiscuous mode [ 1083.786435][T25067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1083.790416][T25067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1084.020612][T26948] FAULT_INJECTION: forcing a failure. [ 1084.020612][T26948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1084.026721][T26948] CPU: 2 UID: 0 PID: 26948 Comm: syz.8.6432 Tainted: G L syzkaller #0 PREEMPT(full) [ 1084.026772][T26948] Tainted: [L]=SOFTLOCKUP [ 1084.026777][T26948] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1084.026785][T26948] Call Trace: [ 1084.026790][T26948] [ 1084.026795][T26948] dump_stack_lvl+0x16c/0x1f0 [ 1084.026817][T26948] should_fail_ex+0x512/0x640 [ 1084.026834][T26948] _copy_to_user+0x32/0xd0 [ 1084.026849][T26948] simple_read_from_buffer+0xcb/0x170 [ 1084.026867][T26948] proc_fail_nth_read+0x197/0x240 [ 1084.026888][T26948] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1084.026909][T26948] ? rw_verify_area+0xcf/0x6c0 [ 1084.026924][T26948] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1084.026943][T26948] vfs_read+0x1e4/0xcf0 [ 1084.026961][T26948] ? __pfx___mutex_lock+0x10/0x10 [ 1084.026981][T26948] ? __pfx_vfs_read+0x10/0x10 [ 1084.026996][T26948] ? find_held_lock+0x2b/0x80 [ 1084.027016][T26948] ? __fget_files+0x20e/0x3c0 [ 1084.027037][T26948] ksys_read+0x12a/0x250 [ 1084.027058][T26948] ? __pfx_ksys_read+0x10/0x10 [ 1084.027075][T26948] ? fput+0x70/0xf0 [ 1084.027101][T26948] __do_fast_syscall_32+0xe8/0x680 [ 1084.027122][T26948] do_fast_syscall_32+0x32/0x80 [ 1084.027132][T26948] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1084.027147][T26948] RIP: 0023:0xf7fe5579 [ 1084.027156][T26948] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1084.027167][T26948] RSP: 002b:00000000f54d6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1084.027179][T26948] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54d6620 [ 1084.027186][T26948] RDX: 000000000000000f RSI: 00000000f7476ff4 RDI: 0000000000000000 [ 1084.027193][T26948] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1084.027199][T26948] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1084.027205][T26948] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1084.027219][T26948] [ 1084.296029][T25067] team0 (unregistering): Port device team_slave_1 removed [ 1084.327982][T25067] team0 (unregistering): Port device team_slave_0 removed [ 1084.647541][T26886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1084.653039][T26886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1084.668663][T26952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1084.684926][T26886] team0: Port device team_slave_0 added [ 1084.689762][T26886] team0: Port device team_slave_1 added [ 1084.718765][T26886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1084.721807][T26886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.732750][T26886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1084.739885][T26886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1084.743126][T26886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.754938][T26886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.917359][ T5937] Bluetooth: hci0: command tx timeout [ 1084.957180][T26886] hsr_slave_0: entered promiscuous mode [ 1084.977706][T26886] hsr_slave_1: entered promiscuous mode [ 1084.997529][T26886] debugfs: 'hsr0' already exists in 'hsr' [ 1085.002975][T26886] Cannot create hsr debugfs directory [ 1085.044559][T26962] batman_adv: batadv0: Adding interface: gretap1 [ 1085.047544][T26962] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.058056][T26962] batman_adv: batadv0: Interface activated: gretap1 [ 1085.198180][T25067] IPVS: stop unused estimator thread 0... [ 1085.380667][T26973] overlayfs: failed to resolve './file0': -2 [ 1085.604955][T26886] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1085.621693][T26886] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1085.627255][T26886] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1085.627591][T26984] loop9: detected capacity change from 0 to 7 [ 1085.633092][T26984] Dev loop9: unable to read RDB block 7 [ 1085.634646][T26886] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1085.636598][T26984] loop9: unable to read partition table [ 1085.640795][T26984] loop9: partition table beyond EOD, truncated [ 1085.643891][T26984] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1085.936359][T26886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1085.964515][T26886] 8021q: adding VLAN 0 to HW filter on device team0 [ 1085.974181][T25575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.977032][T25575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.018465][T26886] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1086.022804][T26886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1086.031465][T25575] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.033967][T25575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.051369][T27010] QAT: failed to copy from user cfg_data. [ 1086.158277][T26886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1086.187227][T27020] fuse: Unknown parameter 'fd0x0000000000000003' [ 1086.312279][T26886] veth0_vlan: entered promiscuous mode [ 1086.317657][T26886] veth1_vlan: entered promiscuous mode [ 1086.344122][T26886] veth0_macvtap: entered promiscuous mode [ 1086.353295][T26886] veth1_macvtap: entered promiscuous mode [ 1086.361908][T26886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1086.368714][T26886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1086.388461][T18070] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.392303][T18070] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.400254][T18070] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.405400][T18070] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.412279][T27035] loop9: detected capacity change from 0 to 7 [ 1086.420473][T24739] Dev loop9: unable to read RDB block 7 [ 1086.422420][T24739] loop9: unable to read partition table [ 1086.447047][T25038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.450497][T24739] loop9: partition table beyond EOD, truncated [ 1086.452664][T25038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.456543][T27035] Dev loop9: unable to read RDB block 7 [ 1086.464893][T27035] loop9: unable to read partition table [ 1086.465517][T18064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.467034][T27035] loop9: partition table beyond EOD, truncated [ 1086.467058][T27035] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1086.487752][T18064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.594529][T27044] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1086.598748][T27044] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1086.609873][T27044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6412'. [ 1086.622396][T27044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6412'. [ 1086.628181][T27044] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.630740][T27044] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.151942][ T5937] Bluetooth: hci0: command tx timeout [ 1087.556680][T27063] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 1087.558856][T27063] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1087.561881][T27063] vhci_hcd vhci_hcd.0: Device attached [ 1087.601474][T27067] loop9: detected capacity change from 0 to 7 [ 1087.604981][T27067] Dev loop9: unable to read RDB block 7 [ 1087.607522][T27067] loop9: unable to read partition table [ 1087.610156][T27067] loop9: partition table beyond EOD, truncated [ 1087.615286][T27067] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1087.706361][T27071] Cannot find del_set index 3 as target [ 1087.770527][T27075] binder: BINDER_SET_CONTEXT_MGR already set [ 1087.774634][T27075] binder: 27074:27075 ioctl 4018620d 80000100 returned -16 [ 1087.780951][T27075] binder: BINDER_SET_CONTEXT_MGR already set [ 1087.786165][T27075] binder: 27074:27075 ioctl 4018620d 800002c0 returned -16 [ 1087.849060][T27078] binder: 27074:27078 ioctl 800c4153 80000440 returned -22 [ 1087.851882][T27078] binder: 27074:27078 ioctl 89f1 80000500 returned -22 [ 1087.878866][T17403] usb 54-1: SetAddress Request (32) to port 0 [ 1087.882024][T17403] usb 54-1: new SuperSpeed USB device number 32 using vhci_hcd [ 1087.968598][T27064] vhci_hcd: connection reset by peer [ 1087.970720][T18068] vhci_hcd vhci_hcd.8: stop threads [ 1087.972497][T18068] vhci_hcd vhci_hcd.8: release socket [ 1087.974383][T18068] vhci_hcd vhci_hcd.8: disconnect device [ 1088.103257][T27080] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1088.300535][T27095] loop9: detected capacity change from 0 to 7 [ 1088.303486][T27095] Dev loop9: unable to read RDB block 7 [ 1088.305883][T27095] loop9: unable to read partition table [ 1088.308590][T27095] loop9: partition table beyond EOD, truncated [ 1088.310961][T27095] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1088.705206][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 1088.705222][ T40] audit: type=1326 audit(2000000314.274:7258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27101 comm="syz.0.6476" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 1088.716830][ T40] audit: type=1326 audit(2000000314.274:7259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27101 comm="syz.0.6476" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 1088.726489][ T40] audit: type=1326 audit(2000000314.283:7260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27101 comm="syz.0.6476" exe="/syz-executor" sig=0 arch=40000003 syscall=77 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 1088.735397][ T40] audit: type=1326 audit(2000000314.283:7261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27101 comm="syz.0.6476" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 1088.744080][ T40] audit: type=1326 audit(2000000314.283:7262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27101 comm="syz.0.6476" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 1088.753125][ T40] audit: type=1326 audit(2000000314.293:7263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27101 comm="syz.0.6476" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 1088.762026][ T40] audit: type=1326 audit(2000000314.293:7264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27101 comm="syz.0.6476" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 1088.772369][ T40] audit: type=1326 audit(2000000314.293:7265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27101 comm="syz.0.6476" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 1088.781034][ T40] audit: type=1326 audit(2000000314.293:7266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27101 comm="syz.0.6476" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 1088.789665][ T40] audit: type=1326 audit(2000000314.293:7267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27101 comm="syz.0.6476" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 1088.839954][T27103] kernel profiling enabled (shift: 16) [ 1089.375469][ T5937] Bluetooth: hci0: command tx timeout [ 1089.627434][T27105] FAULT_INJECTION: forcing a failure. [ 1089.627434][T27105] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.633230][T27105] CPU: 3 UID: 0 PID: 27105 Comm: syz.5.6477 Tainted: G L syzkaller #0 PREEMPT(full) [ 1089.633250][T27105] Tainted: [L]=SOFTLOCKUP [ 1089.633254][T27105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1089.633261][T27105] Call Trace: [ 1089.633265][T27105] [ 1089.633270][T27105] dump_stack_lvl+0x16c/0x1f0 [ 1089.633291][T27105] should_fail_ex+0x512/0x640 [ 1089.633304][T27105] ? __kvmalloc_node_noprof+0x129/0xa40 [ 1089.633322][T27105] should_failslab+0xc2/0x120 [ 1089.633339][T27105] __kvmalloc_node_noprof+0x14a/0xa40 [ 1089.633354][T27105] ? aa_file_perm+0x29e/0x1560 [ 1089.633370][T27105] ? seq_read_iter+0x830/0x12d0 [ 1089.633388][T27105] ? seq_read_iter+0x830/0x12d0 [ 1089.633401][T27105] seq_read_iter+0x830/0x12d0 [ 1089.633419][T27105] ? __lock_acquire+0x436/0x2890 [ 1089.633433][T27105] seq_read+0x3a3/0x570 [ 1089.633451][T27105] ? __pfx_seq_read+0x10/0x10 [ 1089.633485][T27105] ? rw_verify_area+0xcf/0x6c0 [ 1089.633506][T27105] ? __pfx_seq_read+0x10/0x10 [ 1089.633530][T27105] vfs_read+0x1e4/0xcf0 [ 1089.633555][T27105] ? __pfx___mutex_lock+0x10/0x10 [ 1089.633584][T27105] ? __pfx_vfs_read+0x10/0x10 [ 1089.633607][T27105] ? find_held_lock+0x2b/0x80 [ 1089.633647][T27105] ? __fget_files+0x20e/0x3c0 [ 1089.633673][T27105] ksys_read+0x12a/0x250 [ 1089.633696][T27105] ? __pfx_ksys_read+0x10/0x10 [ 1089.633728][T27105] __do_fast_syscall_32+0xe8/0x680 [ 1089.633759][T27105] do_fast_syscall_32+0x32/0x80 [ 1089.633775][T27105] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1089.633796][T27105] RIP: 0023:0xf7f37579 [ 1089.633805][T27105] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1089.633817][T27105] RSP: 002b:00000000f542655c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 1089.633828][T27105] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080002080 [ 1089.633836][T27105] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000000 [ 1089.633843][T27105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1089.633849][T27105] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1089.633856][T27105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1089.633870][T27105] [ 1090.037120][T27107] bond2: peer notification delay (512) is not a multiple of miimon (5), value rounded to 510 ms [ 1090.167647][T27107] bond2 (unregistering): Released all slaves [ 1090.346408][T27128] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1090.391152][T27126] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1090.393366][T27126] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1090.396228][T27126] vhci_hcd vhci_hcd.0: Device attached [ 1090.690306][ T6035] usb 38-1: SetAddress Request (10) to port 0 [ 1090.692943][ T6035] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1090.769843][T27120] bond0: (slave syz_tun): Releasing backup interface [ 1090.784225][T27120] bridge_slave_0: left allmulticast mode [ 1090.786946][T27120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.792310][T27120] bridge_slave_1: left allmulticast mode [ 1090.794307][T27120] bridge_slave_1: left promiscuous mode [ 1090.796286][T27120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.801671][T27120] bond0: (slave bond_slave_0): Releasing backup interface [ 1090.806214][T27120] bond0: (slave bond_slave_1): Releasing backup interface [ 1090.813359][T27120] team0: Port device team_slave_0 removed [ 1090.817786][T27120] team0: Port device team_slave_1 removed [ 1090.823433][T27120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1090.826716][T27120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.846645][T27120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1090.851003][T27120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.851388][T27140] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6486'. [ 1090.862421][T27120] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1090.891278][T27142] FAULT_INJECTION: forcing a failure. [ 1090.891278][T27142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1090.896676][T27142] CPU: 1 UID: 0 PID: 27142 Comm: syz.9.6487 Tainted: G L syzkaller #0 PREEMPT(full) [ 1090.896695][T27142] Tainted: [L]=SOFTLOCKUP [ 1090.896699][T27142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1090.896706][T27142] Call Trace: [ 1090.896710][T27142] [ 1090.896715][T27142] dump_stack_lvl+0x16c/0x1f0 [ 1090.896738][T27142] should_fail_ex+0x512/0x640 [ 1090.896753][T27142] _copy_to_iter+0x463/0x1710 [ 1090.896769][T27142] ? __pfx__copy_to_iter+0x10/0x10 [ 1090.896782][T27142] ? fput+0x70/0xf0 [ 1090.896793][T27142] ? __pfx_ep_show_fdinfo+0x10/0x10 [ 1090.896809][T27142] ? seq_show+0x574/0x880 [ 1090.896822][T27142] seq_read_iter+0xd02/0x12d0 [ 1090.896843][T27142] seq_read+0x3a3/0x570 [ 1090.896858][T27142] ? __pfx_seq_read+0x10/0x10 [ 1090.896880][T27142] ? rw_verify_area+0xcf/0x6c0 [ 1090.896894][T27142] ? __pfx_seq_read+0x10/0x10 [ 1090.896908][T27142] vfs_read+0x1e4/0xcf0 [ 1090.896925][T27142] ? __pfx___mutex_lock+0x10/0x10 [ 1090.896944][T27142] ? __pfx_vfs_read+0x10/0x10 [ 1090.896958][T27142] ? find_held_lock+0x2b/0x80 [ 1090.896977][T27142] ? __fget_files+0x20e/0x3c0 [ 1090.897002][T27142] ksys_read+0x12a/0x250 [ 1090.897017][T27142] ? __pfx_ksys_read+0x10/0x10 [ 1090.897036][T27142] __do_fast_syscall_32+0xe8/0x680 [ 1090.897056][T27142] do_fast_syscall_32+0x32/0x80 [ 1090.897066][T27142] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1090.897080][T27142] RIP: 0023:0xf701d579 [ 1090.897090][T27142] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1090.897101][T27142] RSP: 002b:00000000f540d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 1090.897112][T27142] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080002080 [ 1090.897119][T27142] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000000 [ 1090.897126][T27142] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1090.897132][T27142] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1090.897139][T27142] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1090.897153][T27142] [ 1090.993418][T27133] vhci_hcd: connection reset by peer [ 1090.998187][T24971] vhci_hcd vhci_hcd.0: stop threads [ 1091.001049][T24971] vhci_hcd vhci_hcd.0: release socket [ 1091.003893][T24971] vhci_hcd vhci_hcd.0: disconnect device [ 1091.147809][T27153] hsr0: entered promiscuous mode [ 1091.150908][T27153] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6493'. [ 1091.155415][T27153] hsr_slave_0: left promiscuous mode [ 1091.157915][T27153] hsr_slave_1: left promiscuous mode [ 1091.182111][T27153] hsr0 (unregistering): left promiscuous mode [ 1091.575734][ T6182] libceph: connect (1)[c::]:6789 error -101 [ 1091.578203][ T6182] libceph: mon0 (1)[c::]:6789 connect error [ 1091.664007][T13161] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1091.666492][T13161] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1091.668063][T13161] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1091.677837][T13161] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1091.680717][T13161] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1091.694557][ T73] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.763954][T27161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1091.767288][T27161] 8021q: adding VLAN 0 to HW filter on device team0 [ 1091.775589][T27161] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1091.781276][T26038] lo speed is unknown, defaulting to 1000 [ 1091.783156][T26038] syz2: Port: 1 Link ACTIVE [ 1091.811245][ T73] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.855854][ T6182] libceph: connect (1)[c::]:6789 error -101 [ 1091.858277][ T6182] libceph: mon0 (1)[c::]:6789 connect error [ 1092.041096][T27172] bond1: peer notification delay (512) is not a multiple of miimon (5), value rounded to 510 ms [ 1092.089029][T27172] bond1 (unregistering): Released all slaves [ 1092.094065][T27175] FAULT_INJECTION: forcing a failure. [ 1092.094065][T27175] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1092.099265][T27175] CPU: 3 UID: 0 PID: 27175 Comm: syz.0.6498 Tainted: G L syzkaller #0 PREEMPT(full) [ 1092.099286][T27175] Tainted: [L]=SOFTLOCKUP [ 1092.099290][T27175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1092.099297][T27175] Call Trace: [ 1092.099302][T27175] [ 1092.099308][T27175] dump_stack_lvl+0x16c/0x1f0 [ 1092.099329][T27175] should_fail_ex+0x512/0x640 [ 1092.099345][T27175] should_fail_alloc_page+0xe7/0x130 [ 1092.099364][T27175] prepare_alloc_pages+0x401/0x670 [ 1092.099385][T27175] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1092.099404][T27175] ? find_held_lock+0x2b/0x80 [ 1092.099420][T27175] ? is_bpf_text_address+0x8a/0x1a0 [ 1092.099435][T27175] ? bpf_ksym_find+0x124/0x1c0 [ 1092.099447][T27175] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1092.099461][T27175] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1092.099479][T27175] ? is_bpf_text_address+0x94/0x1a0 [ 1092.099494][T27175] ? kernel_text_address+0x8d/0x100 [ 1092.099507][T27175] ? __kernel_text_address+0xd/0x40 [ 1092.099520][T27175] ? unwind_get_return_address+0x59/0xa0 [ 1092.099541][T27175] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1092.099559][T27175] ? policy_nodemask+0xea/0x4e0 [ 1092.099578][T27175] alloc_pages_mpol+0x1fb/0x550 [ 1092.099595][T27175] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1092.099616][T27175] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1092.099629][T27175] vma_alloc_folio_noprof+0xed/0x1e0 [ 1092.099640][T27175] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1092.099656][T27175] do_anonymous_page+0xc81/0x2190 [ 1092.099674][T27175] __handle_mm_fault+0x1ecf/0x2bb0 [ 1092.099690][T27175] ? __pfx___handle_mm_fault+0x10/0x10 [ 1092.099710][T27175] ? find_vma+0xbf/0x140 [ 1092.099729][T27175] ? __pfx_find_vma+0x10/0x10 [ 1092.099746][T27175] handle_mm_fault+0x3fe/0xad0 [ 1092.099764][T27175] do_user_addr_fault+0x7a6/0x1370 [ 1092.099779][T27175] ? rcu_is_watching+0x12/0xc0 [ 1092.099801][T27175] exc_page_fault+0x64/0xc0 [ 1092.099819][T27175] asm_exc_page_fault+0x26/0x30 [ 1092.099830][T27175] RIP: 0010:_copy_to_iter+0x4e6/0x1710 [ 1092.099843][T27175] Code: 45 e8 fe 22 16 fd 48 8b 4c 24 18 48 8b 44 24 28 89 ee 4c 8d 34 01 4c 89 f7 e8 d6 0c 7f fd 0f 01 cb 48 89 e9 4c 89 ff 4c 89 f6 a4 0f 1f 00 0f 01 ca 48 89 e8 48 29 eb 48 29 c8 48 01 44 24 28 [ 1092.099854][T27175] RSP: 0018:ffffc90003db79d8 EFLAGS: 00050246 [ 1092.099864][T27175] RAX: 0000000000000001 RBX: 0000000000000054 RCX: 0000000000000054 [ 1092.099871][T27175] RDX: ffffed100ac5580b RSI: ffff8880562ac000 RDI: 0000000080002080 [ 1092.099878][T27175] RBP: 0000000000000054 R08: 0000000000000000 R09: ffffed100ac5580a [ 1092.099885][T27175] R10: ffff8880562ac053 R11: ffff8880293854b0 R12: 0000000000000000 [ 1092.099891][T27175] R13: ffffc90003db7be8 R14: ffff8880562ac000 R15: 0000000080002080 [ 1092.099906][T27175] ? _copy_to_iter+0x4da/0x1710 [ 1092.099921][T27175] ? __pfx__copy_to_iter+0x10/0x10 [ 1092.099934][T27175] ? fput+0x70/0xf0 [ 1092.099945][T27175] ? __pfx_ep_show_fdinfo+0x10/0x10 [ 1092.099960][T27175] ? seq_show+0x574/0x880 [ 1092.099974][T27175] seq_read_iter+0xd02/0x12d0 [ 1092.100000][T27175] seq_read+0x3a3/0x570 [ 1092.100015][T27175] ? __pfx_seq_read+0x10/0x10 [ 1092.100037][T27175] ? rw_verify_area+0xcf/0x6c0 [ 1092.100051][T27175] ? __pfx_seq_read+0x10/0x10 [ 1092.100066][T27175] vfs_read+0x1e4/0xcf0 [ 1092.100083][T27175] ? __pfx___mutex_lock+0x10/0x10 [ 1092.100102][T27175] ? __pfx_vfs_read+0x10/0x10 [ 1092.100116][T27175] ? find_held_lock+0x2b/0x80 [ 1092.100133][T27175] ? __fget_files+0x20e/0x3c0 [ 1092.100153][T27175] ksys_read+0x12a/0x250 [ 1092.100169][T27175] ? __pfx_ksys_read+0x10/0x10 [ 1092.100188][T27175] __do_fast_syscall_32+0xe8/0x680 [ 1092.100207][T27175] do_fast_syscall_32+0x32/0x80 [ 1092.100218][T27175] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1092.100232][T27175] RIP: 0023:0xf701d579 [ 1092.100240][T27175] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1092.100250][T27175] RSP: 002b:00000000f540d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 1092.100260][T27175] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080002080 [ 1092.100267][T27175] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000000 [ 1092.100274][T27175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1092.100280][T27175] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1092.100286][T27175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1092.100318][T27175] [ 1092.291050][ T73] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.312878][T27166] lo speed is unknown, defaulting to 1000 [ 1092.400968][ T6182] libceph: connect (1)[c::]:6789 error -101 [ 1092.403684][ T6182] libceph: mon0 (1)[c::]:6789 connect error [ 1092.455127][ T73] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.513447][T27166] chnl_net:caif_netlink_parms(): no params data found [ 1092.589484][T27166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.592127][T27166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.594773][T27166] bridge_slave_0: entered allmulticast mode [ 1092.597839][T27166] bridge_slave_0: entered promiscuous mode [ 1092.601148][T27166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.603640][T27166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.606355][T27166] bridge_slave_1: entered allmulticast mode [ 1092.609265][T27166] bridge_slave_1: entered promiscuous mode [ 1092.661097][T27166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1092.666446][T27184] overlay: Bad value for 'nfs_export' [ 1092.671016][T27184] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1092.673537][T27166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1092.683083][ T73] bridge_slave_1: left allmulticast mode [ 1092.684762][T27184] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1092.684994][ T73] bridge_slave_1: left promiscuous mode [ 1092.687324][T27188] 9pnet_virtio: no channels available for device syz [ 1092.688273][T27184] overlayfs: failed to look up (tracing) for ino (-66) [ 1092.691086][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.701882][ T73] bridge_slave_0: left allmulticast mode [ 1092.703790][ T73] bridge_slave_0: left promiscuous mode [ 1092.705780][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.799244][T27194] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.6503'. [ 1092.802431][T27194] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6503'. [ 1093.071538][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1093.076282][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1093.080711][ T73] bond0 (unregistering): Released all slaves [ 1093.176629][ T73] bond1 (unregistering): (slave veth3): Releasing active interface [ 1093.181509][ T73] bond1 (unregistering): Released all slaves [ 1093.203318][T27166] team0: Port device team_slave_0 added [ 1093.208259][T27166] team0: Port device team_slave_1 added [ 1093.265815][T27166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.278506][T27166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.298282][T27166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.310850][T17403] usb 54-1: device descriptor read/8, error -110 [ 1093.328517][T27166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.331297][T27166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.340808][T27166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1093.379773][T27166] hsr_slave_0: entered promiscuous mode [ 1093.382157][T27166] hsr_slave_1: entered promiscuous mode [ 1093.395309][ T6182] libceph: connect (1)[c::]:6789 error -101 [ 1093.397585][ T6182] libceph: mon0 (1)[c::]:6789 connect error [ 1093.443396][T27196] loop9: detected capacity change from 0 to 7 [ 1093.447273][T27196] Dev loop9: unable to read RDB block 7 [ 1093.450133][T27196] loop9: unable to read partition table [ 1093.453085][T27196] loop9: partition table beyond EOD, truncated [ 1093.455954][T27196] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1093.526636][ T73] hsr_slave_0: left promiscuous mode [ 1093.528804][ T73] hsr_slave_1: left promiscuous mode [ 1093.541249][ T73] veth1_macvtap: left promiscuous mode [ 1093.543123][ T73] veth0_macvtap: left promiscuous mode [ 1093.545934][ T73] veth1_vlan: left promiscuous mode [ 1093.547971][ T73] veth0_vlan: left promiscuous mode [ 1093.612958][ T73] team0 (unregistering): Port device batadv1 removed [ 1093.748303][T17403] usb usb54-port1: attempt power cycle [ 1093.923410][T27206] FAULT_INJECTION: forcing a failure. [ 1093.923410][T27206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1093.929106][T27206] CPU: 0 UID: 0 PID: 27206 Comm: syz.0.6507 Tainted: G L syzkaller #0 PREEMPT(full) [ 1093.929134][T27206] Tainted: [L]=SOFTLOCKUP [ 1093.929140][T27206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1093.929151][T27206] Call Trace: [ 1093.929158][T27206] [ 1093.929165][T27206] dump_stack_lvl+0x16c/0x1f0 [ 1093.929199][T27206] should_fail_ex+0x512/0x640 [ 1093.929225][T27206] _copy_to_user+0x32/0xd0 [ 1093.929246][T27206] simple_read_from_buffer+0xcb/0x170 [ 1093.929271][T27206] proc_fail_nth_read+0x197/0x240 [ 1093.929298][T27206] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1093.929326][T27206] ? rw_verify_area+0xcf/0x6c0 [ 1093.929351][T27206] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1093.929394][T27206] vfs_read+0x1e4/0xcf0 [ 1093.929417][T27206] ? __pfx___mutex_lock+0x10/0x10 [ 1093.929445][T27206] ? __pfx_vfs_read+0x10/0x10 [ 1093.929466][T27206] ? find_held_lock+0x2b/0x80 [ 1093.929498][T27206] ? __fget_files+0x20e/0x3c0 [ 1093.929532][T27206] ksys_read+0x12a/0x250 [ 1093.929557][T27206] ? __pfx_ksys_read+0x10/0x10 [ 1093.929589][T27206] __do_fast_syscall_32+0xe8/0x680 [ 1093.929619][T27206] do_fast_syscall_32+0x32/0x80 [ 1093.929638][T27206] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1093.929663][T27206] RIP: 0023:0xf701d579 [ 1093.929678][T27206] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1093.929696][T27206] RSP: 002b:00000000f540d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1093.929714][T27206] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f540d620 [ 1093.929726][T27206] RDX: 000000000000000f RSI: 00000000f73b6ff4 RDI: 0000000000000000 [ 1093.929737][T27206] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1093.929748][T27206] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1093.929758][T27206] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1093.929783][T27206] [ 1093.932629][ T5937] Bluetooth: hci3: command tx timeout [ 1094.590202][T27160] ceph: No mds server is up or the cluster is laggy [ 1094.876547][ T73] team0 (unregistering): Port device team_slave_1 removed [ 1094.923139][ T73] team0 (unregistering): Port device team_slave_0 removed [ 1095.318296][T17403] usb usb54-port1: unable to enumerate USB device [ 1095.446729][T27222] loop9: detected capacity change from 0 to 7 [ 1095.457241][T27222] Dev loop9: unable to read RDB block 7 [ 1095.460764][T27222] loop9: unable to read partition table [ 1095.463283][T27222] loop9: partition table beyond EOD, truncated [ 1095.465596][T27222] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1095.685486][T13161] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1095.692975][T13161] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1095.697659][T13161] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1095.702282][T13161] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1095.716783][T13161] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1095.739901][T27226] lo speed is unknown, defaulting to 1000 [ 1095.810675][T27232] netlink: 'syz.0.6517': attribute type 10 has an invalid length. [ 1095.976981][T27166] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1095.982549][T27166] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1095.990938][T27166] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1095.999263][T27226] chnl_net:caif_netlink_parms(): no params data found [ 1096.004676][T27166] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1096.026588][ T73] IPVS: stop unused estimator thread 0... [ 1096.109702][T27226] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.112754][T27226] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.115076][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 1096.115087][ T40] audit: type=1326 audit(2000000321.205:7297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27240 comm="syz.0.6518" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 1096.115241][T27226] bridge_slave_0: entered allmulticast mode [ 1096.117142][ T40] audit: type=1326 audit(2000000321.205:7298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27240 comm="syz.0.6518" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 1096.124187][ T6035] usb 38-1: device descriptor read/8, error -110 [ 1096.137034][T27226] bridge_slave_0: entered promiscuous mode [ 1096.137165][ T40] audit: type=1326 audit(2000000321.205:7299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27240 comm="syz.0.6518" exe="/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 1096.142926][T27226] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.148636][T27226] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.150986][T27226] bridge_slave_1: entered allmulticast mode [ 1096.154104][T27226] bridge_slave_1: entered promiscuous mode [ 1096.167334][ T40] audit: type=1326 audit(2000000321.205:7300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27240 comm="syz.0.6518" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 1096.171798][T27226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1096.179330][ T40] audit: type=1326 audit(2000000321.205:7301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27240 comm="syz.0.6518" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000 [ 1096.179618][T27226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1096.203101][T27226] team0: Port device team_slave_0 added [ 1096.206316][T27226] team0: Port device team_slave_1 added [ 1096.208831][ T5937] Bluetooth: hci3: command tx timeout [ 1096.240424][T27226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1096.242706][T27226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1096.251751][T27226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1096.256088][T27226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1096.258386][T27226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1096.266686][T27226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1096.306267][T27226] hsr_slave_0: entered promiscuous mode [ 1096.309100][T27226] hsr_slave_1: entered promiscuous mode [ 1096.311742][T27226] debugfs: 'hsr0' already exists in 'hsr' [ 1096.313587][T27226] Cannot create hsr debugfs directory [ 1096.414374][T27166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1096.483547][T27257] trusted_key: encrypted_key: keyword 'ne3ú¼ÖSïw' not recognized [ 1096.494794][T27257] trusted_key: encrypted_key: master key parameter 'defaul‰Ê,Çer:tr:' is invalid [ 1096.497427][T27166] 8021q: adding VLAN 0 to HW filter on device team0 [ 1096.507222][T25575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.510240][T25575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1096.521513][T25575] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.523936][T25575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1096.582722][ T6035] usb usb38-port1: attempt power cycle [ 1096.696275][T27166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1096.886750][T27166] veth0_vlan: entered promiscuous mode [ 1096.897270][T27166] veth1_vlan: entered promiscuous mode [ 1096.964846][T27166] veth0_macvtap: entered promiscuous mode [ 1096.979988][T27166] veth1_macvtap: entered promiscuous mode [ 1096.991796][T27226] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1096.996718][T27226] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1097.002715][T27226] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1097.011291][T27226] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1097.019237][T27166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1097.031934][T27166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1097.042230][T25067] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.045584][T25067] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.055040][T25067] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.058247][T25067] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.116492][T25575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1097.119098][T25575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.140346][T18068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1097.143310][T18068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.162872][T27226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1097.173604][T27226] 8021q: adding VLAN 0 to HW filter on device team0 [ 1097.180600][T25575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.182928][T25575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1097.189233][T18068] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.190751][ T6035] usb usb38-port1: unable to enumerate USB device [ 1097.191562][T18068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1097.342420][T27294] batman_adv: batadv0: Adding interface: gretap1 [ 1097.344650][T27294] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.353237][T27294] batman_adv: batadv0: Interface activated: gretap1 [ 1097.406166][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 1097.408376][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 1097.650960][T27226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1097.919766][ T5937] Bluetooth: hci1: command tx timeout [ 1098.103607][T27226] veth0_vlan: entered promiscuous mode [ 1098.110203][T27226] veth1_vlan: entered promiscuous mode [ 1098.123403][T27226] veth0_macvtap: entered promiscuous mode [ 1098.127669][T27226] veth1_macvtap: entered promiscuous mode [ 1098.136449][T27226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1098.143328][T27226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1098.183952][T18070] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.248178][T18070] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.261758][T18070] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.264750][T18070] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.316505][ T4718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.319814][ T4718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1098.348474][T18064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.351059][T18064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1098.434279][ T5937] Bluetooth: hci3: command tx timeout [ 1099.933839][ T40] audit: type=1326 audit(2000000324.769:7302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27349 comm="syz.9.6540" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 1099.941387][ T40] audit: type=1326 audit(2000000324.778:7303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27349 comm="syz.9.6540" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 1099.949748][ T40] audit: type=1326 audit(2000000324.778:7304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27349 comm="syz.9.6540" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 1099.956769][ T40] audit: type=1326 audit(2000000324.778:7305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27349 comm="syz.9.6540" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 1099.964463][ T40] audit: type=1326 audit(2000000324.778:7306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27349 comm="syz.9.6540" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 1099.990809][T27351] pim6reg: entered allmulticast mode [ 1100.140967][ T5937] Bluetooth: hci1: command tx timeout [ 1100.653898][ T5937] Bluetooth: hci3: command tx timeout [ 1100.967763][T27349] pim6reg: left allmulticast mode [ 1101.409141][T27369] 9pnet_virtio: no channels available for device syz [ 1101.412472][T27369] FAULT_INJECTION: forcing a failure. [ 1101.412472][T27369] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.416696][T27369] CPU: 0 UID: 0 PID: 27369 Comm: syz.0.6546 Tainted: G L syzkaller #0 PREEMPT(full) [ 1101.416714][T27369] Tainted: [L]=SOFTLOCKUP [ 1101.416719][T27369] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1101.416726][T27369] Call Trace: [ 1101.416730][T27369] [ 1101.416735][T27369] dump_stack_lvl+0x16c/0x1f0 [ 1101.416755][T27369] should_fail_ex+0x512/0x640 [ 1101.416768][T27369] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1101.416784][T27369] should_failslab+0xc2/0x120 [ 1101.416801][T27369] kmem_cache_alloc_noprof+0x83/0x770 [ 1101.416815][T27369] ? getname_flags.part.0+0x4c/0x550 [ 1101.416831][T27369] ? getname_flags.part.0+0x4c/0x550 [ 1101.416842][T27369] getname_flags.part.0+0x4c/0x550 [ 1101.416856][T27369] getname_flags+0x93/0xf0 [ 1101.416871][T27369] user_path_at+0x24/0x60 [ 1101.416901][T27369] __ia32_sys_umount+0x109/0x190 [ 1101.416918][T27369] ? __pfx___ia32_sys_umount+0x10/0x10 [ 1101.416935][T27369] ? do_user_addr_fault+0x843/0x1370 [ 1101.416949][T27369] ? rcu_is_watching+0x12/0xc0 [ 1101.416966][T27369] __do_fast_syscall_32+0xe8/0x680 [ 1101.416986][T27369] do_fast_syscall_32+0x32/0x80 [ 1101.416998][T27369] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1101.417019][T27369] RIP: 0023:0xf701d579 [ 1101.417030][T27369] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1101.417046][T27369] RSP: 002b:00000000f540d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000034 [ 1101.417058][T27369] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000000000000 [ 1101.417065][T27369] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1101.417072][T27369] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1101.417078][T27369] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1101.417084][T27369] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1101.417098][T27369] [ 1101.617302][T27374] binder_alloc: 27373: binder_alloc_buf size 16777216 failed, no address space [ 1101.621867][T27374] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 1101.760861][T27378] loop9: detected capacity change from 0 to 7 [ 1101.763724][T27378] Dev loop9: unable to read RDB block 7 [ 1101.766704][T27378] loop9: unable to read partition table [ 1101.768676][T27378] loop9: partition table beyond EOD, truncated [ 1101.771494][T27378] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1102.228068][T27384] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1102.232564][T27384] Error validating options; rc = [-22] [ 1102.364953][ T5937] Bluetooth: hci1: command tx timeout [ 1102.564049][T27408] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1103.208605][T27443] FAULT_INJECTION: forcing a failure. [ 1103.208605][T27443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1103.214496][T27443] CPU: 0 UID: 0 PID: 27443 Comm: syz.0.6568 Tainted: G L syzkaller #0 PREEMPT(full) [ 1103.214526][T27443] Tainted: [L]=SOFTLOCKUP [ 1103.214533][T27443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1103.214545][T27443] Call Trace: [ 1103.214552][T27443] [ 1103.214582][T27443] dump_stack_lvl+0x16c/0x1f0 [ 1103.214616][T27443] should_fail_ex+0x512/0x640 [ 1103.214643][T27443] strncpy_from_user+0x3b/0x2e0 [ 1103.214664][T27443] getname_flags.part.0+0x8f/0x550 [ 1103.214702][T27443] getname_flags+0x93/0xf0 [ 1103.214727][T27443] user_path_at+0x24/0x60 [ 1103.214753][T27443] __ia32_sys_umount+0x109/0x190 [ 1103.214782][T27443] ? __pfx___ia32_sys_umount+0x10/0x10 [ 1103.214810][T27443] ? do_user_addr_fault+0x843/0x1370 [ 1103.214833][T27443] ? rcu_is_watching+0x12/0xc0 [ 1103.214867][T27443] __do_fast_syscall_32+0xe8/0x680 [ 1103.214898][T27443] do_fast_syscall_32+0x32/0x80 [ 1103.214916][T27443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1103.214939][T27443] RIP: 0023:0xf701d579 [ 1103.214955][T27443] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1103.214973][T27443] RSP: 002b:00000000f540d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000034 [ 1103.214992][T27443] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000000000000 [ 1103.215004][T27443] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1103.215015][T27443] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1103.215026][T27443] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1103.215037][T27443] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1103.215061][T27443] [ 1103.415322][T27448] Cache volume key already in use (9p,syz,) [ 1103.427092][T27450] binder: 27449:27450 ioctl 400c620e 80000100 returned -22 [ 1103.429997][T27450] 9pnet_virtio: no channels available for device syz [ 1103.652367][T27455] loop9: detected capacity change from 0 to 7 [ 1103.655115][T27455] Dev loop9: unable to read RDB block 7 [ 1103.657503][T27455] loop9: unable to read partition table [ 1103.661607][T27455] loop9: partition table beyond EOD, truncated [ 1103.667914][T27455] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1103.727603][T27458] program syz.5.6577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1103.832318][T25067] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.849036][T13161] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1103.855707][T13161] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1103.859339][T13161] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1103.866985][T13161] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1103.870190][T13161] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1104.177980][T27471] netlink: 192 bytes leftover after parsing attributes in process `syz.9.6582'. [ 1104.221095][T27473] FAULT_INJECTION: forcing a failure. [ 1104.221095][T27473] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.225352][T27473] CPU: 0 UID: 0 PID: 27473 Comm: syz.9.6583 Tainted: G L syzkaller #0 PREEMPT(full) [ 1104.225380][T27473] Tainted: [L]=SOFTLOCKUP [ 1104.225387][T27473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1104.225397][T27473] Call Trace: [ 1104.225404][T27473] [ 1104.225411][T27473] dump_stack_lvl+0x16c/0x1f0 [ 1104.225441][T27473] should_fail_ex+0x512/0x640 [ 1104.225459][T27473] ? fs_reclaim_acquire+0xae/0x150 [ 1104.225487][T27473] should_failslab+0xc2/0x120 [ 1104.225513][T27473] __kmalloc_noprof+0xeb/0x910 [ 1104.225531][T27473] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1104.225560][T27473] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1104.225582][T27473] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1104.225607][T27473] ? tomoyo_profile+0x47/0x60 [ 1104.225639][T27473] tomoyo_path_number_perm+0x245/0x580 [ 1104.225657][T27473] ? tomoyo_path_number_perm+0x237/0x580 [ 1104.225678][T27473] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1104.225722][T27473] ? find_held_lock+0x2b/0x80 [ 1104.225743][T27473] ? hook_file_ioctl_common+0x144/0x410 [ 1104.225769][T27473] ? __fget_files+0x20e/0x3c0 [ 1104.225791][T27473] ? __fput_deferred+0x480/0x480 [ 1104.225812][T27473] security_file_ioctl_compat+0x9b/0x240 [ 1104.225835][T27473] __ia32_compat_sys_ioctl+0xc3/0x370 [ 1104.225859][T27473] __do_fast_syscall_32+0xe8/0x680 [ 1104.225888][T27473] do_fast_syscall_32+0x32/0x80 [ 1104.225903][T27473] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1104.225924][T27473] RIP: 0023:0xf702d579 [ 1104.225938][T27473] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1104.225955][T27473] RSP: 002b:00000000f541d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1104.225972][T27473] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800455d1 [ 1104.225983][T27473] RDX: 0000000099999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 1104.225994][T27473] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1104.226004][T27473] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1104.226014][T27473] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1104.226036][T27473] [ 1104.226044][T27473] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1104.410843][T27481] FAULT_INJECTION: forcing a failure. [ 1104.410843][T27481] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.414630][T27481] CPU: 0 UID: 0 PID: 27481 Comm: syz.5.6586 Tainted: G L syzkaller #0 PREEMPT(full) [ 1104.414649][T27481] Tainted: [L]=SOFTLOCKUP [ 1104.414653][T27481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1104.414661][T27481] Call Trace: [ 1104.414665][T27481] [ 1104.414669][T27481] dump_stack_lvl+0x16c/0x1f0 [ 1104.414690][T27481] should_fail_ex+0x512/0x640 [ 1104.414703][T27481] ? fs_reclaim_acquire+0xae/0x150 [ 1104.414722][T27481] should_failslab+0xc2/0x120 [ 1104.414739][T27481] __kmalloc_noprof+0xeb/0x910 [ 1104.414752][T27481] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1104.414771][T27481] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1104.414786][T27481] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1104.414802][T27481] ? tomoyo_profile+0x47/0x60 [ 1104.414820][T27481] tomoyo_path_perm+0x274/0x460 [ 1104.414832][T27481] ? tomoyo_path_perm+0x260/0x460 [ 1104.414845][T27481] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1104.414861][T27481] ? __lock_acquire+0x436/0x2890 [ 1104.414874][T27481] ? kasan_save_stack+0x42/0x60 [ 1104.414892][T27481] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1104.414919][T27481] tomoyo_sb_umount+0x8c/0xd0 [ 1104.414935][T27481] ? __pfx_tomoyo_sb_umount+0x10/0x10 [ 1104.414954][T27481] security_sb_umount+0x8e/0x210 [ 1104.414966][T27481] path_umount+0x32f/0x1220 [ 1104.414983][T27481] ? putname+0xf5/0x1a0 [ 1104.414995][T27481] ? __pfx_path_umount+0x10/0x10 [ 1104.415011][T27481] ? putname+0xf5/0x1a0 [ 1104.415020][T27481] ? putname+0xf5/0x1a0 [ 1104.415031][T27481] __ia32_sys_umount+0x169/0x190 [ 1104.415048][T27481] ? __pfx___ia32_sys_umount+0x10/0x10 [ 1104.415065][T27481] ? do_user_addr_fault+0x843/0x1370 [ 1104.415079][T27481] ? rcu_is_watching+0x12/0xc0 [ 1104.415097][T27481] __do_fast_syscall_32+0xe8/0x680 [ 1104.415117][T27481] do_fast_syscall_32+0x32/0x80 [ 1104.415127][T27481] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1104.415141][T27481] RIP: 0023:0xf7f37579 [ 1104.415150][T27481] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1104.415161][T27481] RSP: 002b:00000000f542655c EFLAGS: 00000296 ORIG_RAX: 0000000000000034 [ 1104.415172][T27481] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000000000000 [ 1104.415179][T27481] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1104.415185][T27481] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1104.415191][T27481] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1104.415198][T27481] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1104.415211][T27481] [ 1104.415216][T27481] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1104.471126][T25067] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.533343][T27487] 9pnet_virtio: no channels available for device syz [ 1104.539204][T27460] lo speed is unknown, defaulting to 1000 [ 1104.588552][ T5937] Bluetooth: hci1: command tx timeout [ 1104.592025][T26037] IPVS: starting estimator thread 0... [ 1104.596329][T27493] Cache volume key already in use (9p,syz,) [ 1104.606599][T25067] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.695017][T27492] IPVS: using max 47 ests per chain, 112800 per kthread [ 1104.857590][T25067] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.882219][T27502] loop9: detected capacity change from 0 to 7 [ 1104.884700][T27502] Dev loop9: unable to read RDB block 7 [ 1104.886855][T27502] loop9: unable to read partition table [ 1104.889342][T27502] loop9: partition table beyond EOD, truncated [ 1104.891388][T27502] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1104.903780][T27460] chnl_net:caif_netlink_parms(): no params data found [ 1104.989898][T27460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.992327][T27460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.995329][T27460] bridge_slave_0: entered allmulticast mode [ 1104.998095][T27460] bridge_slave_0: entered promiscuous mode [ 1105.003837][T27460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.007380][T27460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.010574][T27460] bridge_slave_1: entered allmulticast mode [ 1105.013755][T27460] bridge_slave_1: entered promiscuous mode [ 1105.028767][T27460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1105.033183][T27460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1105.048312][T27460] team0: Port device team_slave_0 added [ 1105.051993][T27460] team0: Port device team_slave_1 added [ 1105.065740][T27460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1105.068051][T27460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.076580][T27460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1105.081633][T27460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1105.083889][T27460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.091907][T27460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1105.242222][T27518] FAULT_INJECTION: forcing a failure. [ 1105.242222][T27518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1105.247730][T27518] CPU: 2 UID: 0 PID: 27518 Comm: syz.5.6595 Tainted: G L syzkaller #0 PREEMPT(full) [ 1105.247757][T27518] Tainted: [L]=SOFTLOCKUP [ 1105.247764][T27518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1105.247774][T27518] Call Trace: [ 1105.247782][T27518] [ 1105.247789][T27518] dump_stack_lvl+0x16c/0x1f0 [ 1105.247820][T27518] should_fail_ex+0x512/0x640 [ 1105.247838][T27518] _copy_from_user+0x2e/0xd0 [ 1105.247851][T27518] kstrtouint_from_user+0xd6/0x1d0 [ 1105.247867][T27518] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1105.247882][T27518] ? __lock_acquire+0x436/0x2890 [ 1105.247900][T27518] proc_fail_nth_write+0x83/0x220 [ 1105.247913][T27518] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1105.247927][T27518] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1105.247937][T27518] vfs_write+0x2a0/0x11d0 [ 1105.247954][T27518] ? __pfx___mutex_lock+0x10/0x10 [ 1105.247973][T27518] ? __pfx_vfs_write+0x10/0x10 [ 1105.247987][T27518] ? find_held_lock+0x2b/0x80 [ 1105.248005][T27518] ? __fget_files+0x20e/0x3c0 [ 1105.248020][T27518] ? __fget_files+0x1e0/0x3c0 [ 1105.248039][T27518] ksys_write+0x12a/0x250 [ 1105.248055][T27518] ? __pfx_ksys_write+0x10/0x10 [ 1105.248071][T27518] ? fdget+0x187/0x210 [ 1105.248088][T27518] __do_fast_syscall_32+0xe8/0x680 [ 1105.248108][T27518] do_fast_syscall_32+0x32/0x80 [ 1105.248118][T27518] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1105.248132][T27518] RIP: 0023:0xf7f37579 [ 1105.248142][T27518] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1105.248152][T27518] RSP: 002b:00000000f5405590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 1105.248164][T27518] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5405620 [ 1105.248172][T27518] RDX: 0000000000000001 RSI: 00000000f73c6ff4 RDI: 0000000000000000 [ 1105.248179][T27518] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1105.248185][T27518] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1105.248192][T27518] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1105.248205][T27518] [ 1105.305787][T27519] fuse: Bad value for 'group_id' [ 1105.323161][T27519] fuse: Bad value for 'group_id' [ 1105.390101][T27512] XFS (nullb0): Invalid superblock magic number [ 1105.510731][T27460] hsr_slave_0: entered promiscuous mode [ 1105.514802][T27460] hsr_slave_1: entered promiscuous mode [ 1105.523498][T27460] debugfs: 'hsr0' already exists in 'hsr' [ 1105.526854][T27460] Cannot create hsr debugfs directory [ 1105.743709][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 1105.743728][ T40] audit: type=1326 audit(2000000330.213:7339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27524 comm="syz.5.6596" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 1105.753887][ T40] audit: type=1326 audit(2000000330.213:7340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27524 comm="syz.5.6596" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 1105.761237][ T40] audit: type=1326 audit(2000000330.213:7341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27524 comm="syz.5.6596" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 1105.775204][ T40] audit: type=1326 audit(2000000330.213:7342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27524 comm="syz.5.6596" exe="/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 1105.782173][T27537] FAULT_INJECTION: forcing a failure. [ 1105.782173][T27537] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.783375][ T40] audit: type=1326 audit(2000000330.213:7343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27524 comm="syz.5.6596" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 1105.789238][T27537] CPU: 2 UID: 0 PID: 27537 Comm: syz.4.6600 Tainted: G L syzkaller #0 PREEMPT(full) [ 1105.789259][T27537] Tainted: [L]=SOFTLOCKUP [ 1105.789263][T27537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1105.789271][T27537] Call Trace: [ 1105.789275][T27537] [ 1105.789279][T27537] dump_stack_lvl+0x16c/0x1f0 [ 1105.789303][T27537] should_fail_ex+0x512/0x640 [ 1105.789316][T27537] ? fs_reclaim_acquire+0xae/0x150 [ 1105.789336][T27537] should_failslab+0xc2/0x120 [ 1105.789355][T27537] __kmalloc_noprof+0xeb/0x910 [ 1105.789369][T27537] ? tomoyo_encode2+0x100/0x3e0 [ 1105.789388][T27537] ? tomoyo_encode2+0x100/0x3e0 [ 1105.789402][T27537] tomoyo_encode2+0x100/0x3e0 [ 1105.789420][T27537] tomoyo_encode+0x29/0x50 [ 1105.789435][T27537] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1105.789455][T27537] tomoyo_path_perm+0x274/0x460 [ 1105.789468][T27537] ? tomoyo_path_perm+0x260/0x460 [ 1105.789482][T27537] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1105.789495][T27537] ? __lock_acquire+0x436/0x2890 [ 1105.789508][T27537] ? kasan_save_stack+0x42/0x60 [ 1105.789526][T27537] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1105.789555][T27537] tomoyo_sb_umount+0x8c/0xd0 [ 1105.789572][T27537] ? __pfx_tomoyo_sb_umount+0x10/0x10 [ 1105.789593][T27537] security_sb_umount+0x8e/0x210 [ 1105.789605][T27537] path_umount+0x32f/0x1220 [ 1105.789624][T27537] ? putname+0xf5/0x1a0 [ 1105.789636][T27537] ? __pfx_path_umount+0x10/0x10 [ 1105.789653][T27537] ? putname+0xf5/0x1a0 [ 1105.789663][T27537] ? putname+0xf5/0x1a0 [ 1105.789675][T27537] __ia32_sys_umount+0x169/0x190 [ 1105.789692][T27537] ? __pfx___ia32_sys_umount+0x10/0x10 [ 1105.789711][T27537] ? do_user_addr_fault+0x843/0x1370 [ 1105.789725][T27537] ? rcu_is_watching+0x12/0xc0 [ 1105.789743][T27537] __do_fast_syscall_32+0xe8/0x680 [ 1105.789763][T27537] do_fast_syscall_32+0x32/0x80 [ 1105.789774][T27537] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1105.789789][T27537] RIP: 0023:0xf700d579 [ 1105.789806][T27537] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1105.789818][T27537] RSP: 002b:00000000f53fd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000034 [ 1105.789829][T27537] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000000000000 [ 1105.789837][T27537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1105.789844][T27537] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1105.789850][T27537] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1105.789857][T27537] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1105.789872][T27537] [ 1105.789883][T27537] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1105.811121][ T40] audit: type=1326 audit(2000000330.213:7344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27524 comm="syz.5.6596" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 1105.895157][ T40] audit: type=1326 audit(2000000330.213:7345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27524 comm="syz.5.6596" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 1105.902002][ T40] audit: type=1326 audit(2000000330.223:7346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27524 comm="syz.5.6596" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 1105.912495][ T40] audit: type=1326 audit(2000000330.223:7347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27524 comm="syz.5.6596" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 1105.922452][ T40] audit: type=1326 audit(2000000330.223:7348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27524 comm="syz.5.6596" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 1105.968449][T27540] 9pnet_virtio: no channels available for device syz [ 1106.023267][T27543] Cache volume key already in use (9p,syz,) [ 1106.130185][ T5937] Bluetooth: hci2: command tx timeout [ 1106.187798][T25067] bond0 (unregistering): Released all slaves [ 1106.325019][T25067] bond1 (unregistering): Released all slaves [ 1106.347303][T27541] pim6reg: entered allmulticast mode [ 1106.507585][T27524] pim6reg: left allmulticast mode [ 1106.596323][T25067] hsr_slave_0: left promiscuous mode [ 1106.599465][T25067] hsr_slave_1: left promiscuous mode [ 1106.609780][T25067] veth1_macvtap: left promiscuous mode [ 1106.611722][T25067] veth0_macvtap: left promiscuous mode [ 1106.613568][T25067] veth1_vlan: left promiscuous mode [ 1106.615299][T25067] veth0_vlan: left promiscuous mode [ 1106.896081][T13161] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1106.915657][T13161] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1106.921351][T13161] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1106.924417][T13161] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1106.926937][T13161] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1107.256948][T27576] loop9: detected capacity change from 0 to 7 [ 1107.260850][T27576] Dev loop9: unable to read RDB block 7 [ 1107.263330][T27576] loop9: unable to read partition table [ 1107.266091][T27576] loop9: partition table beyond EOD, truncated [ 1107.268890][T27576] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1107.851539][T27567] lo speed is unknown, defaulting to 1000 [ 1108.351687][T13161] Bluetooth: hci2: command tx timeout [ 1108.841826][T27567] chnl_net:caif_netlink_parms(): no params data found [ 1108.882222][T27567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.884652][T27567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.887263][T27567] bridge_slave_0: entered allmulticast mode [ 1108.889981][T27567] bridge_slave_0: entered promiscuous mode [ 1108.895714][T27567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.898419][T27567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.900769][T27567] bridge_slave_1: entered allmulticast mode [ 1108.903432][T27567] bridge_slave_1: entered promiscuous mode [ 1108.918980][T27567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1108.924723][T27567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1108.940593][T27567] team0: Port device team_slave_0 added [ 1108.944331][T27567] team0: Port device team_slave_1 added [ 1108.957793][T27567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1108.960117][T27567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1108.968440][T27567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1108.973228][T27567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1108.975761][T27567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1108.985395][T27567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1109.010088][T27567] hsr_slave_0: entered promiscuous mode [ 1109.012515][T27567] hsr_slave_1: entered promiscuous mode [ 1109.015558][T27567] debugfs: 'hsr0' already exists in 'hsr' [ 1109.017918][T27567] Cannot create hsr debugfs directory [ 1109.120608][T27460] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1109.135434][T27460] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1109.143998][T27460] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1109.156737][T27460] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1109.199808][T25067] IPVS: stop unused estimator thread 0... [ 1109.206674][T13161] Bluetooth: hci3: command tx timeout [ 1109.221808][ T5937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1109.226905][ T5937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1109.230205][ T5937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1109.232983][ T5937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1109.235496][ T5937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1109.260859][T27612] lo speed is unknown, defaulting to 1000 [ 1109.338316][T25067] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.368967][T27460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1109.397677][T27460] 8021q: adding VLAN 0 to HW filter on device team0 [ 1109.430272][T25575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.433561][T25575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1109.460556][T25067] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.492602][T18850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.495361][T18850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.522949][T25067] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.548098][T27612] chnl_net:caif_netlink_parms(): no params data found [ 1109.610249][T25067] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.665885][T27612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.668507][T27612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.670950][T27612] bridge_slave_0: entered allmulticast mode [ 1109.673686][T27612] bridge_slave_0: entered promiscuous mode [ 1109.677529][T27612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.680058][T27612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.682521][T27612] bridge_slave_1: entered allmulticast mode [ 1109.685231][T27612] bridge_slave_1: entered promiscuous mode [ 1109.733576][T27567] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1109.740331][T27612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1109.747668][T27567] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1109.755513][T27612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1109.772502][T27567] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1109.794115][T27567] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1109.802340][T27612] team0: Port device team_slave_0 added [ 1109.829266][T25067] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.845231][T27612] team0: Port device team_slave_1 added [ 1109.861915][T27612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1109.864252][T27612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1109.872857][T27612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1109.880480][T27460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1109.894152][T27612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1109.896559][T27612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1109.906131][T27612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1109.948855][T25067] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.962407][T27612] hsr_slave_0: entered promiscuous mode [ 1109.964819][T27612] hsr_slave_1: entered promiscuous mode [ 1109.968667][T27612] debugfs: 'hsr0' already exists in 'hsr' [ 1109.971282][T27612] Cannot create hsr debugfs directory [ 1110.103891][T25067] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.258909][T25067] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.288819][T27460] veth0_vlan: entered promiscuous mode [ 1110.311937][T27567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1110.317847][T27460] veth1_vlan: entered promiscuous mode [ 1110.328474][T27567] 8021q: adding VLAN 0 to HW filter on device team0 [ 1110.336349][T25575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.338736][T25575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1110.346293][T18850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.349202][T18850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1110.443597][T27460] veth0_macvtap: entered promiscuous mode [ 1110.471238][T27460] veth1_macvtap: entered promiscuous mode [ 1110.481550][T25067] bridge_slave_1: left allmulticast mode [ 1110.484164][T25067] bridge_slave_1: left promiscuous mode [ 1110.486873][T25067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.501464][T25067] bridge_slave_0: left allmulticast mode [ 1110.503678][T25067] bridge_slave_0: left promiscuous mode [ 1110.506293][T25067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.514760][T25067] bridge_slave_1: left allmulticast mode [ 1110.517331][T25067] bridge_slave_1: left promiscuous mode [ 1110.519970][T25067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.525824][T25067] bridge_slave_0: left allmulticast mode [ 1110.528359][T25067] bridge_slave_0: left promiscuous mode [ 1110.530991][T25067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.538659][T25067] batman_adv: batadv0: Interface deactivated: gretap1 [ 1110.574838][ T5937] Bluetooth: hci2: command tx timeout [ 1110.766415][T13161] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1110.785482][T13161] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1110.789679][T13161] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1110.794236][T13161] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1110.796961][T13161] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1110.918960][T25067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1110.925506][T25067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1110.931613][T25067] bond0 (unregistering): Released all slaves [ 1111.053238][T25067] batman_adv: batadv0: Removing interface: gretap1 [ 1111.231543][T25067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1111.235617][T25067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1111.240485][T25067] bond0 (unregistering): Released all slaves [ 1111.266074][T27460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1111.271883][T27460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1111.277768][T18064] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.281926][T18064] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.284720][T18064] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.288370][T18064] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.338097][T27647] lo speed is unknown, defaulting to 1000 [ 1111.428551][T27567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1111.441300][T13161] Bluetooth: hci1: command tx timeout [ 1111.441318][ T5937] Bluetooth: hci3: command tx timeout [ 1111.458979][T18059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.462614][T18059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.562871][T25575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.565857][T25575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.586428][T27612] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1111.632988][T27612] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1111.639646][T27612] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1111.647594][T27612] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1111.657748][T27647] chnl_net:caif_netlink_parms(): no params data found [ 1111.705970][T27567] veth0_vlan: entered promiscuous mode [ 1111.889165][T27647] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.891817][T27647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.894166][T27647] bridge_slave_0: entered allmulticast mode [ 1111.896902][T27647] bridge_slave_0: entered promiscuous mode [ 1111.900791][T27567] veth1_vlan: entered promiscuous mode [ 1111.906006][T27647] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.908814][T27647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.911726][T27647] bridge_slave_1: entered allmulticast mode [ 1111.915292][T27647] bridge_slave_1: entered promiscuous mode [ 1111.942890][T25067] hsr_slave_0: left promiscuous mode [ 1111.947363][T25067] hsr_slave_1: left promiscuous mode [ 1111.950026][T25067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1111.952951][T25067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1111.956295][T25067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1111.958867][T25067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1111.965219][T25067] hsr_slave_0: left promiscuous mode [ 1111.967516][T25067] hsr_slave_1: left promiscuous mode [ 1111.969590][T25067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1111.972279][T25067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1111.976037][T25067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1111.978963][T25067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1112.008700][T25067] veth1_macvtap: left promiscuous mode [ 1112.010616][T25067] veth0_macvtap: left promiscuous mode [ 1112.012436][T25067] veth1_vlan: left promiscuous mode [ 1112.014323][T25067] veth0_vlan: left promiscuous mode [ 1112.016992][T25067] veth1_macvtap: left promiscuous mode [ 1112.019251][T25067] veth0_macvtap: left promiscuous mode [ 1112.021093][T25067] veth1_vlan: left promiscuous mode [ 1112.022819][T25067] veth0_vlan: left promiscuous mode [ 1112.533122][T25067] team0 (unregistering): Port device team_slave_1 removed [ 1112.617029][T25067] team0 (unregistering): Port device team_slave_0 removed [ 1112.798456][T13161] Bluetooth: hci2: command tx timeout [ 1112.969729][T13161] Bluetooth: hci0: command tx timeout [ 1113.256067][T27669] binder: Unknown parameter '017777"77777' [ 1113.499694][T27670] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 1113.501922][T27670] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1113.504630][T27670] vhci_hcd vhci_hcd.0: Device attached [ 1113.638543][T25067] team0 (unregistering): Port device team_slave_1 removed [ 1113.653832][T13161] Bluetooth: hci1: command tx timeout [ 1113.653858][ T5937] Bluetooth: hci3: command tx timeout [ 1113.687907][T25067] team0 (unregistering): Port device team_slave_0 removed [ 1113.814094][T12277] usb 50-1: SetAddress Request (10) to port 0 [ 1113.816288][T12277] usb 50-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1114.013157][T27647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1114.022621][T27647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1114.041500][T27647] team0: Port device team_slave_0 added [ 1114.050563][T27647] team0: Port device team_slave_1 added [ 1114.068059][T27647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.070423][T27647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.087777][T27671] vhci_hcd: connection reset by peer [ 1114.090141][ T1138] vhci_hcd vhci_hcd.6: stop threads [ 1114.092783][ T1138] vhci_hcd vhci_hcd.6: release socket [ 1114.093964][T27647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1114.094981][ T1138] vhci_hcd vhci_hcd.6: disconnect device [ 1114.103039][T27647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1114.105265][T27647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.113492][T27647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1114.138035][T27567] veth0_macvtap: entered promiscuous mode [ 1114.165118][T27647] hsr_slave_0: entered promiscuous mode [ 1114.170073][T27647] hsr_slave_1: entered promiscuous mode [ 1114.175034][T27567] veth1_macvtap: entered promiscuous mode [ 1114.235052][T27567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.257027][T27567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.287541][T27612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1114.293703][T18070] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.301867][T18070] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.304803][T18070] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.313288][T18070] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.340868][T27612] 8021q: adding VLAN 0 to HW filter on device team0 [ 1114.347481][T25038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.349988][T25038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1114.362196][T25038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.364735][T25038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1114.436721][T24971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.439363][T24971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.460655][T24971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.463351][T24971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.730710][T27612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1114.899695][T27647] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1114.918145][T27647] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1114.924233][T27691] Cache volume key already in use (9p,syz,) [ 1114.925499][T27647] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1114.938448][T27647] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1114.971058][T25067] IPVS: stop unused estimator thread 0... [ 1115.013237][T27612] veth0_vlan: entered promiscuous mode [ 1115.024625][T27612] veth1_vlan: entered promiscuous mode [ 1115.052177][T27647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.056074][T27612] veth0_macvtap: entered promiscuous mode [ 1115.077080][T27612] veth1_macvtap: entered promiscuous mode [ 1115.083694][T27647] 8021q: adding VLAN 0 to HW filter on device team0 [ 1115.117307][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.120251][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1115.154012][T27612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1115.157609][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.159924][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.194200][T25067] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.194322][ T5937] Bluetooth: hci0: command tx timeout [ 1115.209528][T27612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1115.224467][ T1138] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.230665][ T1138] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.239843][ T1138] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.243593][ T1138] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.294335][T27647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1115.342488][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.344987][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.378867][T25067] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.385998][T24971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.389348][T24971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.412104][T27647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1115.432785][T27647] veth0_vlan: entered promiscuous mode [ 1115.464611][T25067] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.479191][T27647] veth1_vlan: entered promiscuous mode [ 1115.501447][T27647] veth0_macvtap: entered promiscuous mode [ 1115.504874][T27713] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6621'. [ 1115.510857][T27647] veth1_macvtap: entered promiscuous mode [ 1115.519802][T27713] macvtap1: entered promiscuous mode [ 1115.522206][T27713] macvtap1: entered allmulticast mode [ 1115.524598][T27713] veth1_vlan: entered allmulticast mode [ 1115.554657][T25067] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.574681][T27647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1115.590315][T13161] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1115.594605][T13161] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1115.598436][T13161] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1115.604238][T13161] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1115.606427][T27713] macvtap2: entered promiscuous mode [ 1115.607928][T13161] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1115.616894][T27713] macvtap2: entered allmulticast mode [ 1115.630681][T27647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1115.680246][T18070] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.683475][T18070] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.697343][T18070] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.707399][T18070] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.713136][T27716] lo speed is unknown, defaulting to 1000 [ 1115.864791][T25067] bridge_slave_1: left allmulticast mode [ 1115.867902][T25067] bridge_slave_1: left promiscuous mode [ 1115.870538][T25067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.875819][T25067] bridge_slave_0: left allmulticast mode [ 1115.877406][ T5937] Bluetooth: hci1: command tx timeout [ 1115.879014][T25067] bridge_slave_0: left promiscuous mode [ 1115.882101][T25067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.888651][ T5937] Bluetooth: hci3: command tx timeout [ 1116.207565][T25067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1116.212632][T25067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1116.217112][T25067] bond0 (unregistering): Released all slaves [ 1116.225972][T18853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.228838][T18853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.267365][T18853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1116.271021][T18853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.395969][T27716] chnl_net:caif_netlink_parms(): no params data found [ 1116.541479][T27729] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6627'. [ 1116.544553][T27735] 9pnet_virtio: no channels available for device syz [ 1116.558250][T27716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.560537][T27716] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.563104][T27716] bridge_slave_0: entered allmulticast mode [ 1116.566703][T27716] bridge_slave_0: entered promiscuous mode [ 1116.575917][T25067] hsr_slave_0: left promiscuous mode [ 1116.580349][T25067] hsr_slave_1: left promiscuous mode [ 1116.582611][T25067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1116.585693][T25067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1116.589372][T25067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1116.597400][T25067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1116.638039][T25067] veth1_macvtap: left promiscuous mode [ 1116.639991][T25067] veth0_macvtap: left promiscuous mode [ 1116.641964][T25067] veth1_vlan: left promiscuous mode [ 1116.643754][T25067] veth0_vlan: left promiscuous mode [ 1116.974633][T27753] [ 1116.975767][T27753] ====================================================== [ 1116.978804][T27753] WARNING: possible circular locking dependency detected [ 1116.981796][T27753] syzkaller #0 Tainted: G L [ 1116.984755][T27753] ------------------------------------------------------ [ 1116.987793][T27753] syz.1.6647/27753 is trying to acquire lock: [ 1116.990471][T27753] ffff888052709570 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 1116.994041][T27753] [ 1116.994041][T27753] but task is already holding lock: [ 1116.997210][T27753] ffff888061870068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 1117.000816][T27753] [ 1117.000816][T27753] which lock already depends on the new lock. [ 1117.000816][T27753] [ 1117.005239][T27753] [ 1117.005239][T27753] the existing dependency chain (in reverse order) is: [ 1117.009022][T27753] [ 1117.009022][T27753] -> #3 (&pipe->mutex){+.+.}-{4:4}: [ 1117.012156][T27753] __mutex_lock+0x1aa/0x1ca0 [ 1117.014365][T27753] anon_pipe_write+0x15d/0x1bd0 [ 1117.016665][T27753] __kernel_write_iter+0x720/0xb10 [ 1117.019087][T27753] __kernel_write+0xf5/0x140 [ 1117.021333][T27753] autofs_notify_daemon+0x4db/0xd60 [ 1117.023780][T27753] autofs_wait+0x10f3/0x1ac0 [ 1117.025971][T27753] autofs_mount_wait+0x132/0x3c0 [ 1117.028339][T27753] autofs_d_automount+0x4b2/0x960 [ 1117.030746][T27753] __traverse_mounts+0x1b9/0x830 [ 1117.033109][T27753] step_into_slowpath+0x772/0xf50 [ 1117.035483][T27753] path_lookupat+0x627/0xc40 [ 1117.037731][T27753] filename_lookup+0x224/0x5f0 [ 1117.040034][T27753] kern_path+0x35/0x50 [ 1117.042052][T27753] lookup_bdev+0xd8/0x280 [ 1117.044200][T27753] resume_store+0x1d6/0x490 [ 1117.046423][T27753] kobj_attr_store+0x58/0x80 [ 1117.048692][T27753] sysfs_kf_write+0xf2/0x150 [ 1117.050947][T27753] kernfs_fop_write_iter+0x3af/0x570 [ 1117.053502][T27753] vfs_write+0x7d3/0x11d0 [ 1117.055733][T27753] ksys_write+0x12a/0x250 [ 1117.057946][T27753] __do_fast_syscall_32+0xe8/0x680 [ 1117.060478][T27753] do_fast_syscall_32+0x32/0x80 [ 1117.062868][T27753] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1117.065893][T27753] [ 1117.065893][T27753] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 1117.069243][T27753] __mutex_lock+0x1aa/0x1ca0 [ 1117.071515][T27753] autofs_notify_daemon+0x4a6/0xd60 [ 1117.073989][T27753] autofs_wait+0x10f3/0x1ac0 [ 1117.076283][T27753] autofs_mount_wait+0x132/0x3c0 [ 1117.078813][T27753] autofs_d_automount+0x4b2/0x960 [ 1117.081241][T27753] __traverse_mounts+0x1b9/0x830 [ 1117.083684][T27753] step_into_slowpath+0x772/0xf50 [ 1117.086117][T27753] path_lookupat+0x627/0xc40 [ 1117.088410][T27753] filename_lookup+0x224/0x5f0 [ 1117.090757][T27753] kern_path+0x35/0x50 [ 1117.092821][T27753] lookup_bdev+0xd8/0x280 [ 1117.094975][T27753] resume_store+0x1d6/0x490 [ 1117.097224][T27753] kobj_attr_store+0x58/0x80 [ 1117.099498][T27753] sysfs_kf_write+0xf2/0x150 [ 1117.101769][T27753] kernfs_fop_write_iter+0x3af/0x570 [ 1117.103938][T27753] vfs_write+0x7d3/0x11d0 [ 1117.105593][T27753] ksys_write+0x12a/0x250 [ 1117.107257][T27753] __do_fast_syscall_32+0xe8/0x680 [ 1117.109165][T27753] do_fast_syscall_32+0x32/0x80 [ 1117.110980][T27753] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1117.113265][T27753] [ 1117.113265][T27753] -> #1 (&of->mutex){+.+.}-{4:4}: [ 1117.115681][T27753] __mutex_lock+0x1aa/0x1ca0 [ 1117.117426][T27753] kernfs_seq_start+0x4f/0x2a0 [ 1117.119133][T27753] traverse.part.0.constprop.0+0xaf/0x650 [ 1117.121229][T27753] seq_read_iter+0x93c/0x12d0 [ 1117.123070][T27753] kernfs_fop_read_iter+0x46c/0x610 [ 1117.124986][T27753] do_iter_readv_writev+0x743/0x9e0 [ 1117.126934][T27753] vfs_readv+0x4cb/0x8b0 [ 1117.128548][T27753] do_readv+0x132/0x340 [ 1117.130163][T27753] __do_fast_syscall_32+0xe8/0x680 [ 1117.132066][T27753] do_fast_syscall_32+0x32/0x80 [ 1117.133847][T27753] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1117.135948][T27753] [ 1117.135948][T27753] -> #0 (&p->lock){+.+.}-{4:4}: [ 1117.138315][T27753] __lock_acquire+0x1669/0x2890 [ 1117.140181][T27753] lock_acquire+0x179/0x330 [ 1117.141876][T27753] __mutex_lock+0x1aa/0x1ca0 [ 1117.143592][T27753] seq_read_iter+0xe1/0x12d0 [ 1117.145345][T27753] kernfs_fop_read_iter+0x46c/0x610 [ 1117.147257][T27753] copy_splice_read+0x618/0xc20 [ 1117.149030][T27753] do_splice_read+0x285/0x370 [ 1117.150774][T27753] splice_file_to_pipe+0x109/0x120 [ 1117.152643][T27753] do_sendfile+0x400/0xe50 [ 1117.154287][T27753] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 1117.156413][T27753] __do_fast_syscall_32+0xe8/0x680 [ 1117.158328][T27753] do_fast_syscall_32+0x32/0x80 [ 1117.160140][T27753] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1117.162407][T27753] [ 1117.162407][T27753] other info that might help us debug this: [ 1117.162407][T27753] [ 1117.165789][T27753] Chain exists of: [ 1117.165789][T27753] &p->lock --> &sbi->pipe_mutex --> &pipe->mutex [ 1117.165789][T27753] [ 1117.169784][T27753] Possible unsafe locking scenario: [ 1117.169784][T27753] [ 1117.172302][T27753] CPU0 CPU1 [ 1117.174117][T27753] ---- ---- [ 1117.175938][T27753] lock(&pipe->mutex); [ 1117.177381][T27753] lock(&sbi->pipe_mutex); [ 1117.179704][T27753] lock(&pipe->mutex); [ 1117.181904][T27753] lock(&p->lock); [ 1117.183235][T27753] [ 1117.183235][T27753] *** DEADLOCK *** [ 1117.183235][T27753] [ 1117.185898][T27753] 1 lock held by syz.1.6647/27753: [ 1117.187615][T27753] #0: ffff888061870068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 1117.190584][T27753] [ 1117.190584][T27753] stack backtrace: [ 1117.192543][T27753] CPU: 3 UID: 0 PID: 27753 Comm: syz.1.6647 Tainted: G L syzkaller #0 PREEMPT(full) [ 1117.192563][T27753] Tainted: [L]=SOFTLOCKUP [ 1117.192567][T27753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1117.192574][T27753] Call Trace: [ 1117.192579][T27753] [ 1117.192585][T27753] dump_stack_lvl+0x116/0x1f0 [ 1117.192605][T27753] print_circular_bug+0x275/0x340 [ 1117.192625][T27753] check_noncircular+0x146/0x160 [ 1117.192646][T27753] __lock_acquire+0x1669/0x2890 [ 1117.192658][T27753] ? mark_held_locks+0x49/0x80 [ 1117.192669][T27753] lock_acquire+0x179/0x330 [ 1117.192679][T27753] ? seq_read_iter+0xe1/0x12d0 [ 1117.192695][T27753] ? __pfx___might_resched+0x10/0x10 [ 1117.192713][T27753] __mutex_lock+0x1aa/0x1ca0 [ 1117.192731][T27753] ? seq_read_iter+0xe1/0x12d0 [ 1117.192745][T27753] ? do_sendfile+0x400/0xe50 [ 1117.192758][T27753] ? __do_fast_syscall_32+0xe8/0x680 [ 1117.192776][T27753] ? do_fast_syscall_32+0x32/0x80 [ 1117.192785][T27753] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1117.192799][T27753] ? seq_read_iter+0xe1/0x12d0 [ 1117.192814][T27753] ? __pfx___mutex_lock+0x10/0x10 [ 1117.192833][T27753] ? alloc_pages_bulk_noprof+0xac5/0x1410 [ 1117.192848][T27753] ? seq_read_iter+0xe1/0x12d0 [ 1117.192861][T27753] seq_read_iter+0xe1/0x12d0 [ 1117.192876][T27753] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1117.192891][T27753] kernfs_fop_read_iter+0x46c/0x610 [ 1117.192910][T27753] copy_splice_read+0x618/0xc20 [ 1117.192926][T27753] ? __pfx_aa_file_perm+0x10/0x10 [ 1117.192942][T27753] ? __pfx_copy_splice_read+0x10/0x10 [ 1117.192960][T27753] ? __fget_files+0x204/0x3c0 [ 1117.192976][T27753] ? __pfx_copy_splice_read+0x10/0x10 [ 1117.192991][T27753] do_splice_read+0x285/0x370 [ 1117.193007][T27753] splice_file_to_pipe+0x109/0x120 [ 1117.193024][T27753] do_sendfile+0x400/0xe50 [ 1117.193039][T27753] ? __pfx_do_sendfile+0x10/0x10 [ 1117.193054][T27753] ? __pfx___seccomp_filter+0x10/0x10 [ 1117.193068][T27753] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 1117.193079][T27753] ? xfd_validate_state+0x61/0x180 [ 1117.193089][T27753] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 1117.193101][T27753] ? __secure_computing+0x21c/0x320 [ 1117.193114][T27753] __do_fast_syscall_32+0xe8/0x680 [ 1117.193132][T27753] do_fast_syscall_32+0x32/0x80 [ 1117.193142][T27753] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1117.193156][T27753] RIP: 0023:0xf7f34579 [ 1117.193165][T27753] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1117.193176][T27753] RSP: 002b:00000000f542655c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 1117.193187][T27753] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000004 [ 1117.193194][T27753] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 1117.193201][T27753] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1117.193207][T27753] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1117.193214][T27753] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1117.193224][T27753] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1117.416896][ T5937] Bluetooth: hci0: command tx timeout [ 1117.551449][T25067] team0 (unregistering): Port device team_slave_1 removed [ 1117.599477][T25067] team0 (unregistering): Port device team_slave_0 removed [ 1117.844561][ T5937] Bluetooth: hci2: command tx timeout [ 1117.890083][T27716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.892580][T27716] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.895025][T27716] bridge_slave_1: entered allmulticast mode [ 1117.897470][T27716] bridge_slave_1: entered promiscuous mode [ 1117.901614][T27748] netlink: 'syz.7.6645': attribute type 1 has an invalid length. [ 1117.904191][T27748] netlink: 'syz.7.6645': attribute type 2 has an invalid length. [ 1118.619051][T25067] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.713371][T25067] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.779285][T25067] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.841665][T25067] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.925778][T25067] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.213965][T12277] usb 50-1: device descriptor read/8, error -110 [ 1119.630019][T12277] usb usb50-port1: attempt power cycle [ 1120.081684][T25067] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.156838][T25067] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.223225][T25067] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.250098][T12277] usb usb50-port1: unable to enumerate USB device [ 1120.322185][T25067] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.391852][T25067] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.434273][T25067] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.501061][T25067] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.600823][T25067] bridge_slave_1: left allmulticast mode [ 1120.603431][T25067] bridge_slave_1: left promiscuous mode [ 1120.605935][T25067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.609428][T25067] bridge_slave_0: left allmulticast mode [ 1120.611230][T25067] bridge_slave_0: left promiscuous mode [ 1120.613061][T25067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.616565][T25067] bridge_slave_1: left allmulticast mode [ 1120.618362][T25067] bridge_slave_1: left promiscuous mode [ 1120.620137][T25067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.622999][T25067] bridge_slave_0: left allmulticast mode [ 1120.624909][T25067] bridge_slave_0: left promiscuous mode [ 1120.626737][T25067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.629980][T25067] bridge_slave_1: left allmulticast mode [ 1120.631777][T25067] bridge_slave_1: left promiscuous mode [ 1120.633540][T25067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.636516][T25067] bridge_slave_0: left allmulticast mode [ 1120.638358][T25067] bridge_slave_0: left promiscuous mode [ 1120.640226][T25067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.643598][T25067] bridge_slave_1: left allmulticast mode [ 1120.645618][T25067] bridge_slave_1: left promiscuous mode [ 1120.655090][T25067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.658941][T25067] bridge_slave_0: left allmulticast mode [ 1120.660801][T25067] bridge_slave_0: left promiscuous mode [ 1120.662687][T25067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.797760][T25067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1120.802732][T25067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1120.807445][T25067] bond0 (unregistering): Released all slaves [ 1120.879400][T25067] bond0 (unregistering): Released all slaves [ 1120.982656][T25067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1120.986532][T25067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1120.991158][T25067] bond0 (unregistering): Released all slaves [ 1121.082999][T25067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1121.087718][T25067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1121.092052][T25067] bond0 (unregistering): Released all slaves [ 1121.803445][T25067] hsr_slave_0: left promiscuous mode [ 1121.806169][T25067] hsr_slave_1: left promiscuous mode [ 1121.808629][T25067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1121.812021][T25067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1121.815624][T25067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1121.818628][T25067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1121.823119][T25067] hsr_slave_0: left promiscuous mode [ 1121.825296][T25067] hsr_slave_1: left promiscuous mode [ 1121.827270][T25067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1121.829781][T25067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1121.832476][T25067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1121.834860][T25067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1121.840472][T25067] hsr_slave_0: left promiscuous mode [ 1121.845532][T25067] hsr_slave_1: left promiscuous mode [ 1121.848113][T25067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1121.851316][T25067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1121.855286][T25067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1121.858538][T25067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1121.870217][T25067] veth1_macvtap: left promiscuous mode [ 1121.872642][T25067] veth0_macvtap: left promiscuous mode [ 1121.875257][T25067] veth1_vlan: left promiscuous mode [ 1121.877584][T25067] veth0_vlan: left promiscuous mode [ 1121.880555][T25067] veth1_macvtap: left promiscuous mode [ 1121.882950][T25067] veth0_macvtap: left promiscuous mode [ 1121.885757][T25067] veth1_vlan: left promiscuous mode [ 1121.888080][T25067] veth0_vlan: left promiscuous mode [ 1121.891070][T25067] veth1_macvtap: left promiscuous mode [ 1121.893334][T25067] veth0_macvtap: left promiscuous mode [ 1121.895834][T25067] veth1_vlan: left promiscuous mode [ 1121.898045][T25067] veth0_vlan: left promiscuous mode [ 1122.071987][T25067] team0 (unregistering): Port device team_slave_1 removed [ 1122.102049][T25067] team0 (unregistering): Port device team_slave_0 removed [ 1122.282908][T25067] team0 (unregistering): Port device team_slave_1 removed [ 1122.301854][T25067] team0 (unregistering): Port device team_slave_0 removed [ 1122.443017][T25067] team0 (unregistering): Port device team_slave_1 removed [ 1122.465863][T25067] team0 (unregistering): Port device team_slave_0 removed [ 1124.020920][T25067] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.103681][T25067] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.186974][T25067] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.233016][T25067] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.345668][T25067] bridge_slave_1: left allmulticast mode [ 1124.347744][T25067] bridge_slave_1: left promiscuous mode [ 1124.349975][T25067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.353312][T25067] bridge_slave_0: left allmulticast mode [ 1124.355313][T25067] bridge_slave_0: left promiscuous mode [ 1124.357193][T25067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.459066][T25067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1124.464369][T25067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1124.469044][T25067] bond0 (unregistering): Released all slaves [ 1124.766806][T25067] hsr_slave_0: left promiscuous mode [ 1124.769477][T25067] hsr_slave_1: left promiscuous mode [ 1124.772053][T25067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1124.774741][T25067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1124.778085][T25067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1124.781110][T25067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1124.786976][T25067] veth1_vlan: left allmulticast mode [ 1124.789337][T25067] veth1_macvtap: left promiscuous mode [ 1124.791640][T25067] veth0_macvtap: left promiscuous mode [ 1124.793823][T25067] veth1_vlan: left promiscuous mode [ 1124.796020][T25067] veth0_vlan: left promiscuous mode [ 1124.953200][T25067] team0 (unregistering): Port device team_slave_1 removed [ 1124.970458][T25067] team0 (unregistering): Port device team_slave_0 removed