last executing test programs: 12m33.225402851s ago: executing program 0 (id=242): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x3c, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 12m32.309567849s ago: executing program 0 (id=245): pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) vmsplice(r0, &(0x7f0000000140), 0x0, 0x0) 12m32.014534852s ago: executing program 0 (id=248): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000c80)='./file1\x00', 0x80, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$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") r0 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) getdents64(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) 12m28.60032525s ago: executing program 0 (id=255): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x400000013) 12m24.621094721s ago: executing program 0 (id=264): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 12m22.842841364s ago: executing program 0 (id=271): openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f00000003c0)={0x10000000008005, r2, 0x1}) 12m7.279159537s ago: executing program 32 (id=271): openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f00000003c0)={0x10000000008005, r2, 0x1}) 11m38.443472067s ago: executing program 2 (id=368): getrusage(0xffffffffffffffff, 0x0) 11m38.293366811s ago: executing program 2 (id=371): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r4, 0x9, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000000c0)=0x4) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r5, 0x0, 0x0) mknodat$loop(r5, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) 11m36.499282181s ago: executing program 2 (id=373): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xf) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x128a877, &(0x7f00000000c0)=ANY=[@ANYBLOB]) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) 11m35.638888094s ago: executing program 2 (id=376): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r0, r2, 0xfffffffffffffc01, 0x0) tee(r0, r2, 0x60000000000, 0x0) 11m34.368269081s ago: executing program 2 (id=378): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}}, 0x400c0) 11m34.015713328s ago: executing program 2 (id=382): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@abs, 0x6e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$unix(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x1}}], 0x1, 0x80) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 11m18.806714534s ago: executing program 33 (id=382): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@abs, 0x6e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$unix(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x1}}], 0x1, 0x80) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5m44.079721123s ago: executing program 5 (id=1361): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) ppoll(0x0, 0x0, &(0x7f0000002640)={0x0, 0x3938700}, 0x0, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000180)={0x18, 0x0, 0x0, {0xd}}, 0x18) 5m42.864992573s ago: executing program 5 (id=1367): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_clone(0xa4805400, 0x0, 0x14, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 5m37.353661077s ago: executing program 5 (id=1379): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) ppoll(0x0, 0x0, &(0x7f0000002640)={0x0, 0x3938700}, 0x0, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000180)={0x18, 0x0, 0x0, {0xd}}, 0x18) 5m36.22932505s ago: executing program 5 (id=1384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='dyn']) umount2(0x0, 0x9) 5m31.816307954s ago: executing program 5 (id=1396): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 5m28.840055751s ago: executing program 5 (id=1405): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000140)='./file1\x00', 0x1000c01, &(0x7f0000000040)=ANY=[], 0x5, 0x811, &(0x7f0000002380)="$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") madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f00004ba000/0x2000)=nil, 0x2000, 0xc) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 5m28.431105888s ago: executing program 34 (id=1405): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000140)='./file1\x00', 0x1000c01, &(0x7f0000000040)=ANY=[], 0x5, 0x811, &(0x7f0000002380)="$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") madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f00004ba000/0x2000)=nil, 0x2000, 0xc) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 13.221377291s ago: executing program 8 (id=2679): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open$dir(&(0x7f00000010c0)='./file0\x00', 0x202000, 0x1) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000001180)='./file0\x00', r0, 0x0, 0x41) 13.20622928s ago: executing program 6 (id=2680): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x4}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) 12.584550854s ago: executing program 8 (id=2684): prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1c27, 0x0, 0x1, 0x0, 0x0, 0x5}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x80000000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x10}) 12.583958404s ago: executing program 6 (id=2685): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$caif_stream(0x25, 0x1, 0x4) writev(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x2}, 0x1, 0x0, 0x0, 0x48000}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 11.346930113s ago: executing program 8 (id=2692): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 11.112384629s ago: executing program 1 (id=2693): r0 = socket(0x10, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 11.017654356s ago: executing program 8 (id=2696): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_coalesce={0xf, 0x6, 0x16d20415, 0x8, 0xfffffffb, 0x1000, 0xb2e2, 0x6, 0xffff, 0x0, 0x9, 0x5b7d, 0xd8, 0x6, 0x3ff, 0x7, 0x0, 0x4ad, 0x101, 0x55e2, 0xffff, 0x3ff, 0x5}}) 10.866764826s ago: executing program 1 (id=2697): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c250000000000202020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x7, 0x0, &(0x7f0000000080)="f8ad48cc02cb29", 0x0, 0x4, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) openat$vga_arbiter(0xffffff9c, 0x0, 0x90000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x30000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000240)="f2435f203b000000000000000000", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 10.705327906s ago: executing program 8 (id=2699): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x4e21, 0x2000, 'lblc\x00', 0x10}, 0x2c) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/100, 0x38}], 0x1) syz_io_uring_setup(0x1f90, &(0x7f0000000140)={0x0, 0x4162, 0x840, 0x1, 0x35b}, 0x0, &(0x7f0000000280)) r2 = mmap$IORING_OFF_SQES(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x1000006, 0x8010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)}], 0x1}}], 0x1, 0x10) shutdown(r0, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x700, 0x90, [0x1000000, 0x0, 0x0, 0x0, 0xfffff9, 0x800005c0], 0xff00, 0x0, &(0x7f00000005c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x700}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) setitimer(0x2, &(0x7f0000000540)={{}, {0x0, 0x2710}}, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'ni_labpc\x00', [0x6, 0x8, 0x10000, 0x4, 0x5, 0x6, 0x4, 0x7, 0xa, 0x100, 0x2, 0x7, 0x1ef85e94, 0x9, 0x81, 0x101, 0x0, 0x1cd6, 0x4, 0x7, 0x81, 0xcaa7, 0x0, 0xb0a, 0x31d7, 0xe69, 0x3c, 0xb, 0x5, 0x0, 0xfffffff8]}) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20042, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000340), 0x2800, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x82) 8.942589351s ago: executing program 3 (id=2701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000008060102000000000000000000000000050001000700000054daf9eb61f59b7aebeb210316a060493ba741c9d8fc21586a2efdad"], 0x1c}}, 0x0) 7.176017609s ago: executing program 1 (id=2702): socket$kcm(0x2, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d37, 0x100, 0x10, 0x3fffffe}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) write$bt_hci(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000280)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x800}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) fchdir(0xffffffffffffffff) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x48) write$cgroup_int(r7, &(0x7f0000000000)=0xfe8e, 0x12) socketpair(0x23, 0x2, 0x1, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 6.841895698s ago: executing program 3 (id=2703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c) 4.469760896s ago: executing program 6 (id=2709): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000000)={[], [{@context={'context', 0x3d, 'staff_u'}}, {@smackfshat={'smackfshat', 0x3d, '^'}}, {@dont_hash}, {@dont_measure}, {@permit_directio}, {@fowner_gt}]}, 0x0, 0x23a, &(0x7f0000000880)="$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") r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20040006) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, 0xffffffffffffffff, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) r2 = getpid() syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/3\x00') sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x60080, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x4b, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000040)={0x28, 0x1, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$ocfs2(&(0x7f0000002800), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=") openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 4.142750993s ago: executing program 7 (id=2711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0xb471a23b4fb40cc3}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) syz_emit_ethernet(0x28, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "dd9dec79219e"}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x66}}}}, 0x104) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, 0x0, 0x0, 0x10000, 0x0) 3.95325121s ago: executing program 1 (id=2713): io_setup(0x10000, &(0x7f0000000040)) syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x400, 0x1, 0x1, 0xd59f83, 0x19fa, 0x3b, 0x19ef, 0x3, 0x8, 0x2800, 0x2800, 0x3, 0xba2, 0x0, 0x2b, {0x8, 0xffffffff}, 0xd1, 0x9}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'veth0_to_batadv\x00', {0x2, 0x4e20, @empty}}) close(r2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000240)=0xee1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket(0x10, 0x3, 0x0) 3.892908618s ago: executing program 4 (id=2714): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$sg(0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) socket$alg(0x26, 0x5, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$alg(0x26, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000007c0)=@nat={'nat\x00', 0x2, 0x5, 0x468, 0x0, 0x0, 0xffffffff, 0x0, 0x334, 0x42c, 0x42c, 0xffffffff, 0x42c, 0x42c, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0xff000000, 'pim6reg\x00', 'dvmrp0\x00'}, 0xac030000, 0x9c, 0xd0, 0x0, {}, [@common=@unspec=@connmark={{0x2c}, {0x400, 0xfffffffe}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @broadcast, @private=0xa010102, @gre_key=0x400, @port=0x4e23}}}}, {{@uncond, 0x0, 0xfc, 0x144, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'vlan1\x00', 'ip6_vti0\x00', 0x3, 0x1, 0x3, 0x4, 0x1000, 0x2cf, {}, {0x40007f}}}, @common=@inet=@set2={{0x24}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x8, @ipv6=@private1, @ipv6=@private1, @gre_key=0x2, @gre_key=0x5}}}, {{@uncond, 0x0, 0xc0, 0xf4, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e21, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x4e22]}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x10, @broadcast, @local, @icmp_id, @port=0x2}}}}, {{@uncond, 0x0, 0x98, 0xcc, 0x0, {}, [@common=@unspec=@cpu={{0x28}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @multicast1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x4c4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x8, 0x3, 0x23c, 0x118, 0x11, 0x148, 0x0, 0x10, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@private, @loopback, 0x0, 0xff, 'vlan0\x00', 'veth1_to_team\x00', {}, {0xff}, 0x4}, 0x10, 0xf0, 0x118, 0x1c, {0x6}, [@common=@unspec=@helper={{0x44}, {0x1, 'Q.931\x00'}}, @common=@unspec=@limit={{0x3c}, {0x1, 0x1, 0x6, 0x8, 0x5, 0x7, 0x5}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8000, 0x6, 0x3}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x298) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000008840)=@deltfilter={0x3058, 0x2d, 0x2, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0xb, 0xe}, {0x4, 0xffe8}}, [@f_rsvp={{0x9}, {0x14bc, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @broadcast}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xd, 0xffe0}}, @TCA_RSVP_SRC={0x8, 0x3, @remote}, @TCA_RSVP_POLICE={0x14a0, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x7, 0xffffffff, 0x100, 0x7, 0xfff, 0x3, 0x4, 0x8, 0x6, 0xafb, 0x5, 0x1, 0x9, 0x2, 0xffffffff, 0x6, 0x9, 0x100, 0x9819, 0x67, 0x800, 0x4, 0x8, 0x3ff, 0x9, 0x5, 0x4, 0xb54, 0x1, 0x2, 0x6, 0x2, 0xfffffffd, 0x3, 0x80, 0x4, 0x3, 0x400, 0x5, 0xd, 0x10, 0x1000, 0x4, 0x10, 0xf, 0xd, 0x1, 0x1, 0x6, 0x9, 0xfffffff0, 0x2, 0xc, 0x0, 0x1, 0x7, 0x9, 0x8004, 0xffffff56, 0x182, 0x5, 0x1, 0xf4, 0x7, 0xffffffff, 0x0, 0x52c, 0x3, 0x8, 0x86, 0x1, 0x3, 0x8, 0xb3, 0xd, 0x481, 0x0, 0xff, 0x7ff, 0x7fff, 0x9, 0x101, 0x0, 0x80000000, 0x27b0, 0x5, 0x6, 0x8, 0x0, 0x1, 0xcae, 0x6, 0x7, 0x9, 0x81, 0x5, 0x6, 0x81, 0x3, 0x6, 0x6, 0x2, 0x4, 0x10001, 0x1, 0xa62, 0x3, 0xfffffffd, 0x2, 0x7f5, 0x3, 0x2, 0x80, 0x2e025eae, 0xc4c, 0xcfff, 0xa, 0x80, 0x8, 0x9, 0x4, 0x1, 0x8, 0x80000000, 0x12b8, 0xb1, 0x2, 0x0, 0x80000001, 0x9, 0x2, 0x8, 0xf, 0x9, 0x3, 0x6, 0x1, 0x5, 0x7, 0x1bf, 0x2, 0x0, 0x400, 0x1, 0x7, 0x6, 0x3, 0x1, 0x7, 0x6, 0x9f70, 0x0, 0x8, 0x1, 0xf1, 0x5, 0x4, 0x7, 0x8001, 0x2, 0x8049, 0xfffffe00, 0x6, 0x5, 0x5, 0x9, 0x9, 0x1, 0xac, 0x8, 0xfffffff8, 0xe94e, 0x7, 0x0, 0x0, 0x41b6, 0x8, 0x9, 0x7fff, 0x3, 0x3, 0x63b1, 0x9, 0x4, 0x0, 0x80, 0x40, 0x200, 0x1, 0x8001, 0x1, 0x0, 0x3, 0x0, 0x1ff, 0x3, 0x101, 0x7ef3, 0x5, 0xa, 0x9, 0x3ff, 0x6a63, 0x4, 0xba, 0x2, 0x0, 0x9, 0x7, 0xf5, 0x2, 0x9, 0x5, 0x2, 0x0, 0x2, 0x8, 0x400, 0x6, 0x6, 0x1000, 0xdd53, 0x3, 0x7f, 0x2, 0x2, 0x400, 0x0, 0x1, 0x1, 0x4, 0xa, 0x4d, 0xab, 0x0, 0x6, 0xe, 0x5, 0x6, 0x3, 0x2, 0xe68, 0x7f, 0x9, 0x3966, 0x4, 0x10000, 0x4, 0xb, 0x1, 0x3, 0x9a, 0x7fffffff, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x0, 0xa0f, 0x68ab, 0x9, 0xc3cc, 0x3, 0x10001, 0x7, 0x5, 0x7, 0x4, 0xc8, 0xd54, 0x8000, 0x7, 0x200, 0x4, 0x4, 0x0, 0x1000, 0xffff97c2, 0x3, 0x30, 0x10000, 0x6, 0x9, 0xbb57, 0x8, 0x2, 0xfb4a, 0x4, 0x7, 0x4000000, 0x9, 0x1010, 0xffff, 0xfffffffb, 0x8, 0xffffffff, 0xbfe, 0xdd31, 0x6, 0x1, 0x8, 0xfffffff5, 0x2, 0x7, 0x518, 0x1ff, 0x2, 0x5, 0x81, 0xf9f, 0x7ff, 0x4, 0x5, 0xf11, 0xb, 0x7cd4, 0x4, 0x3, 0x3, 0x0, 0x2, 0xfffffc00, 0x0, 0x9, 0x10000, 0x3ff, 0x8, 0x3, 0x4, 0x7ff, 0x5, 0x5, 0x5, 0x2e09, 0x7, 0x10, 0x1ff, 0x3, 0x6, 0x6d598cc2, 0x0, 0x5, 0x2, 0x5, 0xe1c, 0x4, 0xffffffff, 0x5, 0x5, 0x8695, 0x494, 0x1000, 0x863, 0x7, 0x2a, 0x3, 0x9, 0x5, 0x7fffffff, 0x3, 0xb, 0x0, 0x8, 0x5, 0x0, 0x8, 0xfffffffe, 0x6, 0x8, 0x7, 0x0, 0x1, 0x1, 0x7, 0x800, 0x4, 0x2217edc9, 0x4, 0x400, 0x80000001, 0x1, 0x7, 0x9, 0x7fffffff, 0x8, 0x0, 0x7, 0x8000, 0x2, 0x3, 0x8000, 0x80, 0xd, 0x3, 0x6, 0x8a9, 0x3, 0x2, 0xfffff801, 0x1, 0xb3c, 0xff, 0x7, 0xa995, 0x8ee2, 0x7fffffff, 0x7, 0x8, 0x1, 0x70000, 0x80000001, 0x8000, 0x1, 0x6, 0x3, 0x3, 0x6, 0x84, 0x6, 0x38b, 0x91e9, 0x1, 0x80000001, 0xfffff000, 0x30, 0x4, 0x3, 0x2, 0x5, 0x8103, 0x60, 0x81, 0x5, 0x200, 0x443, 0x800, 0x10000, 0x8001, 0x7, 0xe6be, 0x6, 0xae, 0x3, 0x9, 0x3, 0x2, 0x6, 0x6, 0x3ff, 0x6, 0x7, 0x8, 0x2, 0x80d1, 0xe, 0x4, 0xfffeffff, 0x2f, 0x1, 0x0, 0x400, 0x4, 0x2, 0x8, 0x3f, 0x5, 0x6, 0x9, 0x7, 0x8412, 0x1, 0x9, 0x65c, 0xa, 0x8, 0x4, 0x1, 0x6, 0x8, 0xb, 0x2, 0x4, 0x9, 0x8000, 0xeb7f, 0xdb, 0x2, 0xfffffff6, 0xa2b, 0x1, 0x100, 0x0, 0xe5, 0x2, 0x75e, 0x101, 0x200, 0x6, 0x80000000, 0xa, 0x5, 0xe, 0x7, 0x8, 0x4, 0x4, 0xe7daef5, 0x2, 0x8001, 0x8, 0x6, 0xad]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0x6d4a7949, 0x0, 0x10000, 0x8, 0xc3f, 0x14, 0x5dbc, 0xf292, 0x6, 0x80000001, 0x2e12, 0x4, 0x8, 0xffffffff, 0x4, 0x4, 0x6, 0x81, 0x7, 0x9, 0x1, 0xfffffffc, 0x200, 0xbfed, 0xfffffff8, 0x5, 0x4, 0xbdf, 0xe, 0x3, 0x0, 0x9, 0x4, 0x2, 0x7d3d, 0x5ba0, 0x5, 0x9, 0x1, 0x8, 0x85ce, 0xfffffffb, 0x9, 0x8, 0x7, 0xf83, 0x9, 0x5b, 0x4, 0x6, 0x2, 0x9, 0x800, 0x5, 0x3, 0x7ff, 0x8, 0x2, 0x40, 0x9, 0x8, 0xf5, 0x200, 0x5, 0x5, 0x6, 0x9, 0x7fff, 0x9dfe0b1, 0x1, 0x3, 0x5, 0x2, 0x3c27, 0xbe, 0x5, 0x0, 0x8, 0x5, 0x4, 0x3800000, 0x8, 0x5, 0x2af4, 0x8, 0x34fc, 0x5, 0xb, 0x4, 0xc, 0x0, 0x9, 0x7, 0x514, 0x2, 0x97, 0x0, 0xfffffff9, 0x2, 0x5, 0x2, 0x7, 0x8, 0x8, 0x200, 0x1, 0x5139, 0x3, 0xff, 0xa24c, 0x2, 0x0, 0xcc, 0x7ff, 0x7f, 0x1, 0xa6c, 0x6, 0xc, 0x3613, 0x3, 0x3, 0x3, 0x5, 0xffff8001, 0x0, 0x747, 0x6, 0x0, 0x8, 0x40, 0xd4e, 0x6, 0x8000, 0x5, 0xfffffc01, 0x4, 0x401, 0xa000, 0xffff, 0x5, 0x7, 0x5, 0x80000001, 0x3c7bafdf, 0x9f, 0x304, 0x15, 0x80, 0xffffff81, 0x3e, 0x7, 0xf7a4, 0x200, 0x7, 0x5, 0x4, 0x1, 0xd, 0x2, 0xe, 0x0, 0x8, 0x10, 0x6, 0x6, 0xfffffbff, 0xec, 0x2, 0x3, 0x4, 0x82, 0x9, 0x8, 0x409, 0x9, 0x10000, 0x0, 0xb90, 0x6, 0x80, 0x3, 0xb, 0x7, 0x0, 0x5, 0x7, 0x3ff, 0x40, 0xfffffff9, 0x2, 0x1f, 0x80000001, 0x2, 0x0, 0x9, 0x6, 0xcda, 0xe4, 0x1, 0x1, 0xa, 0x40, 0x7ff, 0x5, 0x33, 0xc, 0x5, 0x3, 0x401, 0xfffffff7, 0x6, 0x6, 0x200, 0x8, 0x5, 0x200, 0x10000, 0x8, 0x6, 0x5, 0x8, 0xb25, 0x6, 0x1, 0x3, 0x1, 0x9, 0x5, 0xfffffff8, 0x5b74, 0xffff27b1, 0x7, 0xfffffff6, 0x5, 0x1, 0xff, 0x4, 0x3ad1, 0x9, 0xa, 0x1, 0x1, 0xfffffffc, 0x8, 0x3, 0x5, 0xe0c, 0x9, 0x4, 0x1, 0x7fff, 0xfff, 0x400, 0x6000000]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x4, 0x1, 0x5, 0xfffffff7, {0x4, 0x0, 0x7, 0xfd, 0x4, 0x100}, {0x5, 0x0, 0x8, 0x2, 0x6, 0xa9}, 0x1, 0x2, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x8, 0x6, 0x4, 0x1ff, 0x0, 0x1, 0x2, 0xc000, 0x9, 0xffffff37, 0x1, 0x1, 0xffffff00, 0x7fff, 0x0, 0x9, 0xf, 0xd, 0x4, 0x4, 0xcf5d, 0xa, 0xf73, 0x5, 0x2, 0x5, 0x4d03, 0x0, 0x3, 0x4, 0x2, 0x2, 0xd52a, 0xbd70, 0xe, 0x4, 0x1, 0x8001, 0x4, 0x6, 0x1b60000, 0x80, 0x3, 0x2, 0x4, 0xd3, 0x2, 0x10000005, 0x31e0, 0x3, 0xe0, 0xf, 0x2, 0x0, 0x2, 0x0, 0x7ff, 0x7f, 0x0, 0x7, 0x2, 0xaf, 0x6f56, 0xffffffff, 0x6, 0x6, 0x4, 0x3, 0x1, 0x9, 0x7ff, 0x9, 0x1, 0x8, 0xb6f, 0x1, 0x4a7, 0x8, 0x1ff, 0x0, 0x40, 0x200, 0x7, 0x9a, 0xf, 0xfffffff7, 0x2, 0x8, 0x4, 0x9, 0x5, 0x96, 0x5, 0xb, 0x6, 0x6, 0x9, 0x401, 0x40, 0xfffff000, 0x6, 0x8e31, 0x7fffffff, 0xb6, 0x7, 0x0, 0xa7e9, 0x40, 0xff, 0x7, 0x8976, 0x0, 0x6, 0x6e, 0x4, 0x4, 0x6, 0x1, 0x2f5e, 0x2, 0x8, 0x0, 0xd, 0x3, 0xe8, 0xbb, 0xfffffff8, 0x2, 0x4, 0xff, 0xc52, 0x9, 0xb1, 0x10001, 0xfffffffc, 0xfffffffc, 0x4, 0x7f, 0x2, 0x2, 0x6, 0x1, 0x101, 0x81, 0x9, 0xa, 0xa266, 0xfffffffe, 0xb69, 0x9, 0x7a9, 0x8, 0xf, 0x4, 0x4, 0xfffffff9, 0x400000, 0x9, 0x3, 0x5, 0x401, 0x80, 0x626b, 0xde3a, 0x3, 0xfffffff8, 0x1, 0x7, 0x2c4b, 0x81, 0x2, 0x5, 0x212, 0x7fff, 0xe, 0x6, 0x6, 0x3, 0x9, 0x4, 0x9, 0x6, 0x7, 0x7, 0x80000001, 0x3, 0x80000001, 0x0, 0x4, 0x12c, 0x10001, 0x6, 0x8, 0x8, 0x9, 0x3, 0x53, 0x5, 0x41a, 0x5, 0x10001, 0x3, 0xa, 0x200, 0x0, 0x4, 0x80, 0x9, 0xff, 0x8, 0x6, 0x4, 0xbe, 0x5, 0xfffffffa, 0x4, 0x5, 0x6, 0xe, 0x7f, 0xfffffffa, 0x40, 0x6, 0x5, 0x342, 0x0, 0x1, 0x1, 0x3, 0x5, 0x7, 0x0, 0x7, 0x8, 0xfb, 0x0, 0x2, 0x4a7, 0x40, 0x0, 0x90, 0x4, 0x40, 0xfffffffc, 0xff, 0x4, 0x6, 0x8, 0x0, 0x7f, 0x8, 0xfff, 0x9, 0x7ff, 0x10001]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x8001, 0x7, 0x10000, 0x10001, 0x6, 0x3, 0x6, 0x80, 0xb7, 0x1, 0x6, 0x16, 0x1000, 0x4, 0xb06, 0x800, 0x0, 0x3, 0x0, 0x4, 0x8, 0x2800, 0x4, 0x1ff, 0x7, 0x5, 0xfffffeff, 0x6, 0x59b, 0x9, 0x6, 0xfffffffd, 0x6, 0x3, 0x6, 0x6, 0x2, 0xb, 0x0, 0x8, 0xffff, 0x3, 0x6ac, 0x9, 0x5, 0x3, 0x0, 0x200, 0x101, 0x4040, 0xca7, 0x800, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x8, 0x9, 0x9, 0x0, 0x5, 0x7, 0xb93, 0x3, 0x8000, 0xb8b1, 0x400, 0x8, 0xfffffff8, 0x0, 0x2a, 0x2, 0x1, 0x9, 0xd1, 0x2, 0x9, 0x10, 0x4, 0x8001, 0x4766, 0x81, 0x1, 0x2, 0x8000, 0x4, 0x80, 0x8a4, 0x6, 0xa8, 0x10001, 0x0, 0x2, 0xfe0a, 0x80000000, 0x9, 0x0, 0x4, 0x5, 0xfffffffa, 0x6, 0x3, 0x8, 0x0, 0x8, 0xffffffff, 0x5, 0x3726, 0x9, 0x3, 0x9ad, 0x9, 0x29, 0x3, 0x8000, 0x2, 0x5, 0xbb, 0x7, 0xffff, 0x6, 0xfffff001, 0xeee4, 0x637, 0xc, 0x0, 0x81f, 0x2, 0x2, 0x1, 0x3, 0x0, 0x2, 0x6, 0x0, 0x1, 0x8, 0x47, 0xd, 0x5, 0x6, 0x2, 0x952, 0xa, 0x8, 0x7, 0x8, 0x9, 0xe, 0xc, 0x28d6, 0x9, 0x8, 0x4, 0x401, 0x5, 0x5, 0x1, 0xa, 0x80000001, 0x10, 0x1, 0x8, 0xfffffff7, 0x9d80, 0x2, 0x4, 0x10001, 0x9, 0x2, 0x4, 0x8, 0x0, 0xfffffff5, 0x4, 0x2, 0x8067, 0x9, 0x3, 0x0, 0x5, 0x401, 0x1, 0x4, 0x80000001, 0x36b, 0xa1be, 0x3, 0x4, 0x7, 0x5, 0x16, 0xffff8000, 0x6, 0x1, 0x6, 0x2, 0x3ff, 0xfffffffa, 0x9, 0x1, 0x6, 0x5, 0x9, 0x12bf, 0x2, 0x10000, 0x94c4, 0xfffffff9, 0x2, 0x1, 0x5, 0x8, 0x2, 0x7fffffff, 0x4, 0x434780fa, 0x2, 0x6, 0x7, 0x0, 0x8, 0x9, 0xa, 0xa, 0xfffffffd, 0x84f, 0x2, 0x3, 0xe1, 0x9ce6, 0x9, 0xfffeffff, 0x7fffffff, 0x8, 0x7, 0x3, 0x80000000, 0x1, 0x2, 0xffff0000, 0x7, 0x3, 0x684a, 0x3, 0x4, 0xa2c, 0x0, 0x7, 0x8, 0xf, 0x80000000, 0x1000, 0xf9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x3, 0x2, 0x2, 0x89, {0xf, 0x1, 0x7, 0x2, 0x5, 0x4}, {0x40, 0x0, 0x1000, 0x81d2, 0xfff4, 0xe9b}, 0xffff, 0x100, 0x4}}]}]}}, @f_tcindex={{0xc}, {0xc4, 0x2, [@TCA_TCINDEX_POLICE={0xc0, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x35c5, 0x5, 0x0, 0xffffffff, 0x674d, {0x8, 0x1, 0x1ff, 0x0, 0x9, 0x7f}, {0x40, 0x2, 0x539, 0x8, 0xdec2, 0x8}, 0x0, 0x10001, 0x3}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xdea6, 0x4, 0x4, 0x8a, 0x10001, {0x4, 0x1, 0x8, 0x3}, {0x3, 0x0, 0x0, 0xfff, 0x7}, 0x8, 0x8, 0x101}}]}]}}, @f_rsvp={{0x9}, {0x1900, 0x2, [@TCA_RSVP_POLICE={0x1038, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3800000, 0x1, 0x81, 0x6, 0xf43, 0xd, 0x7fffffff, 0x44, 0x6, 0x6, 0x364a, 0x8000, 0xf, 0x6, 0x7f, 0x7ff, 0x80000001, 0x4, 0x9, 0x1, 0x68, 0x10000, 0x8, 0xe, 0x7, 0x3, 0xffff, 0x1000, 0x3, 0x3, 0xffffffff, 0x2, 0xfffffffb, 0x100, 0x9, 0xffffffd4, 0x8, 0x8, 0x3, 0x0, 0x8d4, 0x8, 0x8, 0x6, 0x500000, 0x9, 0x2, 0x5, 0x3, 0x340, 0xdc, 0x3, 0x81, 0x7, 0x3, 0x8000, 0x6, 0x2, 0x80000001, 0x9, 0x7, 0x3, 0xb301, 0x7, 0x1, 0x3ff, 0x3, 0x8, 0x5, 0x5, 0x5, 0xb, 0xb, 0x800, 0x9, 0x1000, 0x7, 0x5, 0x6, 0x5, 0x1, 0x10, 0xffffffff, 0x100003, 0x3, 0x3, 0x2, 0x9, 0x8b, 0xf, 0x0, 0x2e02c82c, 0x1, 0x62531a8a, 0x9, 0x3ff, 0x7, 0x1000, 0x9, 0xf, 0x7, 0x1, 0x8df7, 0x3, 0x9, 0x340b, 0x6, 0x401, 0xeb4d, 0x80, 0x8, 0x0, 0x9, 0x800, 0xffffffff, 0xffffff85, 0x800, 0x1ff, 0x7, 0x40, 0x7, 0x8, 0xf6, 0x40, 0x3, 0xfff, 0x1, 0xffffb32d, 0x10001, 0xc253, 0x3019, 0x1, 0x4000000, 0x7fff, 0x4, 0x170c, 0x6, 0x6, 0x687, 0x40000000, 0x6, 0x396, 0xe8, 0x1, 0x4, 0x2, 0x8, 0xc, 0x75, 0x1, 0x2000003, 0x7, 0x0, 0x6, 0x6, 0x0, 0x7fff, 0x0, 0x31, 0x3, 0x2, 0x9, 0x9, 0x401, 0xffff, 0x8, 0x4, 0x1, 0x3, 0x82a, 0x92, 0x3ff, 0xd, 0x962e, 0x10, 0x0, 0x2, 0x80, 0xc13, 0x3, 0x7, 0x8, 0x3ff, 0x3b554f99, 0xc, 0x2, 0x2f, 0x2, 0x9, 0x3, 0xc, 0xf81, 0x0, 0x4, 0x0, 0x4, 0x3, 0xc4da, 0x328, 0x6, 0x3, 0x4, 0x2, 0x4, 0xdd51093, 0xfff, 0x3, 0x5, 0x5, 0x5, 0x7, 0xee, 0x9ba, 0x80, 0x7fff, 0x800, 0x10001, 0x9, 0x5, 0x0, 0x1, 0x9, 0xfffffffc, 0xfffffffe, 0x6c, 0x0, 0x5, 0x8, 0x9, 0x2, 0x3, 0x6, 0x8, 0x2, 0x10001, 0x3, 0x8, 0x7fffffff, 0x4, 0x2, 0x9, 0x4, 0x1, 0x2, 0x200, 0x7ff, 0x7, 0x6, 0x0, 0x6, 0xf3c7, 0x10001, 0x0, 0x2, 0x1, 0xd]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xf5, 0x7, 0x6, 0x8b0, 0xd01, 0x6, 0x3, 0x2, 0x1, 0x4, 0x1, 0x9, 0xe, 0xf00, 0xf375, 0xbf, 0x3, 0x9, 0x2, 0x65a6, 0xfffffe09, 0x9, 0x9, 0x6, 0x8, 0xc7, 0x1, 0x9, 0x8, 0x100, 0x40a9, 0x2, 0x200, 0x80000000, 0x5, 0xffff, 0x2, 0x7e, 0x1, 0x1ff, 0x2, 0x6, 0x5, 0x16006bb6, 0x8de8, 0x364, 0x800, 0x256f, 0x437, 0xb2cd, 0x4, 0x1200, 0x4, 0x81, 0x3ff, 0x8, 0x3ff, 0xfffffffb, 0x4, 0x6, 0x6, 0x7, 0x7f, 0xff, 0x0, 0x4, 0x5, 0x9, 0x4, 0x8, 0x3, 0xc, 0x0, 0x101, 0x5, 0x6, 0x401, 0x2, 0x460393da, 0x10, 0x4, 0x7, 0xffff, 0xfffffff7, 0x8, 0x800, 0x3, 0x7, 0x2, 0x3, 0x7, 0x7fffffff, 0xe20, 0x80000001, 0x0, 0x7, 0x8, 0xffff, 0x35, 0x1, 0x7, 0x7, 0x400, 0x7fffffff, 0x7, 0x0, 0x5, 0x9, 0x6, 0x0, 0x6, 0x28000000, 0xd62, 0x36, 0x2af5, 0x4, 0x80000000, 0xfffffff8, 0x7ff, 0x9, 0xfffffff9, 0x200, 0x5, 0x8, 0x40, 0x800, 0x6, 0x6, 0x2, 0xb, 0x0, 0x5, 0xc294, 0x268, 0x6, 0x7, 0x8, 0x5, 0xff, 0x2c00000, 0x26, 0x5d, 0x40000, 0x7, 0x7, 0x0, 0x8, 0xffffffff, 0xfffff001, 0x1e45800, 0x5, 0x9, 0xf985, 0x8, 0x100, 0x55, 0x5, 0x200, 0x6, 0x3, 0xfffffffa, 0x9, 0x1ff, 0x9, 0x3, 0xe1a, 0xfffffffb, 0x7, 0x2, 0x9, 0x8001, 0x1, 0x0, 0x8, 0x0, 0x1ff, 0x5, 0x2, 0x81, 0x6, 0x8000, 0xfffffffb, 0x2, 0x2, 0xdce, 0x0, 0xb7b1, 0xfc, 0x0, 0x1, 0x2, 0x4, 0x400, 0x6, 0x2, 0x4c7, 0x8, 0x10001, 0x354, 0xfffffff8, 0x9, 0x2, 0x10000, 0x7, 0x800, 0x5, 0xffff0001, 0x6, 0x1, 0x5, 0x401, 0x7, 0x5, 0xfffffed6, 0xd3cc688f, 0x1, 0x8, 0x6, 0x9, 0x0, 0x3, 0x4, 0x5, 0x6, 0x6, 0x0, 0x7, 0x9, 0x0, 0x1, 0x3, 0x3, 0x5, 0x2f04, 0x4, 0x5, 0x8, 0xe, 0x5, 0x0, 0x2, 0x1, 0x101, 0x400, 0xb757, 0xfffffff0, 0x9, 0x5, 0x7, 0xffff8000, 0x0, 0xa73, 0xff, 0x5, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x0, 0x5a, 0x1000, 0x40, 0xfffffffa, 0x80000001, 0xb, 0x7ff, 0xc9, 0x7f, 0x6, 0x4, 0xc4a, 0x5, 0x3, 0x9, 0xaa3, 0xd, 0x5, 0x544f062e, 0xffffffff, 0xe81d, 0x6, 0x4, 0x2, 0x5, 0x2, 0x3, 0x14000000, 0x3, 0x7, 0x6, 0x2, 0x3, 0x3e, 0xfffffa17, 0xfffffffd, 0x7, 0x0, 0x0, 0x0, 0x81, 0x9, 0x0, 0x7, 0x0, 0x8, 0xb, 0x8415, 0x2, 0x7fffffff, 0x6, 0x3, 0x5, 0x2, 0x8, 0xd, 0x4, 0x48a, 0x4, 0x5, 0x7, 0x101, 0x9, 0x4, 0x7, 0x8, 0x1000, 0x4, 0x3, 0x4, 0x0, 0x5, 0x42140c16, 0x4, 0x2, 0x9, 0x0, 0x9, 0x4, 0x9, 0x9, 0x90, 0x1, 0x6, 0x6, 0x2, 0xf, 0x9f93, 0xfffffff9, 0x8, 0x4, 0x8, 0x10000, 0x9, 0x90d, 0x1, 0x4, 0x0, 0x1, 0x4, 0x200, 0x4, 0x18000, 0x3, 0x6, 0x5, 0x8000, 0x7, 0x500000, 0x10001, 0x7, 0x80000, 0x3, 0x8, 0x2, 0x0, 0x2, 0x5, 0x3, 0x2, 0xfffffffe, 0x9, 0x8001, 0xd, 0x3ff, 0x4, 0x2, 0x10000, 0x6, 0x0, 0x8, 0xfffffff9, 0x3, 0x8001, 0x7f, 0x4, 0x0, 0x6, 0x3, 0xf, 0x9, 0x100, 0x5c1, 0xfffffffe, 0xfcd, 0x10001, 0x2, 0x4, 0x7f, 0xb75b, 0x2, 0x0, 0x1, 0x7, 0x2, 0x4, 0x7f, 0x0, 0xff, 0x1000, 0xd, 0x3ff, 0x0, 0x8000, 0xff, 0x1, 0x3, 0x9, 0x1200, 0x759, 0x80000001, 0x0, 0x401, 0x698, 0x800, 0x8, 0x5, 0xff, 0x2d67, 0x8, 0x1, 0x10000, 0x2, 0x4, 0x3, 0x7, 0x4, 0x7, 0x6, 0x1, 0x0, 0xffff, 0xa5, 0x3ff, 0x1, 0x9, 0x400, 0x40000000, 0x46, 0x10000, 0xffff, 0x81, 0xfbb, 0x1, 0x0, 0x3, 0x9, 0xb, 0x0, 0xf, 0x0, 0xffff, 0x200, 0x7, 0x5, 0x141, 0xe5e2, 0x3, 0x5, 0x2, 0x302a, 0x1, 0x6, 0x3, 0xfffffff6, 0x72, 0x6, 0xfffffff7, 0x1, 0x2, 0x5, 0x5, 0x4, 0x6, 0xb, 0x5, 0x0, 0x0, 0xfffffff7, 0x5, 0x9, 0xcc47d3d6, 0x1, 0x6, 0xffffffff, 0x1, 0x1ff, 0x0, 0x3ff, 0x9, 0xd5, 0x1, 0x5c000000, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x7ff, 0x8, 0x6, 0x6, 0x9, 0xe, 0x8, 0x9, 0x1, 0x5, 0x6, 0x18, 0xfffffff9, 0x401, 0x3, 0x4, 0x1f, 0x8, 0x10c5, 0x3, 0xc, 0xfffffffe, 0x18, 0x5, 0x80000000, 0xc, 0x5, 0x6, 0xe0000000, 0x9, 0x9, 0x4, 0x7, 0x7, 0x7, 0xffffff2d, 0x6, 0x5, 0x1, 0x4, 0x7, 0x9, 0x200, 0x2f2d9088, 0xd, 0x6, 0x1ff, 0x2, 0x4, 0x9, 0x9f3, 0x7fffffff, 0xd3d, 0x9, 0x28b040, 0x5, 0x5, 0xc, 0xc, 0x3, 0x400, 0xa, 0x1a, 0x8, 0xd, 0x8, 0xd, 0x3, 0x0, 0x6, 0x7f8, 0x5, 0xadcd, 0xa, 0x1, 0x3, 0x5, 0x6, 0xf56d, 0xf7d, 0x1, 0x1, 0x0, 0x8, 0x80000000, 0x1000, 0x5d7, 0x6, 0xc, 0x1, 0x5, 0xb2b, 0x8, 0xc, 0xd, 0x414, 0xc, 0x8, 0x8, 0x87b1, 0x5, 0xe00, 0x8, 0x9b, 0x7f, 0x6, 0x7, 0x6, 0x5450, 0x5b, 0x9, 0x2, 0x8, 0x8, 0x2f, 0x2, 0xa, 0x2, 0x800, 0x3, 0xfff, 0x401, 0x1033, 0x4, 0x40, 0x5, 0x9, 0x1, 0x5000000, 0x2, 0x8, 0x101, 0x1, 0x7, 0x400, 0x7f, 0xf, 0xfff, 0x8, 0x2, 0x2b68, 0x8000, 0xc9, 0x3, 0x3, 0xcb8, 0x5, 0x8, 0x0, 0x7f, 0x81, 0x100, 0x8001, 0x9, 0x0, 0x80000000, 0x7ff, 0xdee, 0x7fff, 0xff, 0x10, 0x400, 0xb, 0x7, 0x1, 0x267, 0xfffffff0, 0xe, 0x8, 0x2d, 0x81, 0x10001, 0x7, 0x181c, 0x400, 0x6, 0x34000000, 0x5, 0x7fffffff, 0x5, 0x6, 0x1, 0x7fff, 0x7fffffff, 0x8ebf, 0x7, 0x4, 0xe90, 0x7, 0x0, 0x7ff, 0x7267, 0x7fff, 0x0, 0x9, 0xfffffffb, 0x0, 0xffff, 0x80000000, 0x5b, 0x917, 0xfffffff7, 0x2, 0x7, 0xe, 0x6, 0x9ad, 0x6, 0x2, 0x7, 0x2, 0x0, 0xe, 0x101, 0x2, 0x1, 0xf29d, 0x87c9, 0x8, 0x3, 0xfff, 0x607, 0x7, 0x6, 0x401, 0x8001, 0x6, 0x3, 0x8, 0x7, 0x7f, 0x5, 0x4, 0x7, 0x8, 0xbd9, 0x4, 0x8000, 0x1, 0x0, 0xfffffff7, 0xe501, 0x6, 0x8, 0xbcab, 0x6, 0x9, 0x10001, 0x100, 0xfe7e, 0x2, 0x8, 0xb, 0x5, 0x23]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100}]}, @TCA_RSVP_POLICE={0x8a4, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6000000000000000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0x100, 0x1, 0xf5de, 0x1, 0x2, 0x542f, 0x5, 0x101, 0x30cc, 0x6, 0x7fff, 0x8, 0x9, 0x800, 0x8, 0x7ff, 0x2, 0x8001, 0x9, 0x200, 0x100, 0x1, 0x81, 0x400, 0x5, 0x6, 0x100, 0x0, 0xa67, 0x0, 0x247, 0x1, 0x3, 0xfffffffb, 0x1000, 0xa, 0x2, 0x1, 0x9, 0x7, 0xfffffff8, 0x86, 0x281a, 0x401, 0x8, 0x1, 0x0, 0x6, 0x10001, 0x2eff0cc9, 0x40, 0x2, 0x7, 0x80, 0x4, 0x1000, 0x9, 0x80000001, 0x359d985f, 0x7, 0x6, 0x1000, 0x8, 0x4, 0x0, 0x21, 0x2, 0x3, 0x8001, 0x4, 0x10, 0x1, 0x1ff, 0x8, 0x7, 0x2, 0x514, 0xe54, 0xffffff3a, 0x8, 0xb, 0x0, 0x80000000, 0x9, 0x1, 0x10000, 0x8001, 0x5, 0x8, 0x3, 0x6, 0x3, 0x4, 0xfffffff4, 0x800, 0x5, 0x0, 0x5, 0xef0a, 0x2, 0x7fffffff, 0x7f, 0x4, 0x1, 0x2, 0x6, 0x9, 0x1ff, 0x4, 0xfffeffff, 0x800, 0x7, 0x8dd9, 0x7, 0x1000, 0x0, 0x0, 0xd1d, 0x3, 0xd, 0x5f, 0x8, 0x6, 0x1, 0x7f, 0x7, 0x2, 0x401, 0xe0, 0xff, 0x7, 0xc, 0x100, 0xf, 0x8, 0x9, 0x4, 0x2, 0xff, 0x38, 0x8001, 0x5, 0x6, 0x7, 0x3, 0x6, 0x0, 0x6, 0xffff, 0x9, 0xea68, 0x6, 0x10, 0x3, 0x7c, 0xa000000, 0x5, 0x4, 0x7c, 0x8000, 0x0, 0xfffffff9, 0xff, 0x2, 0x4, 0x1, 0xf, 0x1, 0x6, 0x1000, 0x4, 0x10000, 0x3, 0x0, 0xa, 0x7, 0x100, 0x3, 0xdd, 0x2, 0x0, 0x5, 0x800, 0xaf, 0xee, 0x7, 0x2, 0x6, 0x5e2, 0xbf12, 0x9, 0x200, 0x4, 0x7, 0x6, 0x2, 0x1, 0xb5e, 0x0, 0x2dea, 0x0, 0x3070, 0x1, 0x1, 0x6, 0x2a2f1c35, 0x7fff, 0x1, 0x1, 0x800, 0xb3d, 0x10, 0x1, 0x100, 0x8, 0x8, 0x6, 0x3, 0x1, 0x8, 0x7, 0x80000001, 0x0, 0x7ff, 0x3, 0x5, 0xfffffffd, 0x8b10, 0x50ad, 0x400, 0x3, 0x7b3, 0x3d7ff, 0x179, 0x7, 0x1400000, 0x81, 0xfffffffd, 0x0, 0x9, 0xffffffff, 0x101, 0x4, 0x0, 0x3, 0x9, 0x8, 0x8, 0x200, 0xfffffd07, 0xa4f, 0x10001, 0x0, 0x6, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9b20, 0x0, 0x1, 0x15c3a19a, 0x7, {0xf, 0x2, 0x547b, 0x5, 0x6, 0x7ccd}, {0x2, 0x1, 0x6, 0x1, 0x4, 0xfffffffc}, 0x3, 0x9, 0x5}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xfffffffe, 0x3, 0x9, 0x8, 0xfffffff7, 0x1, 0x7, 0xc11, 0x7fff, 0x3, 0x7ff, 0x9e, 0x8, 0x1, 0xfffffff7, 0x1, 0x0, 0x6, 0xf, 0x6, 0x6, 0x200, 0x6, 0x4, 0x5, 0x401, 0x5, 0x459f, 0x43, 0x0, 0xbc1, 0x3d, 0x3, 0xe534, 0xa1cc, 0x5, 0x4, 0x28, 0x4, 0xfa27, 0x1, 0x1, 0xffff, 0x3, 0x4, 0x6, 0x8, 0x1, 0xe772, 0x2, 0x0, 0xff, 0x1ff, 0xe10, 0x31e3, 0x0, 0x400, 0x5, 0x6, 0xab93, 0x1, 0x400, 0x7fff, 0xfffffe00, 0x12, 0x6, 0x0, 0x8a, 0x1e, 0x8, 0x8, 0xd, 0x5, 0x7, 0x0, 0x5, 0x0, 0x101, 0x2, 0x5, 0x9, 0xa, 0x40, 0x18, 0x7, 0xfa72, 0xfffffff9, 0x94d3, 0xc, 0x4, 0x7, 0x7, 0x6, 0x6, 0x7f, 0x3ff, 0x2, 0x7, 0x3, 0x2, 0x1, 0x2, 0x69e2, 0x4, 0x1, 0x4, 0x2, 0x6, 0x1, 0x8, 0x2, 0x3, 0x4, 0xb, 0x1, 0x5, 0x2, 0x4, 0x8, 0xa, 0x9, 0x8, 0x6, 0xffff, 0x8, 0x4, 0x9, 0xffffffff, 0x9, 0x197b, 0xe6b, 0x1, 0x3cda635d, 0x366a370e, 0x6, 0xfffffff0, 0x3, 0x43, 0x9, 0x1, 0x572, 0x4, 0xc000000, 0x8, 0xfffffff9, 0x3, 0xfffffffa, 0x3, 0x100, 0x4, 0x3ff, 0x6, 0x18e, 0x6, 0x0, 0x6, 0xc7, 0x671, 0xb0dc, 0x4, 0x8, 0x4c4b, 0x7, 0x2, 0x5b, 0x1, 0x0, 0xfcc00000, 0x80, 0x39a, 0x3, 0x100, 0x7fff, 0x8, 0x713, 0x5, 0x2, 0xff, 0x4, 0x3, 0x9336, 0x8e, 0x6, 0x6, 0x56, 0x81, 0x80000001, 0x6, 0x0, 0x4, 0x5, 0x0, 0x8, 0x6, 0xe, 0x1, 0x1, 0x248e, 0x7b3, 0x3, 0x96eac7, 0xfffffffa, 0x9, 0x1, 0x401, 0x6, 0x6, 0x5, 0x7fff, 0xffe0, 0xd6f, 0x2, 0x9, 0xbb, 0xffff8001, 0x2, 0xfbd7, 0x9, 0x1, 0x7, 0x9, 0x5, 0x9, 0x4, 0x2, 0xbeb, 0x71d1, 0x2, 0xa, 0x400, 0x100, 0x2, 0x0, 0x1e3b, 0xff, 0x6, 0x4, 0xf7, 0x8fe, 0x6, 0x73db, 0x5, 0x0, 0x0, 0x57f3, 0x2, 0x7fffffff, 0x9, 0x2, 0x800, 0x3, 0x8, 0xfffffffd, 0x1, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x8, 0x80, 0x0, 0x56cb, {0x6, 0x2, 0x795, 0x9, 0x101, 0xc}, {0x52, 0x2, 0x3, 0xf8, 0x800, 0x7}, 0x4, 0xae7}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x187cd24a, 0xe, 0x7a9}, {0x0, 0xd93, 0x8}, 0x8, 0x91, 0x40}}]}}, @f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x1, 0xfff1}}]}}, @f_rsvp={{0x9}, {0x64, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x7, 0x8, 0xfffffff7}, {0xfe9, 0xb4aa}, 0x11, 0x10, 0x37}}, @TCA_RSVP_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xa}}, @TCA_RSVP_DST={0x8, 0x2, @empty}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x5, 0xb}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x6, 0xffff}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x66, 0x15ce, 0x4}, {0x6, 0x80000001, 0xf02}, 0x21, 0x8, 0x4}}]}}, @f_rsvp6={{0xa}, {0x4}}, @f_rsvp={{0x9}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x1, 0x9, 0x3ff}, {0x9, 0x6, 0xc7}, 0x11, 0x3, 0xd}}]}}, @f_rsvp6={{0xa}, {0x9c, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @loopback}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x4, 0x956, 0x8122}, {0x200, 0x8, 0x8}, 0x2f, 0x3, 0x1c}}, @TCA_RSVP_SRC={0x14, 0x3, @private1}, @TCA_RSVP_DST={0x14, 0x2, @mcast1}, @TCA_RSVP_SRC={0x14, 0x3, @local}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x3, 0x3}, {0x0, 0x0, 0x80}, 0x32, 0x9, 0x2}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x11, 0x2}}]}}, @f_tcindex={{0xc}, {0x14, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0xe}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x5, 0xf}}]}}]}, 0x3058}, 0x1, 0x0, 0x0, 0xc000}, 0x6044) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 3.614124874s ago: executing program 4 (id=2715): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setreuid(0xee01, 0xee01) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) 3.441184948s ago: executing program 4 (id=2716): syz_io_uring_setup(0x7fbc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2000000}, 0x0, &(0x7f0000000140)) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d", @ANYRES64], 0xf8) 3.249363885s ago: executing program 3 (id=2717): prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1c27, 0x0, 0x1, 0x0, 0x0, 0x5}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x80000000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x10}) 2.660401347s ago: executing program 7 (id=2718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f50000000000000000020000000900020073797a3100000000080003400000000109000100"], 0x34}}, 0x0) 2.659953006s ago: executing program 1 (id=2719): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000901, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x200a83, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0xffffffff, 0x0, 'queue1\x00', 0x4}) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="414c5450434d20274c696e652043617074757265272030303030303030303030303030303030303030300a4c494e45320a4449474954414c330a535045414b4552202753796e7468272030303030303030303030433030303030617374657220506c61796261636b272030303030303030301a30303030303030303030300a4c494e45330a4c494e453120274d617374657220506061796261636b20d178d153424e47c2ab736a6974636827"], 0xf7) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r4, r3, 0x0) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000500)={0x317, @time={0x65757100, 0x10000008}, 0x0, {}, 0xc5, 0x0, 0x8}) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = openat$iommufd(0xffffff9c, &(0x7f0000000240), 0x200080, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000380)={0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000340)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r5, 0x3b8d, &(0x7f0000000400)={0x20, r6, &(0x7f00000003c0)=[{0x0, 0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x0, 0x3}, {0x1, 0x1}], 0xdeadbeef, 0x8, 0x6}) 2.65983532s ago: executing program 4 (id=2720): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4, 0xfffffffb, @private2, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, 0x0, &(0x7f00000010c0)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080), &(0x7f0000000100)=0x8) 2.429914794s ago: executing program 7 (id=2721): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000006c0)="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", 0x240}], 0x1}}], 0x1, 0x80) 2.134045127s ago: executing program 7 (id=2722): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.052026298s ago: executing program 6 (id=2723): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x0, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x2, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x7, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xb, 0xfffffffc, 0x4000a, 0x2, 0x7b7, 0x4, 0x5, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x3, 0x7, 0x7, 0x3, 0x6}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$tipc(0x1e, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xf5, 0xb206, &(0x7f0000006680)) inotify_rm_watch(0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 1.833999075s ago: executing program 7 (id=2724): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.560362443s ago: executing program 3 (id=2725): io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r0, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x30}]) 963.206723ms ago: executing program 4 (id=2726): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x9c}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f00000004c0)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x8, 0x20cc7a, 0x60cd2}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000280)={0x3, 0xffffffff}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$nl_route(r6, 0x0, 0x0) 919.461215ms ago: executing program 8 (id=2727): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x1, "030000000000000023000000debd12ffff00000000000000000020000400", 0xffffffffffffffff}) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000040)) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x75fa, 0xe475, 0x0, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, 0x0) dup3(r1, r0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r8, 0xffffffffffffffff, 0x2d, 0x0, @void}, 0x10) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x90, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x58, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x101}, @IFLA_BR_MULTI_BOOLOPT={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0xa0}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffffb}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8044) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') 918.490443ms ago: executing program 6 (id=2728): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x20040015}, 0x20000010) 788.288454ms ago: executing program 6 (id=2729): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x14, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffd}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x3b8c039, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7}) mq_timedreceive(r3, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="38000000560001000000", @ANYRES16=r2, @ANYBLOB=' \x00', @ANYBLOB, @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200180c0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, 0xb, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x200}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x1ca5}]}, @IPSET_ATTR_ADT={0x24, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x9, 0x1a, '\xaa\xaa\xaa\xaa\xaa'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x5}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x81}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa687}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x880) 722.826988ms ago: executing program 3 (id=2730): socket$alg(0x26, 0x5, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="070200000000000000004b0000000f00a8007364636f6e646e616d6500000e0001"], 0x44}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 582.112349ms ago: executing program 4 (id=2731): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f0000000280)) syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e710d1020"], 0x7) 535.710176ms ago: executing program 7 (id=2732): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) userfaultfd(0x80001) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) 299.542µs ago: executing program 3 (id=2733): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) readv(r1, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/38, 0x26}], 0x1) 0s ago: executing program 1 (id=2734): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000009440)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000001c40)=""/4096, 0x1000}], 0x1}, 0x9}], 0x1, 0x822b, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000001400)="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", 0x5c6, 0x6d91fb6102dc910c, 0x0, 0x1267bd6a23834406) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ) entered disabled state [ 306.249875][ T7515] bridge_slave_0: entered allmulticast mode [ 306.277100][ T7515] bridge_slave_0: entered promiscuous mode [ 306.324115][ T49] hsr_slave_0: left promiscuous mode [ 306.524417][ T49] hsr_slave_1: left promiscuous mode [ 306.542784][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.550273][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.162445][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.352387][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.432092][ T49] veth1_macvtap: left promiscuous mode [ 307.437719][ T49] veth0_macvtap: left promiscuous mode [ 307.450543][ T49] veth1_vlan: left promiscuous mode [ 307.457918][ T49] veth0_vlan: left promiscuous mode [ 311.205372][ T49] team0 (unregistering): Port device team_slave_1 removed [ 311.238332][ T7736] netlink: 'syz.1.512': attribute type 10 has an invalid length. [ 311.246352][ T7736] netlink: 40 bytes leftover after parsing attributes in process `syz.1.512'. [ 311.270246][ T49] team0 (unregistering): Port device team_slave_0 removed [ 311.784633][ T7515] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.793207][ T7515] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.800615][ T7515] bridge_slave_1: entered allmulticast mode [ 311.810389][ T7515] bridge_slave_1: entered promiscuous mode [ 311.822613][ T7415] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 311.853291][ T7723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.510'. [ 311.889050][ T7736] team0: entered promiscuous mode [ 311.894429][ T7736] team_slave_0: entered promiscuous mode [ 311.900278][ T7736] team_slave_1: entered promiscuous mode [ 311.906258][ T7736] team0: entered allmulticast mode [ 311.912444][ T7736] team_slave_0: entered allmulticast mode [ 311.918181][ T7736] team_slave_1: entered allmulticast mode [ 311.924712][ T7736] bridge0: port 3(team0) entered blocking state [ 311.931088][ T7736] bridge0: port 3(team0) entered disabled state [ 311.941440][ T7736] bridge0: port 3(team0) entered blocking state [ 311.947808][ T7736] bridge0: port 3(team0) entered forwarding state [ 312.337502][ T7415] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 313.353541][ T7515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.184384][ T7515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.439634][ T7415] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 316.907487][ T7415] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 317.425092][ T7515] team0: Port device team_slave_0 added [ 317.481963][ T7515] team0: Port device team_slave_1 added [ 317.873207][ T7415] kthread_run failed with err -4 [ 318.103090][ T7515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.103178][ T7515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.103239][ T7515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.137079][ T7515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.137103][ T7515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.137167][ T7515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.255372][ T7789] netlink: 'syz.5.525': attribute type 10 has an invalid length. [ 318.255481][ T7789] netlink: 40 bytes leftover after parsing attributes in process `syz.5.525'. [ 318.325926][ T7789] team0: entered promiscuous mode [ 318.326039][ T7789] team_slave_1: entered promiscuous mode [ 318.328629][ T7789] team0: entered allmulticast mode [ 318.328708][ T7789] team_slave_1: entered allmulticast mode [ 318.336638][ T7789] bridge0: port 3(team0) entered blocking state [ 318.338230][ T7789] bridge0: port 3(team0) entered disabled state [ 318.545973][ T7789] bridge0: port 3(team0) entered blocking state [ 318.546143][ T7789] bridge0: port 3(team0) entered forwarding state [ 320.167407][ T7515] hsr_slave_0: entered promiscuous mode [ 320.287987][ T7515] hsr_slave_1: entered promiscuous mode [ 320.350169][ T7515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.350341][ T7515] Cannot create hsr debugfs directory [ 320.779859][ T5863] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 320.781782][ T5863] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 320.782867][ T5863] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 320.788531][ T5863] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 320.789848][ T5863] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 321.627767][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.636686][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.840240][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.535'. [ 322.861053][ T5863] Bluetooth: hci6: command tx timeout [ 324.905244][ T49] bridge_slave_1: left allmulticast mode [ 325.139303][ T5863] Bluetooth: hci6: command tx timeout [ 325.151732][ T49] bridge_slave_1: left promiscuous mode [ 325.157621][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.170577][ T7849] fuse: Invalid rootmode [ 325.171969][ T49] bridge_slave_0: left allmulticast mode [ 326.154304][ T49] bridge_slave_0: left promiscuous mode [ 326.165902][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.181229][ T5863] Bluetooth: hci6: command tx timeout [ 329.342701][ T5863] Bluetooth: hci6: command tx timeout [ 330.403962][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.469468][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.494749][ T49] bond0 (unregistering): Released all slaves [ 330.675054][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.5.549'. [ 330.719320][ T7896] fuse: Unknown parameter '00000000000000000000' [ 330.739431][ T49] hsr_slave_0: left promiscuous mode [ 330.749717][ T49] hsr_slave_1: left promiscuous mode [ 330.780521][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.809258][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.850661][ T49] veth0_vlan: left promiscuous mode [ 335.141184][ T5863] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 336.630860][ T7941] random: crng reseeded on system resumption [ 336.820008][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.572'. [ 336.829935][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.572'. [ 336.833156][ T49] team0 (unregistering): Port device team_slave_1 removed [ 336.888333][ T49] team0 (unregistering): Port device team_slave_0 removed [ 336.924564][ T5860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 336.932931][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 336.946509][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 336.960225][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 336.977463][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.879820][ T7806] chnl_net:caif_netlink_parms(): no params data found [ 339.022251][ T5863] Bluetooth: hci1: command tx timeout [ 340.096962][ T7806] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.116087][ T7806] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.138574][ T7806] bridge_slave_0: entered allmulticast mode [ 340.167856][ T7806] bridge_slave_0: entered promiscuous mode [ 340.202493][ T7806] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.244910][ T7806] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.262157][ T7806] bridge_slave_1: entered allmulticast mode [ 340.283189][ T7806] bridge_slave_1: entered promiscuous mode [ 341.135848][ T5863] Bluetooth: hci1: command tx timeout [ 341.556491][ T7948] chnl_net:caif_netlink_parms(): no params data found [ 342.520001][ T7806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.613665][ T7806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.865635][ T7806] team0: Port device team_slave_0 added [ 342.886996][ T7806] team0: Port device team_slave_1 added [ 343.418909][ T5863] Bluetooth: hci1: command tx timeout [ 346.335041][ T7806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.352336][ T5863] Bluetooth: hci1: command tx timeout [ 346.750773][ T7806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.361017][ T7806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.383795][ T7948] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.393134][ T7948] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.400465][ T7948] bridge_slave_0: entered allmulticast mode [ 347.409010][ T7948] bridge_slave_0: entered promiscuous mode [ 347.437303][ T7948] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.453261][ T7948] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.468091][ T7948] bridge_slave_1: entered allmulticast mode [ 347.476560][ T7948] bridge_slave_1: entered promiscuous mode [ 347.525446][ T8051] netlink: 52 bytes leftover after parsing attributes in process `syz.5.601'. [ 347.588572][ T7806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.646790][ T7806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.712419][ T7806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.869302][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.600'. [ 347.878319][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.600'. [ 348.913819][ T7948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.933343][ T7948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.643288][ T7806] hsr_slave_0: entered promiscuous mode [ 349.650162][ T7806] hsr_slave_1: entered promiscuous mode [ 349.683168][ T7806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.700263][ T7806] Cannot create hsr debugfs directory [ 350.877954][ T7948] team0: Port device team_slave_0 added [ 350.959919][ T8074] netlink: 20 bytes leftover after parsing attributes in process `syz.5.608'. [ 351.545990][ T7948] team0: Port device team_slave_1 added [ 351.693652][ T7948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.700985][ T7948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.748675][ T7948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.984678][ T8090] QAT: failed to copy from user cfg_data. [ 356.369992][ T7948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.378014][ T7948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.440991][ T7948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.709527][ T49] bridge_slave_1: left allmulticast mode [ 356.731560][ T49] bridge_slave_1: left promiscuous mode [ 356.737398][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.941104][ T49] bridge_slave_0: left allmulticast mode [ 356.946847][ T49] bridge_slave_0: left promiscuous mode [ 357.727440][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.474992][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.527251][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.546101][ T49] bond0 (unregistering): Released all slaves [ 359.990579][ T49] hsr_slave_0: left promiscuous mode [ 360.071448][ T49] hsr_slave_1: left promiscuous mode [ 360.077902][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.088223][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.034853][ T49] team0 (unregistering): Port device team_slave_1 removed [ 361.085682][ T49] team0 (unregistering): Port device team_slave_0 removed [ 361.328795][ T7948] hsr_slave_0: entered promiscuous mode [ 361.344365][ T7948] hsr_slave_1: entered promiscuous mode [ 361.366995][ T7948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.392089][ T7948] Cannot create hsr debugfs directory [ 365.181441][ T8177] fuse: Unknown parameter 'user_i00000000000000000000' [ 365.318910][ T49] bridge_slave_1: left allmulticast mode [ 365.334860][ T49] bridge_slave_1: left promiscuous mode [ 365.345146][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.371803][ T49] bridge_slave_0: left allmulticast mode [ 365.383313][ T49] bridge_slave_0: left promiscuous mode [ 365.421837][ T8184] syz.3.643 uses obsolete (PF_INET,SOCK_PACKET) [ 365.603449][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.780543][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.798222][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.846320][ T49] bond0 (unregistering): Released all slaves [ 367.673627][ T7806] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 367.695369][ T7806] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 367.706396][ T7806] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 367.805362][ T49] hsr_slave_0: left promiscuous mode [ 367.819175][ T49] hsr_slave_1: left promiscuous mode [ 367.826070][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.845142][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.236316][ T49] team0 (unregistering): Port device team_slave_1 removed [ 368.345902][ T49] team0 (unregistering): Port device team_slave_0 removed [ 370.021673][ T7806] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 370.163745][ T7948] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 370.199091][ T8230] netlink: 20 bytes leftover after parsing attributes in process `syz.5.655'. [ 370.312564][ T7948] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 371.073612][ T8220] netlink: 'syz.4.654': attribute type 10 has an invalid length. [ 371.091277][ T8220] netlink: 40 bytes leftover after parsing attributes in process `syz.4.654'. [ 371.167767][ T8220] team0: entered promiscuous mode [ 371.173243][ T8220] team_slave_0: entered promiscuous mode [ 371.221351][ T8220] team_slave_1: entered promiscuous mode [ 371.239079][ T8220] team0: entered allmulticast mode [ 371.249258][ T8220] team_slave_0: entered allmulticast mode [ 371.275309][ T8220] team_slave_1: entered allmulticast mode [ 371.324819][ T8220] bridge0: port 3(team0) entered blocking state [ 371.347631][ T8220] bridge0: port 3(team0) entered disabled state [ 371.405567][ T8220] bridge0: port 3(team0) entered blocking state [ 371.412049][ T8220] bridge0: port 3(team0) entered forwarding state [ 371.427375][ T7948] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 371.654802][ T7948] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 373.838028][ T7806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.949073][ T7806] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.136500][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.143771][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.214527][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.221865][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.116219][ T7948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.134565][ T7806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 376.812108][ T7948] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.845826][ T8294] netlink: 'syz.3.673': attribute type 10 has an invalid length. [ 376.853759][ T8294] netlink: 40 bytes leftover after parsing attributes in process `syz.3.673'. [ 376.915018][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.922290][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.982636][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.989963][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.639549][ T7948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.209231][ T5860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 382.218617][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 382.237689][ T5860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 382.278073][ T5860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 382.297895][ T5860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 383.030275][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.036895][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.420782][ T5860] Bluetooth: hci3: command tx timeout [ 386.062193][ T8389] fuse: Unknown parameter 'user_id00000000000000000000' [ 386.461037][ T5860] Bluetooth: hci3: command tx timeout [ 387.120050][ T8391] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.205242][ T7948] veth0_vlan: entered promiscuous mode [ 388.673065][ T5860] Bluetooth: hci3: command tx timeout [ 389.352644][ T7948] veth1_vlan: entered promiscuous mode [ 389.419551][ T8349] chnl_net:caif_netlink_parms(): no params data found [ 389.514240][ T6154] bridge_slave_1: left allmulticast mode [ 389.520005][ T6154] bridge_slave_1: left promiscuous mode [ 389.538926][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.559840][ T6154] bridge_slave_0: left allmulticast mode [ 389.571913][ T6154] bridge_slave_0: left promiscuous mode [ 389.608647][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.701965][ T5860] Bluetooth: hci3: command tx timeout [ 392.783859][ T8430] fuse: Unknown parameter 'user_id00000000000000000000' [ 394.119299][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.139190][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.153467][ T6154] bond0 (unregistering): Released all slaves [ 394.384475][ T6154] hsr_slave_0: left promiscuous mode [ 394.408684][ T6154] hsr_slave_1: left promiscuous mode [ 394.428566][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.455236][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.233715][ T5863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 396.253177][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 396.264621][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 396.297551][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 396.371288][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 396.431617][ T8452] netlink: 'syz.5.714': attribute type 10 has an invalid length. [ 396.439862][ T8452] netlink: 40 bytes leftover after parsing attributes in process `syz.5.714'. [ 398.247248][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 399.144653][ T5860] Bluetooth: hci1: command tx timeout [ 399.250253][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 400.924189][ T8349] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.932201][ T8349] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.939488][ T8349] bridge_slave_0: entered allmulticast mode [ 400.948343][ T8349] bridge_slave_0: entered promiscuous mode [ 400.963674][ T8349] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.971195][ T8349] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.978437][ T8349] bridge_slave_1: entered allmulticast mode [ 400.987212][ T8349] bridge_slave_1: entered promiscuous mode [ 401.180899][ T5860] Bluetooth: hci1: command tx timeout [ 402.098486][ T8349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.154881][ T8349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.598034][ T8502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.729'. [ 403.045971][ T8349] team0: Port device team_slave_0 added [ 403.059575][ T8349] team0: Port device team_slave_1 added [ 403.260966][ T5860] Bluetooth: hci1: command tx timeout [ 403.538096][ T8349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.546950][ T8349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.580010][ T8349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.619880][ T8349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.628911][ T8349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.664864][ T8349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.959707][ T8523] netlink: 'syz.1.736': attribute type 10 has an invalid length. [ 404.967634][ T8523] netlink: 40 bytes leftover after parsing attributes in process `syz.1.736'. [ 405.218141][ T8349] hsr_slave_0: entered promiscuous mode [ 405.391437][ T5860] Bluetooth: hci1: command tx timeout [ 405.402467][ T8349] hsr_slave_1: entered promiscuous mode [ 405.441256][ T8349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.140945][ T8349] Cannot create hsr debugfs directory [ 406.241950][ T8447] chnl_net:caif_netlink_parms(): no params data found [ 406.901964][ T8447] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.927211][ T8447] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.941086][ T8447] bridge_slave_0: entered allmulticast mode [ 406.949601][ T8447] bridge_slave_0: entered promiscuous mode [ 406.978161][ T8447] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.986484][ T8447] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.994876][ T8447] bridge_slave_1: entered allmulticast mode [ 407.003879][ T8447] bridge_slave_1: entered promiscuous mode [ 407.397342][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.5.742'. [ 407.459394][ T8447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.829706][ T8447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.073019][ T8557] kAFS: No cell specified [ 408.225917][ T8560] Bluetooth: MGMT ver 1.23 [ 409.973396][ T8447] team0: Port device team_slave_0 added [ 410.400949][ T5860] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 410.543402][ T5860] Bluetooth: hci0: command 0x0406 tx timeout [ 412.008422][ T6154] bridge_slave_1: left allmulticast mode [ 412.026888][ T6154] bridge_slave_1: left promiscuous mode [ 412.042496][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.253166][ T6154] bridge_slave_0: left allmulticast mode [ 412.274745][ T6154] bridge_slave_0: left promiscuous mode [ 412.287307][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.600625][ T8599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.755'. [ 414.984310][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.996611][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.008045][ T6154] bond0 (unregistering): Released all slaves [ 415.035631][ T8447] team0: Port device team_slave_1 added [ 415.677611][ T8612] input: syz0 as /devices/virtual/input/input8 [ 415.984120][ T8447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.013385][ T8447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.089288][ T8447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.193335][ T8447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.200324][ T8447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.236802][ T8447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.330597][ T6154] hsr_slave_0: left promiscuous mode [ 416.344017][ T8622] netlink: 128 bytes leftover after parsing attributes in process `syz.3.762'. [ 416.542466][ T6154] hsr_slave_1: left promiscuous mode [ 416.549522][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.594328][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.586494][ T6154] veth1_vlan: left promiscuous mode [ 417.594925][ T6154] veth0_vlan: left promiscuous mode [ 420.624304][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 420.735024][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 423.419104][ T8645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.769'. [ 425.488879][ T8666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.775'. [ 425.509599][ T8447] hsr_slave_0: entered promiscuous mode [ 425.537924][ T8447] hsr_slave_1: entered promiscuous mode [ 425.556916][ T8447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.597140][ T8447] Cannot create hsr debugfs directory [ 426.738249][ T8666] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.747939][ T8666] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.756803][ T8666] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.765586][ T8666] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.776378][ T8666] vxlan0: entered promiscuous mode [ 429.456119][ T30] kauditd_printk_skb: 120 callbacks suppressed [ 429.456175][ T30] audit: type=1326 audit(1752087246.183:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 429.986514][ T30] audit: type=1326 audit(1752087246.193:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 430.067667][ T30] audit: type=1326 audit(1752087246.223:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 430.137903][ T30] audit: type=1326 audit(1752087246.673:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 430.407816][ T30] audit: type=1326 audit(1752087246.673:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 430.431075][ T30] audit: type=1326 audit(1752087246.673:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 430.454223][ T30] audit: type=1326 audit(1752087246.673:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 430.479027][ T30] audit: type=1326 audit(1752087246.673:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 430.505690][ T30] audit: type=1326 audit(1752087246.683:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 430.550772][ T30] audit: type=1326 audit(1752087246.683:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8697 comm="syz.3.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 431.408879][ T8349] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 431.515958][ T8349] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 431.688523][ T8349] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 431.965595][ T8349] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 432.135319][ T8736] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.800'. [ 432.821112][ T8349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.958151][ T8349] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.028520][ T8447] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 433.087037][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.094350][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.136258][ T8447] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 433.226539][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.233900][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.390533][ T8447] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 433.510991][ T8447] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 434.258989][ T8447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.373273][ T8447] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.484272][ T6156] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.491535][ T6156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.539254][ T6156] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.546746][ T6156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.437243][ T8349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.117786][ T8447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.917462][ T8349] veth0_vlan: entered promiscuous mode [ 437.999993][ T8349] veth1_vlan: entered promiscuous mode [ 438.111120][ T8349] veth0_macvtap: entered promiscuous mode [ 438.122132][ T8349] veth1_macvtap: entered promiscuous mode [ 438.133087][ T5960] libceph: connect (1)[c::]:6789 error -101 [ 438.142125][ T5960] libceph: mon0 (1)[c::]:6789 connect error [ 438.166427][ T5960] libceph: connect (1)[c::]:6789 error -101 [ 438.173116][ T5960] libceph: mon0 (1)[c::]:6789 connect error [ 438.180199][ T8349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.283075][ T8349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.367467][ T8349] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.403170][ T8349] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.432696][ T8349] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.433173][ T5174] libceph: connect (1)[c::]:6789 error -101 [ 438.470971][ T5174] libceph: mon0 (1)[c::]:6789 connect error [ 438.475354][ T8349] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.176837][ T5174] libceph: connect (1)[c::]:6789 error -101 [ 439.186967][ T8839] ceph: No mds server is up or the cluster is laggy [ 439.232018][ T5174] libceph: mon0 (1)[c::]:6789 connect error [ 440.278277][ T8447] veth0_vlan: entered promiscuous mode [ 440.468339][ T8447] veth1_vlan: entered promiscuous mode [ 440.614938][ T8447] veth0_macvtap: entered promiscuous mode [ 440.670041][ T8447] veth1_macvtap: entered promiscuous mode [ 442.108609][ T8447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.174226][ T8447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.232779][ T8447] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.276776][ T8447] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.285776][ T8447] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.299582][ T8447] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.313792][ T5863] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 442.345787][ T5863] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 442.355340][ T5863] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 442.376117][ T5863] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 442.384928][ T5863] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 443.052834][ T78] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.297705][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 443.297730][ T30] audit: type=1326 audit(1752087260.053:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8896 comm="syz.4.850" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49fbd8e929 code=0x0 [ 444.466571][ T5863] Bluetooth: hci6: command tx timeout [ 444.473325][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.479668][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.563673][ T78] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.643385][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.677121][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.832216][ T78] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.028952][ T6154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.074463][ T6154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.152616][ T78] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.557142][ T5863] Bluetooth: hci6: command tx timeout [ 447.088343][ T30] audit: type=1326 audit(1752087263.813:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8932 comm="syz.5.859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30fa98e929 code=0x0 [ 447.578763][ T8882] chnl_net:caif_netlink_parms(): no params data found [ 448.244559][ T78] bridge_slave_1: left allmulticast mode [ 448.273987][ T78] bridge_slave_1: left promiscuous mode [ 448.280294][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.354763][ T78] bridge_slave_0: left allmulticast mode [ 448.373184][ T78] bridge_slave_0: left promiscuous mode [ 448.425773][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.681389][ T5863] Bluetooth: hci6: command tx timeout [ 450.703325][ T5863] Bluetooth: hci6: command tx timeout [ 453.043138][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.976170][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.066931][ T78] bond0 (unregistering): Released all slaves [ 454.496544][ T78] hsr_slave_0: left promiscuous mode [ 454.510046][ T78] hsr_slave_1: left promiscuous mode [ 454.549777][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.667963][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.698650][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.344546][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.518974][ T78] veth1_macvtap: left promiscuous mode [ 455.563057][ T78] veth0_macvtap: left promiscuous mode [ 455.611074][ T78] veth1_vlan: left promiscuous mode [ 455.635039][ T78] veth0_vlan: left promiscuous mode [ 455.927999][ T9019] netlink: 44 bytes leftover after parsing attributes in process `syz.1.883'. [ 455.937033][ T9019] netlink: 24 bytes leftover after parsing attributes in process `syz.1.883'. [ 458.504342][ T9035] netlink: 104 bytes leftover after parsing attributes in process `syz.4.888'. [ 459.033272][ T9039] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 459.845942][ T78] team0 (unregistering): Port device team_slave_1 removed [ 460.171249][ T78] team0 (unregistering): Port device team_slave_0 removed [ 461.934626][ T9013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 462.294690][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.894'. [ 462.336907][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.894'. [ 462.375453][ T8882] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.389273][ T8882] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.409245][ T8882] bridge_slave_0: entered allmulticast mode [ 462.428345][ T8882] bridge_slave_0: entered promiscuous mode [ 462.465021][ T8882] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.686630][ T8882] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.762743][ T8882] bridge_slave_1: entered allmulticast mode [ 462.899624][ T8882] bridge_slave_1: entered promiscuous mode [ 463.839119][ T8882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.917972][ T8882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.168822][ T9081] netlink: 'syz.4.902': attribute type 10 has an invalid length. [ 464.177444][ T9081] netlink: 40 bytes leftover after parsing attributes in process `syz.4.902'. [ 465.129335][ T8882] team0: Port device team_slave_0 added [ 465.216007][ T8882] team0: Port device team_slave_1 added [ 465.382369][ T9085] fuse: Unknown parameter '0x0000000000000005' [ 465.920508][ T8882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.955538][ T8882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.991744][ T8882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.012793][ T8882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.020077][ T8882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.105828][ T8882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.444615][ T8882] hsr_slave_0: entered promiscuous mode [ 466.487883][ T8882] hsr_slave_1: entered promiscuous mode [ 466.512796][ T8882] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.527787][ T8882] Cannot create hsr debugfs directory [ 466.771872][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.912'. [ 466.795463][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.912'. [ 467.171222][ T9109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 468.382414][ T9125] netlink: 'syz.5.919': attribute type 10 has an invalid length. [ 468.391146][ T9125] netlink: 40 bytes leftover after parsing attributes in process `syz.5.919'. [ 470.453279][ T9132] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 470.477182][ T9132] netlink: 44 bytes leftover after parsing attributes in process `syz.1.921'. [ 470.540912][ T9132] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 472.075767][ T5863] Bluetooth: hci4: unexpected event for opcode 0x0804 [ 472.129091][ T8882] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 472.234886][ T8882] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 472.285714][ T8882] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 472.342477][ T8882] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 473.488716][ T8882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.554800][ T8882] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.799387][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.806768][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.894493][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.901785][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.631654][ T5863] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 476.640339][ T5863] Bluetooth: hci4: Injecting HCI hardware error event [ 476.657447][ T9194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 476.824624][ T5863] Bluetooth: hci4: hardware error 0x00 [ 476.865530][ T8882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.880932][ T9219] capability: warning: `syz.1.948' uses deprecated v2 capabilities in a way that may be insecure [ 478.941890][ T5863] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 479.674240][ T30] audit: type=1326 audit(1752087296.433:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbd8e929 code=0x7ffc0000 [ 479.718673][ T30] audit: type=1326 audit(1752087296.433:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49fbd8e929 code=0x7ffc0000 [ 479.755421][ T30] audit: type=1326 audit(1752087296.433:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbd8e929 code=0x7ffc0000 [ 479.791602][ T30] audit: type=1326 audit(1752087296.433:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49fbd8e929 code=0x7ffc0000 [ 479.967415][ T30] audit: type=1326 audit(1752087296.503:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbd8e929 code=0x7ffc0000 [ 480.066476][ T8882] veth0_vlan: entered promiscuous mode [ 480.072064][ T30] audit: type=1326 audit(1752087296.543:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49fbd8e929 code=0x7ffc0000 [ 480.115114][ T8882] veth1_vlan: entered promiscuous mode [ 480.123778][ T30] audit: type=1326 audit(1752087296.543:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbd8e929 code=0x7ffc0000 [ 480.192370][ T30] audit: type=1326 audit(1752087296.543:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbd8e929 code=0x7ffc0000 [ 481.067321][ T30] audit: type=1326 audit(1752087296.543:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49fbd8e929 code=0x7ffc0000 [ 481.100059][ T8882] veth0_macvtap: entered promiscuous mode [ 481.199799][ T30] audit: type=1326 audit(1752087296.543:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbd8e929 code=0x7ffc0000 [ 481.252970][ T8882] veth1_macvtap: entered promiscuous mode [ 481.318225][ T8882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.595252][ T9260] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 481.602252][ T9260] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 482.493050][ T8882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.515252][ T9260] vhci_hcd vhci_hcd.0: Device attached [ 482.911862][ T8882] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.949910][ T8882] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.991456][ T5960] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 483.000117][ T8882] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.010197][ T8882] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.633263][ T9002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.673301][ T9002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.987829][ T6155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.010812][ T6155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.881565][ T9261] vhci_hcd: connection reset by peer [ 484.968408][ T13] vhci_hcd: stop threads [ 484.994079][ T13] vhci_hcd: release socket [ 485.031495][ T13] vhci_hcd: disconnect device [ 487.742984][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.7.977'. [ 488.180273][ T5960] vhci_hcd: vhci_device speed not set [ 499.422308][ T5863] Bluetooth: hci0: command 0x0406 tx timeout [ 500.509813][ T9435] syz.5.1026 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 502.560051][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1033'. [ 502.670859][ T9465] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1034'. [ 505.360360][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 505.360384][ T30] audit: type=1326 audit(1752087322.113:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9492 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 505.523433][ T30] audit: type=1326 audit(1752087322.163:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9492 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 505.596572][ T30] audit: type=1326 audit(1752087322.163:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9492 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 505.752576][ T30] audit: type=1326 audit(1752087322.163:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9492 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 505.840959][ T30] audit: type=1326 audit(1752087322.183:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9492 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 505.906129][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 505.913038][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.022351][ T30] audit: type=1326 audit(1752087322.183:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9492 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 506.250274][ T30] audit: type=1326 audit(1752087322.183:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9492 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 506.377891][ T30] audit: type=1326 audit(1752087322.193:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9492 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 506.519996][ T30] audit: type=1326 audit(1752087322.203:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9492 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 506.631752][ T30] audit: type=1326 audit(1752087322.203:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9492 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 513.431694][ T9572] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1075'. [ 513.442557][ T9572] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1075'. [ 515.310885][ T5960] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 515.506668][ T5960] usb 7-1: Using ep0 maxpacket: 32 [ 515.525948][ T5960] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.555138][ T5960] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 515.598185][ T5960] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 515.723555][ T5960] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.745749][ T5960] usb 7-1: config 0 descriptor?? [ 515.905958][ T5960] hub 7-1:0.0: bad descriptor, ignoring hub [ 515.966460][ T5960] hub 7-1:0.0: probe with driver hub failed with error -5 [ 516.003755][ T5960] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 517.210371][ T9607] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1086'. [ 518.590169][ T9618] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1090'. [ 518.599276][ T9618] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1090'. [ 519.015551][ T5174] usb 7-1: USB disconnect, device number 2 [ 523.081101][ T9669] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1108'. [ 523.090368][ T9669] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1108'. [ 523.420836][ T5860] Bluetooth: hci1: command 0x0406 tx timeout [ 524.476205][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 524.476254][ T30] audit: type=1326 audit(1752087340.763:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9685 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbd8e929 code=0x7ffc0000 [ 524.922345][ T30] audit: type=1326 audit(1752087340.763:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9685 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbd8e929 code=0x7ffc0000 [ 524.945375][ T30] audit: type=1326 audit(1752087340.763:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9685 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49fbd8e929 code=0x7ffc0000 [ 524.968636][ T30] audit: type=1326 audit(1752087340.763:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9685 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbd8e929 code=0x7ffc0000 [ 525.032141][ T30] audit: type=1326 audit(1752087340.773:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9685 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49fbd8e929 code=0x7ffc0000 [ 525.112081][ T30] audit: type=1326 audit(1752087340.773:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9685 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbd8e929 code=0x7ffc0000 [ 525.188181][ T30] audit: type=1326 audit(1752087341.463:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9685 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbd8e929 code=0x7ffc0000 [ 525.562157][ T9703] input: syz0 as /devices/virtual/input/input11 [ 525.845191][ T30] audit: type=1326 audit(1752087341.523:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9685 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49fbd8e929 code=0x7ffc0000 [ 525.867766][ T30] audit: type=1326 audit(1752087341.523:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9685 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbd8e929 code=0x7ffc0000 [ 525.890597][ T30] audit: type=1326 audit(1752087341.523:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9685 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49fbd8e929 code=0x7ffc0000 [ 525.948234][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1119'. [ 526.001318][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1119'. [ 526.161317][ T9706] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1125'. [ 526.170463][ T9706] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1125'. [ 526.537236][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1130'. [ 527.766526][ T9743] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1140'. [ 527.777448][ T9743] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1140'. [ 528.858179][ T9750] input: syz0 as /devices/virtual/input/input12 [ 529.032553][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'. [ 529.073367][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'. [ 532.511706][ T9783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1151'. [ 537.881377][ T9858] input: syz0 as /devices/virtual/input/input13 [ 550.146940][ T5860] Bluetooth: hci6: command 0x0406 tx timeout [ 551.330191][ T9987] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1228'. [ 551.588449][ T9998] netlink: 'syz.1.1233': attribute type 12 has an invalid length. [ 551.650837][ T9998] netlink: 'syz.1.1233': attribute type 29 has an invalid length. [ 551.710719][ T9998] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1233'. [ 555.391282][T10035] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1246'. [ 556.349627][T10049] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1251'. [ 558.876690][T10076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1261'. [ 561.993346][T10104] netlink: 'syz.6.1269': attribute type 4 has an invalid length. [ 562.530378][T10118] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1277'. [ 565.945263][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1286'. [ 567.512734][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.530386][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.422390][ T9646] Bluetooth: hci6: command 0x0406 tx timeout [ 570.033407][T10147] QAT: failed to copy from user cfg_data. [ 570.284570][T10163] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1291'. [ 570.735585][T10170] input: syz0 as /devices/virtual/input/input14 [ 572.247108][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 572.247131][ T30] audit: type=1326 audit(1752087388.983:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 572.327318][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1304'. [ 572.344980][ T30] audit: type=1326 audit(1752087389.003:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 572.412500][T10195] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1304'. [ 572.588638][ T30] audit: type=1326 audit(1752087389.003:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 572.612089][ T30] audit: type=1326 audit(1752087389.003:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 572.707427][ T30] audit: type=1326 audit(1752087389.043:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 573.707428][ T30] audit: type=1326 audit(1752087389.043:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 573.754441][ T30] audit: type=1326 audit(1752087389.043:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 573.809026][ T30] audit: type=1326 audit(1752087389.043:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 573.885882][T10203] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1307'. [ 574.091792][ T30] audit: type=1326 audit(1752087389.043:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 574.194373][ T30] audit: type=1326 audit(1752087389.043:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 574.577395][T10210] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1309'. [ 577.169561][T10220] QAT: failed to copy from user cfg_data. [ 577.942904][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 577.942928][ T30] audit: type=1326 audit(1752087394.693:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10231 comm="syz.5.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fa98e929 code=0x7ffc0000 [ 578.168224][ T30] audit: type=1326 audit(1752087394.693:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10231 comm="syz.5.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30fa98e929 code=0x7ffc0000 [ 579.184629][ T30] audit: type=1326 audit(1752087394.693:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10231 comm="syz.5.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fa98e929 code=0x7ffc0000 [ 579.207412][ T30] audit: type=1326 audit(1752087394.703:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10231 comm="syz.5.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30fa98e929 code=0x7ffc0000 [ 579.787042][ T30] audit: type=1326 audit(1752087394.703:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10231 comm="syz.5.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fa98e929 code=0x7ffc0000 [ 579.871466][T10241] fuse: Bad value for 'fd' [ 579.980830][ T30] audit: type=1326 audit(1752087394.703:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10231 comm="syz.5.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30fa98e929 code=0x7ffc0000 [ 580.307101][ T30] audit: type=1326 audit(1752087394.703:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10231 comm="syz.5.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fa98e929 code=0x7ffc0000 [ 580.364285][ T30] audit: type=1326 audit(1752087394.733:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10231 comm="syz.5.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30fa98e929 code=0x7ffc0000 [ 581.074020][ T30] audit: type=1326 audit(1752087394.733:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10231 comm="syz.5.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fa98e929 code=0x7ffc0000 [ 581.243069][ T30] audit: type=1326 audit(1752087394.733:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10231 comm="syz.5.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f30fa98e929 code=0x7ffc0000 [ 587.452898][T10295] fuse: Bad value for 'fd' [ 587.922345][T10305] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1344'. [ 588.979008][T10327] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 594.397945][T10382] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1368'. [ 594.453953][T10382] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1368'. [ 598.610607][T10401] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1376'. [ 599.682249][T10414] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1380'. [ 605.490214][T10465] QAT: failed to copy from user cfg_data. [ 607.047949][T10482] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1399'. [ 607.399279][ T6156] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.505153][ T6156] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.829061][ T6156] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.434186][ T6156] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.078908][ T6156] team0: left allmulticast mode [ 611.095248][ T9646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 611.097339][ T6156] team_slave_1: left allmulticast mode [ 611.121864][ T9646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 611.141057][ T9646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 611.152412][ T6156] team0: left promiscuous mode [ 611.157482][ T9646] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 611.172830][ T9646] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 611.184652][ T6156] team_slave_1: left promiscuous mode [ 611.190585][ T6156] bridge0: port 3(team0) entered disabled state [ 611.342256][ T6156] bridge_slave_1: left allmulticast mode [ 611.365206][ T6156] bridge_slave_1: left promiscuous mode [ 611.386049][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.419203][ T6156] bridge_slave_0: left allmulticast mode [ 611.435916][ T6156] bridge_slave_0: left promiscuous mode [ 611.453407][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.267844][ T9646] Bluetooth: hci3: command tx timeout [ 613.377309][ T6156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.449388][ T6156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.497130][ T6156] bond0 (unregistering): Released all slaves [ 615.210102][T10576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1433'. [ 615.341139][ T9646] Bluetooth: hci3: command tx timeout [ 615.940934][ T6156] hsr_slave_0: left promiscuous mode [ 616.061427][ T6156] hsr_slave_1: left promiscuous mode [ 616.067780][ T6156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.075743][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.094334][ T6156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.125928][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.315164][ T6156] veth1_macvtap: left promiscuous mode [ 616.337645][ T6156] veth0_macvtap: left promiscuous mode [ 616.374513][ T6156] veth1_vlan: left promiscuous mode [ 616.379974][ T6156] veth0_vlan: left promiscuous mode [ 617.421031][ T9646] Bluetooth: hci3: command tx timeout [ 617.970633][ T6156] team0 (unregistering): Port device team_slave_1 removed [ 618.411103][T10605] QAT: failed to copy from user cfg_data. [ 619.505288][ T9646] Bluetooth: hci3: command tx timeout [ 621.803192][T10595] syz_tun: entered allmulticast mode [ 621.818549][T10595] syz_tun: left allmulticast mode [ 622.089657][T10622] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 622.538826][T10533] chnl_net:caif_netlink_parms(): no params data found [ 624.363489][T10533] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.381265][T10533] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.388501][T10533] bridge_slave_0: entered allmulticast mode [ 624.416087][T10533] bridge_slave_0: entered promiscuous mode [ 624.766228][T10661] input: syz0 as /devices/virtual/input/input16 [ 625.222638][T10664] netlink: 'syz.1.1458': attribute type 29 has an invalid length. [ 625.233394][T10665] netlink: 'syz.1.1458': attribute type 29 has an invalid length. [ 625.250927][T10664] netlink: 'syz.1.1458': attribute type 29 has an invalid length. [ 625.433696][T10533] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.462615][T10533] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.469951][T10533] bridge_slave_1: entered allmulticast mode [ 625.687554][T10533] bridge_slave_1: entered promiscuous mode [ 626.119702][T10533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.191237][T10673] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1462'. [ 626.467323][T10533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.975406][T10533] team0: Port device team_slave_0 added [ 626.999754][T10533] team0: Port device team_slave_1 added [ 627.034039][T10679] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82 [ 627.325066][T10533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.293050][T10533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.328073][T10533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.383193][T10533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.390209][T10533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.419295][T10533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.729419][T10533] hsr_slave_0: entered promiscuous mode [ 628.787099][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.808108][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.945529][T10533] hsr_slave_1: entered promiscuous mode [ 631.991730][T10533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 631.999404][T10533] Cannot create hsr debugfs directory [ 632.117147][T10700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1473'. [ 632.190278][T10693] QAT: failed to copy from user cfg_data. [ 632.429227][T10709] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1475'. [ 639.746535][T10533] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 639.973676][T10533] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 640.055169][T10533] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 640.144117][T10533] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 643.950483][T10749] QAT: failed to copy from user cfg_data. [ 644.351072][T10762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1491'. [ 644.517964][T10533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.043343][T10533] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.105692][ T6156] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.112915][ T6156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.206673][ T9002] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.213905][ T9002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.784336][T10533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.623705][T10806] input: syz0 as /devices/virtual/input/input17 [ 648.989281][T10808] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1505'. [ 650.549117][T10533] veth0_vlan: entered promiscuous mode [ 650.581424][T10533] veth1_vlan: entered promiscuous mode [ 650.702752][T10533] veth0_macvtap: entered promiscuous mode [ 650.758160][T10533] veth1_macvtap: entered promiscuous mode [ 650.819898][T10533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.878480][T10533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.914913][T10533] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.961583][T10533] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.992777][T10533] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.031256][T10533] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.325631][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.355986][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.471331][ T6098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.499351][ T6098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.749984][T10856] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1519'. [ 654.369632][T10887] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1532'. [ 657.494006][T10927] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1549'. [ 658.869821][T10941] netlink: 27 bytes leftover after parsing attributes in process `syz.7.1553'. [ 660.259811][T10964] input: syz0 as /devices/virtual/input/input18 [ 663.919352][T11010] qrtr: Invalid version 0 [ 667.523362][T11043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 672.864431][T11089] syz_tun: entered allmulticast mode [ 672.917217][T11088] syz_tun: left allmulticast mode [ 673.439089][T11100] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 675.618777][T11118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 679.386790][T11156] bond0: (slave erspan0): Error: Device type is different from other slaves [ 679.471205][T11159] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 683.842375][T11201] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 687.321825][T11230] syz_tun: entered allmulticast mode [ 687.349535][T11229] syz_tun: left allmulticast mode [ 689.300342][T11271] syz_tun: entered allmulticast mode [ 689.341811][T11270] syz_tun: left allmulticast mode [ 690.226853][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.233728][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.981764][T11289] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 695.900865][T11330] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1692'. [ 698.213534][T11364] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1703'. [ 699.010873][T11373] QAT: failed to copy from user cfg_data. [ 700.820947][T11386] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 701.663584][T11397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1713'. [ 705.146131][T11432] QAT: failed to copy from user cfg_data. [ 710.486024][T11443] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1733'. [ 721.205187][T11543] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1762'. [ 725.658372][T11585] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1783'. [ 725.848848][T11588] netlink: 'syz.8.1784': attribute type 1 has an invalid length. [ 726.091967][T11588] netlink: 204 bytes leftover after parsing attributes in process `syz.8.1784'. [ 726.117790][T11588] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1784'. [ 728.338387][T11603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1790'. [ 728.853020][T11618] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1797'. [ 730.061956][T11628] sctp: [Deprecated]: syz.3.1801 (pid 11628) Use of int in max_burst socket option. [ 730.061956][T11628] Use struct sctp_assoc_value instead [ 730.120350][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1800'. [ 730.170826][T11631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.380330][T11631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.487004][T11637] pim6reg: entered allmulticast mode [ 730.510988][T11632] pim6reg: left allmulticast mode [ 736.440467][T11694] pim6reg: entered allmulticast mode [ 736.448701][T11692] pim6reg: left allmulticast mode [ 737.086513][T11712] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1829'. [ 737.436994][T11709] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 738.387082][ T9646] Bluetooth: hci3: command 0x0406 tx timeout [ 738.903592][T11726] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1833'. [ 739.906501][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1838'. [ 742.718349][T11782] netlink: 'syz.1.1853': attribute type 12 has an invalid length. [ 747.254993][T11848] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1879'. [ 748.056900][T11880] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1894'. [ 749.021191][T11883] Driver unsupported XDP return value 0 on prog (id 231) dev N/A, expect packet loss! [ 749.067787][T11887] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 751.579734][T11919] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 751.791293][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.797669][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.438621][T11934] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1914'. [ 752.685364][T11942] ALSA: mixer_oss: invalid OSS volume '' [ 753.139093][T11959] input: syz0 as /devices/virtual/input/input24 [ 754.468618][T11987] ALSA: mixer_oss: invalid OSS volume '' [ 757.986195][T12058] input: syz0 as /devices/virtual/input/input25 [ 758.240541][T12060] cgroup: Unknown subsys name 'cpuset' [ 758.983379][T12036] syz.7.1954 (12036) used greatest stack depth: 20024 bytes left [ 761.270899][T12094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 766.096526][T12154] input: syz0 as /devices/virtual/input/input26 [ 769.312788][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2018'. [ 769.341601][T12205] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2019'. [ 769.940780][T12216] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 771.274384][T12234] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2029'. [ 773.273834][T12254] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2035'. [ 781.614950][ T8550] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 781.959609][ T8550] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 784.557526][T12357] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 784.761809][T12363] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2074'. [ 786.572175][T12386] netlink: 'syz.3.2082': attribute type 29 has an invalid length. [ 786.594851][T12386] netlink: 'syz.3.2082': attribute type 29 has an invalid length. [ 786.625322][T12386] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2082'. [ 791.371226][T12450] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2108'. [ 791.451332][T12456] input: syz0 as /devices/virtual/input/input27 [ 791.959729][T12464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 792.852193][T12481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2118'. [ 794.996818][T12508] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2127'. [ 795.343176][T12513] input: syz0 as /devices/virtual/input/input28 [ 796.973355][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 796.973378][ T30] audit: type=1326 audit(1752087613.733:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12537 comm="syz.6.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1538e929 code=0x7ffc0000 [ 797.067624][ T30] audit: type=1326 audit(1752087613.733:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12537 comm="syz.6.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1538e929 code=0x7ffc0000 [ 797.092591][ C1] vkms_vblank_simulate: vblank timer overrun [ 797.101421][ T30] audit: type=1326 audit(1752087613.733:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12537 comm="syz.6.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef1538e929 code=0x7ffc0000 [ 797.124492][ C1] vkms_vblank_simulate: vblank timer overrun [ 797.135875][ T30] audit: type=1326 audit(1752087613.733:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12537 comm="syz.6.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1538e929 code=0x7ffc0000 [ 797.158401][ C1] vkms_vblank_simulate: vblank timer overrun [ 797.165903][ T30] audit: type=1326 audit(1752087613.733:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12537 comm="syz.6.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1538e929 code=0x7ffc0000 [ 797.250818][ T30] audit: type=1326 audit(1752087613.733:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12537 comm="syz.6.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef1538e929 code=0x7ffc0000 [ 797.273465][ C1] vkms_vblank_simulate: vblank timer overrun [ 797.347878][ T5915] IPVS: starting estimator thread 0... [ 797.409703][T12520] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 797.457122][T12520] tipc: Enabled bearer , priority 10 [ 797.463641][T12545] IPVS: using max 21 ests per chain, 50400 per kthread [ 797.525350][ T30] audit: type=1326 audit(1752087613.733:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12537 comm="syz.6.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1538e929 code=0x7ffc0000 [ 797.543334][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 797.549132][ T30] audit: type=1326 audit(1752087613.733:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12537 comm="syz.6.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef1538e929 code=0x7ffc0000 [ 797.577807][ C1] vkms_vblank_simulate: vblank timer overrun [ 797.630914][ T30] audit: type=1326 audit(1752087613.733:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12537 comm="syz.6.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1538e929 code=0x7ffc0000 [ 797.810842][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 798.340821][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 798.361735][ T30] audit: type=1326 audit(1752087613.733:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12537 comm="syz.6.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef1538e929 code=0x7ffc0000 [ 798.465489][T12552] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2143'. [ 799.420870][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 800.461431][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 800.533550][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2151'. [ 800.677618][ T5860] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 801.500768][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 801.923463][T12617] QAT: failed to copy from user cfg_data. [ 802.540811][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 803.352841][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 803.352865][ T30] audit: type=1326 audit(1752087620.113:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12622 comm="syz.3.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 803.490851][ T30] audit: type=1326 audit(1752087620.113:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12622 comm="syz.3.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 803.576552][ T30] audit: type=1326 audit(1752087620.113:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12622 comm="syz.3.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 803.580779][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 803.626410][ T30] audit: type=1326 audit(1752087620.113:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12622 comm="syz.3.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 803.767801][ T30] audit: type=1326 audit(1752087620.113:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12622 comm="syz.3.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 803.960594][ T30] audit: type=1326 audit(1752087620.113:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12622 comm="syz.3.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 803.983401][ T30] audit: type=1326 audit(1752087620.113:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12622 comm="syz.3.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 804.007189][ T30] audit: type=1326 audit(1752087620.113:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12622 comm="syz.3.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 804.034037][ T30] audit: type=1326 audit(1752087620.113:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12622 comm="syz.3.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 804.058861][ T30] audit: type=1326 audit(1752087620.113:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12622 comm="syz.3.2171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa1f8e929 code=0x7ffc0000 [ 804.547951][T12645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2182'. [ 804.620771][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 805.660829][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 806.549925][ T5860] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 806.599668][T12690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2198'. [ 806.701034][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 807.740792][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 807.823193][T12708] QAT: failed to copy from user cfg_data. [ 808.696586][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 808.696610][ T30] audit: type=1326 audit(1752087625.443:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12706 comm="syz.6.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1538e929 code=0x7ffc0000 [ 808.758499][ T30] audit: type=1326 audit(1752087625.493:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12706 comm="syz.6.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef1538e929 code=0x7ffc0000 [ 808.781313][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 808.789227][ T30] audit: type=1326 audit(1752087625.493:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12706 comm="syz.6.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1538e929 code=0x7ffc0000 [ 808.813059][ T30] audit: type=1326 audit(1752087625.493:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12706 comm="syz.6.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef1538e929 code=0x7ffc0000 [ 808.841001][ T30] audit: type=1326 audit(1752087625.493:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12706 comm="syz.6.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1538e929 code=0x7ffc0000 [ 808.909084][ T30] audit: type=1326 audit(1752087625.493:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12706 comm="syz.6.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef1538e929 code=0x7ffc0000 [ 809.020917][ T30] audit: type=1326 audit(1752087625.493:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12706 comm="syz.6.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1538e929 code=0x7ffc0000 [ 809.133058][ T30] audit: type=1326 audit(1752087625.493:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12706 comm="syz.6.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef1538e929 code=0x7ffc0000 [ 809.251632][T12716] netlink: 'syz.6.2209': attribute type 1 has an invalid length. [ 809.258883][ T30] audit: type=1326 audit(1752087625.493:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12706 comm="syz.6.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1538e929 code=0x7ffc0000 [ 809.280941][T12716] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 809.291498][T12716] IPv6: NLM_F_CREATE should be set when creating new route [ 809.325061][ T30] audit: type=1326 audit(1752087625.513:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12706 comm="syz.6.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fef1538e929 code=0x7ffc0000 [ 809.396094][T12719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2212'. [ 809.820765][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 810.870957][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 811.266714][T12756] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2227'. [ 811.743183][T12765] QAT: failed to copy from user cfg_data. [ 811.910869][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 812.792532][T12764] pimreg: entered allmulticast mode [ 812.940789][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 813.105110][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.112547][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.980766][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 815.020918][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 816.060759][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 816.837962][T12812] input: syz0 as /devices/virtual/input/input29 [ 817.100870][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 818.140775][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 818.655977][T12829] xt_hashlimit: size too large, truncated to 1048576 [ 819.180768][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 820.230748][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 821.260775][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 821.981307][ T9646] Bluetooth: hci2: command 0x0406 tx timeout [ 822.162101][T12867] netlink: 'syz.3.2264': attribute type 29 has an invalid length. [ 822.239775][T12867] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2264'. [ 822.300740][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 823.270606][ T5960] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 823.340915][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 823.851010][ T5960] usb 5-1: Using ep0 maxpacket: 32 [ 824.380741][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 824.910860][ T5960] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 824.970746][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.052160][ T5960] usb 5-1: config 0 descriptor?? [ 825.278560][ T5960] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 825.328545][ T5960] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 825.366456][ T5960] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 825.379723][ T5960] usb 5-1: media controller created [ 825.417685][ T5960] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 825.430759][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 825.488242][ T5960] az6027: usb out operation failed. (-71) [ 825.528115][ T5960] az6027: usb out operation failed. (-71) [ 825.556595][ T5960] stb0899_attach: Driver disabled by Kconfig [ 825.580905][ T5960] az6027: no front-end attached [ 825.580905][ T5960] [ 825.615716][ T5960] az6027: usb out operation failed. (-71) [ 825.656656][ T5960] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 825.753242][T12915] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2281'. [ 826.050983][ T5960] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input30 [ 826.191486][ T5960] dvb-usb: schedule remote query interval to 400 msecs. [ 826.230871][ T5960] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 826.326942][ T5960] usb 5-1: USB disconnect, device number 5 [ 826.460749][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 826.585297][T12930] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2283'. [ 826.636348][ T5960] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 827.500785][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 828.159509][T12946] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2293'. [ 828.540859][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 829.590896][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 830.589665][T12962] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2299'. [ 830.630733][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 831.660733][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 831.930994][T12984] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2308'. [ 832.138766][T12991] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2311'. [ 832.415751][T12998] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2315'. [ 832.700894][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 833.750809][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 834.498412][T13021] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2324'. [ 834.507673][T13021] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2324'. [ 834.780742][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 835.820744][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 836.860752][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 837.377841][T13058] netlink: 'syz.4.2337': attribute type 4 has an invalid length. [ 837.911065][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 838.041060][T13069] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2342'. [ 838.051120][T13069] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2342'. [ 838.940763][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 839.680846][ T5950] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 839.951395][ T5950] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 839.980762][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 840.081234][ T5950] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 840.990774][ T5950] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 840.999902][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.020764][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 842.070752][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 842.145763][ T5950] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 842.275120][ T5950] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 842.286367][T13090] udevd[13090]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 843.110822][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 843.378524][T13130] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2360'. [ 843.387596][T13130] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2360'. [ 844.140776][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 845.180762][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 845.427077][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2365'. [ 846.220747][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 846.311134][ T5950] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 846.446868][ T5960] usb 5-1: USB disconnect, device number 6 [ 846.490837][ T5950] usb 7-1: Using ep0 maxpacket: 32 [ 846.504957][ T5950] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 846.532992][ T5950] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 846.701272][ T5950] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 847.260736][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 847.501225][ T5950] usb 7-1: Product: syz [ 847.505451][ T5950] usb 7-1: Manufacturer: syz [ 847.510376][ T5950] usb 7-1: SerialNumber: syz [ 847.531771][ T5950] usb 7-1: config 0 descriptor?? [ 847.537617][T13150] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 847.562198][ T5950] hub 7-1:0.0: bad descriptor, ignoring hub [ 847.568893][ T5950] hub 7-1:0.0: probe with driver hub failed with error -5 [ 847.649590][T13173] netlink: 'syz.8.2375': attribute type 2 has an invalid length. [ 847.720163][T13173] netlink: 723 bytes leftover after parsing attributes in process `syz.8.2375'. [ 848.181534][T13181] ALSA: mixer_oss: invalid OSS volume '' [ 848.300786][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 848.993866][T13150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.340740][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 849.497165][T13150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.024131][T13192] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2379'. [ 850.380743][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 850.974625][ T5950] usb 7-1: USB disconnect, device number 3 [ 851.185281][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 851.186208][ T30] audit: type=1326 audit(1752087667.943:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.7.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0b38e929 code=0x7ffc0000 [ 851.420777][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 852.032010][ T30] audit: type=1326 audit(1752087667.943:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.7.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0b38e929 code=0x7ffc0000 [ 852.301054][ T30] audit: type=1326 audit(1752087667.943:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.7.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0c0b38e929 code=0x7ffc0000 [ 852.340865][ T30] audit: type=1326 audit(1752087667.943:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.7.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0b38e929 code=0x7ffc0000 [ 852.363831][ T30] audit: type=1326 audit(1752087667.943:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.7.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0b38e929 code=0x7ffc0000 [ 852.388815][ T30] audit: type=1326 audit(1752087667.973:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.7.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0c0b38e929 code=0x7ffc0000 [ 852.412312][ T30] audit: type=1326 audit(1752087667.973:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.7.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0b38e929 code=0x7ffc0000 [ 852.460753][ T30] audit: type=1326 audit(1752087667.973:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.7.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0b38e929 code=0x7ffc0000 [ 852.460789][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 852.700595][ T30] audit: type=1326 audit(1752087667.973:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.7.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f0c0b38e929 code=0x7ffc0000 [ 852.725520][ T30] audit: type=1326 audit(1752087667.973:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.7.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0b38e929 code=0x7ffc0000 [ 853.500743][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 854.540799][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 855.404930][T13242] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2399'. [ 855.414333][T13242] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2399'. [ 855.580778][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 855.843190][T13224] team0 (unregistering): Port device team_slave_0 removed [ 855.891818][T13224] team0 (unregistering): Port device team_slave_1 removed [ 856.620995][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 857.351703][T13274] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2410'. [ 857.660742][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 857.668417][T13283] 9pnet_fd: Insufficient options for proto=fd [ 857.871450][T13287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 858.533312][T13290] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2416'. [ 858.542721][T13290] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2416'. [ 858.678528][T13295] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2418'. [ 858.700737][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 859.740741][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 860.780741][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 861.294020][T13313] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2426'. [ 861.820783][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 862.860760][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 863.900749][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 864.940810][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 865.640116][T13347] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2435'. [ 865.980741][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 866.552242][T13365] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2442'. [ 866.934372][T13371] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 867.029082][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 867.598722][T13374] ceph: No mds server is up or the cluster is laggy [ 867.919164][ T24] libceph: connect (1)[c::]:6789 error -101 [ 867.925359][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 868.060752][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 868.798182][T13393] tipc: Started in network mode [ 868.816036][T13393] tipc: Node identity 0a994178e1af, cluster identity 4711 [ 868.843923][T13393] tipc: Enabled bearer , priority 0 [ 868.879722][T13393] tipc: Resetting bearer [ 868.986540][T13391] tipc: Disabling bearer [ 869.063276][T13401] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2454'. [ 869.100741][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 869.276126][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2456'. [ 869.861366][T13418] netlink: 596 bytes leftover after parsing attributes in process `syz.8.2459'. [ 870.140736][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 871.180908][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 872.036747][T13451] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2473'. [ 872.220771][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 872.371030][T13457] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2477'. [ 872.476465][T13459] JFS: discard option not supported on device [ 872.487008][T13459] Mount JFS Failure: -22 [ 872.491378][T13459] jfs_mount failed w/return code = -22 [ 873.260823][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 874.032675][T13481] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2483'. [ 874.300792][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 874.545848][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 874.560825][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.340744][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 876.380750][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 876.405281][T13503] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2489'. [ 876.549955][T13515] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2493'. [ 877.420788][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 878.460799][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 879.500760][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 880.540741][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 881.580809][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 882.620745][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 883.660740][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 884.700752][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 885.740848][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 886.780933][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 887.332052][T11401] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 887.415306][T11401] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 887.820742][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 887.875490][T13641] fido_id[13641]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 887.921235][T11401] kernel read not supported for file /dsp1 (pid: 11401 comm: kworker/0:0) [ 888.860743][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 889.901729][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 890.616817][T13669] QAT: failed to copy from user cfg_data. [ 890.940596][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 891.980577][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 893.033296][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 893.385809][T13687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2547'. [ 894.060442][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 894.448882][T13697] netlink: 'syz.3.2550': attribute type 4 has an invalid length. [ 894.624511][T13699] ubi31: attaching mtd0 [ 894.648996][T13699] ubi31: scanning is finished [ 894.653835][T13699] ubi31: empty MTD device detected [ 895.100391][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 895.398184][T13699] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 896.150319][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 897.165549][T13729] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2558'. [ 897.190271][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 897.562041][T13735] input: syz0 as /devices/virtual/input/input33 [ 898.220257][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 899.260196][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 899.340192][T13750] netlink: 'syz.6.2567': attribute type 4 has an invalid length. [ 900.300402][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 900.350139][ T5915] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 900.556270][ T5915] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 900.590193][ T5915] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 900.628962][ T5915] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 900.664178][ T5915] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 900.700924][ T5915] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 900.756933][ T5915] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 900.784097][ T5915] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 900.928100][ T5915] usb 9-1: Product: syz [ 901.340031][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 901.419569][T13781] ceph: No mds server is up or the cluster is laggy [ 901.683964][ T5915] usb 9-1: Manufacturer: syz [ 901.694804][ T5915] cdc_wdm 9-1:1.0: skipping garbage [ 901.701588][ T5960] libceph: connect (1)[c::]:6789 error -101 [ 901.707707][ T5960] libceph: mon0 (1)[c::]:6789 connect error [ 901.739587][ T5915] cdc_wdm 9-1:1.0: skipping garbage [ 901.762380][ T5915] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 901.778640][ T5915] cdc_wdm 9-1:1.0: Unknown control protocol [ 902.296868][T13791] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2579'. [ 902.379994][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 902.929196][T13798] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2583'. [ 902.938453][T13798] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2583'. [ 902.948119][T13798] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2583'. [ 902.963923][T13798] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2583'. [ 902.973162][T13798] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2583'. [ 903.096376][ T8550] usb 9-1: USB disconnect, device number 2 [ 903.419917][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 904.237282][T13811] input: syz0 as /devices/virtual/input/input34 [ 904.459878][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 905.499816][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 906.114312][T13831] 9pnet_fd: Insufficient options for proto=fd [ 906.539835][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 907.297372][T13846] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2598'. [ 907.478362][T13850] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2597'. [ 907.579685][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 908.619622][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 909.659577][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 910.699523][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 910.753507][T13887] input: syz0 as /devices/virtual/input/input35 [ 911.159988][T13896] input: syz0 as /devices/virtual/input/input36 [ 911.739713][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 911.972191][T13904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2616'. [ 912.381526][T13911] netlink: 596 bytes leftover after parsing attributes in process `syz.8.2617'. [ 912.779410][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 913.228826][T13921] overlayfs: failed to clone lowerpath [ 913.819373][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 914.675541][T13932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2625'. [ 914.859500][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 915.899202][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 916.939151][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 917.337117][T13965] overlayfs: failed to clone lowerpath [ 917.979470][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 918.072568][T13976] pimreg: entered allmulticast mode [ 918.565610][T13984] netlink: 'syz.7.2648': attribute type 4 has an invalid length. [ 919.019298][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 919.092925][T14011] overlayfs: overlapping lowerdir path [ 920.058971][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 920.264110][T14032] 9pnet_virtio: no channels available for device syz [ 920.341251][T14032] overlayfs: failed to clone upperpath [ 920.506084][T14035] netlink: 'syz.6.2668': attribute type 4 has an invalid length. [ 920.642756][ T5174] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 920.939069][ T5174] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 920.978817][ T5174] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 921.096562][ T5174] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 921.099118][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 921.344110][ T5174] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 921.375146][ T5174] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 921.436798][ T5174] usb 8-1: Product: syz [ 921.448972][ T5174] usb 8-1: Manufacturer: syz [ 921.490531][ T5174] cdc_wdm 8-1:1.0: skipping garbage [ 921.545647][ T5174] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 921.888391][T14033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.973925][T14065] JFS: discard option not supported on device [ 921.984698][T14065] Mount JFS Failure: -22 [ 921.989197][T14065] jfs_mount failed w/return code = -22 [ 922.021372][T14033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.138864][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 922.981698][T14068] QAT: failed to copy from user cfg_data. [ 923.178970][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 924.195271][ T5960] usb 8-1: USB disconnect, device number 2 [ 924.218877][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 924.376373][T14089] lo speed is unknown, defaulting to 1000 [ 924.433204][T14089] lo speed is unknown, defaulting to 1000 [ 924.591711][T14089] lo speed is unknown, defaulting to 1000 [ 924.779218][T14089] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 925.069909][T14089] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 925.258695][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 925.358745][T14109] batman_adv: batadv0: Adding interface: dummy0 [ 925.435256][T14109] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.669863][T14109] batman_adv: batadv0: Interface activated: dummy0 [ 925.908918][T14115] batadv0: mtu less than device minimum [ 925.931769][T14115] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 925.944176][T14115] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 925.956218][T14115] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 925.968225][T14115] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 925.980223][T14115] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 927.338581][ C0] net_ratelimit: 15 callbacks suppressed [ 927.338610][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 928.378506][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 928.610926][T14089] lo speed is unknown, defaulting to 1000 [ 928.689675][T14117] comedi: valid board names for 8255 driver are: [ 928.696437][T14117] 8255 [ 928.749328][T14089] lo speed is unknown, defaulting to 1000 [ 928.755315][T14117] comedi: valid board names for vmk80xx driver are: [ 928.775699][T14117] vmk80xx [ 928.788862][T14117] comedi: valid board names for usbduxsigma driver are: [ 928.849828][T14117] usbduxsigma [ 929.012233][T14089] lo speed is unknown, defaulting to 1000 [ 929.040399][T14089] lo speed is unknown, defaulting to 1000 [ 929.048323][T14089] lo speed is unknown, defaulting to 1000 [ 929.096536][T14105] QAT: failed to copy from user cfg_data. [ 929.194312][T14117] comedi: valid board names for usbduxfast driver are: [ 929.321680][T14089] lo speed is unknown, defaulting to 1000 [ 929.344604][T14117] usbduxfast [ 929.347966][T14117] comedi: valid board names for usbdux driver are: [ 929.355157][T14117] usbdux [ 929.358143][T14117] comedi: valid board names for ni6501 driver are: [ 929.365258][T14117] ni6501 [ 929.368261][T14117] comedi: valid board names for dt9812 driver are: [ 929.398419][T14117] dt9812 [ 929.401434][T14117] comedi: valid board names for ni_labpc_cs driver are: [ 929.418472][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 929.504300][T14117] ni_labpc_cs [ 929.533511][T14117] comedi: valid board names for ni_daq_700 driver are: [ 929.770884][T14117] ni_daq_700 [ 929.784570][T14117] comedi: valid board names for labpc_pci driver are: [ 929.956110][T14117] labpc_pci [ 930.030141][T14117] comedi: valid board names for adl_pci9118 driver are: [ 930.196120][T14117] pci9118dg [ 930.202036][T14117] pci9118hg [ 930.258666][T14117] pci9118hr [ 930.292107][T14117] comedi: valid board names for 8255_pci driver are: [ 930.320541][T14117] 8255_pci [ 930.323886][T14117] comedi: valid board names for s526 driver are: [ 930.341403][T14117] s526 [ 930.367454][T14117] comedi: valid board names for multiq3 driver are: [ 930.397331][T14117] multiq3 [ 930.400903][T14117] comedi: valid board names for pcmuio driver are: [ 930.428210][T14117] pcmuio48 [ 930.450589][T14117] pcmuio96 [ 930.453951][T14117] comedi: valid board names for pcmmio driver are: [ 930.460605][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 930.519708][T14117] pcmmio [ 930.522711][T14117] comedi: valid board names for pcmda12 driver are: [ 930.568895][T14117] pcmda12 [ 930.571985][T14117] comedi: valid board names for pcmad driver are: [ 930.608446][T14117] pcmad12 [ 930.618391][T14117] pcmad16 [ 930.632998][T14117] comedi: valid board names for ni_labpc driver are: [ 930.658371][T14117] lab-pc-1200 [ 930.661818][T14117] lab-pc-1200ai [ 930.688541][T14117] lab-pc+ [ 930.700347][T14117] comedi: valid board names for atmio16 driver are: [ 930.727458][T14117] atmio16 [ 930.757873][T14117] atmio16d [ 930.768405][T14117] comedi: valid board names for ni_at_ao driver are: [ 930.802833][T14117] at-ao-6 [ 930.812628][T14117] at-ao-10 [ 930.838489][T14117] comedi: valid board names for ni_at_a2150 driver are: [ 930.865899][T14117] ni_at_a2150 [ 930.876027][T14117] comedi: valid board names for adq12b driver are: [ 930.898624][T14117] adq12b [ 930.906810][T14117] comedi: valid board names for mpc624 driver are: [ 930.988470][T14117] mpc624 [ 931.011833][T14117] comedi: valid board names for c6xdigio driver are: [ 931.059042][T14117] c6xdigio [ 931.357554][T14117] comedi: valid board names for aio_iiro_16 driver are: [ 931.402592][T14117] aio_iiro_16 [ 931.427368][T14117] comedi: valid board names for aio_aio12_8 driver are: [ 931.473190][T14117] aio_aio12_8 [ 931.498407][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 931.511369][T14117] aio_ai12_8 [ 931.518778][T14117] aio_ao12_4 [ 931.531145][T14117] comedi: valid board names for fl512 driver are: [ 931.565489][T14117] fl512 [ 931.571297][T14117] comedi: valid board names for dmm32at driver are: [ 931.595116][T14117] dmm32at [ 931.598743][T14117] comedi: valid board names for dt282x driver are: [ 931.614693][T14117] dt2821 [ 931.621161][T14117] dt2821-f [ 931.627698][T14117] dt2821-g [ 931.642059][T14117] dt2823 [ 931.648617][T14117] dt2824-pgh [ 931.657555][T14117] dt2824-pgl [ 931.667201][T14117] dt2825 [ 931.676735][T14117] dt2827 [ 931.685421][T14117] dt2828 [ 931.694625][T14117] dt2829 [ 931.704315][T14117] dt21-ez [ 931.733716][T14117] dt23-ez [ 931.737507][T14117] dt24-ez [ 931.753685][T14117] dt24-ez-pgl [ 931.768337][T14117] comedi: valid board names for dt2817 driver are: [ 931.808323][T14117] dt2817 [ 931.812153][T14117] comedi: valid board names for dt2815 driver are: [ 931.838614][T14117] dt2815 [ 931.849910][T14117] comedi: valid board names for dt2814 driver are: [ 931.878364][T14117] dt2814 [ 931.886965][T14117] comedi: valid board names for dt2811 driver are: [ 931.921150][T14117] dt2811-pgh [ 931.935668][T14117] dt2811-pgl [ 931.948723][T14117] comedi: valid board names for dt2801 driver are: [ 931.965234][T14117] dt2801 [ 931.970592][T14117] comedi: valid board names for das6402 driver are: [ 931.986390][T14117] das6402-12 [ 932.003933][T14117] das6402-16 [ 932.066427][T14117] comedi: valid board names for das1800 driver are: [ 932.081610][T14117] das-1701st [ 932.101575][T14117] das-1701st-da [ 932.116161][T14117] das-1702st [ 932.130754][T14117] das-1702st-da [ 932.145472][T14117] das-1702hr [ 932.160211][T14117] das-1702hr-da [ 932.170936][T14117] das-1701ao [ 932.185030][T14117] das-1702ao [ 932.196300][T14117] das-1801st [ 932.215687][T14117] das-1801st-da [ 932.229456][T14117] das-1802st [ 932.241787][T14117] das-1802st-da [ 932.268416][T14117] das-1802hr [ 932.282037][T14117] das-1802hr-da [ 932.285648][T14117] das-1801hc [ 932.312307][T14117] das-1802hc [ 932.332803][T14117] das-1801ao [ 932.350235][T14117] das-1802ao [ 932.398808][T14117] comedi: valid board names for das800 driver are: [ 932.427192][T14117] das-800 [ 932.440739][T14117] cio-das800 [ 932.453929][T14117] das-801 [ 932.461810][T14117] cio-das801 [ 932.478290][T14117] das-802 [ 932.516642][T14117] cio-das802 [ 932.538405][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 932.556855][T14117] cio-das802/16 [ 932.565823][T14117] comedi: valid board names for isa-das08 driver are: [ 932.579618][T14117] isa-das08 [ 932.586279][T14117] das08-pgm [ 932.592975][T14117] das08-pgh [ 932.600794][T14117] das08-pgl [ 932.607436][T14117] das08-aoh [ 932.616288][T14117] das08-aol [ 932.628842][T14117] das08-aom [ 932.639459][T14117] das08/jr-ao [ 932.642998][T14117] das08jr-16-ao [ 932.647676][T14117] pc104-das08 [ 932.667437][T14117] das08jr/16 [ 932.680075][ T5860] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 932.680157][ T5860] Bluetooth: hci0: adv larger than maximum supported [ 932.687673][ T5860] Bluetooth: hci0: Malformed LE Event: 0x0d [ 932.754562][T14168] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 933.088220][T14117] comedi: valid board names for das16m1 driver are: [ 933.094905][T14117] das16m1 [ 933.218317][T14117] comedi: valid board names for dac02 driver are: [ 933.224805][T14117] dac02 [ 933.227664][T14117] comedi: valid board names for rti802 driver are: [ 933.293033][T14117] rti802 [ 933.296035][T14117] comedi: valid board names for rti800 driver are: [ 933.330859][T14117] rti800 [ 933.338545][T14117] rti815 [ 933.348247][T14117] comedi: valid board names for pcm3724 driver are: [ 933.367434][T14117] pcm3724 [ 933.388575][T14117] comedi: valid board names for pcl818 driver are: [ 933.397786][T14117] pcl818l [ 933.415949][T14117] pcl818h [ 933.419152][T14117] pcl818hd [ 933.428285][T14117] pcl818hg [ 933.438242][T14117] pcl818 [ 933.441211][T14117] pcl718 [ 933.454481][T14117] pcm3718 [ 933.457545][T14117] comedi: valid board names for pcl816 driver are: [ 933.495468][T14117] pcl816 [ 933.505003][T14117] pcl814b [ 933.512604][T14117] comedi: valid board names for pcl812 driver are: [ 933.564471][T14117] pcl812 [ 933.578643][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 933.591895][T14117] pcl812pg [ 933.605518][T14117] acl8112pg [ 933.624238][T14117] acl8112dg [ 933.644326][T14117] acl8112hg [ 933.662549][T14117] a821pgl [ 933.677749][T14117] a821pglnda [ 933.699271][T14117] a821pgh [ 933.716815][T14117] a822pgl [ 933.734506][T14117] a822pgh [ 933.750307][T14117] a823pgl [ 933.767507][T14117] a823pgh [ 933.784879][T14117] pcl813 [ 933.799563][T14117] pcl813b [ 933.818012][T14117] acl8113 [ 933.835278][T14117] iso813 [ 933.854886][T14117] acl8216 [ 933.880154][T14117] a826pg [ 933.895147][T14117] comedi: valid board names for pcl730 driver are: [ 933.906553][T14117] pcl730 [ 933.911289][T14117] iso730 [ 933.914249][T14117] acl7130 [ 933.917307][T14117] pcm3730 [ 933.925159][T14117] pcl725 [ 933.929908][T14117] p8r8dio [ 933.933814][T14117] acl7225b [ 933.936926][T14117] p16r16dio [ 933.945608][T14117] pcl733 [ 933.949775][T14117] pcl734 [ 933.952730][T14117] opmm-1616-xt [ 933.956199][T14117] pearl-mm-p [ 933.963982][T14117] ir104-pbf [ 933.967202][T14117] comedi: valid board names for pcl726 driver are: [ 933.975239][T14117] pcl726 [ 933.978663][T14117] pcl727 [ 933.981617][T14117] pcl728 [ 933.984901][T14117] acl6126 [ 934.006872][T14117] acl6128 [ 934.010173][T14117] comedi: valid board names for pcl724 driver are: [ 934.016978][T14117] pcl724 [ 934.028334][T14117] pcl722 [ 934.031316][T14117] pcl731 [ 934.044303][T14117] acl7122 [ 934.047373][T14117] acl7124 [ 934.060004][T14117] pet48dio [ 934.063198][T14117] pcmio48 [ 934.066232][T14117] onyx-mm-dio [ 934.080459][T14117] comedi: valid board names for pcl711 driver are: [ 934.087022][T14117] pcl711 [ 934.124245][T14117] pcl711b [ 934.127556][T14117] acl8112hg [ 934.141587][T14117] acl8112dg [ 934.145430][T14117] comedi: valid board names for amplc_pc263 driver are: [ 934.352941][T14117] pc263 [ 934.385995][T14117] comedi: valid board names for amplc_pc236 driver are: [ 934.477344][T14117] pc36at [ 934.526136][T14117] comedi: valid board names for amplc_dio200 driver are: [ 934.618178][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 934.623005][T14117] pc212e [ 934.681784][T14117] pc214e [ 934.728930][T14117] pc215e [ 934.768874][T14117] pc218e [ 934.806629][T14117] pc272e [ 934.850440][T14117] comedi: valid board names for comedi_parport driver are: [ 934.955362][T14117] comedi_parport [ 934.959140][T14117] comedi: valid board names for comedi_test driver are: [ 934.966084][T14117] comedi_test [ 934.969523][T14117] comedi: valid board names for comedi_bond driver are: [ 934.976470][T14117] comedi_bond [ 935.658111][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 935.934488][T14204] bridge1: entered promiscuous mode [ 935.962126][T14204] bridge1: entered allmulticast mode [ 935.979166][ C1] ================================================================== [ 935.987291][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 935.995222][ C1] Read of size 2 at addr ffff8880521d202a by task swapper/1/0 [ 936.002711][ C1] [ 936.005048][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 936.005071][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 936.005083][ C1] Call Trace: [ 936.005092][ C1] [ 936.005100][ C1] dump_stack_lvl+0x189/0x250 [ 936.005128][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.005152][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.005174][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 936.005196][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.005217][ C1] ? rcu_is_watching+0x15/0xb0 [ 936.005240][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.005261][ C1] ? lock_release+0x4b/0x3e0 [ 936.005282][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 936.005307][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.005328][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 936.005353][ C1] print_report+0xd2/0x2b0 [ 936.005372][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 936.005391][ C1] kasan_report+0x118/0x150 [ 936.005417][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 936.005440][ C1] rose_timer_expiry+0x471/0x4b0 [ 936.005462][ C1] call_timer_fn+0x17e/0x5f0 [ 936.005481][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 936.005499][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.005521][ C1] ? call_timer_fn+0xbe/0x5f0 [ 936.005538][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 936.005559][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.005582][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 936.005609][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.005631][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 936.005662][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 936.005682][ C1] __run_timer_base+0x61a/0x860 [ 936.005710][ C1] ? ktime_get+0x3e/0x1f0 [ 936.005742][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 936.005769][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 936.005798][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.005823][ C1] run_timer_softirq+0xb7/0x180 [ 936.005852][ C1] handle_softirqs+0x286/0x870 [ 936.005876][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 936.005900][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 936.005923][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.005944][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 936.005975][ C1] __irq_exit_rcu+0xca/0x1f0 [ 936.005995][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 936.006019][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.006042][ C1] irq_exit_rcu+0x9/0x30 [ 936.006061][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 936.006089][ C1] [ 936.006096][ C1] [ 936.006103][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 936.006123][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 936.006152][ C1] Code: 5e 3c a1 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 2d 19 00 f3 0f 1e fa fb f4 33 3c a1 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 936.006168][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 936.006184][ C1] RAX: 24168bdcf5b79f00 RBX: ffffffff81975c78 RCX: 24168bdcf5b79f00 [ 936.006199][ C1] RDX: 0000000000000001 RSI: ffffffff8d998685 RDI: ffffffff8be29dc0 [ 936.006212][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 936.006226][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa1eff0 [ 936.006240][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039deb40 [ 936.006255][ C1] ? do_idle+0x1e8/0x510 [ 936.006283][ C1] default_idle+0x13/0x20 [ 936.006301][ C1] default_idle_call+0x74/0xb0 [ 936.006322][ C1] do_idle+0x1e8/0x510 [ 936.006347][ C1] ? __pfx_do_idle+0x10/0x10 [ 936.006378][ C1] cpu_startup_entry+0x44/0x60 [ 936.006400][ C1] start_secondary+0x101/0x110 [ 936.006417][ C1] common_startup_64+0x13e/0x147 [ 936.006452][ C1] [ 936.006458][ C1] [ 936.373792][ C1] Allocated by task 14009: [ 936.378191][ C1] kasan_save_track+0x3e/0x80 [ 936.382863][ C1] __kasan_kmalloc+0x93/0xb0 [ 936.387481][ C1] __kmalloc_noprof+0x27a/0x4f0 [ 936.392326][ C1] copy_splice_read+0x143/0x9b0 [ 936.397176][ C1] splice_direct_to_actor+0x4d0/0xcc0 [ 936.402545][ C1] do_splice_direct+0x181/0x270 [ 936.407406][ C1] do_sendfile+0x4da/0x7e0 [ 936.411827][ C1] __se_sys_sendfile64+0x13e/0x190 [ 936.416938][ C1] do_syscall_64+0xfa/0x3b0 [ 936.421432][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.427319][ C1] [ 936.429627][ C1] Freed by task 14009: [ 936.433693][ C1] kasan_save_track+0x3e/0x80 [ 936.438364][ C1] kasan_save_free_info+0x46/0x50 [ 936.443415][ C1] __kasan_slab_free+0x62/0x70 [ 936.448369][ C1] kfree+0x18e/0x440 [ 936.452277][ C1] copy_splice_read+0x881/0x9b0 [ 936.457134][ C1] splice_direct_to_actor+0x4d0/0xcc0 [ 936.462523][ C1] do_splice_direct+0x181/0x270 [ 936.467389][ C1] do_sendfile+0x4da/0x7e0 [ 936.471820][ C1] __se_sys_sendfile64+0x13e/0x190 [ 936.476941][ C1] do_syscall_64+0xfa/0x3b0 [ 936.481452][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.487336][ C1] [ 936.489645][ C1] The buggy address belongs to the object at ffff8880521d2000 [ 936.489645][ C1] which belongs to the cache kmalloc-512 of size 512 [ 936.503707][ C1] The buggy address is located 42 bytes inside of [ 936.503707][ C1] freed 512-byte region [ffff8880521d2000, ffff8880521d2200) [ 936.517448][ C1] [ 936.519781][ C1] The buggy address belongs to the physical page: [ 936.526187][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x521d0 [ 936.535018][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 936.543515][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 936.551059][ C1] page_type: f5(slab) [ 936.555041][ C1] raw: 00fff00000000040 ffff88801a441c80 ffffea0001464400 dead000000000002 [ 936.563625][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 936.572213][ C1] head: 00fff00000000040 ffff88801a441c80 ffffea0001464400 dead000000000002 [ 936.580883][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 936.589549][ C1] head: 00fff00000000002 ffffea0001487401 00000000ffffffff 00000000ffffffff [ 936.598304][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 936.606960][ C1] page dumped because: kasan: bad access detected [ 936.613392][ C1] page_owner tracks the page as allocated [ 936.619093][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5850, tgid 5850 (syz-executor), ts 94475404361, free_ts 29344369577 [ 936.638364][ C1] post_alloc_hook+0x240/0x2a0 [ 936.643132][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 936.648685][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 936.654504][ C1] alloc_pages_mpol+0x232/0x4a0 [ 936.659369][ C1] allocate_slab+0x8a/0x3b0 [ 936.663883][ C1] ___slab_alloc+0xbfc/0x1480 [ 936.668561][ C1] __kmalloc_noprof+0x305/0x4f0 [ 936.673403][ C1] fib6_info_alloc+0x30/0xf0 [ 936.677991][ C1] ip6_route_info_create+0x142/0x860 [ 936.683372][ C1] addrconf_f6i_alloc+0x1d2/0x450 [ 936.688477][ C1] addrconf_permanent_addr+0x274/0x9d0 [ 936.693929][ C1] addrconf_notify+0x887/0x1010 [ 936.698088][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 936.698762][ C1] notifier_call_chain+0x1b6/0x3e0 [ 936.710760][ C1] __dev_notify_flags+0x18d/0x2e0 [ 936.715792][ C1] netif_change_flags+0xe8/0x1a0 [ 936.720724][ C1] do_setlink+0xc55/0x41c0 [ 936.725133][ C1] page last free pid 1 tgid 1 stack trace: [ 936.730918][ C1] __free_frozen_pages+0xc71/0xe70 [ 936.736025][ C1] free_contig_range+0x1bd/0x4a0 [ 936.740952][ C1] destroy_args+0x7e/0x5d0 [ 936.745358][ C1] debug_vm_pgtable+0x412/0x450 [ 936.750211][ C1] do_one_initcall+0x236/0x820 [ 936.754973][ C1] do_initcall_level+0x137/0x1f0 [ 936.759907][ C1] do_initcalls+0x69/0xd0 [ 936.764228][ C1] kernel_init_freeable+0x3d9/0x570 [ 936.769423][ C1] kernel_init+0x1d/0x1d0 [ 936.773741][ C1] ret_from_fork+0x3fc/0x770 [ 936.778324][ C1] ret_from_fork_asm+0x1a/0x30 [ 936.783090][ C1] [ 936.785403][ C1] Memory state around the buggy address: [ 936.791033][ C1] ffff8880521d1f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 936.799110][ C1] ffff8880521d1f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 936.807183][ C1] >ffff8880521d2000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 936.815244][ C1] ^ [ 936.820605][ C1] ffff8880521d2080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 936.828664][ C1] ffff8880521d2100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 936.836805][ C1] ================================================================== [ 936.844922][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 936.852127][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(full) [ 936.863762][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 936.873812][ C1] Call Trace: [ 936.877079][ C1] [ 936.879917][ C1] dump_stack_lvl+0x99/0x250 [ 936.884522][ C1] ? __asan_memcpy+0x40/0x70 [ 936.889104][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 936.894298][ C1] ? __pfx__printk+0x10/0x10 [ 936.898895][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.904533][ C1] panic+0x2db/0x790 [ 936.908428][ C1] ? __pfx_panic+0x10/0x10 [ 936.912842][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 936.918740][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.924366][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 936.930283][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 936.936610][ C1] ? print_memory_metadata+0x314/0x400 [ 936.942109][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 936.947213][ C1] check_panic_on_warn+0x89/0xb0 [ 936.952157][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 936.957273][ C1] end_report+0x78/0x160 [ 936.961541][ C1] kasan_report+0x129/0x150 [ 936.966044][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 936.971174][ C1] rose_timer_expiry+0x471/0x4b0 [ 936.976114][ C1] call_timer_fn+0x17e/0x5f0 [ 936.980708][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 936.986159][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 936.991792][ C1] ? call_timer_fn+0xbe/0x5f0 [ 936.996463][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 937.001572][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 937.007208][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 937.012413][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 937.018051][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 937.023258][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 937.028715][ C1] __run_timer_base+0x61a/0x860 [ 937.033591][ C1] ? ktime_get+0x3e/0x1f0 [ 937.037932][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 937.043417][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 937.049667][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 937.055388][ C1] run_timer_softirq+0xb7/0x180 [ 937.060243][ C1] handle_softirqs+0x286/0x870 [ 937.065001][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 937.069765][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 937.075058][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 937.080688][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 937.085892][ C1] __irq_exit_rcu+0xca/0x1f0 [ 937.090480][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 937.095763][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 937.101392][ C1] irq_exit_rcu+0x9/0x30 [ 937.105629][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 937.111269][ C1] [ 937.114274][ C1] [ 937.117189][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 937.123343][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 937.129070][ C1] Code: 5e 3c a1 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 2d 19 00 f3 0f 1e fa fb f4 33 3c a1 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 937.148757][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 937.154821][ C1] RAX: 24168bdcf5b79f00 RBX: ffffffff81975c78 RCX: 24168bdcf5b79f00 [ 937.162791][ C1] RDX: 0000000000000001 RSI: ffffffff8d998685 RDI: ffffffff8be29dc0 [ 937.170794][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 937.178768][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa1eff0 [ 937.186744][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039deb40 [ 937.194718][ C1] ? do_idle+0x1e8/0x510 [ 937.198976][ C1] default_idle+0x13/0x20 [ 937.203300][ C1] default_idle_call+0x74/0xb0 [ 937.208077][ C1] do_idle+0x1e8/0x510 [ 937.212170][ C1] ? __pfx_do_idle+0x10/0x10 [ 937.216775][ C1] cpu_startup_entry+0x44/0x60 [ 937.221559][ C1] start_secondary+0x101/0x110 [ 937.226319][ C1] common_startup_64+0x13e/0x147 [ 937.231288][ C1] [ 937.234574][ C1] Kernel Offset: disabled [ 937.238899][ C1] Rebooting in 86400 seconds..