last executing test programs: 1m2.333393298s ago: executing program 1 (id=310): r0 = socket$inet(0xa, 0x1, 0xfffffffe) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_cache\x00') (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x1, 0xcc}]}) close_range(r2, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f00000002c0)={0x8}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="01001000000000005e00000000000000440f704e0d85642e410f2167b930080000b871de0000ba000000000f30"], 0x5e}) (async, rerun: 32) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="31e0da70915be0f3221163836ccb411a12aac0e709aca5dc5a291e1f15e12ece0587db0217b9da85ea67b81e4386509964e29d5d65e046fa6daf97b00e9f7dd33578d44025b86bcb1decd0c5a30a22c9ae78d9118b88af5e8d73de92be2a2e939cbcf32d6208eb752a3a1942368ecffeed6d8f731ca663607256e9eebb980205d90551ddd3f4ede439f284f41a84d8e67de1f9e2e1d5d6378fccb05776b0195c2b38e130326498d0fc3bf5c497988263fb9a0c", 0xb3}, {&(0x7f0000000400)="7258d7f006a68c4c72190df1012d150262817c28b92b9cdd9b0d52c23211d665ce929c1809a27db7c248ece86af5070b167f9a6ca13bb8ff377c493d9f9597d9b9baa5d51689a93d7af2b09097860fafa9090061dc5abf85491bfbc8e90221defb4ba09cac6608f8655d29fdb0358bbaf0483e4103f5c686321b4909a4be0c8d8de3145ddbc64aede3d1068c2f4e5dafee37", 0x92}], 0x2, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x370}}], 0x1, 0x4810) (async, rerun: 32) ioctl$KVM_NMI(r5, 0xae9a) (async, rerun: 32) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x10000000000000, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) fcntl$setlease(r0, 0x400, 0x3) (async) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x1}) (async, rerun: 64) ioctl$vim2m_VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f0000000100)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9436d20f"}, 0x0, 0x2, {0x0}}) (async, rerun: 64) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCONS(r7, 0x541d) (async) r8 = syz_io_uring_setup(0x39, &(0x7f0000001800)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000001880)) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_IE={0x6, 0x3, '\\O'}]}]}, 0x34}}, 0x0) (async, rerun: 64) io_uring_enter(r8, 0x92, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') shutdown(r12, 0x1) (async) read$FUSE(r12, &(0x7f0000004100)={0x2020}, 0x2020) 1m2.193619639s ago: executing program 1 (id=312): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff52) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0x811}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x8000000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x1, 0x8, 0x4}, {0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0xe000, 0x5000, 0xa, 0x0, 0x7, 0xf9, 0x0, 0xfe, 0x3a, 0x2}, {0x3000, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x5}, {0x8080000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x1, 0x100, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f00000002c0)={0x1000, 0x4, 0x2, 0x5, 0x50}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x30) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) 1m1.293208226s ago: executing program 1 (id=325): mkdir(0x0, 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000012, 0x0) chdir(&(0x7f0000000100)='./file0\x00') getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 59.342481278s ago: executing program 1 (id=335): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r2, 0x1, 0x70bd2d, 0x1, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x2c}}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00c8"], 0x24}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3b) r4 = socket$inet6(0xa, 0x3, 0x5) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002536702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64, @ANYRESHEX=r0, @ANYBLOB="00ffffffffffffffff0000080000a99f00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r7, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x10004840}, 0x4002000) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000480)='.\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000000)={0x4001}, 0x10) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e000102000000000000", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000) r12 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) 59.172907367s ago: executing program 3 (id=336): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in6=@remote, @in=@empty}, {@in=@empty, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x6, 0x9}, {0xe, 0x6}, {0x391a, 0x0, 0x4}, 0x0, 0x0, 0xa, 0x0, 0xfe, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2d, 0x0, 0x2}}]}, 0x154}}, 0x0) (async) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) (rerun: 64) write$cgroup_int(r3, 0x0, 0xd) (async, rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x17ec}, 0x1, 0x0, 0x0, 0x200000d0}, 0x91) (async, rerun: 32) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000000c0)={0x0, @reserved}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000005500010004000000ffdbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="0002065e00000000000000002000ffffe000000108"], 0x38}, 0x1, 0x0, 0x0, 0x20008801}, 0x40000) 59.119222252s ago: executing program 3 (id=337): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0xf1ff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0xf1ff}]}}]}, 0x40}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004000000080000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = accept$alg(r3, 0x0, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$UI_DEV_DESTROY(r9, 0x5502) write$binfmt_script(r8, &(0x7f0000000600), 0xfec8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x1, 0x1005}}) r10 = syz_io_uring_setup(0x24fc, &(0x7f0000000180)={0x0, 0xd62e, 0x10100, 0x0, 0x1000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r13, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r13, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r10, 0x2d3e, 0x0, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140), 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0xfffffffffffffe63, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="07ef28bd700000000000080000004409841a26cc55c1f176e6962aee676bec5eef68ea6e2d6ff9107e7b007670e91ab7e3bf6e2601e75d4282a7d32473f9d8c31a032de688e59d2a7fb7490733529f37321d8753ede12f7014f16041eb60bc9ed7f36aba8196967309e0b55871a7271c8b0ee6821bd834ac5196595a9dbf221e0e409055ba387baeb1cfd7b14610270959a624f4f30acaa2ce2646c32ba759dbff4b8be797d292b73e953fc1dd2c7626d990381acfbe306866d30b0364d2bd413b498a0932964b4e9b32a32e315bfe3055dfde3a579bfd47da8879545bfdba1264c03516229a"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) 59.118565179s ago: executing program 1 (id=338): socket(0x1d, 0x2, 0x6) r0 = socket$packet(0x11, 0xe7dbc7f0ab2ae71f, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1001, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8834a88a8", 0x1000e, 0x0, &(0x7f0000000000)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500), 0x141002, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x3}, 0x0, &(0x7f0000000400)={0x1f, 0x6, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) 59.023531256s ago: executing program 3 (id=339): r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r0, &(0x7f0000000580)={{0xcc, 0x4, 0x9, 0x33a, 0x306, 0x5, 0x162, 0x4}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1620) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r4, 0x1, 0x3, 0x0, &(0x7f0000000640)) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_DSP_NONBLOCK(r2, 0x500e, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r8 = eventfd(0xb5e) read$eventfd(r8, &(0x7f0000000040), 0x8) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES8=r6, @ANYRES8=r7, @ANYRES32=r7], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r9 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETS(r9, 0x5402, &(0x7f0000000000)={0x7ff, 0x7, 0x0, 0x5, 0xe, "8e869aaf38cb4f631bb902049a149c74a6e05f"}) 58.780915245s ago: executing program 3 (id=340): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r3) sendmsg$alg(r3, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x140088c1) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1b0}, 0x1, 0x0, 0x0, 0x40040}, 0x48001) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0xa00, 0x12100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}]}}}]}, 0x44}}, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x3004002, &(0x7f0000000400)=ANY=[@ANYBLOB="6d61783d3030302030d79bc60cba82b983"]) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000180)={[{}, {@subsystem='blkio'}]}) 58.70217498s ago: executing program 3 (id=341): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000100), 0x10) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000400)={{0x0, 0x1}}) (async) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000000)={0x8, @pix={0x0, 0xa47, 0x30383653, 0x5, 0x1, 0x4, 0x7, 0x1, 0x1, 0x2, 0x0, 0x4}}) creat(&(0x7f0000000180)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) (async) open$dir(&(0x7f00000042c0)='./file1\x00', 0x4240, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r6) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x34, r7, 0x1, 0x400000, 0x0, {0x3}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x805}, 0x0) r8 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) creat(&(0x7f0000000300)='./file0\x00', 0x0) (async) cachestat(r1, &(0x7f0000000580)={0x3, 0x8}, &(0x7f00000005c0), 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x200}) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x10, 0x5, 0x508, 0x210, 0x210, 0xffffffff, 0x120, 0x120, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@ipv6={@private0, @private2, [], [], 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv4=@loopback, @ipv6=@private0, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4, @port, @gre_key}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xc, &(0x7f0000000080)=ANY=[@ANYRES64=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async) mremap(&(0x7f000081a000/0x4000)=nil, 0x4000, 0x2000, 0x7, &(0x7f0000efb000/0x2000)=nil) 58.701094254s ago: executing program 3 (id=342): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000480)='3\xa5\xe3x\xefl\x9cGq\xbe\xf4S\x9e!|\x8am\xd1j\xe0\xd3\x8f!\\\xd7\x0f\x1bS\xa5\x8f!n\x80wu\x1a\x83/\xc2\\\xa8\xa6\xb6\x1aJ\xefVS\xc9\xc3`\xf1n\x81\x1a@\x90\xe1q\x1c\xe9\x03\x93\xfa\xc2\xd2\x99\x9aaz$\x10C F\x90`p\xa8\xa3m\xc8\xaa\xd6\x92\x05=\x80\xe07/\xb2ym\xf1L\x17\xda\x89\xaeNy;\x89\x9dF\xd8\x94\xfdo2\xb0\xf0nP\x84m/;\x02,\xd5\xfe\xfa\xb4\x04\bn\xd2%\xb3 R*?\x9c\x97T\xb2\xd0\xa5\xa8\xb9\x00\x00\x00\x00\x00\x00\x00\x00U\xf4d\xe4\xa0\x9d\xde\xc5X\xde:\xe6\x1e\xe8\xd0\t\x96}\x93+\xa3\xd0\xa6Uo\x00\x00\x00\x00\x00\x00') r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_AUDOUT(r4, 0x40345632, &(0x7f00000000c0)={0x1, "b85c528abf9426fe9d7e513b65c5c22df4909fa6891ca94446b88c663d7c32f4", 0x1, 0x1}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='(/\x00') r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000400)={0x1d, r6, 0x0, {0x2, 0xf0, 0x3}, 0x7e}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) sendmsg$can_j1939(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)="5f7327a543a8f33e22", 0x9}, 0x1, 0x0, 0x0, 0x2400c000}, 0x8051) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffff}, {0x1}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x88d0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = dup(r7) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000300)) socket$kcm(0x10, 0x2, 0x4) r9 = socket$packet(0x11, 0x2, 0x300) r10 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r10, &(0x7f0000000200)=[{{&(0x7f0000000080)={0xa, 0x2, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000000)="8000ff2e75777e99", 0x8}], 0x1, &(0x7f0000000140)=ANY=[], 0x18}}], 0x1, 0x0) setsockopt$packet_int(r9, 0x107, 0xb, &(0x7f0000000380)=0x2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=@deltaction={0x40, 0x31, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1014, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xd0}, 0x40) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 58.58194866s ago: executing program 1 (id=344): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x88400, 0x0) ioctl$CDROMEJECT_SW(r2, 0x530f, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x840, &(0x7f0000000000)={0x11, 0x16, r3, 0x1, 0x1, 0x6, @random="47d3c55200"}, 0x14) 58.508787352s ago: executing program 32 (id=344): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x88400, 0x0) ioctl$CDROMEJECT_SW(r2, 0x530f, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x840, &(0x7f0000000000)={0x11, 0x16, r3, 0x1, 0x1, 0x6, @random="47d3c55200"}, 0x14) 48.032667219s ago: executing program 2 (id=55): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r2, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x48885}, 0x40004) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x1d36) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x5}, 0x2, r7}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="0000009620bf694ef90eb400", @ANYRES16=r8, @ANYBLOB="00012dbd7000fedbdf253b00000004008e000400870004008e00"], 0x20}, 0x1, 0x0, 0x0, 0xe85bacdf7a71112a}, 0x20000000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)={'L-', 0x3}, 0x16, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) truncate(&(0x7f0000000000)='./file0\x00', 0x101) read$FUSE(r9, &(0x7f0000006300)={0x2020}, 0x2020) r10 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r10, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010102000000000014004380"], 0x44}, 0x1, 0xba01}, 0x810) 43.688205514s ago: executing program 33 (id=342): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000480)='3\xa5\xe3x\xefl\x9cGq\xbe\xf4S\x9e!|\x8am\xd1j\xe0\xd3\x8f!\\\xd7\x0f\x1bS\xa5\x8f!n\x80wu\x1a\x83/\xc2\\\xa8\xa6\xb6\x1aJ\xefVS\xc9\xc3`\xf1n\x81\x1a@\x90\xe1q\x1c\xe9\x03\x93\xfa\xc2\xd2\x99\x9aaz$\x10C F\x90`p\xa8\xa3m\xc8\xaa\xd6\x92\x05=\x80\xe07/\xb2ym\xf1L\x17\xda\x89\xaeNy;\x89\x9dF\xd8\x94\xfdo2\xb0\xf0nP\x84m/;\x02,\xd5\xfe\xfa\xb4\x04\bn\xd2%\xb3 R*?\x9c\x97T\xb2\xd0\xa5\xa8\xb9\x00\x00\x00\x00\x00\x00\x00\x00U\xf4d\xe4\xa0\x9d\xde\xc5X\xde:\xe6\x1e\xe8\xd0\t\x96}\x93+\xa3\xd0\xa6Uo\x00\x00\x00\x00\x00\x00') r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_AUDOUT(r4, 0x40345632, &(0x7f00000000c0)={0x1, "b85c528abf9426fe9d7e513b65c5c22df4909fa6891ca94446b88c663d7c32f4", 0x1, 0x1}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='(/\x00') r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000400)={0x1d, r6, 0x0, {0x2, 0xf0, 0x3}, 0x7e}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) sendmsg$can_j1939(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)="5f7327a543a8f33e22", 0x9}, 0x1, 0x0, 0x0, 0x2400c000}, 0x8051) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffff}, {0x1}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x88d0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = dup(r7) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000300)) socket$kcm(0x10, 0x2, 0x4) r9 = socket$packet(0x11, 0x2, 0x300) r10 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r10, &(0x7f0000000200)=[{{&(0x7f0000000080)={0xa, 0x2, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000000)="8000ff2e75777e99", 0x8}], 0x1, &(0x7f0000000140)=ANY=[], 0x18}}], 0x1, 0x0) setsockopt$packet_int(r9, 0x107, 0xb, &(0x7f0000000380)=0x2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=@deltaction={0x40, 0x31, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1014, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xd0}, 0x40) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 41.340632975s ago: executing program 2 (id=55): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r2, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x48885}, 0x40004) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x1d36) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x5}, 0x2, r7}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="0000009620bf694ef90eb400", @ANYRES16=r8, @ANYBLOB="00012dbd7000fedbdf253b00000004008e000400870004008e00"], 0x20}, 0x1, 0x0, 0x0, 0xe85bacdf7a71112a}, 0x20000000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)={'L-', 0x3}, 0x16, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) truncate(&(0x7f0000000000)='./file0\x00', 0x101) read$FUSE(r9, &(0x7f0000006300)={0x2020}, 0x2020) r10 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r10, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010102000000000014004380"], 0x44}, 0x1, 0xba01}, 0x810) 33.761378596s ago: executing program 2 (id=55): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r2, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x48885}, 0x40004) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x1d36) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x5}, 0x2, r7}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="0000009620bf694ef90eb400", @ANYRES16=r8, @ANYBLOB="00012dbd7000fedbdf253b00000004008e000400870004008e00"], 0x20}, 0x1, 0x0, 0x0, 0xe85bacdf7a71112a}, 0x20000000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)={'L-', 0x3}, 0x16, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) truncate(&(0x7f0000000000)='./file0\x00', 0x101) read$FUSE(r9, &(0x7f0000006300)={0x2020}, 0x2020) r10 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r10, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="b70200000d000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a7fb0a93d035f2f206d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d7be3e8c254a5cba117cbdb9cd38bdb2cc8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160100000000000080148b9a31ee8dc8b544f3c4a532e60a0ac346dfebd31a08060000000200000000000000334d83239dd20100008000000000d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08a406f99f7b1e1ad828267d4eadd3964663e085354133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb28cb0bae7c34dc5e7c805210600000000000000c3dec04b25df45d4f71ab158c36657b7218baa07a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d01776839b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c707fe81436b024c2574980397bc49d70c060d57bc88fbe3bbaa058b040362ab926150763fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4e6068f1bf710d133d541da86e046e513b3177e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2b2ff7f9a7d365e63845f3e1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000010000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edef8ba72205beff7771bcb293747b88486cacee403000000a2919a4b09e168e4e4d5ff2ed893f2e314679fa69fc7e0cf761f91b18725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289c2f884d0766cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2efce676a93110904d5e055af44664b53c764d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976694b6a0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d201721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed1274b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff70307d77ecc9769fcd1ac101f8fbb598b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b8"], 0x0}, 0x90) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010102000000000014004380"], 0x44}, 0x1, 0xba01}, 0x810) 25.762019566s ago: executing program 2 (id=55): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r2, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x48885}, 0x40004) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x1d36) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x5}, 0x2, r7}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="0000009620bf694ef90eb400", @ANYRES16=r8, @ANYBLOB="00012dbd7000fedbdf253b00000004008e000400870004008e00"], 0x20}, 0x1, 0x0, 0x0, 0xe85bacdf7a71112a}, 0x20000000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)={'L-', 0x3}, 0x16, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) truncate(&(0x7f0000000000)='./file0\x00', 0x101) read$FUSE(r9, &(0x7f0000006300)={0x2020}, 0x2020) r10 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r10, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010102000000000014004380"], 0x44}, 0x1, 0xba01}, 0x810) 18.568373184s ago: executing program 2 (id=55): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r2, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x48885}, 0x40004) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x1d36) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x5}, 0x2, r7}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="0000009620bf694ef90eb400", @ANYRES16=r8, @ANYBLOB="00012dbd7000fedbdf253b00000004008e000400870004008e00"], 0x20}, 0x1, 0x0, 0x0, 0xe85bacdf7a71112a}, 0x20000000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)={'L-', 0x3}, 0x16, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) truncate(&(0x7f0000000000)='./file0\x00', 0x101) read$FUSE(r9, &(0x7f0000006300)={0x2020}, 0x2020) r10 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r10, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="b70200000d000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a7fb0a93d035f2f206d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d7be3e8c254a5cba117cbdb9cd38bdb2cc8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160100000000000080148b9a31ee8dc8b544f3c4a532e60a0ac346dfebd31a08060000000200000000000000334d83239dd20100008000000000d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08a406f99f7b1e1ad828267d4eadd3964663e085354133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb28cb0bae7c34dc5e7c805210600000000000000c3dec04b25df45d4f71ab158c36657b7218baa07a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d01776839b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c707fe81436b024c2574980397bc49d70c060d57bc88fbe3bbaa058b040362ab926150763fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4e6068f1bf710d133d541da86e046e513b3177e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2b2ff7f9a7d365e63845f3e1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000010000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edef8ba72205beff7771bcb293747b88486cacee403000000a2919a4b09e168e4e4d5ff2ed893f2e314679fa69fc7e0cf761f91b18725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289c2f884d0766cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2efce676a93110904d5e055af44664b53c764d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976694b6a0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d201721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed1274b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff70307d77ecc9769fcd1ac101f8fbb598b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b8"], 0x0}, 0x90) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010102000000000014004380"], 0x44}, 0x1, 0xba01}, 0x810) 16.213098648s ago: executing program 0 (id=618): prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) prctl$PR_GET_TIMERSLACK(0x1e) 16.212308722s ago: executing program 0 (id=620): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = memfd_secret(0x80000) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000000)={{&(0x7f000047f000/0x4000)=nil, 0x4000}, 0x3}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) modify_ldt$read(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="186076") syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 16.194394972s ago: executing program 0 (id=621): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@mcast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000000)=0xe8) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, r2, &(0x7f00000001c0)={0x8, 0x400, 0x0, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0xa082, 0x0) r4 = socket$key(0xf, 0x3, 0x2) accept4(r4, 0x0, 0x0, 0x80800) r5 = openat$cgroup_devices(r3, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:4\twr'], 0xa) write$cgroup_devices(r5, &(0x7f0000000000)={'a', ' *:* ', 'rw\x00'}, 0x9) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000040)=@id, 0x10) r7 = accept$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000240)=0x1c) shutdown(r7, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007c80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000007cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000007dc0)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f0000000040)={0x44, r8, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "1fe4a3c6a6f185f3f48f261c02bc2310"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 15.301245065s ago: executing program 0 (id=630): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x80042, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 15.212767663s ago: executing program 0 (id=632): r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000040), 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r2}, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x10, 0x1}, {0xe, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006f80)=ANY=[], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20004084) 13.322401532s ago: executing program 0 (id=634): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, r2, 0x100, 0x0, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1fd}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="07000000000000000000020000001400018006000100020f"], 0x28}}, 0x0) preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000001800)=""/250, 0x12c}], 0x1, 0x40000004, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, r2, 0x100, 0x0, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1fd}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="07000000000000000000020000001400018006000100020f"], 0x28}}, 0x0) (async) preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000001800)=""/250, 0x12c}], 0x1, 0x40000004, 0x0) (async) 13.205118516s ago: executing program 34 (id=634): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, r2, 0x100, 0x0, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1fd}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="07000000000000000000020000001400018006000100020f"], 0x28}}, 0x0) preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000001800)=""/250, 0x12c}], 0x1, 0x40000004, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, r2, 0x100, 0x0, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1fd}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="07000000000000000000020000001400018006000100020f"], 0x28}}, 0x0) (async) preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000001800)=""/250, 0x12c}], 0x1, 0x40000004, 0x0) (async) 11.122336388s ago: executing program 5 (id=652): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f002, 0x6}) r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000800)={0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x4}, {}, {}, {0xe5, 0xfffffffc}, {}, {}, {0x0, 0x8c7}], 0xfc, 0xf2, 0x7}}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r3, 0x1}, 0x18) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 11.002693964s ago: executing program 5 (id=653): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00001000", @ANYRES16=r1, @ANYBLOB="c39203100400000000008900000008000300", @ANYRES32=r3, @ANYBLOB="10001d800c0000800600050012000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8804}, 0x840) 10.948089117s ago: executing program 5 (id=654): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x0, 0x4}, @timestamp], 0x2) mmap(&(0x7f00002eb000/0x4000)=nil, 0x4000, 0x2000003, 0x13, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000100)={'nat\x00', 0x0, 0x0, 0x0, [0x6, 0x0, 0xfffffffffffffffd, 0x6, 0x56, 0xffffffffffffffff]}, &(0x7f0000000180)=0x78) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040), 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xd51}, 0x1c) sendto$inet6(r3, &(0x7f0000000900)="7200000000000000ffb493e6789eb80700", 0x11, 0x600, &(0x7f0000001e80)={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x100, 0x0, 0xfffffffe, 0x0, 0x12}, 0x9c) r4 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x9}, {{&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000000800)=[{&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f0000001f40)=""/160, 0xa0}, {&(0x7f0000000640)=""/221, 0xdd}, {&(0x7f00000004c0)=""/145, 0x91}, {&(0x7f0000000400)=""/159, 0x9f}], 0x5, &(0x7f0000000d40)=""/4096, 0x1000}, 0x1}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000280)=""/44, 0x2c}, {&(0x7f0000000880)=""/103, 0x67}, {&(0x7f0000000940)=""/177, 0xb1}, {&(0x7f0000000ac0)=""/21, 0x15}, {&(0x7f0000000b40)=""/218, 0xda}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/143, 0x8f}], 0x7, &(0x7f0000001dc0)=""/150, 0x96}, 0x7}], 0x3, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f00000000c0)) writev(r4, &(0x7f0000000b00)=[{&(0x7f0000000240)="bf93", 0x2}], 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x832b, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x26, &(0x7f0000000440)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r7, 0x80, 0x8e, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x200440c5}, 0x14) 10.902776586s ago: executing program 5 (id=655): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0xc0105702, &(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0x3}, {0x0, 0x2}, {0x0, 0x3}]}, @func_proto={0x0, 0x0, 0x0, 0x4}, @func_proto={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x56, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 10.802508024s ago: executing program 5 (id=656): ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000100)) r0 = fsopen(&(0x7f0000000500)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000380)='}\x00', &(0x7f0000000880)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xecQ\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849@\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xf4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\xf1C\xea!J\x19\xe1\xfe\x0f\x84\xdfY\x10\xed\x1c\xb2n\xc0ME\xaa\x9e\xd1f\x92q\xeb\xdb)\xcd1(>\x8e\x0f}\x03\xdd\xf8\x84\x9bz!\x80F\xc5ls< \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x1c\x9f\xbd\xcd\xea\xc3w\xa3\xf5\x1d.\x00\x00\x00\xa0\xf4\xe9\xe2\x83\xac\xde\x95cmvM\x12\xc1O\x1f#\xcd\x90\x1e\x03\x1e}\xe7w\xe7\"Oh`\xed\bM9\xaf\xa3BQ\xbf\xfd1\x1cG\xb5\xed\x86\xb9Q(\x19dZ\x8da\x008e*\x928\xcf\x0f\x0e\x05\x1dM?\x11$E\xc3\x12\x1e\xffI\x84t0D\xec\xf3T\xe2\xddJm\x87\xc9\xb1\xff\n\xa1\x13\xcbo\xc6\xda\x84\x02\xa3\x14\xf2q\x96\xa8Sa\xe4\x1f\x01\xa2]\xb2\xc9\xd5\xff\xfd\xf2\xb5\xf5\xef \xc7\x02\x927\xdb\xa5\a\x9eS\xb6\xe2\xbaL\x99n\xb4\xe3\xf7\x0eU\xc0', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001"], 0x38}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="02"], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r3, 0x2, 0x0, 0x80000001, &(0x7f0000000200)=[0x0], 0x13, 0x0, 0xfffffffffffffffd, 0x0, 0x0}, 0x61) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r5, r6, 0x6d05, 0x0) fsmount(r5, 0x1, 0x174) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) ioctl$SNAPSHOT_UNFREEZE(r8, 0x3302) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200"], 0x0) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[@ANYRES16=r9], 0x34033) 8.057966358s ago: executing program 2 (id=55): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r2, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x48885}, 0x40004) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x1d36) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x5}, 0x2, r7}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="0000009620bf694ef90eb400", @ANYRES16=r8, @ANYBLOB="00012dbd7000fedbdf253b00000004008e000400870004008e00"], 0x20}, 0x1, 0x0, 0x0, 0xe85bacdf7a71112a}, 0x20000000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)={'L-', 0x3}, 0x16, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) truncate(&(0x7f0000000000)='./file0\x00', 0x101) read$FUSE(r9, &(0x7f0000006300)={0x2020}, 0x2020) r10 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r10, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="010102000000000014004380"], 0x44}, 0x1, 0xba01}, 0x810) 7.362792766s ago: executing program 5 (id=666): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}}, 0x20008820) r2 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x80, 0x2, 0x316}) io_uring_enter(r2, 0x0, 0xcbffffff, 0x7, &(0x7f0000000000), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func={0x0, 0x0, 0x0, 0xc, 0x20}, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000200)=ANY=[@ANYRESOCT=r3], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xfffffffc}, 0x10}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) (async) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r7, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200ce0c0) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e1e, @loopback}, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r12 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r11, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r4], 0x14) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000009000000000000000000000a00000a080005ed76f13405"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c080}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) 4.573162986s ago: executing program 4 (id=680): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8947, &(0x7f0000000580)={'bond0\x00', 0x10001}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01052cbd7000fcdbdf255300000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 4.462782862s ago: executing program 4 (id=681): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x5, @sdr={0x35303553, 0xd93f}}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') 4.461812159s ago: executing program 4 (id=682): creat(&(0x7f0000000040)='./file0\x00', 0x47) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@ignoreqv}], [], 0x6b}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3282b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) 4.222820967s ago: executing program 4 (id=683): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"fbff0a00", 0x5b, 0x6, 0x3, 0x14625b, 0x3, "000000ff00070000000900", '\x00', "05030400", '\x00', ["9ef806070000007eff7d7f00", "0000000000000000008000", "ffffff0200ffff7f00", "00720cfcffffff00e9002000"]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x0, 0x0, 0xffffffff}) ioctl$SNDCTL_TMR_SELECT(r1, 0x40045408) 4.222450347s ago: executing program 4 (id=684): r0 = open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) lgetxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000002480)=ANY=[@ANYBLOB="6f73782e295b9f4fe0092029d7fe52d143d234988c030afc06d7ca3e96f57e01c4b712164f978e2ac3a9ca95113e45e4ac64f1e95d7e0d7342787722c8e68a9675e23ac37b278bea7664708d21efaa8fe962b082de6b8fa559ee8e75837be3193c48b1aa341e64286d0c4c87b295d718388e31d8fb25ed84548254798ffce3c253e65aa7d6787b2c498edef3ae6c7f57aa50"], 0x0, 0x0) (async) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r1, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r4}, 0x10) (async) r5 = socket(0x10, 0x803, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x2, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0x8, 0x3, 0x80000000}]}}]}, 0x7c}}, 0x24040084) r8 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r8, 0xc02063a1, 0x0) (async) linkat(r8, &(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000002280)='./file1\x00', 0x1000) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x400, 0x0) (async) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r11, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r11, &(0x7f0000000100)={0x50, 0x0, r12, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x0, 0xc00, 0x0, 0x10}}, 0x50) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000002540)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0400007699bf90281a83a4d523857028ab94556fc75d872e6c31327ec716ba55bbbef3efdbfe181d10d8374549c65560d76920005e0fcb9d4bcdee4c16fb07311cdaeac6c7fa1bd345ce10d495aa9510cfae07ea3d5c58c838f45bb7bd951f53a289234df265324816a5eb35eb54e8ca64e33c3ce14b3b105948105be588537966ea2a77f33632be3ef3836e0dafa94d5cd755f1b3e7cc1a9cb26de633a2f35aa90624dbe62218f426d64b25895500d52ebd4c9716c5d707000687ea67354b140ee53e8a3b58502602db759efa6fe4d03fdd2f3518840663598ea399cceb9b00000000000000000000000084054920cab2670bf6d33fe47124dcbbfc082f6db0e985930713b5b64571dbbc00000000000000000000000000ec225aaa2ed51c700634ea888371501eea33571992fa7170df50313bd03aa45bc8f7a22110f1c55b9b7c59d2f66f6df8081d4cdde6426ec0155d6a4f2b20143c47e1da32fd87138c55bd12b4b55d76e7e8da83c20460c0e101fc3b9d14997ceb815caa61d69f14bbf801132f07161645351d7b1624fb118c5f9da606fe0571e20966b0e0258bdc909450a94e34f1fa3d72554de941681624c54b775ac08f6c6ca54c6c96cb2634728df3b1cdb4d073efe9660c13dda9a74c676819ac7df49484493832832f9b1eb594", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[], 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) 1.062754658s ago: executing program 6 (id=692): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40641, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) socket$kcm(0x2, 0xa, 0x2) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x3f00, 0x0) (async) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x3f00, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000340)='_', 0x1}, {0x0}, {0x0}], 0x3}, 0x44864) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r3) renameat2(r3, &(0x7f00000002c0)='./file0\x00', r3, &(0x7f0000000240)='./file0\x00', 0x2) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000300), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x2b8d00, 0x0) (async) openat$vsock(0xffffffffffffff9c, 0x0, 0x2b8d00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x8, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x8, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64", @ANYBLOB="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", @ANYRESHEX=r4, @ANYRES64=r2, @ANYRES16=r5, @ANYRESDEC=r1, @ANYRES16=r3, @ANYRESDEC=0x0], 0x3c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64", @ANYBLOB="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", @ANYRESHEX=r4, @ANYRES64=r2, @ANYRES16=r5, @ANYRESDEC=r1, @ANYRES16=r3, @ANYRESDEC=0x0], 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa888080001001800128008000100767469000c00026e48d8fd2090506f8008000500ffffffff08000a00", @ANYRES32=r9, @ANYBLOB], 0x40}}, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000004c0)=[{0x81}, {0x6}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x4004014) (async) sendmsg$nl_route(r7, 0x0, 0x4004014) socket$inet_sctp(0x2, 0x5, 0x84) 980.641333ms ago: executing program 4 (id=693): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000012, 0x0) chdir(&(0x7f0000000100)='./file0\x00') getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 772.875595ms ago: executing program 6 (id=694): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xa, 0xfff3}, {0xfff2, 0xfff1}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000094}, 0x4044040) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='udf\x00', 0x20001b, 0x0) 592.617347ms ago: executing program 6 (id=695): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r2, 0x0, 0x12, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r1, &(0x7f00000000c0)=0x8800000, 0x6, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@private1, @in=@empty, 0xfffd, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff80000000}, {0xfffffffffffffffc}, 0xfffffffa, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@empty, 0x80000000, 0x3c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffe, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000040)={0x58de, 0xb, 0x1, {0x1, @raw_data="1af9ebae8a7c18bdc45133f2b6f27ce19a7a6e442c82d3c6f40845c417475e4055f9d27ed1d6872f275b8279a006049501ed4ecb9e91b8e7eb6033e5d7d91d7c3d87741f1d3c2680b191f147476b85951346e98e6e9a1e5a6766e64b84e052a51dd12edf9d1d26e08291f7711bd87195694a9516c4fc0e9151fb774e27670d19589060fe7b98cf9d58d6cc96212f33a1e1705dbb873ca532f70ab81ab53dd1e3d29583773ba1c6696a029febe240371ceab542eaca8ad6703b3a29732094c541999ed04059ce9dd5"}, 0x22}) 112.614642ms ago: executing program 6 (id=696): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)={r0, 0x1, 0x8, "f8e4"}) 1.61591ms ago: executing program 6 (id=697): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x503, 0x70bd2c, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x14615, 0x11}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 0s ago: executing program 6 (id=698): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000140)={0xfffffff7, 0x0, 0x0, 0xfdff, 0xe0, "6ae23ae16f51000009faeeaf000000000400", 0x10}) (async) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000140)={0xfffffff7, 0x0, 0x0, 0xfdff, 0xe0, "6ae23ae16f51000009faeeaf000000000400", 0x10}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000029c0)=0x4) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000029c0)=0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="546d941b67ce60529d7e88000009", @ANYRES16=r3, @ANYBLOB="01002dbd7000fbdbdf2502000000050005000f0000000500050000000000080004001000000008000300030000000c00018005000200050000000c00018006000100020000000800030008000000"], 0x54}, 0x1, 0x0, 0x0, 0x200400c4}, 0x880) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$inet(r6, &(0x7f00000062c0)={0x0, 0x0, 0x0}, 0x4c084) (async) sendmsg$inet(r6, &(0x7f00000062c0)={0x0, 0x0, 0x0}, 0x4c084) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="00000080", @ANYRES16=r5, @ANYBLOB="00032bbd7000ffdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x4044801) recvmmsg(r6, &(0x7f0000000200)=[{{&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000600)=""/223, 0xdf}, {&(0x7f0000000700)=""/138, 0x8a}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/105, 0x69}, {&(0x7f0000001840)=""/138, 0x8a}, {&(0x7f0000001900)=""/246, 0xf6}], 0x6, &(0x7f0000001a80)=""/115, 0x73}, 0x6}], 0x1, 0x40, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f027, 0x2}) kernel console output (not intermixed with test programs): 1754][ T7369] vivid-003: ================== END STATUS ================== [ 93.004307][ T7369] vivid-003: ================= START STATUS ================= [ 93.006718][ T7369] vivid-003: Radio HW Seek Mode: Bounded [ 93.008477][ T7369] vivid-003: Radio Programmable HW Seek: false [ 93.010507][ T7369] vivid-003: RDS Rx I/O Mode: Block I/O [ 93.012864][ T7369] vivid-003: Generate RBDS Instead of RDS: false [ 93.015047][ T7369] vivid-003: RDS Reception: true [ 93.016677][ T7369] vivid-003: RDS Program Type: 0 inactive [ 93.018490][ T7369] vivid-003: RDS PS Name: inactive [ 93.020189][ T7369] vivid-003: RDS Radio Text: inactive [ 93.021980][ T7369] vivid-003: RDS Traffic Announcement: false inactive [ 93.024116][ T7369] vivid-003: RDS Traffic Program: false inactive [ 93.026248][ T7369] vivid-003: RDS Music: false inactive [ 93.028618][ T7369] vivid-003: ================== END STATUS ================== [ 93.031430][ T7369] vivid-003: ================= START STATUS ================= [ 93.033838][ T7369] vivid-003: Radio HW Seek Mode: Bounded [ 93.035628][ T7369] vivid-003: Radio Programmable HW Seek: false [ 93.037577][ T7369] vivid-003: RDS Rx I/O Mode: Block I/O [ 93.039384][ T7369] vivid-003: Generate RBDS Instead of RDS: false [ 93.041530][ T7369] vivid-003: RDS Reception: true [ 93.043206][ T7369] vivid-003: RDS Program Type: 0 inactive [ 93.045097][ T7369] vivid-003: RDS PS Name: inactive [ 93.047015][ T7369] vivid-003: RDS Radio Text: inactive [ 93.048909][ T7369] vivid-003: RDS Traffic Announcement: false inactive [ 93.051122][ T7369] vivid-003: RDS Traffic Program: false inactive [ 93.053100][ T7369] vivid-003: RDS Music: false inactive [ 93.054864][ T7369] vivid-003: ================== END STATUS ================== [ 93.057545][ T7369] vivid-003: ================= START STATUS ================= [ 93.060218][ T7369] vivid-003: Radio HW Seek Mode: Bounded [ 93.062117][ T7369] vivid-003: Radio Programmable HW Seek: false [ 93.064147][ T7369] vivid-003: RDS Rx I/O Mode: Block I/O [ 93.065988][ T7369] vivid-003: Generate RBDS Instead of RDS: false [ 93.068237][ T7369] vivid-003: RDS Reception: true [ 93.070043][ T7369] vivid-003: RDS Program Type: 0 inactive [ 93.072496][ T7369] vivid-003: RDS PS Name: inactive [ 93.074286][ T7369] vivid-003: RDS Radio Text: inactive [ 93.076063][ T7369] vivid-003: RDS Traffic Announcement: false inactive [ 93.078159][ T7369] vivid-003: RDS Traffic Program: false inactive [ 93.080226][ T7369] vivid-003: RDS Music: false inactive [ 93.082215][ T7369] vivid-003: ================== END STATUS ================== [ 93.085037][ T7369] vivid-003: ================= START STATUS ================= [ 93.087691][ T7369] vivid-003: Radio HW Seek Mode: Bounded [ 93.089525][ T7369] vivid-003: Radio Programmable HW Seek: false [ 93.091683][ T7369] vivid-003: RDS Rx I/O Mode: Block I/O [ 93.093451][ T7369] vivid-003: Generate RBDS Instead of RDS: false [ 93.095504][ T7369] vivid-003: RDS Reception: true [ 93.097128][ T7369] vivid-003: RDS Program Type: 0 inactive [ 93.098979][ T7369] vivid-003: RDS PS Name: inactive [ 93.100730][ T7369] vivid-003: RDS Radio Text: inactive [ 93.102699][ T7369] vivid-003: RDS Traffic Announcement: false inactive [ 93.104979][ T7369] vivid-003: RDS Traffic Program: false inactive [ 93.107003][ T7369] vivid-003: RDS Music: false inactive [ 93.108685][ T7369] vivid-003: ================== END STATUS ================== [ 93.111308][ T7369] vivid-003: ================= START STATUS ================= [ 93.113829][ T7369] vivid-003: Radio HW Seek Mode: Bounded [ 93.115707][ T7369] vivid-003: Radio Programmable HW Seek: false [ 93.117747][ T7369] vivid-003: RDS Rx I/O Mode: Block I/O [ 93.119526][ T7369] vivid-003: Generate RBDS Instead of RDS: false [ 93.121660][ T7369] vivid-003: RDS Reception: true [ 93.123273][ T7369] vivid-003: RDS Program Type: 0 inactive [ 93.125100][ T7369] vivid-003: RDS PS Name: inactive [ 93.126871][ T7369] vivid-003: RDS Radio Text: inactive [ 93.128849][ T7369] vivid-003: RDS Traffic Announcement: false inactive [ 93.131580][ T7369] vivid-003: RDS Traffic Program: false inactive [ 93.133641][ T7369] vivid-003: RDS Music: false inactive [ 93.135423][ T7369] vivid-003: ================== END STATUS ================== [ 93.137927][ T7369] vivid-003: ================= START STATUS ================= [ 93.140378][ T7369] vivid-003: Radio HW Seek Mode: Bounded [ 93.142729][ T7369] vivid-003: Radio Programmable HW Seek: false [ 93.145405][ T7369] vivid-003: RDS Rx I/O Mode: Block I/O [ 93.147699][ T7369] vivid-003: Generate RBDS Instead of RDS: false [ 93.150214][ T7369] vivid-003: RDS Reception: true [ 93.152390][ T7369] vivid-003: RDS Program Type: 0 inactive [ 93.154495][ T7369] vivid-003: RDS PS Name: inactive [ 93.156203][ T7369] vivid-003: RDS Radio Text: inactive [ 93.158049][ T7369] vivid-003: RDS Traffic Announcement: false inactive [ 93.160424][ T7369] vivid-003: RDS Traffic Program: false inactive [ 93.162740][ T7369] vivid-003: RDS Music: false inactive [ 93.164561][ T7369] vivid-003: ================== END STATUS ================== [ 93.167083][ T7369] vivid-003: ================= START STATUS ================= [ 93.169554][ T7369] vivid-003: Radio HW Seek Mode: Bounded [ 93.171546][ T7369] vivid-003: Radio Programmable HW Seek: false [ 93.173575][ T7369] vivid-003: RDS Rx I/O Mode: Block I/O [ 93.174108][ T7372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.176037][ T7369] vivid-003: Generate RBDS Instead of RDS: false [ 93.181223][ T7372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.182840][ T7369] vivid-003: RDS Reception: true [ 93.187414][ T7369] vivid-003: RDS Program Type: 0 inactive [ 93.189886][ T7369] vivid-003: RDS PS Name: inactive [ 93.192425][ T7369] vivid-003: RDS Radio Text: inactive [ 93.194819][ T7369] vivid-003: RDS Traffic Announcement: false inactive [ 93.197841][ T7369] vivid-003: RDS Traffic Program: false inactive [ 93.200884][ T7369] vivid-003: RDS Music: false inactive [ 93.203764][ T53] usb 5-1: USB disconnect, device number 10 [ 93.203881][ T7369] vivid-003: ================== END STATUS ================== [ 93.208939][ T7369] vivid-003: ================= START STATUS ================= [ 93.211828][ T7369] vivid-003: Radio HW Seek Mode: Bounded [ 93.213764][ T7369] vivid-003: Radio Programmable HW Seek: false [ 93.215868][ T7369] vivid-003: RDS Rx I/O Mode: Block I/O [ 93.217639][ T7369] vivid-003: Generate RBDS Instead of RDS: false [ 93.219684][ T7369] vivid-003: RDS Reception: true [ 93.221793][ T7369] vivid-003: RDS Program Type: 0 inactive [ 93.223660][ T7369] vivid-003: RDS PS Name: inactive [ 93.225364][ T7369] vivid-003: RDS Radio Text: inactive [ 93.227291][ T7369] vivid-003: RDS Traffic Announcement: false inactive [ 93.229574][ T7369] vivid-003: RDS Traffic Program: false inactive [ 93.231721][ T7369] vivid-003: RDS Music: false inactive [ 93.233820][ T7369] vivid-003: ================== END STATUS ================== [ 93.236297][ T7369] vivid-003: ================= START STATUS ================= [ 93.238713][ T7369] vivid-003: Radio HW Seek Mode: Bounded [ 93.240590][ T7369] vivid-003: Radio Programmable HW Seek: false [ 93.243083][ T7369] vivid-003: RDS Rx I/O Mode: Block I/O [ 93.245008][ T7369] vivid-003: Generate RBDS Instead of RDS: false [ 93.247131][ T7369] vivid-003: RDS Reception: true [ 93.248717][ T7369] vivid-003: RDS Program Type: 0 inactive [ 93.250543][ T7369] vivid-003: RDS PS Name: inactive [ 93.251493][ T5939] Bluetooth: hci0: command tx timeout [ 93.252642][ T7369] vivid-003: RDS Radio Text: inactive [ 93.256328][ T7369] vivid-003: RDS Traffic Announcement: false inactive [ 93.258483][ T7369] vivid-003: RDS Traffic Program: false inactive [ 93.260610][ T7369] vivid-003: RDS Music: false inactive [ 93.262683][ T7369] vivid-003: ================== END STATUS ================== [ 93.265286][ T7369] vivid-003: ================= START STATUS ================= [ 93.267769][ T7369] vivid-003: Radio HW Seek Mode: Bounded [ 93.269571][ T7369] vivid-003: Radio Programmable HW Seek: false [ 93.271733][ T7369] vivid-003: RDS Rx I/O Mode: Block I/O [ 93.273563][ T7369] vivid-003: Generate RBDS Instead of RDS: false [ 93.275624][ T7369] vivid-003: RDS Reception: true [ 93.277262][ T7369] vivid-003: RDS Program Type: 0 inactive [ 93.279132][ T7369] vivid-003: RDS PS Name: inactive [ 93.280996][ T7369] vivid-003: RDS Radio Text: inactive [ 93.282902][ T7369] vivid-003: RDS Traffic Announcement: false inactive [ 93.285163][ T7369] vivid-003: RDS Traffic Program: false inactive [ 93.287264][ T7369] vivid-003: RDS Music: false inactive [ 93.289005][ T7369] vivid-003: ================== END STATUS ================== [ 93.291696][ T7369] vivid-003: ================= START STATUS ================= [ 93.294203][ T7369] vivid-003: Radio HW Seek Mode: Bounded [ 93.296024][ T7369] vivid-003: Radio Programmable HW Seek: false [ 93.298018][ T7369] vivid-003: RDS Rx I/O Mode: Block I/O [ 93.299831][ T7369] vivid-003: Generate RBDS Instead of RDS: false [ 93.302025][ T7369] vivid-003: RDS Reception: true [ 93.303749][ T7369] vivid-003: RDS Program Type: 0 inactive [ 93.305658][ T7369] vivid-003: RDS PS Name: inactive [ 93.307452][ T7369] vivid-003: RDS Radio Text: inactive [ 93.309299][ T7369] vivid-003: RDS Traffic Announcement: false inactive [ 93.311731][ T7369] vivid-003: RDS Traffic Program: false inactive [ 93.313921][ T7369] vivid-003: RDS Music: false inactive [ 93.315922][ T7369] vivid-003: ================== END STATUS ================== [ 93.318625][ T7369] vivid-003: ================= START STATUS ================= [ 93.321216][ T7369] vivid-003: Radio HW Seek Mode: Bounded [ 93.323174][ T7369] vivid-003: Radio Programmable HW Seek: false [ 93.325367][ T7369] vivid-003: RDS Rx I/O Mode: Block I/O [ 93.327224][ T7369] vivid-003: Generate RBDS Instead of RDS: false [ 93.329233][ T7369] vivid-003: RDS Reception: true [ 93.330884][ T7369] vivid-003: RDS Program Type: 0 inactive [ 93.332794][ T7369] vivid-003: RDS PS Name: inactive [ 93.334923][ T7369] vivid-003: RDS Radio Text: inactive [ 93.336849][ T7369] vivid-003: RDS Traffic Announcement: false inactive [ 93.339294][ T7369] vivid-003: RDS Traffic Program: false inactive [ 93.341770][ T7369] vivid-003: RDS Music: false inactive [ 93.343517][ T7369] vivid-003: ================== END STATUS ================== [ 93.345903][ T7369] vivid-003: ================= START STATUS ================= [ 93.348295][ T7369] vivid-003: Radio HW Seek Mode: Bounded [ 93.350087][ T7369] vivid-003: Radio Programmable HW Seek: false [ 93.352232][ T7369] vivid-003: RDS Rx I/O Mode: Block I/O [ 93.354103][ T7369] vivid-003: Generate RBDS Instead of RDS: false [ 93.356262][ T7369] vivid-003: RDS Reception: true [ 93.357862][ T7369] vivid-003: RDS Program Type: 0 inactive [ 93.359705][ T7369] vivid-003: RDS PS Name: inactive [ 93.361459][ T7369] vivid-003: RDS Radio Text: inactive [ 93.363235][ T7369] vivid-003: RDS Traffic Announcement: false inactive [ 93.365372][ T7369] vivid-003: RDS Traffic Program: false inactive [ 93.367428][ T7369] vivid-003: RDS Music: false inactive [ 93.369170][ T7369] vivid-003: ================== END STATUS ================== [ 93.371930][ T7369] vivid-003: ================= START STATUS ================= [ 93.374465][ T7369] vivid-003: Radio HW Seek Mode: Bounded [ 93.376263][ T7369] vivid-003: Radio Programmable HW Seek: false [ 93.378140][ T7369] vivid-003: RDS Rx I/O Mode: Block I/O [ 93.379823][ T7369] vivid-003: Generate RBDS Instead of RDS: false [ 93.381800][ T7369] vivid-003: RDS Reception: true [ 93.383416][ T7369] vivid-003: RDS Program Type: 0 inactive [ 93.385216][ T7369] vivid-003: RDS PS Name: inactive [ 93.386963][ T7369] vivid-003: RDS Radio Text: inactive [ 93.388704][ T7369] vivid-003: RDS Traffic Announcement: false inactive [ 93.390891][ T7369] vivid-003: RDS Traffic Program: false inactive [ 93.393007][ T7369] vivid-003: RDS Music: false inactive [ 93.394762][ T7369] vivid-003: ================== END STATUS ================== [ 93.397143][ T7369] vivid-003: ================= START STATUS ================= [ 93.399744][ T7369] vivid-003: Radio HW Seek Mode: Bounded [ 93.401657][ T7369] vivid-003: Radio Programmable HW Seek: false [ 93.403697][ T7369] vivid-003: RDS Rx I/O Mode: Block I/O [ 93.405512][ T7369] vivid-003: Generate RBDS Instead of RDS: false [ 93.407591][ T7369] vivid-003: RDS Reception: true [ 93.409173][ T7369] vivid-003: RDS Program Type: 0 inactive [ 93.411547][ T7369] vivid-003: RDS PS Name: inactive [ 93.413243][ T7369] vivid-003: RDS Radio Text: inactive [ 93.415010][ T7369] vivid-003: RDS Traffic Announcement: false inactive [ 93.417184][ T7369] vivid-003: RDS Traffic Program: false inactive [ 93.419338][ T7369] vivid-003: RDS Music: false inactive [ 93.421283][ T7369] vivid-003: ================== END STATUS ================== [ 93.423998][ T7369] vivid-003: ================= START STATUS ================= [ 93.426400][ T7369] vivid-003: Radio HW Seek Mode: Bounded [ 93.428225][ T7369] vivid-003: Radio Programmable HW Seek: false [ 93.430174][ T7369] vivid-003: RDS Rx I/O Mode: Block I/O [ 93.431985][ T7369] vivid-003: Generate RBDS Instead of RDS: false [ 93.433979][ T7369] vivid-003: RDS Reception: true [ 93.435556][ T7369] vivid-003: RDS Program Type: 0 inactive [ 93.437610][ T7369] vivid-003: RDS PS Name: inactive [ 93.439398][ T7369] vivid-003: RDS Radio Text: inactive [ 93.441202][ T7369] vivid-003: RDS Traffic Announcement: false inactive [ 93.443378][ T7369] vivid-003: RDS Traffic Program: false inactive [ 93.445395][ T7369] vivid-003: RDS Music: false inactive [ 93.447162][ T7369] vivid-003: ================== END STATUS ================== [ 93.449578][ T7369] vivid-003: ================= START STATUS ================= [ 93.452090][ T7369] vivid-003: Radio HW Seek Mode: Bounded [ 93.453929][ T7369] vivid-003: Radio Programmable HW Seek: false [ 93.455906][ T7369] vivid-003: RDS Rx I/O Mode: Block I/O [ 93.457726][ T7369] vivid-003: Generate RBDS Instead of RDS: false [ 93.459811][ T7369] vivid-003: RDS Reception: true [ 93.461425][ T7369] vivid-003: RDS Program Type: 0 inactive [ 93.463220][ T7369] vivid-003: RDS PS Name: inactive [ 93.464900][ T7369] vivid-003: RDS Radio Text: inactive [ 93.466594][ T7369] vivid-003: RDS Traffic Announcement: false inactive [ 93.468687][ T7369] vivid-003: RDS Traffic Program: false inactive [ 93.470704][ T7369] vivid-003: RDS Music: false inactive [ 93.472515][ T7369] vivid-003: ================== END STATUS ================== [ 93.474938][ T7369] vivid-003: ================= START STATUS ================= [ 93.476248][ T40] audit: type=1400 audit(1750925745.895:447): avc: denied { map } for pid=7375 comm="syz.0.361" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 93.477223][ T7369] vivid-003: Radio HW Seek Mode: Bounded [ 93.486943][ T7369] vivid-003: Radio Programmable HW Seek: false [ 93.488932][ T7369] vivid-003: RDS Rx I/O Mode: Block I/O [ 93.490708][ T7369] vivid-003: Generate RBDS Instead of RDS: false [ 93.493693][ T7369] vivid-003: RDS Reception: true [ 93.495324][ T7369] vivid-003: RDS Program Type: 0 inactive [ 93.497186][ T7369] vivid-003: RDS PS Name: inactive [ 93.498874][ T7369] vivid-003: RDS Radio Text: inactive [ 93.500634][ T7369] vivid-003: RDS Traffic Announcement: false inactive [ 93.505810][ T7369] vivid-003: RDS Traffic Program: false inactive [ 93.507968][ T7369] vivid-003: RDS Music: false inactive [ 93.509740][ T7369] vivid-003: ================== END STATUS ================== [ 93.512377][ T7369] vivid-003: ================= START STATUS ================= [ 93.514787][ T7369] vivid-003: Radio HW Seek Mode: Bounded [ 93.516574][ T7369] vivid-003: Radio Programmable HW Seek: false [ 93.518585][ T7369] vivid-003: RDS Rx I/O Mode: Block I/O [ 93.520450][ T7369] vivid-003: Generate RBDS Instead of RDS: false [ 93.524166][ T7369] vivid-003: RDS Reception: true [ 93.525906][ T7369] vivid-003: RDS Program Type: 0 inactive [ 93.527918][ T7369] vivid-003: RDS PS Name: inactive [ 93.529592][ T7369] vivid-003: RDS Radio Text: inactive [ 93.531549][ T7369] vivid-003: RDS Traffic Announcement: false inactive [ 93.533686][ T7369] vivid-003: RDS Traffic Program: false inactive [ 93.535708][ T7369] vivid-003: RDS Music: false inactive [ 93.537474][ T7369] vivid-003: ================== END STATUS ================== [ 93.540236][ T7369] vivid-003: ================= START STATUS ================= [ 93.542882][ T7369] vivid-003: Radio HW Seek Mode: Bounded [ 93.544699][ T7369] vivid-003: Radio Programmable HW Seek: false [ 93.546817][ T7369] vivid-003: RDS Rx I/O Mode: Block I/O [ 93.548721][ T7369] vivid-003: Generate RBDS Instead of RDS: false [ 93.551603][ T7369] vivid-003: RDS Reception: true [ 93.553768][ T7369] vivid-003: RDS Program Type: 0 inactive [ 93.555765][ T7369] vivid-003: RDS PS Name: inactive [ 93.557440][ T7369] vivid-003: RDS Radio Text: inactive [ 93.559286][ T7369] vivid-003: RDS Traffic Announcement: false inactive [ 93.561813][ T7369] vivid-003: RDS Traffic Program: false inactive [ 93.563860][ T7369] vivid-003: RDS Music: false inactive [ 93.565593][ T7369] vivid-003: ================== END STATUS ================== [ 93.567910][ T5945] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.568095][ T7369] vivid-003: ================= START STATUS ================= [ 93.574795][ T7369] vivid-003: Radio HW Seek Mode: Bounded [ 93.576457][ T5945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.576850][ T7369] vivid-003: Radio Programmable HW Seek: false [ 93.579783][ T5945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.582024][ T7369] vivid-003: RDS Rx I/O Mode: Block I/O [ 93.583970][ T5945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.589592][ T5945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.591314][ T7369] vivid-003: Generate RBDS Instead of RDS: false [ 93.594070][ T7369] vivid-003: RDS Reception: true [ 93.595840][ T7369] vivid-003: RDS Program Type: 0 inactive [ 93.597894][ T7369] vivid-003: RDS PS Name: inactive [ 93.600732][ T7369] vivid-003: RDS Radio Text: inactive [ 93.603502][ T7369] vivid-003: RDS Traffic Announcement: false inactive [ 93.607058][ T7369] vivid-003: RDS Traffic Program: false inactive [ 93.609750][ T7369] vivid-003: RDS Music: false inactive [ 93.612287][ T7369] vivid-003: ================== END STATUS ================== [ 93.701416][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 93.701426][ T40] audit: type=1400 audit(1750925746.125:449): avc: denied { unmount } for pid=7292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 93.720003][ T7382] chnl_net:caif_netlink_parms(): no params data found [ 93.748101][ T40] audit: type=1400 audit(1750925746.165:450): avc: denied { read } for pid=7399 comm="syz.4.367" path="socket:[20783]" dev="sockfs" ino=20783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.829058][ T7382] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.832417][ T7382] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.834777][ T7382] bridge_slave_0: entered allmulticast mode [ 93.837469][ T7382] bridge_slave_0: entered promiscuous mode [ 93.840597][ T7382] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.843068][ T7382] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.845665][ T7382] bridge_slave_1: entered allmulticast mode [ 93.848707][ T7382] bridge_slave_1: entered promiscuous mode [ 93.888691][ T40] audit: type=1400 audit(1750925746.305:451): avc: denied { read } for pid=5331 comm="acpid" name="event7" dev="devtmpfs" ino=2865 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 93.892866][ T7410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.368'. [ 93.900827][ T7410] nbd: illegal input index 1879048192 [ 93.901315][ T40] audit: type=1400 audit(1750925746.305:452): avc: denied { open } for pid=5331 comm="acpid" path="/dev/input/event7" dev="devtmpfs" ino=2865 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 93.912849][ T40] audit: type=1400 audit(1750925746.305:453): avc: denied { ioctl } for pid=5331 comm="acpid" path="/dev/input/event7" dev="devtmpfs" ino=2865 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 93.922714][ T40] audit: type=1400 audit(1750925746.315:454): avc: denied { ioctl } for pid=7399 comm="syz.4.367" path="/dev/sg1" dev="devtmpfs" ino=727 ioctlcmd=0x2272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 93.940421][ T7382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.945750][ T7382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.998990][ T7382] team0: Port device team_slave_0 added [ 94.003405][ T7382] team0: Port device team_slave_1 added [ 94.039769][ T7382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.043383][ T7382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.051952][ T7382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.057480][ T7382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.060129][ T7382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.068958][ T7382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.140531][ T1145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.149581][ T7382] hsr_slave_0: entered promiscuous mode [ 94.153832][ T7382] hsr_slave_1: entered promiscuous mode [ 94.156263][ T7382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.158627][ T7382] Cannot create hsr debugfs directory [ 94.505186][ T1145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.577294][ T1145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.696162][ T1145] bridge_slave_1: left allmulticast mode [ 94.698511][ T1145] bridge_slave_1: left promiscuous mode [ 94.701119][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.708219][ T1145] bridge_slave_0: left allmulticast mode [ 94.710615][ T1145] bridge_slave_0: left promiscuous mode [ 94.713894][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.041285][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.049478][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.055707][ T1145] bond0 (unregistering): Released all slaves [ 95.240811][ T40] audit: type=1400 audit(1750925747.655:455): avc: denied { name_bind } for pid=7423 comm="syz.4.371" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 95.331067][ T5945] Bluetooth: hci0: command tx timeout [ 95.415057][ T1145] hsr_slave_0: left promiscuous mode [ 95.418492][ T1145] hsr_slave_1: left promiscuous mode [ 95.421201][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.424131][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.427625][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.430470][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.458921][ T1145] veth1_macvtap: left promiscuous mode [ 95.461282][ T1145] veth0_macvtap: left promiscuous mode [ 95.463535][ T1145] veth1_vlan: left promiscuous mode [ 95.465714][ T1145] veth0_vlan: left promiscuous mode [ 95.661154][ T5945] Bluetooth: hci2: command tx timeout [ 95.821505][ T7431] trusted_key: syz.0.373 sent an empty control message without MSG_MORE. [ 96.156588][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 96.246600][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 96.463564][ T5988] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 96.613355][ T5988] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 96.615977][ T5988] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.620010][ T5988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 96.625122][ T5988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 96.628269][ T5988] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.632475][ T5988] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.635319][ T5988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.653232][ T5988] usb 5-1: config 0 descriptor?? [ 96.959810][ T7382] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.973827][ T7382] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.984128][ T7382] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.994266][ T7382] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.014091][ T40] audit: type=1400 audit(1750925749.435:456): avc: denied { read } for pid=7448 comm="syz.4.378" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 97.024880][ T40] audit: type=1400 audit(1750925749.435:457): avc: denied { open } for pid=7448 comm="syz.4.378" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 97.033907][ T40] audit: type=1400 audit(1750925749.435:458): avc: denied { ioctl } for pid=7448 comm="syz.4.378" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 97.048386][ T7382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.063239][ T5988] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 97.065356][ T7382] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.067758][ T5988] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 97.071099][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.073410][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.078543][ T5988] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 97.084628][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.086983][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.206552][ T7382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.240097][ T7382] veth0_vlan: entered promiscuous mode [ 97.248829][ T7382] veth1_vlan: entered promiscuous mode [ 97.264670][ T7382] veth0_macvtap: entered promiscuous mode [ 97.268403][ T7382] veth1_macvtap: entered promiscuous mode [ 97.277447][ T7382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.283681][ T7382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.288345][ T7382] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.291182][ T7382] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.294340][ T7382] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.297086][ T7382] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.332491][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.335001][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.348245][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.350803][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.396702][ T29] usb 5-1: USB disconnect, device number 11 [ 97.421135][ T5945] Bluetooth: hci0: command tx timeout [ 97.479200][ T7470] netpci0: tun_chr_ioctl cmd 1074025672 [ 97.481805][ T7470] netpci0: ignored: set checksum disabled [ 98.902383][ T7479] vlan2: entered promiscuous mode [ 98.904618][ T7479] bridge0: entered promiscuous mode [ 99.157771][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 99.157789][ T40] audit: type=1400 audit(1750925751.575:460): avc: denied { name_connect } for pid=7481 comm="syz.4.385" dest=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 99.249164][ T7484] vlan3: entered promiscuous mode [ 99.255317][ T7484] vlan3: entered allmulticast mode [ 99.257556][ T7484] hsr_slave_1: entered allmulticast mode [ 99.439870][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.468379][ T13] Bluetooth: hci2: Frame reassembly failed (-90) [ 99.472550][ T7486] Bluetooth: hci2: Frame reassembly failed (-84) [ 100.234207][ T40] audit: type=1400 audit(1750925752.655:461): avc: denied { create } for pid=7492 comm="syz.0.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.242588][ T40] audit: type=1400 audit(1750925752.655:462): avc: denied { bind } for pid=7492 comm="syz.0.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.250989][ T40] audit: type=1400 audit(1750925752.655:463): avc: denied { write } for pid=7492 comm="syz.0.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.410811][ T5939] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.415929][ T5939] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.420021][ T5939] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.424438][ T5939] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.429084][ T5939] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.588020][ T7501] chnl_net:caif_netlink_parms(): no params data found [ 100.701978][ T7501] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.705182][ T7501] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.709102][ T7501] bridge_slave_0: entered allmulticast mode [ 100.713108][ T7501] bridge_slave_0: entered promiscuous mode [ 100.718647][ T7501] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.721912][ T7501] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.725063][ T7501] bridge_slave_1: entered allmulticast mode [ 100.729048][ T7501] bridge_slave_1: entered promiscuous mode [ 100.786725][ T7501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.796048][ T7501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.854004][ T7501] team0: Port device team_slave_0 added [ 100.860165][ T7501] team0: Port device team_slave_1 added [ 100.916400][ T7501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.920399][ T7501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.934055][ T7501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.940221][ T7501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.943218][ T7501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.954255][ T7501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.002830][ T7501] hsr_slave_0: entered promiscuous mode [ 101.005160][ T7501] hsr_slave_1: entered promiscuous mode [ 101.007303][ T7501] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.009692][ T7501] Cannot create hsr debugfs directory [ 101.116407][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.209661][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.316506][ T40] audit: type=1400 audit(1750925753.735:464): avc: denied { mounton } for pid=7519 comm="syz.0.394" path="/114/file0" dev="tmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 101.327047][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.327445][ T7520] syz.0.394: attempt to access beyond end of device [ 101.327445][ T7520] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 101.336600][ T7520] XFS (nbd0): SB validate failed with error -5. [ 101.479599][ T12] bridge_slave_1: left allmulticast mode [ 101.481702][ T12] bridge_slave_1: left promiscuous mode [ 101.483672][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.491827][ T61] wlan1: Trigger new scan to find an IBSS to join [ 101.492164][ T5945] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 101.514421][ T12] bridge_slave_0: left allmulticast mode [ 101.516287][ T12] bridge_slave_0: left promiscuous mode [ 101.518254][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.562182][ T7532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7532 comm=syz.4.396 [ 101.606956][ T7534] fuse: Bad value for 'user_id' [ 101.610979][ T7534] fuse: Bad value for 'user_id' [ 101.826347][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.834842][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.838804][ T12] bond0 (unregistering): Released all slaves [ 101.927067][ T7537] cgroup: release_agent respecified [ 101.928889][ T7537] dlm: Unknown command passed to DLM device : 255 [ 101.928889][ T7537] [ 101.939315][ T7537] netlink: 2192 bytes leftover after parsing attributes in process `syz.4.398'. [ 102.001730][ T7538] kvm: user requested TSC rate below hardware speed [ 102.315130][ T12] hsr_slave_0: left promiscuous mode [ 102.318185][ T12] hsr_slave_1: left promiscuous mode [ 102.320479][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.323389][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.327443][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.332775][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.366940][ T12] veth1_macvtap: left promiscuous mode [ 102.369397][ T12] veth0_macvtap: left promiscuous mode [ 102.372539][ T12] veth1_vlan: left promiscuous mode [ 102.374782][ T12] veth0_vlan: left promiscuous mode [ 102.464801][ T5945] Bluetooth: hci4: command tx timeout [ 103.181067][ T12] team0 (unregistering): Port device team_slave_1 removed [ 103.317385][ T12] team0 (unregistering): Port device team_slave_0 removed [ 103.575155][ T7542] 9pnet_fd: p9_fd_create_unix (7542): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 103.734135][ T40] audit: type=1400 audit(1750925756.155:465): avc: denied { append } for pid=7545 comm="syz.0.401" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 103.770029][ T40] audit: type=1400 audit(1750925756.185:466): avc: denied { map } for pid=7545 comm="syz.0.401" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 103.777233][ T40] audit: type=1400 audit(1750925756.185:467): avc: denied { execute } for pid=7545 comm="syz.0.401" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 103.905775][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.909774][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.914133][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.922645][ T5946] bond0: (slave syz_tun): Releasing backup interface [ 103.922827][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.928335][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.944127][ T7501] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.950348][ T7501] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.959155][ T7501] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.971425][ T7501] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.111042][ T6002] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 104.137621][ T7501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.146929][ T7501] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.153245][ T7552] chnl_net:caif_netlink_parms(): no params data found [ 104.199157][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.201993][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.261176][ T6002] usb 5-1: Invalid ep0 maxpacket: 64 [ 104.303839][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.306027][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.313427][ T7552] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.316750][ T7552] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.319844][ T7552] bridge_slave_0: entered allmulticast mode [ 104.324056][ T7552] bridge_slave_0: entered promiscuous mode [ 104.328562][ T7552] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.331840][ T7552] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.334992][ T7552] bridge_slave_1: entered allmulticast mode [ 104.338845][ T7552] bridge_slave_1: entered promiscuous mode [ 104.384315][ T7552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.399484][ T7552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.411142][ T6002] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 104.448344][ T7552] team0: Port device team_slave_0 added [ 104.453160][ T46] wlan1: Trigger new scan to find an IBSS to join [ 104.453963][ T7552] team0: Port device team_slave_1 added [ 104.507485][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.509466][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.517532][ T7552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.522513][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.524479][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.532107][ T7552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.541177][ T5945] Bluetooth: hci4: command tx timeout [ 104.581431][ T6002] usb 5-1: Invalid ep0 maxpacket: 64 [ 104.584594][ T6002] usb usb5-port1: attempt power cycle [ 104.592990][ T7552] hsr_slave_0: entered promiscuous mode [ 104.595356][ T7552] hsr_slave_1: entered promiscuous mode [ 104.597774][ T7552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.600875][ T7552] Cannot create hsr debugfs directory [ 104.760321][ T7501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.805062][ T7552] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.810751][ T7552] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.815942][ T7552] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.821590][ T7552] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 104.840149][ T7501] veth0_vlan: entered promiscuous mode [ 104.852631][ T7501] veth1_vlan: entered promiscuous mode [ 104.890414][ T7501] veth0_macvtap: entered promiscuous mode [ 104.896991][ T7501] veth1_macvtap: entered promiscuous mode [ 104.920734][ T7501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.928642][ T7552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.932235][ T6002] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 104.938905][ T7501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.945686][ T7501] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.948270][ T7501] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.952165][ T7501] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.952788][ T6002] usb 5-1: Invalid ep0 maxpacket: 64 [ 104.955316][ T7501] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.969342][ T7552] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.983145][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.985250][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.992230][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.994325][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.055719][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.059176][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.079781][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.082532][ T6002] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 105.085017][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.111958][ T6002] usb 5-1: Invalid ep0 maxpacket: 64 [ 105.120601][ T6002] usb usb5-port1: unable to enumerate USB device [ 105.218017][ T7552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.378525][ T7552] veth0_vlan: entered promiscuous mode [ 105.384163][ T7552] veth1_vlan: entered promiscuous mode [ 105.398575][ T7552] veth0_macvtap: entered promiscuous mode [ 105.402337][ T7552] veth1_macvtap: entered promiscuous mode [ 105.412203][ T7552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.419958][ T7552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.425407][ T7552] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.428222][ T7552] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.431036][ T7552] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.433848][ T7552] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.466345][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.468775][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.485483][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.488065][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.709700][ T7613] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 105.718432][ T7613] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 105.752108][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.410'. [ 105.952099][ T7619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7619 comm=syz.4.412 [ 105.971580][ T5945] Bluetooth: hci2: command tx timeout [ 106.102527][ T40] audit: type=1326 audit(1750925758.525:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7628 comm="syz.4.415" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe30d58e929 code=0x0 [ 106.123742][ T1143] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.920159][ T1143] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.124091][ T40] audit: type=1400 audit(1750925759.545:469): avc: denied { append } for pid=7645 comm="syz.0.420" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 107.177374][ T40] audit: type=1400 audit(1750925759.595:470): avc: denied { ioctl } for pid=7650 comm="syz.0.422" path="socket:[23175]" dev="sockfs" ino=23175 ioctlcmd=0x64c6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 107.214050][ T7656] CIFS: iocharset name too long [ 107.246294][ T63] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 107.250034][ T63] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 107.255782][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 107.263550][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 107.267237][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 107.310156][ T7665] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 107.381009][ T7672] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 107.460175][ T7657] chnl_net:caif_netlink_parms(): no params data found [ 107.571397][ T7657] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.574140][ T13] wlan1: Trigger new scan to find an IBSS to join [ 107.576151][ T7657] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.579752][ T7657] bridge_slave_0: entered allmulticast mode [ 107.584319][ T7657] bridge_slave_0: entered promiscuous mode [ 107.589717][ T7657] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.598027][ T7657] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.601345][ T7657] bridge_slave_1: entered allmulticast mode [ 107.605081][ T7657] bridge_slave_1: entered promiscuous mode [ 107.700539][ T7657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.714585][ T7657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.808302][ T7657] team0: Port device team_slave_0 added [ 107.817469][ T7657] team0: Port device team_slave_1 added [ 107.868384][ T1143] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.922161][ T7657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.925074][ T7657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.935721][ T7657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.955150][ T1143] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.961966][ T7657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.963823][ T5945] Bluetooth: hci1: unexpected cc 0x2039 length: 9 > 1 [ 107.964909][ T7657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.964957][ T7657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.982449][ T5945] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 108.051101][ T5945] Bluetooth: hci2: command tx timeout [ 108.057173][ T7657] hsr_slave_0: entered promiscuous mode [ 108.060785][ T7657] hsr_slave_1: entered promiscuous mode [ 108.064047][ T7657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.067187][ T7657] Cannot create hsr debugfs directory [ 108.175574][ T1143] bridge_slave_1: left allmulticast mode [ 108.178152][ T1143] bridge_slave_1: left promiscuous mode [ 108.180730][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.188793][ T1143] bridge_slave_0: left allmulticast mode [ 108.191866][ T1143] bridge_slave_0: left promiscuous mode [ 108.194350][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.512119][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.516678][ T1145] wlan1: Creating new IBSS network, BSSID 2a:15:6a:48:2d:b0 [ 108.520153][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.526386][ T1143] bond0 (unregistering): Released all slaves [ 108.754261][ T7702] netlink: 132 bytes leftover after parsing attributes in process `syz.0.436'. [ 108.813807][ T40] audit: type=1400 audit(1750925761.235:471): avc: denied { ioctl } for pid=7711 comm="syz.4.438" path="socket:[23691]" dev="sockfs" ino=23691 ioctlcmd=0x940d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 108.817564][ T7713] trusted_key: encrypted_key: hex blob is missing [ 108.854820][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.439'. [ 108.871765][ T7716] xt_hashlimit: size too large, truncated to 1048576 [ 108.889571][ T40] audit: type=1400 audit(1750925761.305:472): avc: denied { module_request } for pid=7711 comm="syz.4.438" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 108.928118][ T1143] hsr_slave_0: left promiscuous mode [ 108.930647][ T1143] hsr_slave_1: left promiscuous mode [ 108.933548][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.936034][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.938964][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.941481][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.966162][ T1143] veth1_macvtap: left promiscuous mode [ 108.968153][ T1143] veth0_macvtap: left promiscuous mode [ 108.970121][ T1143] veth1_vlan: left promiscuous mode [ 108.972856][ T1143] veth0_vlan: left promiscuous mode [ 108.983979][ T7720] kAFS: No cell specified [ 109.228978][ T40] audit: type=1400 audit(1750925761.645:473): avc: denied { ioctl } for pid=7730 comm="syz.5.444" path="socket:[23702]" dev="sockfs" ino=23702 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 109.241633][ T40] audit: type=1400 audit(1750925761.665:474): avc: denied { getopt } for pid=7730 comm="syz.5.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 109.295943][ T40] audit: type=1400 audit(1750925761.715:475): avc: denied { setopt } for pid=7730 comm="syz.5.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 109.331938][ T5945] Bluetooth: hci3: command tx timeout [ 109.929780][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.450'. [ 109.959578][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 109.991896][ T7756] nfs: Unknown parameter 'noac' [ 110.073514][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 110.141424][ T5945] Bluetooth: hci2: command tx timeout [ 110.445210][ T40] audit: type=1400 audit(1750925762.865:476): avc: denied { append } for pid=7760 comm="syz.5.452" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 110.536768][ T40] audit: type=1400 audit(1750925762.955:477): avc: denied { bind } for pid=7766 comm="syz.5.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 110.795550][ T7771] tmpfs: Unknown parameter 'inode3¹' [ 110.898772][ T7754] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 111.084312][ T7657] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 111.099307][ T7657] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 111.107357][ T7657] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.112287][ T7813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.132523][ T7657] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.259777][ T7657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.277740][ T7657] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.292873][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.295136][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.303066][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.305399][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.333846][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.465'. [ 111.368822][ T7657] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.411470][ T5945] Bluetooth: hci3: command tx timeout [ 111.484764][ T7847] bridge0: entered promiscuous mode [ 111.487203][ T7847] macvlan2: entered promiscuous mode [ 111.514815][ T7657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.552481][ T7657] veth0_vlan: entered promiscuous mode [ 111.571640][ T7858] netlink: 28 bytes leftover after parsing attributes in process `syz.4.470'. [ 111.575309][ T7858] netlink: 'syz.4.470': attribute type 7 has an invalid length. [ 111.575404][ T7657] veth1_vlan: entered promiscuous mode [ 111.578382][ T7858] netlink: 20 bytes leftover after parsing attributes in process `syz.4.470'. [ 111.681432][ T6023] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 111.704330][ T7657] veth0_macvtap: entered promiscuous mode [ 111.708565][ T7657] veth1_macvtap: entered promiscuous mode [ 111.719319][ T7657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.730417][ T7657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.739959][ T7657] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.744005][ T7657] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.747439][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 111.747449][ T40] audit: type=1400 audit(1750925764.165:482): avc: denied { setopt } for pid=7856 comm="syz.5.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 111.758607][ T7657] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.765047][ T7657] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.828496][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.832740][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.849614][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.852869][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.980034][ T40] audit: type=1400 audit(1750925764.395:483): avc: denied { read } for pid=7871 comm="syz.5.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 112.001931][ T7872] netlink: 12 bytes leftover after parsing attributes in process `syz.5.472'. [ 112.010624][ T7872] xfrm1: entered promiscuous mode [ 112.013402][ T7872] xfrm1: entered allmulticast mode [ 112.054497][ T5945] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 112.057847][ T5945] Bluetooth: hci1: Injecting HCI hardware error event [ 112.062788][ T63] Bluetooth: hci1: hardware error 0x00 [ 112.211735][ T5945] Bluetooth: hci2: command tx timeout [ 112.346200][ T40] audit: type=1400 audit(1750925764.765:484): avc: denied { watch } for pid=7883 comm="syz.5.475" path="/27/file1/file0" dev="9p" ino=35913858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.356276][ T40] audit: type=1400 audit(1750925764.765:485): avc: denied { read append } for pid=7883 comm="syz.5.475" path="/27/file1/file0/memory.current" dev="9p" ino=35913841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 112.380146][ T40] audit: type=1400 audit(1750925764.795:486): avc: denied { create } for pid=7883 comm="syz.5.475" name="autofs" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 112.402652][ T40] audit: type=1400 audit(1750925764.825:487): avc: denied { mounton } for pid=7883 comm="syz.5.475" path="/27/file1/file0/file1" dev="9p" ino=35913905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 112.720135][ T40] audit: type=1400 audit(1750925765.135:488): avc: denied { accept } for pid=7896 comm="syz.5.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 112.746366][ T7902] netlink: 'syz.4.481': attribute type 1 has an invalid length. [ 112.777927][ T7902] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.780326][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.482'. [ 112.789139][ T7905] macsec0: entered promiscuous mode [ 112.794671][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.482'. [ 113.208467][ T7913] netlink: 40 bytes leftover after parsing attributes in process `syz.4.484'. [ 113.213704][ T7913] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.259608][ T7913] bridge_slave_0 (unregistering): left allmulticast mode [ 113.262260][ T7913] bridge_slave_0 (unregistering): left promiscuous mode [ 113.264479][ T7913] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.459958][ T40] audit: type=1400 audit(1750925765.875:489): avc: denied { unmount } for pid=7292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 113.727016][ T1199] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.131458][ T63] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 114.738606][ T40] audit: type=1400 audit(1750925767.155:490): avc: denied { write } for pid=7952 comm="syz.5.496" name="sg1" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 114.826092][ T5945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.829934][ T5945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.833646][ T5945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.836650][ T5945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.839363][ T5945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.959127][ T7960] chnl_net:caif_netlink_parms(): no params data found [ 115.033960][ T7960] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.036351][ T7960] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.038676][ T7960] bridge_slave_0: entered allmulticast mode [ 115.041480][ T7960] bridge_slave_0: entered promiscuous mode [ 115.045165][ T7960] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.047642][ T7960] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.049925][ T7960] bridge_slave_1: entered allmulticast mode [ 115.055077][ T7960] bridge_slave_1: entered promiscuous mode [ 115.093338][ T7960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.098649][ T7960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.116919][ T7978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.500'. [ 115.142959][ T7960] team0: Port device team_slave_0 added [ 115.147416][ T7960] team0: Port device team_slave_1 added [ 115.186790][ T7980] cgroup2: Unknown parameter 'memory_recU&bS:ääot' [ 115.192079][ T7960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.194450][ T7960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.203973][ T7960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.208394][ T7960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.210654][ T7960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.218906][ T7960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.267824][ T7960] hsr_slave_0: entered promiscuous mode [ 115.270184][ T7960] hsr_slave_1: entered promiscuous mode [ 115.272604][ T7960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.275111][ T7960] Cannot create hsr debugfs directory [ 115.478180][ T1199] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.599258][ T1199] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.650154][ T40] audit: type=1400 audit(1750925768.065:491): avc: denied { write } for pid=7991 comm="syz.5.505" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 115.736372][ T1199] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.859388][ T1199] bridge_slave_1: left allmulticast mode [ 115.861574][ T1199] bridge_slave_1: left promiscuous mode [ 115.864832][ T1199] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.869505][ T1199] bridge_slave_0: left allmulticast mode [ 115.871595][ T1199] bridge_slave_0: left promiscuous mode [ 115.873446][ T1199] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.033127][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.508'. [ 116.036958][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.508'. [ 116.103094][ T7994] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 116.200154][ T1199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.207882][ T1199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.213346][ T1199] bond0 (unregistering): Released all slaves [ 116.244417][ T7999] netlink: 16 bytes leftover after parsing attributes in process `syz.4.508'. [ 116.316825][ T8005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.509'. [ 116.362548][ T8007] netlink: 28 bytes leftover after parsing attributes in process `syz.5.510'. [ 116.628844][ T8017] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 116.640438][ T8021] overlay: Bad value for 'workdir' [ 116.711951][ T1199] hsr_slave_0: left promiscuous mode [ 116.720608][ T1199] hsr_slave_1: left promiscuous mode [ 116.725454][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.729236][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.761131][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.763513][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.807921][ T1199] veth1_macvtap: left promiscuous mode [ 116.809711][ T1199] veth0_macvtap: left promiscuous mode [ 116.812269][ T1199] veth1_vlan: left promiscuous mode [ 116.814703][ T1199] veth0_vlan: left promiscuous mode [ 116.861022][ T63] Bluetooth: hci3: command tx timeout [ 116.866466][ T8036] ======================================================= [ 116.866466][ T8036] WARNING: The mand mount option has been deprecated and [ 116.866466][ T8036] and is ignored by this kernel. Remove the mand [ 116.866466][ T8036] option from the mount to silence this warning. [ 116.866466][ T8036] ======================================================= [ 117.197889][ T8042] random: crng reseeded on system resumption [ 117.441469][ T5646] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 117.593822][ T1199] team0 (unregistering): Port device team_slave_1 removed [ 117.633816][ T5646] usb 10-1: unable to get BOS descriptor or descriptor too short [ 117.638137][ T5646] usb 10-1: no configurations [ 117.640279][ T5646] usb 10-1: can't read configurations, error -22 [ 117.688280][ T1199] team0 (unregistering): Port device team_slave_0 removed [ 118.342209][ T8054] netlink: 32 bytes leftover after parsing attributes in process `syz.5.523'. [ 118.433031][ T8042] Restarting kernel threads ... [ 118.436141][ T8042] Done restarting kernel threads. [ 118.436472][ T8060] netlink: 'syz.4.525': attribute type 1 has an invalid length. [ 118.437422][ T7960] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 118.441407][ T8060] netlink: 224 bytes leftover after parsing attributes in process `syz.4.525'. [ 118.450613][ T7960] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 118.466087][ T7960] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 118.508644][ T7960] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 118.612288][ T7960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.623309][ T7960] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.635747][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.638078][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.645323][ T7780] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.648508][ T7780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.727321][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 118.727337][ T40] audit: type=1400 audit(1750925771.145:493): avc: denied { connect } for pid=8064 comm="syz.4.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.897012][ T7960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.951502][ T63] Bluetooth: hci3: command tx timeout [ 118.955221][ T7960] veth0_vlan: entered promiscuous mode [ 118.965211][ T7960] veth1_vlan: entered promiscuous mode [ 118.999781][ T7960] veth0_macvtap: entered promiscuous mode [ 119.006473][ T7960] veth1_macvtap: entered promiscuous mode [ 119.024082][ T7960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.033564][ T7960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.041913][ T7960] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.045689][ T7960] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.049476][ T7960] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.053208][ T7960] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.175977][ T8094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.179772][ T8094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.381120][ T170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.384922][ T170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.410841][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.418041][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.930356][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.533'. [ 120.522464][ T40] audit: type=1400 audit(1750925772.945:494): avc: denied { shutdown } for pid=8125 comm="syz.4.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.537949][ T8086] syz.0.526 (8086) used greatest stack depth: 19048 bytes left [ 120.765506][ T8073] syz.0.526 (8073) used greatest stack depth: 18008 bytes left [ 120.794359][ T8129] netlink: 'syz.4.538': attribute type 39 has an invalid length. [ 120.970606][ T8137] binder: 8136:8137 ioctl c0306201 2000000003c0 returned -14 [ 121.033724][ T8143] netlink: 'syz.5.537': attribute type 1 has an invalid length. [ 121.036997][ T8143] netlink: 228 bytes leftover after parsing attributes in process `syz.5.537'. [ 121.044125][ T8143] netlink: 24 bytes leftover after parsing attributes in process `syz.5.537'. [ 121.055265][ T8142] netlink: 'syz.4.541': attribute type 2 has an invalid length. [ 121.196500][ T40] audit: type=1400 audit(1750925773.615:495): avc: denied { accept } for pid=8146 comm="syz.4.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.689791][ T1199] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.889245][ T40] audit: type=1400 audit(1750925775.305:496): avc: denied { connect } for pid=8163 comm="syz.5.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 122.894548][ T8166] netlink: 12 bytes leftover after parsing attributes in process `syz.5.550'. [ 122.899359][ T8166] netlink: 12 bytes leftover after parsing attributes in process `syz.5.550'. [ 122.975517][ T5945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 122.982483][ T5945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 122.991907][ T5945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 122.993957][ T1199] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.997062][ T5945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.003837][ T5945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.130586][ T1199] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.183839][ T1199] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.189545][ T8168] chnl_net:caif_netlink_parms(): no params data found [ 123.278321][ T8168] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.280705][ T8168] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.283627][ T8168] bridge_slave_0: entered allmulticast mode [ 123.286198][ T8168] bridge_slave_0: entered promiscuous mode [ 123.289279][ T8168] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.291678][ T8168] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.294314][ T8168] bridge_slave_1: entered allmulticast mode [ 123.296874][ T8168] bridge_slave_1: entered promiscuous mode [ 123.355883][ T8168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.373032][ T8168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.461898][ T8168] team0: Port device team_slave_0 added [ 123.468757][ T8168] team0: Port device team_slave_1 added [ 123.471621][ T1199] bridge_slave_1: left allmulticast mode [ 123.473860][ T1199] bridge_slave_1: left promiscuous mode [ 123.476105][ T1199] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.483916][ T1199] bridge_slave_0: left allmulticast mode [ 123.486210][ T1199] bridge_slave_0: left promiscuous mode [ 123.486414][ T1199] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.493145][ T8178] netlink: 248 bytes leftover after parsing attributes in process `syz.4.551'. [ 123.705439][ T40] audit: type=1400 audit(1750925776.125:497): avc: denied { bind } for pid=8181 comm="syz.0.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 123.806553][ T1199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.813103][ T1199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.817011][ T1199] bond0 (unregistering): Released all slaves [ 123.911394][ T8191] omfs: Invalid superblock (0) [ 123.926220][ T8168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.929108][ T8168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.943892][ T8168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.981378][ T8197] trusted_key: encrypted_key: keylen parameter is missing [ 123.992888][ T8168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.995774][ T8168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.008837][ T8168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.039618][ T8202] trusted_key: encrypted_key: master key parameter 'defau|t' is invalid [ 124.146378][ T8168] hsr_slave_0: entered promiscuous mode [ 124.146776][ T8207] netfs: Couldn't get user pages (rc=-14) [ 124.149684][ T8168] hsr_slave_1: entered promiscuous mode [ 124.154252][ T8168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.158070][ T8168] Cannot create hsr debugfs directory [ 124.236106][ T1199] hsr_slave_0: left promiscuous mode [ 124.239220][ T1199] hsr_slave_1: left promiscuous mode [ 124.246257][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.249642][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.253898][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.257440][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.290244][ T1199] veth1_macvtap: left promiscuous mode [ 124.293108][ T1199] veth0_macvtap: left promiscuous mode [ 124.295555][ T1199] veth1_vlan: left promiscuous mode [ 124.297941][ T1199] veth0_vlan: left promiscuous mode [ 124.374447][ T40] audit: type=1400 audit(1750925776.795:498): avc: denied { append } for pid=8213 comm="syz.4.562" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 125.012296][ T63] Bluetooth: hci3: command tx timeout [ 125.162423][ T1199] team0 (unregistering): Port device team_slave_1 removed [ 125.167099][ T8224] xt_l2tp: v2 doesn't support IP mode [ 125.248805][ T1199] team0 (unregistering): Port device team_slave_0 removed [ 125.851687][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.5.565'. [ 125.867348][ T8224] geneve2: entered allmulticast mode [ 126.060062][ T8228] kvm: MONITOR instruction emulated as NOP! [ 126.163179][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.570'. [ 126.419130][ T8265] netfs: Couldn't get user pages (rc=-14) [ 126.431295][ T8268] veth0_to_bond: entered allmulticast mode [ 126.467948][ T8168] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 126.480879][ T8168] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 126.488041][ T8168] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 126.496064][ T8168] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 126.525450][ T8279] tmpfs: Bad value for 'mpol' [ 126.555948][ T8168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.559733][ T8281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.583'. [ 126.566297][ T8168] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.574121][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.576690][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.585725][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.588410][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.630499][ T8283] bond0: (slave bond_slave_0): Releasing backup interface [ 126.641209][ T8283] bond0: (slave bond_slave_1): Releasing backup interface [ 126.660224][ T8283] team0: Port device team_slave_0 removed [ 126.675320][ T8283] team0: Port device team_slave_1 removed [ 126.677915][ T8283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.682299][ T8283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.687170][ T8283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.690302][ T8283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.720395][ T8283] team0: Port device wlan1 removed [ 126.756900][ T8284] team0: Mode changed to "loadbalance" [ 126.764573][ T8285] tipc: Started in network mode [ 126.766910][ T8285] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 126.771678][ T8285] tipc: Enabled bearer , priority 0 [ 126.784094][ T40] audit: type=1400 audit(1750925779.205:499): avc: denied { map } for pid=8282 comm="syz.0.584" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.793617][ T40] audit: type=1400 audit(1750925779.205:500): avc: denied { execute } for pid=8282 comm="syz.0.584" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.891342][ T8168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.903757][ T40] audit: type=1400 audit(1750925779.325:501): avc: denied { setopt } for pid=8294 comm="syz.0.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 126.933328][ T8168] veth0_vlan: entered promiscuous mode [ 126.942587][ T8168] veth1_vlan: entered promiscuous mode [ 126.972520][ T8168] veth0_macvtap: entered promiscuous mode [ 126.982381][ T8168] veth1_macvtap: entered promiscuous mode [ 126.998425][ T8168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.010797][ T8168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.012788][ T8299] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 127.016781][ T8299] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 127.020252][ T8168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.026590][ T8299] vhci_hcd vhci_hcd.0: Device attached [ 127.027115][ T8168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.030885][ T8300] vhci_hcd: cannot find a urb of seqnum 4294967226 max seqnum 0 [ 127.032751][ T8168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.039393][ T1145] vhci_hcd: stop threads [ 127.041036][ T1145] vhci_hcd: release socket [ 127.041718][ T8168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.045522][ T1145] vhci_hcd: disconnect device [ 127.091629][ T63] Bluetooth: hci3: command tx timeout [ 127.094206][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.097492][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.118022][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.120801][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.278392][ T40] audit: type=1400 audit(1750925779.695:502): avc: denied { write } for pid=8302 comm="syz.5.589" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 127.301084][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 127.452646][ T9] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 127.455122][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 127.458448][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 84, changing to 10 [ 127.462042][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 42708, setting to 1024 [ 127.465836][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.470331][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.473700][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.479029][ T9] usb 5-1: config 0 descriptor?? [ 127.482809][ T8299] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 127.762943][ T10] tipc: Node number set to 11578026 [ 127.776915][ T40] audit: type=1400 audit(1750925780.195:503): avc: denied { append } for pid=8305 comm="syz.5.591" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 127.794039][ T8311] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 127.798591][ T8311] overlayfs: overlapping lowerdir path [ 127.806207][ T8313] i2c i2c-1: Invalid block write size 34 [ 127.835886][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.594'. [ 127.852978][ T8317] xfrm1: left allmulticast mode [ 127.862425][ T40] audit: type=1400 audit(1750925780.285:504): avc: denied { bind } for pid=8321 comm="syz.4.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 127.892769][ T9] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 127.897206][ T9] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 127.920408][ T9] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 127.923408][ T8324] kvm: user requested TSC rate below hardware speed [ 127.927362][ T8324] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 128.136841][ T40] audit: type=1400 audit(1750925780.555:505): avc: denied { watch } for pid=8330 comm="syz.5.597" path="/69/file1" dev="autofs" ino=30731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 128.151847][ T8299] [U] ³•¯1WT`8ºÁÍÇÚH$Ô0©·ÑÃÝ9\ [ 128.154183][ T8299] [U] ;2}U‚˜GVÏÄ¥ËÚ#ÈO9ÏÔÕ¥>-ƒÊß´ÜS…Ý¢šÕP [ 128.160454][ T9] usb 5-1: USB disconnect, device number 16 [ 128.162925][ T8298] [U]  [ 128.245403][ T8333] netfs: Couldn't get user pages (rc=-14) [ 128.864074][ T1142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.128228][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 130.182762][ T8350] binder: 8349:8350 ioctl c0306201 2000000003c0 returned -14 [ 130.186704][ T40] audit: type=1400 audit(1750925782.605:506): avc: denied { call } for pid=8349 comm="syz.0.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 130.225395][ T40] audit: type=1400 audit(1750925782.645:507): avc: denied { create } for pid=8351 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 130.234110][ T40] audit: type=1400 audit(1750925782.655:508): avc: denied { ioctl } for pid=8351 comm="syz.4.606" path="socket:[30145]" dev="sockfs" ino=30145 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 130.244533][ T40] audit: type=1400 audit(1750925782.655:509): avc: denied { append } for pid=8351 comm="syz.4.606" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 130.254314][ T40] audit: type=1400 audit(1750925782.655:510): avc: denied { map } for pid=8351 comm="syz.4.606" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 130.264440][ T40] audit: type=1400 audit(1750925782.675:511): avc: denied { read } for pid=8354 comm="syz.0.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 130.284715][ T5945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 130.290823][ T5945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 130.295051][ T5945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 130.299130][ T5945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 130.306833][ T5945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 130.307190][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'. [ 130.405645][ T8364] netlink: 24 bytes leftover after parsing attributes in process `syz.4.610'. [ 130.432963][ T8366] loop6: detected capacity change from 0 to 524287999 [ 130.482754][ T40] audit: type=1400 audit(1750925782.905:512): avc: denied { ioctl } for pid=8365 comm="syz.0.611" path="socket:[30804]" dev="sockfs" ino=30804 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 130.513657][ T8356] chnl_net:caif_netlink_parms(): no params data found [ 130.536916][ T40] audit: type=1326 audit(1750925782.955:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8365 comm="syz.0.611" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdba018e929 code=0x0 [ 130.616721][ T1142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.861410][ T1142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.872879][ T8356] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.875152][ T8356] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.877568][ T8356] bridge_slave_0: entered allmulticast mode [ 130.880856][ T8356] bridge_slave_0: entered promiscuous mode [ 130.886096][ T8356] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.888508][ T8356] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.891921][ T8356] bridge_slave_1: entered allmulticast mode [ 130.894720][ T8356] bridge_slave_1: entered promiscuous mode [ 130.994950][ T8356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.013039][ T1142] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.024018][ T8356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.043513][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.614'. [ 131.068525][ T8356] team0: Port device team_slave_0 added [ 131.073592][ T8356] team0: Port device team_slave_1 added [ 131.074835][ T8383] 9pnet_virtio: no channels available for device syz [ 131.107734][ T8356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.110015][ T8356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.118520][ T8356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.128721][ T8356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.131660][ T8356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.140279][ T8356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.210779][ T8356] hsr_slave_0: entered promiscuous mode [ 131.222987][ T8356] hsr_slave_1: entered promiscuous mode [ 131.225247][ T8356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.228512][ T8356] Cannot create hsr debugfs directory [ 131.286324][ T40] audit: type=1400 audit(1750925783.705:514): avc: denied { accept } for pid=8399 comm="syz.0.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 131.335640][ T40] audit: type=1400 audit(1750925783.755:515): avc: denied { relabelfrom } for pid=8395 comm="syz.5.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 131.376111][ T1142] bridge_slave_1: left allmulticast mode [ 131.378415][ T1142] bridge_slave_1: left promiscuous mode [ 131.380838][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.387123][ T1142] bridge_slave_0: left allmulticast mode [ 131.389449][ T1142] bridge_slave_0: left promiscuous mode [ 131.392421][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.746322][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.752758][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.762886][ T1142] bond0 (unregistering): Released all slaves [ 132.122863][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.628'. [ 132.128281][ T8423] netlink: 24 bytes leftover after parsing attributes in process `syz.5.629'. [ 132.136426][ T8423] netlink: 24 bytes leftover after parsing attributes in process `syz.5.629'. [ 132.200273][ T1142] hsr_slave_0: left promiscuous mode [ 132.206365][ T1142] hsr_slave_1: left promiscuous mode [ 132.209218][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.213224][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.223741][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.227453][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.267323][ T1142] veth1_macvtap: left promiscuous mode [ 132.269735][ T1142] veth0_macvtap: left promiscuous mode [ 132.272642][ T1142] veth1_vlan: left promiscuous mode [ 132.275062][ T1142] veth0_vlan: left promiscuous mode [ 132.374817][ T63] Bluetooth: hci3: command tx timeout [ 132.539177][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.541588][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.152197][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 133.269780][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 134.232978][ T8356] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 134.240705][ T8356] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 134.247755][ T8356] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 134.270749][ T8356] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 134.396358][ T8356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.414629][ T8356] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.426448][ T1199] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.429577][ T1199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.448045][ T7780] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.451174][ T7780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.451745][ T5945] Bluetooth: hci3: command tx timeout [ 134.457665][ T5939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 134.467320][ T5939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 134.473857][ T5939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 134.477893][ T5939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 134.481833][ T5939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 134.713882][ T8444] chnl_net:caif_netlink_parms(): no params data found [ 134.745149][ T1142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.762366][ T8356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.829998][ T8356] veth0_vlan: entered promiscuous mode [ 134.870730][ T1142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.024748][ T8444] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.032668][ T8444] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.035719][ T8444] bridge_slave_0: entered allmulticast mode [ 135.039833][ T8444] bridge_slave_0: entered promiscuous mode [ 135.062757][ T1142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.082649][ T8356] veth1_vlan: entered promiscuous mode [ 135.086682][ T8444] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.089606][ T8444] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.093626][ T8444] bridge_slave_1: entered allmulticast mode [ 135.097466][ T8444] bridge_slave_1: entered promiscuous mode [ 135.184013][ T8444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.207959][ T1142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.231976][ T8444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.299305][ T8444] team0: Port device team_slave_0 added [ 135.316361][ T8486] 9pnet_virtio: no channels available for device syz [ 135.322949][ T8444] team0: Port device team_slave_1 added [ 135.366666][ T8356] veth0_macvtap: entered promiscuous mode [ 135.394072][ T8356] veth1_macvtap: entered promiscuous mode [ 135.399439][ T8444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.404465][ T8444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.416194][ T8444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.436084][ T8444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.438803][ T8444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.449336][ T8444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.462605][ T8356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.556522][ T8444] hsr_slave_0: entered promiscuous mode [ 135.559775][ T8444] hsr_slave_1: entered promiscuous mode [ 135.571859][ T8444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.574993][ T8444] Cannot create hsr debugfs directory [ 135.579343][ T8356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.637156][ T8496] netlink: 'syz.5.648': attribute type 1 has an invalid length. [ 136.041955][ T1142] bond0 (unregistering): Released all slaves [ 136.051625][ T1142] bond1 (unregistering): Released all slaves [ 136.108224][ T8496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.112630][ T8356] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.115634][ T8356] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.119353][ T8356] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.122642][ T8356] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.198411][ T1142] tipc: Disabling bearer [ 136.204761][ T1142] tipc: Left network mode [ 136.440172][ T7780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.456609][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 136.456624][ T40] audit: type=1400 audit(1750925788.875:520): avc: denied { setopt } for pid=8513 comm="syz.5.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 136.457078][ T7780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.531619][ T5939] Bluetooth: hci1: command tx timeout [ 136.532554][ T63] Bluetooth: hci3: command tx timeout [ 136.594097][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.596518][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.618522][ T1142] hsr_slave_0: left promiscuous mode [ 136.625175][ T1142] hsr_slave_1: left promiscuous mode [ 136.663979][ T1142] veth1_macvtap: left promiscuous mode [ 136.666484][ T1142] veth0_macvtap: left promiscuous mode [ 136.669621][ T1142] veth1_vlan: left promiscuous mode [ 136.670149][ T8520] random: crng reseeded on system resumption [ 136.671961][ T1142] veth0_vlan: left promiscuous mode [ 136.789931][ T1142] pim6reg (unregistering): left allmulticast mode [ 136.973306][ T6020] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 137.046913][ T40] audit: type=1400 audit(1750925789.465:521): avc: denied { map } for pid=8522 comm="syz.4.657" path="/dev/video4" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 137.134042][ T6020] usb 10-1: Using ep0 maxpacket: 16 [ 137.138273][ T6020] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.142414][ T6020] usb 10-1: config 0 has no interfaces? [ 137.146459][ T6020] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 137.150409][ T6020] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.153723][ T6020] usb 10-1: Product: syz [ 137.155433][ T6020] usb 10-1: Manufacturer: syz [ 137.157325][ T6020] usb 10-1: SerialNumber: syz [ 137.173123][ T6020] r8152-cfgselector 10-1: Unknown version 0x0000 [ 137.175637][ T6020] r8152-cfgselector 10-1: config 0 descriptor?? [ 138.448331][ T8444] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 138.456951][ T8444] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 138.475122][ T8444] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 138.482443][ T8444] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 138.561621][ T40] audit: type=1400 audit(1750925790.975:522): avc: denied { map } for pid=8537 comm="syz.4.659" path="socket:[31763]" dev="sockfs" ino=31763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.621102][ T63] Bluetooth: hci1: command tx timeout [ 138.657655][ T8444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.663974][ T40] audit: type=1400 audit(1750925791.085:523): avc: denied { execute } for pid=8541 comm="syz.4.661" path="/selinux/validatetrans" dev="selinuxfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 138.676633][ T40] audit: type=1400 audit(1750925791.085:524): avc: denied { validate_trans } for pid=8541 comm="syz.4.661" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 138.684353][ T8444] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.691829][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.694427][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.704904][ T1199] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.707919][ T1199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.897189][ T8444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.991376][ T1142] IPVS: stop unused estimator thread 0... [ 139.135447][ T8444] veth0_vlan: entered promiscuous mode [ 139.146996][ T8444] veth1_vlan: entered promiscuous mode [ 139.174111][ T8444] veth0_macvtap: entered promiscuous mode [ 139.180003][ T8444] veth1_macvtap: entered promiscuous mode [ 139.193744][ T8444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.203238][ T8444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.212023][ T8444] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.215797][ T8444] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.219539][ T8444] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.224183][ T8444] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.288029][ T170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.296899][ T170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.318608][ T170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.322902][ T170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.418600][ T8565] netlink: 24 bytes leftover after parsing attributes in process `syz.6.635'. [ 139.436808][ T1199] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.529091][ T1199] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.623030][ T6002] r8152-cfgselector 10-1: USB disconnect, device number 4 [ 139.704674][ T1199] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.857502][ T1199] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.007399][ T1199] bridge_slave_1: left allmulticast mode [ 140.009169][ T1199] bridge_slave_1: left promiscuous mode [ 140.011627][ T1199] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.017349][ T1199] bridge_slave_0: left allmulticast mode [ 140.020119][ T1199] bridge_slave_0: left promiscuous mode [ 140.022021][ T1199] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.125567][ T8571] binder: BINDER_SET_CONTEXT_MGR already set [ 140.127786][ T8571] binder: 8570:8571 ioctl 4018620d 200000000040 returned -16 [ 140.133193][ T8571] ipt_REJECT: TCP_RESET invalid for non-tcp [ 140.172126][ T5939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 140.177437][ T5939] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 140.183827][ T5939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 140.196421][ T5297] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 140.198476][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 140.205969][ T5297] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 140.208051][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 140.224863][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 140.229498][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 140.237173][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 140.240622][ T8577] netlink: 'syz.6.667': attribute type 4 has an invalid length. [ 140.389235][ T1199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.394559][ T1199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.398843][ T1199] bond0 (unregistering): Released all slaves [ 140.691224][ T63] Bluetooth: hci1: command tx timeout [ 140.716265][ T8575] chnl_net:caif_netlink_parms(): no params data found [ 140.778839][ T8572] chnl_net:caif_netlink_parms(): no params data found [ 140.793977][ T1199] hsr_slave_0: left promiscuous mode [ 140.795896][ T1199] hsr_slave_1: left promiscuous mode [ 140.797710][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.799780][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.805001][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.807191][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.825691][ T1199] veth1_macvtap: left promiscuous mode [ 140.827822][ T1199] veth0_macvtap: left promiscuous mode [ 140.830024][ T1199] veth1_vlan: left promiscuous mode [ 140.832338][ T1199] veth0_vlan: left promiscuous mode [ 141.357056][ T8599] netlink: 20 bytes leftover after parsing attributes in process `syz.6.671'. [ 141.517782][ T1199] team0 (unregistering): Port device team_slave_1 removed [ 141.609715][ T1199] team0 (unregistering): Port device team_slave_0 removed [ 142.277389][ T8575] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.280359][ T8575] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.283905][ T8575] bridge_slave_0: entered allmulticast mode [ 142.288711][ T8575] bridge_slave_0: entered promiscuous mode [ 142.291314][ T63] Bluetooth: hci2: command tx timeout [ 142.295843][ T8575] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.298064][ T8575] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.300560][ T8575] bridge_slave_1: entered allmulticast mode [ 142.301378][ T63] Bluetooth: hci3: command tx timeout [ 142.305782][ T8575] bridge_slave_1: entered promiscuous mode [ 142.362799][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.6.672'. [ 142.433406][ T8575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.443518][ T8572] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.446610][ T8572] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.449889][ T8572] bridge_slave_0: entered allmulticast mode [ 142.455400][ T8572] bridge_slave_0: entered promiscuous mode [ 142.459731][ T8572] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.462080][ T8572] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.464371][ T8572] bridge_slave_1: entered allmulticast mode [ 142.466995][ T8572] bridge_slave_1: entered promiscuous mode [ 142.474158][ T8575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.554497][ T8575] team0: Port device team_slave_0 added [ 142.563623][ T8572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.569850][ T8575] team0: Port device team_slave_1 added [ 142.573131][ T8572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.661389][ T8575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.664082][ T8575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.673470][ T8575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.680269][ T8572] team0: Port device team_slave_0 added [ 142.687237][ T8572] team0: Port device team_slave_1 added [ 142.707228][ T8575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.709713][ T8575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.719433][ T8575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.747585][ T8572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.749757][ T8572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.759730][ T8572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.764733][ T8572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.766919][ T8572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.775516][ T63] Bluetooth: hci1: command tx timeout [ 142.779019][ T8572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.869755][ T8575] hsr_slave_0: entered promiscuous mode [ 142.872118][ T8575] hsr_slave_1: entered promiscuous mode [ 142.922583][ T8572] hsr_slave_0: entered promiscuous mode [ 142.925982][ T8572] hsr_slave_1: entered promiscuous mode [ 142.928918][ T8572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.932006][ T8572] Cannot create hsr debugfs directory [ 142.953748][ T8636] Bluetooth: MGMT ver 1.23 [ 143.100052][ T1199] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.130493][ T8639] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.252382][ T1199] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.346862][ T1199] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.424631][ T1199] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.632103][ T1199] bridge_slave_1: left allmulticast mode [ 143.634639][ T1199] bridge_slave_1: left promiscuous mode [ 143.636847][ T1199] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.642501][ T1199] bridge_slave_0: left allmulticast mode [ 143.644615][ T1199] bridge_slave_0: left promiscuous mode [ 143.646542][ T1199] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.086182][ T1199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.090286][ T1199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.094173][ T1199] bond0 (unregistering): Released all slaves [ 144.193660][ T1199] bond1 (unregistering): Released all slaves [ 144.223777][ T8651] netlink: 14212 bytes leftover after parsing attributes in process `syz.6.685'. [ 144.347852][ T8658] netlink: 448 bytes leftover after parsing attributes in process `syz.6.687'. [ 144.353020][ T8658] unsupported nla_type 14345 [ 144.371906][ T63] Bluetooth: hci3: command tx timeout [ 144.381210][ T63] Bluetooth: hci2: command tx timeout [ 144.494442][ T8664] JFS: discard option not supported on device [ 144.503355][ T8664] syz.6.688: attempt to access beyond end of device [ 144.503355][ T8664] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 144.509270][ T8664] syz.6.688: attempt to access beyond end of device [ 144.509270][ T8664] nbd6: rw=0, sector=120, nr_sectors = 8 limit=0 [ 144.514867][ T8664] Mount JFS Failure: -5 [ 144.517553][ T1199] hsr_slave_0: left promiscuous mode [ 144.519822][ T1199] hsr_slave_1: left promiscuous mode [ 144.522185][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.524954][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.527719][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.529940][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.555838][ T1199] veth1_macvtap: left promiscuous mode [ 144.557681][ T1199] veth0_macvtap: left promiscuous mode [ 144.559501][ T1199] veth1_vlan: left promiscuous mode [ 144.561979][ T1199] veth0_vlan: left promiscuous mode [ 145.378818][ T1199] team0 (unregistering): Port device team_slave_1 removed [ 145.475506][ T1199] team0 (unregistering): Port device team_slave_0 removed [ 146.160149][ T8664] bridge0: port 3(syz_tun) entered blocking state [ 146.163070][ T8664] bridge0: port 3(syz_tun) entered disabled state [ 146.165641][ T8664] syz_tun: entered allmulticast mode [ 146.168457][ T8664] syz_tun: entered promiscuous mode [ 146.170528][ T8664] bridge0: port 3(syz_tun) entered blocking state [ 146.172925][ T8664] bridge0: port 3(syz_tun) entered forwarding state [ 146.209463][ T40] audit: type=1400 audit(1750925798.625:525): avc: denied { getopt } for pid=8666 comm="syz.6.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 146.217386][ T40] audit: type=1400 audit(1750925798.635:526): avc: denied { write } for pid=8666 comm="syz.6.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 146.225271][ T40] audit: type=1400 audit(1750925798.635:527): avc: denied { ioctl } for pid=8666 comm="syz.6.689" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 146.312784][ T8671] ptrace attach of "/syz-executor exec"[8444] was attempted by ""[8671] [ 146.354435][ T8575] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 146.365806][ T8575] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 146.394985][ T8575] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 146.401792][ T8673] netlink: 12 bytes leftover after parsing attributes in process `syz.6.692'. [ 146.403151][ T8575] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 146.405283][ T8674] netlink: 12 bytes leftover after parsing attributes in process `syz.6.692'. [ 146.451452][ T63] Bluetooth: hci2: command tx timeout [ 146.453748][ T63] Bluetooth: hci3: command tx timeout [ 146.498554][ T8575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.512090][ T8575] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.518229][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.520518][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.533813][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.536904][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.649020][ T8689] syz.6.694: attempt to access beyond end of device [ 146.649020][ T8689] nbd6: rw=0, sector=64, nr_sectors = 1 limit=0 [ 146.654380][ T8689] syz.6.694: attempt to access beyond end of device [ 146.654380][ T8689] nbd6: rw=0, sector=256, nr_sectors = 1 limit=0 [ 146.660593][ T8689] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 146.665138][ T8689] syz.6.694: attempt to access beyond end of device [ 146.665138][ T8689] nbd6: rw=0, sector=512, nr_sectors = 1 limit=0 [ 146.669738][ T8689] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 146.673314][ T8689] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 146.676131][ T8689] UDF-fs: Scanning with blocksize 512 failed [ 146.679566][ T8689] syz.6.694: attempt to access beyond end of device [ 146.679566][ T8689] nbd6: rw=0, sector=64, nr_sectors = 2 limit=0 [ 146.684294][ T8689] syz.6.694: attempt to access beyond end of device [ 146.684294][ T8689] nbd6: rw=0, sector=512, nr_sectors = 2 limit=0 [ 146.689614][ T8689] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 146.700109][ T8689] syz.6.694: attempt to access beyond end of device [ 146.700109][ T8689] nbd6: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 146.708061][ T8575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.710613][ T8689] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 146.713581][ T8689] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 146.715837][ T8689] UDF-fs: Scanning with blocksize 1024 failed [ 146.718060][ T8689] syz.6.694: attempt to access beyond end of device [ 146.718060][ T8689] nbd6: rw=0, sector=64, nr_sectors = 4 limit=0 [ 146.722416][ T8689] syz.6.694: attempt to access beyond end of device [ 146.722416][ T8689] nbd6: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 146.727394][ T8689] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 146.730557][ T8689] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 146.733462][ T8689] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 146.735719][ T8689] UDF-fs: Scanning with blocksize 2048 failed [ 146.737914][ T8689] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 146.741047][ T8689] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 146.744131][ T8689] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 146.746333][ T8689] UDF-fs: Scanning with blocksize 4096 failed [ 146.748233][ T8689] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 146.900247][ T8572] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 146.909141][ T8572] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 146.914214][ T8572] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 146.920840][ T8572] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 146.925848][ T8701] syz.6.695: vmalloc error: size 3335753728, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 146.935400][ T8701] CPU: 2 UID: 0 PID: 8701 Comm: syz.6.695 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 146.935426][ T8701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.935435][ T8701] Call Trace: [ 146.935441][ T8701] [ 146.935447][ T8701] dump_stack_lvl+0x16c/0x1f0 [ 146.935475][ T8701] warn_alloc+0x248/0x3a0 [ 146.935498][ T8701] ? __pfx_warn_alloc+0x10/0x10 [ 146.935516][ T8701] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 146.935566][ T8701] ? stack_depot_save_flags+0x3e0/0xa40 [ 146.935595][ T8701] ? kasan_save_stack+0x42/0x60 [ 146.935614][ T8701] ? kasan_save_stack+0x33/0x60 [ 146.935631][ T8701] ? kasan_save_track+0x14/0x30 [ 146.935649][ T8701] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 146.935661][ T8701] ? __vb2_queue_alloc+0x8c9/0x1280 [ 146.935680][ T8701] ? vb2_core_create_bufs+0x559/0xab0 [ 146.935705][ T8701] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 146.935720][ T8701] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 146.935746][ T8701] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 146.935766][ T8701] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 146.935794][ T8701] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 146.935809][ T8701] vmalloc_user_noprof+0x9e/0xe0 [ 146.935824][ T8701] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 146.935839][ T8701] vb2_vmalloc_alloc+0x135/0x3f0 [ 146.935853][ T8701] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 146.935870][ T8701] __vb2_queue_alloc+0x8c9/0x1280 [ 146.935908][ T8701] vb2_core_create_bufs+0x559/0xab0 [ 146.935936][ T8701] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 146.935961][ T8701] ? __pfx___mutex_trylock_common+0x10/0x10 [ 146.935987][ T8701] ? __pfx___might_resched+0x10/0x10 [ 146.936005][ T8701] ? rcu_is_watching+0x12/0xc0 [ 146.936026][ T8701] vb2_create_bufs+0x5e8/0x840 [ 146.936052][ T8701] ? __pfx_vb2_create_bufs+0x10/0x10 [ 146.936075][ T8701] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 146.936093][ T8701] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 146.936114][ T8701] v4l_create_bufs+0x159/0x270 [ 146.936135][ T8701] __video_do_ioctl+0xb3d/0xfc0 [ 146.936159][ T8701] ? __might_fault+0xe3/0x190 [ 146.936180][ T8701] ? __pfx___video_do_ioctl+0x10/0x10 [ 146.936209][ T8701] video_usercopy+0x4cd/0x1720 [ 146.936232][ T8701] ? __pfx___video_do_ioctl+0x10/0x10 [ 146.936250][ T8701] ? selinux_kernel_read_file+0x60/0x130 [ 146.936273][ T8701] ? __pfx_video_usercopy+0x10/0x10 [ 146.936310][ T8701] v4l2_ioctl+0x1ba/0x250 [ 146.936349][ T8701] ? __pfx_v4l2_ioctl+0x10/0x10 [ 146.936371][ T8701] __x64_sys_ioctl+0x18e/0x210 [ 146.936392][ T8701] do_syscall_64+0xcd/0x4c0 [ 146.936419][ T8701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.936437][ T8701] RIP: 0033:0x7f13ff78e929 [ 146.936451][ T8701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.936466][ T8701] RSP: 002b:00007f1400648038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.936483][ T8701] RAX: ffffffffffffffda RBX: 00007f13ff9b6160 RCX: 00007f13ff78e929 [ 146.936494][ T8701] RDX: 0000200000000040 RSI: 00000000c100565c RDI: 0000000000000007 [ 146.936504][ T8701] RBP: 00007f13ff810b39 R08: 0000000000000000 R09: 0000000000000000 [ 146.936514][ T8701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.936533][ T8701] R13: 0000000000000000 R14: 00007f13ff9b6160 R15: 00007ffde142f398 [ 146.936557][ T8701] [ 146.936654][ T8701] Mem-Info: [ 146.984253][ T8575] veth0_vlan: entered promiscuous mode [ 146.986848][ T8701] active_anon:9379 inactive_anon:9 isolated_anon:0 [ 146.986848][ T8701] active_file:3344 inactive_file:38850 isolated_file:0 [ 146.986848][ T8701] unevictable:1768 dirty:80 writeback:0 [ 146.986848][ T8701] slab_reclaimable:7205 slab_unreclaimable:77135 [ 146.986848][ T8701] mapped:29653 shmem:2422 pagetables:1119 [ 146.986848][ T8701] sec_pagetables:324 bounce:0 [ 146.986848][ T8701] kernel_misc_reclaimable:0 [ 146.986848][ T8701] free:457871 free_pcp:15315 free_cma:0 [ 146.996398][ T8575] veth1_vlan: entered promiscuous mode [ 147.037479][ T8575] veth0_macvtap: entered promiscuous mode [ 147.041632][ T8701] Node 0 active_anon:37516kB inactive_anon:36kB active_file:13360kB inactive_file:155188kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:118612kB dirty:312kB writeback:0kB shmem:6152kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13872kB pagetables:4288kB sec_pagetables:1296kB all_unreclaimable? yes Balloon:0kB [ 147.054204][ T8575] veth1_macvtap: entered promiscuous mode [ 147.059518][ T8701] Node 1 active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:212kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:144kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 147.070516][ T8575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.074272][ T8701] Node 0 [ 147.084429][ T8575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.098621][ T8701] DMA free:15152kB boost:2048kB min:2388kB low:2472kB high:2556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:140kB local_pcp:104kB free_cma:0kB [ 147.106183][ T8572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.116416][ T8701] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 147.129744][ T8572] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.132317][ T8701] [ 147.161697][ T8701] Node 0 DMA32 free:207240kB boost:47104kB min:74620kB low:81496kB high:88372kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37516kB inactive_anon:36kB active_file:13360kB inactive_file:155188kB unevictable:3536kB writepending:248kB present:2080628kB managed:1264708kB mlocked:0kB bounce:0kB free_pcp:51052kB local_pcp:12360kB free_cma:0kB [ 147.163334][ T8575] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.175083][ T8701] lowmem_reserve[]: 0 0 0 0 0 [ 147.177594][ T8575] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.179413][ T8701] Node 1 Normal free:1609476kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:212kB unevictable:3536kB writepending:8kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:10916kB local_pcp:0kB free_cma:0kB [ 147.182602][ T8575] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.195591][ T8701] lowmem_reserve[]: 0 0 0 0 0 [ 147.200497][ T8575] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.201934][ T8701] Node 0 DMA: 4*4kB (UM) 6*8kB (UM) 7*16kB (UM) 10*32kB (UM) 9*64kB (UM) 6*128kB (UM) 6*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 3*2048kB (U) 0*4096kB = 15152kB [ 147.213863][ T8701] Node 0 DMA32: 229*4kB (UME) 263*8kB (UME) 125*16kB (UME) 68*32kB (UME) 16*64kB (UME) 15*128kB (UME) 42*256kB (UME) 60*512kB (UM) 56*1024kB (UM) 26*2048kB (UM) 11*4096kB (UM) = 207260kB [ 147.221731][ T8701] Node 1 Normal: 11*4kB (UME) 37*8kB (UME) 25*16kB (UME) 208*32kB (UME) 101*64kB (UME) 40*128kB (UME) 23*256kB (UM) 15*512kB (UM) 14*1024kB (UME) 17*2048kB (UM) 373*4096kB (UM) = 1609508kB [ 147.224808][ T1199] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.229667][ T8701] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 147.229689][ T8701] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 147.229703][ T8701] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 147.229717][ T8701] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 147.229732][ T8701] 44978 total pagecache pages [ 147.229741][ T8701] 365 pages in swap cache [ 147.229747][ T8701] Free swap = 123396kB [ 147.229755][ T8701] Total swap = 124996kB [ 147.229764][ T8701] 1048443 pages RAM [ 147.229771][ T8701] 0 pages HighMem/MovableOnly [ 147.229777][ T8701] 282937 pages reserved [ 147.229784][ T8701] 0 pages cma reserved [ 147.264470][ T1199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.297440][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.300472][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.327462][ T8709] netlink: 24 bytes leftover after parsing attributes in process `syz.6.696'. [ 147.350266][ T8572] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 147.355077][ T8572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.415257][ T1199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.418422][ T1199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.439375][ T170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.443096][ T170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.497828][ T8710] ------------[ cut here ]------------ [ 147.499906][ T8710] refcount_t: underflow; use-after-free. [ 147.502284][ T8710] WARNING: CPU: 0 PID: 8710 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 147.505571][ T8710] Modules linked in: [ 147.507650][ T8710] CPU: 0 UID: 0 PID: 8710 Comm: kbnepd øä Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 147.512887][ T40] audit: type=1400 audit(1750925799.915:528): avc: denied { write } for pid=8714 comm="syz.6.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 147.513297][ T8710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 147.525954][ T8710] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 147.525979][ T8710] Code: ff 89 de e8 a8 d7 df fc 84 db 0f 85 66 ff ff ff e8 bb dc df fc c6 05 a0 37 b4 0b 01 90 48 c7 c7 60 27 15 8c e8 b7 9f 9e fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 98 dc df fc 0f b6 1d 7b 37 b4 0b 31 [ 147.525991][ T8710] RSP: 0018:ffffc900041ef938 EFLAGS: 00010286 [ 147.526001][ T8710] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae248 [ 147.526008][ T8710] RDX: ffff8880261f4880 RSI: ffffffff817ae255 RDI: 0000000000000001 [ 147.526015][ T8710] RBP: ffff88803cf9d478 R08: 0000000000000001 R09: 0000000000000000 [ 147.526022][ T8710] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888026496800 [ 147.526029][ T8710] R13: ffff88803cf9d478 R14: ffffffff860b1bf0 R15: 0000000000000000 [ 147.526036][ T8710] FS: 0000000000000000(0000) GS:ffff8880d6752000(0000) knlGS:0000000000000000 [ 147.526106][ T8710] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.526116][ T8710] CR2: 00007f26b7e42e9c CR3: 000000004b680000 CR4: 0000000000352ef0 [ 147.526123][ T8710] DR0: 0000000000008003 DR1: 0000000000000004 DR2: 0000000000000009 [ 147.526129][ T8710] DR3: 00000000000010e3 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 147.526136][ T8710] Call Trace: [ 147.526140][ T8710] [ 147.526146][ T8710] klist_put+0x11b/0x1b0 [ 147.526165][ T8710] device_del+0x1d8/0x9f0 [ 147.526181][ T8710] ? __pfx_device_del+0x10/0x10 [ 147.526197][ T8710] ? netdev_unregister_kobject+0x2da/0x540 [ 147.526217][ T8710] unregister_netdevice_many_notify+0x1903/0x2700 [ 147.526238][ T8710] ? rcu_is_watching+0x12/0xc0 [ 147.526252][ T8710] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 147.526272][ T8710] ? rtnl_net_dev_lock+0x146/0x360 [ 147.526291][ T8710] ? __pfx___mutex_lock+0x10/0x10 [ 147.526313][ T8710] unregister_netdevice_queue+0x305/0x3f0 [ 147.526330][ T8710] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 147.526347][ T8710] ? rtnl_net_dev_lock+0x28/0x360 [ 147.526360][ T8710] ? rtnl_net_dev_lock+0x146/0x360 [ 147.526373][ T8710] ? rtnl_lock+0x9/0x20 [ 147.526383][ T8710] ? rtnl_net_dev_lock+0x146/0x360 [ 147.526398][ T8710] unregister_netdev+0x1f/0x60 [ 147.526414][ T8710] bnep_session+0x224e/0x2d80 [ 147.526433][ T8710] ? __pfx_bnep_session+0x10/0x10 [ 147.526445][ T8710] ? do_raw_spin_lock+0x12c/0x2b0 [ 147.526457][ T8710] ? __pfx_woken_wake_function+0x10/0x10 [ 147.526472][ T8710] ? rcu_is_watching+0x12/0xc0 [ 147.526485][ T8710] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 147.526499][ T8710] ? lockdep_hardirqs_on+0x7c/0x110 [ 147.526515][ T8710] ? __kthread_parkme+0x19e/0x250 [ 147.526532][ T8710] ? __pfx_bnep_session+0x10/0x10 [ 147.526544][ T8710] kthread+0x3c2/0x780 [ 147.526554][ T8710] ? __pfx_kthread+0x10/0x10 [ 147.526565][ T8710] ? rcu_is_watching+0x12/0xc0 [ 147.526578][ T8710] ? __pfx_kthread+0x10/0x10 [ 147.526588][ T8710] ret_from_fork+0x5d4/0x6f0 [ 147.526603][ T8710] ? __pfx_kthread+0x10/0x10 [ 147.526613][ T8710] ret_from_fork_asm+0x1a/0x30 [ 147.526631][ T8710] [ 147.526637][ T8710] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 147.526645][ T8710] CPU: 0 UID: 0 PID: 8710 Comm: kbnepd øä Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 147.526659][ T8710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 147.526665][ T8710] Call Trace: [ 147.526669][ T8710] [ 147.526673][ T8710] dump_stack_lvl+0x3d/0x1f0 [ 147.526688][ T8710] panic+0x71c/0x800 [ 147.526703][ T8710] ? __pfx_panic+0x10/0x10 [ 147.526719][ T8710] ? show_trace_log_lvl+0x29b/0x3e0 [ 147.526737][ T8710] ? check_panic_on_warn+0x1f/0xb0 [ 147.526754][ T8710] ? refcount_warn_saturate+0x14a/0x210 [ 147.526768][ T8710] check_panic_on_warn+0xab/0xb0 [ 147.526784][ T8710] __warn+0xf6/0x3c0 [ 147.526800][ T8710] ? refcount_warn_saturate+0x14a/0x210 [ 147.526815][ T8710] report_bug+0x3c3/0x580 [ 147.526828][ T8710] ? refcount_warn_saturate+0x14a/0x210 [ 147.526843][ T8710] handle_bug+0x184/0x210 [ 147.526859][ T8710] exc_invalid_op+0x17/0x50 [ 147.526869][ T8710] asm_exc_invalid_op+0x1a/0x20 [ 147.526879][ T8710] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 147.526894][ T8710] Code: ff 89 de e8 a8 d7 df fc 84 db 0f 85 66 ff ff ff e8 bb dc df fc c6 05 a0 37 b4 0b 01 90 48 c7 c7 60 27 15 8c e8 b7 9f 9e fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 98 dc df fc 0f b6 1d 7b 37 b4 0b 31 [ 147.526906][ T8710] RSP: 0018:ffffc900041ef938 EFLAGS: 00010286 [ 147.526919][ T8710] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae248 [ 147.526929][ T8710] RDX: ffff8880261f4880 RSI: ffffffff817ae255 RDI: 0000000000000001 [ 147.526938][ T8710] RBP: ffff88803cf9d478 R08: 0000000000000001 R09: 0000000000000000 [ 147.526944][ T8710] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888026496800 [ 147.526950][ T8710] R13: ffff88803cf9d478 R14: ffffffff860b1bf0 R15: 0000000000000000 [ 147.526957][ T8710] ? __pfx_klist_children_put+0x10/0x10 [ 147.526971][ T8710] ? __warn_printk+0x198/0x350 [ 147.526985][ T8710] ? __warn_printk+0x1a5/0x350 [ 147.527001][ T8710] ? refcount_warn_saturate+0x149/0x210 [ 147.527016][ T8710] klist_put+0x11b/0x1b0 [ 147.527035][ T8710] device_del+0x1d8/0x9f0 [ 147.527057][ T8710] ? __pfx_device_del+0x10/0x10 [ 147.527072][ T8710] ? netdev_unregister_kobject+0x2da/0x540 [ 147.527090][ T8710] unregister_netdevice_many_notify+0x1903/0x2700 [ 147.527110][ T8710] ? rcu_is_watching+0x12/0xc0 [ 147.527123][ T8710] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 147.527142][ T8710] ? rtnl_net_dev_lock+0x146/0x360 [ 147.527156][ T8710] ? __pfx___mutex_lock+0x10/0x10 [ 147.527176][ T8710] unregister_netdevice_queue+0x305/0x3f0 [ 147.527192][ T8710] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 147.527209][ T8710] ? rtnl_net_dev_lock+0x28/0x360 [ 147.527225][ T8710] ? rtnl_net_dev_lock+0x146/0x360 [ 147.527244][ T8710] ? rtnl_lock+0x9/0x20 [ 147.527257][ T8710] ? rtnl_net_dev_lock+0x146/0x360 [ 147.527284][ T8710] unregister_netdev+0x1f/0x60 [ 147.527302][ T8710] bnep_session+0x224e/0x2d80 [ 147.527329][ T8710] ? __pfx_bnep_session+0x10/0x10 [ 147.527348][ T8710] ? do_raw_spin_lock+0x12c/0x2b0 [ 147.527364][ T8710] ? __pfx_woken_wake_function+0x10/0x10 [ 147.527386][ T8710] ? rcu_is_watching+0x12/0xc0 [ 147.527405][ T8710] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 147.527424][ T8710] ? lockdep_hardirqs_on+0x7c/0x110 [ 147.527447][ T8710] ? __kthread_parkme+0x19e/0x250 [ 147.527468][ T8710] ? __pfx_bnep_session+0x10/0x10 [ 147.527485][ T8710] kthread+0x3c2/0x780 [ 147.527499][ T8710] ? __pfx_kthread+0x10/0x10 [ 147.527516][ T8710] ? rcu_is_watching+0x12/0xc0 [ 147.527535][ T8710] ? __pfx_kthread+0x10/0x10 [ 147.527550][ T8710] ret_from_fork+0x5d4/0x6f0 [ 147.527570][ T8710] ? __pfx_kthread+0x10/0x10 [ 147.527585][ T8710] ret_from_fork_asm+0x1a/0x30 [ 147.527613][ T8710] [ 148.610205][ T8710] Shutting down cpus with NMI [ 148.610893][ T8710] Kernel Offset: disabled VM DIAGNOSIS: 08:12:24 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855ba755 RDI=ffffffff9b088320 RBP=ffffffff9b0882e0 RSP=ffffc900041ef2a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b0882e0 R15=ffffffff855ba6f0 RIP=ffffffff855ba77f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6752000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f26b7e42e9c CR3=000000004b680000 CR4=00352ef0 DR0=0000000000008003 DR1=0000000000000004 DR2=0000000000000009 DR3=00000000000010e3 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000004091008 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7b4d0ad13d73d576 e241482fe86261b5 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 077071c43068de7e 282f2faaee16db0f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 226b71121a6b8ecf 68e69cfac67f2f7e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c2f30b2548be67b cc09a096caa757ce ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000060 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000020 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cd3985437e2cc1fb 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 df57459800000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d86ebdce6ff3db4 b1037212dff3e397 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000059e88969 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d0e1e0856987bc6b 41ffa0ee30441ae2 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 858bc3630f868d18 59ff5727f73aeeb9 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302d78742f736575 6575712fe4f82f74 656e2f3030323a33 6963682f33696368 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 540018534b4e494c 56454400184d4554 5359534255530018 4854415056454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 00303d444955555f 48544e5953006b63 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 011109101f031c07 4973010b02150510 44304e6173267074 483d6b3753754e59 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f7d5f787f3b3f7f 7f7b6f7f7e7f5f3d 7f7e7f7d7f7f7f7f 797f7f77737d4e7b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 494d00373d454f4a 414d003038003639 3033333d44004e51 455300363d524f4e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444500373d41454a 4100003038003639 0030333d44003634 393100353600313d ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000001043d5 RBX=0000000000000001 RCX=ffffffff8b808c59 RDX=0000000000000000 RSI=ffffffff8de19f59 RDI=ffffffff8c157ba0 RBP=ffffed1003bd8488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6645 R10=ffff88806a53322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801dec2440 R14=ffffffff90a81250 R15=0000000000000000 RIP=ffffffff8b8077bf RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6852000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1400647f98 CR3=000000002897e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000002c2 0000001400000000 0000000000000000 0000000000000014 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f7665642f01ffff ffffffffffffe708 02800336000009b8 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69622f7366726564 6e69622f2e01ffff ffffffffffffd908 0480030000000408 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0620100004014ede 000200070fffffff ffffff040fffffff ffffff040fffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff040010000f ffffffffffff0400 10000c0471da1808 0006100020100006 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0270a00002000704 1000048a10000280 04060074dc000200 0700236f65646976 ZMM24=7cca8c2c7cca8c2c 7cca8c2c7cca8c2c 7cca8c2c7cca8c2c 7cca8c2c7cca8c2c 7cca8c2c7cca8c2c 7cca8c2c7cca8c2c 7cca8c2c7cca8c2c 7cca8c2c7cca8c2c ZMM25=43f56e7f43f56e7f 43f56e7f43f56e7f 43f56e7f43f56e7f 43f56e7f43f56e7f 43f56e7f43f56e7f 43f56e7f43f56e7f 43f56e7f43f56e7f 43f56e7f43f56e7f ZMM26=b2aed1f4b2aed1f4 b2aed1f4b2aed1f4 b2aed1f4b2aed1f4 b2aed1f4b2aed1f4 b2aed1f4b2aed1f4 b2aed1f4b2aed1f4 b2aed1f4b2aed1f4 b2aed1f4b2aed1f4 ZMM27=de8eea4cde8eea4c de8eea4cde8eea4c de8eea4cde8eea4c de8eea4cde8eea4c de8eea4cde8eea4c de8eea4cde8eea4c de8eea4cde8eea4c de8eea4cde8eea4c ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=ff030000ff030000 ff030000ff030000 ff030000ff030000 ff030000ff030000 ff030000ff030000 ff030000ff030000 ff030000ff030000 ff030000ff030000 info registers vcpu 2 CPU#2 RAX=000000000011831f RBX=0000000000000002 RCX=ffffffff8b808c59 RDX=0000000000000000 RSI=ffffffff8de19f59 RDI=ffffffff8c157ba0 RBP=ffffed1003bd8910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000001 R12=0000000000000002 R13=ffff88801dec4880 R14=ffffffff90a81250 R15=0000000000000000 RIP=ffffffff8b8077bf RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6952000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f634df08e9c CR3=0000000052e14000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000eeecf900 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13ff811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13ff811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13ff811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13ff811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13ff811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13ff811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13ff984488 00007f13ff984480 00007f13ff984478 00007f13ff984450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14004ed100 00007f13ff984440 00007f13ff984458 00007f13ff9844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13ff984498 00007f13ff984490 00007f13ff984488 00007f13ff984480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff816a2256 RDX=ffff88804bfc4880 RSI=ffffffff816a52ac RDI=0000000000000000 RBP=ffff888026496800 RSP=ffffc90003877818 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000001 R12=0000000000000003 R13=0000000000000003 R14=ffff88806a73b240 R15=ffffed1004c92d00 RIP=ffffffff816a52ad RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1400648d58 CR3=0000000052e14000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13ff811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13ff811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13ff811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13ff811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13ff811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13ff811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13ff984488 00007f13ff984480 00007f13ff984478 00007f13ff984450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f14004ed100 00007f13ff984440 00007f13ff984458 00007f13ff9844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13ff984498 00007f13ff984490 00007f13ff984488 00007f13ff984480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000