last executing test programs: 7m54.076047997s ago: executing program 2 (id=867): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 7m54.018551067s ago: executing program 2 (id=869): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000000,0000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 7m54.017886836s ago: executing program 2 (id=872): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000881c", @ANYRES16=r0, @ANYBLOB="010026bd7000fbdbdf2501000000000000000b0000000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc805}, 0x1) r1 = socket$inet(0x2, 0x3, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a000d615000008009f0005000000080026000816"], 0x40}}, 0x200040b4) setsockopt$inet_opts(r1, 0x0, 0x8, &(0x7f00000002c0)="441f080100000000ff0000005b1957034b596f21d3816491ee54bec6fe", 0x1d) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYRES8=r6], 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f0000000180)=0x10001, 0x4) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r8, 0xc00c55ca, &(0x7f00000003c0)={0xa, 0x2, 0x2}) getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f0000000100)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000640)={0xffffffffffffffff}, 0x4800) vmsplice(r10, &(0x7f0000000440)=[{&(0x7f0000000800)="99", 0x1}], 0x1, 0x3) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="640000000206050000000000000000030000fffd090002807379783100000000050004000000000005000100070000002000078005000300090000000c00018008000140ffffffff0800064000006d2305000500020000000900020073797a3000000000", @ANYRESHEX=r5, @ANYRESDEC=r2, @ANYBLOB="617302eade25b2596ecbbc9efbd3347630f51e1839525264ea77e2535f20d570759d3390163109b818966ee767e4d8d7a692722bb6275efabd274201ec0ff5fbf9bc1add881b530c15322c5aa1856829fb85092ad18cb98786bca736d0d3114fde384958b98c4ae6bc337956b58d50ffb4ae1d08dba6f2430208a2464a32e534c06fb8a37282472f"], 0x64}}, 0x4004080) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$negate(0xd, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x1d) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r12, 0x4068aea3, &(0x7f0000000200)={0xc1, 0x0, 0x1}) 7m53.95726676s ago: executing program 2 (id=874): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x8c\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x1, 0x0) mq_notify(r0, &(0x7f0000000200)={0x0, 0x16}) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff0001}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001100111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x15, r5}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f00000002c0)={0x2, 0x9, 0x7}) syz_open_dev$audion(&(0x7f0000000080), 0x80000001, 0x391000) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0x80045300, 0xfffffffffffffffe) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, &(0x7f0000000200)={0x2, 0x200, 0x7, 0x81, 0x3, 0x0, 0xff}) unshare(0x6a040000) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x8000) 7m53.295867617s ago: executing program 2 (id=887): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) (async) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xffffffff}) (async) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) (async) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=0x0) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) kcmp(r3, r4, 0x4, r2, r5) 7m53.238094036s ago: executing program 2 (id=890): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x60, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3f}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x60}}, 0x0) 7m38.172470415s ago: executing program 32 (id=890): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x60, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3f}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x60}}, 0x0) 5m13.808203786s ago: executing program 1 (id=3680): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x49801, 0x9a4d}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x40}}, 0x4004050) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000240)) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x0, r6}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x810) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x0, 0x800, 0x0, 0x8100000}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6a9, 0x3ac8}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r8, 0x80044d0d, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c743100", @ANYRES16=r10, @ANYBLOB="010000000000000000000c0000000800050000000000"], 0x1c}}, 0x0) 5m13.103525695s ago: executing program 1 (id=3687): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) setns(r1, 0x24020000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r2, 0x92b, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x60}, 0x4) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 5m11.099291311s ago: executing program 0 (id=3690): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) (fail_nth: 12) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) 5m10.683093495s ago: executing program 0 (id=3692): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @remote}, 0x1c) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000003f80), 0x0, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) readv(r1, &(0x7f00000025c0)=[{&(0x7f0000002880)=""/4084, 0xff4}, {&(0x7f0000002780)=""/254, 0xfe}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x3) r2 = socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = accept4$alg(r3, 0x0, 0x0, 0x80000) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000003a00010020000000000000000b000000140001"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20004004) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$sock_netdev_private(r0, 0x8949, &(0x7f0000000000)) 5m10.047843467s ago: executing program 1 (id=3694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060101000000000000f0000000000005000400000000000900020073797a31000000000500010007000000050005000a0000001400078008001140000000690800124000007fff10000300686173683a69702c6d6163"], 0x5c}}, 0x0) 5m9.8743584s ago: executing program 0 (id=3698): r0 = memfd_create(&(0x7f00000001c0)='/duv/udmabuf\x00', 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='trusted.overlay.origin\x00') sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@alg={0xe0, 0x10, 0x90c, 0x70bd27, 0x25dfdbff, {{'jitterentropy_rng\x00'}, '\x00', '\x00', 0x2000, 0x2000}}, 0xe0}}, 0x0) timer_create(0x0, 0x0, 0x0) gettid() prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x1, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}]}}]}, 0x3c}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r7, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000804}, 0xc080) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000000)=0x1) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES16=r2], 0xf0}}, 0x0) 5m9.87397651s ago: executing program 1 (id=3700): openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x78}, 0x1, 0xffffffff00000003}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newlink={0x34, 0x10, 0x49920d862a92153b, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x64848}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x840) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 5m9.715201074s ago: executing program 0 (id=3701): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{r1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%pB \x00'}, 0x20) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000240)={0xf0f029, 0x4}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000040)={[{0x5, 0xc000, 0x4, 0xff, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0xe, 0x5, 0xcc}, {0x804, 0x2, 0x1, 0x45, 0x7, 0x0, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x40000001, 0x3, 0x38, 0x3, 0x84, 0x7, 0x3, 0x50, 0x8, 0x3, 0x4, 0x9, 0x24ab}], 0xffffffff}) ioctl$KVM_SET_PIT2(r6, 0x4070aea0, &(0x7f00000000c0)={[{0x1ff, 0x5, 0x9, 0x7f, 0x5, 0x9, 0xe0, 0xb, 0x4, 0x0, 0x0, 0x3, 0xfffffffffffffffb}, {0x4, 0x0, 0x2, 0x4, 0x7, 0x7, 0x9, 0x9, 0xfc, 0x6, 0xb, 0x75, 0x6}, {0x4, 0x3, 0x5, 0x9, 0x2, 0x0, 0x6, 0x8, 0x30, 0x6, 0x5, 0x7, 0x3}], 0x80000000}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14cf3265678f1e158693b80a000000000000000086276dcf0f91c5f1770a2ea67d2848bec3d6e464a9cd2ab1146393b2680e9232ff685a0c03d2e5111baa326e420a4e4f7136371f8bbf030b60c2384c2bbb194c1263b99e326409caf373300be6899517a12032001ca2a209e770c016d25dd8d1d51b2fbe426066ce4fac4860591bd03b149d8640a27f9b418950bc7bbada7cb999d032884017d9b55f4f71e65db413d4"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x800452d2, &(0x7f0000000100)) 5m9.510861589s ago: executing program 1 (id=3702): r0 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1\xa9\xac\xdf\xb46s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I+\xd9\xba\xdfw\xfcE!\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x00\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x4) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000980)={0x80, 0xfd2c, 0x80, 0x3, 0x11dd33e3}) clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0xfffffffe, 0x0, 0x1000000000000005, 0x7, 0xfffffffffffffffd, 0x9, 0x1, 0x8000040000000000, 0x0, 0x3, 0x2484, 0x3, 0x4, 0x0, 0x0, 0x80003600000, 0xfffffffffffffffd, 0x0, 0x2000000002, 0xfffffffffffffffe, 0x3, 0xa30, 0x0, 0x6, 0xa}) 5m9.184665604s ago: executing program 1 (id=3704): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7ffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xc745, 0x1, 0x4, 0x0, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x2, 0xd, 0xffffff44, 0x80800}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r5, 0x101, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8, 0xd}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'syzkaller0\x00', &(0x7f0000000100)=@ethtool_ts_info}) write$char_usb(r3, &(0x7f0000000180)='0', 0xfe64) bind$tipc(0xffffffffffffffff, 0x0, 0x0) 5m8.646301959s ago: executing program 3 (id=3709): getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r0, @in={{0x2, 0x4e23, @broadcast}}, 0xb55, 0x4, 0x9, 0x10001, 0x0, 0xa3, 0x4}, &(0x7f0000000140)=0x9c) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$CDROMSTART(r1, 0x5308) ioctl$CDROMPLAYBLK(r1, 0x5323, 0x0) 5m8.445299265s ago: executing program 3 (id=3713): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000d615000008009f0005000000080026000816"], 0x40}}, 0x200040b4) 5m8.29659116s ago: executing program 4 (id=3714): syz_open_dev$loop(&(0x7f0000000080), 0x47ffffd, 0x12c842) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async) ioctl$sock_netdev_private(r3, 0x89ec, &(0x7f0000000040)) (async) r4 = socket(0x15, 0x809, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, 0x0, 0x0) write(r1, 0x0, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, 0x0, 0x0) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r8, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r8) (async) getsockopt$inet_udp_int(r7, 0x11, 0x6c, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r4) (async) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x47) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000400)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x4, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) 5m8.155397519s ago: executing program 0 (id=3715): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x6, 0x4, 0x8, 0xd}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x44000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m7.996588789s ago: executing program 0 (id=3716): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac3114bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000110074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd700004350000020002020000000000000000000000001d1b00000c000f00f8ffffffffffffff"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) flock(r0, 0x1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0xfe) setpgid(0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @loopback}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000004a80)=@newtaction={0x34b4, 0x30, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{0x1a0, 0x1, [@m_ife={0x74, 0xb, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x386, 0x9, 0x6, 0x8, 0x81}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0x18, 0x6, "21a4c39bd68878ed0c70459f01fb8ae2c0ad4fbf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0x7c, 0x18, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0x2, 0x1, 0x9, 0x8}, 0x2}}]}, {0x2f, 0x6, "b9d16c3db3387f6212102a644344859650a3071d2e658e1de2f47aac756fa1499e1fc141762af7fffa82f7"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_skbmod={0xac, 0x1d, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0x5, 0x4, 0x800, 0x401}}}]}, {0x5c, 0x6, "7ae5261b2553f599dfcafb4938afa08d06dfc622eeb8f644c645e9c8962f6397bb643507a92819e12650b6995c591caedb6fe1f4fee852362b2a2ecadcadfe3e3053af4db1cc9ba8627f43408be7acc025b70a1d2173b6e3"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x3054, 0x1, [@m_mpls={0x100, 0x14, 0x0, 0x0, {{0x9}, {0x60, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0xa, 0x10000000, 0x10001, 0x8}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0xf9}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0xb}, @TCA_MPLS_LABEL={0x8, 0x5, 0xd5663}, @TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_BOS={0x5}]}, {0x76, 0x6, "dbcd3bf3dca85196810954fa32d6404986df4332f95ecbf733216b772b7bd55429312cceab9a3be2d2f8cc7593dd5076b098427b61eea658f6837b8683076af8e39ccb80b63e6e5743d771e9bbb19dc369386d41819fe09640fe86d6385ec3b6cfe93fcbf0a99646010da71773e6f0a455b8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x2d88, 0x5, 0x0, 0x0, {{0xb}, {0x1d5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffd}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1ad8, 0x88b, 0x0, 0x3, 0x6a8, 0x1ff, 0x0, 0x5, 0x7, 0x5, 0xed57, 0x8, 0x7, 0x651f, 0x5, 0xfffffff3, 0xcb4, 0x0, 0xe, 0x800, 0x3, 0x1000, 0xf8, 0x0, 0xa, 0x41, 0x4, 0x3, 0x7, 0x5, 0x9, 0x765013f0, 0x0, 0x9, 0x7, 0x2, 0xe, 0x1, 0xfff, 0x5, 0xffff44aa, 0x80000001, 0x5, 0x101, 0x0, 0xe, 0x401, 0x3, 0x1, 0x2, 0xae1b, 0x2c, 0x8, 0x0, 0x1ff, 0xe9f, 0xe091, 0x5, 0x81, 0xaf, 0xf, 0x5ec, 0xfc000000, 0xff, 0x6872, 0x8a0, 0x5, 0xd, 0x1, 0x8, 0xfffffffa, 0x9, 0x6, 0x1, 0x0, 0x2, 0xaa3, 0x5, 0x0, 0x6, 0xad, 0x200, 0x10, 0x80000000, 0x8001, 0x5, 0x2, 0x80, 0xff, 0x0, 0xfe8, 0x54, 0x6, 0x7ff, 0x2, 0x6, 0x7, 0x3, 0x5, 0x4, 0xffffffff, 0x0, 0x8, 0x10001, 0x8, 0xa, 0x4, 0x6, 0x2, 0x10000, 0x1, 0x44, 0xef, 0xc4, 0x3a, 0x5, 0x1ff, 0x4, 0x1, 0x0, 0x10001, 0x5, 0xb04, 0x3, 0x1, 0x2, 0x4, 0x6, 0x10000, 0x5, 0x401, 0x9, 0xa6, 0x9, 0xfffffeff, 0x8f, 0x2, 0x100, 0x10000, 0x9, 0xfffffff7, 0x6, 0x3, 0x9, 0xaf, 0x10, 0x9, 0x8, 0xf, 0x1, 0x100, 0x31, 0x3ff, 0xa5c6, 0x4, 0x4, 0x6, 0xc, 0x7, 0x9, 0x5, 0x2, 0x3f, 0x551, 0x40, 0x0, 0x8001, 0x7, 0x4, 0x1, 0x81, 0x40, 0x4, 0x3, 0x697a, 0x7, 0xffffffff, 0x2de6dd39, 0x7, 0x401, 0x1, 0x54, 0x3, 0x80000000, 0x6, 0x10000, 0x1bc, 0x0, 0x6, 0x9, 0x0, 0x8, 0x7, 0x400, 0x1, 0x8, 0x6, 0x9, 0x9, 0x111, 0x1, 0xa, 0xffffffff, 0x80000001, 0x8, 0x0, 0x5, 0x200, 0x182, 0x1, 0x8d, 0x101, 0x8001, 0x8, 0x0, 0x7, 0x4, 0x2b3a5bfd, 0xeaf, 0x3, 0x2, 0x3, 0x5, 0x5, 0x8, 0x9, 0x101, 0xfffffff9, 0x40, 0x5, 0x8, 0x2, 0xffff, 0xfa, 0x1, 0x5, 0x2, 0xffff8cc8, 0xd, 0x1, 0x0, 0xf, 0xe2b, 0x80000000, 0xd5, 0x4fd2, 0x60c, 0x7fffffff, 0x9, 0x6, 0x8, 0x0, 0x80, 0x1, 0x80000001]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xb0}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80000000}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xea3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x248d0a89, 0x11, 0x1, 0x4, 0xe, 0xa, 0x3, 0x5874, 0x8, 0x8, 0x7f, 0xffffff75, 0x9, 0xa, 0x100, 0x9, 0xfffeffff, 0x9, 0x8, 0x21b, 0x7, 0xfffffffd, 0x4, 0x6, 0x3, 0x9, 0x9, 0x1, 0x0, 0x7f, 0x6, 0xfffffffe, 0x0, 0x6ab4, 0x0, 0x5, 0x9, 0x6, 0x7, 0x68, 0xfffffffd, 0x6, 0x6ffa, 0x7, 0x401, 0x2, 0x4, 0x7, 0x8, 0x4, 0x9, 0x4, 0x8, 0x7, 0x72, 0x88ab, 0x4, 0x8, 0xffffff80, 0x8, 0x9, 0x0, 0x6, 0x8001, 0x42f9, 0x7fffffff, 0x8, 0x9, 0x8, 0xfffffff7, 0xe, 0x4, 0xf, 0x8, 0xc0000000, 0xca3, 0x8001, 0x7, 0x2, 0x5, 0x5, 0x57800000, 0x5, 0x2, 0x6f9e1a6, 0xf, 0x7187, 0x55e0, 0x6, 0x9, 0x1, 0x3aa7fd0b, 0x7, 0x10000, 0x4, 0xffffffe3, 0x0, 0x4, 0x40, 0x3, 0x400, 0x401, 0x81, 0x4, 0x3, 0x9, 0x9, 0x1, 0x40, 0x6267c9d2, 0xffffffff, 0x98, 0x0, 0x2, 0x0, 0xfffffffe, 0xfffffff9, 0x3, 0x200, 0x5, 0x1, 0x7, 0xcbb, 0xe, 0xa00000, 0x5, 0xfffffffc, 0x9e, 0x9, 0xf, 0x80000000, 0x6, 0x2, 0x4, 0x12, 0x2, 0x0, 0x5, 0x5, 0x6, 0x8, 0x56, 0x7, 0x6, 0x50ad, 0x7, 0xffff28d8, 0xff, 0x7, 0x6, 0x800, 0x1, 0x1, 0x6, 0x10001, 0x6, 0xe, 0x0, 0x6, 0xd71, 0x8, 0x7, 0x1, 0xe9, 0x9, 0xff, 0x4, 0xfffffff7, 0x10, 0x7, 0x200, 0x94ce, 0x6, 0xfffff73e, 0x2, 0x7, 0x2e42, 0x4, 0x8, 0x7, 0x3e16, 0x0, 0x1, 0x50, 0x6, 0xc2, 0x9, 0x3, 0x9, 0xfffffffe, 0x0, 0xa, 0xffffffff, 0x2, 0x4, 0x8, 0x1da1, 0x0, 0x1, 0x9, 0x6, 0x4, 0x0, 0x7, 0xfffffffb, 0x7, 0xffff, 0x59180, 0xdd2c, 0x824, 0xf, 0x1, 0xd, 0x1, 0x9, 0x101, 0x7, 0x80000001, 0x4, 0x8, 0x100, 0x8, 0x101, 0x6ea, 0x7, 0x9, 0x70000, 0x5, 0x1, 0x2, 0x1000, 0x8, 0x6, 0xcd6, 0x8, 0x400, 0x19, 0x7f, 0x35d, 0x9, 0x6, 0x7, 0x80, 0xdbbb, 0x3, 0x5, 0x8, 0x2003, 0x3, 0xfffffff8, 0x739, 0x4, 0x8, 0x3, 0x1, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x1, 0x4, 0x7, 0x401, {0x40, 0x2, 0xd, 0x8, 0x3, 0x7}, {0x6, 0x1, 0x2, 0x1, 0x6, 0x3}, 0x9, 0x2, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x6, 0x4, 0x3bd2, 0xa, 0x0, 0xfffffffa, 0x3, 0xbd, 0xd, 0x5, 0x8, 0x4, 0x9b, 0x0, 0x6, 0x0, 0x4, 0xb, 0x0, 0xffffffff, 0xa, 0x3, 0x401, 0x6, 0x9, 0x0, 0x54, 0x5, 0x8, 0x4, 0xf53, 0x9, 0x7, 0x5, 0x1, 0x1, 0x80, 0x9, 0x3, 0x1, 0x7, 0xff, 0x7ff, 0x13e6, 0x0, 0xa, 0xca, 0x401, 0x0, 0x1000, 0x9, 0x7, 0x3, 0xf17b, 0x7, 0xc, 0x4e, 0xfffffff0, 0x5, 0x2, 0xf, 0x7, 0xfffffffe, 0xfffffffb, 0x1, 0x85, 0x16576688, 0xb531b600, 0x4, 0x7, 0x9b8, 0x9, 0x8, 0xe, 0x3ff, 0x38000, 0x5, 0x40, 0x240, 0xd83, 0x6e, 0x5, 0x3, 0x7, 0x1, 0x5, 0x9, 0x9, 0x6, 0x9, 0x4e, 0x4, 0x3, 0x2, 0x6, 0x9, 0x9, 0x5, 0x7b7, 0x7c, 0x9, 0x8, 0xffffff01, 0xe, 0x9, 0x2443, 0x0, 0x851, 0x7, 0xc, 0x0, 0xa000000, 0x7fff, 0x8, 0x3ff, 0x1, 0x1, 0x1, 0x6, 0x2, 0x8, 0xb87, 0xfffffff8, 0x10000, 0x40, 0x2, 0x5, 0x0, 0xfff, 0x7, 0xfff, 0x3, 0x0, 0x80000000, 0x1, 0x7fffffff, 0x8001, 0x8, 0x7fff, 0x3, 0x101, 0x10000, 0x9, 0x0, 0x6, 0x2, 0xfffffa4c, 0x3, 0x6, 0x10, 0x228a, 0x6d, 0x4, 0x8001, 0x9, 0xa75, 0x147, 0x1, 0xc, 0x1, 0x9, 0x4, 0xb71c, 0x80000001, 0x3, 0xffff, 0x1, 0x100000, 0x80, 0x6, 0x6, 0x3ff00, 0x1, 0x1, 0x3, 0x28000000, 0xe000, 0x8, 0x5, 0x6, 0x10001, 0x5, 0x9, 0xfff, 0xfffffff8, 0x953, 0x9, 0x4, 0x4, 0x4, 0x2, 0xe, 0x200, 0x800, 0x5000000, 0x400, 0x4, 0x1, 0x8, 0x200, 0xfffffffd, 0x5, 0x2, 0x0, 0x8, 0x1, 0x26cc1a60, 0x3, 0x1, 0x4, 0x2, 0x5, 0x7, 0x5, 0x400, 0x3, 0xffff, 0x66d, 0x81, 0x200, 0x200, 0xb25, 0x1, 0x3, 0x4, 0x6, 0x6, 0xa, 0x0, 0x1, 0x815, 0x1000, 0xff, 0x40, 0x602, 0x3, 0x0, 0xd0, 0x8, 0x5, 0x9, 0x54, 0x442, 0x10000, 0x5, 0x2, 0x9, 0x9, 0x6, 0x40, 0x2, 0x5, 0x3, 0x7, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x38f6, 0x6, 0x5, 0x40, 0x401, 0x5, 0x2, 0x1aa9, 0x2, 0xbe, 0x246a6c57, 0x996, 0x5, 0x2, 0x0, 0x7, 0x0, 0x3, 0x7816, 0xd, 0x4cf, 0xffff, 0x7, 0x9, 0x8, 0x7, 0x6, 0xf0000000, 0x2, 0x7, 0xc, 0x9, 0x2, 0x7f, 0x2, 0x7, 0xb853, 0x2, 0x9, 0x4, 0x7, 0xd, 0xffff8ac9, 0x80007, 0x10001, 0x6, 0x8, 0x6bd, 0x80, 0x8, 0x9, 0x101, 0x1, 0xc0, 0x2, 0x4, 0x3, 0x4800000, 0x0, 0x964d, 0x9, 0xc8, 0x9651, 0x805, 0xffff, 0x0, 0x0, 0xfffff000, 0x9, 0x5, 0x2, 0x48c4, 0x80000001, 0xd, 0x7, 0x0, 0x8, 0x82, 0x0, 0x7f, 0x3d5fd3e7, 0x95c, 0xf, 0xfffffff9, 0x7ff, 0xbe, 0x174, 0x5, 0x7, 0x5, 0x3, 0x101, 0x1, 0x6000, 0x7b8cf93, 0x9, 0xff, 0x6, 0x6, 0x1000, 0x3, 0x5, 0x6c, 0xf, 0x12, 0x84f6, 0x9, 0x5, 0xfffffff8, 0x8, 0x5, 0xc, 0xad, 0xfffffff5, 0xe8cf, 0xfff, 0x401, 0x5, 0x9, 0x7, 0x9e7, 0x27fff, 0xffffffff, 0x2, 0x2, 0x0, 0x0, 0xfb, 0x101, 0x2, 0x4, 0x8001, 0x2, 0xc172, 0x80000001, 0xfff, 0x4, 0xae6e, 0x5, 0x7ff, 0xffffffff, 0x6, 0x5, 0x1, 0x7ff, 0xd1b3, 0x4, 0x4, 0x401, 0x5, 0x1, 0x8, 0x5, 0x261ab731, 0xffff, 0x6427cfa6, 0x4000, 0x8, 0x6c, 0x0, 0x4000000, 0x2, 0x6, 0x8, 0x80, 0x3, 0x2315, 0x8, 0x0, 0x9, 0x408c, 0xffffff80, 0x4, 0x476, 0x7fff, 0x8, 0x4cb3, 0x0, 0x1, 0x2, 0x0, 0x7, 0x0, 0x69c, 0x7, 0x80000000, 0xc11, 0x0, 0x2, 0x2, 0x6, 0x8, 0x8, 0x7860, 0x8d82, 0x800, 0x10, 0x0, 0xe414, 0x7ff, 0x5, 0x8000, 0x8, 0x2, 0x7, 0x40, 0x81, 0x1, 0x8, 0x0, 0x4, 0x3, 0xfffffff7, 0xeead, 0x9, 0x8, 0x2, 0xffff8000, 0x17, 0xc, 0x8, 0x3, 0x91, 0x7fff, 0x6, 0x8, 0x3, 0xffff, 0x2, 0x9, 0xc, 0x8, 0x1, 0x5, 0x7ff, 0x9000000, 0x4, 0x26c4db40, 0x84, 0x0, 0x3, 0x2, 0x1000000, 0x2, 0x40, 0x4, 0x4, 0x4, 0x9, 0x8eb, 0x100, 0x3, 0x8, 0x6, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xffff4bf4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80, 0x20000000, 0x8, 0x1000, 0x7fffffff, {0x9, 0x2, 0x5, 0x8a60, 0x80, 0xffff}, {0x8, 0x0, 0xb, 0x2, 0x8, 0x9}, 0x6, 0x1, 0xffffffff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x74f}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x5, 0xff, 0x0, {0x1, 0x0, 0x3, 0x7, 0x0, 0x6}, {0x6, 0x3, 0x8, 0x3, 0xd80f, 0x101}, 0xecb, 0x2, 0x401}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x800, 0x4, 0x80000000, 0x1, 0xb, 0xa46e, 0xf, 0x6, 0x8b8, 0x2, 0x9, 0x800, 0x4, 0x4f4fbd51, 0x0, 0x2, 0x3, 0x4, 0xff, 0xb11d, 0x9, 0x101, 0xf, 0x3, 0x800, 0x6, 0xd, 0xd, 0x0, 0x9, 0xe, 0x4, 0xf61, 0xa48d, 0xfffffff2, 0x1000, 0x9, 0x0, 0x5dff, 0x8000, 0x9, 0x40, 0x81, 0x10001, 0x200, 0x7, 0x1, 0x40000000, 0x8, 0x9, 0x9, 0x9, 0x7, 0x40, 0x7f, 0x8, 0x9, 0x1, 0x2, 0xfffffff9, 0x7, 0x18, 0x208, 0x8, 0x10001, 0x9, 0x0, 0x2, 0x1, 0x0, 0x5, 0x480, 0x955, 0x85, 0xfffffc00, 0xaa, 0x1, 0xff, 0x7d19f4de, 0x28, 0x5, 0xffffffff, 0x3, 0x100, 0x9, 0xbaa6, 0x200, 0x0, 0x3, 0x0, 0x6, 0xff, 0x6, 0x3c, 0xe, 0x9, 0x9, 0x4, 0xfffffff3, 0x0, 0x7, 0x24460, 0x0, 0xffff4070, 0x4, 0xffffffff, 0x2, 0x2, 0x2, 0x6, 0x51, 0x5, 0x53b, 0x7, 0x2, 0x5, 0x8, 0x5d0, 0xe4, 0x4, 0xd, 0x800, 0x1ff, 0x0, 0x200, 0x5, 0x5, 0x80000001, 0x4, 0xf5, 0x400, 0x4, 0x2, 0x7, 0x0, 0xa5f, 0x9, 0x0, 0x4, 0x1ff, 0x8, 0x401, 0x2, 0x0, 0x5, 0x5, 0x3, 0x1, 0x9, 0x5, 0x80000000, 0xf4af, 0x4, 0x6, 0x6, 0x7, 0x603000, 0x3, 0x3e88, 0xfffffff8, 0x2, 0x7, 0x6, 0x5, 0x2, 0x80, 0x5, 0x643, 0x3, 0x1, 0xe8, 0xffffffff, 0x171bb82c, 0x7, 0xfffffffd, 0x3, 0x100, 0x214, 0xe, 0x1, 0x1ff, 0x2bb, 0xcb5, 0xffff, 0x29, 0x9, 0x7, 0x9, 0x6, 0x70, 0x2, 0x1ff, 0x6, 0x0, 0x5, 0x3, 0x200, 0xef1, 0x5, 0x9, 0x0, 0x0, 0x5, 0x800, 0x6b8, 0x6, 0x80, 0x8, 0xd, 0x0, 0x1, 0x3, 0x5, 0x29727210, 0x3, 0x7, 0x9, 0xa, 0x3ff, 0x432, 0x6, 0x3, 0x7dc, 0x401, 0x9, 0xc162, 0x8, 0x4, 0x1, 0x81, 0x8, 0xc6, 0xf, 0x7fff, 0x0, 0xd, 0x7, 0x5c40, 0x2, 0x3, 0x80000001, 0x3ff80000, 0x6, 0x8000, 0x8, 0x21f, 0x9, 0x1, 0x8, 0x1, 0x8b, 0x8, 0x20, 0x5f, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0xa7a, 0x12f6, 0x7, 0x7, 0x24, 0xfffffff9, 0x7, 0x9, 0x9, 0x1ff, 0x7, 0x8, 0x0, 0x9, 0xc, 0xc171, 0x5, 0xfffffffe, 0x101, 0xfffffffa, 0x7ff, 0x6, 0x0, 0x1, 0x5, 0x6, 0x3, 0x0, 0x4, 0x1ff, 0x4, 0x5, 0x8, 0x0, 0x2, 0x2, 0x7, 0xc, 0x5b, 0x4, 0x81, 0xcb8, 0x3, 0x317c, 0x5, 0x3f, 0x5, 0x877f, 0x3, 0x4, 0x8, 0x6, 0x2b, 0x9, 0x2, 0x8, 0x80, 0xffffffff, 0x101, 0x84e4, 0x5, 0x7f, 0x1, 0x6, 0x5ee7, 0x6, 0x6, 0x0, 0x63e, 0x1c3, 0x5, 0xfffffffe, 0x9, 0xf, 0xe44, 0x81, 0x4, 0x6, 0xa, 0x1, 0xff, 0x9, 0x0, 0x400, 0x6, 0xfffffffd, 0x10, 0x4, 0xffffe4e6, 0x1d4c, 0x3ff000, 0x483, 0x7fffffff, 0xffff, 0x3, 0x7ff, 0x2, 0x8, 0x7, 0x5, 0x9, 0x80000000, 0x7, 0x8, 0x7, 0x9, 0x0, 0x9, 0x1, 0x9, 0x4, 0x9, 0x3, 0x2d01, 0x0, 0x5, 0x2, 0x5, 0x2, 0x139e, 0x800, 0x98, 0x4, 0xc3, 0x1, 0xfffffff2, 0xff, 0x8, 0x1000, 0xe9, 0xc000000, 0x1, 0xfffffff8, 0xf5, 0x6b8b3c1f, 0x10001, 0x5, 0xa087, 0xffff, 0x2, 0x0, 0x0, 0x200, 0x3, 0x800, 0x4, 0x200, 0x4, 0xffffffff, 0xffffffff, 0xffff, 0x3c, 0x8, 0x7, 0x4, 0x80000001, 0x4, 0x0, 0x8001, 0x9, 0xffff0000, 0x101, 0x3, 0x6, 0x0, 0x1b7, 0x800, 0x3f, 0x1, 0x30d, 0x2, 0x5, 0x230, 0x100, 0x6, 0xffff83db, 0x1, 0x5, 0xfffffffe, 0x9, 0x7, 0x800, 0x7fffffff, 0x800, 0x200, 0x40, 0x2, 0x4, 0x80000000, 0x7, 0x10, 0x1, 0x80000000, 0x3, 0x2, 0xffff, 0x2, 0x4, 0xffffffff, 0x1, 0x4, 0xc, 0x2, 0x0, 0x6, 0x40, 0x6, 0x4400, 0x7, 0x0, 0x400, 0x7, 0x8, 0x0, 0x3e, 0x10001, 0x1, 0x3, 0xffffff80, 0x5, 0x4, 0x4, 0x12dd78f5, 0x1, 0x3, 0x6d, 0x80, 0x53c, 0x9, 0x595, 0x0, 0x2, 0x9, 0xffffffff, 0x1, 0xfffffffd, 0x1, 0x80, 0x7, 0x25c84000, 0x8, 0x8, 0xe, 0xa, 0x7f, 0xe6, 0x2, 0x2, 0x8, 0xb, 0x0, 0x67a, 0xffffff81, 0xfffffffe, 0x6b6f360f, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6eabc39b}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x1, 0x32, 0x9, 0x6416, 0x3, 0x81f, 0x0, 0x5, 0xc, 0x8, 0x63eb, 0xfffffffe, 0x7, 0xc3a, 0x8000, 0x3, 0x0, 0x8102300d, 0xc, 0x4, 0x1000, 0x7ff, 0xfffffffe, 0xffff, 0x200, 0x971, 0x8, 0xb, 0x9, 0x0, 0x400, 0x4, 0x59, 0xc6f, 0xc, 0x7, 0x3, 0x1, 0x40, 0x1d9b, 0x6, 0x80, 0x4, 0x0, 0x8, 0x7, 0x9, 0xeef, 0x7, 0x4, 0x1, 0x7, 0x7fff, 0xfff, 0x9b5e, 0x1, 0xbb4, 0x0, 0xa, 0x4, 0x2, 0x200, 0x7, 0x10000, 0x7fffffff, 0x6663, 0x3561, 0x8, 0x1000, 0x3, 0x7, 0x9, 0x7b72, 0x6, 0x100, 0xed, 0x50, 0x5, 0xfffffffb, 0x9, 0x8, 0x100, 0x2, 0x8001, 0x2, 0x3, 0x3ff, 0x6, 0x5, 0xd, 0x7, 0x800, 0x2, 0x1, 0x6, 0x5, 0x6, 0xc, 0x8, 0x75, 0x3, 0x1, 0x4, 0x1, 0x2, 0x2, 0x2, 0x1, 0x5, 0x400, 0xffffff80, 0x7, 0xe93, 0x8001, 0x8, 0x1, 0x3e7, 0xf, 0x80000001, 0x8001, 0x0, 0x10, 0x0, 0x6, 0x2, 0x2, 0x5, 0x1, 0x3, 0x10000, 0x2, 0x5, 0x6, 0x68000000, 0xffff, 0x800, 0x5, 0x0, 0x2, 0x3, 0x8000, 0x6, 0x7, 0x80, 0x8000, 0x9, 0x5, 0x7, 0x5, 0x1, 0x2, 0x3, 0x7, 0x7fffffff, 0x5, 0x3, 0x8, 0x7, 0x9, 0x7, 0x8, 0x9, 0x5, 0x40a9, 0x2, 0xe, 0x5, 0x0, 0x80000000, 0x6b20, 0xc743, 0x2, 0x9, 0x5c81, 0xffff, 0x40, 0x1200, 0x6, 0x9, 0x3, 0x8, 0x80000001, 0x0, 0x7, 0x3ff, 0x3, 0x7ff, 0x4, 0xffffffff, 0x1, 0x1, 0xb, 0x4, 0x9, 0x6, 0x8, 0x5, 0xa22f, 0x5, 0x0, 0x0, 0x81, 0x8, 0xff, 0x7, 0x38d5, 0x6, 0x2, 0x6, 0x6, 0xb7, 0x6, 0xdb, 0x5, 0x10001, 0xd300, 0xc, 0x7ff, 0x8, 0x0, 0xffff8d0f, 0x6, 0x7, 0x3, 0x9, 0x3, 0x4, 0x8001, 0xc, 0x9, 0xcdac, 0x200, 0x7f, 0x4, 0x1, 0x800, 0x80000001, 0x9, 0x2, 0x5, 0x200, 0x7, 0xa3, 0x4, 0x9, 0x7, 0x8, 0x1, 0x8, 0x40, 0xe, 0x4, 0x67c, 0x4, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb65a}]]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0x1c8, 0x1a, 0x0, 0x0, {{0xa}, {0x158, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x154, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x46, 0x6, "c86100f3698429a54ab3552b561942de1e05b05089d28b1c94b6a85fa89c8d8a95b46f179e2d34343586f9a5316d0b0f1a9c4aa39eb056b7d5b3967631dcdef2dd70"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x2ac, 0x1, [@m_tunnel_key={0x100, 0xc, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xc0, 0x6, "7929250d4d55fc6d2724bdc32e5ef40d6cd8a2501bdb37eb3675d2ee61fe96384c9adc2b43826e35f5ab0cf46632239e6c23b78fb774c3cbebaf88deedfb5c17a8282620a9ffba5869b0ba5f66108184a5389fe4a16df27d4c79ca38c8dbc50144e6b565940c6cf9dda3888d65ada22a25bc41a3658993ff4613ec95d18e76a2c9916603c1f2068c123577b64f4d149061ee0cb7e8d24f03ef60ec5fa0ca369b5cabaa6f2fbb0f415200ee980bd053b40f9d488fe3fedf25c76bdbb3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0xd0, 0xa, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x4, 0xffffffffffffffff, 0x6, 0x3}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfc26}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}]}, {0x6a, 0x6, "42a3a162ed2d293190af439f23ee2ad46ba2713baefc6b911e29330be52d25c56b5a0f99088c8337d471c41b33e2840344027c538ceb58e75dff8c887bfdbdd003bbf323d7cb3b5c97bb2fc2044efca04d58cc50aa1782246a673e2ed7e5e1bd1921e0e1bc3e"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ife={0xd8, 0x4, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x3c, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x3}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3391}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xea1e8000}]}]}, {0x74, 0x6, "e320dcc651400d2b745dbc28608ab7bc31a175ee0fb8f0bde77c76e4c161901acf566f9e862fd8eb0fa7e6c24bbf8961bbf81861b2bc4567ce62e08590646f1688c22d99d18dd0dfeb3ff1a6b2623910e82b2e3c73c394eac3fd4dec1ece9af440bdb3f77fdf06f0246d114263d271f6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x34b4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, &(0x7f0000000040)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) listen(0xffffffffffffffff, 0x5) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000180)='u', 0x1}], 0x1) r8 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/41, 0x29}], 0x1}, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000240)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x2, 0x2, 0x6}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x5}) ioctl(r9, 0xfffffff7, &(0x7f00000004c0)="a64391430d52906838444653bc582124f8af33a53fbf1af6147198f2b7d88381fc964f392ce2b58f63a75d6284cba684b6bcebcb1c775902d4dd0b8f8e4c514108d71a529ec63fed1c6e57b2148c3a2ce7ac378a4247f8e71caee49035b3dfe2e6b51a2353c18f5bdad9d39bdff89cc1569d8add2fc2efb6b97f0e966b116cc6e67e1b5b7f715379a132fbc35adde44f980fd50b597012d80b672a368d7bd1802a91cd26843b3f597b65ddd51b1d51efd6c5e08100c2ccd39de57da7111c49c377e3a1d9313d92310af2ae5362a763fe25756bd8f915e89ae6") 5m7.996230525s ago: executing program 4 (id=3717): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r1, &(0x7f0000000000)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) connect$ax25(r1, &(0x7f0000000280)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 5m7.85838163s ago: executing program 4 (id=3718): openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r3, r4, 0x25, 0x4, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r5, 0xffffffffffffffff, 0x4, r3}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x78}, 0x1, 0xffffffff00000003}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newlink={0x34, 0x10, 0x49920d862a92153b, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x64848}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x840) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_SECCTX={0x33, 0x7, 'system_u:object_r:systemd_logind_sessions_t:s0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000045}, 0x4010) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 5m7.543652449s ago: executing program 3 (id=3719): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000380)='./file0\x00', 0x10000041) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0xc4) mount$overlay(0x3000000, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 5m7.543166009s ago: executing program 4 (id=3720): getpid() setns(0xffffffffffffffff, 0x24020000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r0, 0x92b, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x60}, 0x4) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 5m7.233978847s ago: executing program 3 (id=3724): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e00b90f177020000000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000, 0x5, 0x2, 0x7}, 0x10) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010000000000000000001c140000000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@getneightbl={0x14, 0x42, 0x2, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x0) 5m7.233513589s ago: executing program 4 (id=3721): getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r0, @in={{0x2, 0x4e23, @broadcast}}, 0xb55, 0x4, 0x9, 0x10001, 0x0, 0xa3, 0x4}, &(0x7f0000000140)=0x9c) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$CDROMSTART(r1, 0x5308) ioctl$CDROMPLAYBLK(r1, 0x5323, 0x0) 5m7.157609966s ago: executing program 3 (id=3722): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 5m7.157329906s ago: executing program 3 (id=3723): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/uevent_helper', 0x149a82, 0x24a) sendfile(r0, r0, 0x0, 0x100000000) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) clock_adjtime(0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000000100)) clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0xfffffffe, 0x0, 0x1000000000000005, 0x7, 0xfffffffffffffffd, 0x9, 0x1, 0x8000040000000000, 0x0, 0x3, 0x2484, 0x3, 0x4, 0x0, 0x0, 0x80003600000, 0xfffffffffffffffd, 0x0, 0x2000000002, 0xfffffffffffffffe, 0x3, 0xa30, 0x0, 0x6, 0xa}) io_setup(0x9, &(0x7f0000000140)) 5m7.039190112s ago: executing program 4 (id=3725): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xdffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x200, 0x160, 0x0, 0x148, 0x0, 0x148, 0x1f0, 0x240, 0x240, 0x1f0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffff00, 'veth1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x88, 0x0, 0x10}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa52531e464ddd335, 0x0, 0xfffffffd, 0x3, 'pptp\x00', 'syz1\x00'}}}, {{@ip={@loopback, @multicast1, 0x0, 0x0, 'veth1_to_batadv\x00', 'team_slave_1\x00', {}, {0xff}, 0x5c, 0x1, 0x14}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001c00070c2bbd70000000000002000000", @ANYRES32=r1, @ANYBLOB="4000100a140001"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32=r4, @ANYBLOB="20000280", @ANYRES8=r3, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}}, 0x4004000) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, &(0x7f0000000540)=0x1, 0x4) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$unix(0x1, 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = memfd_secret(0x80000) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r8, @ANYBLOB="0000000014000000008d9e00012bdfb6f500000001000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x30, 0x4000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x3a, 0x5, 0x80000009, 0x22, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, @mcast2, 0x1, 0x80, 0x4, 0xffffffff}}) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r12 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r12, 0xc004500a, &(0x7f0000001340)) syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r12, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r9, &(0x7f0000000380)="a52876830aa52149f03ab7aa3e602214f6b4e928d758f38a5a7cb4b31c4c4f53da7ff800b8e37ec8a9e734b6", 0x2c) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c00000010000305000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000d0001000000060002404e22000008000500", @ANYRES32=r13], 0x4c}, 0x1, 0x0, 0x0, 0x8054}, 0x4) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="08010000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf250b000000180001801400020076657468315f746f5f6261746164760060000180140002006e69637666300000000000000000000008000100", @ANYRES64=r7, @ANYBLOB="08000300010000001400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="140002007866726d300000000000000000000000280001800800030001000000140002007465616d5f736c6176655f300000000008000300010000000c0001800800030002000000480001801400020076657468305f766c616e00000000000008000100", @ANYRES32=r10, @ANYBLOB="08000300030000000800030003000000080003000300000008000100", @ANYRES32=r13, @ANYBLOB="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"], 0x108}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000580), 0x8, 0x2) 4m52.455126448s ago: executing program 33 (id=3704): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7ffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xc745, 0x1, 0x4, 0x0, 0x2}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x2, 0xd, 0xffffff44, 0x80800}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r5, 0x101, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8, 0xd}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'syzkaller0\x00', &(0x7f0000000100)=@ethtool_ts_info}) write$char_usb(r3, &(0x7f0000000180)='0', 0xfe64) bind$tipc(0xffffffffffffffff, 0x0, 0x0) 4m51.112594541s ago: executing program 34 (id=3716): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e0101000000000000000000000000ac1414440000000000000000000000004e2000004e2300080a0000a02f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac3114bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000110074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd700004350000020002020000000000000000000000001d1b00000c000f00f8ffffffffffffff"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) flock(r0, 0x1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0xfe) setpgid(0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @loopback}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000004a80)=@newtaction={0x34b4, 0x30, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{0x1a0, 0x1, [@m_ife={0x74, 0xb, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x386, 0x9, 0x6, 0x8, 0x81}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0x18, 0x6, "21a4c39bd68878ed0c70459f01fb8ae2c0ad4fbf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_tunnel_key={0x7c, 0x18, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0x2, 0x1, 0x9, 0x8}, 0x2}}]}, {0x2f, 0x6, "b9d16c3db3387f6212102a644344859650a3071d2e658e1de2f47aac756fa1499e1fc141762af7fffa82f7"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_skbmod={0xac, 0x1d, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0x5, 0x4, 0x800, 0x401}}}]}, {0x5c, 0x6, "7ae5261b2553f599dfcafb4938afa08d06dfc622eeb8f644c645e9c8962f6397bb643507a92819e12650b6995c591caedb6fe1f4fee852362b2a2ecadcadfe3e3053af4db1cc9ba8627f43408be7acc025b70a1d2173b6e3"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x3054, 0x1, [@m_mpls={0x100, 0x14, 0x0, 0x0, {{0x9}, {0x60, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0xa, 0x10000000, 0x10001, 0x8}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0xf9}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0xb}, @TCA_MPLS_LABEL={0x8, 0x5, 0xd5663}, @TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_BOS={0x5}]}, {0x76, 0x6, "dbcd3bf3dca85196810954fa32d6404986df4332f95ecbf733216b772b7bd55429312cceab9a3be2d2f8cc7593dd5076b098427b61eea658f6837b8683076af8e39ccb80b63e6e5743d771e9bbb19dc369386d41819fe09640fe86d6385ec3b6cfe93fcbf0a99646010da71773e6f0a455b8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x2d88, 0x5, 0x0, 0x0, {{0xb}, {0x1d5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffd}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1ad8, 0x88b, 0x0, 0x3, 0x6a8, 0x1ff, 0x0, 0x5, 0x7, 0x5, 0xed57, 0x8, 0x7, 0x651f, 0x5, 0xfffffff3, 0xcb4, 0x0, 0xe, 0x800, 0x3, 0x1000, 0xf8, 0x0, 0xa, 0x41, 0x4, 0x3, 0x7, 0x5, 0x9, 0x765013f0, 0x0, 0x9, 0x7, 0x2, 0xe, 0x1, 0xfff, 0x5, 0xffff44aa, 0x80000001, 0x5, 0x101, 0x0, 0xe, 0x401, 0x3, 0x1, 0x2, 0xae1b, 0x2c, 0x8, 0x0, 0x1ff, 0xe9f, 0xe091, 0x5, 0x81, 0xaf, 0xf, 0x5ec, 0xfc000000, 0xff, 0x6872, 0x8a0, 0x5, 0xd, 0x1, 0x8, 0xfffffffa, 0x9, 0x6, 0x1, 0x0, 0x2, 0xaa3, 0x5, 0x0, 0x6, 0xad, 0x200, 0x10, 0x80000000, 0x8001, 0x5, 0x2, 0x80, 0xff, 0x0, 0xfe8, 0x54, 0x6, 0x7ff, 0x2, 0x6, 0x7, 0x3, 0x5, 0x4, 0xffffffff, 0x0, 0x8, 0x10001, 0x8, 0xa, 0x4, 0x6, 0x2, 0x10000, 0x1, 0x44, 0xef, 0xc4, 0x3a, 0x5, 0x1ff, 0x4, 0x1, 0x0, 0x10001, 0x5, 0xb04, 0x3, 0x1, 0x2, 0x4, 0x6, 0x10000, 0x5, 0x401, 0x9, 0xa6, 0x9, 0xfffffeff, 0x8f, 0x2, 0x100, 0x10000, 0x9, 0xfffffff7, 0x6, 0x3, 0x9, 0xaf, 0x10, 0x9, 0x8, 0xf, 0x1, 0x100, 0x31, 0x3ff, 0xa5c6, 0x4, 0x4, 0x6, 0xc, 0x7, 0x9, 0x5, 0x2, 0x3f, 0x551, 0x40, 0x0, 0x8001, 0x7, 0x4, 0x1, 0x81, 0x40, 0x4, 0x3, 0x697a, 0x7, 0xffffffff, 0x2de6dd39, 0x7, 0x401, 0x1, 0x54, 0x3, 0x80000000, 0x6, 0x10000, 0x1bc, 0x0, 0x6, 0x9, 0x0, 0x8, 0x7, 0x400, 0x1, 0x8, 0x6, 0x9, 0x9, 0x111, 0x1, 0xa, 0xffffffff, 0x80000001, 0x8, 0x0, 0x5, 0x200, 0x182, 0x1, 0x8d, 0x101, 0x8001, 0x8, 0x0, 0x7, 0x4, 0x2b3a5bfd, 0xeaf, 0x3, 0x2, 0x3, 0x5, 0x5, 0x8, 0x9, 0x101, 0xfffffff9, 0x40, 0x5, 0x8, 0x2, 0xffff, 0xfa, 0x1, 0x5, 0x2, 0xffff8cc8, 0xd, 0x1, 0x0, 0xf, 0xe2b, 0x80000000, 0xd5, 0x4fd2, 0x60c, 0x7fffffff, 0x9, 0x6, 0x8, 0x0, 0x80, 0x1, 0x80000001]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xb0}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80000000}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xea3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x248d0a89, 0x11, 0x1, 0x4, 0xe, 0xa, 0x3, 0x5874, 0x8, 0x8, 0x7f, 0xffffff75, 0x9, 0xa, 0x100, 0x9, 0xfffeffff, 0x9, 0x8, 0x21b, 0x7, 0xfffffffd, 0x4, 0x6, 0x3, 0x9, 0x9, 0x1, 0x0, 0x7f, 0x6, 0xfffffffe, 0x0, 0x6ab4, 0x0, 0x5, 0x9, 0x6, 0x7, 0x68, 0xfffffffd, 0x6, 0x6ffa, 0x7, 0x401, 0x2, 0x4, 0x7, 0x8, 0x4, 0x9, 0x4, 0x8, 0x7, 0x72, 0x88ab, 0x4, 0x8, 0xffffff80, 0x8, 0x9, 0x0, 0x6, 0x8001, 0x42f9, 0x7fffffff, 0x8, 0x9, 0x8, 0xfffffff7, 0xe, 0x4, 0xf, 0x8, 0xc0000000, 0xca3, 0x8001, 0x7, 0x2, 0x5, 0x5, 0x57800000, 0x5, 0x2, 0x6f9e1a6, 0xf, 0x7187, 0x55e0, 0x6, 0x9, 0x1, 0x3aa7fd0b, 0x7, 0x10000, 0x4, 0xffffffe3, 0x0, 0x4, 0x40, 0x3, 0x400, 0x401, 0x81, 0x4, 0x3, 0x9, 0x9, 0x1, 0x40, 0x6267c9d2, 0xffffffff, 0x98, 0x0, 0x2, 0x0, 0xfffffffe, 0xfffffff9, 0x3, 0x200, 0x5, 0x1, 0x7, 0xcbb, 0xe, 0xa00000, 0x5, 0xfffffffc, 0x9e, 0x9, 0xf, 0x80000000, 0x6, 0x2, 0x4, 0x12, 0x2, 0x0, 0x5, 0x5, 0x6, 0x8, 0x56, 0x7, 0x6, 0x50ad, 0x7, 0xffff28d8, 0xff, 0x7, 0x6, 0x800, 0x1, 0x1, 0x6, 0x10001, 0x6, 0xe, 0x0, 0x6, 0xd71, 0x8, 0x7, 0x1, 0xe9, 0x9, 0xff, 0x4, 0xfffffff7, 0x10, 0x7, 0x200, 0x94ce, 0x6, 0xfffff73e, 0x2, 0x7, 0x2e42, 0x4, 0x8, 0x7, 0x3e16, 0x0, 0x1, 0x50, 0x6, 0xc2, 0x9, 0x3, 0x9, 0xfffffffe, 0x0, 0xa, 0xffffffff, 0x2, 0x4, 0x8, 0x1da1, 0x0, 0x1, 0x9, 0x6, 0x4, 0x0, 0x7, 0xfffffffb, 0x7, 0xffff, 0x59180, 0xdd2c, 0x824, 0xf, 0x1, 0xd, 0x1, 0x9, 0x101, 0x7, 0x80000001, 0x4, 0x8, 0x100, 0x8, 0x101, 0x6ea, 0x7, 0x9, 0x70000, 0x5, 0x1, 0x2, 0x1000, 0x8, 0x6, 0xcd6, 0x8, 0x400, 0x19, 0x7f, 0x35d, 0x9, 0x6, 0x7, 0x80, 0xdbbb, 0x3, 0x5, 0x8, 0x2003, 0x3, 0xfffffff8, 0x739, 0x4, 0x8, 0x3, 0x1, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x1, 0x4, 0x7, 0x401, {0x40, 0x2, 0xd, 0x8, 0x3, 0x7}, {0x6, 0x1, 0x2, 0x1, 0x6, 0x3}, 0x9, 0x2, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x6, 0x4, 0x3bd2, 0xa, 0x0, 0xfffffffa, 0x3, 0xbd, 0xd, 0x5, 0x8, 0x4, 0x9b, 0x0, 0x6, 0x0, 0x4, 0xb, 0x0, 0xffffffff, 0xa, 0x3, 0x401, 0x6, 0x9, 0x0, 0x54, 0x5, 0x8, 0x4, 0xf53, 0x9, 0x7, 0x5, 0x1, 0x1, 0x80, 0x9, 0x3, 0x1, 0x7, 0xff, 0x7ff, 0x13e6, 0x0, 0xa, 0xca, 0x401, 0x0, 0x1000, 0x9, 0x7, 0x3, 0xf17b, 0x7, 0xc, 0x4e, 0xfffffff0, 0x5, 0x2, 0xf, 0x7, 0xfffffffe, 0xfffffffb, 0x1, 0x85, 0x16576688, 0xb531b600, 0x4, 0x7, 0x9b8, 0x9, 0x8, 0xe, 0x3ff, 0x38000, 0x5, 0x40, 0x240, 0xd83, 0x6e, 0x5, 0x3, 0x7, 0x1, 0x5, 0x9, 0x9, 0x6, 0x9, 0x4e, 0x4, 0x3, 0x2, 0x6, 0x9, 0x9, 0x5, 0x7b7, 0x7c, 0x9, 0x8, 0xffffff01, 0xe, 0x9, 0x2443, 0x0, 0x851, 0x7, 0xc, 0x0, 0xa000000, 0x7fff, 0x8, 0x3ff, 0x1, 0x1, 0x1, 0x6, 0x2, 0x8, 0xb87, 0xfffffff8, 0x10000, 0x40, 0x2, 0x5, 0x0, 0xfff, 0x7, 0xfff, 0x3, 0x0, 0x80000000, 0x1, 0x7fffffff, 0x8001, 0x8, 0x7fff, 0x3, 0x101, 0x10000, 0x9, 0x0, 0x6, 0x2, 0xfffffa4c, 0x3, 0x6, 0x10, 0x228a, 0x6d, 0x4, 0x8001, 0x9, 0xa75, 0x147, 0x1, 0xc, 0x1, 0x9, 0x4, 0xb71c, 0x80000001, 0x3, 0xffff, 0x1, 0x100000, 0x80, 0x6, 0x6, 0x3ff00, 0x1, 0x1, 0x3, 0x28000000, 0xe000, 0x8, 0x5, 0x6, 0x10001, 0x5, 0x9, 0xfff, 0xfffffff8, 0x953, 0x9, 0x4, 0x4, 0x4, 0x2, 0xe, 0x200, 0x800, 0x5000000, 0x400, 0x4, 0x1, 0x8, 0x200, 0xfffffffd, 0x5, 0x2, 0x0, 0x8, 0x1, 0x26cc1a60, 0x3, 0x1, 0x4, 0x2, 0x5, 0x7, 0x5, 0x400, 0x3, 0xffff, 0x66d, 0x81, 0x200, 0x200, 0xb25, 0x1, 0x3, 0x4, 0x6, 0x6, 0xa, 0x0, 0x1, 0x815, 0x1000, 0xff, 0x40, 0x602, 0x3, 0x0, 0xd0, 0x8, 0x5, 0x9, 0x54, 0x442, 0x10000, 0x5, 0x2, 0x9, 0x9, 0x6, 0x40, 0x2, 0x5, 0x3, 0x7, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x38f6, 0x6, 0x5, 0x40, 0x401, 0x5, 0x2, 0x1aa9, 0x2, 0xbe, 0x246a6c57, 0x996, 0x5, 0x2, 0x0, 0x7, 0x0, 0x3, 0x7816, 0xd, 0x4cf, 0xffff, 0x7, 0x9, 0x8, 0x7, 0x6, 0xf0000000, 0x2, 0x7, 0xc, 0x9, 0x2, 0x7f, 0x2, 0x7, 0xb853, 0x2, 0x9, 0x4, 0x7, 0xd, 0xffff8ac9, 0x80007, 0x10001, 0x6, 0x8, 0x6bd, 0x80, 0x8, 0x9, 0x101, 0x1, 0xc0, 0x2, 0x4, 0x3, 0x4800000, 0x0, 0x964d, 0x9, 0xc8, 0x9651, 0x805, 0xffff, 0x0, 0x0, 0xfffff000, 0x9, 0x5, 0x2, 0x48c4, 0x80000001, 0xd, 0x7, 0x0, 0x8, 0x82, 0x0, 0x7f, 0x3d5fd3e7, 0x95c, 0xf, 0xfffffff9, 0x7ff, 0xbe, 0x174, 0x5, 0x7, 0x5, 0x3, 0x101, 0x1, 0x6000, 0x7b8cf93, 0x9, 0xff, 0x6, 0x6, 0x1000, 0x3, 0x5, 0x6c, 0xf, 0x12, 0x84f6, 0x9, 0x5, 0xfffffff8, 0x8, 0x5, 0xc, 0xad, 0xfffffff5, 0xe8cf, 0xfff, 0x401, 0x5, 0x9, 0x7, 0x9e7, 0x27fff, 0xffffffff, 0x2, 0x2, 0x0, 0x0, 0xfb, 0x101, 0x2, 0x4, 0x8001, 0x2, 0xc172, 0x80000001, 0xfff, 0x4, 0xae6e, 0x5, 0x7ff, 0xffffffff, 0x6, 0x5, 0x1, 0x7ff, 0xd1b3, 0x4, 0x4, 0x401, 0x5, 0x1, 0x8, 0x5, 0x261ab731, 0xffff, 0x6427cfa6, 0x4000, 0x8, 0x6c, 0x0, 0x4000000, 0x2, 0x6, 0x8, 0x80, 0x3, 0x2315, 0x8, 0x0, 0x9, 0x408c, 0xffffff80, 0x4, 0x476, 0x7fff, 0x8, 0x4cb3, 0x0, 0x1, 0x2, 0x0, 0x7, 0x0, 0x69c, 0x7, 0x80000000, 0xc11, 0x0, 0x2, 0x2, 0x6, 0x8, 0x8, 0x7860, 0x8d82, 0x800, 0x10, 0x0, 0xe414, 0x7ff, 0x5, 0x8000, 0x8, 0x2, 0x7, 0x40, 0x81, 0x1, 0x8, 0x0, 0x4, 0x3, 0xfffffff7, 0xeead, 0x9, 0x8, 0x2, 0xffff8000, 0x17, 0xc, 0x8, 0x3, 0x91, 0x7fff, 0x6, 0x8, 0x3, 0xffff, 0x2, 0x9, 0xc, 0x8, 0x1, 0x5, 0x7ff, 0x9000000, 0x4, 0x26c4db40, 0x84, 0x0, 0x3, 0x2, 0x1000000, 0x2, 0x40, 0x4, 0x4, 0x4, 0x9, 0x8eb, 0x100, 0x3, 0x8, 0x6, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xffff4bf4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80, 0x20000000, 0x8, 0x1000, 0x7fffffff, {0x9, 0x2, 0x5, 0x8a60, 0x80, 0xffff}, {0x8, 0x0, 0xb, 0x2, 0x8, 0x9}, 0x6, 0x1, 0xffffffff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x74f}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x5, 0xff, 0x0, {0x1, 0x0, 0x3, 0x7, 0x0, 0x6}, {0x6, 0x3, 0x8, 0x3, 0xd80f, 0x101}, 0xecb, 0x2, 0x401}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x800, 0x4, 0x80000000, 0x1, 0xb, 0xa46e, 0xf, 0x6, 0x8b8, 0x2, 0x9, 0x800, 0x4, 0x4f4fbd51, 0x0, 0x2, 0x3, 0x4, 0xff, 0xb11d, 0x9, 0x101, 0xf, 0x3, 0x800, 0x6, 0xd, 0xd, 0x0, 0x9, 0xe, 0x4, 0xf61, 0xa48d, 0xfffffff2, 0x1000, 0x9, 0x0, 0x5dff, 0x8000, 0x9, 0x40, 0x81, 0x10001, 0x200, 0x7, 0x1, 0x40000000, 0x8, 0x9, 0x9, 0x9, 0x7, 0x40, 0x7f, 0x8, 0x9, 0x1, 0x2, 0xfffffff9, 0x7, 0x18, 0x208, 0x8, 0x10001, 0x9, 0x0, 0x2, 0x1, 0x0, 0x5, 0x480, 0x955, 0x85, 0xfffffc00, 0xaa, 0x1, 0xff, 0x7d19f4de, 0x28, 0x5, 0xffffffff, 0x3, 0x100, 0x9, 0xbaa6, 0x200, 0x0, 0x3, 0x0, 0x6, 0xff, 0x6, 0x3c, 0xe, 0x9, 0x9, 0x4, 0xfffffff3, 0x0, 0x7, 0x24460, 0x0, 0xffff4070, 0x4, 0xffffffff, 0x2, 0x2, 0x2, 0x6, 0x51, 0x5, 0x53b, 0x7, 0x2, 0x5, 0x8, 0x5d0, 0xe4, 0x4, 0xd, 0x800, 0x1ff, 0x0, 0x200, 0x5, 0x5, 0x80000001, 0x4, 0xf5, 0x400, 0x4, 0x2, 0x7, 0x0, 0xa5f, 0x9, 0x0, 0x4, 0x1ff, 0x8, 0x401, 0x2, 0x0, 0x5, 0x5, 0x3, 0x1, 0x9, 0x5, 0x80000000, 0xf4af, 0x4, 0x6, 0x6, 0x7, 0x603000, 0x3, 0x3e88, 0xfffffff8, 0x2, 0x7, 0x6, 0x5, 0x2, 0x80, 0x5, 0x643, 0x3, 0x1, 0xe8, 0xffffffff, 0x171bb82c, 0x7, 0xfffffffd, 0x3, 0x100, 0x214, 0xe, 0x1, 0x1ff, 0x2bb, 0xcb5, 0xffff, 0x29, 0x9, 0x7, 0x9, 0x6, 0x70, 0x2, 0x1ff, 0x6, 0x0, 0x5, 0x3, 0x200, 0xef1, 0x5, 0x9, 0x0, 0x0, 0x5, 0x800, 0x6b8, 0x6, 0x80, 0x8, 0xd, 0x0, 0x1, 0x3, 0x5, 0x29727210, 0x3, 0x7, 0x9, 0xa, 0x3ff, 0x432, 0x6, 0x3, 0x7dc, 0x401, 0x9, 0xc162, 0x8, 0x4, 0x1, 0x81, 0x8, 0xc6, 0xf, 0x7fff, 0x0, 0xd, 0x7, 0x5c40, 0x2, 0x3, 0x80000001, 0x3ff80000, 0x6, 0x8000, 0x8, 0x21f, 0x9, 0x1, 0x8, 0x1, 0x8b, 0x8, 0x20, 0x5f, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0xa7a, 0x12f6, 0x7, 0x7, 0x24, 0xfffffff9, 0x7, 0x9, 0x9, 0x1ff, 0x7, 0x8, 0x0, 0x9, 0xc, 0xc171, 0x5, 0xfffffffe, 0x101, 0xfffffffa, 0x7ff, 0x6, 0x0, 0x1, 0x5, 0x6, 0x3, 0x0, 0x4, 0x1ff, 0x4, 0x5, 0x8, 0x0, 0x2, 0x2, 0x7, 0xc, 0x5b, 0x4, 0x81, 0xcb8, 0x3, 0x317c, 0x5, 0x3f, 0x5, 0x877f, 0x3, 0x4, 0x8, 0x6, 0x2b, 0x9, 0x2, 0x8, 0x80, 0xffffffff, 0x101, 0x84e4, 0x5, 0x7f, 0x1, 0x6, 0x5ee7, 0x6, 0x6, 0x0, 0x63e, 0x1c3, 0x5, 0xfffffffe, 0x9, 0xf, 0xe44, 0x81, 0x4, 0x6, 0xa, 0x1, 0xff, 0x9, 0x0, 0x400, 0x6, 0xfffffffd, 0x10, 0x4, 0xffffe4e6, 0x1d4c, 0x3ff000, 0x483, 0x7fffffff, 0xffff, 0x3, 0x7ff, 0x2, 0x8, 0x7, 0x5, 0x9, 0x80000000, 0x7, 0x8, 0x7, 0x9, 0x0, 0x9, 0x1, 0x9, 0x4, 0x9, 0x3, 0x2d01, 0x0, 0x5, 0x2, 0x5, 0x2, 0x139e, 0x800, 0x98, 0x4, 0xc3, 0x1, 0xfffffff2, 0xff, 0x8, 0x1000, 0xe9, 0xc000000, 0x1, 0xfffffff8, 0xf5, 0x6b8b3c1f, 0x10001, 0x5, 0xa087, 0xffff, 0x2, 0x0, 0x0, 0x200, 0x3, 0x800, 0x4, 0x200, 0x4, 0xffffffff, 0xffffffff, 0xffff, 0x3c, 0x8, 0x7, 0x4, 0x80000001, 0x4, 0x0, 0x8001, 0x9, 0xffff0000, 0x101, 0x3, 0x6, 0x0, 0x1b7, 0x800, 0x3f, 0x1, 0x30d, 0x2, 0x5, 0x230, 0x100, 0x6, 0xffff83db, 0x1, 0x5, 0xfffffffe, 0x9, 0x7, 0x800, 0x7fffffff, 0x800, 0x200, 0x40, 0x2, 0x4, 0x80000000, 0x7, 0x10, 0x1, 0x80000000, 0x3, 0x2, 0xffff, 0x2, 0x4, 0xffffffff, 0x1, 0x4, 0xc, 0x2, 0x0, 0x6, 0x40, 0x6, 0x4400, 0x7, 0x0, 0x400, 0x7, 0x8, 0x0, 0x3e, 0x10001, 0x1, 0x3, 0xffffff80, 0x5, 0x4, 0x4, 0x12dd78f5, 0x1, 0x3, 0x6d, 0x80, 0x53c, 0x9, 0x595, 0x0, 0x2, 0x9, 0xffffffff, 0x1, 0xfffffffd, 0x1, 0x80, 0x7, 0x25c84000, 0x8, 0x8, 0xe, 0xa, 0x7f, 0xe6, 0x2, 0x2, 0x8, 0xb, 0x0, 0x67a, 0xffffff81, 0xfffffffe, 0x6b6f360f, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6eabc39b}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x1, 0x32, 0x9, 0x6416, 0x3, 0x81f, 0x0, 0x5, 0xc, 0x8, 0x63eb, 0xfffffffe, 0x7, 0xc3a, 0x8000, 0x3, 0x0, 0x8102300d, 0xc, 0x4, 0x1000, 0x7ff, 0xfffffffe, 0xffff, 0x200, 0x971, 0x8, 0xb, 0x9, 0x0, 0x400, 0x4, 0x59, 0xc6f, 0xc, 0x7, 0x3, 0x1, 0x40, 0x1d9b, 0x6, 0x80, 0x4, 0x0, 0x8, 0x7, 0x9, 0xeef, 0x7, 0x4, 0x1, 0x7, 0x7fff, 0xfff, 0x9b5e, 0x1, 0xbb4, 0x0, 0xa, 0x4, 0x2, 0x200, 0x7, 0x10000, 0x7fffffff, 0x6663, 0x3561, 0x8, 0x1000, 0x3, 0x7, 0x9, 0x7b72, 0x6, 0x100, 0xed, 0x50, 0x5, 0xfffffffb, 0x9, 0x8, 0x100, 0x2, 0x8001, 0x2, 0x3, 0x3ff, 0x6, 0x5, 0xd, 0x7, 0x800, 0x2, 0x1, 0x6, 0x5, 0x6, 0xc, 0x8, 0x75, 0x3, 0x1, 0x4, 0x1, 0x2, 0x2, 0x2, 0x1, 0x5, 0x400, 0xffffff80, 0x7, 0xe93, 0x8001, 0x8, 0x1, 0x3e7, 0xf, 0x80000001, 0x8001, 0x0, 0x10, 0x0, 0x6, 0x2, 0x2, 0x5, 0x1, 0x3, 0x10000, 0x2, 0x5, 0x6, 0x68000000, 0xffff, 0x800, 0x5, 0x0, 0x2, 0x3, 0x8000, 0x6, 0x7, 0x80, 0x8000, 0x9, 0x5, 0x7, 0x5, 0x1, 0x2, 0x3, 0x7, 0x7fffffff, 0x5, 0x3, 0x8, 0x7, 0x9, 0x7, 0x8, 0x9, 0x5, 0x40a9, 0x2, 0xe, 0x5, 0x0, 0x80000000, 0x6b20, 0xc743, 0x2, 0x9, 0x5c81, 0xffff, 0x40, 0x1200, 0x6, 0x9, 0x3, 0x8, 0x80000001, 0x0, 0x7, 0x3ff, 0x3, 0x7ff, 0x4, 0xffffffff, 0x1, 0x1, 0xb, 0x4, 0x9, 0x6, 0x8, 0x5, 0xa22f, 0x5, 0x0, 0x0, 0x81, 0x8, 0xff, 0x7, 0x38d5, 0x6, 0x2, 0x6, 0x6, 0xb7, 0x6, 0xdb, 0x5, 0x10001, 0xd300, 0xc, 0x7ff, 0x8, 0x0, 0xffff8d0f, 0x6, 0x7, 0x3, 0x9, 0x3, 0x4, 0x8001, 0xc, 0x9, 0xcdac, 0x200, 0x7f, 0x4, 0x1, 0x800, 0x80000001, 0x9, 0x2, 0x5, 0x200, 0x7, 0xa3, 0x4, 0x9, 0x7, 0x8, 0x1, 0x8, 0x40, 0xe, 0x4, 0x67c, 0x4, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb65a}]]}, {0x1004, 0x6, "2e582546c000c92c85a53b6687657ecd256750c70437398152c19b8555bdd3033b40d1a6a7b67a59f465ffd0c292e8aed2fe23ea69f5c05786a71b9fe295d5324e2a8281837ef002b045b6fbd7c849b32c09115f302b6fdc4cc9d746c11aa31b59af203c8e4aa3d5aaaef0524229c42947b64e961abb155802eac0e421c418c46398eb4f9f7fc83dda2f59c374a78f6bf4a7297946a6ad6972689828fee33bb65ca02f370f593a9102682854be0a5fe7a3a10a26c4c695d7e122ff25b225d21e023825ea2f90820d63759ee6cb3b8ba40911266ed299e754b76109afac3a6368e39d494284f98840cb300397aedc19cd4650baf65846f7d87165ad173fd494c4c965c6ea2e113f75ddba9a07dabbf02dd174d232614f590ce5b77a8ce0cfe0152cb5cda25fd75deb9fc5980196d0c8a910997617534a8c6500739632a3b94b8682a59ef1f913f32c776d063a4018ae97592051a408fe7b150ce06d576b3f0d22f8713b485e5a9005ebe3c19eaf05509d4f72a58cb0b96ecb4e11bdde36b46853f81bfc802b566bad36911baeb59469701a1e69eccd8502d8322abc0be1bdc7db63903481814bbca32c1f04115faa4ffa526595809e7cceaeb66d6a0d13298ce0e1c85725c1172795dbe2ad2fc4433039f0696c42fa9dd15f80f4acb09510047259061ffbf089a480897261994b01fc52bc7935af51b9c59fa29f78e86a3fb265b6c6093815798fd55bd6820c472d1ec86bee5ae0611e83ed56147e7638789f2ec86b103f11f8806d61467d90820c27d8cd6f32f5315a4eeccda46dd64284ceb1c12dedde08e04688d790dfc3ea163d5b3df2424c1ba3c92f0d52ecfc6255badcef7f6711a5d12b01bb4846f4bcea0d338a48383f7f98dbe2c68769175b82088bde20194d432a1363314de180701f623b521b066575ebadf1555231fd448ac6b89a9ca0ed6bbe87b31ee82694d32a71f4e474ef64acf127086d0365c62c03c6a8a972a224ca4251785ca7c0ad36d753d4972f5e71e1d77029809bc7cff3dc0894d1dcb90cc1c3daab8fd9b72058257cf819838065a19df316e8229b607c86b858f3ecb144098b4ac708cbf336f3ca265607c0edcdfeaa5070f75bfb34321a4c200090d88971e42ce663f5fa49b1c31da940efd9e2d9f84c37ce6bf52acae6740b7517b2b6eeb99b191dd13c1cb25b5214027c23452500b9b7ed84a71e977fdb07c103dd715e5a19a6eaa75ac7b853838c51c1b1c861fede10b935d526c49dff39e957ea9717dc837aa75f8800e8232c192454386d98cf9013d7c87f853abca6e5e0f00d00786818255f5b8c7215f22220d9ec41a9ebe6d494938b4092d3e14d696520bc4ebf3cf713ec2fa115cc7ca0151b4fff52de390ea08a1a85f7629f2b4bef93af8ac84d85a6bb9b497c635d4d22b33ac98791c49b0cd64be598de1f00df884e0401b05e411f36ed33fb0acc800bbe896c50c0d73a013573d806607fab071f5ee6afe526402c53a58ac07862533c8a6dd2d3264244addb0fa5905ab53576b05feaca6c7e79d5aa3004412bc6383185abc6036fb4593db895b9a75b65c108db0bb438bfb5d5158e6f91ef4cb64846f51be43f90e14870bb681e924058814bf76101c2c1e16b3f5737c55733ec76cda81b4c1cf265c9501f1535ca84b6d4ed461233414dde5867a3b68b6a9c7717e3d8233d29a3419826774c58eec7d0ce129f40fde67b16e88fdcd980fd7ce015d7b29e5f3ce69a1fbd9b5546fd97d5087e36359d427df19d3fed6b9bf616c5da7d67f6f82576753edaf9ed998e072915e7bf532834451977b9f5fddfb9c34f13e55478b2b0f3d866ae239cb45ffed1752a7d60ad3792115097a9f6200fddb35442377dd0c887554fc1c81a747e9c80f62519447a949601eed3879230fdb5d6ad4efa30c48c675f9562f7459081c7e41f2c1d36efcf8eba7c6108abccad7282bbc8c9c9d8b3e31026cd708aa4c30999d749d7cda55623bcc8ab65b6b2cf555e02c13ad144dbbb0d183aab4c61903ea8f7ece45ad23bd58d7fe6215b31e726d6cbd66969585941079645ec4ad523ea777ed8e7b6949c83bde882ced11410414b5d20d351095ee55927a1c4b200459a7c19fe2f9c3576186a15c71c23552e20c4ee2cd36fa335120d0474076df0d5b2bcabbb6e75f6718e8e9b9e35855faf802a4aefd300fd131b19ad0b45358fb39a11b9790511c672edeaec52ddc5b180dc9ee691797db28b70a0b2dab12eed82ae08fe43d5e70898150cfc0b5c1297d7dce9a3aa60e2cb0b58320dc41f6c2b0e1db6b6369cfe3175eaa87fcb502b419b4d48efddb58986afa6c9bcb2d5e1b22c2c1d8ada27b078bed9243c7972fb4a1c255dd561b7aaa1cc98686aa3ba0b470c858ad5b221259bb05934e3c26baf8d8d5776d97c97aa5e41ef2fca387cdb028d4ce7dfa6e11ea2170e161c24b57d3a22da32be74f4ccf5247ecb2da3ebec645469c3965481d513cb4051997ed88a0a34311149c21a7bb928dce2bb34dc51eedae5f5b1343e06b0f1146a74a82a93d88d4ccaa083dfac9e9ab327b512eb8e7427804f3ce930d1e7782904a88ae4c5320c93b0e86b17654dad0c0ca787a723c24855e41d1dc616c02f7d0de09f454c25044789866639ce0c7e0e54e6f5f8f6a09f01f1d162fe88171024d0ec02c2fe25ef5e319b0aae4faf254e5056a267048b3f6cc2726d3d63c019c1f66065a8f5f08fe0815fc158f778001329e50494e77ae79c1c83efa5313e37cd873bf136ea09fce233d9cfe2e6b10210ee96db08fb31557276a3f7b3867aecfc6c91d3e44989740f08b0a970bad1852834e48dae594043bbb17c9541992219e1477693599dbcb9b36b85d126c6b0cfd8588b44cb3a1b48dc29fd2d1decb78eb55cc8dd8f0e3914b1b0cc1b9e975ff1f8abb061f3ffb7c204cba28739734822579baa83e4ff9eb672dd6f103a3a30ccd150a56d3ce50acd88adaf17084ddb661721d3c4abfd52e20c4411f08c694cd23d8281e80d3621d8c1f344f4db303f9b0da9f21c7b58a521c94be1a563fb9b332ad2db313851b2c00017aaa01b75c29c0f3aa33467188567de5353eceaf0ef31b973d1119396789e98dfc435a8608f8d0c103442172bbf56d140c7e3d2713c966adb4c5a5d62f926b3986976cd145b9cab8fbae70649977e9e61545980393521b5b81e66b49676b6919ae2d759e978aaaa65ae5689f97566a19113333fe366bb814bea319ea0a94244881da6f6c1760a03bc1bf7f459c772bfb5a694d87b2ea7be809445b8929c85fc9057ae3a40ae6e0814cf65de2d2191f4c33f97532e98c7ed853e95704954087a0932f1e54e05701e6bcf7ef746193cdfd170c993c175b848d355b01699d737d8be7850f63d5a613db22aac7be5c36ea2617623a079caf2c2c2bcdeaaf0802670053511774b73c537d35dc0f66b5d4670e982c2056922cea9b7c14b582961db4bfb711a03aa1f6d3f9a13175eb99ac0271e45fe03b5df9de2f3062d38b7cac048a2a3c56ce981616656de0e59835157584ea317c67c39a9ec023222eb9189034111cf91bd4153f718161dc65ba4255637f15c3bced1e98cd48f6a423e03e012832480b8647e1b3442bc3c211ca89d8c751e57ff8ca8c487f99a9724f225ae39e962ac591b52682a134f53788e4206ac8eac39c7680bc6d6a3eca27ebe1f71dd427059813176487a0e641898332d020773ffda58b8961ddec8aaaf9ab8128ef565dcfe8eb54a502b1411b0e5bf4fae88e8a4da16e7562e530cee131dac33a7c83945e9b097e99b228e6c46a0dd49a7f203e016704ba7174516dd409aa50139e6f41f008a0fe1cf3af07c7c6c48aa0c6e1f5cebfe84507d5defc182204d80915cb36c13202f4350ec46d5108286ded8940c294806c0081cab334287165f0b43526f03efbe8c881948e38f369a3b70f8675795fdb981ad730c6ae928b15cd443be35fc26059c5d5ff59c08d2816efd5ab1534a085229a015850f8e179a8315ce5025de942514e8446f17b3819e6e8aa44c9b3ebc2d9351741ee331b5080e04f89846718393b0e1b6703c51432b773485126e55a499649731c9c5f996b738dc6f478f91a6d1192ea1219ae4a1a3f380854dab0b71d60ae4f20eaba95669775bd5aa193f53145695c43667dc53f14acdc49c8c79dc3ddf30b189a7cc02b7ea325221fc36d2fcbe501736b0e55b38e0bf3d18b764e8944c859a180d462d920620e2e42d97ace23bdfb1bb0f196dfe0611ee33bd2a90b39af93613af02b3bb720605499a423ac05134cd537f91027e82bd52b33bf1c5f528af57c200a5db8ec49c4c4462c8af0164a11ab2a67e00866bf7956adc7afb2aba7bfb41e8a3360b3839bda254f60f743bab027bdbed9c701dd56d279fc8f55ba24d91317149d56d2ff78de55e6acf796fe6488c3400f811ad345a2f8aa2ac5264996d8a00a694812e57470836ee0e08177fcb7386021ab25fd669e465e7913379deb69abc320994c9a2ba6fb057658d29720e055dff21e4ab7e0763575307bc201d6c6723095a1211bbab070de5fa0db327aabfeec06535e4ec3ac621d68e8a93dc2ee0e06080144b6fb4a3f4b6f39edf9cb0af29bd2bece2b4a9ca8908ae93396a32bda922371931aeda2879a7da289d361bc480f6a3910419f9092ab0b28667697ae431bf2ba780bba446d33c7cd4d7f8e9483f7c122339d00b6ba04ec63352e1fe0974289e4e07fc5348d7f09b2a6d0b684116f925bcea10cdcacc9cfcd07c585736bd6304fc7c6027dc2a8e8782e4bb9675c0a8e310de285ee47a5c235126e2f3b3765db255e6f0f3902bb0a749afc48f0a93d227027e88099a533f4138a92c04da029d9c9ec82e268ec2fa0ca51cbd4dcd4e3dd0771e6def55ad6c85f9de9d91f236120730e8a3164ed4dbe6b79dd68da8b96634d24696ce195db17e5fa5e4f070b984779d125433c957c7a7a8b934fdc9c581047495d1bd5faf668dfd83d1aa5b587f26a348b85fc30adc1c0529fea19a99fc1481e7f64a66a155e4b9584ec0c39182ae8dc3573bf53ffdac71d67fa02ac98df80c66bed35baabcd1c8597110f78e6c0e19441cb539024d310112039c0e22e126a560f630117367a33623a31e1844cab498c2ef5a680c065d4e044aacd6c7bfe286bace1463ceef84af313b7e961b9b37a7ad2a6dc1ac2a5d88f240959a3177e41d4c7b5ad00b26db62c5aa0678aecadd5f3b3c2b5d9062b37ce4aba8e0c89e0eba733655c656b855aff2adeebf1624abff6eac534dbf7de5f4e0272ac6f32e24b46543d2a0f0812d4b510b618d4e4de7632a8e9f05076cba96de70587772d337d7737b3899b1e8fb21866fcfbafbce16ce174f406eb715f3b67092d6075b7a64d2214f1cb61611983d229565c4a4f40f253d92fe584c9c6297e1030eae83f6b8937afd1d5cccce883f4d055f808b4aa2437c1b61c8129d5bb06509203ab4ba59f1cdede73f41b0e06a6b45c145305afb58533b1ea9b84d90416d3f689f0fe85bb8b2bcf88418bf8cc4b87e2edd96f26763415e15e89f4bc45ba71a83bd122ebf7178b9950d0f725eb069f14909c3d0c5eb1a9fc432c0a650496d2eec1d71d386c8700907f7fa8d332fd53be16644cc9b8b1a9b138054dd3a396a8823af67fa358a28cd90cea9e3ce0cd7d3daa123a5830aa558d3fe5198cadc0fe116f560764f66ec3328f24448a563c2e34b5a140f7200059a0afb93be8e17dfd43c1df8cb45343b06a4eeda3c0ed25401840d1a62ab4d75389df191fcc836"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0x1c8, 0x1a, 0x0, 0x0, {{0xa}, {0x158, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x154, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x46, 0x6, "c86100f3698429a54ab3552b561942de1e05b05089d28b1c94b6a85fa89c8d8a95b46f179e2d34343586f9a5316d0b0f1a9c4aa39eb056b7d5b3967631dcdef2dd70"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x2ac, 0x1, [@m_tunnel_key={0x100, 0xc, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xc0, 0x6, "7929250d4d55fc6d2724bdc32e5ef40d6cd8a2501bdb37eb3675d2ee61fe96384c9adc2b43826e35f5ab0cf46632239e6c23b78fb774c3cbebaf88deedfb5c17a8282620a9ffba5869b0ba5f66108184a5389fe4a16df27d4c79ca38c8dbc50144e6b565940c6cf9dda3888d65ada22a25bc41a3658993ff4613ec95d18e76a2c9916603c1f2068c123577b64f4d149061ee0cb7e8d24f03ef60ec5fa0ca369b5cabaa6f2fbb0f415200ee980bd053b40f9d488fe3fedf25c76bdbb3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0xd0, 0xa, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x4, 0xffffffffffffffff, 0x6, 0x3}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfc26}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}]}, {0x6a, 0x6, "42a3a162ed2d293190af439f23ee2ad46ba2713baefc6b911e29330be52d25c56b5a0f99088c8337d471c41b33e2840344027c538ceb58e75dff8c887bfdbdd003bbf323d7cb3b5c97bb2fc2044efca04d58cc50aa1782246a673e2ed7e5e1bd1921e0e1bc3e"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ife={0xd8, 0x4, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x3c, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x3}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3391}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xea1e8000}]}]}, {0x74, 0x6, "e320dcc651400d2b745dbc28608ab7bc31a175ee0fb8f0bde77c76e4c161901acf566f9e862fd8eb0fa7e6c24bbf8961bbf81861b2bc4567ce62e08590646f1688c22d99d18dd0dfeb3ff1a6b2623910e82b2e3c73c394eac3fd4dec1ece9af440bdb3f77fdf06f0246d114263d271f6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x34b4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, &(0x7f0000000040)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) listen(0xffffffffffffffff, 0x5) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000180)='u', 0x1}], 0x1) r8 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/41, 0x29}], 0x1}, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000240)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x2, 0x2, 0x6}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x5}) ioctl(r9, 0xfffffff7, &(0x7f00000004c0)="a64391430d52906838444653bc582124f8af33a53fbf1af6147198f2b7d88381fc964f392ce2b58f63a75d6284cba684b6bcebcb1c775902d4dd0b8f8e4c514108d71a529ec63fed1c6e57b2148c3a2ce7ac378a4247f8e71caee49035b3dfe2e6b51a2353c18f5bdad9d39bdff89cc1569d8add2fc2efb6b97f0e966b116cc6e67e1b5b7f715379a132fbc35adde44f980fd50b597012d80b672a368d7bd1802a91cd26843b3f597b65ddd51b1d51efd6c5e08100c2ccd39de57da7111c49c377e3a1d9313d92310af2ae5362a763fe25756bd8f915e89ae6") 4m42.040419345s ago: executing program 35 (id=3725): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xdffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x200, 0x160, 0x0, 0x148, 0x0, 0x148, 0x1f0, 0x240, 0x240, 0x1f0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffff00, 'veth1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x88, 0x0, 0x10}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa52531e464ddd335, 0x0, 0xfffffffd, 0x3, 'pptp\x00', 'syz1\x00'}}}, {{@ip={@loopback, @multicast1, 0x0, 0x0, 'veth1_to_batadv\x00', 'team_slave_1\x00', {}, {0xff}, 0x5c, 0x1, 0x14}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001c00070c2bbd70000000000002000000", @ANYRES32=r1, @ANYBLOB="4000100a140001"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32=r4, @ANYBLOB="20000280", @ANYRES8=r3, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}}, 0x4004000) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, &(0x7f0000000540)=0x1, 0x4) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$unix(0x1, 0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = memfd_secret(0x80000) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r8, @ANYBLOB="0000000014000000008d9e00012bdfb6f500000001000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x30, 0x4000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x3a, 0x5, 0x80000009, 0x22, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, @mcast2, 0x1, 0x80, 0x4, 0xffffffff}}) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r12 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r12, 0xc004500a, &(0x7f0000001340)) syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r12, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r9, &(0x7f0000000380)="a52876830aa52149f03ab7aa3e602214f6b4e928d758f38a5a7cb4b31c4c4f53da7ff800b8e37ec8a9e734b6", 0x2c) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c00000010000305000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000d0001000000060002404e22000008000500", @ANYRES32=r13], 0x4c}, 0x1, 0x0, 0x0, 0x8054}, 0x4) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="08010000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf250b000000180001801400020076657468315f746f5f6261746164760060000180140002006e69637666300000000000000000000008000100", @ANYRES64=r7, @ANYBLOB="08000300010000001400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="140002007866726d300000000000000000000000280001800800030001000000140002007465616d5f736c6176655f300000000008000300010000000c0001800800030002000000480001801400020076657468305f766c616e00000000000008000100", @ANYRES32=r10, @ANYBLOB="08000300030000000800030003000000080003000300000008000100", @ANYRES32=r13, @ANYBLOB="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"], 0x108}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000580), 0x8, 0x2) 4m41.963335456s ago: executing program 36 (id=3723): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/uevent_helper', 0x149a82, 0x24a) sendfile(r0, r0, 0x0, 0x100000000) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) clock_adjtime(0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000000100)) clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0xfffffffe, 0x0, 0x1000000000000005, 0x7, 0xfffffffffffffffd, 0x9, 0x1, 0x8000040000000000, 0x0, 0x3, 0x2484, 0x3, 0x4, 0x0, 0x0, 0x80003600000, 0xfffffffffffffffd, 0x0, 0x2000000002, 0xfffffffffffffffe, 0x3, 0xa30, 0x0, 0x6, 0xa}) io_setup(0x9, &(0x7f0000000140)) 3m8.350818053s ago: executing program 7 (id=4311): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x8}) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000340)={0x4, 0x1, 0x9, 0x3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x200004ffc000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newtfilter={0x50, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @private1}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x1}]}}]}, 0x50}}, 0x24004000) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents64(r5, &(0x7f0000001ec0)=""/142, 0x8e) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) fcntl$lock(r5, 0x6, &(0x7f00000003c0)={0x2, 0x2, 0xd0d, 0x4000000000, r6}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x4, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000a00000500150003000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x20000440}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m6.963227492s ago: executing program 7 (id=4322): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}]}, {0x4}, {0xc, 0x7, {0x81000000}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) 3m5.497759576s ago: executing program 7 (id=4334): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x732, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x700000000000000, 0x0, 0x51}, 0x0) 3m4.001031946s ago: executing program 7 (id=4346): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100001040000000000e6306e84000000", @ANYRES32=0x0, @ANYBLOB="00000000141100001c00128009000100626f6e64000000000c00028005000e0006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x65, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x1f, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="4ed17bc44f08", 0x6}, {&(0x7f0000000080)="4e97493f0f81a4a1451bf8ef1dfa0daa2bfe2fbcfd64c603e09ac52aba43a6d31b9a3ba839d67ebf831b9d168b3c2588922bec45fa8d7354f3d65de608ee2f67e0dde0b7a05ee923ab3f72ed2b2c880760e034f76ff98a81ef37dd4b69eb7a6defbfe3b46e89e3afb06b8784fb90f5530f92d14fd84d667cf94c715cdbe706e360c20a96a2a3cd961d0f9365c87397636a2417f778bcbebc75af3fd7aac24063", 0xa0}, {&(0x7f0000000140)="c6f003e313c37b390a74efeda96bd7a3470e791c9a702a71c83082986f4aa6d6236cc82a7e2bae859a6a6c884082c299a63adc86d261b35eaec083a801bb7ac2821485e2d607bdf1178c09ffe5ff0dee70be022a7bb352ad1db03112a79ab5678e943ea3", 0x64}], 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1c00"/16, @ANYRES32=r1, @ANYBLOB="0a010102ffffffff000000001100000000000000000000000100000006000000000000001c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="ffffffffe00000020000000014000000000000000000000002000000ffff0000000000001100000000000000000000000100000080000000000000001400000000000000000000000200000006000000000000002c000000000000000000000007000000070b9800000000ac141439070dd547dddd45c4d206d75a2e9404000000000000"], 0xd0}, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000200)=0x7, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f0000000280)) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000016c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaa000886dd60cb653e00083a00fe800000000000000000000000000000fe8000000000000000000000000000aa8000907800000000"], 0x0) 3m2.950545605s ago: executing program 7 (id=4351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000190a01020000000007000000000000000900010073797a30"], 0x20}}, 0x0) 3m0.171313684s ago: executing program 7 (id=4371): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000000c0)={0x23, 0x3, 0x2, 0x9, 0x0, 0x0, 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000040)={0xc, [0x5, 0xfffff000], 0xe}, 0x10) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000180)={0x0, 0x0, 0x4, &(0x7f0000000240)={0x0, "50f04611cbc3ad9335b1cad63f1683e3bfdb00"}}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) 3m0.171167825s ago: executing program 37 (id=4371): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000000c0)={0x23, 0x3, 0x2, 0x9, 0x0, 0x0, 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000040)={0xc, [0x5, 0xfffff000], 0xe}, 0x10) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000180)={0x0, 0x0, 0x4, &(0x7f0000000240)={0x0, "50f04611cbc3ad9335b1cad63f1683e3bfdb00"}}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) 2.235287775s ago: executing program 8 (id=6528): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2.234946757s ago: executing program 8 (id=6529): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x0, 0x10, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.168427209s ago: executing program 8 (id=6530): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x6) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x40000107, 0x0, 0x3}]}) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYBLOB="32ea6b2dcf476d9ffd36d580f5db345b5051cb464186493591504c06eafc6fbd320b09cbef776e9d64d4caa37495b735762efbebf04797870c2475b753f0fed602ed266ffec792d2731cbe6a5bda8d88a6b81c9d41cdffbc495d60cc5739b6e3e7257b47b90b0949e09319d61f13ab82435c416dd96a6b76df46f4eb55e1014db66b5a5e606f7772e3867389156c0ab01cd6e5b0f00bc44265"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000100)='./file0/file1\x00') eventfd2(0x49d, 0x80001) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) 2.168263034s ago: executing program 8 (id=6531): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000240)="4c87bb55a1a8ee2fe467229db4b5d611", 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x800, 0x3, 0x8}, &(0x7f0000000200)=0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) connect$packet(r5, &(0x7f0000000280)={0x11, 0x6, r2, 0x1, 0x5, 0x6, @multicast}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800440, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) 2.020857711s ago: executing program 8 (id=6532): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x4e24, 0x3, 'fo\x00', 0x0, 0x0, 0x54}, 0x2c) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000003080)={0x0, 0x3e, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010081e0a8f9cdd2def06c130fedc82425bd7000fedb"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000840) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'geneve0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "02c7eafb2c0caca8b02a09a29bc39f97117e2ab9091a9ba307985452b442a278", "2ca066fb2fe381377267e10de073ee5f5e0da3625f0a3468ccec4d00", "7508a49563f98a48b65a92f0edacff5df5c106980c2dc8cbd7b99269d38dc31e", "1634ca397b134b9410c32e04e2e2e149ef7e72e382ac4eff98f1b35a90e6bbb1", "c3ffbfbd751386b7ca0142b3e8f626e310587aa17c3c7b9f5d2b7c735073d7af", "c1ea5b85854c5b3cd4c7514b", 0x3, 0x1, 0x0, 0x7, 0x2}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x1, 0x6, 0x800c, 0x3d59, 0xe, 0x6, 0x7093, 0xa9c, r6}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000500)=r6, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f00000008c0)={0xa, 0x4e23, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x28}, 0x40c0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0b06"], 0xe) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0x334, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xb4, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea97}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d04}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ea4ae5b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d3f0ee2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3505}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5213}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x31c6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2947}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4995d68}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbf8c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23ff8b5b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26a6a309}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e285c57}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6764e292}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75925a98}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d0117d7}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75a00112}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5eabbc1b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8919}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69750c3a}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x114, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a574243}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4432b323}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2000cdc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ceaedea}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a12494}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32673c74}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48be842d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38dfe9d5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1eca7903}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c29cfcb}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fd47b12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e879ef6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2547bad1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66822e3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48f88dbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b1bebd1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6dc69e1}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb597}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdd4e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x888b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45584930}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62fdc926}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18a8af0f}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x48f1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd02f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13abd6cd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f71ade4}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc0, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x499966f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x447b14d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f94d3cf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53d8bd99}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x315a4221}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x648b5ca2}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b14bfaa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34545b47}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58baebad}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e831b51}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f90632}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18dfddb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb578740}]}]}]}, 0x334}}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xfff2}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44044}, 0x4048884) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) write$binfmt_misc(r10, &(0x7f0000000000), 0xfffffecc) splice(r9, 0x0, r11, 0x0, 0x4ffe6, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, r12, 0x8, 0x0, 0x6}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 929.02992ms ago: executing program 8 (id=6549): syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000080)=0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bff000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000040)={0x0, &(0x7f0000000540)=[@enable_nested={0x12c, 0x18}, @nested_vmresume={0x130, 0x18}], 0x30}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) listen(r2, 0x5) accept4(r2, &(0x7f0000000240)=@x25, 0x0, 0x80800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000003300), 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=@newsa={0x1a0, 0x10, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@empty, {0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x1, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x0, 0x0, 0x70bd28, 0xeaa}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000035c0)={r1, 0x20, &(0x7f0000003580)={&(0x7f00000033c0)=""/141, 0x8d, 0x0, &(0x7f0000003480)=""/217, 0xd9}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003840)={0x9, 0xa, &(0x7f0000003600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x5, 0x2, 0x0, 0xfffffffffffffff0}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x75f}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @map_fd]}, &(0x7f0000003680)='GPL\x00', 0x1ff, 0x4a, &(0x7f00000036c0)=""/74, 0x41000, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000003740)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000003780)={0x3, 0xf, 0x100, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000037c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r4, 0x1, 0x1, 0xffffffffffffffff, r1], &(0x7f0000003800)=[{0x5, 0x2, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x8}, {0x3, 0x4, 0xe, 0xa}], 0x10, 0x5}, 0x94) 716.401841ms ago: executing program 9 (id=6555): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="010000000980ffff", 0x8) r3 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_buf(r3, 0x0, 0x20, &(0x7f0000000040)="929d547c", 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) close(r0) (async) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) (async) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="010000000980ffff", 0x8) (async) socket(0x840000000002, 0x3, 0x100) (async) setsockopt$inet_buf(r3, 0x0, 0x20, &(0x7f0000000040)="929d547c", 0x4) (async) 716.257272ms ago: executing program 9 (id=6556): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49801, 0x9a4d}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x40}}, 0x4004050) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000240)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000064, 0x0, 0x0, 0x800, 0x0, 0x8100000}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6a9, 0x3ac8}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 492.256897ms ago: executing program 5 (id=6562): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x1, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0xdddfb8c95d0a80d3}, 0x4000080) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x30, r0, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) r6 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5}) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000080)={0x12, 0x1}) 342.289868ms ago: executing program 6 (id=6565): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000040)=0xfffffffffffffe9f) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) (async) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) write$sequencer(r2, &(0x7f00000000c0)=[@t={0x81, 0x3, 0x0, 0x0, @generic}], 0x8) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) (async) pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) ioctl$SNDCTL_FM_LOAD_INSTR(r3, 0x40285107) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x28079}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="087934e9cff9"}]}, 0x44}}, 0x0) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000000)=@netrom) 277.574197ms ago: executing program 6 (id=6566): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') pread64(r1, &(0x7f0000000180)=""/195, 0xc3, 0x100) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r1) 277.278043ms ago: executing program 6 (id=6567): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x6, 0x4, 0x8, 0xd}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 224.623207ms ago: executing program 6 (id=6568): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0xf, 0x0, 0x100, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x7800, 0x10, 0x7ff, 0x3, {{0x39, 0x4, 0x0, 0x2e, 0xe4, 0x66, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@end, @noop, @ssrr={0x89, 0x1f, 0x88, [@local, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010100, @remote, @loopback, @empty]}, @lsrr={0x83, 0x2b, 0x83, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, @broadcast, @empty, @empty, @broadcast, @multicast2, @broadcast, @remote]}, @timestamp={0x44, 0x20, 0x46, 0x0, 0x6, [0x200, 0xd49, 0x3, 0xfa, 0x8, 0x8, 0x7]}, @cipso={0x86, 0x4d, 0x1, [{0x7, 0x7, "f4d96afa0b"}, {0x5, 0x4, "3e1a"}, {0x7, 0x3, "8c"}, {0x7, 0xd, "d2946f93eb16a2f62d92bb"}, {0x1, 0x10, "283a2cc3449f306bad9354cbd86f"}, {0x2, 0xf, "feeec0836eb91071b33599b970"}, {0x0, 0xd, "c021ed43a064ddbb8a1ca1"}]}, @timestamp_addr={0x44, 0x14, 0xe2, 0x1, 0x6, [{@private=0xa010100, 0x2}, {@broadcast, 0x9}]}]}}}}}) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@ifindex=r2, r0, 0x1b, 0x2008, 0x0, @value=r3, @void, @void, @void, r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0xa04004, &(0x7f0000000200)={[{@none}]}) 224.395602ms ago: executing program 5 (id=6569): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x732, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x900) 224.218778ms ago: executing program 6 (id=6570): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000240)="4c87bb55a1a8ee2fe467229db4b5d611", 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x800, 0x3, 0x8}, &(0x7f0000000200)=0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000100)=""/24, 0xfffffffffffffd5b, 0xc9100120, 0x0, 0xfffffffffffffd25) r5 = socket$packet(0x11, 0x3, 0x300) connect$packet(r5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800440, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) 171.268463ms ago: executing program 5 (id=6571): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x58, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3f}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x58}, 0x1, 0x58000000}, 0x0) 171.142107ms ago: executing program 5 (id=6572): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x3c, r2, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfffffffe}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}}, 0x0) 107.23742ms ago: executing program 9 (id=6573): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x9, 0x16, 0x100, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000001000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000940300000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="3000000011140100000000000000000008004b0013000000080001000000000008004f00010000000800030001"], 0x30}}, 0x40) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, &(0x7f0000000000)=0xff, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r7, 0x40345632, &(0x7f00000000c0)={0x38000, "c02cbef823df10ae6d99a54820167b1ad87b1395692fca9855fc82be30b8addf", 0x1, 0x1}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000006c0)={0x20, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, 0x0) 103.999776ms ago: executing program 5 (id=6574): accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x88100) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040026bd7000fedbdf255900000008000300", @ANYRES32=r2, @ANYBLOB="0c0099000101000054000000"], 0x28}, 0x1, 0x0, 0x0, 0x40810}, 0x40000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setreuid(0xee00, 0xee00) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x30, r6, 0x1, 0x0, 0x4000000, {{}, {}, {0x14, 0x17, {0x0, 0x401, @l2={'ib', 0x3a, 'wg1\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r4, r3, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) keyctl$search(0xa, 0x0, &(0x7f000000fc00)='encrypted\x00', 0x0, 0xfffffffffffffffa) r9 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001040)={0x8, 0x0, &(0x7f0000000ec0)=[@decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0}) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000740)={0x84, 0x0, &(0x7f0000000580)=[@enter_looper, @enter_looper, @dead_binder_done, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x1}, @decrefs={0x40046307, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000500)={@fda={0x66646185, 0x9, 0x1, 0xf}, @flat=@binder={0x73622a85, 0x1, 0x3}, @fda={0x66646185, 0x2, 0x2, 0x6}}, &(0x7f0000000280)={0x0, 0x20, 0x38}}}, @free_buffer={0x40086303, r9}], 0xee, 0x0, &(0x7f0000000640)="c33f9957bfdac2f6b90c703909089c4a6e9a18be9f840e9343060a64fa8f3f39cf07f75bc9b6a2cd98ddbff2a3e0565af3d66b966fddf5e9fe316bae5b4cbd53558c340ca4e318871cd204afc48fcc25fe80572e32863b7c636f755728eb98714de42bb8017aefb0c49cae542fbe74620006d2497e9f7efc13489e456745353380a0947750c86b2ee9a1c511779ba6c52be35393fb818c94810940ff8a50c342eda71a1363e7064926419fdcbf07aafbb17cba8019c8782105ca6e359d5854c0b0f7310ea741539f6d750c32736ce5fd3ecc8dd14ae39899eb597e22d11c58fdaf388335b1d7e9e241362e19da42"}) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r11, 0x89e2, &(0x7f00000007c0)=@bcast) 103.903819ms ago: executing program 5 (id=6575): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f00000002c0)={0xa3, 0x0, &(0x7f00000001c0)}) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) (async) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000280)={0x9, 0x9}) (async) ioctl$CDROMPLAYBLK(r4, 0x5317, &(0x7f0000000280)={0x9, 0x9}) tee(r0, r0, 0x1, 0x2) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) fcntl$setlease(r0, 0x400, 0x0) (async) fcntl$setlease(r0, 0x400, 0x0) 103.771042ms ago: executing program 9 (id=6576): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) modify_ldt$write2(0x11, &(0x7f0000000100)={0x7, 0x1000, 0x400, 0x1}, 0x10) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000cc0)=@newsa={0x148, 0x1a, 0x713, 0x0, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x3502, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xb1}}]}, 0x148}}, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x800}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x10, 0x4, 0x8, 0x5}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) getxattr(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)=@random={'user.', 'security.selinux\x00'}, &(0x7f0000000240)=""/84, 0x54) lsetxattr$security_selinux(&(0x7f0000000000)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:mount_tmp_t:s0\x00', 0x21, 0x1) 222.158µs ago: executing program 9 (id=6577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x8cff, 0x10, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 45.2µs ago: executing program 6 (id=6578): mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000180)='proc\x00', 0x0, &(0x7f00000000c0)='gid=1\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f5\xaf\xea)\xfc\x80\x81X\xbb\xd33\xdf\bbx\x10\xa3\xc8n\xa4\'') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4, 0x0, r0}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000c80), 0x20000000, 0x2}, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) 0s ago: executing program 9 (id=6579): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x10000000}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) 0s ago: executing program 9 (id=6581): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x200) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000500)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc03064ca, &(0x7f0000000700)={&(0x7f0000000680)=[r2, 0x0], 0x0, 0x0, 0x2, 0x2}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r4, 0xc01864cb, &(0x7f0000000280)={&(0x7f0000000040)=[r5], &(0x7f0000000080), 0x40000216, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000000)={0x0}) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) r8 = dup(r7) ioctl$GIO_UNISCRNMAP(r8, 0x43403d0e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, r2, r5, r6, r9], &(0x7f0000000100)=[0x7, 0x8, 0x1, 0x37e, 0x5], 0x284f5fcb, 0x5, 0x4}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x3fffffe, 0x2}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100033060000000000000000ffffffff000000000000000000000000e00000020000e0ff00000000000000000000000000000000000000a02c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x154}}, 0x0) close(r0) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) (async) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x200) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000500)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc03064ca, &(0x7f0000000700)={&(0x7f0000000680)=[r2, 0x0], 0x0, 0x0, 0x2, 0x2}) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) (async) write$vga_arbiter(r3, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) (async) close(r3) (async) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r4, 0xc01864cb, &(0x7f0000000280)={&(0x7f0000000040)=[r5], &(0x7f0000000080), 0x40000216, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000000)) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) (async) dup(r7) (async) ioctl$GIO_UNISCRNMAP(r8, 0x43403d0e, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, r2, r5, r6, r9], &(0x7f0000000100)=[0x7, 0x8, 0x1, 0x37e, 0x5], 0x284f5fcb, 0x5, 0x4}) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x3fffffe, 0x2}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100033060000000000000000ffffffff000000000000000000000000e00000020000e0ff00000000000000000000000000000000000000a02c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x154}}, 0x0) (async) close(r0) (async) kernel console output (not intermixed with test programs): __kmalloc_noprof+0xe0/0x850 [ 547.080593][T22280] tomoyo_realpath_from_path+0xb6/0x690 [ 547.080614][T22280] tomoyo_path_number_perm+0x23c/0x580 [ 547.080628][T22280] ? tomoyo_path_number_perm+0x22e/0x580 [ 547.080645][T22280] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 547.080675][T22280] ? find_held_lock+0x2b/0x80 [ 547.080689][T22280] ? __fget_files+0x215/0x3d0 [ 547.080705][T22280] ? hook_file_ioctl_common+0x146/0x410 [ 547.080720][T22280] ? __fget_files+0x21f/0x3d0 [ 547.080739][T22280] security_file_ioctl+0xd3/0x230 [ 547.080756][T22280] __x64_sys_ioctl+0xb7/0x210 [ 547.080772][T22280] do_syscall_64+0x106/0xf80 [ 547.080786][T22280] ? clear_bhb_loop+0x40/0x90 [ 547.080801][T22280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.080813][T22280] RIP: 0033:0x7f9a59b9bf79 [ 547.080823][T22280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.080834][T22280] RSP: 002b:00007f9a5a98c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 547.080845][T22280] RAX: ffffffffffffffda RBX: 00007f9a59e15fa0 RCX: 00007f9a59b9bf79 [ 547.080852][T22280] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 547.080859][T22280] RBP: 00007f9a5a98c090 R08: 0000000000000000 R09: 0000000000000000 [ 547.080866][T22280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.080873][T22280] R13: 00007f9a59e16038 R14: 00007f9a59e15fa0 R15: 00007ffc97a42ae8 [ 547.080897][T22280] [ 547.080902][T22280] ERROR: Out of memory at tomoyo_realpath_from_path. [ 547.089875][T22282] overlayfs: failed to resolve './file0': -2 [ 547.265190][T22295] tipc: Enabling of bearer rejected, already enabled [ 547.295760][T22303] FAULT_INJECTION: forcing a failure. [ 547.295760][T22303] name failslab, interval 1, probability 0, space 0, times 0 [ 547.300114][T22303] CPU: 3 UID: 0 PID: 22303 Comm: syz.8.6013 Tainted: G L syzkaller #0 PREEMPT(full) [ 547.300133][T22303] Tainted: [L]=SOFTLOCKUP [ 547.300137][T22303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 547.300144][T22303] Call Trace: [ 547.300149][T22303] [ 547.300153][T22303] dump_stack_lvl+0x100/0x190 [ 547.300175][T22303] should_fail_ex.cold+0x5/0xa [ 547.300189][T22303] should_failslab+0xc2/0x120 [ 547.300207][T22303] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 547.300221][T22303] ? security_inode_alloc+0x3b/0x2c0 [ 547.300237][T22303] ? lockdep_init_map_type+0x5c/0x250 [ 547.300257][T22303] security_inode_alloc+0x3b/0x2c0 [ 547.300277][T22303] inode_init_always_gfp+0xced/0x1040 [ 547.300298][T22303] alloc_inode+0x8e/0x250 [ 547.300312][T22303] new_inode+0x22/0x1c0 [ 547.300328][T22303] mqueue_get_inode+0x2e/0xe00 [ 547.300340][T22303] ? sget_fc+0x801/0xc70 [ 547.300356][T22303] ? __pfx_mqueue_fill_super+0x10/0x10 [ 547.300369][T22303] mqueue_fill_super+0x14d/0x260 [ 547.300381][T22303] get_tree_nodev+0xdd/0x190 [ 547.300397][T22303] mqueue_get_tree+0xf1/0x130 [ 547.300410][T22303] vfs_get_tree+0x92/0x320 [ 547.300424][T22303] fc_mount_longterm+0x1a/0x270 [ 547.300440][T22303] mq_init_ns+0x482/0x820 [ 547.300455][T22303] copy_ipcs+0x3dd/0x7e0 [ 547.300471][T22303] create_new_namespaces+0x20a/0xac0 [ 547.300487][T22303] ? security_capable+0x80/0x260 [ 547.300502][T22303] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 547.300519][T22303] ksys_unshare+0x455/0xab0 [ 547.300536][T22303] ? __pfx_ksys_unshare+0x10/0x10 [ 547.300552][T22303] ? ksys_write+0x1ac/0x250 [ 547.300572][T22303] __x64_sys_unshare+0x31/0x40 [ 547.300588][T22303] do_syscall_64+0x106/0xf80 [ 547.300601][T22303] ? clear_bhb_loop+0x40/0x90 [ 547.300616][T22303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.300627][T22303] RIP: 0033:0x7f9a59b9bf79 [ 547.300638][T22303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.300649][T22303] RSP: 002b:00007f9a5a98c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 547.300660][T22303] RAX: ffffffffffffffda RBX: 00007f9a59e15fa0 RCX: 00007f9a59b9bf79 [ 547.300667][T22303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 547.300674][T22303] RBP: 00007f9a5a98c090 R08: 0000000000000000 R09: 0000000000000000 [ 547.300680][T22303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 547.300687][T22303] R13: 00007f9a59e16038 R14: 00007f9a59e15fa0 R15: 00007ffc97a42ae8 [ 547.300701][T22303] [ 547.374824][ T40] audit: type=1400 audit(524811.920:15783): avc: denied { ioctl } for pid=22306 comm="syz.5.6015" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 547.427768][T22313] xt_hashlimit: max too large, truncated to 1048576 [ 547.529312][T22324] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 547.565179][T22321] tipc: Resetting bearer [ 547.619891][ T5997] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 547.756876][T22341] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6027'. [ 547.761728][T22341] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6027'. [ 547.793498][ T5997] usb 14-1: Using ep0 maxpacket: 32 [ 547.802698][ T5997] usb 14-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 547.807619][ T5997] usb 14-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 547.810465][ T5997] usb 14-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 547.813422][ T5997] usb 14-1: Product: syz [ 547.814803][ T5997] usb 14-1: Manufacturer: syz [ 547.816329][ T5997] usb 14-1: SerialNumber: syz [ 547.819596][ T5997] usb 14-1: config 0 descriptor?? [ 547.822621][T22309] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 547.830318][ T5997] hub 14-1:0.0: bad descriptor, ignoring hub [ 547.832281][ T5997] hub 14-1:0.0: probe with driver hub failed with error -5 [ 548.066566][T22360] overlayfs: failed to resolve './file0': -2 [ 548.176486][ T5996] usb 14-1: USB disconnect, device number 10 [ 548.454923][T22362] bond0: (slave netdevsim0): Releasing backup interface [ 548.565627][T22368] ieee802154 phy1 wpan1: encryption failed: -22 [ 548.677373][T22372] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6041'. [ 548.684956][T22379] overlayfs: missing 'lowerdir' [ 548.973288][T22391] ieee802154 phy1 wpan1: encryption failed: -22 [ 548.981514][T22389] random: crng reseeded on system resumption [ 548.993942][T22393] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 548.996203][T22393] overlayfs: failed to set xattr on upper [ 548.998100][T22393] overlayfs: ...falling back to redirect_dir=nofollow. [ 548.998384][T22389] PM: hibernation: Image mismatch: memory size [ 549.000379][T22393] overlayfs: ...falling back to metacopy=off. [ 549.000386][T22393] overlayfs: ...falling back to index=off. [ 549.000390][T22393] overlayfs: ...falling back to uuid=null. [ 549.039284][T22397] FAULT_INJECTION: forcing a failure. [ 549.039284][T22397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.044249][T22397] CPU: 2 UID: 0 PID: 22397 Comm: syz.6.6052 Tainted: G L syzkaller #0 PREEMPT(full) [ 549.044267][T22397] Tainted: [L]=SOFTLOCKUP [ 549.044271][T22397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 549.044278][T22397] Call Trace: [ 549.044282][T22397] [ 549.044287][T22397] dump_stack_lvl+0x100/0x190 [ 549.044322][T22397] should_fail_ex.cold+0x5/0xa [ 549.044338][T22397] _copy_from_user+0x2e/0xd0 [ 549.044358][T22397] copy_msghdr_from_user+0x9f/0x4f0 [ 549.044385][T22397] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 549.044409][T22397] ___sys_sendmsg+0x106/0x1e0 [ 549.044427][T22397] ? __pfx____sys_sendmsg+0x10/0x10 [ 549.044461][T22397] __sys_sendmsg+0x170/0x220 [ 549.044475][T22397] ? __pfx___sys_sendmsg+0x10/0x10 [ 549.044496][T22397] do_syscall_64+0x106/0xf80 [ 549.044510][T22397] ? clear_bhb_loop+0x40/0x90 [ 549.044524][T22397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.044536][T22397] RIP: 0033:0x7f3725f9bf79 [ 549.044546][T22397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.044557][T22397] RSP: 002b:00007f3726e4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 549.044568][T22397] RAX: ffffffffffffffda RBX: 00007f3726215fa0 RCX: 00007f3725f9bf79 [ 549.044575][T22397] RDX: 0000000020040844 RSI: 0000200000000340 RDI: 0000000000000003 [ 549.044582][T22397] RBP: 00007f3726e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 549.044588][T22397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.044594][T22397] R13: 00007f3726216038 R14: 00007f3726215fa0 R15: 00007ffd1675c838 [ 549.044609][T22397] [ 549.108312][T22401] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.114023][T22403] IPv6: NLM_F_CREATE should be specified when creating new route [ 549.152693][ T40] audit: type=1400 audit(524813.585:15784): avc: denied { map } for pid=22406 comm="syz.8.6056" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 549.164419][T22401] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.228982][T22412] ieee802154 phy1 wpan1: encryption failed: -22 [ 549.302292][T22401] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.376296][T22401] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.030319][T22405] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 550.033038][T22405] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 550.040955][T22405] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 550.043572][T22405] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 550.047727][T22405] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 550.050235][T22405] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 550.054886][T22405] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 550.170423][T22438] netlink: 9 bytes leftover after parsing attributes in process `syz.6.6069'. [ 550.175135][T22438] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 550.213429][T22440] FAULT_INJECTION: forcing a failure. [ 550.213429][T22440] name failslab, interval 1, probability 0, space 0, times 0 [ 550.218773][T22440] CPU: 1 UID: 0 PID: 22440 Comm: syz.8.6070 Tainted: G L syzkaller #0 PREEMPT(full) [ 550.218800][T22440] Tainted: [L]=SOFTLOCKUP [ 550.218806][T22440] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 550.218816][T22440] Call Trace: [ 550.218823][T22440] [ 550.218831][T22440] dump_stack_lvl+0x100/0x190 [ 550.218862][T22440] should_fail_ex.cold+0x5/0xa [ 550.218900][T22440] should_failslab+0xc2/0x120 [ 550.218926][T22440] __kmalloc_cache_noprof+0x7a/0x6f0 [ 550.218945][T22440] ? alloc_netdev_mqs+0xd95/0x14f0 [ 550.218964][T22440] ? __asan_memset+0x23/0x50 [ 550.218987][T22440] alloc_netdev_mqs+0xd95/0x14f0 [ 550.219018][T22440] ieee80211_if_add+0x19c/0x1860 [ 550.219045][T22440] ? kmalloc_reserve+0xf9/0x350 [ 550.219072][T22440] ieee80211_add_iface+0xaf/0x5d0 [ 550.219094][T22440] ? __pfx_ieee80211_add_iface+0x10/0x10 [ 550.219115][T22440] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 550.219144][T22440] nl80211_new_interface+0x65f/0x11d0 [ 550.219169][T22440] ? __pfx_nl80211_new_interface+0x10/0x10 [ 550.219195][T22440] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 550.219212][T22440] ? nl80211_pre_doit+0x19a/0xae0 [ 550.219234][T22440] genl_family_rcv_msg_doit+0x214/0x300 [ 550.219263][T22440] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 550.219297][T22440] ? bpf_lsm_capable+0x9/0x10 [ 550.219322][T22440] ? security_capable+0x80/0x260 [ 550.219342][T22440] ? ns_capable+0xd2/0xf0 [ 550.219364][T22440] genl_rcv_msg+0x560/0x800 [ 550.219392][T22440] ? __pfx_genl_rcv_msg+0x10/0x10 [ 550.219417][T22440] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 550.219449][T22440] ? __pfx_nl80211_new_interface+0x10/0x10 [ 550.219466][T22440] ? __pfx_nl80211_post_doit+0x10/0x10 [ 550.219487][T22440] ? __lock_acquire+0x4a5/0x2630 [ 550.219518][T22440] netlink_rcv_skb+0x159/0x420 [ 550.219540][T22440] ? __pfx_genl_rcv_msg+0x10/0x10 [ 550.219565][T22440] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 550.219597][T22440] ? netlink_deliver_tap+0x1ae/0xcc0 [ 550.219623][T22440] genl_rcv+0x28/0x40 [ 550.219646][T22440] netlink_unicast+0x5aa/0x870 [ 550.219673][T22440] ? __pfx_netlink_unicast+0x10/0x10 [ 550.219708][T22440] netlink_sendmsg+0x8b0/0xda0 [ 550.219735][T22440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.219756][T22440] ? __might_fault+0x20/0x140 [ 550.219787][T22440] ____sys_sendmsg+0xa54/0xc30 [ 550.219816][T22440] ? __pfx_____sys_sendmsg+0x10/0x10 [ 550.219855][T22440] ___sys_sendmsg+0x190/0x1e0 [ 550.219883][T22440] ? __pfx____sys_sendmsg+0x10/0x10 [ 550.219942][T22440] __sys_sendmsg+0x170/0x220 [ 550.219965][T22440] ? __pfx___sys_sendmsg+0x10/0x10 [ 550.220009][T22440] do_syscall_64+0x106/0xf80 [ 550.220030][T22440] ? clear_bhb_loop+0x40/0x90 [ 550.220053][T22440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.220072][T22440] RIP: 0033:0x7f9a59b9bf79 [ 550.220089][T22440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.220107][T22440] RSP: 002b:00007f9a5a98c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.220124][T22440] RAX: ffffffffffffffda RBX: 00007f9a59e15fa0 RCX: 00007f9a59b9bf79 [ 550.220135][T22440] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 550.220144][T22440] RBP: 00007f9a5a98c090 R08: 0000000000000000 R09: 0000000000000000 [ 550.220153][T22440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 550.220162][T22440] R13: 00007f9a59e16038 R14: 00007f9a59e15fa0 R15: 00007ffc97a42ae8 [ 550.220187][T22440] [ 550.341636][T22445] FAULT_INJECTION: forcing a failure. [ 550.341636][T22445] name failslab, interval 1, probability 0, space 0, times 0 [ 550.345622][T22445] CPU: 2 UID: 0 PID: 22445 Comm: syz.6.6072 Tainted: G L syzkaller #0 PREEMPT(full) [ 550.345641][T22445] Tainted: [L]=SOFTLOCKUP [ 550.345645][T22445] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 550.345652][T22445] Call Trace: [ 550.345656][T22445] [ 550.345661][T22445] dump_stack_lvl+0x100/0x190 [ 550.345683][T22445] should_fail_ex.cold+0x5/0xa [ 550.345697][T22445] should_failslab+0xc2/0x120 [ 550.345716][T22445] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 550.345730][T22445] ? __d_alloc+0x34/0xa80 [ 550.345744][T22445] ? __pfx_mqueue_fill_super+0x10/0x10 [ 550.345757][T22445] __d_alloc+0x34/0xa80 [ 550.345769][T22445] ? __pfx_mqueue_fill_super+0x10/0x10 [ 550.345781][T22445] d_make_root+0x3e/0x90 [ 550.345793][T22445] mqueue_fill_super+0x175/0x260 [ 550.345806][T22445] get_tree_nodev+0xdd/0x190 [ 550.345822][T22445] mqueue_get_tree+0xf1/0x130 [ 550.345835][T22445] vfs_get_tree+0x92/0x320 [ 550.345849][T22445] fc_mount_longterm+0x1a/0x270 [ 550.345866][T22445] mq_init_ns+0x482/0x820 [ 550.345882][T22445] copy_ipcs+0x3dd/0x7e0 [ 550.345898][T22445] create_new_namespaces+0x20a/0xac0 [ 550.345914][T22445] ? security_capable+0x80/0x260 [ 550.345931][T22445] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 550.345947][T22445] ksys_unshare+0x455/0xab0 [ 550.345964][T22445] ? __pfx_ksys_unshare+0x10/0x10 [ 550.345980][T22445] ? ksys_write+0x1ac/0x250 [ 550.346005][T22445] __x64_sys_unshare+0x31/0x40 [ 550.346020][T22445] do_syscall_64+0x106/0xf80 [ 550.346035][T22445] ? clear_bhb_loop+0x40/0x90 [ 550.346048][T22445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.346060][T22445] RIP: 0033:0x7f3725f9bf79 [ 550.346071][T22445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.346081][T22445] RSP: 002b:00007f3726e4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 550.346092][T22445] RAX: ffffffffffffffda RBX: 00007f3726215fa0 RCX: 00007f3725f9bf79 [ 550.346100][T22445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 550.346107][T22445] RBP: 00007f3726e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 550.346113][T22445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 550.346120][T22445] R13: 00007f3726216038 R14: 00007f3726215fa0 R15: 00007ffd1675c838 [ 550.346135][T22445] [ 550.661862][T22460] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6079'. [ 550.778749][T14463] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.786416][T14463] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.799418][T14463] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.805580][T14463] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.902759][T22472] FAULT_INJECTION: forcing a failure. [ 550.902759][T22472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.908161][T22472] CPU: 0 UID: 0 PID: 22472 Comm: syz.5.6083 Tainted: G L syzkaller #0 PREEMPT(full) [ 550.908187][T22472] Tainted: [L]=SOFTLOCKUP [ 550.908194][T22472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 550.908203][T22472] Call Trace: [ 550.908210][T22472] [ 550.908218][T22472] dump_stack_lvl+0x100/0x190 [ 550.908247][T22472] should_fail_ex.cold+0x5/0xa [ 550.908268][T22472] _copy_from_user+0x2e/0xd0 [ 550.908284][T22472] move_addr_to_kernel+0x65/0x170 [ 550.908311][T22472] __sys_connect+0xb5/0x170 [ 550.908327][T22472] ? __pfx___sys_connect+0x10/0x10 [ 550.908340][T22472] ? __fget_files+0x21f/0x3d0 [ 550.908370][T22472] ? __pfx_ksys_write+0x10/0x10 [ 550.908396][T22472] __x64_sys_connect+0x72/0xb0 [ 550.908411][T22472] ? lockdep_hardirqs_on+0x78/0x100 [ 550.908430][T22472] do_syscall_64+0x106/0xf80 [ 550.908449][T22472] ? clear_bhb_loop+0x40/0x90 [ 550.908466][T22472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.908481][T22472] RIP: 0033:0x7f2c9579bf79 [ 550.908496][T22472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.908511][T22472] RSP: 002b:00007f2c96732028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 550.908528][T22472] RAX: ffffffffffffffda RBX: 00007f2c95a15fa0 RCX: 00007f2c9579bf79 [ 550.908539][T22472] RDX: 0000000000000008 RSI: 0000200000002b40 RDI: 0000000000000004 [ 550.908548][T22472] RBP: 00007f2c96732090 R08: 0000000000000000 R09: 0000000000000000 [ 550.908558][T22472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.908568][T22472] R13: 00007f2c95a16038 R14: 00007f2c95a15fa0 R15: 00007ffd446784b8 [ 550.908587][T22472] [ 550.979924][ T5965] usb 14-1: new low-speed USB device number 11 using dummy_hcd [ 551.093974][T22480] overlayfs: missing 'lowerdir' [ 551.117131][ T5965] usb 14-1: device descriptor read/64, error -71 [ 551.199674][T22486] IPv6: Can't replace route, no match found [ 551.395128][ T5965] usb 14-1: new low-speed USB device number 12 using dummy_hcd [ 551.406028][ T5931] Bluetooth: hci5: command 0x0406 tx timeout [ 551.534138][ T5965] usb 14-1: device descriptor read/64, error -71 [ 551.652457][ T5965] usb usb14-port1: attempt power cycle [ 551.894914][T22516] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6099'. [ 552.026202][ T5965] usb 14-1: new low-speed USB device number 13 using dummy_hcd [ 552.069270][ T5965] usb 14-1: device descriptor read/8, error -71 [ 552.261780][ T5931] Bluetooth: hci1: command 0x0405 tx timeout [ 552.262263][ T63] Bluetooth: hci7: command 0x0406 tx timeout [ 552.325570][ T5965] usb 14-1: new low-speed USB device number 14 using dummy_hcd [ 552.348109][ T5965] usb 14-1: device descriptor read/8, error -71 [ 552.467842][ T5965] usb usb14-port1: unable to enumerate USB device [ 552.737024][T22537] FAULT_INJECTION: forcing a failure. [ 552.737024][T22537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.741198][T22537] CPU: 1 UID: 0 PID: 22537 Comm: syz.5.6107 Tainted: G L syzkaller #0 PREEMPT(full) [ 552.741221][T22537] Tainted: [L]=SOFTLOCKUP [ 552.741226][T22537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 552.741232][T22537] Call Trace: [ 552.741238][T22537] [ 552.741242][T22537] dump_stack_lvl+0x100/0x190 [ 552.741275][T22537] should_fail_ex.cold+0x5/0xa [ 552.741290][T22537] _copy_to_user+0x32/0xd0 [ 552.741311][T22537] simple_read_from_buffer+0xcb/0x170 [ 552.741329][T22537] proc_fail_nth_read+0x1af/0x230 [ 552.741349][T22537] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 552.741369][T22537] ? rw_verify_area+0xce/0x6d0 [ 552.741384][T22537] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 552.741403][T22537] vfs_read+0x1e4/0xb30 [ 552.741420][T22537] ? __pfx_vfs_read+0x10/0x10 [ 552.741435][T22537] ? __fget_files+0x215/0x3d0 [ 552.741455][T22537] ? __fget_files+0x21f/0x3d0 [ 552.741476][T22537] ksys_read+0x12a/0x250 [ 552.741491][T22537] ? __pfx_ksys_read+0x10/0x10 [ 552.741510][T22537] do_syscall_64+0x106/0xf80 [ 552.741533][T22537] ? clear_bhb_loop+0x40/0x90 [ 552.741547][T22537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.741558][T22537] RIP: 0033:0x7f2c9575c84e [ 552.741568][T22537] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 552.741579][T22537] RSP: 002b:00007f2c96731fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 552.741590][T22537] RAX: ffffffffffffffda RBX: 00007f2c967326c0 RCX: 00007f2c9575c84e [ 552.741597][T22537] RDX: 000000000000000f RSI: 00007f2c967320a0 RDI: 0000000000000004 [ 552.741604][T22537] RBP: 00007f2c96732090 R08: 0000000000000000 R09: 0000000000000000 [ 552.741610][T22537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.741617][T22537] R13: 00007f2c95a16038 R14: 00007f2c95a15fa0 R15: 00007ffd446784b8 [ 552.741632][T22537] [ 552.828978][ T5965] libceph: connect (1)[c::]:6789 error -22 [ 552.831002][ T5965] libceph: mon0 (1)[c::]:6789 connect error [ 552.935713][T22539] ceph: No mds server is up or the cluster is laggy [ 553.088792][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 553.093763][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 553.098927][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 553.111396][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 553.114544][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 553.280445][T22550] chnl_net:caif_netlink_parms(): no params data found [ 553.286906][T22568] overlayfs: missing 'lowerdir' [ 553.545465][T22550] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.547741][T22550] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.550081][T22550] bridge_slave_0: entered allmulticast mode [ 553.554642][T22550] bridge_slave_0: entered promiscuous mode [ 553.558207][T22550] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.560577][T22550] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.562997][T22550] bridge_slave_1: entered allmulticast mode [ 553.565671][T22550] bridge_slave_1: entered promiscuous mode [ 553.568624][T22577] tipc: Enabling of bearer rejected, already enabled [ 553.584209][T22550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.589034][T22550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.614087][T22550] team0: Port device team_slave_0 added [ 553.617238][T22550] team0: Port device team_slave_1 added [ 553.631654][ T5941] Bluetooth: hci5: command 0x0406 tx timeout [ 553.632915][T22550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.635994][T22550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.644165][T22550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.648618][T22550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.650812][T22550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.658998][T22550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.684733][T22550] hsr_slave_0: entered promiscuous mode [ 553.687305][T22550] hsr_slave_1: entered promiscuous mode [ 553.705404][T22587] FAULT_INJECTION: forcing a failure. [ 553.705404][T22587] name failslab, interval 1, probability 0, space 0, times 0 [ 553.713752][T22587] CPU: 0 UID: 0 PID: 22587 Comm: syz.8.6126 Tainted: G L syzkaller #0 PREEMPT(full) [ 553.713772][T22587] Tainted: [L]=SOFTLOCKUP [ 553.713776][T22587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 553.713783][T22587] Call Trace: [ 553.713787][T22587] [ 553.713792][T22587] dump_stack_lvl+0x100/0x190 [ 553.713814][T22587] should_fail_ex.cold+0x5/0xa [ 553.713830][T22587] should_failslab+0xc2/0x120 [ 553.713847][T22587] __kmalloc_cache_noprof+0x7a/0x6f0 [ 553.713859][T22587] ? alloc_netdev_mqs+0xe01/0x14f0 [ 553.713876][T22587] alloc_netdev_mqs+0xe01/0x14f0 [ 553.713893][T22587] ieee80211_if_add+0x19c/0x1860 [ 553.713910][T22587] ? kmalloc_reserve+0xf9/0x350 [ 553.713927][T22587] ieee80211_add_iface+0xaf/0x5d0 [ 553.713942][T22587] ? __pfx_ieee80211_add_iface+0x10/0x10 [ 553.713956][T22587] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 553.713974][T22587] nl80211_new_interface+0x65f/0x11d0 [ 553.713989][T22587] ? __pfx_nl80211_new_interface+0x10/0x10 [ 553.714004][T22587] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 553.714015][T22587] ? nl80211_pre_doit+0x19a/0xae0 [ 553.714029][T22587] genl_family_rcv_msg_doit+0x214/0x300 [ 553.714048][T22587] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 553.714070][T22587] ? bpf_lsm_capable+0x9/0x10 [ 553.714086][T22587] ? security_capable+0x80/0x260 [ 553.714101][T22587] ? ns_capable+0xd2/0xf0 [ 553.714116][T22587] genl_rcv_msg+0x560/0x800 [ 553.714135][T22587] ? __pfx_genl_rcv_msg+0x10/0x10 [ 553.714152][T22587] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 553.714163][T22587] ? __pfx_nl80211_new_interface+0x10/0x10 [ 553.714174][T22587] ? __pfx_nl80211_post_doit+0x10/0x10 [ 553.714188][T22587] ? __lock_acquire+0x4a5/0x2630 [ 553.714214][T22587] netlink_rcv_skb+0x159/0x420 [ 553.714229][T22587] ? __pfx_genl_rcv_msg+0x10/0x10 [ 553.714246][T22587] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 553.714268][T22587] ? netlink_deliver_tap+0x1ae/0xcc0 [ 553.714284][T22587] genl_rcv+0x28/0x40 [ 553.714299][T22587] netlink_unicast+0x5aa/0x870 [ 553.714316][T22587] ? __pfx_netlink_unicast+0x10/0x10 [ 553.714337][T22587] netlink_sendmsg+0x8b0/0xda0 [ 553.714355][T22587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.714369][T22587] ? __might_fault+0x20/0x140 [ 553.714388][T22587] ____sys_sendmsg+0xa54/0xc30 [ 553.714406][T22587] ? __pfx_____sys_sendmsg+0x10/0x10 [ 553.714429][T22587] ___sys_sendmsg+0x190/0x1e0 [ 553.714447][T22587] ? __pfx____sys_sendmsg+0x10/0x10 [ 553.714483][T22587] __sys_sendmsg+0x170/0x220 [ 553.714497][T22587] ? __pfx___sys_sendmsg+0x10/0x10 [ 553.714520][T22587] do_syscall_64+0x106/0xf80 [ 553.714534][T22587] ? clear_bhb_loop+0x40/0x90 [ 553.714548][T22587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.714560][T22587] RIP: 0033:0x7f9a59b9bf79 [ 553.714570][T22587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.714581][T22587] RSP: 002b:00007f9a5a98c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.714594][T22587] RAX: ffffffffffffffda RBX: 00007f9a59e15fa0 RCX: 00007f9a59b9bf79 [ 553.714601][T22587] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 553.714608][T22587] RBP: 00007f9a5a98c090 R08: 0000000000000000 R09: 0000000000000000 [ 553.714615][T22587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 553.714621][T22587] R13: 00007f9a59e16038 R14: 00007f9a59e15fa0 R15: 00007ffc97a42ae8 [ 553.714637][T22587] [ 553.849172][T22586] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.899324][T22590] netlink: 92 bytes leftover after parsing attributes in process `syz.8.6127'. [ 553.907845][T22550] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.979432][T22586] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.046726][T22550] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.105976][T22586] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.190202][T22550] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.203001][T22586] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.254494][T22550] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.285798][T14463] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.290413][T22596] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 554.293258][T22596] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 554.298023][T17718] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.316957][T14475] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.319671][T14475] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.360463][T22601] futex_wake_op: syz.9.6133 tries to shift op by -1; fix this program [ 554.388693][T22604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=22604 comm=syz.6.6134 [ 554.394881][T22604] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 554.486172][ T5941] Bluetooth: hci1: command 0x0405 tx timeout [ 554.486687][ T63] Bluetooth: hci7: command 0x0406 tx timeout [ 554.562431][T22618] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 554.566349][T22618] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 554.685196][ T40] audit: type=1400 audit(524818.755:15785): avc: denied { bind } for pid=22625 comm="syz.6.6144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 554.794032][T22632] FAULT_INJECTION: forcing a failure. [ 554.794032][T22632] name failslab, interval 1, probability 0, space 0, times 0 [ 554.799882][T22632] CPU: 0 UID: 0 PID: 22632 Comm: syz.6.6147 Tainted: G L syzkaller #0 PREEMPT(full) [ 554.799908][T22632] Tainted: [L]=SOFTLOCKUP [ 554.799915][T22632] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 554.799924][T22632] Call Trace: [ 554.799930][T22632] [ 554.799937][T22632] dump_stack_lvl+0x100/0x190 [ 554.799968][T22632] should_fail_ex.cold+0x5/0xa [ 554.799986][T22632] ? find_held_lock+0x2b/0x80 [ 554.800008][T22632] should_failslab+0xc2/0x120 [ 554.800038][T22632] __kmalloc_cache_noprof+0x7a/0x6f0 [ 554.800055][T22632] ? ax25_listen_register+0x79/0x200 [ 554.800073][T22632] ? ax25_listen_mine+0xb5/0x110 [ 554.800089][T22632] ? __local_bh_enable_ip+0x9e/0x120 [ 554.800114][T22632] ax25_listen_register+0x79/0x200 [ 554.800134][T22632] rose_ioctl+0x2f5/0x7d0 [ 554.800152][T22632] ? __pfx_rose_ioctl+0x10/0x10 [ 554.800169][T22632] ? tomoyo_path_number_perm+0x188/0x580 [ 554.800197][T22632] sock_do_ioctl+0x118/0x280 [ 554.800220][T22632] ? __pfx_sock_do_ioctl+0x10/0x10 [ 554.800248][T22632] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 554.800274][T22632] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 554.800303][T22632] sock_ioctl+0x599/0x6b0 [ 554.800331][T22632] ? __pfx_sock_ioctl+0x10/0x10 [ 554.800353][T22632] ? hook_file_ioctl_common+0x146/0x410 [ 554.800377][T22632] ? selinux_file_ioctl+0x139/0x290 [ 554.800398][T22632] ? selinux_file_ioctl+0xb4/0x290 [ 554.800422][T22632] ? __pfx_sock_ioctl+0x10/0x10 [ 554.800447][T22632] __x64_sys_ioctl+0x18e/0x210 [ 554.800470][T22632] do_syscall_64+0x106/0xf80 [ 554.800489][T22632] ? clear_bhb_loop+0x40/0x90 [ 554.800510][T22632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.800527][T22632] RIP: 0033:0x7f3725f9bf79 [ 554.800541][T22632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.800556][T22632] RSP: 002b:00007f3726e4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 554.800573][T22632] RAX: ffffffffffffffda RBX: 00007f3726215fa0 RCX: 00007f3725f9bf79 [ 554.800584][T22632] RDX: 00002000000007c0 RSI: 00000000000089e2 RDI: 0000000000000004 [ 554.800594][T22632] RBP: 00007f3726e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 554.800604][T22632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.800613][T22632] R13: 00007f3726216038 R14: 00007f3726215fa0 R15: 00007ffd1675c838 [ 554.800637][T22632] [ 554.810482][T22634] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 554.877372][ T40] audit: type=1400 audit(524818.942:15786): avc: denied { create } for pid=22635 comm="syz.6.6149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 554.881165][T22634] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 554.962299][T22652] FAULT_INJECTION: forcing a failure. [ 554.962299][T22652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.966555][T22652] CPU: 2 UID: 0 PID: 22652 Comm: syz.9.6153 Tainted: G L syzkaller #0 PREEMPT(full) [ 554.966574][T22652] Tainted: [L]=SOFTLOCKUP [ 554.966578][T22652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 554.966585][T22652] Call Trace: [ 554.966590][T22652] [ 554.966595][T22652] dump_stack_lvl+0x100/0x190 [ 554.966617][T22652] should_fail_ex.cold+0x5/0xa [ 554.966632][T22652] _copy_to_user+0x32/0xd0 [ 554.966645][T22652] simple_read_from_buffer+0xcb/0x170 [ 554.966664][T22652] proc_fail_nth_read+0x1af/0x230 [ 554.966685][T22652] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 554.966705][T22652] ? rw_verify_area+0xce/0x6d0 [ 554.966719][T22652] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 554.966738][T22652] vfs_read+0x1e4/0xb30 [ 554.966755][T22652] ? __pfx_vfs_read+0x10/0x10 [ 554.966770][T22652] ? __fget_files+0x215/0x3d0 [ 554.966790][T22652] ? __fget_files+0x21f/0x3d0 [ 554.966811][T22652] ksys_read+0x12a/0x250 [ 554.966826][T22652] ? __pfx_ksys_read+0x10/0x10 [ 554.966846][T22652] do_syscall_64+0x106/0xf80 [ 554.966859][T22652] ? clear_bhb_loop+0x40/0x90 [ 554.966873][T22652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.966885][T22652] RIP: 0033:0x7f4f7135c84e [ 554.966895][T22652] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 554.966906][T22652] RSP: 002b:00007f4f72303fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 554.966918][T22652] RAX: ffffffffffffffda RBX: 00007f4f723046c0 RCX: 00007f4f7135c84e [ 554.966925][T22652] RDX: 000000000000000f RSI: 00007f4f723040a0 RDI: 0000000000000003 [ 554.966932][T22652] RBP: 00007f4f72304090 R08: 0000000000000000 R09: 0000000000000000 [ 554.966939][T22652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.966946][T22652] R13: 00007f4f71616038 R14: 00007f4f71615fa0 R15: 00007ffef46b3528 [ 554.966961][T22652] [ 555.092672][T22660] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6157'. [ 555.105506][T22660] netlink: 'syz.8.6157': attribute type 1 has an invalid length. [ 555.164843][T22669] overlayfs: missing 'workdir' [ 555.232350][T22676] FAULT_INJECTION: forcing a failure. [ 555.232350][T22676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.236995][T22676] CPU: 3 UID: 0 PID: 22676 Comm: syz.8.6165 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.237014][T22676] Tainted: [L]=SOFTLOCKUP [ 555.237018][T22676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 555.237025][T22676] Call Trace: [ 555.237041][T22676] [ 555.237046][T22676] dump_stack_lvl+0x100/0x190 [ 555.237077][T22676] should_fail_ex.cold+0x5/0xa [ 555.237092][T22676] _copy_from_user+0x2e/0xd0 [ 555.237112][T22676] kstrtouint_from_user+0xd6/0x1d0 [ 555.237128][T22676] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 555.237143][T22676] ? __lock_acquire+0x4a5/0x2630 [ 555.237163][T22676] ? lock_acquire+0x1cf/0x380 [ 555.237184][T22676] proc_fail_nth_write+0x83/0x220 [ 555.237202][T22676] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 555.237217][T22676] vfs_write+0x2aa/0x1070 [ 555.237233][T22676] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 555.237246][T22676] ? __pfx_vfs_write+0x10/0x10 [ 555.237261][T22676] ? __fget_files+0x215/0x3d0 [ 555.237282][T22676] ? __fget_files+0x21f/0x3d0 [ 555.237303][T22676] ksys_write+0x12a/0x250 [ 555.237318][T22676] ? __pfx_ksys_write+0x10/0x10 [ 555.237338][T22676] do_syscall_64+0x106/0xf80 [ 555.237360][T22676] ? clear_bhb_loop+0x40/0x90 [ 555.237374][T22676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.237386][T22676] RIP: 0033:0x7f9a59b5c84e [ 555.237396][T22676] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 555.237406][T22676] RSP: 002b:00007f9a5a98bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 555.237418][T22676] RAX: ffffffffffffffda RBX: 00007f9a5a98c6c0 RCX: 00007f9a59b5c84e [ 555.237425][T22676] RDX: 0000000000000001 RSI: 00007f9a5a98c0a0 RDI: 0000000000000003 [ 555.237432][T22676] RBP: 00007f9a5a98c090 R08: 0000000000000000 R09: 0000000000000000 [ 555.237439][T22676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.237445][T22676] R13: 00007f9a59e16038 R14: 00007f9a59e15fa0 R15: 00007ffc97a42ae8 [ 555.237460][T22676] [ 555.342369][ T63] Bluetooth: hci2: command tx timeout [ 555.373935][ T6125] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 555.400491][T22686] overlayfs: missing 'workdir' [ 555.458848][T22689] netlink: 'syz.9.6171': attribute type 15 has an invalid length. [ 555.512941][ T6125] usb 11-1: device descriptor read/64, error -71 [ 555.780321][ T6125] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 555.930056][ T6125] usb 11-1: device descriptor read/64, error -71 [ 555.952672][T22550] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 555.957444][T22550] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 555.962703][T22550] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 555.971686][T22550] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 556.031187][T22715] overlayfs: missing 'workdir' [ 556.040404][T22550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.051538][T22550] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.058169][T17718] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.058331][ T6125] usb usb11-port1: attempt power cycle [ 556.060688][T17718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.075466][T14475] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.078426][T14475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.110944][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 556.200473][T22550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.306272][T22742] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6186'. [ 556.338579][T22550] veth0_vlan: entered promiscuous mode [ 556.345577][T22550] veth1_vlan: entered promiscuous mode [ 556.361018][T22550] veth0_macvtap: entered promiscuous mode [ 556.364770][T22550] veth1_macvtap: entered promiscuous mode [ 556.382525][T22550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.387766][T22550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.394375][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.399598][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.405533][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.408330][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.432763][ T6125] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 556.439958][T22750] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6186'. [ 556.454592][ T6125] usb 11-1: device descriptor read/8, error -71 [ 556.742718][ T6125] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 556.765679][ T6125] usb 11-1: device descriptor read/8, error -71 [ 556.882192][ T6125] usb usb11-port1: unable to enumerate USB device [ 557.566421][ T63] Bluetooth: hci2: command tx timeout [ 558.421806][ T63] Bluetooth: hci1: command 0x0405 tx timeout [ 559.518060][T22742] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 559.555660][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.558235][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.575871][T22767] random: crng reseeded on system resumption [ 559.586678][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.590270][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.592003][T22769] nbd: couldn't find a device at index 15073280 [ 559.612218][ T40] audit: type=1400 audit(524823.355:15787): avc: denied { mounton } for pid=22550 comm="syz-executor" path="/syzkaller.tXSklT/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=106242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 559.629000][T22772] binder: 22770:22772 ioctl c0306201 200000000540 returned -14 [ 559.633828][T22771] binder: 22770:22771 ioctl c0306201 200000000640 returned -22 [ 559.791443][ T63] Bluetooth: hci2: command tx timeout [ 559.805798][T22795] FAULT_INJECTION: forcing a failure. [ 559.805798][T22795] name failslab, interval 1, probability 0, space 0, times 0 [ 559.810770][T22795] CPU: 1 UID: 0 PID: 22795 Comm: syz.9.6201 Tainted: G L syzkaller #0 PREEMPT(full) [ 559.810795][T22795] Tainted: [L]=SOFTLOCKUP [ 559.810803][T22795] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 559.810810][T22795] Call Trace: [ 559.810830][T22795] [ 559.810838][T22795] dump_stack_lvl+0x100/0x190 [ 559.810878][T22795] should_fail_ex.cold+0x5/0xa [ 559.810900][T22795] should_failslab+0xc2/0x120 [ 559.810920][T22795] __kmalloc_cache_noprof+0x7a/0x6f0 [ 559.810944][T22795] ? alloc_netdev_mqs+0xe01/0x14f0 [ 559.810978][T22795] alloc_netdev_mqs+0xe01/0x14f0 [ 559.811002][T22795] ieee80211_if_add+0x19c/0x1860 [ 559.811024][T22795] ? kmalloc_reserve+0xf9/0x350 [ 559.811049][T22795] ieee80211_add_iface+0xaf/0x5d0 [ 559.811070][T22795] ? __pfx_ieee80211_add_iface+0x10/0x10 [ 559.811090][T22795] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 559.811114][T22795] nl80211_new_interface+0x65f/0x11d0 [ 559.811136][T22795] ? __pfx_nl80211_new_interface+0x10/0x10 [ 559.811159][T22795] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 559.811175][T22795] ? nl80211_pre_doit+0x19a/0xae0 [ 559.811195][T22795] genl_family_rcv_msg_doit+0x214/0x300 [ 559.811219][T22795] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 559.811252][T22795] ? bpf_lsm_capable+0x9/0x10 [ 559.811275][T22795] ? security_capable+0x80/0x260 [ 559.811300][T22795] ? ns_capable+0xd2/0xf0 [ 559.811321][T22795] genl_rcv_msg+0x560/0x800 [ 559.811347][T22795] ? __pfx_genl_rcv_msg+0x10/0x10 [ 559.811370][T22795] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 559.811386][T22795] ? __pfx_nl80211_new_interface+0x10/0x10 [ 559.811401][T22795] ? __pfx_nl80211_post_doit+0x10/0x10 [ 559.811440][T22795] netlink_rcv_skb+0x159/0x420 [ 559.811463][T22795] ? __pfx_genl_rcv_msg+0x10/0x10 [ 559.811487][T22795] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 559.811514][T22795] ? netlink_deliver_tap+0x1ae/0xcc0 [ 559.811538][T22795] genl_rcv+0x28/0x40 [ 559.811558][T22795] netlink_unicast+0x5aa/0x870 [ 559.811583][T22795] ? __pfx_netlink_unicast+0x10/0x10 [ 559.811610][T22795] netlink_sendmsg+0x8b0/0xda0 [ 559.811634][T22795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.811653][T22795] ? __might_fault+0x20/0x140 [ 559.811682][T22795] ____sys_sendmsg+0xa54/0xc30 [ 559.811705][T22795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 559.811740][T22795] ___sys_sendmsg+0x190/0x1e0 [ 559.811765][T22795] ? __pfx____sys_sendmsg+0x10/0x10 [ 559.811803][T22795] __sys_sendmsg+0x170/0x220 [ 559.811817][T22795] ? __pfx___sys_sendmsg+0x10/0x10 [ 559.811842][T22795] do_syscall_64+0x106/0xf80 [ 559.811857][T22795] ? clear_bhb_loop+0x40/0x90 [ 559.811871][T22795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.811883][T22795] RIP: 0033:0x7f4f7139bf79 [ 559.811894][T22795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.811905][T22795] RSP: 002b:00007f4f72304028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.811917][T22795] RAX: ffffffffffffffda RBX: 00007f4f71615fa0 RCX: 00007f4f7139bf79 [ 559.811924][T22795] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 559.811936][T22795] RBP: 00007f4f72304090 R08: 0000000000000000 R09: 0000000000000000 [ 559.811944][T22795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 559.811950][T22795] R13: 00007f4f71616038 R14: 00007f4f71615fa0 R15: 00007ffef46b3528 [ 559.811966][T22795] [ 559.916904][ T40] audit: type=1400 audit(524823.645:15788): avc: denied { map } for pid=22798 comm="syz.9.6202" path="socket:[104911]" dev="sockfs" ino=104911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 559.926465][T22799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22799 comm=syz.9.6202 [ 560.177086][T22813] kvm: kvm [22812]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 560.181249][T22813] kvm: kvm [22812]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 560.228062][T22815] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(14) [ 560.230225][T22815] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 560.233125][T22815] vhci_hcd vhci_hcd.0: Device attached [ 560.267463][T22816] vhci_hcd: connection closed [ 560.267829][T17718] vhci_hcd vhci_hcd.9: stop threads [ 560.271830][T17718] vhci_hcd vhci_hcd.9: release socket [ 560.275301][T17718] vhci_hcd vhci_hcd.9: disconnect device [ 560.569043][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 560.574783][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 560.579797][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 560.584220][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 560.587593][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 560.646472][ T5941] Bluetooth: hci1: command 0x0405 tx timeout [ 560.746457][T22819] chnl_net:caif_netlink_parms(): no params data found [ 560.816817][T22819] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.819503][T22819] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.821954][T22819] bridge_slave_0: entered allmulticast mode [ 560.824810][T22819] bridge_slave_0: entered promiscuous mode [ 560.916337][T22819] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.918690][T22819] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.921046][T22819] bridge_slave_1: entered allmulticast mode [ 560.929910][T22819] bridge_slave_1: entered promiscuous mode [ 560.951446][T22844] FAULT_INJECTION: forcing a failure. [ 560.951446][T22844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.955220][T22819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.955479][T22844] CPU: 0 UID: 0 PID: 22844 Comm: syz.9.6217 Tainted: G L syzkaller #0 PREEMPT(full) [ 560.955497][T22844] Tainted: [L]=SOFTLOCKUP [ 560.955501][T22844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 560.955508][T22844] Call Trace: [ 560.955512][T22844] [ 560.955517][T22844] dump_stack_lvl+0x100/0x190 [ 560.955538][T22844] should_fail_ex.cold+0x5/0xa [ 560.955553][T22844] _copy_to_user+0x32/0xd0 [ 560.955567][T22844] simple_read_from_buffer+0xcb/0x170 [ 560.955585][T22844] proc_fail_nth_read+0x1af/0x230 [ 560.955605][T22844] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 560.955626][T22844] ? rw_verify_area+0xce/0x6d0 [ 560.955639][T22844] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 560.955658][T22844] vfs_read+0x1e4/0xb30 [ 560.955675][T22844] ? __pfx_vfs_read+0x10/0x10 [ 560.955690][T22844] ? __fget_files+0x215/0x3d0 [ 560.955710][T22844] ? __fget_files+0x21f/0x3d0 [ 560.955731][T22844] ksys_read+0x12a/0x250 [ 560.955748][T22844] ? __pfx_ksys_read+0x10/0x10 [ 560.955767][T22844] do_syscall_64+0x106/0xf80 [ 560.955780][T22844] ? clear_bhb_loop+0x40/0x90 [ 560.955794][T22844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.955806][T22844] RIP: 0033:0x7f4f7135c84e [ 560.955816][T22844] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 560.955828][T22844] RSP: 002b:00007f4f72303fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 560.955840][T22844] RAX: ffffffffffffffda RBX: 00007f4f723046c0 RCX: 00007f4f7135c84e [ 560.955847][T22844] RDX: 000000000000000f RSI: 00007f4f723040a0 RDI: 0000000000000003 [ 560.955853][T22844] RBP: 00007f4f72304090 R08: 0000000000000000 R09: 0000000000000000 [ 560.955860][T22844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.955866][T22844] R13: 00007f4f71616038 R14: 00007f4f71615fa0 R15: 00007ffef46b3528 [ 560.955881][T22844] [ 561.045873][T22819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.078514][T22819] team0: Port device team_slave_0 added [ 561.082848][T22819] team0: Port device team_slave_1 added [ 561.114574][T22819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.116834][T22819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.124869][T22819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.131890][T22819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.134100][T22819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.144162][T22819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.172284][T22819] hsr_slave_0: entered promiscuous mode [ 561.174612][T22819] hsr_slave_1: entered promiscuous mode [ 561.176718][T22819] debugfs: 'hsr0' already exists in 'hsr' [ 561.178576][T22819] Cannot create hsr debugfs directory [ 561.187201][T22849] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.6219'. [ 561.707417][ T12] bridge_slave_1: left allmulticast mode [ 561.709626][ T12] bridge_slave_1: left promiscuous mode [ 561.711720][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.722521][ T12] bridge_slave_0: left allmulticast mode [ 561.724388][ T12] bridge_slave_0: left promiscuous mode [ 561.727041][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.832225][ T40] audit: type=1400 audit(524825.440:15789): avc: denied { setattr } for pid=22876 comm="syz.5.6230" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 562.015501][ T5941] Bluetooth: hci2: command tx timeout [ 562.054940][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.059098][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.062903][ T12] bond0 (unregistering): Released all slaves [ 562.113370][T22819] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 562.119185][T22819] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 562.123906][T22819] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 562.129322][T22819] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 562.155213][ T12] tipc: Disabling bearer [ 562.157064][ T12] tipc: Disabling bearer [ 562.165292][ T12] tipc: Left network mode [ 562.187698][T22819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.197730][T22819] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.203187][ T40] audit: type=1400 audit(524825.786:15790): avc: denied { nlmsg_write } for pid=22902 comm="syz.9.6237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 562.204231][T14466] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.213161][T14466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.241788][T22905] support for the xor transformation has been removed. [ 562.269730][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.272285][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.403970][T22819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.448425][ T12] hsr_slave_0: left promiscuous mode [ 562.450738][ T12] hsr_slave_1: left promiscuous mode [ 562.452943][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.456065][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.619864][ T12] team0 (unregistering): Port device team_slave_1 removed [ 562.627736][ T12] team0 (unregistering): Port device team_slave_0 removed [ 562.787417][ T5941] Bluetooth: hci0: command tx timeout [ 562.794613][T22927] comedi comedi2: comedi_config --init_data is deprecated [ 562.797638][T22819] veth0_vlan: entered promiscuous mode [ 562.803538][T22819] veth1_vlan: entered promiscuous mode [ 562.813096][T22929] FAULT_INJECTION: forcing a failure. [ 562.813096][T22929] name failslab, interval 1, probability 0, space 0, times 0 [ 562.817154][T22929] CPU: 1 UID: 0 PID: 22929 Comm: syz.9.6246 Tainted: G L syzkaller #0 PREEMPT(full) [ 562.817172][T22929] Tainted: [L]=SOFTLOCKUP [ 562.817176][T22929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 562.817187][T22929] Call Trace: [ 562.817192][T22929] [ 562.817197][T22929] dump_stack_lvl+0x100/0x190 [ 562.817229][T22929] should_fail_ex.cold+0x5/0xa [ 562.817244][T22929] ? tomoyo_realpath_from_path+0xb6/0x690 [ 562.817270][T22929] should_failslab+0xc2/0x120 [ 562.817287][T22929] __kmalloc_noprof+0xe0/0x850 [ 562.817305][T22929] tomoyo_realpath_from_path+0xb6/0x690 [ 562.817326][T22929] tomoyo_path_number_perm+0x23c/0x580 [ 562.817341][T22929] ? tomoyo_path_number_perm+0x22e/0x580 [ 562.817357][T22929] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 562.817387][T22929] ? find_held_lock+0x2b/0x80 [ 562.817401][T22929] ? __fget_files+0x215/0x3d0 [ 562.817417][T22929] ? hook_file_ioctl_common+0x146/0x410 [ 562.817432][T22929] ? __fget_files+0x21f/0x3d0 [ 562.817464][T22929] security_file_ioctl+0xd3/0x230 [ 562.817482][T22929] __x64_sys_ioctl+0xb7/0x210 [ 562.817499][T22929] do_syscall_64+0x106/0xf80 [ 562.817522][T22929] ? clear_bhb_loop+0x40/0x90 [ 562.817537][T22929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.817549][T22929] RIP: 0033:0x7f4f7139bf79 [ 562.817558][T22929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.817569][T22929] RSP: 002b:00007f4f72304028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 562.817580][T22929] RAX: ffffffffffffffda RBX: 00007f4f71615fa0 RCX: 00007f4f7139bf79 [ 562.817587][T22929] RDX: 0000200000000000 RSI: 0000000040085618 RDI: 0000000000000003 [ 562.817594][T22929] RBP: 00007f4f72304090 R08: 0000000000000000 R09: 0000000000000000 [ 562.817600][T22929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.817607][T22929] R13: 00007f4f71616038 R14: 00007f4f71615fa0 R15: 00007ffef46b3528 [ 562.817622][T22929] [ 562.825084][T22819] veth0_macvtap: entered promiscuous mode [ 562.826166][T22929] ERROR: Out of memory at tomoyo_realpath_from_path. [ 562.828973][T22819] veth1_macvtap: entered promiscuous mode [ 562.894707][T22819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.901378][T22819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.903978][ T5941] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 562.917627][ T1145] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.920831][ T1145] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.926490][T22937] FAULT_INJECTION: forcing a failure. [ 562.926490][T22937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.931219][ T1145] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.935506][T22937] CPU: 1 UID: 0 PID: 22937 Comm: syz.6.6249 Tainted: G L syzkaller #0 PREEMPT(full) [ 562.935527][T22937] Tainted: [L]=SOFTLOCKUP [ 562.935531][T22937] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 562.935538][T22937] Call Trace: [ 562.935542][T22937] [ 562.935547][T22937] dump_stack_lvl+0x100/0x190 [ 562.935569][T22937] should_fail_ex.cold+0x5/0xa [ 562.935584][T22937] _copy_from_iter+0x1f4/0x1690 [ 562.935599][T22937] ? __asan_memset+0x23/0x50 [ 562.935613][T22937] ? __pfx__copy_from_iter+0x10/0x10 [ 562.935624][T22937] ? __pfx___alloc_skb+0x10/0x10 [ 562.935643][T22937] netlink_sendmsg+0x808/0xda0 [ 562.935661][T22937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 562.935675][T22937] ? __might_fault+0x20/0x140 [ 562.935694][T22937] ____sys_sendmsg+0xa54/0xc30 [ 562.935711][T22937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 562.935734][T22937] ___sys_sendmsg+0x190/0x1e0 [ 562.935754][T22937] ? __pfx____sys_sendmsg+0x10/0x10 [ 562.935788][T22937] __sys_sendmsg+0x170/0x220 [ 562.935801][T22937] ? __pfx___sys_sendmsg+0x10/0x10 [ 562.935823][T22937] do_syscall_64+0x106/0xf80 [ 562.935838][T22937] ? clear_bhb_loop+0x40/0x90 [ 562.935852][T22937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.935863][T22937] RIP: 0033:0x7f3725f9bf79 [ 562.935874][T22937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.935885][T22937] RSP: 002b:00007f3726e4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.935896][T22937] RAX: ffffffffffffffda RBX: 00007f3726215fa0 RCX: 00007f3725f9bf79 [ 562.935903][T22937] RDX: 0000000020040844 RSI: 0000200000000340 RDI: 0000000000000003 [ 562.935910][T22937] RBP: 00007f3726e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 562.935916][T22937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.935923][T22937] R13: 00007f3726216038 R14: 00007f3726215fa0 R15: 00007ffd1675c838 [ 562.935937][T22937] [ 562.952492][ T1145] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.123145][T14475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.124930][ T12] IPVS: stop unused estimator thread 0... [ 563.126230][T14475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.136643][T22949] IPv6: NLM_F_CREATE should be specified when creating new route [ 563.139419][T22949] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 563.141763][T22949] IPv6: NLM_F_CREATE should be set when creating new route [ 563.170228][T14466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.173399][T14466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.241242][T22961] netlink: 9 bytes leftover after parsing attributes in process `syz.8.6209'. [ 563.246223][T22961] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 563.261305][T22964] option changes via remount are deprecated (pid=22962 comm=syz.9.6257) [ 563.264787][T22964] cgroup: option or name mismatch, new: 0x0 "none", old: 0x0 "" [ 563.278437][ T40] audit: type=1400 audit(524826.787:15791): avc: denied { listen } for pid=22965 comm="syz.5.6259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 563.318800][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 563.333427][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 563.336342][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 563.345932][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 563.348485][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 563.476582][T22969] chnl_net:caif_netlink_parms(): no params data found [ 563.494314][T22982] FAULT_INJECTION: forcing a failure. [ 563.494314][T22982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.498392][T22982] CPU: 2 UID: 0 PID: 22982 Comm: syz.5.6263 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.498411][T22982] Tainted: [L]=SOFTLOCKUP [ 563.498415][T22982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 563.498422][T22982] Call Trace: [ 563.498426][T22982] [ 563.498431][T22982] dump_stack_lvl+0x100/0x190 [ 563.498453][T22982] should_fail_ex.cold+0x5/0xa [ 563.498469][T22982] _copy_from_user+0x2e/0xd0 [ 563.498483][T22982] kstrtouint_from_user+0xd6/0x1d0 [ 563.498499][T22982] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 563.498514][T22982] ? __lock_acquire+0x4a5/0x2630 [ 563.498534][T22982] ? lock_acquire+0x1cf/0x380 [ 563.498555][T22982] proc_fail_nth_write+0x83/0x220 [ 563.498568][T22982] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 563.498584][T22982] vfs_write+0x2aa/0x1070 [ 563.498600][T22982] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 563.498613][T22982] ? __pfx_vfs_write+0x10/0x10 [ 563.498628][T22982] ? __fget_files+0x215/0x3d0 [ 563.498649][T22982] ? __fget_files+0x21f/0x3d0 [ 563.498670][T22982] ksys_write+0x12a/0x250 [ 563.498686][T22982] ? __pfx_ksys_write+0x10/0x10 [ 563.498705][T22982] do_syscall_64+0x106/0xf80 [ 563.498719][T22982] ? clear_bhb_loop+0x40/0x90 [ 563.498734][T22982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.498746][T22982] RIP: 0033:0x7f909755c84e [ 563.498756][T22982] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 563.498767][T22982] RSP: 002b:00007f90983fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 563.498778][T22982] RAX: ffffffffffffffda RBX: 00007f90983ff6c0 RCX: 00007f909755c84e [ 563.498786][T22982] RDX: 0000000000000001 RSI: 00007f90983ff0a0 RDI: 0000000000000003 [ 563.498792][T22982] RBP: 00007f90983ff090 R08: 0000000000000000 R09: 0000000000000000 [ 563.498799][T22982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.498805][T22982] R13: 00007f9097816038 R14: 00007f9097815fa0 R15: 00007ffd2efe25e8 [ 563.498820][T22982] [ 563.605296][T22969] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.607597][T22969] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.610291][T22969] bridge_slave_0: entered allmulticast mode [ 563.613165][T22969] bridge_slave_0: entered promiscuous mode [ 563.616333][T22969] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.618667][T22969] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.622651][T22969] bridge_slave_1: entered allmulticast mode [ 563.625432][T22969] bridge_slave_1: entered promiscuous mode [ 563.672335][T22991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=22991 comm=syz.8.6266 [ 563.679787][T22969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.684526][T22969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.743129][T22969] team0: Port device team_slave_0 added [ 563.750972][T22969] team0: Port device team_slave_1 added [ 563.771772][T22969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.774048][T22969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.781484][T23001] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 563.782579][T22969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.788415][T22969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.790694][T22969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.798862][T22969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.824242][T22969] hsr_slave_0: entered promiscuous mode [ 563.826555][T22969] hsr_slave_1: entered promiscuous mode [ 563.828673][T22969] debugfs: 'hsr0' already exists in 'hsr' [ 563.835418][T22969] Cannot create hsr debugfs directory [ 564.249632][T22969] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.355108][T23017] random: crng reseeded on system resumption [ 564.355147][T22969] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.431797][T23023] netlink: 124 bytes leftover after parsing attributes in process `syz.8.6280'. [ 564.492633][T22969] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.499985][T23030] netlink: 'syz.9.6283': attribute type 2 has an invalid length. [ 564.557569][T23038] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6287'. [ 564.560968][T23038] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6287'. [ 564.599186][T22969] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.620248][T23044] netlink: 124 bytes leftover after parsing attributes in process `syz.8.6290'. [ 564.636103][T23046] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 564.639176][T23046] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 564.758239][T22969] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 564.763011][T22969] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 564.763213][T23033] xt_hashlimit: max too large, truncated to 1048576 [ 564.769998][T22969] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 564.775107][T22969] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 564.813348][T23062] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 564.821851][T22969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.824626][ T40] audit: type=1400 audit(524828.236:15792): avc: denied { remount } for pid=23061 comm="syz.9.6295" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 564.829241][T22969] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.835954][T17718] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.838311][T17718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.844784][T17720] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.847221][T17720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.970648][T22969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.105312][T22969] veth0_vlan: entered promiscuous mode [ 565.111573][T22969] veth1_vlan: entered promiscuous mode [ 565.126025][T22969] veth0_macvtap: entered promiscuous mode [ 565.133218][T22969] veth1_macvtap: entered promiscuous mode [ 565.141501][T22969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.147207][T22969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.156751][T17720] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.159477][T17720] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.163352][T17720] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.168205][T17720] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.186531][T23079] tipc: Started in network mode [ 565.188131][T23079] tipc: Node identity ac1414aa, cluster identity 4711 [ 565.193256][T23079] tipc: Enabled bearer , priority 10 [ 565.211770][T17718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.214419][T17718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.232351][T17720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.235628][T17720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.258943][T23083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.272509][T23085] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6258'. [ 565.291269][ T40] audit: type=1400 audit(524828.675:15793): avc: denied { getopt } for pid=23086 comm="syz.8.6300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 565.339855][ T40] audit: type=1326 audit(524828.722:15794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23090 comm="syz.6.6302" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7faf77995d97 code=0x0 [ 565.347837][T23093] FAULT_INJECTION: forcing a failure. [ 565.347837][T23093] name failslab, interval 1, probability 0, space 0, times 0 [ 565.351809][T23093] CPU: 3 UID: 0 PID: 23093 Comm: syz.5.6303 Tainted: G L syzkaller #0 PREEMPT(full) [ 565.351828][T23093] Tainted: [L]=SOFTLOCKUP [ 565.351832][T23093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 565.351840][T23093] Call Trace: [ 565.351845][T23093] [ 565.351850][T23093] dump_stack_lvl+0x100/0x190 [ 565.351872][T23093] should_fail_ex.cold+0x5/0xa [ 565.351887][T23093] should_failslab+0xc2/0x120 [ 565.351918][T23093] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 565.351932][T23093] ? skb_clone+0x190/0x400 [ 565.351948][T23093] skb_clone+0x190/0x400 [ 565.351962][T23093] netlink_deliver_tap+0xaed/0xcc0 [ 565.351979][T23093] netlink_unicast+0x650/0x870 [ 565.351997][T23093] ? __pfx_netlink_unicast+0x10/0x10 [ 565.352018][T23093] netlink_sendmsg+0x8b0/0xda0 [ 565.352035][T23093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.352049][T23093] ? __might_fault+0x20/0x140 [ 565.352068][T23093] ____sys_sendmsg+0xa54/0xc30 [ 565.352086][T23093] ? __pfx_____sys_sendmsg+0x10/0x10 [ 565.352110][T23093] ___sys_sendmsg+0x190/0x1e0 [ 565.352128][T23093] ? __pfx____sys_sendmsg+0x10/0x10 [ 565.352175][T23093] __sys_sendmsg+0x170/0x220 [ 565.352189][T23093] ? __pfx___sys_sendmsg+0x10/0x10 [ 565.352212][T23093] do_syscall_64+0x106/0xf80 [ 565.352226][T23093] ? clear_bhb_loop+0x40/0x90 [ 565.352240][T23093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.352252][T23093] RIP: 0033:0x7f909759bf79 [ 565.352263][T23093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.352274][T23093] RSP: 002b:00007f90983ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 565.352286][T23093] RAX: ffffffffffffffda RBX: 00007f9097815fa0 RCX: 00007f909759bf79 [ 565.352294][T23093] RDX: 0000000020040844 RSI: 0000200000000340 RDI: 0000000000000003 [ 565.352300][T23093] RBP: 00007f90983ff090 R08: 0000000000000000 R09: 0000000000000000 [ 565.352307][T23093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.352314][T23093] R13: 00007f9097816038 R14: 00007f9097815fa0 R15: 00007ffd2efe25e8 [ 565.352329][T23093] [ 565.422569][T23093] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 565.464354][T23096] XFS (nbd5): SB validate failed with error -5. [ 565.527773][ T5941] Bluetooth: hci3: command tx timeout [ 565.585785][ T40] audit: type=1400 audit(524828.947:15795): avc: denied { read } for pid=23105 comm="syz.8.6306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 565.603229][ T40] audit: type=1400 audit(524828.965:15796): avc: denied { accept } for pid=23095 comm="syz.5.6304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 565.670742][T23111] netlink: 124 bytes leftover after parsing attributes in process `syz.5.6308'. [ 565.698816][T23113] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 565.743137][T23119] netlink: 9 bytes leftover after parsing attributes in process `syz.9.6311'. [ 565.750653][T23119] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 565.787933][T23116] could not allocate digest TFM handle hmac(sha256-neon) [ 566.031392][T23143] random: crng reseeded on system resumption [ 566.040626][T23143] netlink: 'syz.5.6318': attribute type 3 has an invalid length. [ 566.043413][T23143] netlink: 'syz.5.6318': attribute type 3 has an invalid length. [ 566.047192][T23144] netlink: 'syz.5.6318': attribute type 3 has an invalid length. [ 566.050799][T23144] netlink: 'syz.5.6318': attribute type 3 has an invalid length. [ 566.257152][ T40] audit: type=1400 audit(524829.582:15797): avc: denied { accept } for pid=23149 comm="syz.6.6320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 566.401905][ T5976] tipc: Node number set to 2886997162 [ 566.572883][T23166] netlink: 'syz.8.6327': attribute type 8 has an invalid length. [ 566.684125][T23168] random: crng reseeded on system resumption [ 566.825141][T23178] program syz.9.6333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 566.970177][T23195] FAULT_INJECTION: forcing a failure. [ 566.970177][T23195] name failslab, interval 1, probability 0, space 0, times 0 [ 566.974182][T23195] CPU: 0 UID: 0 PID: 23195 Comm: syz.8.6341 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.974200][T23195] Tainted: [L]=SOFTLOCKUP [ 566.974205][T23195] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 566.974212][T23195] Call Trace: [ 566.974216][T23195] [ 566.974222][T23195] dump_stack_lvl+0x100/0x190 [ 566.974243][T23195] should_fail_ex.cold+0x5/0xa [ 566.974259][T23195] should_failslab+0xc2/0x120 [ 566.974276][T23195] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 566.974292][T23195] ? setup_mq_sysctls+0x5d/0x240 [ 566.974311][T23195] kmemdup_noprof+0x29/0x60 [ 566.974327][T23195] setup_mq_sysctls+0x5d/0x240 [ 566.974342][T23195] ? mq_init_ns+0x4de/0x820 [ 566.974358][T23195] copy_ipcs+0x524/0x7e0 [ 566.974374][T23195] create_new_namespaces+0x20a/0xac0 [ 566.974390][T23195] ? security_capable+0x80/0x260 [ 566.974406][T23195] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 566.974423][T23195] ksys_unshare+0x455/0xab0 [ 566.974440][T23195] ? __pfx_ksys_unshare+0x10/0x10 [ 566.974455][T23195] ? ksys_write+0x1ac/0x250 [ 566.974475][T23195] __x64_sys_unshare+0x31/0x40 [ 566.974491][T23195] do_syscall_64+0x106/0xf80 [ 566.974504][T23195] ? clear_bhb_loop+0x40/0x90 [ 566.974518][T23195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.974529][T23195] RIP: 0033:0x7fe8dd99bf79 [ 566.974539][T23195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.974550][T23195] RSP: 002b:00007fe8de782028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 566.974561][T23195] RAX: ffffffffffffffda RBX: 00007fe8ddc15fa0 RCX: 00007fe8dd99bf79 [ 566.974568][T23195] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 566.974574][T23195] RBP: 00007fe8de782090 R08: 0000000000000000 R09: 0000000000000000 [ 566.974581][T23195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 566.974588][T23195] R13: 00007fe8ddc16038 R14: 00007fe8ddc15fa0 R15: 00007ffcf6c3cd88 [ 566.974602][T23195] [ 567.084812][T17718] wlan1: IBSS 50:50:50:50:50:50 switches to unsupported channel (2484 MHz, width:0, CF1/2: 2484/0 MHz), disconnecting [ 567.092719][T14463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.095175][T14463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.462943][T23222] openvswitch: netlink: Missing valid actions attribute. [ 567.465260][T23222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.662732][ T5941] Bluetooth: hci0: command tx timeout [ 567.848802][T23238] FAULT_INJECTION: forcing a failure. [ 567.848802][T23238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.853097][T23238] CPU: 1 UID: 0 PID: 23238 Comm: syz.6.6358 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.853115][T23238] Tainted: [L]=SOFTLOCKUP [ 567.853120][T23238] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 567.853126][T23238] Call Trace: [ 567.853132][T23238] [ 567.853137][T23238] dump_stack_lvl+0x100/0x190 [ 567.853163][T23238] should_fail_ex.cold+0x5/0xa [ 567.853178][T23238] _copy_from_user+0x2e/0xd0 [ 567.853192][T23238] video_usercopy+0xe71/0x1740 [ 567.853207][T23238] ? __pfx___video_do_ioctl+0x10/0x10 [ 567.853221][T23238] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 567.853240][T23238] ? __pfx_video_usercopy+0x10/0x10 [ 567.853263][T23238] v4l2_ioctl+0x1bd/0x250 [ 567.853277][T23238] ? __pfx_v4l2_ioctl+0x10/0x10 [ 567.853292][T23238] __x64_sys_ioctl+0x18e/0x210 [ 567.853308][T23238] do_syscall_64+0x106/0xf80 [ 567.853322][T23238] ? clear_bhb_loop+0x40/0x90 [ 567.853337][T23238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.853348][T23238] RIP: 0033:0x7faf7799bf79 [ 567.853358][T23238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.853369][T23238] RSP: 002b:00007faf78789028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 567.853380][T23238] RAX: ffffffffffffffda RBX: 00007faf77c15fa0 RCX: 00007faf7799bf79 [ 567.853387][T23238] RDX: 0000200000000000 RSI: 0000000040085618 RDI: 0000000000000003 [ 567.853394][T23238] RBP: 00007faf78789090 R08: 0000000000000000 R09: 0000000000000000 [ 567.853401][T23238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.853407][T23238] R13: 00007faf77c16038 R14: 00007faf77c15fa0 R15: 00007ffc4463d8f8 [ 567.853421][T23238] [ 567.965662][T23242] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6360'. [ 568.056964][T23258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23258 comm=syz.6.6367 [ 568.071678][T23252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.075517][T23252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.098884][T23260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=23260 comm=syz.9.6368 [ 568.182313][ T40] audit: type=1400 audit(524831.378:15798): avc: denied { mount } for pid=23268 comm="syz.5.6371" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 568.319312][T23284] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 568.322060][T23284] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 569.074303][ T29] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 569.159879][ T6125] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 569.235887][ T29] usb 13-1: config index 0 descriptor too short (expected 23569, got 27) [ 569.238737][ T29] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.242628][ T29] usb 13-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 569.245827][ T29] usb 13-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 569.248351][ T29] usb 13-1: Manufacturer: syz [ 569.251253][ T29] usb 13-1: config 0 descriptor?? [ 569.315530][ T29] rc_core: IR keymap rc-hauppauge not found [ 569.317995][ T29] Registered IR keymap rc-empty [ 569.321419][ T29] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0 [ 569.332121][ T29] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input95 [ 569.343302][ T6125] usb 10-1: too many endpoints for config 0 interface 0 altsetting 254: 254, using maximum allowed: 30 [ 569.346847][ T6125] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.350289][ T6125] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 569.354666][ T6125] usb 10-1: config 0 interface 0 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 569.359145][ T6125] usb 10-1: config 0 interface 0 has no altsetting 0 [ 569.361342][ T6125] usb 10-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.00 [ 569.365014][ T6125] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.372758][ T6125] usb 10-1: config 0 descriptor?? [ 569.375454][T23309] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 569.451343][ T40] audit: type=1400 audit(524832.565:15799): avc: denied { shutdown } for pid=23323 comm="syz.6.6385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 569.470994][ T5997] usb 13-1: USB disconnect, device number 10 [ 569.702305][ T6125] usb 10-1: string descriptor 0 read error: -71 [ 569.707556][ T6125] usbhid 10-1:0.0: can't add hid device: -71 [ 569.709961][ T6125] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 569.716702][ T6125] usb 10-1: USB disconnect, device number 9 [ 569.781565][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 569.887235][ T63] Bluetooth: hci3: command tx timeout [ 570.020479][T23344] IPv6: NLM_F_CREATE should be specified when creating new route [ 570.023409][T23344] FAULT_INJECTION: forcing a failure. [ 570.023409][T23344] name failslab, interval 1, probability 0, space 0, times 0 [ 570.028180][T23344] CPU: 2 UID: 0 PID: 23344 Comm: syz.9.6392 Tainted: G L syzkaller #0 PREEMPT(full) [ 570.028198][T23344] Tainted: [L]=SOFTLOCKUP [ 570.028202][T23344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 570.028209][T23344] Call Trace: [ 570.028213][T23344] [ 570.028218][T23344] dump_stack_lvl+0x100/0x190 [ 570.028240][T23344] should_fail_ex.cold+0x5/0xa [ 570.028255][T23344] ? fib6_info_alloc+0x40/0x160 [ 570.028268][T23344] should_failslab+0xc2/0x120 [ 570.028285][T23344] __kmalloc_noprof+0xe0/0x850 [ 570.028299][T23344] ? fib6_new_table+0x476/0x580 [ 570.028311][T23344] ? __local_bh_enable_ip+0x9e/0x120 [ 570.028328][T23344] fib6_info_alloc+0x40/0x160 [ 570.028342][T23344] ip6_route_info_create+0x14c/0xad0 [ 570.028359][T23344] ip6_route_multipath_add+0x3cf/0x1ba0 [ 570.028377][T23344] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 570.028400][T23344] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 570.028417][T23344] ? inet6_rtm_newroute+0xf5/0x160 [ 570.028429][T23344] inet6_rtm_newroute+0xf5/0x160 [ 570.028440][T23344] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 570.028452][T23344] ? __lock_acquire+0x4a5/0x2630 [ 570.028477][T23344] ? find_held_lock+0x2b/0x80 [ 570.028491][T23344] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 570.028504][T23344] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 570.028518][T23344] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 570.028531][T23344] rtnetlink_rcv_msg+0x95e/0xe90 [ 570.028545][T23344] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 570.028563][T23344] ? ref_tracker_free+0x37e/0x6c0 [ 570.028578][T23344] netlink_rcv_skb+0x159/0x420 [ 570.028593][T23344] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 570.028607][T23344] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 570.028627][T23344] ? netlink_deliver_tap+0x1ae/0xcc0 [ 570.028644][T23344] netlink_unicast+0x5aa/0x870 [ 570.028661][T23344] ? __pfx_netlink_unicast+0x10/0x10 [ 570.028681][T23344] netlink_sendmsg+0x8b0/0xda0 [ 570.028698][T23344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 570.028712][T23344] ? __might_fault+0x20/0x140 [ 570.028734][T23344] ____sys_sendmsg+0xa54/0xc30 [ 570.028759][T23344] ? __pfx_____sys_sendmsg+0x10/0x10 [ 570.028782][T23344] ___sys_sendmsg+0x190/0x1e0 [ 570.028800][T23344] ? __pfx____sys_sendmsg+0x10/0x10 [ 570.028859][T23344] __sys_sendmsg+0x170/0x220 [ 570.028879][T23344] ? __pfx___sys_sendmsg+0x10/0x10 [ 570.028906][T23344] do_syscall_64+0x106/0xf80 [ 570.028919][T23344] ? clear_bhb_loop+0x40/0x90 [ 570.028933][T23344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.028945][T23344] RIP: 0033:0x7f4f7139bf79 [ 570.028956][T23344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.028967][T23344] RSP: 002b:00007f4f72304028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 570.028978][T23344] RAX: ffffffffffffffda RBX: 00007f4f71615fa0 RCX: 00007f4f7139bf79 [ 570.028985][T23344] RDX: 0000000020040844 RSI: 0000200000000340 RDI: 0000000000000003 [ 570.028993][T23344] RBP: 00007f4f72304090 R08: 0000000000000000 R09: 0000000000000000 [ 570.028999][T23344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.029006][T23344] R13: 00007f4f71616038 R14: 00007f4f71615fa0 R15: 00007ffef46b3528 [ 570.029021][T23344] [ 570.200745][T23352] afs: Unknown parameter 'dyn˙' [ 570.203100][T23352] overlayfs: overlapping lowerdir path [ 570.403774][T23358] 9p: Could not find request transport: vxtend [ 570.496809][T23377] netlink: 'syz.6.6406': attribute type 21 has an invalid length. [ 570.497820][T23375] FAULT_INJECTION: forcing a failure. [ 570.497820][T23375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.499349][T23377] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6406'. [ 570.503323][T23375] CPU: 3 UID: 0 PID: 23375 Comm: syz.5.6405 Tainted: G L syzkaller #0 PREEMPT(full) [ 570.503341][T23375] Tainted: [L]=SOFTLOCKUP [ 570.503345][T23375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 570.503352][T23375] Call Trace: [ 570.503356][T23375] [ 570.503361][T23375] dump_stack_lvl+0x100/0x190 [ 570.503382][T23375] should_fail_ex.cold+0x5/0xa [ 570.503398][T23375] strncpy_from_user+0x3b/0x2d0 [ 570.503410][T23375] ? get_pid_task+0x106/0x250 [ 570.503429][T23375] path_setxattrat+0x127/0x3b0 [ 570.503448][T23375] ? __pfx_path_setxattrat+0x10/0x10 [ 570.503467][T23375] ? find_held_lock+0x2b/0x80 [ 570.503482][T23375] ? ksys_write+0x190/0x250 [ 570.503508][T23375] ? fput+0x79/0x100 [ 570.503519][T23375] ? ksys_write+0x1ac/0x250 [ 570.503534][T23375] ? __pfx_ksys_write+0x10/0x10 [ 570.503551][T23375] __x64_sys_lsetxattr+0xc9/0x140 [ 570.503562][T23375] ? do_syscall_64+0x95/0xf80 [ 570.503576][T23375] ? lockdep_hardirqs_on+0x78/0x100 [ 570.503590][T23375] do_syscall_64+0x106/0xf80 [ 570.503603][T23375] ? clear_bhb_loop+0x40/0x90 [ 570.503617][T23375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.503628][T23375] RIP: 0033:0x7f909759bf79 [ 570.503638][T23375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.503648][T23375] RSP: 002b:00007f90983ff028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 570.503659][T23375] RAX: ffffffffffffffda RBX: 00007f9097815fa0 RCX: 00007f909759bf79 [ 570.503667][T23375] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000200000000000 [ 570.503673][T23375] RBP: 00007f90983ff090 R08: 0000000000000001 R09: 0000000000000000 [ 570.503680][T23375] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000001 [ 570.503686][T23375] R13: 00007f9097816038 R14: 00007f9097815fa0 R15: 00007ffd2efe25e8 [ 570.503701][T23375] [ 570.557141][T23382] netlink: 'syz.6.6406': attribute type 21 has an invalid length. [ 570.563239][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 570.576204][T23382] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6406'. [ 570.584706][T23377] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6406'. [ 570.671786][T23395] random: crng reseeded on system resumption [ 570.747694][T23406] netlink: 'syz.9.6417': attribute type 21 has an invalid length. [ 570.850258][T23411] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6416'. [ 570.853375][T23411] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6416'. [ 570.890767][ T63] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 570.971293][T23419] FAULT_INJECTION: forcing a failure. [ 570.971293][T23419] name failslab, interval 1, probability 0, space 0, times 0 [ 570.975364][T23419] CPU: 2 UID: 0 PID: 23419 Comm: syz.6.6422 Tainted: G L syzkaller #0 PREEMPT(full) [ 570.975382][T23419] Tainted: [L]=SOFTLOCKUP [ 570.975387][T23419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 570.975393][T23419] Call Trace: [ 570.975399][T23419] [ 570.975404][T23419] dump_stack_lvl+0x100/0x190 [ 570.975426][T23419] should_fail_ex.cold+0x5/0xa [ 570.975441][T23419] ? __register_sysctl_table+0xbe4/0x1650 [ 570.975457][T23419] should_failslab+0xc2/0x120 [ 570.975474][T23419] __kmalloc_noprof+0xe0/0x850 [ 570.975492][T23419] __register_sysctl_table+0xbe4/0x1650 [ 570.975511][T23419] ? __pfx___register_sysctl_table+0x10/0x10 [ 570.975529][T23419] ? __asan_memcpy+0x3c/0x60 [ 570.975544][T23419] setup_mq_sysctls+0x124/0x240 [ 570.975562][T23419] copy_ipcs+0x524/0x7e0 [ 570.975579][T23419] create_new_namespaces+0x20a/0xac0 [ 570.975594][T23419] ? security_capable+0x80/0x260 [ 570.975610][T23419] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 570.975626][T23419] ksys_unshare+0x455/0xab0 [ 570.975644][T23419] ? __pfx_ksys_unshare+0x10/0x10 [ 570.975659][T23419] ? ksys_write+0x1ac/0x250 [ 570.975679][T23419] __x64_sys_unshare+0x31/0x40 [ 570.975695][T23419] do_syscall_64+0x106/0xf80 [ 570.975709][T23419] ? clear_bhb_loop+0x40/0x90 [ 570.975723][T23419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.975735][T23419] RIP: 0033:0x7faf7799bf79 [ 570.975744][T23419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.975755][T23419] RSP: 002b:00007faf78789028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 570.975771][T23419] RAX: ffffffffffffffda RBX: 00007faf77c15fa0 RCX: 00007faf7799bf79 [ 570.975778][T23419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 570.975785][T23419] RBP: 00007faf78789090 R08: 0000000000000000 R09: 0000000000000000 [ 570.975791][T23419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 570.975798][T23419] R13: 00007faf77c16038 R14: 00007faf77c15fa0 R15: 00007ffc4463d8f8 [ 570.975812][T23419] [ 570.975818][T23419] sysctl could not get directory: /fs -12 [ 571.083688][T23422] bridge1: entered promiscuous mode [ 571.086510][T23422] bridge1: entered allmulticast mode [ 571.089897][T23422] team0: Port device bridge1 added [ 571.091918][T23423] bridge0: port 3(team0) entered blocking state [ 571.094187][T23423] bridge0: port 3(team0) entered disabled state [ 571.096992][T23423] team0: entered allmulticast mode [ 571.098657][T23423] team_slave_0: entered allmulticast mode [ 571.100511][T23423] team_slave_1: entered allmulticast mode [ 571.103572][T23423] team0: entered promiscuous mode [ 571.105261][T23423] team_slave_0: entered promiscuous mode [ 571.107528][T23423] team_slave_1: entered promiscuous mode [ 571.110056][T23423] bridge0: port 3(team0) entered blocking state [ 571.112847][T23423] bridge0: port 3(team0) entered forwarding state [ 571.739123][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 571.778993][T23434] tmpfs: Bad value for 'mpol' [ 571.784443][T23434] batman_adv: batadv0: Adding interface: dummy0 [ 571.787003][T23434] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.799903][T23434] batman_adv: batadv0: Interface activated: dummy0 [ 571.826893][T23447] netlink: 9 bytes leftover after parsing attributes in process `syz.9.6433'. [ 571.836591][T23447] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 571.883876][T23451] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 571.977857][T23456] IPv6: NLM_F_CREATE should be specified when creating new route [ 571.980406][T23456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 571.982716][T23456] IPv6: NLM_F_CREATE should be set when creating new route [ 572.218545][T23461] kvm: kvm [23460]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x7 [ 572.305410][T23467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 572.307743][T23467] FAULT_INJECTION: forcing a failure. [ 572.307743][T23467] name failslab, interval 1, probability 0, space 0, times 0 [ 572.311571][T23467] CPU: 1 UID: 0 PID: 23467 Comm: syz.5.6441 Tainted: G L syzkaller #0 PREEMPT(full) [ 572.311590][T23467] Tainted: [L]=SOFTLOCKUP [ 572.311595][T23467] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 572.311619][T23467] Call Trace: [ 572.311626][T23467] [ 572.311633][T23467] dump_stack_lvl+0x100/0x190 [ 572.311662][T23467] should_fail_ex.cold+0x5/0xa [ 572.311680][T23467] should_failslab+0xc2/0x120 [ 572.311697][T23467] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 572.311711][T23467] ? skb_clone+0x190/0x400 [ 572.311726][T23467] skb_clone+0x190/0x400 [ 572.311740][T23467] netlink_deliver_tap+0xaed/0xcc0 [ 572.311757][T23467] netlink_unicast+0x70c/0x870 [ 572.311775][T23467] ? __pfx_netlink_unicast+0x10/0x10 [ 572.311789][T23467] ? __alloc_skb+0x5b7/0x710 [ 572.311805][T23467] netlink_ack+0x655/0xb80 [ 572.311824][T23467] netlink_rcv_skb+0x333/0x420 [ 572.311839][T23467] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 572.311855][T23467] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 572.311880][T23467] ? netlink_deliver_tap+0x1ae/0xcc0 [ 572.311897][T23467] netlink_unicast+0x5aa/0x870 [ 572.311914][T23467] ? __pfx_netlink_unicast+0x10/0x10 [ 572.311934][T23467] netlink_sendmsg+0x8b0/0xda0 [ 572.311952][T23467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.311966][T23467] ? __might_fault+0x20/0x140 [ 572.311984][T23467] ____sys_sendmsg+0xa54/0xc30 [ 572.312002][T23467] ? __pfx_____sys_sendmsg+0x10/0x10 [ 572.312026][T23467] ___sys_sendmsg+0x190/0x1e0 [ 572.312044][T23467] ? __pfx____sys_sendmsg+0x10/0x10 [ 572.312079][T23467] __sys_sendmsg+0x170/0x220 [ 572.312092][T23467] ? __pfx___sys_sendmsg+0x10/0x10 [ 572.312115][T23467] do_syscall_64+0x106/0xf80 [ 572.312129][T23467] ? clear_bhb_loop+0x40/0x90 [ 572.312143][T23467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.312155][T23467] RIP: 0033:0x7f909759bf79 [ 572.312165][T23467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.312176][T23467] RSP: 002b:00007f90983ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.312188][T23467] RAX: ffffffffffffffda RBX: 00007f9097815fa0 RCX: 00007f909759bf79 [ 572.312195][T23467] RDX: 0000000020040844 RSI: 0000200000000340 RDI: 0000000000000003 [ 572.312202][T23467] RBP: 00007f90983ff090 R08: 0000000000000000 R09: 0000000000000000 [ 572.312208][T23467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.312215][T23467] R13: 00007f9097816038 R14: 00007f9097815fa0 R15: 00007ffd2efe25e8 [ 572.312230][T23467] [ 572.451017][T23471] FAULT_INJECTION: forcing a failure. [ 572.451017][T23471] name failslab, interval 1, probability 0, space 0, times 0 [ 572.458533][T23471] CPU: 2 UID: 0 PID: 23471 Comm: syz.6.6443 Tainted: G L syzkaller #0 PREEMPT(full) [ 572.458562][T23471] Tainted: [L]=SOFTLOCKUP [ 572.458568][T23471] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 572.458579][T23471] Call Trace: [ 572.458585][T23471] [ 572.458592][T23471] dump_stack_lvl+0x100/0x190 [ 572.458625][T23471] should_fail_ex.cold+0x5/0xa [ 572.458648][T23471] should_failslab+0xc2/0x120 [ 572.458673][T23471] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 572.458695][T23471] ? __alloc_skb+0x140/0x710 [ 572.458718][T23471] __alloc_skb+0x140/0x710 [ 572.458734][T23471] ? __alloc_skb+0x5b7/0x710 [ 572.458751][T23471] ? __pfx___alloc_skb+0x10/0x10 [ 572.458775][T23471] netlink_alloc_large_skb+0x69/0x150 [ 572.458799][T23471] netlink_sendmsg+0x680/0xda0 [ 572.458825][T23471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.458846][T23471] ? __might_fault+0x20/0x140 [ 572.458876][T23471] ____sys_sendmsg+0xa54/0xc30 [ 572.458903][T23471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 572.458939][T23471] ___sys_sendmsg+0x190/0x1e0 [ 572.458966][T23471] ? __pfx____sys_sendmsg+0x10/0x10 [ 572.459022][T23471] __sys_sendmsg+0x170/0x220 [ 572.459049][T23471] ? __pfx___sys_sendmsg+0x10/0x10 [ 572.459084][T23471] do_syscall_64+0x106/0xf80 [ 572.459105][T23471] ? clear_bhb_loop+0x40/0x90 [ 572.459127][T23471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.459144][T23471] RIP: 0033:0x7faf7799bf79 [ 572.459159][T23471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.459175][T23471] RSP: 002b:00007faf78789028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.459193][T23471] RAX: ffffffffffffffda RBX: 00007faf77c15fa0 RCX: 00007faf7799bf79 [ 572.459205][T23471] RDX: 0000000000000030 RSI: 0000200000000100 RDI: 0000000000000003 [ 572.459215][T23471] RBP: 00007faf78789090 R08: 0000000000000000 R09: 0000000000000000 [ 572.459225][T23471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.459235][T23471] R13: 00007faf77c16038 R14: 00007faf77c15fa0 R15: 00007ffc4463d8f8 [ 572.459260][T23471] [ 572.571045][T23479] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6447'. [ 572.602966][T23481] random: crng reseeded on system resumption [ 572.858601][T23497] FAULT_INJECTION: forcing a failure. [ 572.858601][T23497] name failslab, interval 1, probability 0, space 0, times 0 [ 572.862766][T23497] CPU: 1 UID: 0 PID: 23497 Comm: syz.9.6453 Tainted: G L syzkaller #0 PREEMPT(full) [ 572.862785][T23497] Tainted: [L]=SOFTLOCKUP [ 572.862789][T23497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 572.862796][T23497] Call Trace: [ 572.862800][T23497] [ 572.862805][T23497] dump_stack_lvl+0x100/0x190 [ 572.862827][T23497] should_fail_ex.cold+0x5/0xa [ 572.862842][T23497] ? __register_sysctl_table+0xbe4/0x1650 [ 572.862858][T23497] should_failslab+0xc2/0x120 [ 572.862880][T23497] __kmalloc_noprof+0xe0/0x850 [ 572.862897][T23497] __register_sysctl_table+0xbe4/0x1650 [ 572.862916][T23497] ? __pfx___register_sysctl_table+0x10/0x10 [ 572.862936][T23497] ? __asan_memcpy+0x3c/0x60 [ 572.862951][T23497] setup_mq_sysctls+0x124/0x240 [ 572.862970][T23497] copy_ipcs+0x524/0x7e0 [ 572.862986][T23497] create_new_namespaces+0x20a/0xac0 [ 572.863005][T23497] ? security_capable+0x80/0x260 [ 572.863026][T23497] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 572.863050][T23497] ksys_unshare+0x455/0xab0 [ 572.863074][T23497] ? __pfx_ksys_unshare+0x10/0x10 [ 572.863094][T23497] ? ksys_write+0x1ac/0x250 [ 572.863125][T23497] __x64_sys_unshare+0x31/0x40 [ 572.863147][T23497] do_syscall_64+0x106/0xf80 [ 572.863162][T23497] ? clear_bhb_loop+0x40/0x90 [ 572.863176][T23497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.863188][T23497] RIP: 0033:0x7f4f7139bf79 [ 572.863199][T23497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.863210][T23497] RSP: 002b:00007f4f72304028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 572.863222][T23497] RAX: ffffffffffffffda RBX: 00007f4f71615fa0 RCX: 00007f4f7139bf79 [ 572.863229][T23497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 572.863235][T23497] RBP: 00007f4f72304090 R08: 0000000000000000 R09: 0000000000000000 [ 572.863245][T23497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 572.863254][T23497] R13: 00007f4f71616038 R14: 00007f4f71615fa0 R15: 00007ffef46b3528 [ 572.863279][T23497] [ 572.863287][T23497] sysctl could not get directory: /fs/mqueue -12 [ 573.187256][T23510] netlink: 96 bytes leftover after parsing attributes in process `syz.8.6459'. [ 573.215674][T23512] FAULT_INJECTION: forcing a failure. [ 573.215674][T23512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.219784][T23512] CPU: 1 UID: 0 PID: 23512 Comm: syz.8.6461 Tainted: G L syzkaller #0 PREEMPT(full) [ 573.219803][T23512] Tainted: [L]=SOFTLOCKUP [ 573.219807][T23512] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 573.219815][T23512] Call Trace: [ 573.219819][T23512] [ 573.219824][T23512] dump_stack_lvl+0x100/0x190 [ 573.219863][T23512] should_fail_ex.cold+0x5/0xa [ 573.219878][T23512] _copy_from_user+0x2e/0xd0 [ 573.219899][T23512] kstrtouint_from_user+0xd6/0x1d0 [ 573.219915][T23512] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 573.219930][T23512] ? __lock_acquire+0x4a5/0x2630 [ 573.219950][T23512] ? lock_acquire+0x1cf/0x380 [ 573.219971][T23512] proc_fail_nth_write+0x83/0x220 [ 573.219984][T23512] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 573.220000][T23512] vfs_write+0x2aa/0x1070 [ 573.220016][T23512] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 573.220029][T23512] ? __pfx_vfs_write+0x10/0x10 [ 573.220044][T23512] ? __fget_files+0x215/0x3d0 [ 573.220065][T23512] ? __fget_files+0x21f/0x3d0 [ 573.220086][T23512] ksys_write+0x12a/0x250 [ 573.220101][T23512] ? __pfx_ksys_write+0x10/0x10 [ 573.220121][T23512] do_syscall_64+0x106/0xf80 [ 573.220145][T23512] ? clear_bhb_loop+0x40/0x90 [ 573.220159][T23512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.220172][T23512] RIP: 0033:0x7fe8dd95c84e [ 573.220182][T23512] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 573.220192][T23512] RSP: 002b:00007fe8de781fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 573.220204][T23512] RAX: ffffffffffffffda RBX: 00007fe8de7826c0 RCX: 00007fe8dd95c84e [ 573.220211][T23512] RDX: 0000000000000001 RSI: 00007fe8de7820a0 RDI: 0000000000000003 [ 573.220217][T23512] RBP: 00007fe8de782090 R08: 0000000000000000 R09: 0000000000000000 [ 573.220224][T23512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.220230][T23512] R13: 00007fe8ddc16038 R14: 00007fe8ddc15fa0 R15: 00007ffcf6c3cd88 [ 573.220245][T23512] [ 573.305523][ T40] audit: type=1400 audit(524836.165:15800): avc: denied { connect } for pid=23513 comm="syz.8.6462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 573.324398][ T40] audit: type=1400 audit(524836.165:15801): avc: denied { write } for pid=23513 comm="syz.8.6462" path="socket:[114710]" dev="sockfs" ino=114710 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 573.510030][T23529] netlink: 124 bytes leftover after parsing attributes in process `syz.9.6468'. [ 573.519930][T23533] tipc: Started in network mode [ 573.521506][T23533] tipc: Node identity ac1414aa, cluster identity 4711 [ 573.524661][T23533] tipc: Enabled bearer , priority 10 [ 573.565059][T23539] netlink: 9 bytes leftover after parsing attributes in process `syz.8.6473'. [ 573.603008][T23539] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 573.706987][T23558] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 573.709683][T23558] IPv6: NLM_F_CREATE should be set when creating new route [ 573.712380][T23558] FAULT_INJECTION: forcing a failure. [ 573.712380][T23558] name failslab, interval 1, probability 0, space 0, times 0 [ 573.717204][T23558] CPU: 2 UID: 0 PID: 23558 Comm: syz.9.6480 Tainted: G L syzkaller #0 PREEMPT(full) [ 573.717232][T23558] Tainted: [L]=SOFTLOCKUP [ 573.717239][T23558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 573.717249][T23558] Call Trace: [ 573.717255][T23558] [ 573.717262][T23558] dump_stack_lvl+0x100/0x190 [ 573.717294][T23558] should_fail_ex.cold+0x5/0xa [ 573.717318][T23558] ? nsim_fib_event_nb+0x64c/0xe40 [ 573.717343][T23558] should_failslab+0xc2/0x120 [ 573.717369][T23558] __kmalloc_noprof+0xe0/0x850 [ 573.717397][T23558] nsim_fib_event_nb+0x64c/0xe40 [ 573.717429][T23558] notifier_call_chain+0x99/0x420 [ 573.717463][T23558] atomic_notifier_call_chain+0x71/0x1c0 [ 573.717492][T23558] call_fib_notifiers+0x33/0x70 [ 573.717515][T23558] call_fib6_multipath_entry_notifiers+0x112/0x170 [ 573.717541][T23558] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 573.717567][T23558] ? find_held_lock+0x2b/0x80 [ 573.717588][T23558] ? ip6_route_multipath_add+0x11e2/0x1ba0 [ 573.717606][T23558] ? ip6_route_multipath_add+0x11e2/0x1ba0 [ 573.717630][T23558] ip6_route_multipath_add+0x128f/0x1ba0 [ 573.717660][T23558] ? __pfx_ip6_route_multipath_add+0x10/0x10 [ 573.717697][T23558] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 573.717726][T23558] ? inet6_rtm_newroute+0xf5/0x160 [ 573.717744][T23558] inet6_rtm_newroute+0xf5/0x160 [ 573.717763][T23558] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 573.717786][T23558] ? __lock_acquire+0x4a5/0x2630 [ 573.717828][T23558] ? find_held_lock+0x2b/0x80 [ 573.717847][T23558] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 573.717867][T23558] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 573.717889][T23558] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 573.717909][T23558] rtnetlink_rcv_msg+0x95e/0xe90 [ 573.717931][T23558] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 573.717959][T23558] ? ref_tracker_free+0x37e/0x6c0 [ 573.717984][T23558] netlink_rcv_skb+0x159/0x420 [ 573.718005][T23558] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 573.718026][T23558] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 573.718067][T23558] ? netlink_deliver_tap+0x1ae/0xcc0 [ 573.718093][T23558] netlink_unicast+0x5aa/0x870 [ 573.718118][T23558] ? __pfx_netlink_unicast+0x10/0x10 [ 573.718150][T23558] netlink_sendmsg+0x8b0/0xda0 [ 573.718177][T23558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.718197][T23558] ? __might_fault+0x20/0x140 [ 573.718226][T23558] ____sys_sendmsg+0xa54/0xc30 [ 573.718254][T23558] ? __pfx_____sys_sendmsg+0x10/0x10 [ 573.718290][T23558] ___sys_sendmsg+0x190/0x1e0 [ 573.718315][T23558] ? __pfx____sys_sendmsg+0x10/0x10 [ 573.718374][T23558] __sys_sendmsg+0x170/0x220 [ 573.718394][T23558] ? __pfx___sys_sendmsg+0x10/0x10 [ 573.718427][T23558] do_syscall_64+0x106/0xf80 [ 573.718448][T23558] ? clear_bhb_loop+0x40/0x90 [ 573.718469][T23558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.718486][T23558] RIP: 0033:0x7f4f7139bf79 [ 573.718502][T23558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.718517][T23558] RSP: 002b:00007f4f72304028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 573.718534][T23558] RAX: ffffffffffffffda RBX: 00007f4f71615fa0 RCX: 00007f4f7139bf79 [ 573.718545][T23558] RDX: 0000000020040844 RSI: 0000200000000340 RDI: 0000000000000003 [ 573.718555][T23558] RBP: 00007f4f72304090 R08: 0000000000000000 R09: 0000000000000000 [ 573.718564][T23558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.718574][T23558] R13: 00007f4f71616038 R14: 00007f4f71615fa0 R15: 00007ffef46b3528 [ 573.718598][T23558] [ 574.276838][T23577] 9pnet_virtio: no channels available for device syz [ 574.286791][T23577] dlm: no locking on control device [ 574.332104][T23579] FAULT_INJECTION: forcing a failure. [ 574.332104][T23579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.336172][T23579] CPU: 2 UID: 0 PID: 23579 Comm: syz.6.6488 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.336190][T23579] Tainted: [L]=SOFTLOCKUP [ 574.336194][T23579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 574.336201][T23579] Call Trace: [ 574.336206][T23579] [ 574.336211][T23579] dump_stack_lvl+0x100/0x190 [ 574.336246][T23579] should_fail_ex.cold+0x5/0xa [ 574.336261][T23579] _copy_from_user+0x2e/0xd0 [ 574.336275][T23579] vmemdup_user+0x6b/0xe0 [ 574.336291][T23579] path_setxattrat+0x29e/0x3b0 [ 574.336311][T23579] ? __pfx_path_setxattrat+0x10/0x10 [ 574.336329][T23579] ? find_held_lock+0x2b/0x80 [ 574.336344][T23579] ? ksys_write+0x190/0x250 [ 574.336371][T23579] ? fput+0x79/0x100 [ 574.336381][T23579] ? ksys_write+0x1ac/0x250 [ 574.336396][T23579] ? __pfx_ksys_write+0x10/0x10 [ 574.336413][T23579] __x64_sys_lsetxattr+0xc9/0x140 [ 574.336424][T23579] ? do_syscall_64+0x95/0xf80 [ 574.336438][T23579] ? lockdep_hardirqs_on+0x78/0x100 [ 574.336452][T23579] do_syscall_64+0x106/0xf80 [ 574.336465][T23579] ? clear_bhb_loop+0x40/0x90 [ 574.336479][T23579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.336491][T23579] RIP: 0033:0x7faf7799bf79 [ 574.336501][T23579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.336511][T23579] RSP: 002b:00007faf78789028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 574.336523][T23579] RAX: ffffffffffffffda RBX: 00007faf77c15fa0 RCX: 00007faf7799bf79 [ 574.336530][T23579] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000200000000000 [ 574.336537][T23579] RBP: 00007faf78789090 R08: 0000000000000001 R09: 0000000000000000 [ 574.336543][T23579] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000001 [ 574.336550][T23579] R13: 00007faf77c16038 R14: 00007faf77c15fa0 R15: 00007ffc4463d8f8 [ 574.336565][T23579] [ 574.425511][T23581] FAULT_INJECTION: forcing a failure. [ 574.425511][T23581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.429659][T23581] CPU: 1 UID: 0 PID: 23581 Comm: syz.6.6489 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.429679][T23581] Tainted: [L]=SOFTLOCKUP [ 574.429683][T23581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 574.429690][T23581] Call Trace: [ 574.429695][T23581] [ 574.429700][T23581] dump_stack_lvl+0x100/0x190 [ 574.429721][T23581] should_fail_ex.cold+0x5/0xa [ 574.429737][T23581] _copy_from_iter+0x1f4/0x1690 [ 574.429751][T23581] ? __asan_memset+0x23/0x50 [ 574.429765][T23581] ? __pfx__copy_from_iter+0x10/0x10 [ 574.429777][T23581] ? __pfx___alloc_skb+0x10/0x10 [ 574.429795][T23581] netlink_sendmsg+0x808/0xda0 [ 574.429813][T23581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.429827][T23581] ? __might_fault+0x20/0x140 [ 574.429846][T23581] ____sys_sendmsg+0xa54/0xc30 [ 574.429865][T23581] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.429898][T23581] ___sys_sendmsg+0x190/0x1e0 [ 574.429922][T23581] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.429975][T23581] __sys_sendmsg+0x170/0x220 [ 574.429996][T23581] ? __pfx___sys_sendmsg+0x10/0x10 [ 574.430027][T23581] do_syscall_64+0x106/0xf80 [ 574.430048][T23581] ? clear_bhb_loop+0x40/0x90 [ 574.430068][T23581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.430092][T23581] RIP: 0033:0x7faf7799bf79 [ 574.430109][T23581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.430124][T23581] RSP: 002b:00007faf78789028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.430142][T23581] RAX: ffffffffffffffda RBX: 00007faf77c15fa0 RCX: 00007faf7799bf79 [ 574.430154][T23581] RDX: 0000000000000030 RSI: 0000200000000100 RDI: 0000000000000003 [ 574.430164][T23581] RBP: 00007faf78789090 R08: 0000000000000000 R09: 0000000000000000 [ 574.430173][T23581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.430182][T23581] R13: 00007faf77c16038 R14: 00007faf77c15fa0 R15: 00007ffc4463d8f8 [ 574.430207][T23581] [ 574.635882][ T5997] tipc: Node number set to 2886997162 [ 574.721142][ T40] audit: type=1400 audit(524837.492:15802): avc: denied { read } for pid=23600 comm="syz.6.6498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 574.724271][T23601] o2cb: This node has not been configured. [ 574.730149][T23601] o2cb: Cluster check failed. Fix errors before retrying. [ 574.732498][T23601] (syz.6.6498,23601,0):user_dlm_register:674 ERROR: status = -22 [ 574.735271][T23601] (syz.6.6498,23601,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 575.499833][T23640] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.514276][ T5996] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 575.598625][T23640] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.664590][T23640] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.673209][ T5996] usb 13-1: Using ep0 maxpacket: 16 [ 575.676678][ T5996] usb 13-1: config index 0 descriptor too short (expected 8210, got 18) [ 575.679329][ T5996] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.682869][ T5996] usb 13-1: config 0 has no interfaces? [ 575.686681][ T5996] usb 13-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 575.689725][ T5996] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.692349][ T5996] usb 13-1: Product: syz [ 575.693805][ T5996] usb 13-1: Manufacturer: syz [ 575.695958][ T5996] usb 13-1: SerialNumber: syz [ 575.698943][ T5996] usb 13-1: config 0 descriptor?? [ 575.763539][T23640] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.791058][ T63] Bluetooth: hci1: command 0x0405 tx timeout [ 575.880110][ T1145] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.894437][ T1145] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.904308][ T1145] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.912893][ T1145] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.921274][ T5996] usb 13-1: USB disconnect, device number 11 [ 577.037189][T23686] __nla_validate_parse: 4 callbacks suppressed [ 577.037201][T23686] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6534'. [ 577.043577][T23686] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 577.152061][T23694] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6532'. [ 577.332611][T23700] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 577.335056][T23700] FAULT_INJECTION: forcing a failure. [ 577.335056][T23700] name failslab, interval 1, probability 0, space 0, times 0 [ 577.338957][T23700] CPU: 3 UID: 0 PID: 23700 Comm: syz.5.6539 Tainted: G L syzkaller #0 PREEMPT(full) [ 577.338975][T23700] Tainted: [L]=SOFTLOCKUP [ 577.338980][T23700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 577.338986][T23700] Call Trace: [ 577.338991][T23700] [ 577.338996][T23700] dump_stack_lvl+0x100/0x190 [ 577.339018][T23700] should_fail_ex.cold+0x5/0xa [ 577.339033][T23700] should_failslab+0xc2/0x120 [ 577.339050][T23700] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 577.339065][T23700] ? skb_clone+0x190/0x400 [ 577.339081][T23700] skb_clone+0x190/0x400 [ 577.339094][T23700] netlink_deliver_tap+0xaed/0xcc0 [ 577.339114][T23700] netlink_unicast+0x70c/0x870 [ 577.339131][T23700] ? __pfx_netlink_unicast+0x10/0x10 [ 577.339145][T23700] ? __alloc_skb+0x5b7/0x710 [ 577.339162][T23700] netlink_ack+0x655/0xb80 [ 577.339181][T23700] netlink_rcv_skb+0x333/0x420 [ 577.339196][T23700] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 577.339212][T23700] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 577.339232][T23700] ? netlink_deliver_tap+0x1ae/0xcc0 [ 577.339249][T23700] netlink_unicast+0x5aa/0x870 [ 577.339266][T23700] ? __pfx_netlink_unicast+0x10/0x10 [ 577.339287][T23700] netlink_sendmsg+0x8b0/0xda0 [ 577.339304][T23700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.339318][T23700] ? __might_fault+0x20/0x140 [ 577.339337][T23700] ____sys_sendmsg+0xa54/0xc30 [ 577.339355][T23700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 577.339378][T23700] ___sys_sendmsg+0x190/0x1e0 [ 577.339397][T23700] ? __pfx____sys_sendmsg+0x10/0x10 [ 577.339432][T23700] __sys_sendmsg+0x170/0x220 [ 577.339445][T23700] ? __pfx___sys_sendmsg+0x10/0x10 [ 577.339468][T23700] do_syscall_64+0x106/0xf80 [ 577.339482][T23700] ? clear_bhb_loop+0x40/0x90 [ 577.339496][T23700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.339508][T23700] RIP: 0033:0x7f909759bf79 [ 577.339518][T23700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.339531][T23700] RSP: 002b:00007f90983ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.339543][T23700] RAX: ffffffffffffffda RBX: 00007f9097815fa0 RCX: 00007f909759bf79 [ 577.339549][T23700] RDX: 0000000020040844 RSI: 0000200000000340 RDI: 0000000000000003 [ 577.339556][T23700] RBP: 00007f90983ff090 R08: 0000000000000000 R09: 0000000000000000 [ 577.339562][T23700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 577.339569][T23700] R13: 00007f9097816038 R14: 00007f9097815fa0 R15: 00007ffd2efe25e8 [ 577.339584][T23700] [ 577.572460][T23711] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 577.577274][T23711] overlayfs: overlapping lowerdir path [ 577.579817][T23711] 9pnet_virtio: no channels available for device syz [ 577.582281][T23711] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6543'. [ 577.582316][T23713] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6543'. [ 577.585788][T23711] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6543'. [ 577.591746][T23713] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6543'. [ 577.618581][T23718] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 577.620986][T23718] IPv6: NLM_F_CREATE should be set when creating new route [ 577.666051][T23720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.020352][ T40] audit: type=1400 audit(524840.578:15803): avc: denied { write } for pid=23729 comm="syz.8.6549" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 578.141794][T23738] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6552'. [ 578.177418][T23743] random: crng reseeded on system resumption [ 578.245333][ T40] audit: type=1400 audit(524840.793:15804): avc: denied { write } for pid=23751 comm="syz.6.6557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 578.251788][T23752] IPv6: NLM_F_CREATE should be specified when creating new route [ 578.254373][T23752] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 578.256688][T23752] IPv6: NLM_F_CREATE should be set when creating new route [ 578.296211][T23754] bond1: Removing last ns target with arp_interval on [ 578.382587][T23761] FAULT_INJECTION: forcing a failure. [ 578.382587][T23761] name failslab, interval 1, probability 0, space 0, times 0 [ 578.386619][T23761] CPU: 2 UID: 0 PID: 23761 Comm: syz.6.6561 Tainted: G L syzkaller #0 PREEMPT(full) [ 578.386638][T23761] Tainted: [L]=SOFTLOCKUP [ 578.386642][T23761] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 578.386649][T23761] Call Trace: [ 578.386653][T23761] [ 578.386658][T23761] dump_stack_lvl+0x100/0x190 [ 578.386690][T23761] should_fail_ex.cold+0x5/0xa [ 578.386706][T23761] should_failslab+0xc2/0x120 [ 578.386723][T23761] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 578.386737][T23761] ? do_getname+0x35/0x390 [ 578.386752][T23761] do_getname+0x35/0x390 [ 578.386766][T23761] path_setxattrat+0x360/0x3b0 [ 578.386785][T23761] ? __pfx_path_setxattrat+0x10/0x10 [ 578.386804][T23761] ? find_held_lock+0x2b/0x80 [ 578.386818][T23761] ? ksys_write+0x190/0x250 [ 578.386845][T23761] ? fput+0x79/0x100 [ 578.386855][T23761] ? ksys_write+0x1ac/0x250 [ 578.386870][T23761] ? __pfx_ksys_write+0x10/0x10 [ 578.386887][T23761] __x64_sys_lsetxattr+0xc9/0x140 [ 578.386898][T23761] ? do_syscall_64+0x95/0xf80 [ 578.386920][T23761] ? lockdep_hardirqs_on+0x78/0x100 [ 578.386934][T23761] do_syscall_64+0x106/0xf80 [ 578.386947][T23761] ? clear_bhb_loop+0x40/0x90 [ 578.386961][T23761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.386973][T23761] RIP: 0033:0x7faf7799bf79 [ 578.386983][T23761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.386994][T23761] RSP: 002b:00007faf78789028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 578.387005][T23761] RAX: ffffffffffffffda RBX: 00007faf77c15fa0 RCX: 00007faf7799bf79 [ 578.387012][T23761] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000200000000000 [ 578.387023][T23761] RBP: 00007faf78789090 R08: 0000000000000001 R09: 0000000000000000 [ 578.387029][T23761] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000001 [ 578.387036][T23761] R13: 00007faf77c16038 R14: 00007faf77c15fa0 R15: 00007ffc4463d8f8 [ 578.387050][T23761] [ 578.475133][T23763] FAULT_INJECTION: forcing a failure. [ 578.475133][T23763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.479620][T23763] CPU: 3 UID: 0 PID: 23763 Comm: syz.6.6563 Tainted: G L syzkaller #0 PREEMPT(full) [ 578.479640][T23763] Tainted: [L]=SOFTLOCKUP [ 578.479644][T23763] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 578.479651][T23763] Call Trace: [ 578.479656][T23763] [ 578.479662][T23763] dump_stack_lvl+0x100/0x190 [ 578.479683][T23763] should_fail_ex.cold+0x5/0xa [ 578.479698][T23763] _copy_from_iter+0x1f4/0x1690 [ 578.479725][T23763] ? __asan_memset+0x23/0x50 [ 578.479748][T23763] ? __pfx__copy_from_iter+0x10/0x10 [ 578.479760][T23763] ? __pfx___alloc_skb+0x10/0x10 [ 578.479778][T23763] netlink_sendmsg+0x808/0xda0 [ 578.479796][T23763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.479810][T23763] ? __might_fault+0x20/0x140 [ 578.479829][T23763] ____sys_sendmsg+0xa54/0xc30 [ 578.479846][T23763] ? __pfx_____sys_sendmsg+0x10/0x10 [ 578.479869][T23763] ___sys_sendmsg+0x190/0x1e0 [ 578.479888][T23763] ? __pfx____sys_sendmsg+0x10/0x10 [ 578.479921][T23763] __sys_sendmsg+0x170/0x220 [ 578.479935][T23763] ? __pfx___sys_sendmsg+0x10/0x10 [ 578.479957][T23763] do_syscall_64+0x106/0xf80 [ 578.479971][T23763] ? clear_bhb_loop+0x40/0x90 [ 578.479985][T23763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.479999][T23763] RIP: 0033:0x7faf7799bf79 [ 578.480009][T23763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.480020][T23763] RSP: 002b:00007faf78789028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 578.480032][T23763] RAX: ffffffffffffffda RBX: 00007faf77c15fa0 RCX: 00007faf7799bf79 [ 578.480039][T23763] RDX: 0000000000000030 RSI: 0000200000000100 RDI: 0000000000000003 [ 578.480046][T23763] RBP: 00007faf78789090 R08: 0000000000000000 R09: 0000000000000000 [ 578.480052][T23763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.480058][T23763] R13: 00007faf77c16038 R14: 00007faf77c15fa0 R15: 00007ffc4463d8f8 [ 578.480073][T23763] [ 578.659561][ T40] audit: type=1400 audit(524841.176:15805): avc: denied { append } for pid=23771 comm="syz.5.6562" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 578.806762][T23789] xfrm1: entered allmulticast mode [ 578.990178][T23807] ------------[ cut here ]------------ [ 578.991983][T23807] 1 [ 578.991992][T23807] WARNING: mm/page_alloc.c:5225 at __alloc_frozen_pages_noprof+0x23ea/0x2ba0, CPU#3: syz.9.6581/23807 [ 578.996185][T23807] Modules linked in: [ 578.997667][T23807] CPU: 3 UID: 0 PID: 23807 Comm: syz.9.6581 Tainted: G L syzkaller #0 PREEMPT(full) [ 579.001570][T23807] Tainted: [L]=SOFTLOCKUP [ 579.003023][T23807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 579.004366][ T40] audit: type=1400 audit(524841.504:15806): avc: denied { write } for pid=5912 comm="syz-executor" path="pipe:[1727]" dev="pipefs" ino=1727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 579.006192][T23807] RIP: 0010:__alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 579.016237][T23807] Code: 00 45 31 c9 49 83 bc 24 70 05 00 00 00 4c 89 4c 24 50 0f 85 5f f8 ff ff c6 44 24 10 00 e9 f3 ea ff ff c6 05 36 91 5a 0e 01 90 <0f> 0b 90 e9 69 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 579.022824][T23807] RSP: 0018:ffffc9000663f738 EFLAGS: 00010246 [ 579.024769][T23807] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 579.027250][T23807] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 579.029769][T23807] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 579.032598][T23807] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0 [ 579.035322][T23807] R13: 1ffff92000cc7f36 R14: 0000000000000015 R15: 1ffff92000cc7f00 [ 579.037909][T23807] FS: 00007f4f723046c0(0000) GS:ffff8880d6652000(0000) knlGS:0000000000000000 [ 579.040923][T23807] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 579.043290][T23807] CR2: 00007f4f71385640 CR3: 000000002c904000 CR4: 0000000000352ef0 [ 579.045823][T23807] DR0: 0000000000000000 DR1: 000000000000afe8 DR2: 0000000000000000 [ 579.047747][T23808] netlink: 100 bytes leftover after parsing attributes in process `syz.9.6581'. [ 579.048314][T23807] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 579.048325][T23807] Call Trace: [ 579.048329][T23807] [ 579.057401][T23807] ? find_held_lock+0x2b/0x80 [ 579.057422][T23807] ? is_bpf_text_address+0x8a/0x1a0 [ 579.057439][T23807] ? is_bpf_text_address+0x8a/0x1a0 [ 579.057455][T23807] ? bpf_ksym_find+0x128/0x1c0 [ 579.057472][T23807] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 579.057489][T23807] ? is_bpf_text_address+0x94/0x1a0 [ 579.057506][T23807] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 579.057520][T23807] ? __kernel_text_address+0xd/0x30 [ 579.057533][T23807] ? unwind_get_return_address+0x59/0xa0 [ 579.057553][T23807] ? tomoyo_path_number_perm+0x46d/0x580 [ 579.057570][T23807] ? stack_trace_save+0x8e/0xc0 [ 579.057584][T23807] ? __pfx_stack_trace_save+0x10/0x10 [ 579.057600][T23807] ? stack_depot_save_flags+0x27/0x9d0 [ 579.057614][T23807] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 579.057630][T23807] ? policy_nodemask+0xed/0x4f0 [ 579.057649][T23807] alloc_pages_mpol+0x1fb/0x550 [ 579.057667][T23807] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 579.057688][T23807] ? drm_syncobj_array_find+0x35/0x3a0 [ 579.057701][T23807] ___kmalloc_large_node+0x104/0x150 [ 579.057720][T23807] ? find_held_lock+0x2b/0x80 [ 579.057735][T23807] __kmalloc_large_node_noprof+0x1c/0x70 [ 579.057755][T23807] __kmalloc_noprof+0x5be/0x850 [ 579.057774][T23807] ? avc_has_extended_perms+0x484/0x1080 [ 579.057789][T23807] drm_syncobj_array_find+0x35/0x3a0 [ 579.057804][T23807] drm_syncobj_query_ioctl+0x25d/0xb70 [ 579.057822][T23807] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 579.057837][T23807] ? find_held_lock+0x2b/0x80 [ 579.057851][T23807] ? drm_dev_exit+0x41/0x60 [ 579.057863][T23807] ? drm_dev_exit+0x41/0x60 [ 579.057879][T23807] drm_ioctl_kernel+0x1f3/0x3e0 [ 579.057891][T23807] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 579.057906][T23807] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 579.057923][T23807] drm_ioctl+0x5e6/0xc60 [ 579.057937][T23807] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 579.057952][T23807] ? __pfx_drm_ioctl+0x10/0x10 [ 579.057970][T23807] ? selinux_file_ioctl+0x139/0x290 [ 579.057987][T23807] ? selinux_file_ioctl+0xb4/0x290 [ 579.058005][T23807] ? __pfx_drm_ioctl+0x10/0x10 [ 579.058018][T23807] __x64_sys_ioctl+0x18e/0x210 [ 579.058034][T23807] do_syscall_64+0x106/0xf80 [ 579.058049][T23807] ? clear_bhb_loop+0x40/0x90 [ 579.058064][T23807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.058076][T23807] RIP: 0033:0x7f4f7139bf79 [ 579.058087][T23807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.058099][T23807] RSP: 002b:00007f4f72304028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 579.058112][T23807] RAX: ffffffffffffffda RBX: 00007f4f71615fa0 RCX: 00007f4f7139bf79 [ 579.058120][T23807] RDX: 0000200000000280 RSI: 00000000c01864cb RDI: 0000000000000005 [ 579.058128][T23807] RBP: 00007f4f714327e0 R08: 0000000000000000 R09: 0000000000000000 [ 579.058135][T23807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.058142][T23807] R13: 00007f4f71616038 R14: 00007f4f71615fa0 R15: 00007ffef46b3528 [ 579.058157][T23807] [ 579.058164][T23807] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 579.058174][T23807] CPU: 3 UID: 0 PID: 23807 Comm: syz.9.6581 Tainted: G L syzkaller #0 PREEMPT(full) [ 579.058190][T23807] Tainted: [L]=SOFTLOCKUP [ 579.058195][T23807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 579.058202][T23807] Call Trace: [ 579.058206][T23807] [ 579.058211][T23807] dump_stack_lvl+0x100/0x190 [ 579.058229][T23807] vpanic+0x552/0x970 [ 579.058240][T23807] ? __pfx_vpanic+0x10/0x10 [ 579.058255][T23807] panic+0xd1/0xe0 [ 579.058266][T23807] ? __pfx_panic+0x10/0x10 [ 579.058281][T23807] ? check_panic_on_warn+0x1f/0x90 [ 579.058300][T23807] check_panic_on_warn.cold+0x19/0x34 [ 579.058313][T23807] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 579.058328][T23807] __warn.cold+0x191/0x348 [ 579.058341][T23807] __report_bug+0x296/0x3d0 [ 579.058353][T23807] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 579.058369][T23807] ? __pfx___report_bug+0x10/0x10 [ 579.058383][T23807] ? __lock_acquire+0x4a5/0x2630 [ 579.058403][T23807] ? __lock_acquire+0x4a5/0x2630 [ 579.058421][T23807] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 579.058436][T23807] report_bug+0xb2/0x220 [ 579.058448][T23807] ? __alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 579.058463][T23807] handle_bug+0x166/0x2a0 [ 579.058479][T23807] exc_invalid_op+0x17/0x50 [ 579.058495][T23807] asm_exc_invalid_op+0x1a/0x20 [ 579.058506][T23807] RIP: 0010:__alloc_frozen_pages_noprof+0x23ea/0x2ba0 [ 579.058522][T23807] Code: 00 45 31 c9 49 83 bc 24 70 05 00 00 00 4c 89 4c 24 50 0f 85 5f f8 ff ff c6 44 24 10 00 e9 f3 ea ff ff c6 05 36 91 5a 0e 01 90 <0f> 0b 90 e9 69 df ff ff 83 7c 24 40 03 41 bc 04 00 00 00 7f 06 41 [ 579.058533][T23807] RSP: 0018:ffffc9000663f738 EFLAGS: 00010246 [ 579.058542][T23807] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 579.058549][T23807] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040cc0 [ 579.058555][T23807] RBP: 0000000000000015 R08: 0000000000000005 R09: 0000000000000009 [ 579.058562][T23807] R10: 0000000000000015 R11: 0000000000000000 R12: 0000000000040cc0 [ 579.058569][T23807] R13: 1ffff92000cc7f36 R14: 0000000000000015 R15: 1ffff92000cc7f00 [ 579.058585][T23807] ? find_held_lock+0x2b/0x80 [ 579.058599][T23807] ? is_bpf_text_address+0x8a/0x1a0 [ 579.058614][T23807] ? is_bpf_text_address+0x8a/0x1a0 [ 579.058629][T23807] ? bpf_ksym_find+0x128/0x1c0 [ 579.058646][T23807] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 579.058662][T23807] ? is_bpf_text_address+0x94/0x1a0 [ 579.058678][T23807] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 579.058692][T23807] ? __kernel_text_address+0xd/0x30 [ 579.058704][T23807] ? unwind_get_return_address+0x59/0xa0 [ 579.058723][T23807] ? tomoyo_path_number_perm+0x46d/0x580 [ 579.058738][T23807] ? stack_trace_save+0x8e/0xc0 [ 579.058752][T23807] ? __pfx_stack_trace_save+0x10/0x10 [ 579.058771][T23807] ? stack_depot_save_flags+0x27/0x9d0 [ 579.058783][T23807] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 579.058799][T23807] ? policy_nodemask+0xed/0x4f0 [ 579.058816][T23807] alloc_pages_mpol+0x1fb/0x550 [ 579.058834][T23807] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 579.058854][T23807] ? drm_syncobj_array_find+0x35/0x3a0 [ 579.058866][T23807] ___kmalloc_large_node+0x104/0x150 [ 579.058883][T23807] ? find_held_lock+0x2b/0x80 [ 579.058898][T23807] __kmalloc_large_node_noprof+0x1c/0x70 [ 579.058918][T23807] __kmalloc_noprof+0x5be/0x850 [ 579.058932][T23807] ? avc_has_extended_perms+0x484/0x1080 [ 579.058949][T23807] drm_syncobj_array_find+0x35/0x3a0 [ 579.058964][T23807] drm_syncobj_query_ioctl+0x25d/0xb70 [ 579.058982][T23807] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 579.058996][T23807] ? find_held_lock+0x2b/0x80 [ 579.059009][T23807] ? drm_dev_exit+0x41/0x60 [ 579.059021][T23807] ? drm_dev_exit+0x41/0x60 [ 579.059036][T23807] drm_ioctl_kernel+0x1f3/0x3e0 [ 579.059047][T23807] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 579.059062][T23807] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 579.059078][T23807] drm_ioctl+0x5e6/0xc60 [ 579.059092][T23807] ? __pfx_drm_syncobj_query_ioctl+0x10/0x10 [ 579.059107][T23807] ? __pfx_drm_ioctl+0x10/0x10 [ 579.059124][T23807] ? selinux_file_ioctl+0x139/0x290 [ 579.059140][T23807] ? selinux_file_ioctl+0xb4/0x290 [ 579.059158][T23807] ? __pfx_drm_ioctl+0x10/0x10 [ 579.059170][T23807] __x64_sys_ioctl+0x18e/0x210 [ 579.059186][T23807] do_syscall_64+0x106/0xf80 [ 579.059200][T23807] ? clear_bhb_loop+0x40/0x90 [ 579.059214][T23807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.059225][T23807] RIP: 0033:0x7f4f7139bf79 [ 579.059234][T23807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.059245][T23807] RSP: 002b:00007f4f72304028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 579.059255][T23807] RAX: ffffffffffffffda RBX: 00007f4f71615fa0 RCX: 00007f4f7139bf79 [ 579.059262][T23807] RDX: 0000200000000280 RSI: 00000000c01864cb RDI: 0000000000000005 [ 579.059270][T23807] RBP: 00007f4f714327e0 R08: 0000000000000000 R09: 0000000000000000 [ 579.059277][T23807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.059284][T23807] R13: 00007f4f71616038 R14: 00007f4f71615fa0 R15: 00007ffef46b3528 [ 579.059298][T23807] [ 579.059987][T23807] Kernel Offset: disabled