last executing test programs: 1m20.177726728s ago: executing program 3 (id=690): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004400) socket$l2tp6(0xa, 0x2, 0x73) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0xc1205531, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x0, 0x4001}, 0xc) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, 0xffffffffffffffe1) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0xa, 0x1, 0x2, 0x0, 0xfd}) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405668, &(0x7f00000000c0)={0x5, 0x3, 0x1, "0000087aba10fdfffffb05001400", 0x59565955}) capget(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x0, 0xfffffff7, 0x0, 0x6b, 0x8, 0x9}) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r4, &(0x7f0000001b80)=[{&(0x7f0000000440)=""/87, 0x57}, {0x0}], 0x2, 0x0, 0x400) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000100)=0x0) ptrace$setopts(0x6, r5, 0x6, 0x8) 1m2.457331318s ago: executing program 3 (id=690): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004400) socket$l2tp6(0xa, 0x2, 0x73) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0xc1205531, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x0, 0x4001}, 0xc) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, 0xffffffffffffffe1) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0xa, 0x1, 0x2, 0x0, 0xfd}) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405668, &(0x7f00000000c0)={0x5, 0x3, 0x1, "0000087aba10fdfffffb05001400", 0x59565955}) capget(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x0, 0xfffffff7, 0x0, 0x6b, 0x8, 0x9}) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r4, &(0x7f0000001b80)=[{&(0x7f0000000440)=""/87, 0x57}, {0x0}], 0x2, 0x0, 0x400) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000100)=0x0) ptrace$setopts(0x6, r5, 0x6, 0x8) 45.352159526s ago: executing program 3 (id=690): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004400) socket$l2tp6(0xa, 0x2, 0x73) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0xc1205531, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x0, 0x4001}, 0xc) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, 0xffffffffffffffe1) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0xa, 0x1, 0x2, 0x0, 0xfd}) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405668, &(0x7f00000000c0)={0x5, 0x3, 0x1, "0000087aba10fdfffffb05001400", 0x59565955}) capget(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x0, 0xfffffff7, 0x0, 0x6b, 0x8, 0x9}) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r4, &(0x7f0000001b80)=[{&(0x7f0000000440)=""/87, 0x57}, {0x0}], 0x2, 0x0, 0x400) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000100)=0x0) ptrace$setopts(0x6, r5, 0x6, 0x8) 29.133887167s ago: executing program 3 (id=690): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004400) socket$l2tp6(0xa, 0x2, 0x73) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0xc1205531, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x0, 0x4001}, 0xc) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, 0xffffffffffffffe1) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0xa, 0x1, 0x2, 0x0, 0xfd}) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405668, &(0x7f00000000c0)={0x5, 0x3, 0x1, "0000087aba10fdfffffb05001400", 0x59565955}) capget(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x0, 0xfffffff7, 0x0, 0x6b, 0x8, 0x9}) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r4, &(0x7f0000001b80)=[{&(0x7f0000000440)=""/87, 0x57}, {0x0}], 0x2, 0x0, 0x400) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000100)=0x0) ptrace$setopts(0x6, r5, 0x6, 0x8) 14.509062539s ago: executing program 3 (id=690): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004400) socket$l2tp6(0xa, 0x2, 0x73) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0xc1205531, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x0, 0x4001}, 0xc) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, 0xffffffffffffffe1) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0xa, 0x1, 0x2, 0x0, 0xfd}) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405668, &(0x7f00000000c0)={0x5, 0x3, 0x1, "0000087aba10fdfffffb05001400", 0x59565955}) capget(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x0, 0xfffffff7, 0x0, 0x6b, 0x8, 0x9}) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r4, &(0x7f0000001b80)=[{&(0x7f0000000440)=""/87, 0x57}, {0x0}], 0x2, 0x0, 0x400) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000100)=0x0) ptrace$setopts(0x6, r5, 0x6, 0x8) 7.036520755s ago: executing program 0 (id=1205): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080), 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000400000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="30090000000000008400000001000000000000040c007e000000000000f1ff00"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = dup(r1) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) (async) r8 = syz_io_uring_setup(0x23c, &(0x7f0000000740)={0x0, 0x1c2c, 0x10100, 0x2, 0x315, 0x0, r7}, &(0x7f0000000500), &(0x7f00000001c0)) (async) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r10, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000000007050000b3fa0e52000000070000060c00064000000800000000d20c0002400000000000008000010065aa6fd461e0b7d909db730ffeb21a73797a30000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x200000c0) (async) io_uring_enter(r8, 0x2ded, 0x4000, 0x0, 0x0, 0x0) read$FUSE(r9, &(0x7f00000007c0)={0x2020}, 0x2020) (async) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d45942fc714cf635760dc1787f707486986079df4fc6006944f6082d8dc8a2a1edf593ce5744494840cfbc02adbc6ef8e53662d44f806b555838970a144723af4438a62806cea5466cac2c00"/90, @ANYRES16=r11, @ANYBLOB="1709a70000000000000101000000080009000200000014001f00000000000000000000000000000000011400200000000000000000000000ffffac1414bb0500070000000000060002000100000008000a0004000000"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x89b1, &(0x7f0000000040)={'macvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x44e3763ac5239ba7}}) 5.388105597s ago: executing program 0 (id=1215): r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x2000c054) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) modify_ldt$write2(0x11, &(0x7f0000000400)={0x2, 0x20001000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000080)={0x101, 0xffffffffffffffff, 0x4000, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1}, 0x10) 5.098908447s ago: executing program 0 (id=1216): sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000280), 0x932, 0x204000) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="2015323fcd64"], 0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) 4.661746655s ago: executing program 2 (id=1217): r0 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000180)={&(0x7f0000000a00)=[{0x24f, 0x1401, 0x1, &(0x7f0000000880)='\x00'}], 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 4.552450868s ago: executing program 4 (id=1219): io_setup(0x6, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x800) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f00000001c0)=0x3) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000a518230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x41, 0x1, 0x200000000000008, 0x9, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200002000000000000000000000008500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r11, 0x0, 0xe, 0x0, &(0x7f0000000740)="6fd92f5c3fbecb0c72abdb823b15", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010700000000fcdbdf25670000001e000300", @ANYRES32=r9, @ANYBLOB="0c009900080000002c000000"], 0x28}}, 0x40) 4.551108308s ago: executing program 1 (id=1220): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001b00)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c20000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 4.498252903s ago: executing program 2 (id=1221): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ptrace(0x4208, r0) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x4004080) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) userfaultfd(0x80001) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x11, &(0x7f0000000000)=0x808b, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), 0x0}, 0x20) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) (async) socket$can_raw(0x1d, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x5}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) (async) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote, @broadcast}, &(0x7f0000000240)=0xc) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0xa008, 0x0) 4.31148697s ago: executing program 1 (id=1222): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setresgid(0xee00, 0xee01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045503, &(0x7f0000000000)={0x1, 0x1}) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x4, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x804) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000000)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x2f8, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@ttl={{0x28}, {0x0, 0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x0, 0x1ff}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x3, 0x1, {0x4413}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x2, 0xaf76, 0x1, '\x00', 'syz0\x00', {0x7fffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000380)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x9}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0x7}}]}}]}, 0x3c}}, 0x24044094) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000001580)={'vxcan1\x00', 0x0}) sendto$packet(r9, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newtfilter={0x4f80, 0x2c, 0x20, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff1, 0x4}, {0x0, 0xfff1}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_RATE={0x6, 0x5, {0xd5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_matchall={{0xd}, {0x4f34, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x15, 0x18}}, @TCA_MATCHALL_ACT={0x4f08, 0x2, [@m_skbedit={0x10c0, 0x2, 0x0, 0x0, {{0xc}, {0x94, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x7, 0x0, 0x3ff, 0x5}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x4, 0x1, 0xadc9, 0x6}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xffffa038, 0x5, 0x20000000, 0x3, 0x5}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x3, 0x2, 0x8, 0x8}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1ff}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9d5b}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x120, 0x1e, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x6, 0x5, 0x2, 0xc8e}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf5, 0x0, 0x7, 0xfffffffa, 0x2}, 0x1, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xea5e, 0x4, 0x6, 0x8, 0x7}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x6, 0x1, 0xce, 0x7}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x2, 0x1, 0x2, 0xff}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x40, 0x8, 0x3, 0x7, 0x320}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x200, 0x8, 0x2, 0x4}, 0x4}}]}, {0x14, 0x6, "12757fd68343b88b659ab635306a50ea"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0x190, 0x8, 0x0, 0x0, {{0xf}, {0x7c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7, 0x3, 0x4, 0x7, 0x4}, 0x2}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xb3, 0xfffffffa, 0xc, 0x8, 0x5}, 0x2}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xd5, 0x6, 0x2, 0x7fffffff, 0x6}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}]}, {0xe5, 0x6, "4a45f45467b3661c5e5126460126c34c19716b5280863d57db4bdab0b38d8047df4cf1a9ea5cd96e980be8eb18fe269b9b3aa059cb899e2a28e9255171d1ce1ceeca80eff129aa1ca49df61167603cd5b032a5b309dbd4b90de6ed2b5fbbb00c096475e1550864b329052b8ebeadd662dc7eb583feb7f554804f261db2143e0252769711ee22c01514a8d0dee7d14ad11bf683d2752e35522d43bed23ee5ccce114f37e54be0001d3115a883ccf6b8dbec0aa0fc36bc76467707c0cc7583c91f5f854d4f6dd8a8d60fd4b711902546f93fa1037cc813c7f139bc45aabd86d89b45"}, {0xc, 0x7, {0x829d1a4d44bd1854, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x134, 0x0, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x27d0a}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x10000000, 0xb, 0x40}, 0x4}}, @TCA_MPLS_TTL={0x5, 0x7, 0xb}, @TCA_MPLS_LABEL={0x8, 0x5, 0xe9072}, @TCA_MPLS_LABEL={0x8, 0x5, 0x6cd76}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x1, 0x1, 0x7, 0x1}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xbbe5}, @TCA_MPLS_BOS={0x5}]}, {0x90, 0x6, "7a98e80554fd047e9162a201a48d6514e8f028b43d2ad1ba70bd4eb92435cb38ff07a62c4cb48006400d8a86f86f630cf1ce24461c692346ba8d0759bd68d2301e2d54a6864ee0137d98d1978bd20f9bc2ceca5a1be2e343912ae26a01a853d1f1af2ac40bf9e1f45f4adc8c9513a12681559463af29054b2376d078e4dd992d2a1b264359c57ea65b638ca0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x3a60, 0x2, 0x0, 0x0, {{0xb}, {0x2a34, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x7, 0xd86b, 0xfffffc01, 0x6502, 0x800, 0x9, 0x7, 0x3ff, 0x10001, 0x81, 0x6d, 0xb569, 0x80, 0x9, 0x5, 0x5, 0x8, 0x9, 0x0, 0x6, 0xff, 0xffffffff, 0x7d58, 0x8, 0x4, 0x12ef, 0x0, 0x80, 0x0, 0x5, 0x9, 0x3, 0x1, 0x7, 0x9, 0x9, 0x5, 0xfffffffd, 0x4, 0xf6bd, 0xffffffff, 0xdd0, 0x1, 0x0, 0x401, 0x433027fb, 0x5, 0x7, 0x0, 0x2, 0xfffffff8, 0x3ff, 0x5e, 0xa46, 0x6451e38a, 0xf536, 0x3, 0x7, 0x1, 0x6, 0x80000000, 0x200, 0x3, 0x2, 0x7, 0x9, 0x3ff, 0x1, 0x8, 0x8, 0x7d, 0x5c0b, 0x8, 0x7, 0x3, 0x7, 0x88, 0x45f1, 0xffffffff, 0x9, 0x100, 0x0, 0x8a8, 0xb, 0x1, 0x5e4, 0xfffffffa, 0x61, 0x6094a624, 0xe2, 0x10000, 0x10001, 0x6, 0x4, 0x2f00, 0x9d, 0xff, 0xcec, 0x48, 0x800, 0x95d, 0x9, 0x3, 0x297, 0x1ff, 0xffff, 0x6, 0xa468, 0x80, 0x0, 0xa8, 0x3, 0x9, 0x8, 0x1, 0x6, 0x5, 0x80, 0xe, 0x9, 0x6, 0x4, 0x2, 0x8, 0x4, 0x10000, 0x2, 0x9, 0x101, 0x88000000, 0x6, 0x7fff, 0x1, 0x0, 0x2, 0x2, 0x5, 0x4, 0xedd, 0x1, 0x2, 0x3, 0x9, 0x5, 0x800, 0x50, 0x5, 0x1, 0x6, 0x2, 0x1, 0x8, 0x7, 0x80, 0x800000, 0x80, 0x3, 0x9, 0x0, 0x4, 0x6, 0x80000000, 0x8, 0x10001, 0x80000001, 0x3d4c, 0x5, 0x9, 0x2, 0x3, 0x2, 0xfffffc00, 0xfffffffb, 0x9, 0x7e40, 0x4, 0x4, 0x4, 0x1, 0x7ff, 0x3ff, 0x3, 0x461b, 0x6, 0xfffeffff, 0x5, 0x2, 0x2, 0xffffff0e, 0x0, 0x9, 0x7fff, 0x9, 0xfffffff9, 0x7, 0x1, 0x8, 0x2d63, 0xffff, 0x4c, 0x10001, 0xa96, 0x9, 0xb615, 0x7, 0x3, 0x101, 0x9, 0xfffffff7, 0x9, 0x4, 0xd, 0x9, 0x0, 0x40, 0x2, 0x9, 0x8, 0x9, 0x2, 0x3, 0x24f, 0x2, 0x800, 0x0, 0x6, 0x5c7, 0x6, 0x401, 0x5, 0x21, 0x1, 0x9, 0x1, 0x9, 0x4707, 0xffff, 0x7fffffff, 0x8, 0xe, 0xf76, 0x2, 0x34a3, 0x7, 0x7, 0x7, 0x4, 0xffffffff, 0x7, 0x400, 0x9, 0x3, 0x6, 0x2, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x401}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7f}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x3, 0x781d, 0x1182732, 0x3, {0x96, 0x1, 0x3, 0x3, 0xe3c, 0x80000000}, {0xf, 0x2, 0x5, 0x3, 0xfffb, 0x80}, 0x7b, 0xfffffffe, 0x7f}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1cb2}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0xfff, 0x7fff, 0x8, 0x80000000, 0x7, 0x4, 0x0, 0x8000, 0xcd, 0x2, 0xf4c3, 0x4, 0x7, 0x6df6, 0x6fe, 0x40bcbd16, 0x2, 0x900000, 0x5, 0x3, 0x9, 0xffff, 0x3fc00, 0x100, 0x6f84, 0xffff, 0x0, 0x7, 0x1, 0x8, 0x7, 0x2, 0x1ff, 0x4, 0x3, 0x9, 0x0, 0x2, 0x3, 0x2, 0x6, 0x3, 0x80a0, 0x7, 0x4, 0x8, 0x5, 0x0, 0x9, 0x2, 0x5, 0x4, 0x54c, 0x0, 0x51, 0xa, 0xfff, 0x3ff, 0x1, 0x200, 0x7fffffff, 0xf, 0xf, 0x7, 0x8000, 0x1, 0x1, 0x800, 0x0, 0xffff0000, 0x400, 0x0, 0xcb, 0x1, 0x400, 0x400, 0xf, 0x1, 0x4, 0x9, 0x4, 0x4, 0x8001, 0x400, 0xa50, 0x12000, 0x6, 0x6, 0x40, 0x1, 0x3, 0xff, 0xfffffff8, 0x1, 0x5, 0x2, 0xf69c, 0xe, 0x2, 0x7f, 0x80000000, 0x1, 0x0, 0x2c8800, 0x74, 0x2, 0x7, 0x32a, 0x1, 0x4d96, 0xbd7, 0x1, 0x76, 0x7, 0x3, 0x6, 0xffffffff, 0x1, 0x4, 0x3dd, 0x1, 0x6, 0x4, 0xff, 0x4, 0x7f, 0x1, 0x100, 0x2, 0x5, 0x79f, 0x80, 0xfffffffe, 0x3, 0xfffffffe, 0x7ff, 0x4, 0x58, 0x7a6c, 0x5, 0xbe61, 0xf4a, 0x9, 0x7fffffff, 0x6, 0x5, 0xf9, 0xfffff000, 0x6, 0x5, 0x81, 0xfffffff9, 0x5, 0x1, 0x1, 0x7, 0x3, 0x3, 0x3, 0x0, 0x9, 0xbdfd, 0x6, 0x400, 0x7, 0x67, 0x2, 0x7, 0x8, 0x7, 0xffff7fff, 0x5, 0x7, 0xc, 0x8, 0x21, 0xe5bc, 0x4, 0xd46, 0x2b, 0x6, 0x5, 0x40, 0x12000000, 0x85, 0x10, 0x0, 0x4, 0x3, 0x6, 0x8, 0x1, 0xd, 0x0, 0x6, 0x1, 0xb, 0x7, 0x4ff, 0x9, 0x8, 0x4, 0xfffffffd, 0x1, 0xfffffff9, 0x1000, 0x1, 0x8, 0x0, 0x7, 0x4, 0x89, 0x7ff, 0x8, 0x2, 0x1f46, 0x1, 0x4, 0x401, 0x9142, 0x6, 0xb, 0x100, 0x3, 0x7f, 0x0, 0xa16e, 0x4ca, 0x2, 0xd, 0x5, 0x1, 0x15ab74d0, 0x7ff, 0xc4, 0x6, 0x1, 0xa, 0x6, 0x2, 0xf, 0x2, 0x9, 0x1d02, 0x4, 0x92, 0xfffffffe, 0xfffffffd, 0x7, 0x80000001, 0x8, 0x7, 0x0, 0x5, 0x2, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff0, 0x3, 0x15, 0x7, 0x3, 0x4, 0x6, 0x80, 0xa, 0x4, 0x80000000, 0x1, 0x5, 0x0, 0x4, 0x6, 0xa, 0xb1, 0x4a, 0x1ff, 0x20, 0x1, 0x26, 0x1, 0x101, 0xfffffff8, 0x7, 0x8000, 0x948, 0x8, 0x152, 0x7, 0x2, 0x10, 0x9, 0x400, 0xfffffff0, 0x8fe, 0x8, 0x1000, 0x6, 0x8, 0x6df, 0x7f, 0xffffffd6, 0x7, 0x6, 0x10000, 0x4, 0x1ff, 0x8, 0x6, 0x0, 0x101, 0x2, 0xe1, 0x3, 0x401, 0x2, 0x8, 0x100, 0x800, 0x7, 0x8, 0x9, 0xffffff81, 0xa, 0x9, 0x2, 0x4, 0x5, 0x10000, 0x7, 0x400, 0x123, 0x2925d17c, 0x5, 0x6, 0xfffffffc, 0x2, 0x4, 0x1, 0x60, 0x4, 0x3, 0x8, 0x5, 0xca69, 0xcb3, 0x9, 0x6dc9, 0x7, 0xb, 0xf, 0x3ff, 0x8, 0x4b4, 0x9, 0xffff, 0x6, 0x8, 0x10, 0xfffffff7, 0x2, 0x0, 0x3, 0x8001, 0x8e85, 0x9, 0x4, 0x4, 0x5d, 0x4, 0xa, 0x3, 0x3, 0x8f1, 0x3, 0x9, 0xac7, 0x4, 0x5, 0x6, 0x5, 0xfff, 0x401, 0x4, 0x39d2, 0x40, 0x10001, 0x9, 0x4, 0x5, 0xe7e, 0x5b, 0x7, 0x3, 0x1, 0x6, 0xffffffff, 0x7, 0xffffffff, 0x8, 0x5801, 0x2, 0x7, 0x9, 0x6, 0x8, 0x9, 0x7, 0x4, 0x5, 0x7, 0x3803, 0x10000, 0x9, 0x4, 0x2, 0x5082e35, 0x10001, 0x4, 0x5, 0xef, 0x4, 0x7, 0x7f, 0x7fffffff, 0x9, 0x3, 0xfe000, 0x79, 0x0, 0x6, 0x2, 0xf, 0x4, 0x2, 0x7, 0x7, 0x100, 0x24c0, 0x5, 0x3, 0x6, 0x7, 0x3, 0x6, 0x80, 0x8, 0x7, 0x488c, 0x1, 0xffff, 0x9, 0x9, 0x0, 0xfffffeff, 0x200, 0xe, 0xcd42, 0x0, 0x7, 0x1ff, 0x2, 0xd, 0xffffffff, 0x7f, 0x3, 0xb, 0x3, 0x9, 0x5, 0x4, 0x3, 0xd44d, 0x29, 0x5, 0x80000000, 0x40, 0xffffffff, 0x1, 0x80000000, 0x0, 0x7, 0x3ff, 0x6, 0x0, 0x8, 0x3, 0x3, 0x6, 0xe6, 0x7fffffff, 0x7fff, 0x401, 0xe3, 0x7, 0x1, 0x3c000000, 0x2, 0x101, 0x9, 0x1, 0x9, 0x1, 0x7, 0xffffef2e, 0x8, 0x8, 0x4, 0x7, 0x8001, 0x3, 0x4, 0x8000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}], [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x6, 0x3a6f, 0x73e9bac1, 0x5, 0xb3a, 0x1, 0x5, 0x1, 0x13d, 0x7a09, 0x3, 0x1, 0x1a4, 0x0, 0x9, 0x3, 0x5, 0x0, 0x3, 0x1a, 0x0, 0x0, 0x4, 0x2, 0xb, 0x401, 0x200, 0x6, 0x4, 0x9, 0x2, 0x9, 0x2e8, 0xac, 0x890, 0x4, 0xd1a5, 0x9, 0xa5d, 0x2, 0x3, 0x3, 0x3, 0x100, 0xffffff6c, 0x2, 0x2, 0x1, 0x5, 0x7ff, 0x8000, 0x34df, 0x7, 0xa602, 0xa45, 0x401, 0x80000000, 0x7, 0x17768f04, 0x8, 0x5, 0x80000001, 0x9, 0x6, 0xe, 0x4, 0x0, 0x80, 0x200, 0x1, 0xb28f, 0xe00, 0x6, 0x1f, 0x5, 0x6, 0x7, 0x0, 0x81, 0x8, 0x8, 0x92cc, 0xa, 0x2, 0x7ac2c45, 0x21, 0x2, 0x8, 0x1, 0x800, 0x4, 0x9, 0xf, 0x5, 0x17, 0x8, 0x90, 0x7, 0x9, 0xe9a, 0xe58, 0x40, 0x4, 0x5faf, 0x10, 0x4, 0xf, 0xffffff88, 0x0, 0xbd5, 0x6, 0x0, 0x1000, 0x8, 0x800, 0x5, 0x200, 0xf, 0xffff, 0x2, 0x7, 0x33, 0x5, 0x100, 0x2, 0xf, 0x9, 0x80000001, 0x8, 0x3, 0x1, 0x8001, 0xb, 0x7, 0x0, 0xd, 0xadb, 0x4, 0x3, 0xf16, 0x1ca, 0x0, 0x3, 0x8000, 0x6, 0x0, 0x6, 0x200, 0x1, 0x3, 0x8, 0x9, 0x2, 0x1, 0xfff, 0x80000001, 0x8, 0x6, 0xfff, 0x1ff, 0x1, 0xa6a, 0x8, 0x3, 0xa59c, 0x3e, 0x3ff9, 0x800, 0x194, 0xfff, 0x8001, 0x4, 0x5, 0x9, 0xffffffff, 0xfffffff7, 0x7fff, 0x366, 0x2441, 0x401, 0x382, 0x4, 0xb, 0x6, 0x6, 0x1, 0x5, 0x7, 0x2, 0x4, 0xbb44, 0x8, 0x4, 0x3, 0x100, 0xec33, 0x0, 0x3, 0x7, 0x8, 0x9, 0x10001, 0x0, 0x101, 0x7, 0x63da, 0x8000, 0x9, 0x400, 0x5, 0xffff1c65, 0x80000000, 0x2, 0x5, 0xffffff70, 0x5, 0x3, 0x6, 0xfff, 0x1, 0x2, 0x2, 0x9, 0x6, 0x3, 0xa34c, 0x79, 0xdb5a, 0x9, 0x4, 0x6, 0x8, 0x4, 0xc, 0x4, 0x6, 0x6, 0x5, 0xc, 0x3, 0x3, 0x89, 0x2, 0x0, 0x1, 0xc2, 0x8, 0x8, 0x9e5, 0x9, 0xe2b, 0x40, 0xffffff54, 0xa632, 0x4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x401}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x28}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x7, 0x0, 0x2, 0x6, {0x7, 0x1, 0x9, 0x5, 0x1, 0xced}, {0xe, 0x2, 0x6, 0xb, 0x2, 0x7fffffff}, 0x5, 0x81, 0x2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x20000000, 0x4, 0x2, 0x4d4, {0x5, 0x1, 0x1000, 0x7700, 0x8, 0x1}, {0xb, 0x0, 0x2, 0x8d88, 0xc27, 0x6}, 0x7fff, 0x8, 0x38000}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x3, 0xd30, 0x0, 0x7ff, {0x53, 0x0, 0xfffc, 0x5, 0xc, 0xffffffff}, {0x8, 0x2, 0x8, 0x2, 0x9, 0x2}, 0xb6, 0xe, 0xf}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x9, 0x7fffffff, 0x9, 0x7f, 0x2fa, 0x5, 0x2, 0x3, 0xd, 0xfff, 0xffffffff, 0xffffffff, 0x1032, 0x8, 0x0, 0xfffff800, 0xc0e, 0x1, 0x5, 0x2, 0xa, 0xfffffff1, 0xd9b, 0x85f7, 0x7ff, 0x1, 0x5, 0x0, 0x1, 0x2, 0x4, 0x80, 0xfffffff3, 0x5, 0x3, 0x6, 0x51f8, 0x5, 0xffff, 0xdd7, 0x3, 0x7, 0xb76e, 0x8, 0x7fff, 0x9, 0x8, 0x1, 0x101, 0x9, 0xf89, 0x8, 0x2, 0xfffffff9, 0x81, 0x2, 0x4, 0xd, 0xf, 0xc8d, 0x6, 0x10000, 0x7924, 0xffff, 0x1, 0x0, 0x10001, 0x401, 0x0, 0x8, 0x1, 0x37, 0x80000000, 0x10001, 0x0, 0x3, 0x4ac, 0x1000, 0xffffff08, 0xfffffe01, 0xfffffff9, 0x4, 0x4, 0x1, 0x3a98, 0x200, 0x295, 0x800, 0xffffff1f, 0x0, 0x8, 0xf, 0x747, 0x7, 0x4, 0x7, 0x6, 0x9, 0x4, 0xa, 0x4, 0x40, 0x12, 0xfffffffa, 0x80000000, 0x6, 0x8, 0x80000000, 0xfff, 0x7fff, 0x2, 0xd, 0x7, 0x0, 0x6, 0x40, 0x2, 0x7, 0xc, 0xff, 0x8, 0x9, 0x8, 0xc7c7, 0x5, 0x0, 0x2c, 0xa8e3, 0xfff, 0xc, 0x200, 0x0, 0xf, 0x5, 0x5, 0x400, 0x8, 0x7fffffff, 0x5, 0x0, 0x6, 0x7d, 0x5, 0x3ff, 0x400, 0x18000, 0x101, 0x9, 0xae8, 0xb92170ce, 0x3a5c067f, 0x0, 0x4, 0x5, 0x1, 0xebd, 0x8, 0x3, 0x4, 0x4, 0x83bd, 0x7f, 0x5, 0x3, 0x4337, 0x6, 0x6, 0x3, 0xfe, 0x7, 0x3, 0x40, 0x7, 0x9d74, 0x81, 0x4, 0x7fff, 0x2, 0x2, 0xfffff043, 0x9, 0x5, 0x8, 0x7, 0xba, 0x5b, 0x3, 0xfffffff4, 0x6, 0x8, 0x4, 0x9, 0x6, 0xff, 0x62ae, 0x0, 0x5, 0x1fa, 0x9, 0xffffffff, 0x3, 0x800, 0x4, 0x4, 0x2, 0x9db, 0x4fc93d85, 0x51b2, 0x7, 0x0, 0xea, 0xffffffff, 0x80, 0x4, 0x800, 0x0, 0x7fff, 0x10000, 0x0, 0x9, 0xd, 0x57, 0xb, 0x21a6abbc, 0x1, 0x5, 0x0, 0x9, 0x5, 0x8, 0xf219, 0xfff, 0x800000, 0x7, 0x3, 0x7, 0x9, 0x3, 0x0, 0x180, 0xf, 0x101, 0x6, 0x100, 0xfffffffb, 0x0, 0x8000, 0xc, 0x4, 0x80, 0x2, 0xa, 0x4, 0xfffffffb, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x9d43}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd, 0xf77e2bff4af1d770, 0x80000000, 0x2, 0x6, {0x7, 0x2, 0x7, 0x4, 0xfff, 0x5}, {0x6, 0x2, 0x1, 0x68e, 0x7, 0x4d}, 0x100, 0xa}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffff8, 0xffffffff, 0x0, 0x80000001, 0x2, 0x101, 0xde, 0x7, 0x8, 0xffffe8d5, 0xffffdf55, 0xffffffff, 0xffff, 0x4, 0x1000, 0x985, 0x5, 0x1, 0x10, 0x7a8, 0xb19, 0x2, 0x8, 0x100, 0xf30, 0xcf, 0x8, 0xa, 0x5cb, 0x4, 0x7, 0xffff996a, 0x9, 0x9f4, 0x9, 0x5, 0x0, 0x90, 0x3ff, 0x58, 0x6, 0x7fff, 0x1efc9e74, 0x80000001, 0xd, 0x4, 0x10001, 0x4, 0x3, 0x58f4aa18, 0x3, 0x4, 0x5, 0x0, 0x2, 0x9, 0x7, 0xe, 0x3, 0x1, 0xb, 0x10001, 0x7f, 0x0, 0x7, 0x8000, 0x5, 0x8, 0x4, 0x7, 0x4000, 0x3, 0x2, 0x10, 0x2, 0xd5, 0x2, 0x0, 0x9, 0x0, 0x8, 0x9, 0x4, 0x6, 0x1, 0x1, 0x3, 0xfffffff7, 0x2, 0x5, 0xa, 0x3, 0xb, 0x1, 0x400, 0x8, 0x9b9, 0x1, 0x7, 0xf, 0x3, 0x8, 0x7, 0x1, 0x0, 0x3, 0x3, 0x5, 0x0, 0x72, 0x1, 0x5, 0x0, 0x618, 0x9, 0x3, 0xfffffffe, 0x6, 0x4, 0x101, 0xee3e, 0x7, 0x7f, 0x2, 0x6, 0x4, 0x3, 0x0, 0x7, 0x7, 0x2, 0x1, 0x3ff, 0x6, 0x3, 0x60f, 0x8001, 0x8, 0x7, 0x3, 0x80000001, 0xfffffff8, 0x7, 0x5, 0x8, 0xc3, 0x1, 0x8001, 0x4, 0x1, 0xb1a, 0x7, 0x1, 0x24, 0x2, 0x800, 0x5, 0xfffffeff, 0xfffffffd, 0x1ae, 0x2, 0xce06, 0x8, 0x9, 0x4, 0x8001, 0x91, 0xb, 0x10001, 0x43c19d9c, 0x0, 0x6, 0xffff, 0x5, 0x0, 0x4, 0xf, 0x8, 0x2, 0x5, 0x7fffffff, 0x0, 0x40, 0x6, 0xc, 0x5, 0x3aa, 0xfffffff7, 0x5, 0x2843, 0x2, 0x1, 0x4, 0xff, 0x1, 0xffffffff, 0x10001, 0x6f1f56d1, 0x5, 0x9, 0x8, 0x9, 0x5, 0x9, 0xfffffffc, 0x0, 0xf, 0x8, 0x2, 0x3, 0xfffffff9, 0x8, 0x2, 0x5, 0x731, 0x0, 0x0, 0x40, 0x0, 0xfffffff3, 0x7, 0x81, 0x3ff, 0x21694000, 0xd48a, 0x4, 0x6, 0xd, 0x7, 0x1, 0x1, 0x7, 0xfff, 0x3, 0x0, 0x8000, 0x9, 0x30b, 0xc0000000, 0x1, 0x6, 0xfffffffe, 0x0, 0x8001, 0x1b7, 0x10001, 0x1, 0xff, 0xe597, 0x673, 0x6, 0xc, 0xfffffff8, 0x10000, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x401}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x6, 0x4, 0x5, 0x4, 0xb, 0x6, 0x5, 0x2, 0xc, 0x0, 0x5, 0x80000000, 0x3, 0x4, 0x4, 0x3b0, 0x8, 0x81, 0x9, 0x9, 0xc0000000, 0x5, 0x96, 0x0, 0x3, 0x63, 0x400, 0xe02c, 0xc, 0x1120, 0x4, 0xffff, 0x4, 0x7, 0x6, 0x4, 0x7, 0x200000, 0x7, 0x0, 0x40, 0x1, 0x3, 0x87a, 0x80000000, 0x8000, 0x8, 0x1ff, 0xfffffff0, 0x9, 0x8, 0x8, 0x7, 0x5, 0x7, 0x9, 0x4, 0x0, 0x9, 0x4, 0x9, 0x4, 0x4, 0xc8c7, 0x101, 0x2, 0x21fc, 0x6, 0x8, 0xd74e, 0x1, 0x3ff, 0x7, 0x3, 0x4, 0x4, 0x8, 0xb4a, 0x7, 0x3, 0xa, 0xffffffff, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x4ca8, 0xa32, 0x0, 0x5, 0x3ff, 0x7f, 0xfffffffb, 0x3, 0x0, 0x2, 0x1, 0x5, 0x7, 0xe, 0x4, 0x0, 0x2, 0xa1, 0x6, 0x7, 0x7f, 0x6, 0x7, 0x5, 0xfffffff4, 0x0, 0xd, 0x10, 0xffffffc0, 0x19a, 0x40, 0x4, 0x6, 0x591, 0x100, 0x4, 0x0, 0x401, 0x40, 0x400, 0x3, 0xe, 0x0, 0x3, 0x1000, 0x8, 0x4, 0x5, 0x2, 0x40, 0x1ff, 0x2, 0x0, 0x0, 0xfffffff9, 0x8, 0x7ff, 0x0, 0x9, 0x9, 0x8, 0x4d, 0x2, 0x80000000, 0xffff8000, 0x1, 0x7, 0x8000, 0x2, 0x0, 0x3ff, 0x8, 0x2, 0x4, 0x3, 0x9a, 0x6, 0x84, 0xea5, 0x3, 0x10000, 0x0, 0x4, 0x90, 0x3, 0x7, 0x400, 0x600, 0x350505e2, 0x3, 0x8, 0x5cf9, 0x8, 0x4, 0x1, 0x0, 0x0, 0x5b, 0x8, 0xbdf, 0x327, 0x4, 0x9, 0x0, 0x9, 0x8, 0xc59, 0x70000000, 0x1, 0x7, 0x7fffffff, 0x6, 0x81, 0x2, 0x7, 0x1, 0xc0000, 0x1, 0x9, 0x4, 0x2, 0xfffffe20, 0x2, 0x0, 0xfbcb, 0x5, 0x1, 0x5, 0x0, 0xffff, 0x9, 0x3, 0x4, 0x0, 0x8, 0x2, 0xe, 0x8, 0xd, 0x5, 0x7f800, 0x3, 0x7fff, 0x9, 0x0, 0x8b70, 0x8, 0x5, 0x2, 0x3, 0xa, 0x4e, 0x4, 0x5, 0x5, 0x9, 0x90d, 0x9, 0xffffffff, 0x1ff, 0x7fffffff, 0x7, 0x5, 0x8, 0x3, 0x8000, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x6, 0x2, 0x9, 0xfffffffe, 0x20, 0x3, 0x6, 0x3cc, 0xe19, 0x8, 0x1, 0x2, 0x6, 0x5, 0x0, 0xa9e, 0x3, 0x3, 0xfffffffd, 0xa, 0x261, 0x4, 0x9, 0x5, 0x0, 0xba2, 0x8001, 0x1d13, 0x40e9, 0x1, 0x8, 0x9e18, 0xa, 0x3, 0x7f, 0x8, 0x7, 0x36f, 0x9, 0x80000000, 0x1, 0x8, 0x3, 0x0, 0x9, 0x145, 0x0, 0x4, 0x0, 0x2, 0x2, 0x0, 0x6, 0x309, 0x0, 0x7179, 0x0, 0x200, 0x9, 0x2, 0x8, 0x5, 0x8, 0x40, 0x1, 0x101, 0x0, 0x4, 0x2, 0xb, 0x7, 0x2, 0x5, 0x3, 0xbf, 0x4, 0x4, 0x81, 0x5, 0x9, 0x6, 0x7f, 0x5, 0xfffffffc, 0x3, 0x9, 0x1, 0x40004000, 0x5, 0xfff, 0x4, 0x1, 0x200, 0xc8, 0x8, 0x5, 0x2d, 0x7, 0x0, 0x2, 0x2, 0xfffffff9, 0x6, 0x5, 0x4, 0xefb5, 0x7, 0x1ff, 0x6, 0x0, 0x8, 0x5, 0x1, 0x401, 0x100, 0x8, 0x4, 0xff, 0x8000, 0x5, 0x18000, 0x7, 0x1000, 0xc, 0x8, 0x6, 0x3035, 0x10001, 0xad72944, 0xf5dd, 0x10000, 0x8, 0x7fff, 0x6, 0x8, 0x6, 0x5, 0x8, 0xa9, 0x7ff, 0x5, 0x3, 0x2, 0xfffffffd, 0x2, 0x8, 0x3, 0xf, 0xc, 0x8, 0x3, 0x5, 0x4, 0x10, 0xfb, 0x1000, 0x1, 0xfffff646, 0x1ad0, 0xb6, 0x6, 0x0, 0x3, 0x4, 0xe, 0xfffff801, 0x8, 0x5433, 0x80000000, 0x3, 0xfffffff7, 0x1, 0x0, 0xfffffffe, 0x8, 0x80000001, 0x4, 0x10001, 0xca9, 0x0, 0x0, 0x10001, 0xd, 0x1, 0x5, 0xc9f3, 0x1, 0x7, 0x2, 0x929, 0x9, 0x3, 0x5, 0x7, 0x9, 0x5, 0x2, 0x2, 0x4, 0x5, 0x4, 0x514, 0x4, 0xcbc, 0xffffffff, 0x1ff, 0x8000, 0x5364b091, 0x3, 0x8, 0x8, 0x7, 0x2, 0x2be, 0x7f, 0x1, 0x3, 0x4, 0x8, 0x5, 0x3ff, 0x5, 0x401, 0x7, 0x1, 0x31e, 0x2, 0x100, 0x4, 0x6, 0x2, 0x61d, 0xff, 0x1, 0xd9d2, 0x9, 0x9, 0x7f, 0x8, 0x5, 0xa0000000, 0xf6, 0xfffffff1, 0x4, 0x401, 0x4, 0x3a309d3a, 0x1, 0x5, 0x1, 0x1, 0xb0, 0x7, 0x4, 0x18]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x2, 0x9b, 0xe, 0x6cf1, 0x9, 0x6, 0x0, 0x8, 0x4, 0x8, 0x2, 0x90000, 0x2, 0x6, 0x2, 0x1a3, 0x0, 0x68000, 0x0, 0x5, 0x5, 0x4, 0xb9ab, 0x80, 0x1000, 0x2, 0x1, 0x4, 0x1, 0x10, 0xfffffffb, 0x1ff, 0x2, 0x7fff, 0x8, 0x401, 0x4, 0x9, 0xfffffff6, 0x80, 0x3, 0x6, 0x7, 0x2, 0x11, 0x3, 0xc, 0x9d37, 0x0, 0x3, 0x6, 0xff, 0x10000, 0x7, 0x1, 0x3f, 0x9f, 0x3, 0xd94db11, 0x1000, 0x80000000, 0x200, 0x10, 0x5, 0x1, 0x2, 0x3, 0x7, 0x81, 0x4dd00000, 0x1, 0x6, 0x8, 0x4, 0x1, 0x8, 0xa, 0x3, 0x3, 0x80000000, 0x7, 0x1ff, 0x4e4aa632, 0x9, 0x81, 0x4, 0x5, 0x8f0, 0x7, 0x9, 0x3, 0xb771, 0x3, 0x1, 0xffffffff, 0x1, 0xfcc, 0x1, 0x0, 0x9, 0xd, 0x1, 0x6, 0x9, 0x2, 0x2, 0x3, 0x9, 0x8, 0x7fff, 0x400, 0x9, 0x400, 0x80, 0x7, 0x80000000, 0x8000, 0xe08, 0xfdf, 0x5, 0x8000, 0xffff, 0x9, 0x97, 0x3dab, 0x5, 0xfffffffa, 0x3, 0x2a0, 0x80000000, 0x4, 0x3, 0x3, 0x8, 0x7, 0x2, 0x2, 0x3, 0x3, 0x1, 0xfffffffa, 0x69e, 0xfffffffe, 0x3, 0x9, 0x80000000, 0x0, 0x72, 0x7, 0x5, 0x0, 0x3a, 0x91, 0xfc08, 0x6, 0x9, 0xffffffff, 0x1, 0x3, 0x5, 0x6, 0xe46, 0x884, 0x993, 0xfff, 0x3, 0x1, 0x37, 0x7, 0x3, 0x4000000, 0x0, 0x2, 0x10, 0x400, 0x1, 0xcf4, 0x4, 0xb5, 0xfe500, 0x6f, 0xcdf1, 0x3f2c00, 0x29606e5, 0xfffffff7, 0x4000, 0xcdcf, 0x5, 0x3, 0x2, 0x2, 0x6, 0xfffffff8, 0x3, 0x4, 0x36c3, 0x9, 0x1, 0x0, 0x401, 0x401, 0xa, 0x6, 0x5, 0x9, 0x6, 0x1, 0x4, 0x4, 0x7, 0x5f, 0xd1, 0x4, 0x2, 0x5, 0x3, 0x2, 0x5, 0x8, 0x3ff, 0x7, 0x1, 0x0, 0x0, 0x479e, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x1ff, 0x6, 0x2, 0x0, 0x24c4, 0x3, 0x8, 0x80000000, 0x9, 0x0, 0x400, 0x5, 0x3ff, 0x5, 0x4, 0x3, 0x0, 0x0, 0x1e9d, 0xaa38, 0x7]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xfff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x7, 0x7, 0x2d91, 0x8, 0x9, 0x2, 0x9, 0x8f, 0x1, 0x9, 0x0, 0x1000, 0xc, 0x6, 0x6, 0x9695, 0x3, 0x7ff, 0xbc, 0xffffffff, 0x4, 0xb, 0x5, 0x1, 0x61, 0xd87, 0x6, 0x8, 0x10001, 0x3, 0x10, 0x9d, 0x8, 0x34, 0x100, 0xf, 0x39f, 0xc3, 0x1, 0x80000001, 0x77a3, 0x2, 0x10000, 0x1, 0x14f, 0x6, 0x0, 0xffff8000, 0x0, 0xfffffffa, 0xfff, 0x7, 0x4, 0x1, 0xfffffffe, 0x5, 0x4, 0x81, 0x7fffffff, 0x3, 0x9c18, 0x9, 0xfffffeff, 0x7, 0x3, 0x1, 0x45, 0x6, 0x1, 0x3ff, 0xf, 0x0, 0x7, 0x3ff, 0x3, 0x80, 0x6, 0x4, 0x0, 0x7ff, 0x0, 0x81, 0x9, 0xfff, 0x9, 0x6, 0x8, 0x30, 0x9, 0x2, 0x8, 0xdb, 0x3, 0x8, 0x4, 0x8, 0x2, 0xffffffff, 0x9, 0x10000, 0x0, 0x8, 0x4, 0x3b33, 0xf, 0x2, 0x3, 0x4, 0x9, 0xabe, 0x1, 0x2, 0x1, 0x2, 0x3, 0xa, 0x6, 0x5, 0x3, 0x8, 0x5a, 0x1, 0x1, 0x3, 0x7fffffff, 0xfff, 0x7, 0x1, 0xbe47, 0x9, 0x1193, 0x10, 0x81, 0xffffff8a, 0xf627, 0x5, 0x82c, 0x1, 0x5, 0x5, 0x100, 0x8, 0x1, 0x5, 0x2, 0x400, 0x9, 0x3c, 0x9, 0xfff, 0x8001, 0x3, 0xffffffff, 0x8, 0x5, 0x4, 0x4800, 0x7, 0x4, 0x955d, 0x8, 0x1, 0x5, 0x1, 0x0, 0xffffffff, 0x5, 0x4, 0x8, 0x77, 0x43ac, 0x9, 0xb9f, 0x6, 0x5, 0x2, 0x9, 0x3, 0x7, 0xffffff00, 0xc72d, 0x7, 0x81, 0x1, 0x5, 0x78ce, 0x361611be, 0x7fffffff, 0x0, 0xf, 0xd22, 0x6, 0x8000, 0x8, 0x7, 0x1, 0xf, 0x3, 0x8, 0x800, 0x4, 0x7ff, 0x9, 0x7fff, 0x8, 0x5, 0x4, 0x80000001, 0x400, 0x2, 0x0, 0x2, 0x4, 0x8, 0x0, 0x2, 0xe6d, 0x9, 0x7, 0x3, 0x7, 0xff, 0x5, 0xc7, 0xffffffff, 0x1, 0x1, 0x32, 0x3, 0xa0, 0x2, 0x5, 0xffff8162, 0x13c0, 0xe, 0x6, 0x4, 0x83, 0x1, 0x40000000, 0x1, 0x2, 0x80000001, 0x3, 0x7d, 0x80000000, 0x1, 0x6, 0x4, 0x8, 0x7fffffff, 0x3, 0x5, 0x401, 0x800]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]]}, {0x1004, 0x6, "cd914d0f2fd118e0f7fcc7617b5d55687f385e1c7e5c7393d9b2ba39fc63bc26195af42573faf0ae1e42d6d2af09798bd7315f0096ad2b1bc6d15c0bb2df529e9c0393cbd065d9a1fe64067d9349661cffa0275f07546aa42326242ea1f92b99bea6cebde035c33173ccb4ddedd90293650796422fba871dd44ba5b06071fbdedd76e23a8165f1818efcee05b23f67fb6994593f0f4cb8db11c3d8ccea576c8599a46984aa82acf623debfbff04a382dcf9c92d29c8d009b07e81986d39ebee15baa2fd41ce14e4e203a24c7fa0138d3a22c8e4a6d4c4afc5ea6678991173788286966acb91e2c76d8bb7861ab0ed20730eea1a425bd2bf94638805c2f341c67c6916598ef317c3effce7c6542134fd3657ec72efff89c73489d820f64acca529614e60514bee70c8a5cab9519cc0b850d440bfe75bab59ef77a3445ce240fc6390d74606a8be19a96011cefdf35ce3d4e4fb7ba9e660dd842e425599143636fbe6f1f42b5a243687e1388991222c4ad7bc71231b257abd7c50820e6460380bb7dcae42c236d811fd84b9b56f51c43d886500bb5f11a9b950be0c327960b69c5df0ad1c5c308abadcaeeb845a65feeddf12e751830ca2eaa6445ee6933ec09eb2f809307d67af98ab1638abe5031a53ae02281d0421cd41281c0252f448ec8083d053300a94039ddea7725cf58640367242e4edc3483fa6a45c0c2a797b34dff647258ef2373c3ca66abf685ba1fbd23b0cd02dc9d437aa894db3f302c6b3f7590a58e70e077a6fbeca6615fccd6440eb26d2b66b98a619b6c19706165b613241a7859ef4714a617e1811926efaea3cc6d965d132ff0c62e8f2911b8e2f40e9ccf9b5fe68cb74604d40a45a1b6e7ace2a81c8b9e9f28361d1a394d84fdce48de0870ec852ba205ca199cdad0efc08e57eddcca7bda4f8948f134564d3548bbe0db191cdb1bcbbb9afa115d5771fd276965066ad9192eaccfd3ef1c593ed2f8ac84bfeb554ef3fba2761823db42367f6ef3c5c3c2c15e98cdd65714ea2f4b0f82b0c25c0335349d630f6fc6d76eab8a329d9745434c621c4aa1c2440f27c5e99c0b8db2f85fe07a1e480480b3f2cfe11d9bf745f47d240fcbb28032c924780118cedfa21fbdeb929be2b9a23932653ee1a21ff0fcbd2a7304a15330f377035e6c781919e584e5003a57e57b1c6f38be4313bb1d7fad720ded5061dd495b0b16695dd32f4d45ac2fc6fc0c8e54cb31c7731a97ca5fde282b8fa15619aa4e803942f78e21a05d8635c07ac6ce665108545522136e623fe141fd444ee1a9f5ff86c765613d3406bbe91f490e2336820485092f93d4bb4128a3fd7e206bef9ad46ce6d884491f7b5d972be25b892f7c0380747496f19eadf9cbc1aa97ff69dec3f2fc39d7f2e630437e701971ae0907732396d3bc784e1dd1caa843d3975ce3d870693c6e5d094cf80fe7385a08eb6e15a2dacb80a6e2c28d8bde63376eb4a0fbbb109e2ffe1c6f76aec12e3c3e82fbc9b3e13a4fb0e53b92fe135b07e8e7c7fb6d7ce7d6209a3cf7085d7cc62389577a6b839ac6f54e697f4f46fa1a8d12d0bd3723b66baa41f2713c749946e79868182fc73760b0cc91c054c3a13b3cbabf0ba65819a907aad68523173603b6e581928fecaf22f5db2abe21a2d9eb28341d642c6ece7c03b676e6f8227e5e75d15899ccf45dc3756d25cde979495bc7062b91a154a48f796073882c7807c4c122d646b615026422e848b17ab2642fe086fdc4e188e5601b1d40b2c3e55d8568ef2a6c1adfd90452cc36b98b6fa470bee452c253ffafef97931ad86bc4baa12a085a0a41d670a6487638f9c7e3d755b447bd67c2279ab6d6f4d6be3002f78613b1ea1f6aafd661f1c07a0744841842276dcd0b4b64a49752e619d9f50d8322df5693522d0b142c196cfc5942a920c0d64a4e411777114dbe552fe39d984a7bce7fe2b1dbd31afb602866023ceef4cb100b116a30fda7d97f6eb8235b367d43756f1ffeec487809a5c5d5498ac56a67f72de9dffe0705c90779c02bf979875407986ddca83f2aecfcb02884d448845ca7d0dd6e032ac78d10ba195493e685d7af9337f205bceb6fee58899e18cecf206e10a30f89aea42404806e7d71f5783396318e511a049c53c35bfe81b008343f2e5eefb1347f41163959881fd9d57ec8a641e8d7cb839284aad9bcbed5eae52690c4dcc6f1195bbac6c3d4cf24aa3f6085304b3ddc36bd8c5483eda180da9af7f0f174dc1ca386c8472203f9775ef6c64c2ee0f1a11e201de56fb7e38238e01a7fc22e04bb6979713666650c407b0429ab4560f11ce2f8b72f81e3bac200cfb82f6e7b9ec279021818cf9f14c36a2b324d0cd5c44c6b4c57bebb00b637b73e652a3c6a8d7bd31e98a3e1bcdea7068c8ef04fa8556399cdfb1771f80f71f3931567d855a4ff5fabd42def2164f86d8f6cf410e90c353b8a775aa27a6d183421c2916f9ede4b1e65f31ac5deadb54fd18506efa232fb38d099ff2f3e90204be0a167b496bbc0e9819f093a42f7a42e66a91186f7bba59242b6845e267299223045ced1d38a2c70120ce41d62e836dcaea748660b93dcf37d7ea20e754f8189da1fe682f42dc5c197d9a99536b187de5f02e61b5e8ebcf5a7d9957ddb8f681bceb4aa9ef134f1510eb7b1004723a83dda0a23d9cd6fda2c10c2e76e5f2cef17d1b87069ad2319b799cfab064013bdba87e26a1a8de54d98daf4d992d6e499dcad52a01b172028f0029f3dd894f6c4bad91ebcbd8f97988f003805a03bfe88c7c763d93f90c0cc74e68c50475496a8bc6f6194498a3178195a0bfd93f15d53ed39a078057a1909dd150ae512c5d6a495789731b16d8a27c3270ab8ef0e687320b6c9b3f0cfa13a0102d813c05a3709a79fe839d4913ffbead57e4f32be1640298b0d7aeef5fae56c1f53719db3b9581ff9e0d805c4d84618df01656ebb7ab605fd1db7eb769441801882fe118ce744fabc705174d40f3261155b34a817e7b9bb1d8e60d5cc930efd0ce1321d9db464e7e375f69376bcb783d5b8906dbe1c0d8d636acf00a0be8935e7d785bc3d84d72f7856e8bba68a5ad643ee5399a7c1ed57b178d4def6a988d3612216dc8b4e428fa3fa81810db83f480ee80ef5bc172fa4d558e1eac14a011200369f6aad7c798cf073a93931ada3c52b150e3301169677759ecf0fe74caa7a3273da9ca8b5c87e2087ac4dcac6855634d4c5e6c9fd8de3fba2d39c3ee85d465bcaec75cdb66fffaea7185b45333a08fc1a490cd0cc2b9dbd06c08f79909ea6bf026d7097b784cf957f1d63fa2b3670e479f5eb0bcced7ae28a4f76e40ff6ab0cf9c6431b71ca888b030d591e72cd121918b13da2ac32259b2325e83095f8b4001f95779fbc161f652e145891712551b3903f589037d6952cb247c91da32dc990bad6f256f5f9bb34abd1da947cb207b489e5fb0bbf0db14e5ed8dde86b4cf1afec84894b2f9f4d5a9893336db39f30acf6a0f16cf46a10444e9872b5fe094d00bfe85618645409aff831ae5a9c7712d4e8a4ff979c944a4461dc565c4a643c94d71b4f46bed01e5adfb85df535e5856f0b05b180429276d1c0a2c36ef2b787f572ac5adc8db86601b7606333d7785e7f616b2773567d376387e7a91c12a720944c619da278889afe52504bc0f1aaf9b1bc965fceeba4bd700d85987d04084b7ac98cbbc2af626611143cbd010bd31db5c5e9d5ab8e9181513ef4dcfa5873d0ea2cd80c75ab54d20dd4f8b6272b7fcd325051548edfe5a12de01d0a5376dd45a4242ef311e857cf7605b70ba164bb0dcbf528926d0dfbf6d9ec97486fd5fcca89b29b72e250b9c922a0d2adec1bcd614de4949c7004eabddbbb6e60c67bb0ac11df143ea5d1db4e853be20e2f6c82de06912da77325f2b7747ef8d16de4d25ee95aa4e2836ecc0ca02c1c82e1b621a72be771c310341682972ebdaf067e0846a785e891ffc3d236705242af7cad3bc570046768720b328dbee3a122ae35e978941ecc18a3ede26eaa0cc11856bfd7d236a37f63b439effd39ce6238976b6cdc6c8c593e15976ac4441c5b4f5f025a3d1f40af56b84f935d09e5b07aa65f512fe8a23ab78b1b8e40296a9a390f35606fea3438a8d8a04911d8ce647147c5d13ed09fc1e90b12af7b204a44173689e6c2bf991039c0ff63395ac67b9c1b970fc80691394403389686fae646b5ba3de816e23aef3d1e147555ed47880242e5cfce81e25b3458862450ebf013ffd1eccc643c5137a4757c660800cc0400b15d361399dd84849d6ce1276345598d4d20eb86e8cf56b0a191201b6a790905ee2da8d094af71bcf3af81701a2b622a62a6aeb53d4877548669d3168408c5f8ae86fa3c85585a80cdc614e186f092fcbf2547be61391d63b5373726cf87631d63bafc6baa52f3c62285574adcf22b576d7df0dbe8723dd981a70d3b85e7e0c942168a50afcb9b8ce370b695146948e3511ebdd09053c9ad0d0952f1c81013b64cb755f5bc4bd2da20613b4863291a2463f1be83fb67ff8fd4b0d01f89a6e3c21c3ed4618b4b55d3e92265754d97847da7eeb5c58df067e5d295b9e8c4eec3410d2e0dd343bb4765e973e6832ae6feb02ec2b2011fd336ea143e28513009fb6675af3271896a45498dcd4cdd0db8d8a6646d6a0109c16ff1919863bb13fa8dc9624aeb7439834138005b5b42bb3d27f621bc8ef5b5294be2c1dd6c5d2b888b29a61352c09551861d2662b759516717f565306501cdb300cda5c07e885f7fc1ffe091843019061ba1d28143d853ec0a44d4846227531b1603fa3807ef799aa132d576c39860d1033c9c53dd7d8ec7975c767ddcfa5417340d9716fe7478b68cf6193b9752ef5c6c6d9aef78fdfe89296a75238a8b993bae8614105e7516c661b190cfce2a0f54a614263e74153ce4f542c4777cf3a13ba10d227c7f6e5afe112adcf91e9d67c7a7f30061d5e3525e28d3766e9ef8077b631f053285bf528e584575000183a1e0bc42fcc3b9489c752031f05c71f10a9aa40548f006a7a48954f43d743571934205732a271e5ea159af48064b60cdaf29c1604d76b0498a44406adbf08a0fd8115da468e52e584d3e875c1673778e12ccf6fc998d6bb7265667c9529b43fede51379d3987e7e1ceb80c0f1fcc186cff6fb6bd33f39cae515cf2f9717d55f6d7c4d709b37ca8211adbc504d8842c00e0d7268aa6706a628653bf45e271b96253ae9702d4acf785650ab34b1c60faf88b0cc021a4d216488461a78c25718f34dd8c02d00c6c5b3b67421dce2e81abb79c4d2e27bb347afafc1dad37594fc72bbf3dc7857ed81194d8a3e1634999c9aef13175b5fc53539df36614748acb635a43da568480417ae8e96cb3bb373483fdeaa07090f2cde342ef7f373d6fc4befd3c5f6d8d27ae66543e2806fbe3f23ac361fb27d809e40fe24d649abd77141ea389f78eaad334fada2f88f46e2c8df1a9e20ffb71e291375f6248a5fd0b48e401f9581583c9e66a786ffefccb36bc9d4cbf4e43c9359d42fbdb5c826f590b4151f041a8b7198e3558eb795213b5ff720b2023a698e720d9d4a9a5046b182a45c15266f44ced5dcabcc99d48247648728615547b3dc252345704260994dda09113fea7ae93a2e8aa69348fa57b118799e24ff390fc09135bd4d50974f344f2190b88a08acb7a99b108c1947a23b535491c42f34a5f9c7c4d894b659afb9fe1ebb80b5d9e10a5755051271cd089981457fd96f2616a95dfb691af4a1e438b055f93"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0x3}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x4f80}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 4.310859785s ago: executing program 2 (id=1223): sendmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000680)}, 0x40840) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904bb06"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="400d21000000de"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) accept(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000000)=0x80) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="040e070e051400"], 0xa) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x409c884, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b3a, 0x1) ioctl$TCXONC(r6, 0x4b3a, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x1003, 0x610c3}, [@IFLA_CARRIER={0x5, 0x21, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r8, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) splice(r1, 0x0, r7, 0x0, 0x10d00, 0x0) 3.873546402s ago: executing program 1 (id=1224): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2000007ffffffc, 0x9, &(0x7f0000006680)=0x2) fremovexattr(0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000040)={0x0, 0xb}) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$sg(&(0x7f0000000240), 0x9, 0x40) (async) modify_ldt$write(0x1, &(0x7f0000000140)={0x7, 0xffffffffffffffff, 0x2000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) (async) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file1\x00') (async) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.729278953s ago: executing program 0 (id=1225): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRESHEX], 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080)) r1 = openat$snapshot(0xffffff9c, &(0x7f0000000180), 0x22003, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, 0x0) close_range(r0, r1, 0x0) syz_usb_connect(0x6, 0x94c, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0xe3, 0x43, 0x30, 0x10, 0x4b4, 0x6830, 0x7f56, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93a, 0x3, 0x9, 0x28, 0x20, 0x5, [{{0x9, 0x4, 0x15, 0x2, 0x5, 0x51, 0x6a, 0xc1, 0x0, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "c5"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0x1ff, 0x400, 0x6}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0xfffb, 0x4, 0x3, 0x10, 0x9}, @dmm={0x7, 0x24, 0x14, 0x2, 0x3}]}], [{{0x9, 0x5, 0x5, 0x0, 0x650, 0x8, 0x0, 0x4, [@generic={0x63, 0x10, "c7125d9fca3494e2ee0c0c69572323ebd65f7b6f8c63b5df26e80db002a377708e7929a9aed609e5412df85ecdb37d0f0e0e6e9cb1c4a605e153f1190afd3b6fb917ea8a08a89e449b3b665f099e7856d8328f070a4aca91e47b9fafb59b8ceb1b"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x7, 0xc, 0xd9, [@generic={0x4c, 0xc, "fbd045a9dda5435490ce145325b08314c4f44668e46adc2d6c129ab8b51c01d419df0baa93bc7d97a71629574141e8718afdcbf042a0e948e60060605cdb3422e146afd8d6b48663d273"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0xffff}]}}, {{0x9, 0x5, 0x0, 0x3, 0x0, 0x8, 0x9, 0x8, [@generic={0xb4, 0x24, "75523c565e93e41edfd938bbbf6b34eac8c13b18f0a77407c953de10c520bd7ff5b58f131aa3932c5e9e06d7f842dc4419b07a8c1479d13b08643e1c9e21bdb86a3260413db89ceaf8c0a15705e10a9a89e2c30dceb64f64d18a0cd90756c7bcd10dae6c41f010f1d6e84f141adc20934220d59d9aab64b4348087a29da3116bb4075e52bbd3c37cbe28d8f84e06ab4a4d96d73b6a8a54476fc88a2a1a53328fb88e533b06f6f4bb6145ffb154a9edf5a9b0"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0xc, 0x43, 0x2}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x30, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf1, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x5}]}}]}}, {{0x9, 0x4, 0xa1, 0x7, 0xc, 0xff, 0x3, 0x34, 0xab, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "ecc80692"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0x8, 0x8000, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x1}, [@obex={0x5, 0x24, 0x15, 0x3e7a}, @mdlm_detail={0x52, 0x24, 0x13, 0x7f, "b0049dc6b74fdb64a0bec36fe6f65d83b78ee5394802288eb4b562f0a3399f8c27acba0af8a399b91adc62f415010b875511f615df7a52db1a3fefd35ae37baa7ecb7dd70489da5116e356e039fe"}, @acm={0x4, 0x24, 0x2, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x7, 0xa, 0xc, 0x9, 0x400, 0x9}]}, @uac_control={{0xa, 0x24, 0x1, 0x2, 0x9}, [@selector_unit={0x9, 0x24, 0x5, 0x4, 0x4, "15e990f5"}, @processing_unit={0x9, 0x24, 0x7, 0x3, 0x4, 0x4, "e44c"}, @extension_unit={0x9, 0x24, 0x8, 0x3, 0x3, 0x6, "35f7"}, @processing_unit={0xa, 0x24, 0x7, 0x3, 0x3, 0x0, "d309e6"}, @processing_unit={0xd, 0x24, 0x7, 0x3, 0x3, 0x6, "6d075e35308c"}, @processing_unit={0x9, 0x24, 0x7, 0x4, 0x3, 0x3, "7ef8"}]}], [{{0x9, 0x5, 0x4, 0x0, 0x20, 0x6, 0x6, 0x8, [@generic={0x1a, 0x6, "6d06ec92f09bd9d9ec49092a7f117ae034ead1713b9d8a85"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x20, 0xb3, 0xff, 0x3, [@generic={0x9c, 0xc, "60e7e6ddd664a7b795bd3a3e7a37a3b062e5ae8ce5959d46be510c553c15fb69a438c3be76684238d129289e510e243b2b4937c7dd0a851a783366365bfb7a1a5dcda0c55a82389bd4dc7133c9c50a98707821779696c807935aaae6db08b2d5c23d4e8c3ee23939bedc55c4fd326bdc1b5803011e5509f587d126dd68b5f4d4ecefab9e75dbce5c7886c1c4b62f31819cb8d49cb9f17c6c720b"}, @generic={0x92, 0x4, "1be438ed8e808880ec126a7e498f514e52ef41a5a2bb12e313ef5ab57278f3803915ab3b2c630dd78886611513b9ba97407b59014104e28507c9c21e5b539366379bd60f0154d960d56a892677a1358dd1d09bde88da138abbd92829d882642bd186baac7d2e1be90247e11fc4cdb36b6f3beecc798632e898547e6a0bfd93dd8f2c57626ca1cf98a3223993f63467d4"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x82, 0x8}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x87, 0xf9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x5, 0x0, 0x1}}, {{0x9, 0x5, 0xa, 0x4, 0x0, 0x7, 0x9, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x8c}, @generic={0xde, 0x24, "4b50af5959100547da8f31ce86ddd99650446516a6710cf8cbd062572043dfcd37a688ed5e232d31cb43743dae2a2c1bc9e6f007423ceb1b66d099e868fc3b584cb6435b3aba58022c89a552727cf1c3d38fe4eb327eaf0167f5edf2119a63062bf4d2268180e00bcd9f7956ffe70b544427269e0d5aa41bb37dc64cc4b8adea88e897e3529811cd1ec634d676a5c77d980a62ffaada3611bdf995be301948de1b7b69517208953c2968ff51c5071cde2f2721aacafd732ce20bdee7bc18d9a4d8379669784f423376a1a1c5a7b6909c514cbfea09765d4a98eddd99"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x91, 0x73, 0x40}}, {{0x9, 0x5, 0x0, 0x0, 0xc0e221fcb4be7474, 0xb, 0x14, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x10, 0xfffe}]}}, {{0x9, 0x5, 0xf, 0xf, 0x400, 0xd8, 0x5, 0x7}}, {{0x9, 0x5, 0xe, 0x4, 0x10, 0x0, 0x7, 0x9}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x68, 0x9, 0xf7}}, {{0x9, 0x5, 0x9, 0x3c, 0x20, 0xa, 0x3, 0xc4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x2}]}}]}}, {{0x9, 0x4, 0x95, 0xfa, 0xb, 0xff, 0xff, 0xff, 0x9, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "0961b0b75a0d"}, {0x5, 0x24, 0x0, 0xfff7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xff01, 0x7, 0x3}, {0x6, 0x24, 0x1a, 0x7, 0x4}, [@dmm={0x7, 0x24, 0x14, 0x80}, @mdlm={0x15}]}, @hid_hid={0x9, 0x21, 0x401, 0x7, 0x1, {0x22, 0x15}}], [{{0x9, 0x5, 0xb, 0x8, 0x3ff, 0x6, 0xc, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x5}, @generic={0x8c, 0x3, "b5428ec8a483a4d5493b3398aacfed1db9ca0ef8c21041353b1565b11096f8474688ea5e62e55673c06a0a32b43c92b590f32ae1841dbf5e9327b70dd78a1a6f25ecc7b5fa462f611813df721f4c454da7f005a8c4008a3febbfe4b0d2ced4cd8f3b748c3c6d83611cac00bada667543383152069053421c753aa9f5a7a88c01e0fc78e60ff039412c4b"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x3, 0xb}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x5, 0x1e, 0x5}}, {{0x9, 0x5, 0xa, 0x20, 0x10, 0x4, 0x5, 0x1}}, {{0x9, 0x5, 0x3, 0x0, 0x3f797ea2be044d61, 0x7e, 0x4d, 0xfb, [@generic={0xd7, 0x5, "982e2e636c2dacc61ed2d77fa8810fcd86048526954bbe68ccf7bcb6fb673ed91462001adef8eb19054b40a34840a85e9876607d00bdc78fcca53e515a8bbee5b4ead095a8c57852ad69194d50d96408d904620f8cacb54b9a6b3c5ac76d18c7c4392a64b3feb645e2a58e114dd7cd286f9305a607090a4aec84a4827aa9bba956f66a2925c5358caadb5945d721e524621221cbdfa6a76c8fb5b5b0d7c1744b4ddfad5a11550aa5caf7cc59ba854d95afd13f55e645e697d26346ced438f766e61adca6a9e42d58575a21015abd46cfffd3ed64f6"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x20, 0x5c, 0x0, 0xf9}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x3, 0x5, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}, @generic={0xae, 0xd, "6d551a20a84cbe8e6255c3401920f599a53e670b554a1b95ac19ed1c89a5c151c2a77944fe7bbbe1760e9df226239f3c71ae31fca9667f5a922e4c9cfda82d2c7549c05dfa443f2f41077368c1973732a2474239bc99fe75ce08c142d93de36064cdf44395eb215360d5a075393af903d5316e102d4e9872377ab63a16ad332ffeb27b2edee5451a57333add1ca2f99569aca6cb297d17ead9f39a10f1ad320fdcc28532aac52ad03d69113b"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x8, 0xe, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xb, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xe, 0x9}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x5, 0xa, 0x2}}, {{0x9, 0x5, 0x4, 0x4, 0x200, 0x3, 0xed, 0x1}}, {{0x9, 0x5, 0x7, 0x8, 0x8, 0x3, 0x7, 0x1, [@generic={0xed, 0x7, "2c9028b94814498a70e450b4101f30ae931f47ff004c66a3b320634c00bef1ce31f975babce8988b6dae267ad94113fd66e4be1ac678e904ae92422353dd716c59636579e524c7eaa8688011ab44118c9b10b4afd6746a9c8e5b6d44cc9b04287a06e84b68366f052a83413321c04ca4130987edfe840c0248242eee2e558e60cb765785e74f4da7f2074e1c486e685a9f8ed8080c6c7efc35157c44aeecc1ccf386ac9ad3e88f819a93e20bec5a86412a50c454bd4c111f5679fa008e035cdaa5e03c94ebb22abebe724c51d91a77bcaaf531f721c74d44b22c8069960c3198a95039144a4f1de402b073"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x7}]}}]}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0xd, 0xe2, 0xee, 0xff, 0x1d}, 0x10, &(0x7f0000000b00)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x81, 0x3, 0x7, 0x81, 0x3}]}, 0x4, [{0x7c, &(0x7f0000000a40)=@string={0x7c, 0x3, "a04d9e787e84ac98e1688146d27b33fa2e3fcc8109e7b61ac060be255408f21cd041a9e376b4d4dd497049d5e939a54f9d4681affb68f56e4a7d368a8ad0dacbf87a6d1ac421d5811ab43c97f6447cfe5e459c61858c1246a5366a2d6aa4da2ce56abf4203d20745590285245657efcf266ef2e0fc9e8f78b957"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0xc08}}, {0xf4, &(0x7f0000000c40)=ANY=[@ANYBLOB="f403481c3f1df1159d7bb3bee9c55dae08168a113677ded4097508afc4ed43d0e161d99109d31bdd4abdaf789d59099c9e05727d2d626b280765ce15f77e0145d1bc80182b05949ce02d259ca4d6be22b1230dcedff078c08a5a3217120d5b3d91afd1ce9fe2bbf43077f0c0e5b25d14f209f60876a477c3218ece03e3502cdfef3f40215fcd705fa55fde0c27a8a572625ace6fec193d8775277320b6ecaa690391f20616179848f8cab1d9f163424d5c4258cd75c16330924f439a2bf1d9c832b1cc03028dfcbe91bf78b906e249b4e2cd6ded0841a57ed5d0114e187a01cbd376a02dd200"/244]}, {0x7, &(0x7f0000000b80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']}]}) 3.512372825s ago: executing program 4 (id=1226): r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x2000c054) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) modify_ldt$write2(0x11, &(0x7f0000000400)={0x2, 0x20001000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000080)={0x101, 0xffffffffffffffff, 0x4000, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1}, 0x10) 3.274845335s ago: executing program 4 (id=1227): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x4, 0x1000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x240400c6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, r2) (async) r3 = syz_genetlink_get_family_id$gtp(0x0, r2) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000041a16e80a5c913def85ff18abdfad8270013b8073dc", @ANYRES16=r3, @ANYBLOB="010000000000000000000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000400ac1414bb"], 0x24}}, 0x0) (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000041a16e80a5c913def85ff18abdfad8270013b8073dc", @ANYRES16=r3, @ANYBLOB="010000000000000000000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000400ac1414bb"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) fchmodat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x193) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x193) fallocate(r5, 0x10, 0x8001, 0x5) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB]) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0xffffffff}, 0x14}, 0x1, 0x620b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB='\v\x00'], 0x48) syz_open_dev$dri(&(0x7f0000000380), 0x1ff, 0x80800) (async) r6 = syz_open_dev$dri(&(0x7f0000000380), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r6, 0xc04064aa, &(0x7f00000002c0)={&(0x7f00000010c0)=[0x0], 0x0, r7, 0x0, '\x00', 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r6, 0xc04064aa, &(0x7f00000002c0)={&(0x7f00000010c0)=[0x0], 0x0, r7, 0x0, '\x00', 0x1}) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x840) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x840) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000100"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r10, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 2.567776947s ago: executing program 4 (id=1228): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0xfffffff5) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "92f7"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 2.340364905s ago: executing program 1 (id=1229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000000c0000001420038004100400fc654c187d6eb5f0ca15095cc8787b50b96435ad3147dd10e867248d37187c2a131a62d105462ce34d5cf8ded36159aea612a3460534d8c298556e91590238f40dd2c7148d365ab6cdd5f2a7f74bac8d59f731c655a46917f18b28ed05e58b70287d26677601258a5c0ab9f679e2e520228c3a1f1aede04c6ba82cc38cc2ab6b35a24fb20e032dedf6f6caf4bfea5435f746f746fd46ca192e3744eb6908b358c10833bf484237ba654641e6186a45957c6345e61ea620fdc74383ce1df4a24e7044bae596f018736424a5bfa438865044e7026fa37a3540fadd0e89d87aecd3bc127e0cb10274991d6127224a0f2a4ef19e2c4dedbe45f2471abcc38c584ead0e3df3f9211022b2421fb6b327361e8f58f2b73134fc5444b350ede95ecef5bbbf9950e75c9f772a3ff0180d2cfac287228709726a6abbab2971982de7f1a9149d71dcbfd212e89ff17cf284b7f8ad82a469cb1c1e3d9d1d3689271c8dad0ba89dda651d4242062ac0bc5877e397236fa9476ac5fac7c2c896babca09d74720004cd0e634327de4fd87ed72ae069c095d2c70caed52e3335478c1c3719925e24f2fd7755baebd5cde385727a0f0440dd3b662248c43ff5afc4f186ff0051ba8eaa07623b79c4bb6985f14c5ac15041a6ff7584f921982e5414481d4db4c76798d70a59b5aeccb6e7882aefe70993758b55b4dc4039c2b1c98452113aaf23ccdf68cb6eff6e048f9da6f39a2def3caaf80cdcbadb83b029b8738391f02fec90c8a8b6f036aae8ceaff5dca7d3e0098423fedc676c6774ab0e6a72bd246c0b3004d1988f802b846d62ca59e9a63ce12814176ec4380e1cf29d27e7b2f7e7eadcaae8f182498ad32e67323fe6ef9508fec40dd38897652053ef92e44a909060c237890c196f0c26ab10248f999001f6231813a81313971bea77a5470f312d185dce689adc99e430e4010a3a341482c51fb71c23c3cdf92303c7580c73775f9a74685a61ce9849eaca52b97ee7ffe2e672dc1be5267c285a102711b1b5d81d6dbb76494f2892fd4f85244ade3cdd3809fd5fdfce5157fc1658f0bceb379489732583707c170fc6392aa4f5b94843aeb18da58e0156e029c2b722918b1b3dc7c151cb9c248ddd18423629b53cd4b0ab2693b0df29c88c04657f4eccdc41357de8186fdc0ec86f92950734975921a2fde57c3e7176b57c871d76ff8a8f36520b67e64930cf34bcde9ad92d057a359ca022b646df18e2b7202845bd8ac4be5e5ebae436dc4b93dfaaf2778a53e7e4be937e83dac7d1d481bdbd8081ab0ac08af067e62580bbdbf397cbc629db9b023734b6fad7824d1a8b3257c1c18d6ebc928140060f004ec484b183560f830a1eb0c527c8600bb2600d761e847454e677aa29486aa407a9e9a5e9dc9542de038e3e55fdfec13184cdb16716556f972eef5c56230c43d146c86a9147265c309a279db6d138647920410896c5397c5f83634fa5e92b5161f786482d84830864388b91c2c1e3e9f9f038d5fa66f7fe904e14df0a60d46066c6b1f37cec6e13c35832f512be21da21a5921b81cc452b0076c2ec10fc5481cd0e1ca917b40cb3aa839b120ce6eb9773e942b74ececac6bdcd22eb8dd6cd9f148e0ebe5ef3094f42adc39bc5ca2259e1eab5059ccf5e82bb57b97d4d13a90747299b2e6b64f962aabf222e4f287503181de3c3a68fb2b0068583f3b97e40ce06e9805a7121eccac0527b8f1b18a62762efe0a9ce4114b7d1ba942bc93533ee0b1bd7f0a607207b976dfa1fbe3ce0868e7f4e31b41a0aada0ac6b291aefe22ea5338f07e57b981b8e4e4a121f231d2f46989fd5dd09a7c1d198f5886b4f1a222eccdabff096a81fef3c9e497621128562880938fe05a1f1c4da81daba55bf326f1e3a1712d79f01fbef2ee230615d4e454be67f0ad4dc2bfffaecbb683742925738b45854ab713ae548b9709e9ea2e28224ef466bced79e3ec6c163d45db187bc01c75afa85f78003927dcd122086acc8dd1b1224de41d62b83e34083dd39fe68aa5a479ba403f5dbddf9b763ca521b7efca6234be16484f1e0112d963672a6d24cdac15e80bcb82b3b22231670c41fe7e8a0a083b6df768e7fb0d94a004f8372f5cf8b9b45cc679eb67828a94d0ffabfe09d95ad2789cb8657f7ea86a46260416a72e6fc7b44e549a2e39fe015c7647cc0bec15fa63d26894be1cc5326331e7e0b1c505934182accf049bab033b026d48fda51de740afc0666e6c891e0c5192f4b2df21493477ff45319d7d8b816f0b73ccfa12d6846362feb4b85063ca42e950eb577c630300dc52698a38ca19cbbb398404a1e8e27d0be49985e59caef03da096d1ccbeed73bd7c9588325b747ab77f4d7c1c1f18388ce1771882ee680ed737ad197ff92f1052e5e79f6ffa5b85ba3fac5db13e0d0046c9dca0ab4b74b20299ba6bdd758940e088df31e1382cee6901503299028467a864d27affae30fd9aef5a6ff948c052124511a75a46d5a316e28fb6c5bfac787be5833c63c535557235b0e09f9a78a338aa8864613fca77a7e252d1975af2c4a6bcc969d1e20e3cd4dfc1b2fe34b70fd7804dbfde4fa4d950e5fb4eb926dece9e4601b12efe322bb42ac808158fef0a26900000000726654987e7de20d1e41e82c607c33c6bae7bb234744b51dc683d5857afd6ba8246cebc734e393806ef102a6baaf04f3a7c3cb888d5830e1c6ae170c5c920e806b4f518be4416b216cdf9b1658a412d9e4eab6c9b20ce99960f27e77fdf9a2e98b35c63859f9db6bdcbef1001a19e12e41370f9358531987851ab64c250e68a8569ace4418e2118caff7d3d4caf1c87bc50a8ae75770fdae88a8490c041b39d08190d8b7c908caddd66331a508929d53dd6bc2dbc86f97115ff0a364b70f96918e6ed354c97e59ea5e2c7b149cd51d7c85a27ac658e78b99326857858df0ac0ee240cbb6ee9d9ee6c2c2ff7c29dd25fd337dc08bddeb50305ed48b9f5d89c55ffedde29ce0412ea8e2c976f961eb0c4966d2a8be0b657a5e51048a8a10005c488e1f637ce208a35b5aed0c2067465191dc42ebf6e4853cc89998bdf2ef755f38a3cd985b62df36a5ebc3b47df32423ee46857f9db9d756ff69ecd4ef2f307dcaefd4a1f399543952df972269c28200df8ebacad4eed1c00b9ce9841799bea583cafdeaa8d4a371a8ae55d8ffe4846833985975d8b234adff63eace9d2c4d1680c370827ebe1831ef311077607e8c4920506e03528861085dcfdb918f1efe91420c390fbca0a38377e1635c402ec1c34eddae986ffa8756b27f6c340907bae99f4a6b328fca8177b4dfaceea5ad3ceb901dbcefc15ded322bece4e750969e81935764ebe88749464af7e692e3d324c519b456013daae93bd63215540380a7fe08f0e050cdeb25db2a8b9b6f5720ad1e7d2c5b6d609712eccd321d6211fb642a4cdf72504aabd017a9b4827d1e0e0264435a5e1045dbe33834968d2db503972995559b1efe1b9ce475405118346b63f637b1abf8e8374e7100d6b41c9c672d2b244c7a82ffb882522efd9e903fc69db14c469685780005843856c6623591f305d383eae55a1a1d5619dfff0027413f26fa6a793a348ba8b192e1b088745a2175d55517a75d4b63cce41cc0dcaca9002cd37a1ccc6710ba2a099297b0824f976919e8abf3b1510b1305a95241fefbd036afa9d4538affc82f005d29b9f2c0e60d6c20f673b8ca28cb088e1e89efe334f25ffe1a3fb3581e5aa63b9a4a49f269b5538788aacbbc04d49902ae2af1f59d2484ab6ba7a9b477be0d92e221fc48cdbc00bef7125bfe36f9afb1cbd58fef21625ec99ffd2e35fb00767e3f22dba7d36163203cfaf1860a8b1afe0d878ea00fe08f68fd592a6395fb357acbdc2834c8ac85571527dbf1dbaaccede3d583e2b9bf076737716785f44aebc7ba917fb426d5541adff1e75836ab70fb0b43565ab5e24c5902879f31701cc006b4ee2f57be0916cf0b6cd489c4fa9129031a4af75a00048f20eb962f0c6f68cda0d7756a4e83f7d065c4a00b8263d95f6b979507b7ca01735e83a5e5ff0b76f077ef6e4c1150f9202b5311a231b76111d48a387e09075edb2448fb19d2869ae420ada8ee7577fe980ed7e057dc963c0a98db790bb5b7920220f8a55213b6530637b832abdf3c6fefdefb712a2c2c9eba8087ce39335ddabdadb86f493061e593981c6b2d70b4bac3b58885787c46f85c1022f5ff6cec16ba227aa5dac2e0be30522c08369f18d170b9cb454f3ebf86d1e923fdd65245d8e0c476bfedddcb772453f4d0e70d059e79b8811c379c9eff6e45d99f81186930b32b24cdcb906a41fe29c147ed834b37e77800a33c15e65d121ee85a924ef6bbc1c8f4a423fbc5d14645a08178227f4c7f111fa318823a6c075ddf9e131c9bca8d56dec4a68fbab9a0c1a128880d8b4dec59b89ec33c19eb76f09f31ad730cba735b60deba54c399119949e45af4de5c758281945fe6b6a25ac1cd57a81b48f11a6575e79b82e529d4ba1b2a1175cfa03ef6d149b165195fa64736b302e28ee6444368fb395a2d89c8747348b546a07ed0306682971539f0031d88ffa020d0b3d40369e0a3d2238293a75a155eb5c0749f64ed37a9af5be26d5a4322a55a23c33d176280bd0e4c5168f2e66bca925304d0f32074f5e68d7c43f9e2e3f14a6bcf3e77e6b71737131c3e90208072e37c8a6cad1cabd756aa694e85b86256ce13b43541a26438374b6029ee461d223ed34ed1e9a3e580cec7b2b41bc9823b3729e683f079a498636d022799dd94c5e870b6aa7f3d36fb51ffb6c5e317fcde6b5ae45073f8e90ee0fc1fa0641ff6f0b789dcc6df2fe9a3b5e6ed9d2be3403f5af96e7c6019b0a0ce4f8342323638a52c121956de068069fe5c44946b5023e1db7742fec29cb749bcdc09d795b683c553dbae1298540b2cf1bc3e5e52adf252bca47ba2182c80541daf1d11b1c67675171e69c1abe3c0bc3a0f2d1a6e2165ca1647c394970a404a6002621a258cef01e2ca12a138888dace9ad06d2f0c0209f286c11b289626aa557cc201560651054a6042e84c6fc5e345e2f702d61851fed5ffa36ade652f76db815dabb7b8eee016ea0836d0086f2a2f7bd1c4a4ceb1d706817b41347a891c34b45eb06a9ecb19041d5a39f050cb0413662dc4700385fac2e1823e1ce4d08c66692fde0862a057f2aa2425d511735fff53d0e3d88bfb245e7724ba4ba8452e469862d333dad5c63bfa778809c043132db3a57e122d0495441f7a07034a3ac1024b8fc063694d8316c29639cb6605ff362a853f976c763f6d10e4e0972760e60f08acdd8a73607e7311819fe24ad8b670bbf0adede086f91bd0839ce37927f43a263e3e8369932db9ab786ba66e1bba664bfa8aa50d98ed18fc90e560933c2e8da72757a4539756740a73c41180cf97fde47cf3e9e6005302459d831eea7a03157e0c3178776e4d4add3999b9a1efca7c99b8234ff9d33492431dd9bd0814301ee49260e30b8b6afc46ce8a733bc9d7850c789e5e98cdefbfb11131a85bc24e75453a16c6780ab4229b985d1fe7a255f71cfe18398e881d493ded88300b54f6c4a5567fd84a6e1f11835433448a00420ab1b3a49fcc0e9938da52b68f9409c94a0de61f0beb69532c4f7a11fae6a9ffd10db7de01e3272448b517ad795a06f3fef8148b7196cb81a80aed42e395c1ac346dd27f9bce87661e19f957a17d54d59b68e023c1516ae9ba4d75f18d4b8fc7e9fe6f74e38597b0e52000000000008000200fd7f000004100500263170b5cd05e6fc471e6a6d47c441262cc5a6bea4536de48f876bb3e18f2770592169ec48ed1eb2ab7f45d3d09f256c9df523648002907bd759f9b49046b49bbf690528ee245a9984bfb6b549cbc0cc10c70b8822c02fdbdb97b1eac5040be1d4810de8d03036886825e1707f605ad694187e989b1028fe859e75495455b24efcb7edecd7ec594b754487807288227b9f8d4d50cefb31adfc2cbf174b21cbd848f97bb3938b8634f2d009f49a1b7c21c834007aba0ae45a160b137906d131353ff1c29b4a2e25bd592a32dd283d538bbaafcb2f39cfc886ee844e580c527b6e251428c7f49b0f8aa2787c9a664db867c35b5443e512f6cec18cfb353b47e0e040488f44d5e628feb3cc3f19d8ad4039e092abdc46e7013c6b84260c014c82f25f9a8bae6daf139eb3b415876f78a86746b45763ee3f9f805a92b2e2089630b1ecefc435a089df8e7062595f2278ed8d2f88e761281eef63081cedd34a3b6c9a70f3cf21e12822aa96b868829dcaea9bbc9741d06ca535984fc0795c6d5b1e6bd529d993b8e6f758ba1816d8a8dd8bb723d1e082832c23c122ed608d8f047957ec5158b253c9807649609a19042ac21bed5d6b06604cb4fe91160345fd8afdc2855e82be5165164fb58344d5df35b88b44ed301430604d842124bda146cf109c7d2a00443ea3cc8482c52bd81f20a11a1bce3a74a2ff26d1982717f1ee8d9e6c8c927b80901440041bc53e8ab6b832787d7c9ff002ba1671936365e75aa54fde03d25d8c55ecf2b7cf651542933085ca86da84b46a6559154486ac5f087b7b54f3f24fd2ff3c8f08b7bcb23aa06f73ca6257bec8b06e0f91131845a026c10414be9f3db4660f1b3682738a35978b62986017b273754f0db231026b4912c53b44bd268389bd8b58e017959349fc93c7ba61f88d5a964862cfb1b3cda61e5c784b2028f9cfa7ddc5a781d9a2a9594fd1891ff7da7b7382a55b0dfa4b5f1e0f0c979dfa463c3696d51c23728683a5586191da03f61dce79639cee2bcd982a9183b44231da08018aacc3c9a8a52f29684ab029ca7bcf406f51c8b042dc77faeaf8e9139682cd00283319a1a21cb20d6aae66a18c0c358b756f57102e3f455be7ed71694018e91e28786f9bc6418e25ad300a8dce02975c1e73e03b1ebd21950e9fabdeafa2785079f0fc8ec12013acc0e23faf473634e4f50a5095b3f2ed81814fb313f29b94afd96cc35d52311d4e66fbe5a66a7c849c674b86bba8808c821a7ec133ecc61f2389eec0664689dbc1ba2c81f9148972c95d0cb272c9779be02c44b4aa252e2ee375d6d2310a12ef1e0ce9a7d4088922ee9640cec46facece5c5ea427dee19bca3952c3c13767de82909abc92edecab3e16c2f24dd9dcef4dec3c336bab497ae04c6d11db505037575b649a68622b45d35244bceb129363434a3bf3602827dce99c0e59b294a5ce1a2bc06e5467e9de31ab426c42fa5e7193d0a2d33c5234a5e9ba2c425db54041e7a1472315f9a5449496cad9a945967875d3549ad348e12403b28a3f6a666f7dc423629ba7a18244477764b8923a6b30fa04a2d6ed22ac8c64924fa2616d43da8a5b3f9cc30b2e29e4fc64b0027c33a8bc39d45feb704f7d2708f1f1bebd0eb13bd08e4049cb7a130847d9e334613a591563d0e207448e689ae5866c36f2503180b53f7a70b68eede9df307e9eb77aa39b12320a84711bdf03109cdc2414fa44478475e4b5a2f628e0cb0475e3e7ebf8fad644d69efb268883e394c46b971e6ca87a67e242f480f2ef7679583d182ab21d2ee026acf80f25b3afacccda853d38f84052cdf2edcfdf0513e1cf39574aa7af1ae53a3e08dbad47aefd14a37b6288c719e9c0737bb4119d7fe3eb350a8ec2fb0fec9b4633aa256d3f52f76423a8891f0a7e67378af5d53af8cf1543883def1c73a1f3c51fde6246dab90ec2b3f59c07a4eb1cefbdf60533cb97c0a555519998f9325630d489b00c6c736e6c768515f38f3a7d3cdb99c54f0e46f5a3aa9f280225cb3c3b33e2ff2aa757a2df467265252397dbd68aa7dca7fb9a8fb77611385995a070a99a7fc9db80ab7653c1c94f9a0ad09c713c39559587d8f886bc2db265ef6099138204e8517fa71aea4c75a8149dae6467d792431e54aecbf0f300dc7f6cc5a28495d77f3a4cd39c78de472ca2ebc95d67258a2e0f27bc9903c5540b9546f47aacd4898a0857e7b2f69125dd4839d788181aa409c40a914afe805aa075035d557bcce6a45e0a81cf3b8541e62e6f9a54fd71797d87b1fc4e0a0786fbd34b0dee8f5f57ef71495271b9f946480adcd2066bbefe000d99470bf92125996cba78276f1463dfbf501de575e597394ad02c484fe6291e56d7362ca402ff0af9582a1dc61dffad77d94da15c1328634b64b172edcd782a769f5fe9dd3a777c69d80a84fe83071c6ef7ae0becfb509b938932738bc7c454b63030ade2877a85897e5abc0cb0a9606e877987b5856d5992f43fba549d950d302b62db8c14a59b0bf58fb5a8f6402d3894c0e5be41348181aee736590383b14e7abb7253e381d24ee4e64dde82f48d3e9bf3e0be0e099b800b3bba1d92fd6a451cddcb9ae29a20b39d1066834e9337ed58defcd20cfd032adce59049fcbfc62ac762bed756475f150e86374cfc973d2d247ec6c347308f4c2618f0dc5f3e5cf363088bd90490f552f017000f376c35af0aadfa776ba9eca3567afb932325f14fa34b42f004b88249276b727bea1b865db9deaa405c9c1e1567cf6198cbf33aa646fe81398a0234d6fd687682bc2fcf052f9e129dd2d68f1154e4ea32e4984ad806b843513e94e994c5df73580587c0c1399ead2477ad7e04c3eb8787a685f86eb58d2d3254bd7f7f5e206aee379cbfa497ce32120e79cacea3c1663050c2f818d324786bcf799e27322f80d0c8cd6f41e9e10f441d331bea07e89a1507947aacdbc07f8af0944f3c228b5ee9ec27b808108aaebe61f1884e1581b19c9c14cfffe2e96c7fe07f6a36116bea130e63db9d1e82fa4ade6bfd6cc72a9654d9bd829c1752d5d640a0b5d555d936b4eb160f2cfee1d92f3a783f2ab33120404045ac7ad20c2ee000abe6b889d7840bd16276d831fae6e1e37c68e3f567934859f7e8a1d7486f6923565ec0f0bb6473f8b8a87a8fd20d11b903c42570bc2d584c2b8743c36c3339998c53fe96b457aae5ec3e38f877dfc9c11e2f597123eea7f75642a0138296c63ed1b1a58753fdc1bc56e9405ab808d420c11e286662034ef471ab7c997ae392c928cff9476d31ffb6df1173bc6b0d1769b5bb58952d839f7297d396bea2bc8a37db8e18236857218e9f5a000a255363baaae8ecd13fcb7a5cb7a3dcadbb96a44e17aa7e8e42ca565d81c31134746b1b5726d86db9d2ba54ce70c7cf2ee0c1df212c3a705154693248ca6b80a5b2d2d101face58c2c01e5382a6b0f1b71f95764f910b7dcdeb2e791f3d17a967d536fbc590f5d3785ff25b6e9039dd1f910fe5782ac9658b2284b7b720cb2fe2569485721422adff4daec78c8491bd1b7534fd38c9030b91b66b280636a2e2edb01f99a4851f77249803fae628dc42f17ab10735338a196507819876a196af3c31a80e95907a8d98c1fa34c03d9073429f9ef63ca753ca48256722ed171f8e43189c4887b35ba481823538b80a304008960fc2f6dd0db0d065eebd3e1fbc4b342cb78075cf5334ae2bd70cbebbc1aecd89a4b1941599207990d453488ed9a246788a3a75a447fb41865b9d8ad5ed928ac29bad4ad7f7a13b29149445cdc4e5024acdd15088a64268fb7960c6c3674741153dd3755126e0d411aa0a7b4abed17c65ddf767c7df110f8f77ba9def3d0a82c445177b3fd7074f6262f0cf4a2d585019dbee516587808021776e7539bce272b82cd53637e9887725f289ed9bb1909ef4a46f7567f3c64cb1f6ab6da2a174ff0c9010358b4da94ea893d55d5d011e3dd86c94839e278f80f84feb905f437df79b9acb64e4516b390d45f2fd68a810554fa147fa00dcc486758da35e645ae2ea865225c4dbb1e268e93d2b24e64328c7e86fc0e126267ee4bf0de60380cfdfddcaf2e6523764ea889bfd836397fc2c56c65dd572a24dff827cefd8d4f40b732d3a1b5353359d8f587376127c9c499a0d97e9f552f6208cceceb8972c19547387bec505acdea0c9bab01cf80020d3717ca488e87e6e3df810af9bf6c22f176c8d130a1c0f12466d53c9d5d54c50f0717efdefac3e53ad90e9f9c7217187195c3911f90d0a8be5e8e4f953b038e0ca529555992ecff480bc4895798530ae8d68a0246ae40070d5c1a16b2b15e8855c195a260865b13b6eb5f941040265973a20af4dcdd4cf4d03a2a215bff70c5b8f25c48c211cdf978240b8e7d4c2778f15c3858a4cda110d1c6e8ae19d83ea015748930a1ff6bae442d67a6cd41354012944a388ff95046b4f8b7676577487aa200c0175d99886dcb50dbc72c0bdc0f41b4ebbf5bc9a8cd67c9624f9afccfff4725e9bb9729306beda2f119dbc2e2cacec52300d6ae0d250b700e2bd7bf6b6d86498a03f3f4ad500134ef581ccdbb3d1cf90fb11562d0e078eb788f4f2e485abd15dd5175d7fc0570d87f3bf6750ab29f37b441aab2a7435f4d8ba0e9e0cff366c1b9706e34985a0ce4ed46e5a2a8390381b77d3391e7fe6e564ddf2aff4cfef7009de8e2bd2bbdf91e5412925b8f5258feeedaf4d73a59842be186c31c34c92ef8a3a7b2c1f4a46dd93c419843530c94e01ede1516744c9100976bb61b25e391fa4b829f9c24204c35910819d0b369b765655332a5582088d918f1e323170551f672d002d73332beac073c651e7d3cb1817a7ac313e7cd847ee0af275ce267914609e6d3db6ab59aaf30ba2ad0e214ad76cd4edef476eb89133084eb8e1147fd5a44a9fde4c06f8df9bcfe0938f8776b83263a315918249fa9beae3153073bffe265758f6d8cf4c07112468ddc7e8911efe97e06aa0a55de6560b69d1d3fce4c3f1132e1ffe10a4b2c3a77295ba1653b9e3da6c1c9028367a890ef1666a4b5701a4b000cbb77cbdef060469f96213d75c0d1cd8aa3ae5024ce5af26fe6219f5970eeccd4b8bc743292cb7df8db34a65ef289c237836ab202fc28d27d9bd260b2bd3678710216bd575689ef030a260eb91cfd9131dfa3327c674b44b97859082a4c07c5da8eb80e0be86e28310a7d8ba75beb4eae4ecc046ce9ce633cd6e3352f0ec93c8b910c60f2900c5efc4ed5d4c3c99faeb475eb3b7c825e4a926870f88936a76e4e4aa2bb19f1bafdc620ce24dc4792d3a34d2b75684560217651b39a782c9b83d3bac7e3747a71ebb90d6348efeba1c13f373af4bd22c0ad425cdcc5aefbaa80a83616f8f7cf7e3c7980e80d947040e7e1ee24ec7a5a58123795c927afc6a2319b6e1903b85601adbdd1a3c1ae80cc6162dc9cf0b65780b075e8f0de53521146a586a81e29a30a50677999c1d70eb1987f7bfb1cc2bd33b45ec8ce9b671863f8f7d0de7796f0420e7525d5d5e16a3b690959008414a535b3ee50091d0e5605e04f5d9d9d50d079dea049cab2071827fc9d14e73c3aed6e314566d4ab834b029e10a3f239dda92a66a690e378154eeddf53ffde9e608afbc37a223266cf0e4c3e4ad89538700d8a781b45d1285eef89da14a66a2b9531e29d21de251f1a4e1895aad67fe9216f81c63ff48e651cf2a65e97bb884b62552a98479b74f48ff9d1759ca9edd4a3eedceb7e2571893c7b4989741e229f0c2700000000180001801400020076657468305f746f5f626f6e64000000"], 0x2040}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r4, &(0x7f0000002180)=""/4101, 0x1005, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x80, 0x80, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x3}, {0x0, 0xffff1000, 0xc, 0x2, 0x3, 0x10, 0x6, 0x0, 0x1, 0x0, 0x4}, {0x8080000, 0x10000, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0xa, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x2, 0x400}, {}, 0xddf8ffdb, 0x0, 0x11111001, 0x100, 0x8, 0x8000, 0x3000, [0x0, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) r6 = socket$kcm(0x10, 0x2, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000002200), 0x80002, 0x0) sendmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848470000005e2f0042180000180e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x9, 0x1, 0x2, 0xc, 0x1c, 0x5}, 0x20) 2.34000969s ago: executing program 3 (id=690): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004400) socket$l2tp6(0xa, 0x2, 0x73) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0xc1205531, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x0, 0x4001}, 0xc) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, 0xffffffffffffffe1) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0xa, 0x1, 0x2, 0x0, 0xfd}) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405668, &(0x7f00000000c0)={0x5, 0x3, 0x1, "0000087aba10fdfffffb05001400", 0x59565955}) capget(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x0, 0xfffffff7, 0x0, 0x6b, 0x8, 0x9}) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r4, &(0x7f0000001b80)=[{&(0x7f0000000440)=""/87, 0x57}, {0x0}], 0x2, 0x0, 0x400) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000100)=0x0) ptrace$setopts(0x6, r5, 0x6, 0x8) 1.186789169s ago: executing program 1 (id=1230): r0 = timerfd_create(0x7, 0x800) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0xfffffffa, 0xb7cb, {0xffffffffffffffff}, {0xee00}, 0x1, 0x8}) syz_pidfd_open(r1, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000003c0)={{}, {0x77359400}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x20000}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x7ff, @private1, 0xeb3}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000100)={r8}, &(0x7f00000001c0)=0x8) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000480)={0x550, 0x78, 0x550, 0xa0, 0x9, 0x1, 0x8, 0x2, {0x8, 0x9}, {0x9, 0x9}, {0x9, 0x6}, {0x4, 0x2303cc82, 0x1}, 0x0, 0x80, 0xffffffff, 0x9, 0x1, 0x200, 0xe4, 0x1, 0x8, 0x4, 0x80000000, 0xffffffff, 0x35, 0x2, 0x2, 0x5}) fstatfs(0xffffffffffffffff, &(0x7f0000000a00)=""/202) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x1f, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x20, 0x80}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f0000000240)) 1.183031131s ago: executing program 2 (id=1231): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000050000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 1.181997408s ago: executing program 4 (id=1232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0x1, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02"], 0x48) read$FUSE(r2, &(0x7f0000000580)={0x2020}, 0x2020) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, 0x0, 0x0, 0x5}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x100000, 0x9) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) remap_file_pages(&(0x7f0000509000/0x1000)=nil, 0x1000, 0x8, 0x3, 0x2000) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000001fc0)=@newqdisc={0x10c0, 0x24, 0x20, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0x887f97af9de19276, 0x12}, {0xe, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @qdisc_kind_options=@q_tbf={{0x8}, {0x106c, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xe708d78077e4cfd3}, @TCA_TBF_PTAB={0x404, 0x3, [0x6b97, 0x7f, 0x3, 0x5, 0xffffff3a, 0xfff, 0x2, 0xfffff801, 0x0, 0x5, 0x7f, 0x20, 0xc0000, 0x0, 0x6, 0xcd2, 0xfff, 0x3, 0xe94b, 0x4, 0x3, 0x3bba, 0x6, 0x4, 0x8, 0x2, 0x0, 0x7, 0x1, 0xff, 0xa0c, 0x4, 0x4, 0x7fff, 0x1, 0x0, 0x4, 0x3ff, 0xb5, 0x9, 0x7, 0x9, 0x10, 0x5, 0x81, 0x4, 0x6, 0x4, 0x6, 0x8, 0x5, 0x5, 0x1, 0xa2, 0xf, 0x9, 0x400, 0x8, 0x2, 0x6, 0xad, 0x8001, 0x400, 0x7, 0x7, 0x1e, 0x800, 0xffffffff, 0x9, 0x101, 0x5, 0x5, 0x66, 0x7, 0x5, 0xffff, 0x5, 0xffffffff, 0xb, 0x7f, 0x3, 0x4, 0x8, 0x2, 0x5, 0xfff, 0x3, 0x7, 0x0, 0x7, 0x7, 0x1, 0x2, 0x2, 0x0, 0x9, 0x5, 0x100, 0x36, 0x3, 0x6, 0x0, 0x8, 0x4, 0x6, 0x5, 0x0, 0x7, 0x7, 0x48000, 0x9, 0xb, 0x6d81, 0x0, 0x0, 0x9, 0x914, 0x4, 0x8000, 0x6, 0x0, 0x2, 0x7, 0x2, 0x2, 0x644, 0x6b0, 0x8, 0x6, 0x0, 0x1, 0x3, 0xd, 0x5, 0x1, 0x3, 0x2000, 0x97, 0x3, 0xa2, 0x1, 0x0, 0x3, 0xc, 0x1, 0x7, 0x9, 0x5, 0xfffffffc, 0x10000, 0x7, 0x4000, 0x0, 0xb658, 0xfffffffc, 0xdd, 0x6edb, 0x1, 0x0, 0x6, 0x7, 0x10001, 0x80000001, 0x9, 0x90, 0x1, 0xfffffffa, 0x5, 0x7f, 0x0, 0xa3, 0x10001, 0x6, 0x7, 0x4, 0x2, 0x5, 0x120, 0x10000, 0x9, 0x40, 0x5e, 0x4, 0x8ee0, 0x8, 0xa, 0x80000000, 0x0, 0x40, 0x4, 0x4, 0x7, 0x0, 0xfafe, 0x6, 0x5, 0x0, 0x36df1a46, 0x7, 0x2, 0x7f, 0x5, 0x1, 0x5, 0x3, 0x5be8, 0x9491, 0x2, 0x5, 0x8, 0xb5, 0x7fffffff, 0x0, 0x2b, 0x0, 0x3, 0x9, 0x8, 0x0, 0x81, 0xe, 0x8, 0x4, 0x2000000, 0x4, 0x4, 0x7, 0x1, 0x8, 0xe7, 0x1, 0x80000001, 0x8, 0x7, 0x9b, 0x38ac, 0x5, 0x3, 0x80, 0x1, 0x4, 0x5, 0xffffff80, 0x2, 0x100, 0x7, 0x116d, 0x7f, 0x8, 0x1ffc0000, 0x8, 0x8, 0x9, 0x25b93dc, 0x7, 0x6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x26, 0x1, 0x9, 0x7, 0x9, 0x1}, {0x8, 0x1, 0x4, 0x2, 0x4, 0xd3}, 0x4, 0x8, 0x1ac}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xccfadf379f72c138}, @TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x7fffffff, 0x1, 0x148a, 0x8001, 0x2, 0xff, 0xf816, 0xfffffffa, 0x4, 0x6, 0x5, 0x3, 0x3, 0x0, 0xb, 0x8c6c, 0x7, 0x5, 0x200, 0x0, 0x10000, 0x200, 0x401, 0xe, 0x4, 0x3ff, 0x10001, 0x7, 0x8000, 0x3, 0x1, 0x4, 0x401, 0x1, 0x2, 0x8ad0, 0xfffffbff, 0x1, 0xfffffffc, 0x6, 0x9, 0x82, 0x4c9, 0x401, 0x7, 0x8, 0xce6, 0x4, 0x0, 0x3, 0xdd, 0x4, 0x2, 0x9, 0x3, 0x2, 0xfffffff8, 0xffffffff, 0x4, 0x40, 0x0, 0xb0, 0x0, 0x1, 0x909, 0x0, 0x3, 0x7ac, 0x6, 0x5, 0xfe, 0x6, 0x2, 0xcf, 0x100, 0x3, 0x81, 0xf, 0x4, 0xfffffffd, 0x1000, 0x0, 0x6, 0x4, 0x8, 0x2607, 0x8, 0x0, 0xa6d, 0x2, 0x5e, 0xebd, 0x10000, 0x10000, 0xf0fad1cf, 0x1, 0xfff, 0x0, 0xffffffff, 0xfffffff9, 0x1, 0x9, 0x6, 0xfffffff8, 0x401, 0x7fffffff, 0x4, 0x80, 0xb, 0xf, 0x18, 0x6, 0x7fffffff, 0x1, 0xbf, 0x8, 0x6, 0x6, 0x400, 0xa, 0x4, 0x8, 0x2d2, 0x5, 0xf, 0xe5, 0x6, 0x3, 0x768, 0x8, 0x0, 0x6, 0x7, 0xc54f, 0xee, 0x8, 0x1, 0x10, 0x8000, 0x8001, 0x4, 0x7df, 0x7f, 0xfffffffc, 0x8, 0x9, 0x0, 0x0, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x8a5a, 0x10000, 0x40000, 0x7fffffff, 0x81, 0xaf78, 0xc, 0x91be, 0x5c6, 0x7, 0x6, 0x8, 0xe6, 0x3, 0xa654, 0x5, 0x7, 0x21, 0x1ff, 0xff, 0x1, 0x7, 0x0, 0xfd5, 0x10000, 0x7, 0x9, 0x8, 0xf4, 0x0, 0x8, 0x0, 0xd, 0x6b, 0x4, 0x2, 0x5, 0x8, 0x80000000, 0x9, 0xab0a, 0x8, 0x4, 0x6, 0x770e, 0x4c94, 0xffff, 0x8, 0x3, 0x80000000, 0x3, 0xcde, 0xc, 0xd, 0xffffffff, 0x5, 0xc75e, 0x4, 0xa, 0x101, 0x4, 0x1e3, 0xa85a, 0x7fff, 0x5, 0x5, 0x1, 0x5, 0x1, 0x2, 0x4, 0x0, 0x0, 0x4, 0x7ff, 0x9, 0x3ff, 0x3, 0x8fa, 0x4, 0x7ff, 0xb, 0x8c, 0x1, 0xfffe0, 0x7, 0x1, 0x6, 0x2, 0x5, 0xffe8, 0x575ae617, 0x0, 0x2b, 0x1, 0x7, 0x0, 0x4, 0x4, 0xd, 0x80000001, 0x3]}, @TCA_TBF_RTAB={0x404, 0x2, [0x1000, 0x0, 0x7, 0x4, 0x10000, 0x4, 0xaca, 0x4, 0x88, 0x1, 0x9, 0x400, 0x3, 0x1, 0x3, 0x4, 0x3, 0x7, 0x0, 0x80, 0x8001, 0x0, 0xfffffff9, 0x5, 0x2, 0x401, 0x10004, 0x4, 0x81, 0x6, 0x9, 0xc8, 0x9, 0x4, 0x6, 0xff, 0x1ff, 0xffffff01, 0x4, 0xa21, 0x9, 0x3, 0x10001, 0x1, 0x4, 0x3d9, 0x3, 0xc2, 0x9, 0x5, 0x5, 0x8, 0x5, 0x57087658, 0xa, 0x5, 0x3, 0xf, 0x9, 0xffff, 0x5, 0x4, 0x200, 0x1, 0x9a, 0x9, 0x2, 0xffff0c6c, 0xffffffff, 0x3, 0x2, 0x2, 0x3, 0x9, 0x7, 0x6, 0x1, 0x58d, 0x7, 0x10000, 0x1, 0x0, 0x2, 0x1, 0x2, 0x0, 0x6, 0x5, 0x2da4, 0x9, 0x4, 0x10000, 0xb, 0x4, 0x7, 0x4, 0x3, 0xc, 0x2, 0x2, 0x0, 0xffff, 0xde, 0x9, 0x5, 0x29, 0x800, 0x3, 0xe9de, 0xffff, 0x80000000, 0xb7ba, 0xac, 0x6, 0x29, 0x4, 0x1, 0xf2d, 0x2, 0x800, 0x2000ff, 0x1, 0x66be, 0x8, 0x9, 0x3, 0xdb, 0xff, 0x40, 0x9, 0x4, 0x1, 0x0, 0x9, 0x8001, 0x400, 0xfffffffb, 0x80, 0x6, 0x1000000, 0x7, 0x7f, 0x0, 0x400, 0x1, 0x0, 0x2c7, 0x9, 0xcb43, 0x8000, 0xba3, 0x8, 0x9bd, 0x6, 0x0, 0xffff, 0x5, 0x800, 0x401, 0xffff, 0x6, 0x0, 0x8, 0x1000, 0x5, 0x1, 0x5, 0xfffffff7, 0x7, 0xfff, 0x2b7, 0x5, 0x0, 0x1, 0x1000, 0x1, 0xa800, 0xffff, 0x6c, 0x2, 0x4, 0x1, 0x3, 0x101, 0x6, 0x6, 0x2a0e3b8f, 0x7, 0x6, 0x7ff, 0x8, 0xc66, 0x1, 0x6, 0x3f9e, 0xb, 0x22f, 0xa, 0xde8, 0x42bffd08, 0x4, 0x81, 0x40, 0x5, 0x10, 0x8000, 0xfffffba8, 0x8, 0x401, 0x5, 0x4, 0x3ff, 0x6, 0x0, 0x1, 0x1, 0xfffff001, 0x5, 0x5, 0x7, 0x2, 0x9, 0x9, 0xc0, 0x3, 0x101, 0x6, 0x2, 0x1, 0x2, 0x1, 0x80000000, 0x8, 0x7fffffff, 0x0, 0x10, 0x0, 0xcd95, 0x4, 0x4, 0x1071, 0x6, 0xe, 0x0, 0x3, 0x2, 0x7ff, 0x1, 0x4, 0x0, 0x40, 0x5, 0xe, 0x3, 0x0, 0xffff8001]}, @TCA_TBF_BURST={0x8, 0x6, 0x6}, @TCA_TBF_PBURST={0x8, 0x7, 0x1470}, @TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x51ec, 0x5, 0x8001, 0xfffffffe, 0x5, 0x3, 0x0, 0xde3145, 0x1, 0x101, 0x3456, 0x8, 0x8001, 0xff, 0x9, 0x5, 0x0, 0x6, 0xe, 0x9, 0x8000, 0xfffffffb, 0x0, 0x7, 0xe31, 0x7d, 0x3, 0x9, 0x80, 0x2, 0x101, 0x6000, 0x7, 0x10, 0x5, 0x6, 0x3, 0x3, 0x7, 0x4, 0x4, 0xffff, 0x4, 0xad2d, 0x1, 0x6, 0xffffffff, 0x7fffffff, 0x0, 0x0, 0xaab, 0x4, 0x4, 0x7, 0x7f, 0x6, 0x7fff, 0x2, 0xbf, 0x7, 0x4, 0x8, 0x7, 0x8, 0x10001, 0x2, 0x5, 0x5, 0x1, 0x4, 0xaf, 0x40, 0x4, 0x4, 0x0, 0x7, 0x1, 0x4, 0x3, 0x3, 0x15b0, 0x2, 0xa, 0x3f4, 0xe, 0x1, 0x9, 0xc0, 0x8, 0xfffff192, 0xe36, 0x80000000, 0x1, 0x4, 0x8, 0x4, 0x0, 0x4, 0x3, 0x80000000, 0x0, 0x5, 0x8, 0xfffffff7, 0xfffffe80, 0x9bb, 0x10, 0xfffffff7, 0x8000, 0x7, 0x1, 0x8, 0x80000000, 0x2, 0x3, 0x2, 0x5d, 0xc9, 0x9, 0xb4, 0x6, 0x1, 0x6, 0x68, 0x4, 0x6, 0xb, 0xb, 0xb, 0xffffffff, 0xa, 0x29d6, 0x3, 0x5, 0x48d, 0x2, 0x5, 0x7, 0x7, 0x968a9e70, 0x1, 0x6, 0x10000, 0x1, 0xe762, 0x401, 0x4, 0xadd, 0xc03, 0x5, 0x5, 0x1, 0x2, 0x401, 0x6, 0x7, 0x9, 0x1000, 0x7, 0x7, 0x80000001, 0xdf, 0xffffa8c3, 0x7, 0x3, 0xc, 0x4, 0x1000, 0x9ae, 0x5, 0x7, 0x2, 0x10, 0xff, 0x3, 0x8, 0x4, 0x7fffffff, 0x6, 0xd, 0x1, 0x1, 0x8, 0x7, 0x80000001, 0x404, 0x10000, 0xfffffff9, 0x822, 0x4, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x7, 0x5, 0x1, 0xa, 0x7ff, 0xff, 0x4, 0x6, 0x4, 0xe079, 0xd1, 0x1, 0x8, 0x5, 0xc2e, 0x6, 0x400, 0x2, 0x5, 0xc505, 0x6, 0x8, 0x9e7, 0x0, 0xfffff46c, 0x80000000, 0x7, 0x603, 0x4, 0x23, 0xc0b, 0x1, 0x5, 0x1, 0x4, 0xcfd, 0x2, 0x800, 0x7, 0x2, 0x0, 0x3, 0x2, 0x715, 0xa, 0x5, 0x8, 0x8, 0x9, 0xe0, 0x6, 0x5, 0xf, 0x9963, 0xb, 0xecf0, 0x244, 0x0, 0x0, 0x9f14]}, @TCA_TBF_PBURST={0x8, 0x7, 0x1e9f}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x9}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_RATE={0x6, 0x5, {0x7, 0x8}}]}, 0x10c0}, 0x1, 0x0, 0x0, 0x4000}, 0x44810) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}, 0xe00}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.073952322s ago: executing program 2 (id=1233): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40091}, 0xb0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40091}, 0xb0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c0102030119021b0001010000000904690201ff5aa300090582024000000000"], 0x0) (async) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c0102030119021b0001010000000904690201ff5aa300090582024000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) syz_io_uring_setup(0x2de0, &(0x7f0000000300)={0x0, 0x1357, 0x2, 0x0, 0x2db, 0x0, r3}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r3}) getpgrp(0x0) (async) r6 = getpgrp(0x0) lstat(&(0x7f0000005300)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002900)='./file0\x00', &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000029c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000029c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) r11 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fcntl$setown(r11, 0x8, 0x0) (async) fcntl$setown(r11, 0x8, 0x0) fcntl$getown(r11, 0x9) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setuid(r12) (async) setuid(r12) read$FUSE(r0, &(0x7f0000002b40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fstat(r0, &(0x7f0000004c40)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000004cc0)='./file0\x00', 0x2000, 0x10, &(0x7f0000004d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000004f00)='./file0\x00', 0x800, 0x10, &(0x7f0000004f40)) (async) statx(0xffffffffffffff9c, &(0x7f0000004f00)='./file0\x00', 0x800, 0x10, &(0x7f0000004f40)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000000900)="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", 0x2000, &(0x7f0000005240)={&(0x7f0000000400)={0x50, 0x0, 0x9, {0x7, 0x2b, 0xfffffffc, 0x400, 0x101, 0x0, 0xff, 0x6, 0x0, 0x0, 0x2, 0x401}}, &(0x7f0000000380)={0x18, 0x0, 0x7fffffffffffffff, {0x4}}, &(0x7f0000000480)={0x18, 0xfffffffffffffff5, 0x5, {0x2}}, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x1, {0x7}}, &(0x7f0000000500)={0x18, 0x0, 0x80000000, {0x2}}, &(0x7f0000000540)={0x28, 0xfffffffffffffffe, 0x6ae8, {{0x7, 0x7, 0x1, r6}}}, &(0x7f0000000580)={0x60, 0x0, 0x4, {{0x8, 0x4, 0x7, 0x0, 0x39cf, 0x4, 0x6, 0x2}}}, &(0x7f00000006c0)={0x18, 0x0, 0x9, {0xffff}}, &(0x7f00000002c0)=ANY=[@ANYBLOB="150000000000005b2f232c00376bda83e04d40cc3a78eb0a131033ccfbcedaa8584574f3d9b0a00e34632275bd174bcb920f"], &(0x7f0000000740)={0x20, 0xfffffffffffffffe, 0xffff}, &(0x7f0000000840)={0x78, 0x0, 0x80000001, {0x0, 0xe16, 0x0, {0x0, 0x5, 0x3, 0x0, 0xfff, 0x8, 0x2, 0x8, 0xbcf, 0xc000, 0x6, 0xee00, r7, 0x725d, 0x3}}}, &(0x7f0000002a00)={0x90, 0x0, 0xbd, {0x5, 0x3, 0xd, 0xb812, 0x2, 0x2, {0x6, 0x7, 0x2, 0xe, 0x2, 0xffffffffffffffff, 0x5, 0x1, 0x7f, 0x1000, 0x4, r8, r10, 0x80, 0x8}}}, &(0x7f0000002ac0)=ANY=[@ANYRES16=r9], &(0x7f0000004b80)={0xb0, 0xfffffffffffffffe, 0xffbfffffffffffff, [{{0x6, 0x1, 0x0, 0x7f, 0x0, 0x7, {0x4, 0xffffffffffffffa6, 0x9, 0xb7ad, 0x2, 0xd, 0x1271, 0x7, 0x7, 0xc000, 0x3, r12, r13, 0x9, 0x30}}, {0x2, 0x6, 0x5, 0x3, '#H[@$'}}]}, &(0x7f0000004e00)={0xa0, 0x0, 0x4b, {{0x4, 0x1, 0x3, 0x5, 0x2c18075d, 0x74a8, {0x4, 0x7ff, 0x1, 0x44, 0x1, 0x2, 0x7, 0xe3a62af, 0x7, 0x3893d6995bd342c6, 0x9, r14, r15, 0x7fff, 0x151c}}, {0x0, 0xa}}}, &(0x7f0000004ec0)={0x20, 0x0, 0x8001, {0x7, 0x4, 0x5, 0x5}}, &(0x7f0000005100)={0x130, 0x0, 0x7, {0x7ffb, 0x7, 0x0, '\x00', {0x1, 0x4fe, 0x8001, 0x1ff, r16, r17, 0xa000, '\x00', 0x76, 0x40, 0x33, 0x1, {0x1, 0x3ff}, {0x9fa7, 0x5}, {0x80, 0x452}, {0x9, 0x5}, 0x200, 0x4d, 0x5}}}}) (async) syz_fuse_handle_req(r3, &(0x7f0000000900)="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", 0x2000, &(0x7f0000005240)={&(0x7f0000000400)={0x50, 0x0, 0x9, {0x7, 0x2b, 0xfffffffc, 0x400, 0x101, 0x0, 0xff, 0x6, 0x0, 0x0, 0x2, 0x401}}, &(0x7f0000000380)={0x18, 0x0, 0x7fffffffffffffff, {0x4}}, &(0x7f0000000480)={0x18, 0xfffffffffffffff5, 0x5, {0x2}}, &(0x7f00000004c0)={0x18, 0xfffffffffffffff5, 0x1, {0x7}}, &(0x7f0000000500)={0x18, 0x0, 0x80000000, {0x2}}, &(0x7f0000000540)={0x28, 0xfffffffffffffffe, 0x6ae8, {{0x7, 0x7, 0x1, r6}}}, &(0x7f0000000580)={0x60, 0x0, 0x4, {{0x8, 0x4, 0x7, 0x0, 0x39cf, 0x4, 0x6, 0x2}}}, &(0x7f00000006c0)={0x18, 0x0, 0x9, {0xffff}}, &(0x7f00000002c0)=ANY=[@ANYBLOB="150000000000005b2f232c00376bda83e04d40cc3a78eb0a131033ccfbcedaa8584574f3d9b0a00e34632275bd174bcb920f"], &(0x7f0000000740)={0x20, 0xfffffffffffffffe, 0xffff}, &(0x7f0000000840)={0x78, 0x0, 0x80000001, {0x0, 0xe16, 0x0, {0x0, 0x5, 0x3, 0x0, 0xfff, 0x8, 0x2, 0x8, 0xbcf, 0xc000, 0x6, 0xee00, r7, 0x725d, 0x3}}}, &(0x7f0000002a00)={0x90, 0x0, 0xbd, {0x5, 0x3, 0xd, 0xb812, 0x2, 0x2, {0x6, 0x7, 0x2, 0xe, 0x2, 0xffffffffffffffff, 0x5, 0x1, 0x7f, 0x1000, 0x4, r8, r10, 0x80, 0x8}}}, &(0x7f0000002ac0)=ANY=[@ANYRES16=r9], &(0x7f0000004b80)={0xb0, 0xfffffffffffffffe, 0xffbfffffffffffff, [{{0x6, 0x1, 0x0, 0x7f, 0x0, 0x7, {0x4, 0xffffffffffffffa6, 0x9, 0xb7ad, 0x2, 0xd, 0x1271, 0x7, 0x7, 0xc000, 0x3, r12, r13, 0x9, 0x30}}, {0x2, 0x6, 0x5, 0x3, '#H[@$'}}]}, &(0x7f0000004e00)={0xa0, 0x0, 0x4b, {{0x4, 0x1, 0x3, 0x5, 0x2c18075d, 0x74a8, {0x4, 0x7ff, 0x1, 0x44, 0x1, 0x2, 0x7, 0xe3a62af, 0x7, 0x3893d6995bd342c6, 0x9, r14, r15, 0x7fff, 0x151c}}, {0x0, 0xa}}}, &(0x7f0000004ec0)={0x20, 0x0, 0x8001, {0x7, 0x4, 0x5, 0x5}}, &(0x7f0000005100)={0x130, 0x0, 0x7, {0x7ffb, 0x7, 0x0, '\x00', {0x1, 0x4fe, 0x8001, 0x1ff, r16, r17, 0xa000, '\x00', 0x76, 0x40, 0x33, 0x1, {0x1, 0x3ff}, {0x9fa7, 0x5}, {0x80, 0x452}, {0x9, 0x5}, 0x200, 0x4d, 0x5}}}}) r18 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) r19 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000008c0)='contention_end\x00', r19}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000008c0)='contention_end\x00', r19}, 0x18) r20 = ioctl$KVM_CREATE_VM(r18, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r20, 0xc048aec8, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 0xfffffffe}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r1, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 724.036632ms ago: executing program 2 (id=1234): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x200, 0x70bd2e, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0x0, 0x10}, {0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xc2}}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x101}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c010}, 0x8004) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x44) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x34, 0x1d, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\xe8'}, @typed={0x15, 0x2, 0x0, 0x0, @str='\xbe\xb6/0 \xe35\x90*\x16\xb4\xa0\xa1\xc6\xf7o\x00'}]}, 0x34}}, 0x0) write$nci(r0, 0x0, 0x0) 663.235601ms ago: executing program 0 (id=1235): sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000280), 0x932, 0x204000) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="2015323fcd64"], 0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) 261.46615ms ago: executing program 1 (id=1236): io_setup(0x6, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x800) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f00000001c0)=0x3) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000a518230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x41, 0x1, 0x200000000000008, 0x9, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200002000000000000000000000008500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r11, 0x0, 0xe, 0x0, &(0x7f0000000740)="6fd92f5c3fbecb0c72abdb823b15", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010700000000fcdbdf25670000001e000300", @ANYRES32=r9, @ANYBLOB="0c009900080000002c000000"], 0x28}}, 0x40) 57.419859ms ago: executing program 4 (id=1237): r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x2000c054) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) modify_ldt$write2(0x11, &(0x7f0000000400)={0x2, 0x20001000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000080)={0x101, 0xffffffffffffffff, 0x4000, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1}, 0x10) 0s ago: executing program 0 (id=1238): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000018c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1846, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x80}}}}}]}}]}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0xfffffffe, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x34, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x4, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x20, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x0, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x6, 0x9, 0x3, 0x9, 0x2, 0x4, 0x7ffe, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x4c31, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0x9, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x7c, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000100010004"], 0x408100) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="290028bd7000ffdbdf250f00000008000300", @ANYRES32=r9, @ANYBLOB="050035"], 0x2c}, 0x1, 0x0, 0x0, 0x24000}, 0x4) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c3d9bcf20331e97599546e1d785f6f4607eea14eaa43d0cd6659e623f8ea71a47ad5c7b3c4f1f99ddcb459d35378e0ea349f044f060715843d8758dfe2b4607f0817066d1ed2b0897c3b9c93b78f84133e02b46e74f7bb6a9106886ef75b9dd0333e746f8631a87ba22103c38ef022ef7839013efa886be635886c1ff36f0c0d196cd746e", @ANYRES16=r12, @ANYBLOB="010000000000fcdbdf2524000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r10, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r13, 0x30, 0x0, @ib={0x1b, 0x0, 0xffffffff, {}, 0x8, 0x5}}}, 0x90) kernel console output (not intermixed with test programs): device disconnected [ 285.947067][ T6139] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 286.395602][ T6139] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.450245][ T6139] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 286.460394][ T30] audit: type=1800 audit(2000000400.027:2052): pid=9546 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.825" name="bus" dev="overlay" ino=1039 res=0 errno=0 [ 286.627188][ T6139] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 286.667569][ T6139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.692719][ T6139] usb 3-1: Product: syz [ 286.705372][ T6139] usb 3-1: Manufacturer: syz [ 286.721101][ T6139] usb 3-1: SerialNumber: syz [ 286.837164][ T6139] cdc_mbim 3-1:1.0: skipping garbage [ 287.049405][ T9542] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 287.117660][ T9551] comedi: No check for data length of config insn id 2311 is implemented [ 287.157845][ T8667] bridge_slave_1: left allmulticast mode [ 287.177435][ T8667] bridge_slave_1: left promiscuous mode [ 287.184828][ T9551] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 287.204148][ T9554] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 287.223810][ T8667] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.231693][ T9551] comedi: Assuming n=57942 is correct [ 287.254652][ T8667] bridge_slave_0: left allmulticast mode [ 287.405323][ T8667] bridge_slave_0: left promiscuous mode [ 287.410263][ T5829] Bluetooth: hci4: command 0x041b tx timeout [ 287.411847][ T8667] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.246424][ T9582] netlink: 116 bytes leftover after parsing attributes in process `syz.0.832'. [ 288.255089][ T9581] IPVS: set_ctl: invalid protocol: 43 172.20.20.61:20000 [ 288.410745][ T9591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.433827][ T9591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.684391][ T5941] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 289.226527][ T5941] usb 2-1: device descriptor read/64, error -71 [ 289.283101][ T6139] cdc_mbim 3-1:1.0: bind() failure [ 289.294795][ T6139] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 289.320988][ T6139] cdc_ncm 3-1:1.1: bind() failure [ 289.358264][ T6139] usb 3-1: USB disconnect, device number 30 [ 289.468422][ T8667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.477375][ T5829] Bluetooth: hci4: command 0x041b tx timeout [ 289.490093][ T8667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.501099][ T8667] bond0 (unregistering): Released all slaves [ 289.511037][ T5941] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 289.526790][ T9527] chnl_net:caif_netlink_parms(): no params data found [ 289.533832][ T30] audit: type=1400 audit(2000000403.157:2053): avc: denied { name_connect } for pid=9603 comm="syz.4.838" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 289.681133][ T5941] usb 2-1: device descriptor read/64, error -71 [ 289.771106][ T6139] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 289.790650][ T9527] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.801434][ T9527] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.809126][ T9527] bridge_slave_0: entered allmulticast mode [ 289.809628][ T5941] usb usb2-port1: attempt power cycle [ 289.817950][ T9527] bridge_slave_0: entered promiscuous mode [ 289.830209][ T9527] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.837531][ T9527] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.844915][ T9527] bridge_slave_1: entered allmulticast mode [ 289.853113][ T9527] bridge_slave_1: entered promiscuous mode [ 289.917405][ T9527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.929751][ T9527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.944440][ T6139] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.964538][ T6139] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 289.974113][ T6139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.006712][ T6139] usb 3-1: config 0 descriptor?? [ 290.025967][ T6139] pwc: Askey VC010 type 2 USB webcam detected. [ 290.035119][ T8667] hsr_slave_0: left promiscuous mode [ 290.053197][ T8667] hsr_slave_1: left promiscuous mode [ 290.060180][ T8667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.081786][ T8667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.091531][ T8667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.098987][ T8667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.141834][ T8667] veth1_macvtap: left promiscuous mode [ 290.147487][ T8667] veth0_macvtap: left promiscuous mode [ 290.159536][ T8667] veth1_vlan: left promiscuous mode [ 290.171091][ T8667] veth0_vlan: left promiscuous mode [ 290.195151][ T5941] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 290.224676][ T5941] usb 2-1: device descriptor read/8, error -71 [ 290.425858][ T6139] pwc: recv_control_msg error -32 req 02 val 2b00 [ 290.553149][ T5941] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 290.591197][ T5941] usb 2-1: device descriptor read/8, error -71 [ 290.643444][ T6139] pwc: recv_control_msg error -71 req 02 val 2c00 [ 290.651835][ T6139] pwc: recv_control_msg error -71 req 04 val 1000 [ 290.669865][ T6139] pwc: recv_control_msg error -71 req 04 val 1300 [ 290.684876][ T6139] pwc: recv_control_msg error -71 req 04 val 1400 [ 290.696240][ T6139] pwc: recv_control_msg error -71 req 02 val 2000 [ 290.703117][ T5941] usb usb2-port1: unable to enumerate USB device [ 290.709601][ T6139] pwc: recv_control_msg error -71 req 02 val 2100 [ 290.717071][ T6139] pwc: recv_control_msg error -71 req 04 val 1500 [ 290.724220][ T6139] pwc: recv_control_msg error -71 req 02 val 2500 [ 290.731130][ T6139] pwc: recv_control_msg error -71 req 02 val 2400 [ 290.750793][ T6139] pwc: recv_control_msg error -71 req 02 val 2600 [ 290.767946][ T6139] pwc: recv_control_msg error -71 req 02 val 2900 [ 290.786048][ T6139] pwc: recv_control_msg error -71 req 02 val 2800 [ 290.804862][ T6139] pwc: recv_control_msg error -71 req 04 val 1100 [ 290.828599][ T6139] pwc: recv_control_msg error -71 req 04 val 1200 [ 290.844517][ T6139] pwc: Registered as video103. [ 290.864457][ T6139] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 291.004610][ T8667] team0 (unregistering): Port device team_slave_1 removed [ 291.058490][ T6139] usb 3-1: USB disconnect, device number 31 [ 291.268658][ T8667] team0 (unregistering): Port device team_slave_0 removed [ 291.589274][ T5829] Bluetooth: hci4: command 0x041b tx timeout [ 292.575838][ T9527] team0: Port device team_slave_0 added [ 292.649880][ T9527] team0: Port device team_slave_1 added [ 292.689197][ T9651] netlink: 48 bytes leftover after parsing attributes in process `syz.1.846'. [ 292.816105][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'. [ 292.901411][ T9527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.911540][ T9527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.941262][ T9527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.965580][ T9658] dummy0: entered promiscuous mode [ 292.982396][ T9658] dummy0: left promiscuous mode [ 293.008973][ T9527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.052588][ T9527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.098946][ T9527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.280907][ T30] audit: type=1400 audit(2000000406.907:2054): avc: denied { read } for pid=9669 comm="syz.0.850" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 293.282930][ T9667] netlink: 76 bytes leftover after parsing attributes in process `syz.2.849'. [ 293.334881][ T9527] hsr_slave_0: entered promiscuous mode [ 293.344852][ T9527] hsr_slave_1: entered promiscuous mode [ 293.364292][ T9527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.374307][ T30] audit: type=1400 audit(2000000406.907:2055): avc: denied { open } for pid=9669 comm="syz.0.850" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 293.381235][ T9527] Cannot create hsr debugfs directory [ 293.481001][ T975] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 293.620987][ T5829] Bluetooth: hci4: command 0x041b tx timeout [ 293.636898][ T975] usb 2-1: Using ep0 maxpacket: 16 [ 293.675647][ T975] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.726651][ T975] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 293.766910][ T975] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 293.789086][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.816136][ T975] usb 2-1: config 0 descriptor?? [ 293.858521][ T975] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18 [ 294.017158][ T9706] netlink: 36 bytes leftover after parsing attributes in process `syz.0.856'. [ 294.689367][ T9717] ceph: No mds server is up or the cluster is laggy [ 294.704389][ T55] libceph: connect (1)[c::]:6789 error -101 [ 294.748401][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 294.924142][ T9527] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 294.934016][ T9527] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 294.959923][ T9527] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 294.974801][ T9527] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 295.081335][ T9527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.114435][ T9527] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.169553][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.176809][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.200024][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.207264][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.490968][ T30] audit: type=1400 audit(2000000409.117:2056): avc: denied { setopt } for pid=9746 comm="syz.4.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 295.588372][ T9748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.864'. [ 295.620743][ T9527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.702979][ T5829] Bluetooth: hci4: command 0x041b tx timeout [ 295.732379][ T9527] veth0_vlan: entered promiscuous mode [ 295.743892][ T9527] veth1_vlan: entered promiscuous mode [ 295.770285][ T9527] veth0_macvtap: entered promiscuous mode [ 295.789728][ T9527] veth1_macvtap: entered promiscuous mode [ 295.813931][ T9527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.843657][ T9527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.868655][ T9527] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.878580][ T9527] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.907932][ T9527] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.920885][ T9527] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.067040][ T8667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.078549][ T8667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.129073][ T8667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.151231][ T8667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.303963][ T5185] bcm5974 2-1:0.0: could not read from device [ 296.383341][ T5185] bcm5974 2-1:0.0: could not read from device [ 296.389844][ T975] usb 2-1: USB disconnect, device number 36 [ 296.566471][ T30] audit: type=1400 audit(2000000410.197:2057): avc: denied { listen } for pid=9766 comm="syz.2.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 297.003050][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.868'. [ 297.103075][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.868'. [ 298.448442][ T9807] netlink: 'syz.1.873': attribute type 1 has an invalid length. [ 298.630744][ T30] audit: type=1400 audit(2000000412.257:2058): avc: denied { mounton } for pid=9810 comm="syz.2.874" path="/proc/679/cgroup" dev="proc" ino=27291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 298.713602][ T9812] xt_limit: Overflow, try lower: 687865856/40 [ 298.736048][ T6822] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.921806][ T9808] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 298.947204][ T9816] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 298.976518][ T9816] bond1 (unregistering): Released all slaves [ 299.630279][ T9842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9842 comm=syz.2.876 [ 299.650416][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.876'. [ 299.782139][ T9843] veth0_vlan: left promiscuous mode [ 299.792329][ T9843] veth0_vlan: entered promiscuous mode [ 300.236691][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.246987][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.255290][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.271120][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.281479][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.300478][ T9853] xt_socket: unknown flags 0x58 [ 300.325160][ T9853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.878'. [ 300.412416][ T9853] netlink: 'syz.4.878': attribute type 1 has an invalid length. [ 300.425665][ T6822] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.608656][ T9853] netlink: 16 bytes leftover after parsing attributes in process `syz.4.878'. [ 301.495857][ T6822] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.685528][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.882'. [ 301.744696][ T30] audit: type=1400 audit(2000000415.377:2059): avc: denied { write } for pid=9874 comm="syz.2.882" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 301.772714][ T9879] netlink: 28 bytes leftover after parsing attributes in process `syz.2.882'. [ 301.893177][ T9881] netlink: 28 bytes leftover after parsing attributes in process `syz.2.882'. [ 301.894376][ T30] audit: type=1400 audit(2000000415.397:2060): avc: denied { open } for pid=9874 comm="syz.2.882" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 301.935436][ T30] audit: type=1400 audit(2000000415.407:2061): avc: denied { ioctl } for pid=9874 comm="syz.2.882" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 301.968770][ T30] audit: type=1400 audit(2000000415.597:2062): avc: denied { setopt } for pid=9876 comm="syz.4.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 302.058001][ T6822] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.355639][ T5829] Bluetooth: hci4: command tx timeout [ 303.270708][ T9902] bond2: entered promiscuous mode [ 303.283383][ T9902] bond2: entered allmulticast mode [ 303.342965][ T9902] 8021q: adding VLAN 0 to HW filter on device bond2 [ 303.406404][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.886'. [ 304.222415][ T30] audit: type=1400 audit(2000000416.917:2063): avc: denied { mount } for pid=9904 comm="syz.2.887" name="/" dev="ramfs" ino=28267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 304.471793][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888031630000: rx timeout, send abort [ 304.597152][ T5829] Bluetooth: hci4: command tx timeout [ 304.693397][ T30] audit: type=1400 audit(2000000418.327:2064): avc: denied { write } for pid=9912 comm="syz.1.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 305.088152][ T9850] chnl_net:caif_netlink_parms(): no params data found [ 305.124720][ T55] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 305.340115][ T9935] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 305.353684][ T9935] Error validating options; rc = [-22] [ 305.736681][ T30] audit: type=1400 audit(2000000419.367:2065): avc: denied { read } for pid=9926 comm="syz.0.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 305.797357][ T6822] bridge_slave_1: left allmulticast mode [ 305.805733][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 305.891382][ T9942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=9942 comm=syz.4.892 [ 305.911140][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.892'. [ 305.993522][ T6822] bridge_slave_1: left promiscuous mode [ 305.999496][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 306.011260][ T6822] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.030509][ T55] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 306.044324][ T55] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 306.386636][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.398020][ T55] usb 3-1: config 0 descriptor?? [ 306.414989][ T6822] bridge_slave_0: left allmulticast mode [ 306.427764][ T6822] bridge_slave_0: left promiscuous mode [ 306.435496][ T9916] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 306.452018][ T6822] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.663426][ T5829] Bluetooth: hci4: command tx timeout [ 306.667356][ T30] audit: type=1400 audit(2000000420.297:2066): avc: denied { ioctl } for pid=9951 comm="syz.1.894" path="socket:[28330]" dev="sockfs" ino=28330 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 307.238996][ T30] audit: type=1400 audit(2000000420.407:2067): avc: denied { watch watch_reads } for pid=9951 comm="syz.1.894" path="pipe:[4328]" dev="pipefs" ino=4328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 307.271030][ T30] audit: type=1400 audit(2000000420.407:2068): avc: denied { relabelfrom } for pid=9951 comm="syz.1.894" name="" dev="pipefs" ino=27629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 308.671006][ T30] audit: type=1400 audit(2000000422.177:2069): avc: denied { write } for pid=9964 comm="syz.1.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 308.715159][ T30] audit: type=1400 audit(2000000422.257:2070): avc: denied { read } for pid=9964 comm="syz.1.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 308.741972][ T5829] Bluetooth: hci4: command tx timeout [ 308.882727][ T30] audit: type=1400 audit(2000000422.397:2071): avc: denied { accept } for pid=9964 comm="syz.1.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 309.210974][ T5889] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 309.367679][ T6822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.391370][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 309.402643][ T6822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.419638][ T5889] usb 2-1: unable to get BOS descriptor or descriptor too short [ 309.430171][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 256, setting to 64 [ 309.430318][ T6822] bond0 (unregistering): Released all slaves [ 309.445678][ T5889] usb 2-1: language id specifier not provided by device, defaulting to English [ 309.466973][ T5889] usb 2-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 309.484483][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.492888][ T5889] usb 2-1: Product: syz [ 309.508720][ T5889] usb 2-1: Manufacturer: ⮢즑芀㻪䃓吡⋬纘猝ퟃ䷽芙廟잆朰諞紳ࣜ뻇喎ዮ垊リ齭燘邰Ꮠ䘜遧땗䢿⹨쀙쳳븼㧤镆綵䱡᛽缢 [ 309.563996][ T9944] veth0_vlan: left promiscuous mode [ 309.570201][ T9944] veth0_vlan: entered promiscuous mode [ 309.643449][ T5889] usb 2-1: SerialNumber: syz [ 309.721943][ T5889] usb 2-1: config 0 descriptor?? [ 309.760501][ T55] usbhid 3-1:0.0: can't add hid device: -71 [ 309.775822][ T55] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 309.786481][ T55] usb 3-1: USB disconnect, device number 32 [ 309.855391][ T9850] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.865698][ T9850] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.873911][ T9850] bridge_slave_0: entered allmulticast mode [ 309.882846][ T9850] bridge_slave_0: entered promiscuous mode [ 309.893740][ T9850] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.904115][ T9850] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.913274][ T9850] bridge_slave_1: entered allmulticast mode [ 309.920277][ T9850] bridge_slave_1: entered promiscuous mode [ 310.019639][ T5889] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 310.055821][ T5889] usb 2-1: USB disconnect, device number 37 [ 310.075674][ T9850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.131954][ T6822] hsr_slave_0: left promiscuous mode [ 310.157868][ T6822] hsr_slave_1: left promiscuous mode [ 310.180594][ T6822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.188178][ T6822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.210018][ T6822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.217584][ T6822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.247729][ T6822] veth1_macvtap: left promiscuous mode [ 310.253748][ T6822] veth0_macvtap: left promiscuous mode [ 310.259482][ T6822] veth1_vlan: left promiscuous mode [ 310.270352][ T6822] veth0_vlan: left promiscuous mode [ 310.735987][ T6822] team0 (unregistering): Port device team_slave_1 removed [ 310.792367][ T6822] team0 (unregistering): Port device team_slave_0 removed [ 310.959459][T10003] Unknown options in mask 5 [ 311.110568][ T6821] Bluetooth: hci5: Frame reassembly failed (-84) [ 311.223076][T10003] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 311.298665][T10005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.902'. [ 311.487744][ T9850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.517521][T10001] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.594093][ T55] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 311.597360][ T9850] team0: Port device team_slave_0 added [ 311.616686][ T9850] team0: Port device team_slave_1 added [ 311.692347][ T9850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.699308][ T9850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.746191][ T9850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.753836][ T55] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 311.767177][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.768213][ T9850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.781346][ T55] usb 3-1: config 0 descriptor?? [ 311.820929][ T30] audit: type=1400 audit(2000000425.437:2072): avc: denied { create } for pid=10011 comm="syz.4.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 311.835590][ T9850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.841351][ T5889] IPVS: starting estimator thread 0... [ 311.947716][ T9850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.981107][T10017] IPVS: using max 40 ests per chain, 96000 per kthread [ 312.070420][ T9850] hsr_slave_0: entered promiscuous mode [ 312.077270][ T9850] hsr_slave_1: entered promiscuous mode [ 312.087264][ T9850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.095067][ T9850] Cannot create hsr debugfs directory [ 312.130704][ T55] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 312.390090][T10007] sp0: Synchronizing with TNC [ 312.420940][ T30] audit: type=1400 audit(2000000426.037:2073): avc: denied { connect } for pid=10006 comm="syz.2.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 312.878485][ T30] audit: type=1400 audit(2000000426.507:2074): avc: denied { setopt } for pid=10040 comm="syz.4.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 313.030444][ T9850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 313.100936][ T9850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 313.130000][ T9850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 313.140212][ T55] [drm:udl_init] *ERROR* Selecting channel failed [ 313.147139][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 313.153749][ T5841] Bluetooth: hci5: command 0x1003 tx timeout [ 313.169235][ T9850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 313.256134][ T55] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 313.325916][ T55] [drm] Initialized udl on minor 2 [ 313.340696][ T9850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.343053][ T55] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 313.506507][ T55] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 314.010980][ T5889] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 314.018006][ T9850] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.029457][ T5889] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 314.184108][ T55] usb 3-1: USB disconnect, device number 33 [ 314.235792][ T6821] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.242965][ T6821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.447781][ T6821] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.454987][ T6821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.841223][ T55] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 315.032840][ T55] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 315.078191][ T55] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 315.103158][ T55] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 315.134818][ T55] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 315.161103][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.193719][T10081] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 315.284731][ T9850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.227408][ T55] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 316.254848][ T55] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input20 [ 316.288485][T10106] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.676455][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.815900][T10119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10119 comm=syz.1.920 [ 316.874744][ T55] usb 2-1: USB disconnect, device number 38 [ 316.880753][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 317.136263][T10106] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.230468][T10121] veth0_vlan: left promiscuous mode [ 317.238204][T10121] veth0_vlan: entered promiscuous mode [ 317.291550][T10114] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 317.299684][T10114] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 317.313238][T10114] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 317.515364][ T9850] veth0_vlan: entered promiscuous mode [ 317.570533][ T9850] veth1_vlan: entered promiscuous mode [ 317.673369][ T24] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 317.688499][ T9850] veth0_macvtap: entered promiscuous mode [ 317.725304][ T9850] veth1_macvtap: entered promiscuous mode [ 317.738137][ T30] audit: type=1400 audit(2000000431.367:2075): avc: denied { read } for pid=10128 comm="syz.0.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 317.845460][T10131] netlink: 'syz.0.921': attribute type 19 has an invalid length. [ 318.216933][ T9850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.236442][ T24] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 318.249828][ T9850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.274476][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.358637][ T9850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.358958][ T24] usb 3-1: Product: syz [ 318.375144][ T24] usb 3-1: Manufacturer: syz [ 318.379788][ T24] usb 3-1: SerialNumber: syz [ 318.394321][ T24] usb 3-1: config 0 descriptor?? [ 318.402312][ T30] audit: type=1400 audit(2000000432.037:2076): avc: denied { map } for pid=10136 comm="syz.1.922" path="socket:[29205]" dev="sockfs" ino=29205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 318.425467][ T9850] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.425532][ T9850] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.425557][ T9850] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.454450][ T24] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 318.687289][ T6821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.714616][ T6821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.819872][T10115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.829301][T10115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.877742][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.916781][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.101264][T10164] overlayfs: missing 'lowerdir' [ 319.114889][ T30] audit: type=1400 audit(2000000432.747:2077): avc: denied { create } for pid=10163 comm="syz.0.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 319.446842][ T6815] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.597784][ T6815] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.888570][ T5941] usb 3-1: USB disconnect, device number 34 [ 319.934483][ T6815] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.030701][ T6815] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.934321][T10221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10221 comm=syz.4.932 [ 321.370722][T10222] veth0_vlan: left promiscuous mode [ 321.376854][T10222] veth0_vlan: entered promiscuous mode [ 321.561622][ T6815] bridge_slave_1: left allmulticast mode [ 321.570437][ T6815] bridge_slave_1: left promiscuous mode [ 321.601791][ T6815] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.640467][ T6815] bridge_slave_0: left allmulticast mode [ 321.649000][ T6815] bridge_slave_0: left promiscuous mode [ 321.685574][ T6815] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.758970][T10235] 9pnet_fd: Insufficient options for proto=fd [ 321.968757][ T30] audit: type=1400 audit(2000000435.567:2078): avc: denied { ioctl } for pid=10233 comm="syz.2.934" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 322.650330][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 322.659783][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 322.670185][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 322.690551][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 322.701064][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 322.799428][ T30] audit: type=1326 audit(2000000436.427:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.2.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff458e929 code=0x7ffc0000 [ 322.907298][ T30] audit: type=1326 audit(2000000436.457:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.2.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcff458e929 code=0x7ffc0000 [ 322.983934][ T30] audit: type=1326 audit(2000000436.457:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.2.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff458e929 code=0x7ffc0000 [ 323.050892][ T30] audit: type=1326 audit(2000000436.457:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.2.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcff458e929 code=0x7ffc0000 [ 323.121442][ T30] audit: type=1400 audit(2000000436.457:2083): avc: denied { ioctl } for pid=10254 comm="syz.2.938" path="socket:[30756]" dev="sockfs" ino=30756 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 323.196383][ T30] audit: type=1326 audit(2000000436.457:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.2.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff458e929 code=0x7ffc0000 [ 323.226477][ T30] audit: type=1326 audit(2000000436.457:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.2.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcff458e929 code=0x7ffc0000 [ 323.259271][ T30] audit: type=1326 audit(2000000436.457:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.2.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff458e929 code=0x7ffc0000 [ 323.289412][ T30] audit: type=1326 audit(2000000436.457:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.2.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fcff458e929 code=0x7ffc0000 [ 323.319143][ T30] audit: type=1326 audit(2000000436.457:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.2.938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcff458e929 code=0x7ffc0000 [ 323.451606][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 323.471409][ T6815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.488293][ T6815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.499758][ T6815] bond0 (unregistering): Released all slaves [ 323.612037][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 323.623725][ T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 323.632508][T10280] syzkaller0: entered promiscuous mode [ 323.632531][T10280] syzkaller0: entered allmulticast mode [ 323.644294][ T10] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 323.654755][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 323.666350][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 323.675838][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.687252][ T10] usb 3-1: Product: syz [ 323.691609][ T10] usb 3-1: Manufacturer: syz [ 323.696219][ T10] usb 3-1: SerialNumber: syz [ 323.927453][ T10] usb 3-1: 0:2 : does not exist [ 323.986526][T10251] chnl_net:caif_netlink_parms(): no params data found [ 324.005926][ T10] usb 3-1: USB disconnect, device number 35 [ 324.034423][ T6050] udevd[6050]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 324.069417][ T6815] hsr_slave_0: left promiscuous mode [ 324.099418][ T6815] hsr_slave_1: left promiscuous mode [ 324.116400][ T6815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.128420][ T6815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.143617][ T6815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.155253][ T6815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.178476][ T6815] veth1_macvtap: left promiscuous mode [ 324.186550][ T6815] veth0_macvtap: left promiscuous mode [ 324.193888][ T6815] veth1_vlan: left promiscuous mode [ 324.202232][ T6815] veth0_vlan: left promiscuous mode [ 324.482804][T10310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.505802][T10310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.683984][ T6815] team0 (unregistering): Port device team_slave_1 removed [ 324.743160][ T5841] Bluetooth: hci4: command tx timeout [ 324.754228][ T6815] team0 (unregistering): Port device team_slave_0 removed [ 325.542764][T10332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10332 comm=syz.4.952 [ 326.245554][T10345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.831726][ T5841] Bluetooth: hci4: command tx timeout [ 327.235448][T10333] veth0_vlan: left promiscuous mode [ 327.242719][T10333] veth0_vlan: entered promiscuous mode [ 327.334884][T10354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.957'. [ 327.850083][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 327.850098][ T30] audit: type=1400 audit(2000000441.477:2123): avc: denied { ioctl } for pid=10362 comm="syz.0.959" path="socket:[30094]" dev="sockfs" ino=30094 ioctlcmd=0x9414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 327.908500][T10251] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.916046][ T30] audit: type=1400 audit(2000000441.527:2124): avc: denied { relabelfrom } for pid=10356 comm="syz.2.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 327.951995][T10251] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.959239][T10251] bridge_slave_0: entered allmulticast mode [ 327.973355][ T30] audit: type=1400 audit(2000000441.527:2125): avc: denied { relabelto } for pid=10356 comm="syz.2.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 327.993653][T10251] bridge_slave_0: entered promiscuous mode [ 328.010513][T10251] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.019055][T10251] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.099877][T10251] bridge_slave_1: entered allmulticast mode [ 328.120269][T10251] bridge_slave_1: entered promiscuous mode [ 328.154732][T10365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.958'. [ 328.903140][ T5841] Bluetooth: hci4: command tx timeout [ 329.153345][T10251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.243585][T10251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.507865][T10393] netlink: 72 bytes leftover after parsing attributes in process `syz.0.961'. [ 329.517443][T10393] netlink: 36 bytes leftover after parsing attributes in process `syz.0.961'. [ 329.521461][T10392] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=53 sclass=netlink_tcpdiag_socket pid=10392 comm=syz.1.963 [ 329.588717][ T30] audit: type=1400 audit(2000000443.217:2126): avc: denied { ioctl } for pid=10387 comm="syz.2.962" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 329.633166][T10390] binder: BINDER_SET_CONTEXT_MGR already set [ 329.639232][T10390] binder: 10387:10390 ioctl 4018620d 200000000040 returned -16 [ 329.661516][ T30] audit: type=1400 audit(2000000443.217:2127): avc: denied { set_context_mgr } for pid=10387 comm="syz.2.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 329.691187][ T30] audit: type=1400 audit(2000000443.267:2128): avc: denied { map } for pid=10387 comm="syz.2.962" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 329.776111][T10393] vlan0: entered promiscuous mode [ 329.776597][ T30] audit: type=1400 audit(2000000443.267:2129): avc: denied { getopt } for pid=10391 comm="syz.1.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 329.843600][T10251] team0: Port device team_slave_0 added [ 329.886223][T10251] team0: Port device team_slave_1 added [ 330.493354][ T10] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 330.651361][T10413] can0: slcan on ptm0. [ 330.665063][T10251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.739375][T10251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.782933][ T10] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 330.791368][T10251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.800202][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.822743][T10251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.835426][ T10] usb 3-1: config 0 descriptor?? [ 330.850052][T10251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.916597][T10251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.983411][T10401] can0 (unregistered): slcan off ptm0. [ 330.985715][ T5841] Bluetooth: hci4: command tx timeout [ 331.166503][T10251] hsr_slave_0: entered promiscuous mode [ 331.180504][T10251] hsr_slave_1: entered promiscuous mode [ 331.211730][T10251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.254915][T10251] Cannot create hsr debugfs directory [ 331.260547][ T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 331.315010][ T10] asix 3-1:0.0: probe with driver asix failed with error -32 [ 332.036380][ T30] audit: type=1400 audit(2000000445.667:2130): avc: denied { connect } for pid=10446 comm="syz.4.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 332.267827][T10448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.972'. [ 332.319076][T10453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.974'. [ 332.373275][ T5941] usb 3-1: USB disconnect, device number 36 [ 333.056874][T10251] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 333.143660][T10251] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 333.196213][T10251] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 333.223993][T10251] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 333.410339][T10251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.488202][T10251] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.554276][ T6820] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.561446][ T6820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.621837][ T6820] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.628937][ T6820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.843906][T10251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.906313][T10251] veth0_vlan: entered promiscuous mode [ 333.920032][T10251] veth1_vlan: entered promiscuous mode [ 333.985721][ T30] audit: type=1400 audit(2000000447.617:2131): avc: denied { setopt } for pid=10511 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 334.018067][T10251] veth0_macvtap: entered promiscuous mode [ 334.043421][ T30] audit: type=1400 audit(2000000447.617:2132): avc: denied { bind } for pid=10511 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 334.071129][T10251] veth1_macvtap: entered promiscuous mode [ 334.093388][T10251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.100796][ T30] audit: type=1400 audit(2000000447.617:2133): avc: denied { read } for pid=10511 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 334.126588][T10251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.148113][T10251] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.235243][T10251] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.254449][T10251] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.284237][T10251] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.469645][ T8667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.488243][ T8667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.511194][ T5911] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 334.564734][ T6821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.601432][ T6821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.683016][ T5911] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 334.708525][ T5911] usb 2-1: config 0 has no interface number 0 [ 334.736210][ T5911] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 334.814678][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.526891][ T5911] usb 2-1: config 0 descriptor?? [ 335.557119][ T5911] hub 2-1:0.3: bad descriptor, ignoring hub [ 335.564742][ T5911] hub 2-1:0.3: probe with driver hub failed with error -5 [ 335.581760][ T5911] sierra 2-1:0.3: Sierra USB modem converter detected [ 335.828553][ T5911] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 335.943548][ T5911] usb 2-1: USB disconnect, device number 39 [ 336.001166][ T5911] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 336.061443][ T5911] sierra 2-1:0.3: device disconnected [ 336.797406][ T30] audit: type=1400 audit(2000000450.427:2134): avc: denied { read } for pid=10573 comm="syz.4.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 336.845842][ T5896] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 337.018452][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.029975][ T5896] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 337.071788][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.108831][ T5896] usb 3-1: config 0 descriptor?? [ 337.129912][ T5896] pwc: Askey VC010 type 2 USB webcam detected. [ 337.179163][ T6821] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.504392][ T30] audit: type=1400 audit(2000000451.107:2135): avc: denied { create } for pid=10585 comm="syz.0.996" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 337.529950][ T5896] pwc: recv_control_msg error -32 req 02 val 2b00 [ 337.768066][ T5896] pwc: recv_control_msg error -71 req 02 val 2c00 [ 337.781565][ T5896] pwc: recv_control_msg error -71 req 04 val 1000 [ 337.798236][ T5896] pwc: recv_control_msg error -71 req 04 val 1300 [ 337.807936][ T6821] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.818680][ T5896] pwc: recv_control_msg error -71 req 04 val 1400 [ 337.835365][ T5896] pwc: recv_control_msg error -71 req 02 val 2000 [ 337.853827][ T5896] pwc: recv_control_msg error -71 req 02 val 2100 [ 337.868170][ T5896] pwc: recv_control_msg error -71 req 04 val 1500 [ 337.875218][ T5896] pwc: recv_control_msg error -71 req 02 val 2500 [ 337.891324][ T5896] pwc: recv_control_msg error -71 req 02 val 2400 [ 337.908256][ T5896] pwc: recv_control_msg error -71 req 02 val 2600 [ 337.921986][ T5896] pwc: recv_control_msg error -71 req 02 val 2900 [ 337.950940][ T5896] pwc: recv_control_msg error -71 req 02 val 2800 [ 337.960597][ T6821] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.971168][ T5896] pwc: recv_control_msg error -71 req 04 val 1100 [ 337.980958][ T5896] pwc: recv_control_msg error -71 req 04 val 1200 [ 337.995840][ T5896] pwc: Registered as video103. [ 338.017117][ T5896] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21 [ 338.048786][ T5896] usb 3-1: USB disconnect, device number 37 [ 338.176096][ T6821] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.239292][ T30] audit: type=1400 audit(2000000451.867:2136): avc: denied { append } for pid=10615 comm="syz.1.998" name="video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 339.481142][ T6821] bridge_slave_1: left allmulticast mode [ 339.512201][ T6821] bridge_slave_1: left promiscuous mode [ 339.531236][ T6821] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.661840][ T6821] bridge_slave_0: left allmulticast mode [ 339.715961][ T6821] bridge_slave_0: left promiscuous mode [ 339.728793][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.743376][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.755156][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.763402][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.779160][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.833982][ T6821] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.003558][ T30] audit: type=1400 audit(2000000453.637:2137): avc: denied { ioctl } for pid=10646 comm="syz.1.1006" path="socket:[32063]" dev="sockfs" ino=32063 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 340.206400][ T30] audit: type=1400 audit(2000000453.707:2138): avc: denied { create } for pid=10649 comm="syz.4.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 340.499305][ T30] audit: type=1400 audit(2000000453.957:2139): avc: denied { ioctl } for pid=10649 comm="syz.4.1007" path="socket:[32776]" dev="sockfs" ino=32776 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 340.966822][ T30] audit: type=1400 audit(2000000454.597:2140): avc: denied { read } for pid=10662 comm="syz.2.1009" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 341.018143][ T30] audit: type=1400 audit(2000000454.597:2141): avc: denied { open } for pid=10662 comm="syz.2.1009" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 341.042641][ T30] audit: type=1400 audit(2000000454.597:2142): avc: denied { ioctl } for pid=10662 comm="syz.2.1009" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 341.882376][ T5829] Bluetooth: hci4: command tx timeout [ 342.830748][T10698] Mount JFS Failure: -22 [ 342.866888][T10698] jfs_mount failed w/return code = -22 [ 342.939427][ T6821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.960582][ T6821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.973651][ T6821] bond0 (unregistering): Released all slaves [ 343.183073][ T30] audit: type=1400 audit(2000000456.817:2143): avc: denied { write } for pid=10706 comm="syz.1.1018" name="mouse0" dev="devtmpfs" ino=997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 343.198218][ T5889] kernel write not supported for file /input/mouse0 (pid: 5889 comm: kworker/1:5) [ 343.253634][ T30] audit: type=1400 audit(2000000456.817:2144): avc: denied { ioctl } for pid=10706 comm="syz.1.1018" path="/dev/input/mouse0" dev="devtmpfs" ino=997 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 343.494458][ T30] audit: type=1400 audit(2000000457.127:2145): avc: denied { mounton } for pid=10717 comm="syz.4.1021" path=2F3234302FE91F7189591E9233614B dev="tmpfs" ino=1314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 343.771447][ T6139] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 343.815390][ T6821] hsr_slave_0: left promiscuous mode [ 343.825986][ T6821] hsr_slave_1: left promiscuous mode [ 343.851689][ T6821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.859121][ T6821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.891572][ T6821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.898996][ T6821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.945635][ T5829] Bluetooth: hci4: command tx timeout [ 344.018186][ T6821] veth1_macvtap: left promiscuous mode [ 344.024245][ T6139] usb 3-1: Using ep0 maxpacket: 8 [ 344.064314][ T6821] veth0_macvtap: left promiscuous mode [ 344.070052][ T6821] veth1_vlan: left promiscuous mode [ 344.075978][ T6821] veth0_vlan: left promiscuous mode [ 344.096225][ T6139] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 344.112828][ T6139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.145809][ T6139] usb 3-1: Product: syz [ 344.150225][ T6139] usb 3-1: Manufacturer: syz [ 344.159386][ T6139] usb 3-1: SerialNumber: syz [ 344.177838][ T6139] usb 3-1: config 0 descriptor?? [ 344.403679][ T6139] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 344.616252][ T6139] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 344.689360][ T6821] team0 (unregistering): Port device team_slave_1 removed [ 344.725531][ T6821] team0 (unregistering): Port device team_slave_0 removed [ 344.999787][ T6139] usb 3-1: USB disconnect, device number 38 [ 345.094964][T10642] chnl_net:caif_netlink_parms(): no params data found [ 345.131455][ T30] audit: type=1400 audit(2000000458.757:2146): avc: denied { read } for pid=10754 comm="syz.2.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 345.317689][T10642] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.325899][T10642] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.333586][T10642] bridge_slave_0: entered allmulticast mode [ 345.340298][T10642] bridge_slave_0: entered promiscuous mode [ 345.412088][T10642] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.419224][T10642] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.442806][T10642] bridge_slave_1: entered allmulticast mode [ 345.450619][T10642] bridge_slave_1: entered promiscuous mode [ 345.597725][ T6139] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 345.704053][T10642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.738979][T10642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.774981][ T6139] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 345.786367][T10775] netlink: 'syz.4.1032': attribute type 4 has an invalid length. [ 345.815026][ T6139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.836231][T10642] team0: Port device team_slave_0 added [ 345.844282][ T6139] usb 3-1: config 0 descriptor?? [ 345.892803][T10642] team0: Port device team_slave_1 added [ 345.985952][T10642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.018978][T10642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.044963][ C0] vkms_vblank_simulate: vblank timer overrun [ 346.055098][ T5829] Bluetooth: hci4: command tx timeout [ 346.055438][ T30] audit: type=1400 audit(2000000459.647:2147): avc: denied { mount } for pid=10786 comm="syz.0.1034" name="/" dev="rpc_pipefs" ino=32332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 346.176168][T10642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.195491][ T30] audit: type=1400 audit(2000000459.807:2148): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 346.221480][T10642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.228958][T10642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.278428][T10642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.396741][T10762] dlm: no local IP address has been set [ 346.418545][T10762] dlm: cannot start dlm midcomms -107 [ 346.625500][ T30] audit: type=1400 audit(2000000460.247:2149): avc: denied { nlmsg_read } for pid=10799 comm="syz.4.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 346.646113][ C0] vkms_vblank_simulate: vblank timer overrun [ 346.666026][ T30] audit: type=1400 audit(2000000460.257:2150): avc: denied { lock } for pid=10799 comm="syz.4.1039" path="socket:[32950]" dev="sockfs" ino=32950 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 346.741681][T10806] bridge0: entered promiscuous mode [ 346.747021][T10806] macsec1: entered promiscuous mode [ 346.754655][T10806] bridge0: port 3(macsec1) entered blocking state [ 346.787162][T10806] bridge0: port 3(macsec1) entered disabled state [ 346.793945][T10806] macsec1: entered allmulticast mode [ 346.799291][T10806] bridge0: entered allmulticast mode [ 346.801393][T10807] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1030'. [ 346.821183][T10806] macsec1: left allmulticast mode [ 346.826622][ T30] audit: type=1400 audit(2000000460.457:2151): avc: denied { name_connect } for pid=10761 comm="syz.2.1030" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 346.833931][T10806] bridge0: left allmulticast mode [ 346.858511][T10807] netlink: zone id is out of range [ 346.864687][T10807] netlink: get zone limit has 8 unknown bytes [ 346.896833][T10806] bridge0: left promiscuous mode [ 346.972283][ T6139] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 346.990177][ T6139] [drm:udl_init] *ERROR* Selecting channel failed [ 347.014255][ T6139] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 347.029734][T10642] hsr_slave_0: entered promiscuous mode [ 347.040971][ T6139] [drm] Initialized udl on minor 2 [ 347.053440][T10642] hsr_slave_1: entered promiscuous mode [ 347.083107][T10642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.093805][T10642] Cannot create hsr debugfs directory [ 347.198881][ T6139] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 347.233774][ T6139] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 347.261693][ T5896] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 347.287022][ T5896] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 347.293801][ T6139] usb 3-1: USB disconnect, device number 39 [ 347.329032][ T30] audit: type=1400 audit(2000000460.957:2152): avc: denied { ioctl } for pid=10830 comm="syz.1.1046" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 347.401456][ T30] audit: type=1400 audit(2000000460.957:2153): avc: denied { execute } for pid=10830 comm="syz.1.1046" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 347.493928][T10833] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.001093][ T5889] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 348.101095][ T5829] Bluetooth: hci4: command tx timeout [ 348.191036][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 348.197824][ T5889] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 348.215941][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.244943][ T5889] usb 2-1: config 0 descriptor?? [ 348.677131][ T5889] logitech 0003:046D:C29C.000C: unknown main item tag 0x1 [ 348.765259][ T5889] logitech 0003:046D:C29C.000C: hidraw0: USB HID vb4.34 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 348.855229][T10642] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 348.877645][T10642] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 348.936937][T10642] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 348.983281][T10642] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 349.087881][T10845] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 349.140639][T10873] vlan0: entered promiscuous mode [ 349.151869][T10873] team0: Port device vlan0 added [ 349.160123][ T5889] logitech 0003:046D:C29C.000C: no inputs found [ 349.281227][ T5889] usb 2-1: USB disconnect, device number 40 [ 349.472205][T10642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.478936][ T30] audit: type=1400 audit(2000000463.107:2154): avc: denied { create } for pid=10887 comm="syz.2.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 349.518532][T10642] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.531430][ T6818] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.538578][ T6818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.553679][T10888] block nbd2: shutting down sockets [ 349.576703][ T6818] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.583937][ T6818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.635132][ T8667] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 349.644158][T10900] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 349.647266][T10888] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 349.953411][T10913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1058'. [ 349.989323][ T30] audit: type=1400 audit(2000000463.617:2155): avc: denied { mount } for pid=10916 comm="syz.1.1060" name="/" dev="configfs" ino=1153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 350.095705][T10642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.261376][T10925] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 350.789323][T10642] veth0_vlan: entered promiscuous mode [ 350.953906][T10642] veth1_vlan: entered promiscuous mode [ 351.103317][T10642] veth0_macvtap: entered promiscuous mode [ 351.119270][T10946] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 351.142887][T10642] veth1_macvtap: entered promiscuous mode [ 351.154378][ T5889] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 351.199811][T10642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.211175][ T5911] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 351.279261][T10642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.309760][T10642] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.330919][T10642] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.347275][T10642] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.359757][T10642] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.374836][ T5889] usb 3-1: config 9 has an invalid interface number: 229 but max is 0 [ 351.384205][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 351.396753][ T5889] usb 3-1: config 9 has no interface number 0 [ 351.405299][ T5911] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 351.422587][ T5889] usb 3-1: config 9 interface 229 has no altsetting 0 [ 351.438472][ T5911] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 351.449252][ T5889] usb 3-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=1c.41 [ 351.458973][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.471023][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.479087][ T5911] usb 2-1: Product: syz [ 351.485984][ T5889] usb 3-1: Product: syz [ 351.501526][ T5889] usb 3-1: Manufacturer: syz [ 351.506242][ T5889] usb 3-1: SerialNumber: syz [ 351.512682][ T5911] usb 2-1: Manufacturer: syz [ 351.517355][ T5911] usb 2-1: SerialNumber: syz [ 351.552458][T10960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10960 comm=syz.4.1066 [ 351.654716][ T5911] usb 2-1: config 0 descriptor?? [ 352.008189][ T5911] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 352.025679][ T5911] usb 2-1: Detected FT232R [ 352.055246][ T6818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.068862][ T6818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.106260][ T6824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.120714][ T6824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.206648][T10937] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1063'. [ 352.282241][T10937] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1063'. [ 352.322632][ T5889] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 352.332136][T10937] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1063'. [ 352.362271][ T5889] usb 3-1: USB disconnect, device number 40 [ 352.367584][T10937] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1063'. [ 352.401000][T10937] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1063'. [ 352.416779][T10937] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1063'. [ 352.436785][T10937] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1063'. [ 352.454388][T10937] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1063'. [ 352.483759][T10937] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1063'. [ 352.522685][T10937] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1063'. [ 353.164197][ T5911] ftdi_sio 2-1:0.0: GPIO initialisation failed: -5 [ 353.193136][ T5911] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 353.509307][T10992] comedi: No check for data length of config insn id 2311 is implemented [ 353.519325][T10992] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 353.528799][T10992] comedi: Assuming n=57925 is correct [ 353.565350][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 353.565365][ T30] audit: type=1400 audit(2000000467.197:2157): avc: denied { accept } for pid=10993 comm="syz.2.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 353.627431][ T30] audit: type=1400 audit(2000000467.257:2158): avc: denied { append } for pid=10995 comm="syz.2.1074" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 353.665845][T10996] tipc: Started in network mode [ 353.670798][T10996] tipc: Node identity f6ee59dc2694, cluster identity 4711 [ 353.678303][T10996] tipc: Enabled bearer , priority 0 [ 353.685836][T10996] syzkaller0: entered promiscuous mode [ 353.691512][T10996] syzkaller0: entered allmulticast mode [ 354.307363][ T5889] usb 2-1: USB disconnect, device number 41 [ 354.344134][ T5889] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 354.375224][ T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.378835][ T5889] ftdi_sio 2-1:0.0: device disconnected [ 354.512224][T10995] tipc: Resetting bearer [ 354.530623][T10995] tipc: Disabling bearer [ 354.787326][ T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.839871][ T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.901388][ T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.993170][ T64] bridge_slave_1: left allmulticast mode [ 354.998878][ T64] bridge_slave_1: left promiscuous mode [ 355.004773][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.014936][ T64] bridge_slave_0: left allmulticast mode [ 355.020588][ T64] bridge_slave_0: left promiscuous mode [ 355.026575][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.249014][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.259169][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.271946][ T64] bond0 (unregistering): Released all slaves [ 355.312246][T11006] comedi: No check for data length of config insn id 2311 is implemented [ 355.338425][T11006] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 355.347987][T11011] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond_slave_1, syncid = 1, id = 0 [ 355.350130][T11006] comedi: Assuming n=57926 is correct [ 356.011695][ T64] hsr_slave_0: left promiscuous mode [ 356.038224][ T64] hsr_slave_1: left promiscuous mode [ 356.053940][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.076262][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.104576][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.122696][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.130965][ T24] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 356.150179][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 356.161227][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 356.169136][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 356.177172][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 356.185972][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 356.211860][ T64] veth1_macvtap: left promiscuous mode [ 356.217448][ T64] veth0_macvtap: left promiscuous mode [ 356.227400][ T64] veth1_vlan: left promiscuous mode [ 356.232852][ T64] veth0_vlan: left promiscuous mode [ 356.380968][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 356.388071][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.404149][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.414229][ T24] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 356.429190][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 356.436640][ T24] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 356.445903][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.480449][ T24] usb 2-1: config 0 descriptor?? [ 356.724347][ T64] team0 (unregistering): Port device team_slave_1 removed [ 356.765648][ T64] team0 (unregistering): Port device team_slave_0 removed [ 356.897649][ T24] hid (null): global environment stack underflow [ 356.907371][ T24] hid (null): usage index exceeded [ 357.997655][T11040] chnl_net:caif_netlink_parms(): no params data found [ 358.124105][T11040] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.141897][T11040] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.156107][T11040] bridge_slave_0: entered allmulticast mode [ 358.181083][T11040] bridge_slave_0: entered promiscuous mode [ 358.197922][T11040] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.207902][T11040] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.215421][T11040] bridge_slave_1: entered allmulticast mode [ 358.223023][T11040] bridge_slave_1: entered promiscuous mode [ 358.250482][T11086] sp0: Synchronizing with TNC [ 358.261038][ T5841] Bluetooth: hci4: command tx timeout [ 358.298540][T11040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.315787][T11040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.414768][T11040] team0: Port device team_slave_0 added [ 358.426360][T11040] team0: Port device team_slave_1 added [ 358.468107][T11040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.482293][T11040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.526850][T11040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.542643][T11040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.549649][T11040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.591202][T11040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.657624][T11094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64880 sclass=netlink_route_socket pid=11094 comm=syz.0.1092 [ 358.690526][T11040] hsr_slave_0: entered promiscuous mode [ 358.765605][T11040] hsr_slave_1: entered promiscuous mode [ 358.873327][T11040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.894262][T11040] Cannot create hsr debugfs directory [ 359.004283][T11096] vlan2: entered promiscuous mode [ 359.011952][T11096] vlan2: entered allmulticast mode [ 359.017184][T11096] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 359.100755][ T24] usb 2-1: USB disconnect, device number 42 [ 359.470364][T11113] syz.1.1094: attempt to access beyond end of device [ 359.470364][T11113] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 360.274709][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 360.287585][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 360.347470][ T5841] Bluetooth: hci4: command tx timeout [ 360.573204][ T5896] libceph: connect (1)[c::]:6789 error -101 [ 360.586136][ T5896] libceph: mon0 (1)[c::]:6789 connect error [ 360.732012][T11145] __nla_validate_parse: 96 callbacks suppressed [ 360.732030][T11145] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1101'. [ 361.028263][ T30] audit: type=1400 audit(2000000474.347:2159): avc: denied { recv } for pid=11138 comm="syz.1.1101" saddr=10.128.0.169 src=36210 daddr=10.128.1.24 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 361.054631][T11131] ceph: No mds server is up or the cluster is laggy [ 361.484420][ T30] audit: type=1400 audit(2000000475.117:2160): avc: denied { bind } for pid=11151 comm="syz.1.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 361.611537][ T30] audit: type=1400 audit(2000000475.157:2161): avc: denied { getopt } for pid=11151 comm="syz.1.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 361.670945][ T30] audit: type=1400 audit(2000000475.167:2162): avc: denied { execute } for pid=11151 comm="syz.1.1103" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=35043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 361.803378][ T30] audit: type=1400 audit(2000000475.437:2163): avc: denied { ioctl } for pid=11158 comm="syz.1.1105" path="socket:[35053]" dev="sockfs" ino=35053 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 361.994799][T11160] autofs: Bad value for 'fd' [ 362.249508][T11168] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1106'. [ 362.381313][ T30] audit: type=1400 audit(2000000476.007:2164): avc: denied { create } for pid=11169 comm="syz.1.1107" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 362.422781][ T5841] Bluetooth: hci4: command tx timeout [ 362.447476][ T30] audit: type=1400 audit(2000000476.007:2165): avc: denied { mounton } for pid=11169 comm="syz.1.1107" path="/259/file0" dev="tmpfs" ino=1396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 362.516219][T11040] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 362.543138][ T30] audit: type=1400 audit(2000000476.117:2166): avc: denied { read } for pid=11169 comm="syz.1.1107" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 362.569209][ T30] audit: type=1400 audit(2000000476.117:2167): avc: denied { open } for pid=11169 comm="syz.1.1107" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 362.630173][T11040] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 362.667652][ T30] audit: type=1400 audit(2000000476.117:2168): avc: denied { ioctl } for pid=11169 comm="syz.1.1107" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 362.703280][T11040] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 362.725239][T11040] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 364.582291][ T5841] Bluetooth: hci4: command tx timeout [ 364.927224][T11040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.947402][T11040] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.964522][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.971753][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.004022][ T6815] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.011156][ T6815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.070511][T11200] ./file0: Can't lookup blockdev [ 365.402628][T11040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.476778][T11040] veth0_vlan: entered promiscuous mode [ 365.493911][T11040] veth1_vlan: entered promiscuous mode [ 365.513229][T11209] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1113'. [ 365.523905][T11040] veth0_macvtap: entered promiscuous mode [ 365.530368][T11209] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1113'. [ 365.643277][T11208] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1113'. [ 365.875959][T11040] veth1_macvtap: entered promiscuous mode [ 365.900484][T11040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.925007][T11040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.956512][T11040] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.026259][T11040] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.063466][T11040] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.097661][T11040] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.707584][ T5896] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 366.770007][ T6820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.784218][ T6820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.818997][ T6820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.828502][ T6820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.916826][ T5896] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 366.933566][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.946242][ T5896] usb 2-1: config 0 descriptor?? [ 367.122860][T11223] Bluetooth: hci5: Frame reassembly failed (-84) [ 367.132364][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 367.141425][T11223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1117'. [ 367.221775][ T5896] cp210x 2-1:0.0: cp210x converter detected [ 367.279633][ T64] Bluetooth: hci5: Frame reassembly failed (-84) [ 367.409182][ T5896] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 367.434216][ T5896] cp210x 2-1:0.0: querying part number failed [ 367.452623][ T5896] usb 2-1: cp210x converter now attached to ttyUSB0 [ 367.466502][ T5896] usb 2-1: USB disconnect, device number 43 [ 367.477830][ T5896] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 367.488801][ T5896] cp210x 2-1:0.0: device disconnected [ 367.849747][T11238] fuse: Unknown parameter '\F>0x0000000000000009' [ 368.566461][T11248] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1122'. [ 368.946301][T11249] ubi: mtd0 is already attached to ubi31 [ 369.138662][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 369.138679][ T30] audit: type=1400 audit(2000000482.757:2173): avc: denied { append } for pid=11245 comm="syz.1.1124" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 369.232174][ T5841] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 369.834217][T11261] fuse: Unknown parameter 'k' [ 369.839177][ T30] audit: type=1400 audit(2000000483.467:2174): avc: denied { mount } for pid=11262 comm="syz.2.1129" name="/" dev="autofs" ino=35649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 369.995966][ T30] audit: type=1400 audit(2000000483.567:2175): avc: denied { block_suspend } for pid=11258 comm="syz.1.1130" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 370.118345][ T30] audit: type=1400 audit(2000000483.747:2176): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 370.279199][ T30] audit: type=1400 audit(2000000483.907:2177): avc: denied { mount } for pid=11272 comm="syz.2.1133" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 370.314368][ T30] audit: type=1400 audit(2000000483.937:2178): avc: denied { mounton } for pid=11272 comm="syz.2.1133" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 370.502585][ T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.973019][ T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.019896][ T30] audit: type=1400 audit(2000000484.647:2179): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 371.061841][ T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.114562][ T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.185189][ T64] bridge_slave_1: left allmulticast mode [ 371.191137][ T64] bridge_slave_1: left promiscuous mode [ 371.198470][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.207117][ T64] bridge_slave_0: left allmulticast mode [ 371.212941][ T64] bridge_slave_0: left promiscuous mode [ 371.218648][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.455176][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.465198][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.474867][ T64] bond0 (unregistering): Released all slaves [ 371.694503][ T64] hsr_slave_0: left promiscuous mode [ 371.700257][ T64] hsr_slave_1: left promiscuous mode [ 371.706747][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.715403][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.723343][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.731426][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.748042][ T64] veth1_macvtap: left promiscuous mode [ 371.755336][ T64] veth0_macvtap: left promiscuous mode [ 371.761901][ T64] veth1_vlan: left promiscuous mode [ 371.767189][ T64] veth0_vlan: left promiscuous mode [ 371.868276][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1134'. [ 371.888914][T11283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11283 comm=syz.2.1135 [ 371.914881][T11285] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 372.101903][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 372.111443][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 372.119493][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 372.141690][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 372.162799][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 372.288255][ T64] team0 (unregistering): Port device team_slave_1 removed [ 372.319896][ T64] team0 (unregistering): Port device team_slave_0 removed [ 372.627480][T11283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1135'. [ 372.711160][ T30] audit: type=1400 audit(2000000486.337:2180): avc: denied { ioctl } for pid=11295 comm="syz.1.1137" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 372.985845][T11291] chnl_net:caif_netlink_parms(): no params data found [ 373.237165][T11307] comedi: No check for data length of config insn id 2311 is implemented [ 373.253882][T11307] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 373.276691][T11307] comedi: Assuming n=57921 is correct [ 374.182429][ T5841] Bluetooth: hci4: command tx timeout [ 374.217573][T11329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1144'. [ 374.333721][T11291] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.468504][T11291] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.476294][T11291] bridge_slave_0: entered allmulticast mode [ 374.483796][T11291] bridge_slave_0: entered promiscuous mode [ 374.534473][T11291] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.546221][T11291] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.590126][T11291] bridge_slave_1: entered allmulticast mode [ 374.645057][ T30] audit: type=1400 audit(2000000488.277:2181): avc: denied { read write } for pid=11330 comm="syz.2.1145" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 374.985237][ T30] audit: type=1400 audit(2000000488.277:2182): avc: denied { open } for pid=11330 comm="syz.2.1145" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 374.985867][T11291] bridge_slave_1: entered promiscuous mode [ 375.360261][T11291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.393614][T11291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.455423][T11291] team0: Port device team_slave_0 added [ 375.490705][T11346] wireguard0: entered promiscuous mode [ 375.500690][T11346] wireguard0: entered allmulticast mode [ 375.524911][T11291] team0: Port device team_slave_1 added [ 375.580736][T11291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.599676][T11291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.647740][T11291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.678938][T11291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.691711][T11291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.749849][T11291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.031190][ T5911] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 376.139016][T11356] netlink: 'syz.1.1152': attribute type 1 has an invalid length. [ 376.140741][T11291] hsr_slave_0: entered promiscuous mode [ 376.157079][T11291] hsr_slave_1: entered promiscuous mode [ 376.166590][T11291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.175391][T11291] Cannot create hsr debugfs directory [ 376.212612][ T5911] usb 3-1: config 0 has an invalid descriptor of length 44, skipping remainder of the config [ 376.223034][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 376.244023][ T5911] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 376.245989][T11356] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.254079][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.269694][ T5841] Bluetooth: hci4: command tx timeout [ 376.272900][T11359] bond1: (slave gretap1): making interface the new active one [ 376.288339][T11359] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 376.329580][ T5911] usb 3-1: Product: syz [ 376.337520][ T5911] usb 3-1: Manufacturer: syz [ 376.377233][ T5911] usb 3-1: SerialNumber: syz [ 376.397993][ T5911] usb 3-1: config 0 descriptor?? [ 377.287590][ T30] audit: type=1400 audit(2000000490.867:2183): avc: denied { map } for pid=11374 comm="syz.4.1157" path="socket:[36923]" dev="sockfs" ino=36923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 377.583017][ T975] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 377.741362][ T975] usb 2-1: Using ep0 maxpacket: 32 [ 377.766399][ T975] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 377.784418][ T975] usb 2-1: config 0 has no interface number 0 [ 377.808344][ T975] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 377.848351][ T975] usb 2-1: config 0 interface 1 has no altsetting 0 [ 377.916480][ T975] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 377.941304][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.967246][ T975] usb 2-1: Product: syz [ 377.984025][ T975] usb 2-1: Manufacturer: syz [ 377.997584][ T975] usb 2-1: SerialNumber: syz [ 378.036850][ T975] usb 2-1: config 0 descriptor?? [ 378.154439][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.341390][ T5841] Bluetooth: hci4: command tx timeout [ 378.610135][ T30] audit: type=1326 audit(2000000492.237:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11380 comm="syz.4.1158" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd99578e929 code=0x0 [ 378.826767][T11382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11382 comm=syz.4.1158 [ 379.605342][ T975] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 379.661082][ T975] cx231xx 2-1:0.1: Not found matching IAD interface [ 379.699745][ T5911] dm9601 3-1:0.0: probe with driver dm9601 failed with error -22 [ 379.710100][ T975] usb 2-1: USB disconnect, device number 44 [ 379.756743][ T5911] usb 3-1: USB disconnect, device number 41 [ 380.281239][ T975] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 380.421823][ T5841] Bluetooth: hci4: command tx timeout [ 380.534743][T11400] fuse: Bad value for 'fd' [ 380.546385][T11291] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 380.564618][T11291] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 380.573477][ T975] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 380.609252][ T975] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 12335, setting to 1024 [ 380.626089][ T975] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 380.637019][ T975] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 380.641295][T11291] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 380.646438][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.671035][T11291] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 380.671237][T11386] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 380.700121][ T975] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 380.818263][T11291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.850528][T11291] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.019258][T11420] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 381.025816][T11420] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 381.033964][T11386] dvmrp8: entered allmulticast mode [ 381.067103][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.074273][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.080400][T11420] vhci_hcd vhci_hcd.0: Device attached [ 381.089834][T11424] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 381.096361][T11424] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 381.112082][T11424] vhci_hcd vhci_hcd.0: Device attached [ 381.122879][T11420] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(5) [ 381.129417][T11420] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 381.140866][ T6822] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.148044][ T6822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.156287][T11420] vhci_hcd vhci_hcd.0: Device attached [ 381.179038][ T975] usb 2-1: USB disconnect, device number 45 [ 381.180026][T11428] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(10) [ 381.191561][T11428] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 381.203988][T11428] vhci_hcd vhci_hcd.0: Device attached [ 381.223004][T11424] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(13) [ 381.229634][T11424] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 381.237183][T11420] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(9) [ 381.243703][T11420] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 381.260953][ T24] vhci_hcd: vhci_device speed not set [ 381.277992][T11428] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(17) [ 381.284631][T11428] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 381.303285][T11291] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 381.321122][ T24] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 381.336243][T11291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 381.354080][T11424] vhci_hcd vhci_hcd.0: Device attached [ 381.381053][T11428] vhci_hcd vhci_hcd.0: Device attached [ 381.386618][T11420] vhci_hcd vhci_hcd.0: Device attached [ 381.453796][T11437] vhci_hcd: connection closed [ 381.454034][ T6821] vhci_hcd: stop threads [ 381.473971][T11429] vhci_hcd: connection closed [ 381.474416][T11431] vhci_hcd: connection closed [ 381.475753][T11425] vhci_hcd: connection closed [ 381.479367][ T6821] vhci_hcd: release socket [ 381.486116][T11422] vhci_hcd: connection reset by peer [ 381.500939][T11433] vhci_hcd: connection closed [ 381.501121][T11436] vhci_hcd: connection closed [ 381.520051][ T6821] vhci_hcd: disconnect device [ 381.546108][ T6821] vhci_hcd: stop threads [ 381.550397][ T6821] vhci_hcd: release socket [ 381.560313][ T6821] vhci_hcd: disconnect device [ 381.725975][ T6821] vhci_hcd: stop threads [ 381.730253][ T6821] vhci_hcd: release socket [ 381.765851][ T6821] vhci_hcd: disconnect device [ 382.270494][ T6821] vhci_hcd: stop threads [ 382.275850][ T6821] vhci_hcd: release socket [ 382.281511][ T6821] vhci_hcd: disconnect device [ 382.286386][ T6821] vhci_hcd: stop threads [ 382.299983][ T6821] vhci_hcd: release socket [ 382.305629][ T6821] vhci_hcd: disconnect device [ 382.314140][ T6821] vhci_hcd: stop threads [ 382.318444][ T6821] vhci_hcd: release socket [ 382.343507][ T6821] vhci_hcd: disconnect device [ 382.478390][ T6821] vhci_hcd: stop threads [ 382.482714][ T6821] vhci_hcd: release socket [ 382.487215][ T6821] vhci_hcd: disconnect device [ 382.506292][T11291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.534908][T11458] netlink: 'syz.4.1172': attribute type 1 has an invalid length. [ 382.590297][T11458] bond3: entered promiscuous mode [ 382.595756][T11458] bond3: entered allmulticast mode [ 382.656298][T11291] veth0_vlan: entered promiscuous mode [ 382.689774][T11291] veth1_vlan: entered promiscuous mode [ 382.731444][T11291] veth0_macvtap: entered promiscuous mode [ 382.753887][T11291] veth1_macvtap: entered promiscuous mode [ 382.771667][T11291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.783045][T11291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.808507][T11291] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.817524][T11291] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.827826][T11291] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.839158][T11291] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.963053][ T6822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.979965][ T6822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.017709][ T6822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.026451][ T6822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.109817][T11471] veth0: entered promiscuous mode [ 383.129731][T11471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1176'. [ 383.345775][T11478] sctp: [Deprecated]: syz.4.1178 (pid 11478) Use of int in max_burst socket option deprecated. [ 383.345775][T11478] Use struct sctp_assoc_value instead [ 383.371380][ T975] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 383.510654][T11486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11486 comm=syz.1.1179 [ 383.526767][T11486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1179'. [ 383.637098][T11487] veth0_vlan: left promiscuous mode [ 383.647521][T11487] veth0_vlan: entered promiscuous mode [ 384.030918][ T975] usb 3-1: Using ep0 maxpacket: 16 [ 384.042424][ T975] usb 3-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 384.052069][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.060173][ T975] usb 3-1: Product: syz [ 384.073946][ T975] usb 3-1: Manufacturer: syz [ 384.081152][ T975] usb 3-1: SerialNumber: syz [ 384.091609][ T975] usb 3-1: config 0 descriptor?? [ 384.113891][ T975] usb-storage 3-1:0.0: USB Mass Storage device detected [ 384.135989][ T975] usb-storage 3-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 384.143596][ T975] usb-storage 3-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.16.0-rc5-syzkaller) [ 384.143596][ T975] Please send a copy of this message to and [ 384.302464][ T30] audit: type=1400 audit(2000000497.937:2185): avc: denied { create } for pid=11473 comm="syz.2.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 384.322389][ T5889] usb 3-1: USB disconnect, device number 42 [ 384.471199][ T975] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 384.621094][ T975] usb 2-1: Using ep0 maxpacket: 16 [ 384.627799][ T975] usb 2-1: config 4 has an invalid interface number: 15 but max is 0 [ 384.636154][ T975] usb 2-1: config 4 has no interface number 0 [ 384.642362][ T975] usb 2-1: config 4 interface 15 has no altsetting 0 [ 384.650743][ T975] usb 2-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 384.660304][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.668762][ T975] usb 2-1: Product: syz [ 384.673055][ T975] usb 2-1: Manufacturer: syz [ 384.677643][ T975] usb 2-1: SerialNumber: syz [ 384.685629][ T975] ax88179_178a 2-1:4.15: probe with driver ax88179_178a failed with error -22 [ 384.855841][ T30] audit: type=1400 audit(2000000498.487:2186): avc: denied { connect } for pid=11494 comm="syz.2.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 384.876514][ T30] audit: type=1400 audit(2000000498.507:2187): avc: denied { bind } for pid=11494 comm="syz.2.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 385.042474][ T6815] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.481065][ T5889] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 385.652645][ T5889] usb 3-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 385.664828][ T5889] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 385.675797][ T5889] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 385.684933][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.693085][ T5889] usb 3-1: Product: syz [ 385.697257][ T5889] usb 3-1: Manufacturer: syz [ 385.702036][ T5889] usb 3-1: SerialNumber: syz [ 385.707985][ T5889] usb 3-1: config 0 descriptor?? [ 386.277798][ T6815] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.334307][ T6815] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.407691][ T6815] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.419590][ T24] vhci_hcd: vhci_device speed not set [ 386.490710][T11505] overlayfs: failed to clone upperpath [ 386.506710][T11505] overlayfs: failed to clone lowerpath [ 386.561361][ T6815] bridge_slave_1: left allmulticast mode [ 386.567074][ T6815] bridge_slave_1: left promiscuous mode [ 386.581576][ T6815] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.594927][ T6815] bridge_slave_0: left allmulticast mode [ 386.602291][ T6815] bridge_slave_0: left promiscuous mode [ 386.608172][ T6815] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.724839][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 386.735485][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 386.746426][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 386.755439][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 386.765139][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 386.953661][ T6815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.963872][ T6815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.973842][ T6815] bond0 (unregistering): Released all slaves [ 387.273108][ T5941] usb 2-1: USB disconnect, device number 46 [ 387.692185][T11528] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[11528] [ 387.805629][ T6815] hsr_slave_0: left promiscuous mode [ 387.843012][ T6815] hsr_slave_1: left promiscuous mode [ 387.866251][ T6815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.887374][ T6815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.908433][ T6815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.925947][ T6815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.934779][ T30] audit: type=1400 audit(2000000501.557:2188): avc: denied { create } for pid=11531 comm="syz.0.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 387.958047][T11534] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 387.976809][ T6815] veth1_macvtap: left promiscuous mode [ 388.051024][ T30] audit: type=1400 audit(2000000501.657:2189): avc: denied { bind } for pid=11531 comm="syz.0.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 388.058456][ T6815] veth0_macvtap: left promiscuous mode [ 388.076713][ T6815] veth1_vlan: left promiscuous mode [ 388.082098][ T6815] veth0_vlan: left promiscuous mode [ 388.862056][ T5829] Bluetooth: hci4: command tx timeout [ 389.126146][ T24] usb 3-1: USB disconnect, device number 43 [ 389.257438][T11551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1192'. [ 389.373339][ T6815] team0 (unregistering): Port device team_slave_1 removed [ 389.699681][ T6815] team0 (unregistering): Port device team_slave_0 removed [ 390.127514][T11560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1194'. [ 390.181453][T11536] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 390.229986][T11560] hsr0 (unregistering): left allmulticast mode [ 390.269690][T11563] netlink: 'syz.2.1195': attribute type 2 has an invalid length. [ 390.278727][T11563] netlink: 'syz.2.1195': attribute type 2 has an invalid length. [ 390.290517][T11508] chnl_net:caif_netlink_parms(): no params data found [ 390.375891][ T30] audit: type=1400 audit(2000000504.007:2190): avc: denied { override_creds } for pid=11564 comm="syz.1.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 390.477811][T11508] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.490568][T11508] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.507508][T11508] bridge_slave_0: entered allmulticast mode [ 390.514521][T11508] bridge_slave_0: entered promiscuous mode [ 390.531608][ T24] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 390.540373][T11573] netlink: 'syz.1.1197': attribute type 10 has an invalid length. [ 390.548474][T11508] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.555969][T11508] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.569689][T11508] bridge_slave_1: entered allmulticast mode [ 390.576544][T11508] bridge_slave_1: entered promiscuous mode [ 390.590748][T11573] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.602890][T11573] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.609989][T11573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.621423][T11573] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 390.654191][T11508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.673398][T11508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.700982][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 390.711278][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 390.722983][ T24] usb 3-1: config 0 has no interface number 0 [ 390.729210][ T24] usb 3-1: config 0 interface 1 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.740347][ T24] usb 3-1: config 0 interface 1 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.746190][T11508] team0: Port device team_slave_0 added [ 390.750347][ T24] usb 3-1: config 0 interface 1 has no altsetting 0 [ 390.766122][ T24] usb 3-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 1.00 [ 390.768148][T11508] team0: Port device team_slave_1 added [ 390.775870][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.805089][ T24] usb 3-1: config 0 descriptor?? [ 390.815401][T11508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.823581][T11508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.855378][T11508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.871015][T11508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.877958][T11508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.904329][ T5829] Bluetooth: hci4: command tx timeout [ 390.910992][T11508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.979909][T11508] hsr_slave_0: entered promiscuous mode [ 390.988253][T11508] hsr_slave_1: entered promiscuous mode [ 391.290434][ T24] chicony 0003:04F2:0418.000E: item fetching failed at offset 0/4 [ 391.301392][ T5941] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 391.306036][ T24] chicony 0003:04F2:0418.000E: Chicony hid parse failed: -22 [ 391.316796][ T24] chicony 0003:04F2:0418.000E: probe with driver chicony failed with error -22 [ 391.481192][ T5941] usb 2-1: Using ep0 maxpacket: 32 [ 391.494942][ T5941] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 391.505642][ T5941] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.517020][ T5941] usb 2-1: config 0 has no interface number 0 [ 391.525788][ T5941] usb 2-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 391.537256][ T5941] usb 2-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 391.579148][ T5941] usb 2-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 391.602929][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.640473][ T5941] usb 2-1: Product: syz [ 391.651273][T11508] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 391.657281][ T5941] usb 2-1: Manufacturer: syz [ 391.664129][ T5941] usb 2-1: SerialNumber: syz [ 391.666521][T11508] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 391.672785][ T5941] usb 2-1: config 0 descriptor?? [ 391.884922][T11581] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 391.893073][T11593] binder: 11590:11593 ioctl c0306201 2000000003c0 returned -14 [ 391.895908][T11508] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 391.917185][ T5941] usb-storage 2-1:0.231: USB Mass Storage device detected [ 391.933473][T11508] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 392.042919][T11508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.067582][T11508] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.080269][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.087453][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.131899][ T6822] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.139059][ T6822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.162244][ T5941] usb 2-1: USB disconnect, device number 47 [ 392.398021][T11508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.470360][T11508] veth0_vlan: entered promiscuous mode [ 392.488816][T11508] veth1_vlan: entered promiscuous mode [ 392.519806][T11508] veth0_macvtap: entered promiscuous mode [ 392.532301][T11508] veth1_macvtap: entered promiscuous mode [ 392.598364][T11508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.625772][T11508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.628463][T11618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1207'. [ 392.666228][T11508] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.703019][T11508] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.716014][T11508] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.752411][T11508] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.971212][T11630] SET target dimension over the limit! [ 392.994440][ T5829] Bluetooth: hci4: command tx timeout [ 393.274488][ T8667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.295699][ T24] usb 3-1: USB disconnect, device number 44 [ 393.351790][ T8667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.421633][ T30] audit: type=1400 audit(2000000507.047:2191): avc: denied { setopt } for pid=11635 comm="syz.1.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 393.461693][ T6820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.475466][ T6820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.485162][ T30] audit: type=1400 audit(2000000507.047:2192): avc: denied { connect } for pid=11635 comm="syz.1.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 394.206482][T11654] kvm: emulating exchange as write [ 394.380996][ T30] audit: type=1400 audit(2000000508.007:2193): avc: denied { recv } for pid=11658 comm="modprobe" saddr=10.128.0.169 src=30006 daddr=10.128.1.24 dest=49194 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 394.513629][ T30] audit: type=1400 audit(2000000508.057:2194): avc: denied { ioctl } for pid=11643 comm="syz.1.1213" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 394.538262][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.638770][ T30] audit: type=1400 audit(2000000508.117:2195): avc: denied { create } for pid=11643 comm="syz.1.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 394.658913][ T30] audit: type=1400 audit(2000000508.137:2196): avc: denied { create } for pid=11643 comm="syz.1.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 394.678855][ T30] audit: type=1400 audit(2000000508.177:2197): avc: denied { setopt } for pid=11643 comm="syz.1.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 394.681803][T11645] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 394.698348][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.813590][ T30] audit: type=1400 audit(2000000508.447:2198): avc: denied { read write } for pid=5832 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 394.837755][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.846593][ T30] audit: type=1400 audit(2000000508.447:2199): avc: denied { open } for pid=5824 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 394.870656][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.892503][T11665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1218'. [ 395.147869][T11679] usb usb8: usbfs: process 11679 (syz.1.1222) did not claim interface 0 before use [ 395.162720][T11679] hugetlbfs: syz.1.1222 (11679): Using mlock ulimits for SHM_HUGETLB is obsolete [ 395.303122][T11681] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1219'. [ 395.391762][ T5896] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 395.561024][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 395.576551][ T5896] usb 3-1: unable to get BOS descriptor or descriptor too short [ 395.579659][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 395.579673][ T30] audit: type=1400 audit(2000000508.817:2221): avc: denied { create } for pid=11678 comm="syz.1.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 395.585873][ T5896] usb 3-1: config 7 has an invalid interface number: 187 but max is 0 [ 395.631503][ T30] audit: type=1400 audit(2000000508.857:2222): avc: denied { create } for pid=11668 comm="syz.4.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 395.652380][ T5896] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 395.652405][ T5896] usb 3-1: config 7 has no interface number 0 [ 395.652433][ T5896] usb 3-1: config 7 interface 187 has no altsetting 0 [ 395.654239][ T5896] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 395.676987][ T30] audit: type=1400 audit(2000000508.857:2223): avc: denied { write } for pid=11668 comm="syz.4.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 395.697089][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.709654][ T30] audit: type=1400 audit(2000000508.867:2224): avc: denied { read } for pid=11668 comm="syz.4.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 395.734292][ C1] vkms_vblank_simulate: vblank timer overrun [ 395.739505][ T5896] usb 3-1: Product: syz [ 395.752434][ T5896] usb 3-1: Manufacturer: syz [ 395.757059][ T5896] usb 3-1: SerialNumber: syz [ 395.791063][ T30] audit: type=1400 audit(2000000508.867:2225): avc: denied { ioctl } for pid=11668 comm="syz.4.1219" path="socket:[38920]" dev="sockfs" ino=38920 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 395.910430][ T30] audit: type=1400 audit(2000000508.867:2226): avc: denied { map_create } for pid=11668 comm="syz.4.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 395.929826][ T30] audit: type=1400 audit(2000000508.867:2227): avc: denied { perfmon } for pid=11668 comm="syz.4.1219" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 395.957921][ T30] audit: type=1400 audit(2000000508.867:2228): avc: denied { map_read map_write } for pid=11668 comm="syz.4.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 395.981887][ T30] audit: type=1400 audit(2000000508.877:2229): avc: denied { prog_run } for pid=11668 comm="syz.4.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 396.001238][ T30] audit: type=1400 audit(2000000509.337:2230): avc: denied { read } for pid=11682 comm="syz.1.1224" dev="nsfs" ino=4026532964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 396.026817][ T5896] usb 3-1: Not enough endpoints found in device, aborting! [ 396.954615][T11695] netlink: 'syz.2.1223': attribute type 5 has an invalid length. [ 397.179272][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.303280][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.393390][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.455390][T11700] netlink: 'syz.1.1229': attribute type 10 has an invalid length. [ 397.474446][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.574151][ T36] bridge_slave_1: left allmulticast mode [ 397.579795][ T36] bridge_slave_1: left promiscuous mode [ 397.585992][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.595357][ T36] bridge_slave_0: left allmulticast mode [ 397.601393][ T36] bridge_slave_0: left promiscuous mode [ 397.607104][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.871553][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.883405][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.893203][ T36] bond0 (unregistering): Released all slaves [ 398.065241][ T36] hsr_slave_0: left promiscuous mode [ 398.071892][ T36] hsr_slave_1: left promiscuous mode [ 398.077550][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.085949][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.094101][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.103092][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.119779][ T36] veth1_macvtap: left promiscuous mode [ 398.125336][ T36] veth0_macvtap: left promiscuous mode [ 398.132247][ T36] veth1_vlan: left promiscuous mode [ 398.137544][ T36] veth0_vlan: left promiscuous mode [ 398.166307][ T975] usb 3-1: USB disconnect, device number 45 [ 398.318925][T11705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1231'. [ 398.343908][T11704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1232'. [ 398.497965][T11714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.540100][T11714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.731182][ T975] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 398.756745][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 398.768881][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 398.777171][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 398.790978][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 398.799966][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 398.992694][ T36] team0 (unregistering): Port device team_slave_1 removed [ 399.027700][ T36] team0 (unregistering): Port device team_slave_0 removed [ 399.462325][ T6824] ================================================================== [ 399.470423][ T6824] BUG: KASAN: slab-use-after-free in __linkwatch_run_queue+0x775/0x8a0 [ 399.478670][ T6824] Read of size 1 at addr ffff88807dd42cc5 by task kworker/u8:19/6824 [ 399.486720][ T6824] [ 399.489023][ T6824] CPU: 0 UID: 0 PID: 6824 Comm: kworker/u8:19 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 399.489039][ T6824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 399.489047][ T6824] Workqueue: events_unbound linkwatch_event [ 399.489061][ T6824] Call Trace: [ 399.489066][ T6824] [ 399.489070][ T6824] dump_stack_lvl+0x116/0x1f0 [ 399.489087][ T6824] print_report+0xcd/0x680 [ 399.489103][ T6824] ? __virt_addr_valid+0x81/0x610 [ 399.489115][ T6824] ? __phys_addr+0xe8/0x180 [ 399.489128][ T6824] ? __linkwatch_run_queue+0x775/0x8a0 [ 399.489138][ T6824] kasan_report+0xe0/0x110 [ 399.489153][ T6824] ? __linkwatch_run_queue+0x775/0x8a0 [ 399.489165][ T6824] __linkwatch_run_queue+0x775/0x8a0 [ 399.489176][ T6824] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 399.489190][ T6824] linkwatch_event+0x8f/0xc0 [ 399.489200][ T6824] ? __pfx_linkwatch_event+0x10/0x10 [ 399.489210][ T6824] ? rcu_is_watching+0x12/0xc0 [ 399.489225][ T6824] process_one_work+0x9cf/0x1b70 [ 399.489245][ T6824] ? __pfx_process_one_work+0x10/0x10 [ 399.489267][ T6824] ? assign_work+0x1a0/0x250 [ 399.489284][ T6824] worker_thread+0x6c8/0xf10 [ 399.489299][ T6824] ? __kthread_parkme+0x19e/0x250 [ 399.489314][ T6824] ? __pfx_worker_thread+0x10/0x10 [ 399.489325][ T6824] kthread+0x3c5/0x780 [ 399.489335][ T6824] ? __pfx_kthread+0x10/0x10 [ 399.489345][ T6824] ? rcu_is_watching+0x12/0xc0 [ 399.489358][ T6824] ? __pfx_kthread+0x10/0x10 [ 399.489368][ T6824] ret_from_fork+0x5d4/0x6f0 [ 399.489384][ T6824] ? __pfx_kthread+0x10/0x10 [ 399.489393][ T6824] ret_from_fork_asm+0x1a/0x30 [ 399.489409][ T6824] [ 399.489413][ T6824] [ 399.647808][ T6824] Allocated by task 11508: [ 399.652200][ T6824] kasan_save_stack+0x33/0x60 [ 399.656873][ T6824] kasan_save_track+0x14/0x30 [ 399.661536][ T6824] __kasan_kmalloc+0xaa/0xb0 [ 399.666110][ T6824] __kvmalloc_node_noprof+0x27b/0x620 [ 399.671467][ T6824] alloc_netdev_mqs+0xd2/0x1570 [ 399.676304][ T6824] rtnl_create_link+0xc08/0xf90 [ 399.681139][ T6824] rtnl_newlink+0xb69/0x2000 [ 399.685712][ T6824] rtnetlink_rcv_msg+0x95e/0xe90 [ 399.690634][ T6824] netlink_rcv_skb+0x155/0x420 [ 399.695376][ T6824] netlink_unicast+0x53a/0x7f0 [ 399.700119][ T6824] netlink_sendmsg+0x8d1/0xdd0 [ 399.704861][ T6824] __sys_sendto+0x4a0/0x520 [ 399.709349][ T6824] __x64_sys_sendto+0xe0/0x1c0 [ 399.714093][ T6824] do_syscall_64+0xcd/0x4c0 [ 399.718591][ T6824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.724473][ T6824] [ 399.726786][ T6824] Freed by task 36: [ 399.730570][ T6824] kasan_save_stack+0x33/0x60 [ 399.735229][ T6824] kasan_save_track+0x14/0x30 [ 399.739888][ T6824] kasan_save_free_info+0x3b/0x60 [ 399.744894][ T6824] __kasan_slab_free+0x51/0x70 [ 399.749643][ T6824] kfree+0x2b4/0x4d0 [ 399.753529][ T6824] device_release+0xa1/0x240 [ 399.758101][ T6824] kobject_put+0x1e7/0x5a0 [ 399.762503][ T6824] netdev_run_todo+0x7e9/0x1320 [ 399.767341][ T6824] default_device_exit_batch+0x858/0xaf0 [ 399.772959][ T6824] ops_undo_list+0x363/0xab0 [ 399.777538][ T6824] cleanup_net+0x408/0x890 [ 399.781952][ T6824] process_one_work+0x9cf/0x1b70 [ 399.786881][ T6824] worker_thread+0x6c8/0xf10 [ 399.791459][ T6824] kthread+0x3c5/0x780 [ 399.795509][ T6824] ret_from_fork+0x5d4/0x6f0 [ 399.800087][ T6824] ret_from_fork_asm+0x1a/0x30 [ 399.804832][ T6824] [ 399.807136][ T6824] The buggy address belongs to the object at ffff88807dd42000 [ 399.807136][ T6824] which belongs to the cache kmalloc-cg-4k of size 4096 [ 399.821436][ T6824] The buggy address is located 3269 bytes inside of [ 399.821436][ T6824] freed 4096-byte region [ffff88807dd42000, ffff88807dd43000) [ 399.835384][ T6824] [ 399.837687][ T6824] The buggy address belongs to the physical page: [ 399.844088][ T6824] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7dd40 [ 399.852825][ T6824] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 399.861301][ T6824] memcg:ffff8880755171c1 [ 399.865520][ T6824] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 399.873044][ T6824] page_type: f5(slab) [ 399.877007][ T6824] raw: 00fff00000000040 ffff88801b84b500 dead000000000122 0000000000000000 [ 399.885573][ T6824] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff8880755171c1 [ 399.894136][ T6824] head: 00fff00000000040 ffff88801b84b500 dead000000000122 0000000000000000 [ 399.902788][ T6824] head: 0000000000000000 0000000000040004 00000000f5000000 ffff8880755171c1 [ 399.911441][ T6824] head: 00fff00000000003 ffffea0001f75001 00000000ffffffff 00000000ffffffff [ 399.920095][ T6824] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 399.928741][ T6824] page dumped because: kasan: bad access detected [ 399.935128][ T6824] page_owner tracks the page as allocated [ 399.940819][ T6824] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11508, tgid 11508 (syz-executor), ts 391093907343, free_ts 391056693877 [ 399.962514][ T6824] post_alloc_hook+0x1c0/0x230 [ 399.967264][ T6824] get_page_from_freelist+0x1321/0x3890 [ 399.972791][ T6824] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 399.978681][ T6824] alloc_pages_mpol+0x1fb/0x550 [ 399.983523][ T6824] new_slab+0x23b/0x330 [ 399.987662][ T6824] ___slab_alloc+0xd9c/0x1940 [ 399.992320][ T6824] __slab_alloc.constprop.0+0x56/0xb0 [ 399.997673][ T6824] __kmalloc_noprof+0x2f2/0x510 [ 400.002512][ T6824] __register_sysctl_table+0xb3/0x1900 [ 400.007953][ T6824] __addrconf_sysctl_register+0x1a2/0x360 [ 400.013660][ T6824] addrconf_sysctl_register+0x15f/0x1f0 [ 400.019194][ T6824] ipv6_add_dev+0xb39/0x15f0 [ 400.023774][ T6824] addrconf_notify+0x53e/0x19e0 [ 400.028607][ T6824] notifier_call_chain+0xbc/0x410 [ 400.033618][ T6824] call_netdevice_notifiers_info+0xbe/0x140 [ 400.039494][ T6824] register_netdevice+0x182e/0x2270 [ 400.044683][ T6824] page last free pid 11581 tgid 11580 stack trace: [ 400.051171][ T6824] __free_frozen_pages+0x7fe/0x1180 [ 400.056352][ T6824] __put_partials+0x16d/0x1c0 [ 400.061012][ T6824] qlist_free_all+0x4d/0x120 [ 400.065584][ T6824] kasan_quarantine_reduce+0x195/0x1e0 [ 400.071026][ T6824] __kasan_slab_alloc+0x69/0x90 [ 400.075863][ T6824] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 400.081307][ T6824] kvm_vm_ioctl+0xb99/0x3da0 [ 400.085879][ T6824] __x64_sys_ioctl+0x18e/0x210 [ 400.090625][ T6824] do_syscall_64+0xcd/0x4c0 [ 400.095114][ T6824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.100987][ T6824] [ 400.103295][ T6824] Memory state around the buggy address: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 400.108903][ T6824] ffff88807dd42b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 400.116943][ T6824] ffff88807dd42c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 400.124982][ T6824] >ffff88807dd42c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 400.133018][ T6824] ^ [ 400.139145][ T6824] ffff88807dd42d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 400.147184][ T6824] ffff88807dd42d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 400.155223][ T6824] ================================================================== [ 400.191381][ T6824] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 400.198611][ T6824] CPU: 0 UID: 0 PID: 6824 Comm: kworker/u8:19 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 400.209114][ T6824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 400.219172][ T6824] Workqueue: events_unbound linkwatch_event [ 400.225076][ T6824] Call Trace: [ 400.228348][ T6824] [ 400.231275][ T6824] dump_stack_lvl+0x3d/0x1f0 [ 400.235886][ T6824] panic+0x71c/0x800 [ 400.239802][ T6824] ? __pfx_panic+0x10/0x10 [ 400.244225][ T6824] ? mark_held_locks+0x49/0x80 [ 400.248991][ T6824] ? preempt_schedule_thunk+0x16/0x30 [ 400.254351][ T6824] ? __linkwatch_run_queue+0x775/0x8a0 [ 400.259795][ T6824] ? preempt_schedule_common+0x44/0xc0 [ 400.265246][ T6824] ? check_panic_on_warn+0x1f/0xb0 [ 400.270348][ T6824] ? __linkwatch_run_queue+0x775/0x8a0 [ 400.275789][ T6824] check_panic_on_warn+0xab/0xb0 [ 400.280716][ T6824] end_report+0x107/0x170 [ 400.285033][ T6824] kasan_report+0xee/0x110 [ 400.289437][ T6824] ? __linkwatch_run_queue+0x775/0x8a0 [ 400.294878][ T6824] __linkwatch_run_queue+0x775/0x8a0 [ 400.300145][ T6824] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 400.305940][ T6824] linkwatch_event+0x8f/0xc0 [ 400.310513][ T6824] ? __pfx_linkwatch_event+0x10/0x10 [ 400.315784][ T6824] ? rcu_is_watching+0x12/0xc0 [ 400.320535][ T6824] process_one_work+0x9cf/0x1b70 [ 400.325478][ T6824] ? __pfx_process_one_work+0x10/0x10 [ 400.330834][ T6824] ? assign_work+0x1a0/0x250 [ 400.335409][ T6824] worker_thread+0x6c8/0xf10 [ 400.339983][ T6824] ? __kthread_parkme+0x19e/0x250 [ 400.344996][ T6824] ? __pfx_worker_thread+0x10/0x10 [ 400.350089][ T6824] kthread+0x3c5/0x780 [ 400.354139][ T6824] ? __pfx_kthread+0x10/0x10 [ 400.358710][ T6824] ? rcu_is_watching+0x12/0xc0 [ 400.363461][ T6824] ? __pfx_kthread+0x10/0x10 [ 400.368032][ T6824] ret_from_fork+0x5d4/0x6f0 [ 400.372611][ T6824] ? __pfx_kthread+0x10/0x10 [ 400.377181][ T6824] ret_from_fork_asm+0x1a/0x30 [ 400.381932][ T6824] [ 400.385129][ T6824] Kernel Offset: disabled [ 400.389430][ T6824] Rebooting in 86400 seconds..