last executing test programs: 3.478035731s ago: executing program 2 (id=211): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xffffbffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x6}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 3.382429733s ago: executing program 3 (id=212): r0 = getpgid(0x0) syz_pidfd_open(r0, 0x0) unshare(0x2c020400) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setns(0xffffffffffffffff, 0x66020000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000), 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x104000, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f00000017c0)=""/4113, 0x1011}, {&(0x7f0000005740)=""/4071, 0xfe7}, {&(0x7f0000002800)=""/4171, 0x104b}, {&(0x7f0000000300)=""/119, 0x77}, {&(0x7f00000000c0)=""/170, 0xaa}, {&(0x7f0000000180)=""/82, 0x52}], 0x6}, 0x10100) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x2) 3.381571868s ago: executing program 2 (id=213): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="1488110e0000000906010e000000000000000007"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000340)={0x0, 0x972, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x800) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x16c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}, @TCA_STAB={0x120, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x8, 0x6, 0x4, 0x0, 0x9, 0x3, 0x1}}, {0x6, 0x2, [0x8000]}}, {{0x1c, 0x1, {0xf9, 0xe4, 0x6, 0x7, 0x0, 0x3, 0x1a, 0x9}}, {0x16, 0x2, [0x4, 0x6f, 0x87, 0x6, 0x1, 0x4, 0x0, 0x5, 0x7]}}, {{0x1c, 0x1, {0x81, 0x3, 0x9, 0x3, 0x1, 0x5, 0x80000000, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x3, 0x7b, 0xfffb, 0x66b3, 0x2, 0xe, 0x0, 0x2}}, {0x8, 0x2, [0x8, 0x6]}}, {{0x1c, 0x1, {0x9, 0x9, 0x4, 0x2, 0x1, 0x2b3, 0xbf, 0x4}}, {0xc, 0x2, [0x2, 0x2, 0x1, 0x2]}}, {{0x1c, 0x1, {0xf0, 0x0, 0x400, 0x65, 0x0, 0x5, 0x2, 0x3}}, {0xa, 0x2, [0x4, 0x8, 0x9]}}, {{0x1c, 0x1, {0x2, 0x2, 0xfffa, 0xfffffffe, 0x0, 0x2, 0x7, 0x6}}, {0x10, 0x2, [0x8, 0x1, 0x6, 0x2, 0x8f4a, 0xf62b]}}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x0, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) 3.181965755s ago: executing program 3 (id=214): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0x20, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x6, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @multicast2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="120000000400000008000000218000001004000059e257db06f19f4057c806b3b7eb713645fe55ae352052f23c610d59f943df917737c987a71736457af32e3d9444149830f13c4462ce1a67dab787e6745ea46bdeccd5c11e6a2cecc995fea741a87ed4e6a6c8d9a55bd63759d32d7980b8510729c446aa8e457db756806ed4fef3bd6816eb", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r1, &(0x7f0000000100), 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x62f82, 0x0) mkdir(0x0, 0x1ff) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000340)=0x8) read$dsp(r2, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x3, 0x0, 0x13, 0xa, 0x0, 0x64}}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x4001af84, &(0x7f00000021c0)) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) read$FUSE(r6, &(0x7f00000057c0)={0x2020}, 0x2020) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) read$dsp(r2, &(0x7f00000001c0)=""/62, 0x3e) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 2.922800658s ago: executing program 3 (id=216): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}}, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) syz_80211_inject_frame(&(0x7f0000000f40)=@broadcast, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x88c) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000000)='./mnt\x00', 0x141) openat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) syz_emit_ethernet(0xe2, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x5, 0x6, 0x0, @private=0xa010102, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x30, 0xc2, 0x0, 0x0, 0x0, {[@nop, @eol, @mptcp=@remove_addr={0x1e, 0x88, 0x2, 0x0, "7e54ceff63411693105d43a5dce60b379c5d36facc8b7ac8d265d81e804508935373c469f99d43c81cb6ae61fbd2eb23affc8b87b082b6f9799e2440e65dd950ab43e5d1230cecd570624db5550a062fb171bee943b04111fde1cc0971469afd541e4d45a4744b06a1df96feba1082245bbb36d3d5e423c735159845fd5253a13498831c74"}, @md5sig={0x13, 0x12, "7c395733018c7bd5eb0b6d1fc194d870"}, @exp_fastopen={0xfe, 0x7, 0xf989, "465a9f"}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) iopl(0x3) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) 2.787006084s ago: executing program 2 (id=218): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000840)={0x10, 0xffffffda, 0x3}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000000) unshare(0x62040200) 2.623050458s ago: executing program 0 (id=219): syz_open_dev$media(0x0, 0x3, 0x0) (async) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000800100000020000180060001000a000000140004"], 0x34}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x14, r3, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r2) (async) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r7 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000), 0x4) (async) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0x10}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x2}, @TCA_CAKE_MPU={0x8, 0xe, 0x23}]}}]}, 0x44}}, 0x40408c1) (async) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r1, @ANYRES32=r6, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async) ioctl$KVM_XEN_HVM_CONFIG(r9, 0x4038ae7a, &(0x7f0000000580)={0x2, 0xba7, &(0x7f0000000400), 0x0}) (async) r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r11, 0x4048aecb, &(0x7f0000000400)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x185}}, 0x20) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 2.535583252s ago: executing program 2 (id=220): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfff) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) pipe(&(0x7f0000004600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000000000)={0x3ff, "270e36"}, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$unix(r0, &(0x7f00000005c0)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000240)="82b2d354fb974674e0f0b195edaec90f86d920e24c5dacd33c189c58560189c228a0090f53508014784a48792adf4e819b38b3218654f387404e3661be3d34888397054e72140117070c2d323ea180b34f7d7eebe6c14acd62209438b459bd4c2b18fc93c60c81dd33579134580bb5d008f721f7c9a940276520088fb672916cfc97dd8dd1f3b185f34656074ed79905d1f0b625659966", 0x97}, {&(0x7f0000000340)="e9b6ed7df5b09a2b389e734cf45698c3a24522e753a82b7907bdbdc9346d04f1fdc2f0222201960ba7c55ddf6620335786137efa06bfe68d1cdd53977b535af31c86b5ce4f8e93012b8e81c1192b359481140a09991f837ea5ba0c2a29c39e90328ffb16ed9b85319b0233e7ce8bf323c07dd307e1f879dfe222b77c41f86b8d0f3b9e18202d33334a519a1b5294b7d0dd35b3a23ae681eb198f2047dd7ddfc17438", 0xa2}, {&(0x7f0000000400)="e38dfe049c4c9c9c86e863e12958cc645e89de418e20ab0ccffdeeaf1815353ff3148670715e165ae5e8bc8cd6ca9028891fa247e68169baa1fc501515c5ea4d3d85d1e3f3d28af19f5d03a0cf08549125545d5145546486064bafeced99b5f092cf038651b522081611c6af71eab77384205c93a43314f6dc067867b090be24a0424251ded55323c0f2394aca1eacbbbfdff9640cb7fe37cfc76892d13163f2f30c4dd46f019f5470dfb3e595dd01e5e25662b51b4f0bc1", 0xb8}, {&(0x7f00000004c0)="d8a2f024bf73ee16163d5318dd6d570b87384503e3f0fb9758c91ebb5a56e9e4540a23838bc3333851c26bb19f4f72df3b0c4b1dcb06b8864463137e9b76d543c19eb34ec125d3a7e47278cbf7", 0x4d}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="f7ffffff0100000001e70000", @ANYRES32=r8, @ANYRES32=r1, @ANYRES32=r6, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r9], 0x34, 0x4000000}, 0x4000000) 2.533311305s ago: executing program 0 (id=228): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x42, 0x1ff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) listen(r2, 0x4) pwrite64(r1, &(0x7f0000000000)='\x00', 0x1, 0xffffff) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000100), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) r5 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x2) ioctl$LOOP_SET_FD(r5, 0x4c00, r1) syz_open_dev$loop(0x0, 0x1, 0x2) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") write(r0, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a31203132382030", 0x35) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01000038010000010000000000000000000000000000000000000000000000000000006d79706f") r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r10, 0x29, 0x1b, 0x0, 0x0) 1.982453556s ago: executing program 0 (id=224): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x105102, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0xfffffdf7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000001880)="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", 0x170}], 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000040)={0x7, 'rose0\x00', {0x8}}) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) r2 = socket(0xa, 0x2, 0x0) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e23, @remote}, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000080)) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000423244ace247851832a9a80b4026b858e811c6e0620c545174ae48d42e72f489915ce74f2685ac6b1017078d4780a456064e19ed90663d879c6a03366b40c82269000404953fabd7c1c40185f9d239d92774dfb42915e4aa71efec2c8ce83390d6fa5b62a384b8e729187fb4bae254457d1640d55f3b2b07dd45747ae5cba01dd16c99cecbbca2bd999fdb01358bd9a3152a004cca02183d8a8de736418301e4d", @ANYRES32=r2, @ANYBLOB="00022abd7000fedbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b0003000000"], 0x38}, 0x1, 0x0, 0x0, 0x20004040}, 0x40080) 1.862246704s ago: executing program 2 (id=226): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = gettid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x7}, 0x0, 0x4000, 0x1, 0x1}, {{@in=@local, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}}, 0xe4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="bed200099400000005140000ffaf966cabd08ffc62e6dbdf25"], 0x10}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1}) mkdirat(0xffffffffffffffff, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1ff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x2) fsopen(0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2c41, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x8, 0x1, 0x2}, 0x20) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='dummy_udc.0', 0xb) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='\n', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000001) 1.793276864s ago: executing program 1 (id=227): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d8bcd00005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766c1cb010052f436dd2a", 0x2a}], 0x1) 1.682543107s ago: executing program 1 (id=229): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000200000000020900010073797a31000000002c000000030a010100000000000000000a0000030900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc841700000c0a010100000000000000000a0000020900020073797a31000000000900010073797a310000000058170380100000800c000180050001"], 0x17e8}}, 0x40) unshare(0x40400) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000b40)=[{&(0x7f0000000440)=""/52, 0x34}], 0x1) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000b79000/0x2000)=nil, 0x2000}}) 1.681173213s ago: executing program 3 (id=230): socket$netlink(0x10, 0x3, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) getpid() r0 = syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000), 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) lseek(0xffffffffffffffff, 0x2000, 0x0) r3 = syz_usbip_server_init(0x4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x40}}, 0x0) writev(r3, 0x0, 0x0) r5 = socket(0x8000000010, 0x2, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001300050027bd7000fedbdf", @ANYRESHEX=r1, @ANYBLOB="0000000001060400140003007665746830000000000000000089f6001400168053"], 0x48}}, 0x48000) write(r5, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 1.680127533s ago: executing program 0 (id=231): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@newtaction={0x4080, 0x30, 0x51b, 0x0, 0x0, {}, [{0x3f80, 0x1, [@m_police={0x3f7c, 0x2, 0x0, 0x0, {{0xb}, {0x2f50, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x800}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1, 0x9, 0x4, 0x1, 0x8, 0x567, 0x700000, 0x4, 0x0, 0x7fff, 0x9, 0x9, 0x8, 0xfff, 0x7, 0x8000, 0x0, 0x1, 0x80, 0x200, 0x81, 0x3, 0x7, 0x80000001, 0xfffffff9, 0x2, 0x9, 0x7, 0x1, 0x101, 0x3, 0x5, 0x8, 0x1c, 0x3, 0x1, 0x9, 0x6, 0x86e5, 0x6, 0x8000, 0x80000000, 0xe, 0x7, 0x200, 0x5, 0x9, 0x2, 0x6, 0xb, 0xb, 0xaff, 0x0, 0x9, 0x200, 0x80000000, 0xfcb, 0xb90, 0x3ff, 0x9, 0x0, 0x370, 0xba, 0xffff, 0xffffffff, 0x7fff, 0x3, 0x9, 0xc, 0x6, 0x6, 0x7, 0xf8, 0x2, 0x3c, 0x7, 0xff, 0x6, 0x0, 0x10001, 0x0, 0x8, 0x6, 0x7, 0x401, 0x80000000, 0x1, 0xd2, 0x8, 0x7, 0x1, 0x2, 0x3, 0x6041, 0x1, 0x7ff, 0x0, 0x9, 0x0, 0x3, 0xe8, 0x5, 0x7, 0x6, 0x9, 0x55c8, 0x82a, 0xfffffffb, 0x5, 0xd, 0xa, 0xb510, 0xffff66c3, 0x868, 0x5a49, 0x9, 0x7f, 0x3, 0x4, 0x4, 0xe, 0x1, 0x7fff, 0x5, 0x9, 0x2, 0x7, 0xfffffe00, 0x3, 0x9, 0x5, 0xf, 0x0, 0x5, 0xfffffffd, 0x2, 0x8, 0xffffffff, 0x6, 0x7, 0xcf4, 0x7, 0xbfb, 0x200, 0x9, 0x6, 0x253, 0x7, 0x6, 0x5, 0x2, 0x3, 0x6, 0x3, 0x3, 0x45e1cef7, 0x8, 0x1, 0xffffff81, 0x5, 0x7, 0x9, 0x0, 0x3, 0x7, 0xfffffffb, 0x6ee, 0x7, 0x9007, 0x3, 0x11e, 0xfffffffe, 0x5, 0x10000, 0xb4, 0x4, 0x2, 0x800, 0x2, 0x7, 0x0, 0xfffffff8, 0x8fd, 0x80000001, 0x9, 0x4, 0x2, 0x6, 0x101, 0x5, 0x4, 0x7, 0x3, 0x10, 0x2, 0x1000, 0x5, 0x2, 0x2, 0x0, 0x2, 0x0, 0x10, 0x8, 0x2, 0x100, 0x2, 0x10001, 0x10000, 0x7b1c6ffc, 0x2, 0x7, 0x5, 0x3, 0x7, 0x9, 0x3, 0x0, 0x6, 0xfff, 0x4e, 0xfffffffd, 0x7, 0x1f9, 0xd, 0x80, 0xb, 0x80, 0x10001, 0x80000000, 0x9, 0x4, 0x423762be, 0x6, 0x1, 0x7, 0x6, 0x5, 0x5, 0x6, 0x7c, 0x8d9, 0x3, 0x3, 0x2, 0x4957, 0x0, 0x10001, 0x6, 0x2, 0x40, 0x10, 0x101, 0x7, 0x64]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x34a851c2, 0x8, 0x4, {0x0, 0x0, 0x5, 0x6, 0x284b, 0x2}, {0x2, 0x1, 0x5, 0x1200, 0x7037, 0x3da}, 0x2, 0x8, 0x4}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffff8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x200}], [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x3, 0x5, 0x1100, 0x7, 0x0, 0x0, 0x9, 0x200, 0x8000, 0x7, 0x80000000, 0x2, 0x7fff, 0x4, 0x4, 0x3, 0x5, 0x80000000, 0x80000000, 0x6, 0x7fffffff, 0x0, 0xa, 0x8, 0x93, 0x6, 0x3, 0x8, 0x77, 0x7, 0x7, 0xaf90, 0x7, 0xbbe, 0xe, 0x5, 0x800, 0x6, 0x3, 0x8, 0x0, 0x8, 0x3, 0xffffb2f6, 0x6, 0x401, 0x9, 0x100, 0x80000000, 0xb, 0xffffffff, 0x7, 0x200, 0x4, 0xff, 0xc, 0x1ff, 0x3, 0xffff, 0x2, 0x5, 0x60, 0x9, 0x6, 0x546, 0xa, 0x5, 0xc1c, 0x1e, 0xff, 0xffffffff, 0x3, 0x5f9e, 0x3, 0x0, 0x2, 0x1, 0x9, 0x0, 0x1, 0x19403b2, 0x5, 0x5, 0x4, 0x6, 0x11311c24, 0xfffffff8, 0xf, 0x9, 0xfffff001, 0x10000, 0x1, 0xb3946a3, 0xfffffffd, 0x1ff, 0x80, 0x400, 0x80000000, 0x9, 0x4ff1, 0x10, 0x2, 0x0, 0x6fd4, 0x3ff, 0x8, 0x2, 0xf23, 0x4df, 0x291, 0x5, 0xc, 0x4387, 0x4, 0xffffffff, 0xffffffff, 0x1ff, 0x9, 0x3, 0xb714, 0x8, 0xc1bb, 0x7, 0x9b727bb, 0x8, 0x3, 0xd, 0x8, 0x3, 0x91, 0x8d, 0x100, 0x9, 0x1c4fc415, 0x4e4, 0x80000001, 0xffff678c, 0xffff, 0x6, 0xb, 0x3, 0x0, 0x400, 0x81, 0x7ff, 0x792, 0x6f4, 0x2, 0x4, 0xfffffff8, 0x6, 0x0, 0x3ff, 0x4cc, 0x4, 0x0, 0x401, 0x9, 0x0, 0x5, 0x1, 0x5, 0x6, 0x7, 0xe92f, 0x1, 0x8eb, 0x1, 0x40, 0xd3a5, 0x5bc, 0x8, 0x2, 0x96000000, 0xffffffff, 0x10, 0xffffffff, 0x8, 0x4b1, 0x2, 0x8f2a, 0xfffffffe, 0x80, 0x318b, 0xb8a35000, 0x6, 0x40, 0x8, 0xa, 0xf3, 0x5, 0x10000, 0xd, 0xc793, 0x2, 0x2, 0xfae3, 0x2, 0xe, 0x5, 0x4, 0x4, 0x7, 0x5f9d7492, 0x9, 0x0, 0x200, 0xfffff5e8, 0x4, 0xe, 0x4e54cd90, 0x101, 0x9, 0x4, 0x7, 0x9, 0x1, 0x6, 0x5, 0x6, 0xf, 0x7, 0x0, 0x3, 0x80000001, 0x8, 0x59dc241f, 0x1, 0x50000000, 0x6, 0x401, 0x7, 0x1, 0xa, 0x8, 0x9, 0xfe, 0xec1, 0x2, 0x1, 0x6, 0x7, 0x4, 0x6, 0xb77, 0x10001, 0x8a4d, 0x7, 0x8001, 0x6, 0x2, 0x4, 0x7, 0xbae2, 0x80000001]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x79d, 0xfffff536, 0xf5b, 0x4, 0x8, 0x9, 0x7, 0x7ff, 0xdaa, 0x6, 0x8001, 0x100, 0x9, 0x0, 0xfffffffa, 0x1, 0xb7, 0x7, 0x80000000, 0xe, 0x5, 0x4, 0x9, 0x7, 0xe, 0x84e, 0x3, 0xb7, 0x200, 0xff25a5f, 0x8, 0x1, 0x1, 0x3, 0xa, 0x9, 0xfffffffe, 0xfffffff9, 0xe2d2, 0xc, 0x0, 0x3, 0x871d, 0x6, 0x4, 0x6, 0x2af7, 0xfffffffe, 0x1, 0x0, 0xfffffff7, 0x2ae4, 0xfffffffc, 0xe39d, 0x3, 0x1, 0x9, 0x5, 0x7cbd, 0x1f2, 0xe, 0x40, 0x80, 0x709, 0x4, 0x423, 0xf, 0x7, 0x10000, 0x2, 0x4, 0x8, 0x6, 0x6273, 0x5, 0x2, 0x6, 0x4, 0xffffffef, 0x2, 0x7ff, 0x1, 0xfffffff7, 0x0, 0x2c22, 0x1, 0x7, 0x3, 0x5, 0x1ff, 0x10, 0x6, 0x4, 0x9, 0x1, 0x0, 0x8, 0x383, 0x800, 0x7fffffff, 0xe95, 0x1000, 0x1f0f, 0x4, 0x101, 0x7, 0x81, 0x5, 0x0, 0x2, 0xa, 0x6e, 0x101, 0xb3e, 0x2, 0x3, 0x1, 0x6, 0x1, 0x7, 0x1, 0x3b47185b, 0x4f26ff05, 0x800, 0x4, 0x2, 0x4, 0xd48, 0x100, 0xff, 0x3, 0xb9, 0x7f, 0x6, 0x8, 0x0, 0x5, 0xb2, 0x5, 0x2, 0x4, 0x3, 0x2, 0x7, 0x9, 0xfff, 0x0, 0x800, 0xfffffff9, 0xfffff001, 0x3, 0x4, 0x2, 0x4c11deb4, 0x3, 0x4, 0x94a, 0x2, 0xc, 0x8, 0x6, 0x10000, 0xebf, 0x7389, 0x91, 0x6, 0x34, 0x4, 0x22, 0x200, 0x2, 0x0, 0x7, 0x4, 0x52, 0xe00, 0x4e000, 0x9, 0x5b49, 0x5, 0x200, 0x8, 0x2b, 0x7342, 0x5, 0x3, 0x600000, 0x0, 0x2, 0x0, 0x8, 0x54d8, 0x8, 0x9e1, 0x9, 0x84c, 0xe8, 0x7, 0x7, 0x0, 0x3, 0x3, 0xa000, 0x4, 0x0, 0xa, 0x9, 0x8000, 0xff98, 0x1, 0x6, 0x5, 0x6, 0x3, 0x7, 0xe9f, 0x2, 0x7, 0x8, 0x5, 0x4, 0x2, 0x0, 0x7, 0x6, 0x7, 0x80000001, 0x3, 0x1cc, 0x3, 0x80, 0x0, 0x60, 0x1ff, 0x5, 0x8, 0xffffff85, 0x80000000, 0xdd5b, 0x7fff, 0x6, 0x2, 0xe, 0x6, 0x4, 0xfffffe00, 0x40, 0x3, 0x1, 0x0, 0x0, 0x8, 0x8, 0x5, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x1dc, 0x3, 0xfffffffb, 0x0, 0xe, 0x2, 0x5, 0x7, 0xdd13, 0x7, 0x51, 0x6, 0x5, 0x6, 0x3, 0x2, 0x0, 0x2, 0x2, 0x6, 0x0, 0xd145, 0xfffffffe, 0xffffffff, 0x8, 0x9, 0x4fb3, 0x1bc4, 0x602, 0x3, 0x81, 0xb95d, 0x7, 0x1, 0x4, 0x955e, 0x7ff, 0x8, 0x992, 0x7fffffff, 0x5, 0x8, 0x1, 0x1, 0xfb5, 0x6, 0x9, 0x0, 0xffff33f9, 0x80000000, 0x4, 0x23f2, 0x6353, 0x1, 0x400, 0x401, 0x80000000, 0x37, 0x1ff, 0x0, 0x3, 0xffff, 0x8, 0x8001, 0x7, 0x7f, 0x10001, 0x81, 0x0, 0x4, 0xfffffff9, 0x40, 0x8000, 0x81, 0xe7, 0x2b7, 0x4, 0xb61d, 0x1ff, 0x0, 0x5, 0x400, 0xc000, 0x0, 0x7f, 0xe73b, 0x0, 0x0, 0x6, 0x4, 0x3, 0x3, 0xc, 0x39ef, 0x200, 0x1, 0x77be, 0x2, 0x6, 0x48, 0xf8, 0xa5, 0x9, 0x0, 0x9ff, 0x4, 0xdac, 0xffffffff, 0x6a73, 0x0, 0x47, 0x7, 0x2, 0x1, 0x5, 0x7, 0x30e, 0x8, 0x8, 0x2, 0x4, 0x317, 0x1, 0x4d4d1100, 0x10000, 0xfffffffc, 0xd, 0x2, 0x5, 0xfffffffe, 0x3, 0x3, 0x8, 0x3c4, 0x4, 0x5, 0x44eaf1f0, 0x9, 0x400, 0x10, 0x9, 0x5, 0x2, 0xffffffa0, 0xffffed0b, 0x4, 0xd, 0x5d, 0x44d, 0xe2, 0xfffffffa, 0xdc0, 0x9, 0x7c9, 0x86b6, 0xffff, 0x5, 0x0, 0x400, 0x4, 0xa, 0x8, 0x8, 0x3, 0xa88, 0x1ff, 0xef10, 0x10001, 0xff, 0x3, 0x4, 0xffff, 0x2, 0xd, 0x5, 0x3, 0x7221, 0x1, 0xfffffffa, 0x1, 0x10000, 0x9f, 0xf73, 0x0, 0x2, 0x1, 0xff, 0x81, 0x180c, 0x9, 0x4, 0x2, 0xe, 0x59, 0x5, 0x7, 0x7, 0x2, 0xfff, 0x7, 0xfffffffc, 0x0, 0x4, 0x7, 0xfffffffc, 0x8, 0x0, 0xfffc0000, 0x1000, 0x0, 0x7, 0xab23, 0x3, 0x44, 0x7, 0x9, 0x505d48b0, 0x81, 0x2, 0x3, 0x8001, 0xa, 0x80000000, 0x10, 0xc282, 0x80, 0x7, 0xe, 0x5000000, 0x3, 0x800000, 0x3, 0x733e, 0xe28a, 0x8, 0xa67b, 0x8, 0x9, 0x2, 0x3, 0x7, 0x9878, 0xffffffff, 0x10001, 0xfffffc00, 0x100, 0x8, 0xffffffff, 0x1, 0x7fff, 0xff, 0x1, 0x950b, 0x8, 0xc]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7fff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4ee, 0x0, 0x80000001, 0x9, 0x80000000, {0x40, 0x1, 0x8, 0x8, 0x6}, {0xc, 0x4, 0x4, 0x4, 0x3ff, 0x95f}, 0x8001, 0x8, 0x9a}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffc}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x800}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x3, 0x1000, 0x3, 0x6, {0xd, 0x1, 0x6, 0x7ff, 0x6, 0x6}, {0x6, 0x0, 0x5, 0x0, 0x2, 0x29}, 0x3, 0x1ff, 0xec3}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xf}], [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x4, 0xad0, 0x1, 0x3, 0x7, 0x7, 0x7, 0x0, 0x9, 0x647, 0x1, 0x7ee, 0x6ab3, 0x80, 0x2, 0x8, 0x0, 0xa2, 0x5, 0x4, 0xffffffff, 0x6, 0x3, 0x40, 0x7, 0x5ef, 0x2, 0x8, 0x800, 0x4, 0x0, 0xfffffffb, 0xe, 0x7, 0x0, 0x9, 0x9, 0x2, 0xfffffff7, 0x54f2, 0x3, 0x3, 0x5, 0x7ab4, 0x1a9, 0x7, 0x1, 0xffffffff, 0xb47, 0xfffffff8, 0x9, 0x9, 0xff, 0x1, 0xe, 0x5, 0x4, 0x10000, 0x3, 0x3, 0x0, 0x9, 0x2, 0x9, 0x9, 0x4, 0x8, 0xfffffff8, 0x26, 0x0, 0x3, 0x80000000, 0x4, 0x156, 0x80c6, 0x4, 0x5, 0x4, 0x0, 0x8, 0x4, 0x1, 0x9, 0xffffffff, 0xc921, 0xc, 0x7fffffff, 0x1aa, 0x7, 0xffffc391, 0x4, 0x10001, 0x10001, 0x9, 0xfffff440, 0x7fffffff, 0xe, 0x8000, 0x1, 0x5, 0x1, 0x1, 0x1, 0x2, 0x9, 0x6, 0x10000000, 0x8, 0x8, 0x1, 0x1, 0x5, 0xd15, 0x4, 0x4, 0x9, 0x9, 0x3, 0x2, 0x9, 0x5, 0x81, 0x3, 0x80, 0x3, 0x9, 0x8, 0x81, 0x0, 0x9, 0xfffffffc, 0x7, 0x5, 0x8, 0x0, 0x2, 0x9, 0x1000, 0x75f, 0x7fff, 0x3, 0x401, 0xe59c, 0x8, 0x7fffffff, 0x2, 0xee, 0x8, 0x8, 0x563, 0x98ff, 0x2, 0x8, 0x5, 0x7, 0xffffff70, 0x4, 0x1, 0x7ff, 0x4, 0xb, 0x1, 0x3, 0x101, 0x2, 0x1d, 0x3, 0x8, 0x1, 0x1, 0x10000, 0xfff, 0xffff14bd, 0xfffffffc, 0x80000000, 0x80000001, 0xf00, 0x4, 0x2, 0xd, 0x0, 0x38, 0x4, 0xdc1, 0x71db5f97, 0x1, 0x1c, 0xfffffffb, 0xb2, 0x6bd05dc4, 0x6, 0x6, 0x6d9f, 0xc8, 0x3ff, 0x800, 0x7, 0x800, 0xea1, 0x3, 0xfffffff1, 0x37599296, 0x0, 0x7fffffff, 0x83, 0x1, 0xfffffffb, 0x0, 0x1, 0x8, 0x6, 0x2c1, 0x7, 0x3, 0x80000001, 0x4, 0x9, 0x0, 0x8, 0x7, 0x7fff, 0x2, 0x200, 0xa7, 0x5, 0x8, 0x0, 0x0, 0xd31, 0x1ff, 0x43ef, 0x0, 0xa0000000, 0x2, 0x9f25, 0x5, 0x80, 0xfff, 0x3, 0x87, 0x6, 0x8, 0x7fffffff, 0x0, 0x20000000, 0x8000, 0x400, 0x800, 0x5, 0x49, 0x574, 0x9f, 0x9, 0x1f, 0xfff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x101, 0x3, 0x5, 0x7, 0x7, 0xfffffff0, 0x7ff, 0x7fffffff, 0x9, 0x4, 0x9, 0x0, 0x7, 0x7, 0xfffffffe, 0x80000000, 0x1, 0x5, 0xfffffff8, 0x2, 0x6, 0xff, 0x8, 0x7, 0x1, 0x10000, 0x7, 0x2, 0x7, 0x8, 0x4b26, 0x1, 0x9, 0x602, 0x5, 0x101, 0x2, 0x2, 0x2000000, 0x4, 0x4, 0x8000, 0x3, 0x6, 0x100, 0xa0000000, 0xc1, 0x7, 0x9, 0x8000, 0x7cca, 0x5, 0xfff, 0x10, 0xa, 0x0, 0x8, 0xffffffff, 0x400, 0xff, 0x7, 0xe50, 0x0, 0x5, 0x7, 0x1, 0x6, 0x5, 0x584, 0x6, 0x80000000, 0xfffffff9, 0x9, 0xf7, 0x9, 0x4, 0x0, 0x80, 0x9, 0xffffffff, 0x94a3, 0x4, 0x7, 0x1000, 0x7fffffff, 0x0, 0x2, 0x401, 0x5, 0x1ff, 0x0, 0x7, 0x8, 0x4, 0x5, 0x7, 0x3, 0x9, 0x2, 0x265d, 0x1, 0x0, 0xf4, 0x4, 0x6000, 0xf9c8, 0x80, 0xe74a, 0x3, 0xa494, 0x4, 0x9, 0xc, 0x3702, 0xc0, 0x0, 0xc, 0xffff, 0xffff, 0x0, 0x204, 0x10000, 0x7, 0x80000000, 0x7, 0x40, 0xae74, 0xffffffff, 0x4, 0x9, 0x0, 0x4, 0x4, 0x8, 0x5, 0xe38, 0x6, 0x5, 0x6, 0x8, 0xffffffff, 0x10, 0x0, 0x6, 0x6, 0x8a30de4, 0xffffff81, 0x4, 0x37a, 0x0, 0x0, 0x4, 0xa8, 0x80000001, 0x483, 0x3, 0x47, 0x8, 0x99d, 0x2, 0x9, 0xffffe4e8, 0xdc, 0x9, 0x1000, 0x9, 0x816e, 0x6, 0x9, 0x6, 0x8, 0x413, 0xe2, 0x5, 0x40, 0x6e8c, 0x1, 0x2, 0xbb, 0x7, 0x1fc4, 0x2, 0x780, 0x101, 0x6, 0xfffffffe, 0x3, 0x7, 0x6, 0x6, 0x6, 0x6, 0x4, 0xa65, 0x0, 0x6, 0x0, 0x4, 0x10000, 0x8, 0x9d97b79b, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x80, 0x7, 0x9, 0x4, 0xffff, 0x100, 0x6, 0x0, 0x2, 0x9, 0x80000001, 0x7f, 0x3, 0x9, 0x4, 0x80000001, 0xcaec, 0x6, 0x3, 0x6fe, 0xb0, 0x0, 0xfffffff9, 0x5, 0xf7, 0x8, 0x8, 0xffff, 0x7, 0x40, 0x4, 0x0, 0x1000, 0x9, 0x8, 0x4, 0x80000000, 0x7, 0x8, 0x4, 0xc, 0x7, 0x70, 0x51b, 0x7fffffff, 0xffffffff, 0xfffffffb, 0xa, 0x2, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400, 0x934, 0x2, 0x5, 0xb, 0x4, 0x6, 0x0, 0x4, 0x2a23, 0x81, 0x7, 0x6, 0x10000, 0x4, 0x3, 0x8, 0x3, 0x5, 0x1, 0x10000, 0x8, 0x1ff, 0x0, 0xb774, 0x200, 0x0, 0x8, 0x0, 0x5, 0x7fffffff, 0x5a, 0x3, 0x8, 0x3, 0x4, 0x4, 0x3, 0xd, 0x9, 0x7, 0xe105, 0x7, 0x200000, 0x401, 0x80, 0x8, 0x0, 0xe, 0xfffff000, 0x80000001, 0x4, 0x7fff, 0x10000, 0x1, 0x80000000, 0xaf, 0x5, 0x3, 0x2, 0xfffffff7, 0x5, 0x1484, 0x3, 0x5, 0x6, 0x100, 0x9, 0x400, 0x1, 0x5, 0x6, 0x7, 0xffffffff, 0x7, 0xfffffbff, 0x30, 0x37, 0xf3c1, 0xe, 0x1, 0x7f, 0x1, 0x3, 0x19, 0x7, 0x1, 0x5, 0x8000, 0x401, 0x81, 0x629bd6c7, 0x41b, 0x3, 0x5, 0x8, 0x6, 0x6, 0x401, 0x7fffffff, 0x7f, 0x7, 0x8, 0x1, 0x2, 0xc6, 0x3, 0x8, 0x5, 0x7b1, 0x9, 0x8fa9, 0x86, 0x80000001, 0xb, 0x1ff, 0x7f, 0x3ff, 0x2, 0x9, 0x4, 0xafe, 0x5, 0x80000000, 0x7, 0x2, 0x5a35b6d4, 0x2, 0x800, 0x7, 0x3, 0x55c, 0xd8, 0x1, 0x9, 0x9, 0x4, 0x9, 0x5, 0x5, 0x7fff, 0x3ff, 0x4, 0x3, 0x10, 0x5, 0xbe37, 0x85, 0x7, 0x9, 0x4, 0x9, 0x7, 0x3, 0x10001, 0x7fff, 0x3, 0x71cd, 0x5, 0x521, 0x6, 0x9, 0x4, 0xa, 0x800, 0x9, 0x8a6, 0x3, 0x7, 0x6, 0xfff, 0x8001, 0x7, 0x0, 0x2, 0x2, 0x76116088, 0x7, 0x0, 0x9, 0x6, 0x1a0000, 0x73e1, 0x10001, 0x8000, 0xc, 0x3, 0x5, 0x7, 0x3, 0xffffff51, 0xecb1, 0x10001, 0x6, 0xfffffffb, 0x5, 0x800, 0xfffffff9, 0x7fffffff, 0x1, 0x1, 0x7c0e, 0x8, 0x3, 0x10001, 0x1, 0x6, 0x1, 0x9, 0x8, 0x4, 0x4000, 0xf91, 0xfffffff7, 0x9, 0x6, 0x9, 0x0, 0x2, 0x81, 0x8, 0x0, 0x6ee2, 0x2, 0xdd6, 0x28a0, 0x4, 0x10001, 0x8, 0x64d34944, 0x2, 0x84, 0xee61, 0x6, 0x9, 0x0, 0x81, 0x5, 0x8e, 0x1, 0x80000000, 0xc0000000, 0xe, 0x6f3, 0x9, 0x1, 0x81, 0xd03, 0x81, 0x80, 0x1, 0x7000, 0xb, 0x9, 0xffff, 0x6]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xfffffffa, 0x3, 0xd, 0x3, 0x0, 0x4, 0xa08a, 0xfffff800, 0x7, 0x2, 0x83, 0x6, 0x8, 0x8e, 0xb, 0x0, 0x53d, 0x200000, 0x0, 0x5, 0x2, 0x4, 0x8, 0x4, 0x2a, 0x6dc3e164, 0xd7, 0x80000000, 0x3d, 0x6, 0x50, 0x6, 0x4, 0x7fff, 0x7, 0x6, 0x7ff, 0x0, 0x1aa418, 0x6, 0x6, 0x1000, 0x20000000, 0x6, 0x1, 0x8, 0x1, 0xf, 0x10, 0x0, 0x2, 0x7, 0x5, 0x6, 0x7, 0x9, 0x5, 0xe3, 0x8, 0x40, 0xe, 0x7, 0x9, 0x3, 0x7, 0x1, 0x5, 0x7, 0x8, 0x0, 0x1, 0x6, 0x7, 0x49b65123, 0x6, 0x8, 0xb8, 0x8, 0x0, 0x7, 0x1, 0xc2, 0x1, 0xbb49, 0xf0, 0x3, 0x9, 0x7ff, 0xb, 0xc92, 0x0, 0x7, 0x3, 0x2, 0x7, 0x3, 0x6, 0x10000, 0x0, 0x9, 0x0, 0x9, 0xffff, 0x46d, 0x8, 0x3, 0x4, 0x4, 0xfffffffc, 0x0, 0xae, 0x9, 0x5, 0xfffffffa, 0x7, 0x2, 0x7, 0xd8, 0xa90, 0x7, 0x2, 0x1, 0x4, 0x3, 0x9, 0x81, 0x0, 0x1, 0x9, 0x9, 0x8, 0x2, 0x10000, 0x80000000, 0x2, 0x401, 0xac, 0x3, 0x8000, 0xc1d, 0x0, 0x9633, 0x6, 0x5, 0x3, 0x9, 0x1000, 0x9, 0x0, 0x8001, 0x7, 0x8001, 0x516a, 0x1, 0x6, 0x2, 0x2, 0x3, 0x2, 0xbd, 0x8, 0x9, 0x4, 0x0, 0x6cd, 0x7, 0x3, 0x3, 0x4, 0x80000001, 0x4e, 0x4, 0x0, 0x3, 0xa, 0x101, 0x8, 0x0, 0x8, 0xefd, 0x1, 0x0, 0x1, 0x1, 0x1000, 0x5, 0xc08, 0x6, 0x80000000, 0x9, 0x6, 0x2, 0x8, 0x6, 0x4, 0x3ff, 0x9, 0x1, 0x3b77, 0x80, 0x80000000, 0x1, 0x7, 0x7499, 0x4, 0x100, 0x6, 0x0, 0x3, 0x5, 0x2, 0xd0, 0x1, 0x8, 0x5, 0x1ff, 0x800000, 0x800, 0x1, 0xbe2, 0x5, 0x80, 0x3, 0x6a, 0x40, 0x3, 0x7f, 0x159, 0xd, 0xfffffffd, 0xffffffff, 0x104, 0x8, 0x3, 0x74, 0x2, 0x3, 0x7fffffff, 0x7fffffff, 0xf5, 0x8, 0x8000, 0x0, 0x61ae, 0xc1f2, 0x0, 0x9, 0xfffffff9, 0xb, 0x10001, 0x6, 0xfffffffa, 0xb, 0x2, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x81, 0x7, 0xf, 0x0, 0x8, 0x40, 0x3, 0x887, 0x5, 0x4, 0x4, 0x4000000, 0x7, 0x4, 0x3, 0x5, 0x0, 0x2, 0x0, 0xc96e, 0x8, 0x3ff, 0x8, 0x3, 0x2, 0x0, 0x100, 0x685, 0x8001, 0x3, 0xa, 0x4a8, 0xa, 0x3, 0x4c1, 0x23f, 0x1cd, 0x3, 0x8, 0x1, 0x3, 0x4, 0x7, 0x4, 0x7, 0x7, 0x7, 0x2, 0x3, 0x1, 0x59, 0x4, 0x2, 0xfffffffe, 0x7, 0x81, 0x8, 0x5, 0xa5, 0x9e, 0x8, 0x7, 0xffff, 0x4d3, 0x0, 0x3ff, 0x3, 0x1, 0x4, 0x1, 0xac9d, 0x6, 0xaa, 0x2, 0xcd, 0x0, 0xffffffff, 0x8, 0x1, 0x0, 0x7, 0x3, 0x6fd, 0x7fffffff, 0x6, 0x10, 0x9, 0x1, 0x2, 0xffffff8f, 0x4, 0x8001, 0x5, 0x8, 0xff, 0xd246, 0x1000, 0x3, 0x40008, 0x0, 0x10, 0x885, 0x8, 0x80, 0x8, 0x10000, 0x20000000, 0x80000001, 0x8, 0x3, 0x7, 0x7, 0xcb48, 0x7, 0x2, 0x1, 0x9, 0x81, 0x2, 0x8, 0xff, 0x1, 0xfffffffa, 0x1, 0x7, 0x3, 0x3, 0x4, 0x8, 0xffff, 0x5, 0x6, 0xd, 0x4, 0x10000, 0x3, 0x0, 0x3, 0x0, 0x8, 0x3, 0x3, 0x0, 0x4, 0x9, 0x4, 0x200, 0x8, 0x1, 0x3, 0x2, 0x2c000000, 0x3, 0xffff, 0x400, 0x5, 0xa1b, 0xfff, 0x1, 0x80, 0x80000001, 0xddc4, 0x7, 0x3, 0x3ff, 0x7, 0x384, 0x6, 0x3, 0x8, 0x5, 0xe5, 0xa, 0x6, 0x6, 0x9, 0x100, 0x5, 0xe, 0x9, 0x5, 0xfffffa09, 0x7f, 0xfffffffc, 0x6, 0x5, 0x0, 0x7ff, 0xfffffffb, 0x1, 0x3, 0x80000000, 0x877b, 0x0, 0x3, 0xe, 0xff, 0x0, 0x8001, 0xaf0, 0xbea0, 0x80000000, 0x10, 0x6, 0x2, 0x5, 0x9, 0x8, 0x5, 0x8000, 0x7, 0x6, 0x5, 0x0, 0x77, 0x7, 0x9, 0x4, 0xffff, 0xc, 0x8, 0x7, 0x7, 0x7fff, 0x3ff, 0x3, 0x80, 0x9, 0xef, 0x27f, 0x2, 0x3ba, 0xab68, 0x80, 0x8, 0x8, 0x6, 0xfffff0e3, 0x100, 0xf, 0x0, 0x0, 0x1, 0x7fff, 0x0, 0x1, 0xff, 0x9, 0x3, 0x7fffffff, 0x4, 0x2, 0x200, 0xfff, 0xffffffff]}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x80000001}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x0, 0x800, 0x3, {0x7, 0x0, 0x4, 0x3, 0x7, 0x1000}, {0x10, 0x2, 0xffff, 0x5, 0x7, 0x8}, 0xe19, 0xffff, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x8, 0x4fa8, 0x8, 0xe4, {0x68, 0x1, 0x775d, 0x4, 0x100, 0x80}, {0x1, 0x1, 0x7, 0xffff, 0x6, 0x9}, 0xff, 0x3, 0x3}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80000001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffd}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x36}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd8, 0x0, 0x2, 0x200, 0xfffffffb, {0x1, 0x2, 0x3, 0xfffc, 0xfff, 0x8}, {0x2, 0x2, 0xfff8, 0xff7f, 0x1, 0x5}, 0xf, 0x8a, 0x2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd, 0xfffffc00, 0x5, 0x2, 0x0, 0x400, 0x80000001, 0xa09, 0x8, 0x8, 0x401, 0x1, 0x0, 0x81, 0x800, 0x100, 0x6, 0x0, 0x3, 0x4, 0x80000001, 0x35, 0x1, 0xf50, 0x8001, 0x18000, 0x0, 0xffffff81, 0x5, 0x400, 0xce6, 0x7ff, 0x32ab, 0x10, 0xfffffc00, 0x4f02, 0x6, 0x7d56b083, 0x3, 0x9, 0x2, 0x3, 0x5, 0x401, 0x6, 0x9, 0x283, 0x4, 0x8, 0x246, 0x10, 0x6ea, 0x80, 0x4, 0x100, 0x98fb, 0xfff, 0x8, 0x5, 0x4, 0x7, 0x4c0, 0xff, 0xfffffffd, 0xff, 0x3, 0xf, 0x4, 0x0, 0x4, 0x10000, 0x80000001, 0x5, 0x10, 0x9, 0x9, 0xffffffff, 0x2, 0x401, 0x64, 0x10000, 0x2, 0xdbe, 0x7f7, 0x3, 0x14, 0x3, 0xffffffff, 0x7, 0x3, 0x1, 0x3, 0x89, 0x7, 0x10001, 0x1, 0x8, 0x7f, 0x80000000, 0x4, 0x10000, 0xba2, 0x51, 0x22, 0x0, 0x6, 0x3, 0x10001, 0x3, 0x3, 0x969, 0x0, 0x8001, 0x6, 0x9, 0x32bd, 0xfffff61d, 0x6e, 0x10001, 0x8, 0x6, 0x5, 0x2, 0x7, 0x6, 0x2, 0x7, 0xd8, 0x4, 0x6, 0x75, 0x6, 0x5, 0x3, 0xd, 0x3, 0x2, 0x1ff, 0x7, 0x7, 0x8, 0x1, 0xc, 0x2, 0x3, 0x8, 0x4, 0x2, 0x4, 0xf5be, 0x19d54ebe, 0x8000, 0x5, 0x7f, 0x40, 0x2, 0x0, 0x4, 0x8001, 0x3, 0x2, 0x7f, 0x4, 0x5, 0x3, 0x8000, 0x6, 0xa, 0x4, 0x0, 0xbf, 0x3b, 0x4de3, 0xffff1f62, 0x6, 0x4, 0x4, 0x401, 0x3, 0x6, 0x5997, 0xbd, 0x5, 0x2, 0x80, 0x5, 0x9, 0x4, 0x58, 0x8, 0x5, 0x4, 0x1, 0x5, 0x200, 0x8, 0x351e, 0x1, 0x76f6, 0x8, 0x6, 0x8000, 0xda, 0x8, 0x6, 0x1000, 0x4, 0x9, 0xf, 0x9, 0x3, 0x7, 0xf, 0x2, 0x1, 0x0, 0x3, 0xac, 0x101, 0x889, 0x1, 0x7, 0x640, 0x72c2a251, 0x6, 0x5, 0x1, 0x3, 0x8, 0x9, 0x1, 0x4, 0x5, 0xf1a, 0x2, 0x1, 0x37b, 0x6, 0x3ff, 0x800, 0xa7e, 0x7fff, 0x3, 0xc02, 0x3, 0x5, 0x9, 0x7ff, 0xff, 0x89e2, 0x3ff, 0x9, 0x7fff, 0x3b02, 0x1, 0xfffffffd]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0x10000000, 0x9, 0xffffff81, 0x1, {0x0, 0x2, 0x1, 0x4, 0x1, 0x5}, {0x6, 0x1, 0x8000, 0xcb40, 0xfff, 0x3}, 0x3, 0xf}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x6, 0x5, 0x2, 0x51bb671, {0x1, 0x1, 0x7, 0x0, 0x70, 0x401}, {0xb9, 0x1, 0x1, 0xd, 0xf4e6, 0xe2}, 0x3, 0x81}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x1ff, 0x7, 0x8001, 0xfffffffd, 0xbc, 0x1, 0x1, 0xe776, 0x1a5, 0x48, 0x8, 0x3, 0xd15, 0x6, 0x1, 0x7, 0x101, 0x40, 0x8, 0x384, 0x901d, 0x0, 0xab, 0x7ff, 0x8dce, 0xfffffff9, 0x61d0, 0x40, 0xc6, 0x400, 0x8879, 0x0, 0xbb, 0x7, 0xc8, 0x4, 0x1, 0x40, 0x7, 0x4, 0x8, 0x5, 0x0, 0x5, 0x2, 0x6, 0x88, 0x7, 0x274, 0x7e, 0x9, 0x9, 0x4, 0x6, 0x401, 0x5, 0x4, 0xc4c, 0x7, 0x5c6d15d6, 0x8, 0x400, 0x7, 0x0, 0x6, 0xb, 0x1, 0x2, 0x8, 0x0, 0x74f, 0x400, 0x3, 0x77, 0xfa, 0x4, 0x4, 0x9, 0x8, 0x8, 0x5, 0x3, 0x0, 0xc2, 0x4, 0x400, 0x26d, 0x7fff, 0x6, 0x6, 0xff, 0x5, 0x7fffffff, 0x8, 0x96b1, 0xd4b6, 0x0, 0xff, 0x3, 0x7, 0x6a3, 0xfffffffe, 0x80000001, 0x4, 0x0, 0x0, 0x2, 0x1000, 0x6, 0xb, 0x0, 0x4, 0x4, 0x6, 0x7fe2, 0x3, 0x1, 0x8, 0xb7c, 0x6, 0x9, 0x2, 0x8, 0x8, 0x9, 0x1, 0x8, 0x8, 0x4, 0x5, 0x8, 0x7ff, 0x6, 0x9, 0xad73, 0x5, 0x6, 0x4, 0x7f, 0x9bc4, 0x9d, 0x7, 0x2, 0x10001, 0x0, 0xf, 0xffffffff, 0xd, 0x10, 0x4, 0x4bd9, 0x1ffe00, 0x1, 0x89, 0x4, 0x9, 0x1, 0x6, 0x3d, 0x3, 0x2, 0x101, 0x7f, 0x113, 0x38000, 0x3, 0x5, 0x5, 0xfffffffa, 0xfffffffa, 0xa, 0x8fe, 0x400, 0x9, 0x1, 0x3b, 0x1, 0x3ff, 0x7, 0x9, 0x1, 0x1ff, 0x9, 0x0, 0xffff, 0x3, 0x6, 0x0, 0x7f, 0x9, 0x5, 0x600, 0x3, 0x1, 0x80000000, 0x0, 0x0, 0xfffffffa, 0x101, 0x40, 0x5d, 0x80000000, 0x0, 0x14e5, 0x1, 0x80, 0xd, 0x8, 0x1, 0x0, 0x5, 0x3, 0x1, 0x5, 0x1, 0x5, 0x3ad, 0x7, 0x8, 0x1, 0x7fff, 0x800, 0x7ff, 0x8, 0x0, 0x1, 0x9, 0x19, 0x3, 0x0, 0x1f9f, 0x4, 0x8, 0x9, 0x3, 0x3, 0xfffffff3, 0x1, 0x8, 0x7f, 0x9, 0xfffffffa, 0x6, 0x2, 0x9, 0x2, 0x6f4, 0x0, 0xb147, 0x7, 0x34b, 0xfffffffe, 0x7fff, 0x4, 0x100]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0xec, 0x1, [@m_ife={0xe8, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x800}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x9d, 0x6, "9c30c097761917772f48b0bfca8fd66c216859ed8e4d3fac4edee6dccac3015d12bb585a29cc75259408a797e1d2e644f38f2f3e16aea9317306754e84ddd8d150881f20d9a6d2d486e8e51db2d13a76cf52f3d1bb01073adc89542218a2c97f49e28fa2058212ba9e55af0729d837c464973afcf731245f3e2bb27d2dab708820965e53f7b67d0fddb13065a7ccf4919f45c437731a01b79d"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x4080}}, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r2, @ANYBLOB="00000500000000000000000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000002a000000bf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe4) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010004000000fedbdf25100000002e0001801400020076657468305f746f5f626f6e6400000059cd932d907e946b55d9c5dc8ec26f9484ba151e235d3d1f2e2391911af53ad1686b30b0ffdd8d6b054e61beeea9c235bf800fb9316652b30d"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000500)='0000:00:02.0\x00', 0xd) openat(r6, &(0x7f0000000040)='./sys\x00', 0x1c5500, 0x0) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r7, &(0x7f0000000700)='amd5536udc-pci\x00', 0xf) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) munmap$IORING_OFF_CQ_RING(0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000900)='0000:00:02.0\x00', 0xd) close(0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) 1.493218212s ago: executing program 0 (id=232): syz_open_dev$sndpcmc(&(0x7f0000000100), 0x1, 0x100) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setfsuid(0xee00) setresuid(0x0, 0x0, 0x0) r0 = openat$dsp1(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x2b, 0x0, 0xfffffff8, 0x8}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000140)=r2, 0x4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000100)=0x1, 0x4) 1.388547806s ago: executing program 1 (id=233): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf25210000000a000100777061a363fff40009001f"], 0x2c}}, 0x800) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newlink={0x20, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a24}}, 0x20}, 0x1, 0x0, 0x0, 0x408c1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000640)='3', 0x1) 1.303033085s ago: executing program 0 (id=234): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000506fcffffff8300000000000000", @ANYRES32=0x0, @ANYBLOB="0110000000000000240012800b0001006d616373656300001400028005000a0001000000050008000000000008000500", @ANYRES32=r1, @ANYBLOB="d72dc96c9e733a3dbe0724b059d2965d989490d2f464d158ac466a0b288d282c1147685b8e33114d521e9098008b88139ce7ad8c6b93ed9c4c6063a30af1a734f60911ee88d391e728cec281b68d356daec8577b65dc799c67a10852f5f0081eca83ef6f"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$loop_ctrl(0xffffff9c, &(0x7f00000000c0), 0x8000, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) r3 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffff, 0x0, 0x0, 0x20}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r8 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r8, 0x1000006) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r11, &(0x7f0000000bc0)=[{{&(0x7f0000000080)=@l2={0x1f, 0x1, @none, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x20000080) r12 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x1, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r13, r14, r15, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r12, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000740)={0x53, 0xfffffffffffffffe, 0x7, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="a1f872478e76a8", 0x0, 0xffff140f, 0x0, 0x0, 0x0}) openat$ndctl0(0xffffff9c, &(0x7f0000000180), 0x1201c2, 0x0) fcntl$addseals(r8, 0x409, 0x7) ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000000)={r8, 0x0, 0x0, 0x1000000}) ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x1000000}) r16 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r16, 0x40946400, &(0x7f0000000600)={'c6xdigio\x00', [0x7c, 0x1f, 0x0, 0xc, 0x10, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x7ff, 0x8, 0x83, 0x8, 0x1010003, 0x0, 0x18, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffff9, 0x38, 0xc, 0x10000006, 0x664, 0xfffffff8]}) 1.302162594s ago: executing program 1 (id=235): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x4, 0x9, 0x2, 0x7, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r3, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)={0xfffffeff}) close(r6) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 912.307258ms ago: executing program 2 (id=236): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000080)='proc\x00') lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x1) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x4}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r4, 0xc0105866, &(0x7f0000000b00)={&(0x7f0000000100)=0xfffffffffffff800, 0x0, &(0x7f00000007c0)=[{}, {}, {}, {}], &(0x7f0000000ac0)}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r5, r6, 0x0, 0xffffffff000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01864c2, &(0x7f00000000c0)={0x0, 0x0, r6}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x1d}, {0x8, 0x6}, {0xb, 0xfff2}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) pwrite64(r8, &(0x7f0000000000)='100', 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 161.388087ms ago: executing program 1 (id=237): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d8bcd00005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766c1cb010052f436dd2a", 0x2a}, {0x0}], 0x2) 143.600049ms ago: executing program 3 (id=238): r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0xfe, @rand_addr=0x100000a}}) 152.187µs ago: executing program 1 (id=239): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}}, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) syz_80211_inject_frame(&(0x7f0000000f40)=@broadcast, &(0x7f0000002340)=ANY=[@ANYBLOB="880c050008021100000108021100000050505050505059002ac6cf23c72d3da2144d99301a95cbf88ee328a2acfd61026981261283978edc7282349ccd8ae924e94c46817cb9d9e1b9fa8c7bbdcbd254f6610b79d4d90b0fc075996e482cf264c44448966a57bbc2b6388263c188d30dfbb33d2dc843a2e2291a85ec6dc2f9d2da7d79ea8c8c26957d78105c4ad73068e4d2ae2bc5a0c9377f9358d9ea2e81674fa6fe298d293bfa5fe6ee12ed9440a243aaf7f107fe7487bdcc76a6ef80b1a14f30120fa667e65f5bce5ca6c82e117759ccae88a190eaeb19740155b5fac99a07761db29f62fdc2e23fb5aee32a47fc727eac37af7ffa4ee1180bb6700da1e38e9713e47922ba8219bedbbdf866e245a383f6a7e19529ae4125e58b4a06321b2fe680a4330195a6a0ecd31e6ec302d9425f038419800f19199a366ba10565c8598e6fa4745ad375360d7b9685241e3fa5c94ab5bd562e2f388ee877bd08cbf3732066058e1e2d872ace98ba7fcb6864a80221b7ad7c44b11406fdc6d45a654add7376366fbccef4111c920db6abac8584b30cbeafa1770bd2da652e285c709392e0461da0d0f3d93f454778b17751349145d1cab9ea0b0259af322890e85f9a16206b7053320f8931011be3acdf246e73cc2a4324f73e39c9b878b83a74e55cda4ea4a75b434550770735dd1b461547f668035794eeec769d4aa4b2719f422d340efadb0490d33f63df73de71b55cdf590be26b8fa0eb6eb8446c4bd1851021776db21d70bec3afadebbd361040fa559afbc06e4f801e59f0d35724a8a844ee77f8726ba2b96cc12b3be953af2698c24369e1597b6b2a77e68dea5d2969994b9177d45eab53e963480c1f7b035ade02125f38d032639158faf9f260e8bd6e7cb142333b4c7875d3943ca8a9c3355dcfcc0386f9cefe99417645b86097a0cf95d1cb358978898331065e5622fafab067f49d5a1bf6abe0b44fd8b390a4a3dc1679dadc3c2175acc23bdb13f3b164f65b4e534e33b3f51539a4b6ed88a6a6b2feebecb6b6cf4a8cbcb2d914c28f6addca2e89796947257ac4e3d0e11f0b9cae65edf4929180cfe94c5d8c5c9246b24186d82cff02d97918910bda86625e2357ac0f6b1b89d276ff463c14ea3479e3fc69ee26f653ae5ba9dd23af407330d9da01cbb7ad5fd04c420099a6813b4ff0a4b76c233021ea9c074ed937f1596050092759564d5b7b35ed4436c14be3c30bae3ccf871fb5f4d4012a892e976a8235750ee892036bd1c80a3245ce186023ea96b0dcb5c64cbb5c928e6ecba849af29feb75d3ba8fa54a173d04ef1dc3d84b6df755f1b80f3dfa6b8bbbfeed6132bc5ee24875ba3e83a23320a83e893335c0d0884189a9189b86626c1c838a1e74e17aed3cec489bef082ea265537c4a434522c37b2f8ab655847565e9617073d1e00fe6faa75a71a3a3bfeba092b4892975dd140abbebe4c7b8cd242fb8fb5ed7ba64c57a7439c5335e903499227bd33428291ca783aaf3f8011b0c8feb4cc25a95f3fd7b892cd5297f3ab20e4598c5cba4620d16acf0e414ebdc3df4a3e59f3db921ed9c567ff35b1bddb6b2e4c15630fbd3062323cc2ddfb67a3a588a20c1d68d32d25aa81a48f73b783af154664a8aa7c8b0f09a90152ebf021fa059df2c00868d90ea94e206906281dbdc9581f576f48ec42203f9523657f19595d384e05a61e0170ec347a2b46c80901c7df6ad96e0ac80183c02cd54ccb7c2c0475487bf0ca89b9c64bd5de012e3abbfd70e2651dabe67bd754be57bc89c4606c0e985b4404e8fd02e78123efdb785cbded3a0138cf67f30d04919ec51af04d93bcbced3673744a1a87fbe0c1284e0d1d0f83665171019baaf67750494a22a8ff80af63daf4807db72ef17f8a0dce62a213775c9087296e6132fc157712b78ff1c57998f868ac0ec6fc608f103709206ba7d09fa51d19f605c46ad9aeca4ee745b4af738667693fce4dc59554fbaddfb973d78600653d1b4ca0d453ea1d95a75e56b99582857d56c7b609d29f2ef1bba186d842b1ad1f4631d9700b050d76f7f4bbb27fa7796f45986e9a115952c34f1ba91c1211555ad1f80bea6eff48f2932f5f49ec0fe318b193872cfe9d56fec1fb1cd56c66877b656f8d98913a94bda887a5ba918f1c6344b77f4f12f930591351494c1c122379471983da61caa796384a940065c727f3ef4eb0edcbc2f824733626f018fa3ef88ce4ac10b447e8e91645bef7d17d0045d06034b467d3337178dfc324e4b6062b3376639449c7e16b6479aa50965d8ef7d4e3084c365175ccc0ba3a5810f6caa857cd8549db1be37905b020954b46f275c039a2179fc2b213e10e02e7f1f51831e27a7e8d46a704c4ac9485980ae71b55dd29e1e3bbe8cd9df2fbb8bf81e53f3cf5ad19f26c46963e7900ebb274dca356e725d6f8578f630d3cf9fa7ab4d5cf86e4ad310e22c9e179a443091ec13dd8dba1815b4c9678fdf74bf128c684e53e7b05529c9b5e2683f707d99307f4689af3225a95da18efbf51035eedddded4409524b48ff69eb958528701a6fc2ada7b5e84834ca3b491138ab74ca04ff33b1494667b93ae2129d4a85e17b56e6e708f2877b07a8639973e2529e97ea2e0e284f8bed8ba8a12e281a3e6872824147d647b1c251e8c71f19793de86781f68e89e032e1bf78783253f3d2951b4ac8865c58204d875a6125141c35f7d77278e836a14c3dec8650a0469f096143387e6bd478e20b6b1f260e9e55a1262be66c1e67695e9116bfd1853756666bf0be228080fad9d27aa2f6a7efe252f3f7984abdc88b11ce48665098e988379e4ca9a1fd1eec58ba8170abdec18c8be59f37da529a617aaef47f0a09125ddb0bec9aec6e92359c7a627f0867bbb2a565e93298979e5f1bad963677946e07bf38a37308e8bf386c7fe249bfcac304f4742b326a4a349c0f6f31e5dfd075563a66068b2604895e58c726502ae691c67d7bd61a17d528941bcfedc79249095002045beea09675dea674c714bc5a69f2a2a8c42b9b330e1a8329c743186a14aaae527d295328c62e61db1f659512bbc7888bd521a73"], 0x88c) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000000)='./mnt\x00', 0x141) openat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) syz_emit_ethernet(0xe2, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x5, 0x6, 0x0, @private=0xa010102, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x30, 0xc2, 0x0, 0x0, 0x0, {[@nop, @eol, @mptcp=@remove_addr={0x1e, 0x88, 0x2, 0x0, "7e54ceff63411693105d43a5dce60b379c5d36facc8b7ac8d265d81e804508935373c469f99d43c81cb6ae61fbd2eb23affc8b87b082b6f9799e2440e65dd950ab43e5d1230cecd570624db5550a062fb171bee943b04111fde1cc0971469afd541e4d45a4744b06a1df96feba1082245bbb36d3d5e423c735159845fd5253a13498831c74"}, @md5sig={0x13, 0x12, "7c395733018c7bd5eb0b6d1fc194d870"}, @exp_fastopen={0xfe, 0x7, 0xf989, "465a9f"}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) iopl(0x3) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) 0s ago: executing program 3 (id=240): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xffffbffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x6}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:8262' (ED25519) to the list of known hosts. [ 42.020261][ T5674] cgroup: Unknown subsys name 'net' [ 42.155532][ T5674] cgroup: Unknown subsys name 'cpuset' [ 42.161074][ T5674] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.165374][ T5674] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.425421][ T5089] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.431111][ T5734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.435046][ T5734] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.438032][ T5734] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.439746][ T5743] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.441610][ T5734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.443834][ T5743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.446052][ T5734] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.448841][ T5743] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.450922][ T5734] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.451414][ T5742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.452341][ T5742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.453377][ T5745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.454332][ T5744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.455683][ T5734] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.456100][ T5734] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.457465][ T5738] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.461493][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.466733][ T5745] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.481086][ T5745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.978064][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.981033][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.983928][ T5727] bridge_slave_0: entered allmulticast mode [ 47.987479][ T5727] bridge_slave_0: entered promiscuous mode [ 48.005506][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.007987][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.010371][ T5727] bridge_slave_1: entered allmulticast mode [ 48.013159][ T5727] bridge_slave_1: entered promiscuous mode [ 48.057952][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.063635][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.090195][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.094038][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.096462][ T5728] bridge_slave_0: entered allmulticast mode [ 48.099948][ T5728] bridge_slave_0: entered promiscuous mode [ 48.115051][ T5727] team0: Port device team_slave_0 added [ 48.117022][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.119837][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.122248][ T5728] bridge_slave_1: entered allmulticast mode [ 48.124805][ T5728] bridge_slave_1: entered promiscuous mode [ 48.139462][ T5727] team0: Port device team_slave_1 added [ 48.198812][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.242167][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.246532][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.248797][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.257668][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.289350][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.292271][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.301955][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.306801][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.309558][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.311904][ T5736] bridge_slave_0: entered allmulticast mode [ 48.314598][ T5736] bridge_slave_0: entered promiscuous mode [ 48.318180][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.321013][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.324035][ T5736] bridge_slave_1: entered allmulticast mode [ 48.326937][ T5736] bridge_slave_1: entered promiscuous mode [ 48.349594][ T5728] team0: Port device team_slave_0 added [ 48.368905][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.371988][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.374871][ T5737] bridge_slave_0: entered allmulticast mode [ 48.378319][ T5737] bridge_slave_0: entered promiscuous mode [ 48.383611][ T5728] team0: Port device team_slave_1 added [ 48.399944][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.421278][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.423533][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.425698][ T5737] bridge_slave_1: entered allmulticast mode [ 48.428291][ T5737] bridge_slave_1: entered promiscuous mode [ 48.455144][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.459471][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.463150][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.473455][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.479456][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.482489][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.492320][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.503958][ T5727] hsr_slave_0: entered promiscuous mode [ 48.507118][ T5727] hsr_slave_1: entered promiscuous mode [ 48.558979][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.565620][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.605944][ T5736] team0: Port device team_slave_0 added [ 48.621481][ T5728] hsr_slave_0: entered promiscuous mode [ 48.624413][ T5728] hsr_slave_1: entered promiscuous mode [ 48.627096][ T5728] debugfs: 'hsr0' already exists in 'hsr' [ 48.629324][ T5728] Cannot create hsr debugfs directory [ 48.640323][ T5736] team0: Port device team_slave_1 added [ 48.663735][ T5737] team0: Port device team_slave_0 added [ 48.678961][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.681594][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.691496][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.698549][ T5737] team0: Port device team_slave_1 added [ 48.719100][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.721710][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.731735][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.743023][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.745283][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.753284][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.783307][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.786324][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.796613][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.867847][ T5737] hsr_slave_0: entered promiscuous mode [ 48.871101][ T5737] hsr_slave_1: entered promiscuous mode [ 48.873610][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 48.875445][ T5737] Cannot create hsr debugfs directory [ 48.923588][ T5736] hsr_slave_0: entered promiscuous mode [ 48.926750][ T5736] hsr_slave_1: entered promiscuous mode [ 48.929744][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 48.932177][ T5736] Cannot create hsr debugfs directory [ 49.083843][ T5727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.094261][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.100973][ T5727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.106489][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.133809][ T5727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.138455][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.141893][ T5727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.146114][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.217694][ T5728] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.223486][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.226511][ T5728] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.231890][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.234616][ T5728] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.238538][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.241587][ T5728] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.247245][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.303485][ T5737] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.309210][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.314642][ T5737] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.320050][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.324225][ T5737] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.330095][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.334633][ T5737] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.340021][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.434902][ T5736] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.440176][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.443300][ T5736] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.448166][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.451363][ T5736] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.456365][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.459593][ T5736] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.464098][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.491871][ T5745] Bluetooth: hci1: command tx timeout [ 49.491883][ T5089] Bluetooth: hci2: command tx timeout [ 49.492050][ T5089] Bluetooth: hci3: command tx timeout [ 49.494854][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.501245][ T5745] Bluetooth: hci0: command tx timeout [ 49.509514][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.531420][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.551206][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.553759][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.557917][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.560194][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.581732][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.591426][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.599903][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.602272][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.622146][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.624544][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.636968][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.654903][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.657289][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.667524][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.673883][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.675911][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.701588][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.721698][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.724334][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.740537][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.743715][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.966086][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.005012][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.016095][ T5727] veth0_vlan: entered promiscuous mode [ 50.029395][ T5727] veth1_vlan: entered promiscuous mode [ 50.049542][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.056029][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.068359][ T5727] veth0_macvtap: entered promiscuous mode [ 50.084887][ T5727] veth1_macvtap: entered promiscuous mode [ 50.091614][ T5728] veth0_vlan: entered promiscuous mode [ 50.105902][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.114671][ T5728] veth1_vlan: entered promiscuous mode [ 50.137014][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.154123][ T5737] veth0_vlan: entered promiscuous mode [ 50.164008][ T5736] veth0_vlan: entered promiscuous mode [ 50.173462][ T5807] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.187717][ T5737] veth1_vlan: entered promiscuous mode [ 50.191655][ T5736] veth1_vlan: entered promiscuous mode [ 50.216077][ T5728] veth0_macvtap: entered promiscuous mode [ 50.225448][ T5728] veth1_macvtap: entered promiscuous mode [ 50.246570][ T5737] veth0_macvtap: entered promiscuous mode [ 50.258355][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.269616][ T5737] veth1_macvtap: entered promiscuous mode [ 50.277825][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.278049][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.284891][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.287899][ T5736] veth0_macvtap: entered promiscuous mode [ 50.302321][ T5736] veth1_macvtap: entered promiscuous mode [ 50.319935][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.323196][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.323252][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.330029][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.347476][ T5810] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.351133][ T5810] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.358130][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.363532][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.372758][ T5810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.387790][ T5727] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.393480][ T5810] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.405172][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.405390][ T5727] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.411282][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.417166][ T5727] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.424900][ T5727] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.450514][ T5727] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.491245][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.495505][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.496139][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.501799][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.532007][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.536704][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.549087][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.551724][ T5807] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.555709][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.575269][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.578174][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.595318][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.601391][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.649754][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.661117][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.670790][ T5810] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.675006][ T5810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.685040][ T5810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.688102][ T5810] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.691753][ T5810] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.721173][ T5807] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.571960][ T5745] Bluetooth: hci3: command tx timeout [ 51.573679][ T5745] Bluetooth: hci0: command tx timeout [ 51.575941][ T5089] Bluetooth: hci1: command tx timeout [ 51.577873][ T5089] Bluetooth: hci2: command tx timeout [ 51.727675][ T5902] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7'. [ 51.743581][ T5906] file system registered [ 51.744380][ T5902] e1000e 0000:00:02.0 eth1: removed PHC [ 51.772171][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 51.775048][ T5906] netlink: 'syz.3.9': attribute type 5 has an invalid length. [ 51.778574][ T5906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9'. [ 51.790936][ T5910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'. [ 51.857889][ T5902] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 51.900262][ T5906] geneve2: entered promiscuous mode [ 51.902484][ T5906] geneve2: entered allmulticast mode [ 51.926960][ T5728] ffs_data_put(): freeing [ 51.941247][ T5810] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 51.945813][ T5810] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 51.949977][ T5810] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 51.954797][ T5810] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 52.019783][ T5921] Invalid ELF header magic: != ELF [ 52.077792][ T5921] ======================================================= [ 52.077792][ T5921] WARNING: The mand mount option has been deprecated and [ 52.077792][ T5921] and is ignored by this kernel. Remove the mand [ 52.077792][ T5921] option from the mount to silence this warning. [ 52.077792][ T5921] ======================================================= [ 52.095470][ T5921] overlay: ./file0 is not a directory [ 52.343997][ T42] audit: type=1326 audit(1786270203.425:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.11" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 52.357228][ T42] audit: type=1326 audit(1786270203.435:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.11" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 52.368164][ T5933] process 'syz.2.11' launched '/dev/fd/4' with NULL argv: empty string added [ 52.371330][ T42] audit: type=1326 audit(1786270203.435:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.11" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 52.384501][ T42] audit: type=1326 audit(1786270203.435:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.11" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 52.394989][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'. [ 52.397887][ T42] audit: type=1326 audit(1786270203.435:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.11" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 52.405122][ T42] audit: type=1326 audit(1786270203.435:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.11" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 52.418183][ T42] audit: type=1326 audit(1786270203.435:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.11" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 52.424697][ T42] audit: type=1326 audit(1786270203.435:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.11" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 52.431613][ T42] audit: type=1326 audit(1786270203.435:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.11" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71974eb code=0x7ffc0000 [ 52.439511][ T42] audit: type=1326 audit(1786270203.435:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.11" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 53.297973][ T5965] Invalid ELF header magic: != ELF [ 53.337335][ T5965] overlay: ./file0 is not a directory [ 53.619129][ T5970] Invalid ELF header magic: != ELF [ 53.651454][ T5745] Bluetooth: hci0: command tx timeout [ 53.653926][ T64] Bluetooth: hci2: command tx timeout [ 53.657834][ T5745] Bluetooth: hci1: command tx timeout [ 53.660735][ T64] Bluetooth: hci3: command tx timeout [ 53.696687][ T5970] overlay: ./file0 is not a directory [ 53.805795][ T5971] Invalid ELF header magic: != ELF [ 54.072230][ T5969] overlay: ./file0 is not a directory [ 54.178828][ T5975] openvswitch: netlink: Duplicate key (type 6). [ 54.185448][ T5975] Zero length message leads to an empty skb [ 54.804369][ T5979] Invalid ELF header magic: != ELF [ 54.846658][ T5979] overlay: ./file0 is not a directory [ 55.743798][ T5089] Bluetooth: hci1: command tx timeout [ 55.746957][ T5089] Bluetooth: hci3: command tx timeout [ 55.748991][ T5089] Bluetooth: hci2: command tx timeout [ 55.751718][ T5089] Bluetooth: hci0: command tx timeout [ 55.896732][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'. [ 55.930733][ T5989] netlink: 'syz.1.20': attribute type 5 has an invalid length. [ 55.939618][ T5989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20'. [ 55.978663][ T5989] geneve2: entered promiscuous mode [ 56.018954][ T5989] geneve2: entered allmulticast mode [ 56.063935][ T5736] ffs_data_put(): freeing [ 56.141789][ T5807] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 56.149485][ T5807] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 56.168743][ T5807] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 56.172699][ T5807] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 56.363359][ T5996] veth0_to_bond: entered promiscuous mode [ 56.365867][ T5996] veth0_to_bond: entered allmulticast mode [ 57.088269][ T6008] netlink: 32 bytes leftover after parsing attributes in process `syz.0.25'. [ 57.096998][ T6008] netlink: 36 bytes leftover after parsing attributes in process `syz.0.25'. [ 57.198520][ T6016] netlink: 'syz.0.28': attribute type 4 has an invalid length. [ 57.241134][ T6016] tc action pedit offset must be on 32 bit boundaries [ 57.280073][ T6018] Invalid ELF header magic: != ELF [ 57.340254][ T6018] overlay: ./file0 is not a directory [ 57.393210][ T6014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.27'. [ 57.540812][ T850] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 57.597222][ T6022] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 57.711199][ T850] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 57.722855][ T850] usb 6-1: config 0 has no interfaces? [ 57.725599][ T850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.742911][ T850] usb 6-1: config 0 descriptor?? [ 58.069925][ T5800] usb 6-1: USB disconnect, device number 2 [ 59.285042][ T6041] Invalid ELF header magic: != ELF [ 59.300309][ T6041] overlay: ./file0 is not a directory [ 60.023577][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 60.069022][ T6052] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.073115][ T6052] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 60.474083][ T6052] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.477589][ T6052] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 60.658058][ T6052] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.661416][ T6052] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 61.218356][ T6052] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.228491][ T6052] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 61.252963][ T5800] IPVS: starting estimator thread 0... [ 61.328419][ T6068] netlink: 84 bytes leftover after parsing attributes in process `syz.0.41'. [ 61.350840][ T6064] IPVS: using max 45 ests per chain, 108000 per kthread [ 61.402378][ T5737] ffs_data_put(): freeing [ 61.420749][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 61.423326][ T13] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 61.430862][ T5807] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 61.433621][ T5807] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 61.488732][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 61.532163][ T13] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 61.538795][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 61.544484][ T13] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 61.561083][ T6074] netlink: 112 bytes leftover after parsing attributes in process `syz.1.44'. [ 61.583322][ T6074] syzkaller0: entered promiscuous mode [ 61.585907][ T6074] syzkaller0: entered allmulticast mode [ 61.723800][ T5733] IPVS: starting estimator thread 0... [ 61.796322][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.43'. [ 61.808612][ T6086] netlink: 'syz.3.43': attribute type 5 has an invalid length. [ 61.817929][ T6086] netlink: 20 bytes leftover after parsing attributes in process `syz.3.43'. [ 61.820800][ T6085] IPVS: using max 44 ests per chain, 105600 per kthread [ 62.653866][ T6096] Invalid ELF header magic: != ELF [ 62.792926][ T6096] overlay: ./file0 is not a directory [ 62.874405][ T6097] Invalid ELF header magic: != ELF [ 62.980766][ T6094] overlay: ./file0 is not a directory [ 63.316921][ T6098] Invalid ELF header magic: != ELF [ 63.409770][ T6104] netlink: 32 bytes leftover after parsing attributes in process `syz.3.50'. [ 64.534642][ T6113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.53'. [ 64.543744][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.53'. [ 64.748546][ T6120] Invalid ELF header magic: != ELF [ 64.761728][ T6118] veth0_to_bond: entered promiscuous mode [ 64.767058][ T6118] veth0_to_bond: entered allmulticast mode [ 64.803212][ T6120] overlay: ./file0 is not a directory [ 65.004831][ T6095] overlay: ./file0 is not a directory [ 65.079834][ T6124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.55'. [ 65.164510][ T6126] syzkaller0: entered promiscuous mode [ 65.166423][ T6126] syzkaller0: entered allmulticast mode [ 65.201198][ T6126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.56'. [ 65.330553][ T6133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.59'. [ 65.426106][ T6136] sg_write: data in/out 1265126/1 bytes for SCSI command 0x32-- guessing data in; [ 65.426106][ T6136] program syz.2.60 not setting count and/or reply_len properly [ 65.512480][ T6140] capability: warning: `syz.1.62' uses deprecated v2 capabilities in a way that may be insecure [ 65.775189][ T6148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 65.780411][ T6148] netlink: 'syz.2.63': attribute type 5 has an invalid length. [ 65.784657][ T6148] netlink: 20 bytes leftover after parsing attributes in process `syz.2.63'. [ 65.803684][ T6148] geneve2: entered promiscuous mode [ 65.807756][ T6148] geneve2: entered allmulticast mode [ 65.830754][ T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 65.837875][ T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 65.847488][ T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 65.854192][ T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 65.917018][ T5727] ffs_data_put(): freeing [ 66.648854][ T6149] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 66.809433][ T6157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.64'. [ 67.072101][ T6170] Invalid ELF header magic: != ELF [ 67.125575][ T6170] overlay: ./file0 is not a directory [ 67.381003][ T6174] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 68.831144][ T6186] Invalid ELF header magic: != ELF [ 68.893325][ T6186] overlay: ./file0 is not a directory [ 68.955714][ T6189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.75'. [ 68.963298][ T6189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.75'. [ 70.144375][ T6206] Invalid ELF header magic: != ELF [ 70.147784][ T6208] (syz.0.79,6208,3):ocfs2_get_sector:1713 ERROR: status = -5 [ 70.155633][ T6208] (syz.0.79,6208,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 70.159034][ T6208] (syz.0.79,6208,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 70.164533][ T6208] (syz.0.79,6208,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 70.193415][ T6206] overlay: ./file0 is not a directory [ 70.597245][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 70.600100][ T6216] netlink: 'syz.2.82': attribute type 5 has an invalid length. [ 70.603005][ T6216] netlink: 28 bytes leftover after parsing attributes in process `syz.2.82'. [ 70.609282][ T6216] geneve3: entered promiscuous mode [ 70.611409][ T6216] geneve3: entered allmulticast mode [ 70.637649][ T5727] ffs_data_put(): freeing [ 70.666632][ T6219] Invalid ELF header magic: != ELF [ 70.900090][ T6214] overlay: ./file0 is not a directory [ 70.932700][ T6223] Invalid ELF header magic: != ELF [ 70.934592][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.940559][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.008070][ T6223] overlay: ./file0 is not a directory [ 71.241323][ T6231] Invalid ELF header magic: != ELF [ 71.551850][ T6229] overlay: ./file0 is not a directory [ 71.766955][ T6230] tipc: Started in network mode [ 71.768627][ T6230] tipc: Node identity 0010000000000000002, cluster identity 1 [ 72.210847][ T6237] Invalid ELF header magic: != ELF [ 72.311938][ T6236] overlay: ./file0 is not a directory [ 72.370899][ T6228] overlayfs: overlapping lowerdir path [ 72.702205][ T6247] sg_write: data in/out 1265126/1 bytes for SCSI command 0x32-- guessing data in; [ 72.702205][ T6247] program syz.2.92 not setting count and/or reply_len properly [ 72.837420][ T6253] jffs2: notice: (6253) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 72.983394][ T6261] binder: 6251:6261 ioctl 8400941f 80000a00 returned -22 [ 73.110743][ T50] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.804638][ T42] kauditd_printk_skb: 422 callbacks suppressed [ 73.804657][ T42] audit: type=1326 audit(1786270224.885:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6267 comm="syz.1.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 73.817129][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 73.817185][ T42] audit: type=1326 audit(1786270224.885:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6267 comm="syz.1.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 73.828969][ T42] audit: type=1326 audit(1786270224.885:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6267 comm="syz.1.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 73.837105][ T42] audit: type=1326 audit(1786270224.885:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6267 comm="syz.1.99" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 73.843655][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 73.847086][ T42] audit: type=1326 audit(1786270224.885:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6267 comm="syz.1.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 73.848882][ T50] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 73.856546][ T42] audit: type=1326 audit(1786270224.885:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6267 comm="syz.1.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 73.862193][ T50] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 73.867763][ T42] audit: type=1326 audit(1786270224.885:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6267 comm="syz.1.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 73.870872][ T50] usb 5-1: config 0 has no interface number 0 [ 73.878558][ T42] audit: type=1326 audit(1786270224.885:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6267 comm="syz.1.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 73.880780][ T50] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 73.892251][ T50] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 73.892305][ T42] audit: type=1326 audit(1786270224.885:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6267 comm="syz.1.99" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71674eb code=0x7ffc0000 [ 73.896691][ T50] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 73.904580][ T42] audit: type=1326 audit(1786270224.885:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6267 comm="syz.1.99" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f67fec code=0x7ffc0000 [ 73.907596][ T50] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 73.907615][ T50] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 73.907644][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.928273][ T50] usb 5-1: config 0 descriptor?? [ 73.937721][ T50] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 74.128291][ T6282] Invalid ELF header magic: != ELF [ 74.134812][ T6256] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -90 [ 74.154357][ T6282] overlay: ./file0 is not a directory [ 74.981334][ T6295] syz_tun: entered allmulticast mode [ 75.012583][ T6294] syz_tun: left allmulticast mode [ 75.083502][ T6299] capability: warning: `syz.3.105' uses 32-bit capabilities (legacy support in use) [ 75.132316][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'. [ 75.135944][ T6302] netlink: 'syz.1.106': attribute type 5 has an invalid length. [ 75.138984][ T6302] netlink: 28 bytes leftover after parsing attributes in process `syz.1.106'. [ 75.629457][ T5736] ffs_data_put(): freeing [ 75.732190][ T10] usb 5-1: USB disconnect, device number 2 [ 75.739868][ T10] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 76.062354][ T6316] Invalid ELF header magic: != ELF [ 76.105049][ T6316] overlay: ./file0 is not a directory [ 76.300474][ T6321] usbip-vudc usbip-vudc.0: gadget not bound [ 76.479490][ T6326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.113'. [ 76.673431][ T6332] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 76.676282][ T6332] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.681564][ T6332] vhci_hcd vhci_hcd.0: Device attached [ 76.693090][ T6333] vhci_hcd: connection closed [ 76.695782][ T13] vhci_hcd vhci_hcd.1: stop threads [ 76.706656][ T13] vhci_hcd vhci_hcd.1: release socket [ 76.709064][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 76.850876][ T850] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 76.917929][ T6343] hpfs: Bad magic ... probably not HPFS [ 76.964317][ T6348] usbip-vudc usbip-vudc.0: gadget not bound [ 76.993828][ T6346] syzkaller0: entered promiscuous mode [ 76.995756][ T6346] syzkaller0: entered allmulticast mode [ 77.031533][ T850] usb 8-1: Using ep0 maxpacket: 32 [ 77.034834][ T850] usb 8-1: unable to get BOS descriptor or descriptor too short [ 77.037607][ T850] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 77.044082][ T850] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 77.047729][ T850] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 77.052796][ T850] usb 8-1: config 14 has no interface number 0 [ 77.054694][ T850] usb 8-1: config 14 has no interface number 1 [ 77.061586][ T850] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 77.065584][ T850] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 77.069191][ T850] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 77.073920][ T850] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 77.077484][ T850] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 77.081231][ T850] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.085265][ T850] usb 8-1: config 14 interface 57 has no altsetting 0 [ 77.087491][ T850] usb 8-1: config 14 interface 228 has no altsetting 0 [ 77.091652][ T850] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.094219][ T850] usb 8-1: Product: syz [ 77.095644][ T850] usb 8-1: Manufacturer: syz [ 77.097192][ T850] usb 8-1: SerialNumber: syz [ 77.430748][ T5837] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 77.451554][ T6373] veth0_to_bond: entered promiscuous mode [ 77.453373][ T6373] veth0_to_bond: entered allmulticast mode [ 77.542628][ T850] legousbtower 8-1:14.57: interrupt endpoints not found [ 77.600831][ T5837] usb 7-1: Using ep0 maxpacket: 32 [ 77.606385][ T5837] usb 7-1: unable to get BOS descriptor or descriptor too short [ 77.609919][ T5837] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 77.616155][ T5837] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 77.619524][ T5837] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 77.625692][ T5837] usb 7-1: config 14 has no interface number 0 [ 77.630786][ T5837] usb 7-1: config 14 has no interface number 1 [ 77.634138][ T5837] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 77.642390][ T5837] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 77.647213][ T5837] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 77.652878][ T5837] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 77.657556][ T5837] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 77.662190][ T5837] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.667594][ T5837] usb 7-1: config 14 interface 57 has no altsetting 0 [ 77.670319][ T5837] usb 7-1: config 14 interface 228 has no altsetting 0 [ 77.678719][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.682052][ T5837] usb 7-1: Product: syz [ 77.683798][ T5837] usb 7-1: Manufacturer: syz [ 77.685729][ T5837] usb 7-1: SerialNumber: syz [ 77.962242][ T6389] syz.0.129 uses obsolete (PF_INET,SOCK_PACKET) [ 78.120718][ T5837] legousbtower 7-1:14.57: interrupt endpoints not found [ 78.176744][ T6393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.420744][ T5895] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 78.513202][ T5837] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 78.528091][ T5837] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 78.542951][ T6331] i801_smbus 0000:00:03.0: SMBus using polling [ 78.575562][ T6331] i2c i2c-2: Memory type 0x07 not supported yet, not instantiating SPD [ 78.601476][ T5895] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 78.607237][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 78.630678][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 78.635644][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.638075][ T5895] usb 6-1: Product: syz [ 78.639334][ T5895] usb 6-1: Manufacturer: syz [ 78.650696][ T5895] usb 6-1: SerialNumber: syz [ 78.655907][ T5895] usb 6-1: config 0 descriptor?? [ 78.663112][ T5895] hub 6-1:0.0: bad descriptor, ignoring hub [ 78.664920][ T5895] hub 6-1:0.0: probe with driver hub failed with error -5 [ 78.670273][ T5895] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input5 [ 78.782231][ T850] legousbtower 8-1:14.228: get version request failed: -110 [ 78.784866][ T850] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -110 [ 79.276166][ T50] usb 7-1: USB disconnect, device number 2 [ 79.299523][ T50] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 79.622697][ T5733] usb 8-1: USB disconnect, device number 2 [ 79.953918][ T6433] Invalid ELF header magic: != ELF [ 79.967481][ T6433] overlay: ./file0 is not a directory [ 80.102075][ T6443] program syz.0.141 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.253179][ T6448] usbip-vudc usbip-vudc.0: gadget not bound [ 80.373199][ T6453] netlink: 24 bytes leftover after parsing attributes in process `syz.0.144'. [ 80.373210][ T6452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.144'. [ 80.722948][ T6463] Bluetooth: MGMT ver 1.23 [ 80.899515][ T6476] netlink: 32 bytes leftover after parsing attributes in process `syz.2.151'. [ 80.918648][ T6476] input: syz0 as /devices/virtual/input/input6 [ 81.021549][ T6486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.153'. [ 81.035973][ T6486] ksmbd: Unknown IPC event: 0, ignore. [ 81.087975][ T6494] netlink: 24 bytes leftover after parsing attributes in process `syz.3.155'. [ 81.097826][ T6494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.155'. [ 81.191721][ T1341] cfg80211: failed to load regulatory.db [ 81.239955][ T6503] Invalid ELF header magic: != ELF [ 81.251137][ T6503] overlay: ./file0 is not a directory [ 81.277871][ T6510] binder: 6509:6510 ioctl 7b2 800035c0 returned -22 [ 81.327772][ T6510] binder: 6509:6510 ioctl c008644e 800002c0 returned -22 [ 81.331912][ T5733] usb 6-1: USB disconnect, device number 3 [ 81.377017][ T6518] kvm: apic: phys broadcast and lowest prio [ 81.641067][ T6536] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.165'. [ 81.686426][ T6533] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 81.706964][ T6533] pci 0000:00:00.0: Adding to iommu group 0 [ 81.777131][ T5728] ffs_data_put(): freeing [ 81.874932][ T6544] netlink: 24 bytes leftover after parsing attributes in process `syz.3.167'. [ 81.885979][ T6544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.167'. [ 81.908732][ T6539] bond1 (unregistering): Released all slaves [ 82.368388][ T5737] ffs_data_put(): freeing [ 82.383787][ T6571] syzkaller0: entered promiscuous mode [ 82.385621][ T6571] syzkaller0: entered allmulticast mode [ 82.435691][ T6575] Invalid ELF header magic: != ELF [ 82.462714][ T6575] overlay: ./file0 is not a directory [ 82.567390][ T6579] netlink: 24 bytes leftover after parsing attributes in process `syz.3.179'. [ 82.685019][ T6585] Invalid ELF header magic: != ELF [ 82.697951][ T6585] overlay: ./file0 is not a directory [ 82.770959][ T5745] Bluetooth: hci0: command tx timeout [ 82.788669][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.792010][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.858355][ T6587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.864368][ T6587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.982740][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.988205][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 82.991201][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.993800][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 82.998614][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.007649][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 83.012570][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.015357][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 83.059248][ T5728] ffs_data_put(): freeing [ 83.106880][ T6602] syzkaller1: tun_chr_ioctl cmd 35108 [ 83.500472][ T6612] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 83.602546][ T6616] bond0: entered promiscuous mode [ 83.604260][ T6616] bond_slave_0: entered promiscuous mode [ 83.606264][ T6616] bond_slave_1: entered promiscuous mode [ 83.613582][ T6616] ipvlan1: entered promiscuous mode [ 83.616097][ T6616] ipvlan1: left promiscuous mode [ 83.617976][ T6616] bond0: left promiscuous mode [ 83.619572][ T6616] bond_slave_0: left promiscuous mode [ 83.621759][ T6616] bond_slave_1: left promiscuous mode [ 84.037676][ T6640] overlayfs: maximum fs stacking depth exceeded [ 84.084761][ T5728] ffs_data_put(): freeing [ 84.287353][ T6649] Invalid ELF header magic: != ELF [ 84.294751][ T6649] overlay: ./file0 is not a directory [ 84.629410][ T42] kauditd_printk_skb: 556 callbacks suppressed [ 84.629428][ T42] audit: type=1326 audit(1786270235.705:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.2.205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 84.639193][ T42] audit: type=1326 audit(1786270235.705:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.2.205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 84.647629][ T42] audit: type=1326 audit(1786270235.715:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.2.205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 84.655311][ T42] audit: type=1326 audit(1786270235.715:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.2.205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 84.662654][ T42] audit: type=1326 audit(1786270235.715:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.2.205" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 84.670025][ T42] audit: type=1326 audit(1786270235.715:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.2.205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 84.677209][ T42] audit: type=1326 audit(1786270235.715:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.2.205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 84.685334][ T42] audit: type=1326 audit(1786270235.715:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.2.205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 84.693268][ T42] audit: type=1326 audit(1786270235.715:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.2.205" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71974eb code=0x7ffc0000 [ 84.702630][ T42] audit: type=1326 audit(1786270235.715:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6660 comm="syz.2.205" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f98fec code=0x7ffc0000 [ 84.722349][ T6663] veth0_to_bond: entered promiscuous mode [ 84.724798][ T6663] veth0_to_bond: entered allmulticast mode [ 85.082823][ T6681] bond1: entered allmulticast mode [ 85.085381][ T6681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.876726][ T6695] __nla_validate_parse: 6 callbacks suppressed [ 85.876739][ T6695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.215'. [ 85.886615][ T6695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.215'. [ 86.265572][ T6703] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 86.306931][ T6703] Failed to initialize the IGMP6 autojoin socket (err -105) [ 86.506740][ T6713] loop0: detected capacity change from 0 to 32768 [ 86.531208][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.228'. [ 86.535069][ T6713] netlink: 'syz.0.228': attribute type 5 has an invalid length. [ 86.545197][ T6713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.228'. [ 86.597363][ T6713] geneve2: entered promiscuous mode [ 86.600716][ T6713] geneve2: entered allmulticast mode [ 86.630732][ T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 86.634495][ T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 86.638169][ T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 86.649589][ T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 86.722561][ T6717] device-mapper: thin: Data device (loop1) discard unsupported: Disabling discard passdown. [ 86.785106][ T6718] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 86.832437][ T6718] pci 0000:00:00.0: Adding to iommu group 0 [ 86.851071][ T5089] Bluetooth: hci0: command 0x0406 tx timeout [ 87.381728][ T6743] netlink: 24 bytes leftover after parsing attributes in process `syz.0.231'. [ 87.398512][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.231'. [ 87.442158][ T6744] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 87.444732][ T6744] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 87.449390][ T6744] vhci_hcd vhci_hcd.0: Device attached [ 87.460382][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 87.500889][ T6744] netlink: 40 bytes leftover after parsing attributes in process `syz.3.230'. [ 87.508395][ T6744] netlink: 'syz.3.230': attribute type 12 has an invalid length. [ 87.521640][ T10] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 87.675760][ T5837] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 87.760963][ T5837] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 87.802692][ T6749] fido_id[6749]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 88.002210][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 88.170990][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 88.174750][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 88.179946][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 88.183334][ T10] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 88.188074][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.195369][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.199906][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 88.208047][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.242546][ T10] usbtmc 5-1:16.0: bulk endpoints not found [ 88.323554][ T6745] vhci_hcd: connection reset by peer [ 88.335790][ T5810] vhci_hcd vhci_hcd.3: stop threads [ 88.338125][ T5810] vhci_hcd vhci_hcd.3: release socket [ 88.350576][ T5810] vhci_hcd vhci_hcd.3: disconnect device [ 88.455909][ T6753] ip6gretap0: entered promiscuous mode [ 88.955442][ T10] usb 5-1: USB disconnect, device number 3 [ 89.002340][ T6776] ------------[ cut here ]------------ [ 89.004125][ T6776] err == -EMSGSIZE [ 89.004133][ T6776] WARNING: net/core/rtnetlink.c:4538 at rtmsg_ifinfo_build_skb+0x1c1/0x260, CPU#0: syz.1.239/6776 [ 89.008658][ T6776] Modules linked in: [ 89.010330][ T6776] CPU: 0 UID: 0 PID: 6776 Comm: syz.1.239 Not tainted syzkaller #0 PREEMPT(full) [ 89.013085][ T6776] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.016216][ T6776] RIP: 0010:rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 89.018162][ T6776] Code: ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 80 00 00 00 45 8b 76 08 e9 3c ff ff ff e8 80 95 77 f8 90 <0f> 0b 90 ba 02 00 00 00 48 89 ee 31 ff bb a6 ff ff ff e8 58 8f f0 [ 89.024345][ T6776] RSP: 0018:ffffc900076fede0 EFLAGS: 00010287 [ 89.026272][ T6776] RAX: 000000000000ab77 RBX: 00000000ffffffa6 RCX: ffffc9000cec1000 [ 89.028954][ T6776] RDX: 0000000000080000 RSI: ffffffff89923a20 RDI: ffff8880249ba540 [ 89.031650][ T6776] RBP: ffff88802af6a000 R08: 0000000000000005 R09: 0000000000000000 [ 89.034329][ T6776] R10: 00000000ffffffa6 R11: 0000000000000000 R12: 0000000000000002 [ 89.036805][ T6776] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88801421a108 [ 89.039277][ T6776] FS: 0000000000000000(0000) GS:ffff888096bf3000(0063) knlGS:00000000f5426b40 [ 89.042345][ T6776] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 89.044414][ T6776] CR2: 00000000f73c44e8 CR3: 0000000013511000 CR4: 0000000000352ef0 [ 89.045829][ T6778] netlink: 84 bytes leftover after parsing attributes in process `syz.3.241'. [ 89.046921][ T6776] Call Trace: [ 89.051254][ T6776] [ 89.052360][ T6776] rtnetlink_event+0x137/0x1f0 [ 89.053881][ T6776] notifier_call_chain+0x99/0x3f0 [ 89.055480][ T6776] call_netdevice_notifiers_info+0xbe/0x110 [ 89.057478][ T6776] netif_disable_lro+0x3e9/0x660 [ 89.059308][ T6776] ? __pfx_netif_disable_lro+0x10/0x10 [ 89.061591][ T6776] ? lockdep_hardirqs_on+0x78/0x100 [ 89.063788][ T6776] ? __local_bh_enable_ip+0x9e/0x120 [ 89.065773][ T6776] ? neigh_parms_alloc+0x45f/0x5e0 [ 89.067428][ T6776] inetdev_init+0x371/0x570 [ 89.068952][ T6776] inetdev_event+0x7fa/0x17f0 [ 89.070458][ T6776] ? ib_netdevice_event+0xfc/0x330 [ 89.072496][ T6776] ? __pfx_inetdev_event+0x10/0x10 [ 89.074534][ T6776] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 89.076967][ T6776] notifier_call_chain+0x99/0x3f0 [ 89.079009][ T6776] call_netdevice_notifiers_info+0xbe/0x110 [ 89.080907][ T6776] register_netdevice+0x1998/0x25a0 [ 89.082582][ T6776] ? __pfx_register_netdevice+0x10/0x10 [ 89.084798][ T6776] macsec_newlink+0x4fb/0x1c50 [ 89.086765][ T6776] ? __pfx_macsec_newlink+0x10/0x10 [ 89.088753][ T6776] ? __kasan_kmalloc+0xaa/0xb0 [ 89.090437][ T6776] ? __kvmalloc_node_noprof+0x36d/0x970 [ 89.092778][ T6776] ? alloc_netdev_mqs+0xf5f/0x15c0 [ 89.094847][ T6776] ? validate_linkmsg+0x57c/0xba0 [ 89.096895][ T6776] ? __pfx_validate_linkmsg+0x10/0x10 [ 89.099045][ T6776] ? alloc_netdev_mqs+0x120a/0x15c0 [ 89.101445][ T6776] ? rtnl_create_link+0xa4b/0xf80 [ 89.103523][ T6776] ? __pfx_macsec_newlink+0x10/0x10 [ 89.105487][ T6776] rtnl_newlink+0x1499/0x2380 [ 89.107418][ T6776] ? __pfx_rtnl_newlink+0x10/0x10 [ 89.109500][ T6776] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 89.112109][ T6776] ? __kernel_text_address+0xd/0x30 [ 89.114107][ T6776] ? unwind_get_return_address+0x59/0xa0 [ 89.116362][ T6776] ? __pfx_stack_trace_save+0x10/0x10 [ 89.118525][ T6776] ? find_held_lock+0x2b/0x80 [ 89.120293][ T6776] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 89.122409][ T6776] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 89.124471][ T6776] ? __pfx_rtnl_newlink+0x10/0x10 [ 89.126509][ T6776] rtnetlink_rcv_msg+0x95e/0xe90 [ 89.128123][ T6776] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 89.129924][ T6776] ? __lock_acquire+0x49f/0x1a40 [ 89.131664][ T6776] netlink_rcv_skb+0x159/0x420 [ 89.133207][ T6776] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 89.135291][ T6776] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 89.137368][ T6776] ? netlink_deliver_tap+0x1ae/0xcc0 [ 89.139433][ T6776] netlink_unicast+0x585/0x850 [ 89.141009][ T6776] ? __pfx_netlink_unicast+0x10/0x10 [ 89.142675][ T6776] netlink_sendmsg+0x8b0/0xda0 [ 89.144199][ T6776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.145864][ T6776] ? apparmor_socket_sendmsg+0x15b/0x270 [ 89.147652][ T6776] ____sys_sendmsg+0xa4d/0xbe0 [ 89.149205][ T6776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.150938][ T6776] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.152610][ T6776] ___sys_sendmsg+0x190/0x1e0 [ 89.154116][ T6776] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.155739][ T6776] ? futex_wait+0x11e/0x370 [ 89.157221][ T6776] ? find_held_lock+0x2b/0x80 [ 89.158726][ T6776] __sys_sendmsg+0x160/0x210 [ 89.160192][ T6776] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.161902][ T6776] __do_fast_syscall_32+0xe7/0x970 [ 89.163591][ T6776] do_fast_syscall_32+0x32/0x70 [ 89.165140][ T6776] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.167158][ T6776] RIP: 0023:0xf7f67fec [ 89.168441][ T6776] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 89.174425][ T6776] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 89.177096][ T6776] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000280 [ 89.179680][ T6776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.182218][ T6776] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.184701][ T6776] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 89.187234][ T6776] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.189751][ T6776] [ 89.190847][ T6776] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 89.193091][ T6776] CPU: 0 UID: 0 PID: 6776 Comm: syz.1.239 Not tainted syzkaller #0 PREEMPT(full) [ 89.195904][ T6776] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.199028][ T6776] Call Trace: [ 89.200094][ T6776] [ 89.201051][ T6776] dump_stack_lvl+0x100/0x190 [ 89.202518][ T6776] vpanic+0x552/0x970 [ 89.203785][ T6776] ? __pfx_vpanic+0x10/0x10 [ 89.205211][ T6776] panic+0xd1/0xe0 [ 89.206353][ T6776] ? __pfx_panic+0x10/0x10 [ 89.207738][ T6776] check_panic_on_warn.cold+0x19/0x34 [ 89.209396][ T6776] ? rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 89.211133][ T6776] __warn.cold+0x191/0x318 [ 89.212541][ T6776] __report_bug+0x30f/0x440 [ 89.213989][ T6776] ? rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 89.215712][ T6776] ? __pfx___report_bug+0x10/0x10 [ 89.217304][ T6776] ? __pfx_rtnl_fill_ifinfo.isra.0+0x10/0x10 [ 89.219184][ T6776] ? trace_kmalloc+0xeb/0x110 [ 89.220663][ T6776] ? __kasan_kmalloc+0xaa/0xb0 [ 89.222180][ T6776] ? __kmalloc_node_track_caller_noprof+0x34f/0x830 [ 89.224234][ T6776] ? rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 89.226025][ T6776] report_bug+0xb2/0x220 [ 89.227422][ T6776] ? rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 89.229148][ T6776] handle_bug+0x16a/0x2a0 [ 89.230524][ T6776] exc_invalid_op+0x17/0x50 [ 89.231961][ T6776] asm_exc_invalid_op+0x1a/0x20 [ 89.233909][ T6776] RIP: 0010:rtmsg_ifinfo_build_skb+0x1c1/0x260 [ 89.235893][ T6776] Code: ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 80 00 00 00 45 8b 76 08 e9 3c ff ff ff e8 80 95 77 f8 90 <0f> 0b 90 ba 02 00 00 00 48 89 ee 31 ff bb a6 ff ff ff e8 58 8f f0 [ 89.241891][ T6776] RSP: 0018:ffffc900076fede0 EFLAGS: 00010287 [ 89.243789][ T6776] RAX: 000000000000ab77 RBX: 00000000ffffffa6 RCX: ffffc9000cec1000 [ 89.246248][ T6776] RDX: 0000000000080000 RSI: ffffffff89923a20 RDI: ffff8880249ba540 [ 89.248705][ T6776] RBP: ffff88802af6a000 R08: 0000000000000005 R09: 0000000000000000 [ 89.251220][ T6776] R10: 00000000ffffffa6 R11: 0000000000000000 R12: 0000000000000002 [ 89.253661][ T6776] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88801421a108 [ 89.256111][ T6776] ? rtmsg_ifinfo_build_skb+0x1c0/0x260 [ 89.257895][ T6776] rtnetlink_event+0x137/0x1f0 [ 89.259379][ T6776] notifier_call_chain+0x99/0x3f0 [ 89.260967][ T6776] call_netdevice_notifiers_info+0xbe/0x110 [ 89.262819][ T6776] netif_disable_lro+0x3e9/0x660 [ 89.264361][ T6776] ? __pfx_netif_disable_lro+0x10/0x10 [ 89.266066][ T6776] ? lockdep_hardirqs_on+0x78/0x100 [ 89.268156][ T6776] ? __local_bh_enable_ip+0x9e/0x120 [ 89.269815][ T6776] ? neigh_parms_alloc+0x45f/0x5e0 [ 89.271427][ T6776] inetdev_init+0x371/0x570 [ 89.272871][ T6776] inetdev_event+0x7fa/0x17f0 [ 89.274355][ T6776] ? ib_netdevice_event+0xfc/0x330 [ 89.276081][ T6776] ? __pfx_inetdev_event+0x10/0x10 [ 89.277832][ T6776] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 89.279878][ T6776] notifier_call_chain+0x99/0x3f0 [ 89.281804][ T6776] call_netdevice_notifiers_info+0xbe/0x110 [ 89.284050][ T6776] register_netdevice+0x1998/0x25a0 [ 89.285973][ T6776] ? __pfx_register_netdevice+0x10/0x10 [ 89.287752][ T6776] macsec_newlink+0x4fb/0x1c50 [ 89.289222][ T6776] ? __pfx_macsec_newlink+0x10/0x10 [ 89.290799][ T6776] ? __kasan_kmalloc+0xaa/0xb0 [ 89.292255][ T6776] ? __kvmalloc_node_noprof+0x36d/0x970 [ 89.293934][ T6776] ? alloc_netdev_mqs+0xf5f/0x15c0 [ 89.295483][ T6776] ? validate_linkmsg+0x57c/0xba0 [ 89.297052][ T6776] ? __pfx_validate_linkmsg+0x10/0x10 [ 89.298642][ T6776] ? alloc_netdev_mqs+0x120a/0x15c0 [ 89.300181][ T6776] ? rtnl_create_link+0xa4b/0xf80 [ 89.301725][ T6776] ? __pfx_macsec_newlink+0x10/0x10 [ 89.303272][ T6776] rtnl_newlink+0x1499/0x2380 [ 89.304696][ T6776] ? __pfx_rtnl_newlink+0x10/0x10 [ 89.306208][ T6776] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 89.308082][ T6776] ? __kernel_text_address+0xd/0x30 [ 89.309659][ T6776] ? unwind_get_return_address+0x59/0xa0 [ 89.311322][ T6776] ? __pfx_stack_trace_save+0x10/0x10 [ 89.312942][ T6776] ? find_held_lock+0x2b/0x80 [ 89.314370][ T6776] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 89.315931][ T6776] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 89.317533][ T6776] ? __pfx_rtnl_newlink+0x10/0x10 [ 89.319092][ T6776] rtnetlink_rcv_msg+0x95e/0xe90 [ 89.320566][ T6776] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 89.322217][ T6776] ? __lock_acquire+0x49f/0x1a40 [ 89.323743][ T6776] netlink_rcv_skb+0x159/0x420 [ 89.325172][ T6776] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 89.326811][ T6776] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 89.328362][ T6776] ? netlink_deliver_tap+0x1ae/0xcc0 [ 89.329954][ T6776] netlink_unicast+0x585/0x850 [ 89.331428][ T6776] ? __pfx_netlink_unicast+0x10/0x10 [ 89.333012][ T6776] netlink_sendmsg+0x8b0/0xda0 [ 89.334494][ T6776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.336118][ T6776] ? apparmor_socket_sendmsg+0x15b/0x270 [ 89.338070][ T6776] ____sys_sendmsg+0xa4d/0xbe0 [ 89.339862][ T6776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.341931][ T6776] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.343886][ T6776] ___sys_sendmsg+0x190/0x1e0 [ 89.345392][ T6776] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.346999][ T6776] ? futex_wait+0x11e/0x370 [ 89.348374][ T6776] ? find_held_lock+0x2b/0x80 [ 89.349865][ T6776] __sys_sendmsg+0x160/0x210 [ 89.351334][ T6776] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.352942][ T6776] __do_fast_syscall_32+0xe7/0x970 [ 89.354583][ T6776] do_fast_syscall_32+0x32/0x70 [ 89.356110][ T6776] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.358097][ T6776] RIP: 0023:0xf7f67fec [ 89.359329][ T6776] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 89.365108][ T6776] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 89.367574][ T6776] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000280 [ 89.370132][ T6776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 89.373050][ T6776] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.375841][ T6776] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 89.378248][ T6776] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.380605][ T6776] [ 89.382088][ T6776] Kernel Offset: disabled [ 89.383378][ T6776] Rebooting in 86400 seconds..